Security Enhanced Linux (SELINUX)
[Prev Page][Next Page]
- Re: [PATCH] github: bump Python and Ruby versions, (continued)
- [RFC PATCH 1/3] newrole: constant time password comparison,
Christian Göttsche
- [PATCH 1/4] libsepol: improve policy lookup failure message,
Christian Göttsche
- [PATCH] libsepol: validate class permissions,
Christian Göttsche
- [PATCH 2/2] selinux: add support for xperms in conditional policies,
Christian Göttsche
- [PATCH v2] selinux: pre-allocate the status page,
Christian Göttsche
- [PATCH] selinux: avoid printk_ratelimit(),
Christian Göttsche
- [PATCH] netlink: Remove the include of files doesn't exist,
I Hsin Cheng
- [PATCH] selinux: clarify return code in filename_trans_read_helper_compat(),
Ondrej Mosnacek
- [bug report] selinux: optimize storage of filename transitions,
Dan Carpenter
- [GIT PULL] selinux/selinux-pr-20240402,
Paul Moore
- [PATCH] libsepol: constify function pointer arrays,
Christian Göttsche
- [PATCH 1/6] checkpolicy: include <ctype.h> for isprint(3),
Christian Göttsche
- [PATCH] libsepol/cil: Check common perms when verifiying "all",
James Carter
- [PATCH 1/2] checkpolicy: free identifiers on invalid typebounds,
Christian Göttsche
- Re: Job Offer, Beckie Varnadore
- [PATCH] selinux: pre-allocate the status page,
Christian Göttsche
- [PATCH] selinux: avoid dereference of garbage after mount failure,
Christian Göttsche
- [PATCH] selinux: update numeric format specifiers for ebitmaps,
Christian Göttsche
- [PATCH] selinux: fix pr_err() format specifier in ebitmap_read(),
Paul Moore
- Re: linux-next: build failure after merge of the selinux tree, Paul Moore
- [PATCH v2] libselinux: avoid logs in get_ordered_context_list() without policy,
Christian Göttsche
- [PATCH 1/2] checkpolicy: use YYerror only when available,
Christian Göttsche
- ANN: SETools 4.5.0, Chris PeBenito
- Where to look for system services modified for SELinux,
Casey Schaufler
- [PATCH PR#420 v4] audit2allow: CIL output mode,
Topi Miettinen
- [PATCH v2 2/2] selinux: improve symtab string hashing,
Christian Göttsche
- [PATCH v3] selinux: optimize ebitmap_and(),
Christian Göttsche
- [RFC PATCH 2/2] selinux: wire up new execstack LSM hook, Christian Göttsche
- [PATCH] selinux: use u32 as bit type in ebitmap code,
Christian Göttsche
- [PATCH 2/2] selinux: make more use of current_sid(),
Christian Göttsche
- [PATCH v2] selinux: reject invalid ebitmaps,
Christian Göttsche
- [PATCH] libselinux: avoid logs in get_ordered_context_list() without policy,
Christian Göttsche
- [PATCH 01/10] capability: introduce new capable flag CAP_OPT_NOAUDIT_ONDENY,
Christian Göttsche
- nfs client uses different MAC policy or model,
Daniel Walker (danielwa)
- [PATCH] libselinux, libsepol: Add CFLAGS and LDFLAGS to Makefile checks,
James Carter
- [PATCH 1/5] libselinux/utils/selabel_digest: drop unsupported option -d,
Christian Göttsche
- [GIT PULL] selinux/selinux-pr-20240312,
Paul Moore
- [PATCH v2] libsepol: Fix buffer overflow when using sepol_av_to_string(),
James Carter
- [PATCH 1/5] checkpolicy/fuzz: drop redundant notdefined check,
Christian Göttsche
- [PATCH] libsepol: Fix buffer overflow when using sepol_av_to_string(),
James Carter
- [PATCH] checkpolicy/fuzz: Update check_level() to use notdefined field,
James Carter
- [PATCH] selinux: improve error checking in sel_write_load(),
Paul Moore
- [Bug] WARNING: zero-size vmalloc in sel_write_load,
Sam Sun
- [PATCH PR#420 v3] audit2allow: CIL output mode,
Topi Miettinen
- [PATCH] libselinux/src/Makefile: fix reallocarray strlcpy detection,
Jordan Williams
- [PATCH] libsepoll/src/Makefile: Fix reallocarray detection when cross-compiling,
Winfried Dobbe
- [PATCH v3] checkpolicy, libsepol: Fix potential double free of mls_level_t,
James Carter
- ANN: Reference Policy 2.20240226, Chris PeBenito
- [PATCH] selinux: cleanup selinux_lsm_getattr(),
Paul Moore
- Re: [PATCH 1/2] SELinux: Fix lsm_get_self_attr(),
Paul Moore
- [FYI][PATCH] tracing/treewide: Remove second parameter of __assign_str(),
Steven Rostedt
- [PATCH 00/21] selinux: fix style issues in security/selinux/ss,
Paul Moore
- [PATCH 03/21] selinux: fix style issues in security/selinux/ss/conditional.h, Paul Moore
- [PATCH 01/21] selinux: fix style issues in security/selinux/ss/avtab.h, Paul Moore
- [PATCH 02/21] selinux: fix style issues in security/selinux/ss/avtab.c, Paul Moore
- [PATCH 04/21] selinux: fix style issues in security/selinux/ss/conditional.c, Paul Moore
- [PATCH 05/21] selinux: fix style issues in security/selinux/ss/constraint.h, Paul Moore
- [PATCH 07/21] selinux: fix style issues in security/selinux/ss/context.h, Paul Moore
- [PATCH 08/21] selinux: fix style issues in security/selinux/ss/ebitmap.h, Paul Moore
- [PATCH 06/21] selinux: fix style issues in security/selinux/ss/context.h, Paul Moore
- [PATCH 10/21] selinux: fix style issues in security/selinux/ss/hashtab.h, Paul Moore
- [PATCH 09/21] selinux: fix style issues in security/selinux/ss/ebitmap.c, Paul Moore
- [PATCH 12/21] selinux: fix style issues in security/selinux/ss/mls.h, Paul Moore
- [PATCH 11/21] selinux: fix style issues in security/selinux/ss/hashtab.c, Paul Moore
- [PATCH 14/21] selinux: fix style issues in security/selinux/ss/mls_types.h, Paul Moore
- [PATCH 13/21] selinux: fix style issues in security/selinux/ss/mls.c, Paul Moore
- [PATCH 17/21] selinux: fix style issues in security/selinux/ss/services.h, Paul Moore
- [PATCH 16/21] selinux: fix style issues in security/selinux/ss/policydb.c, Paul Moore
- [PATCH 15/21] selinux: fix style issues in security/selinux/ss/policydb.h, Paul Moore
- [PATCH 18/21] selinux: fix style issues in security/selinux/ss/sidtab.h, Paul Moore
- [PATCH 19/21] selinux: fix style issues in security/selinux/ss/sidtab.c, Paul Moore
- [PATCH 20/21] selinux: fix style issues in security/selinux/ss/symtab.h, Paul Moore
- [PATCH 21/21] selinux: fix style issues in security/selinux/ss/symtab.c, Paul Moore
- Re: [PATCH 0/21] selinux: fix style issues in security/selinux/ss, Paul Moore
- [PATCH] sepolgen: adjust parse for refpolicy,
Christian Göttsche
- [PATCH v2 00/25] fs: use type-safe uid representation for filesystem capabilities,
Seth Forshee (DigitalOcean)
- [PATCH v2 01/25] mnt_idmapping: split out core vfs[ug]id_t definitions into vfsid.h, Seth Forshee (DigitalOcean)
- [PATCH v2 04/25] capability: rename cpu_vfs_cap_data to vfs_caps, Seth Forshee (DigitalOcean)
- [PATCH v2 02/25] mnt_idmapping: include cred.h, Seth Forshee (DigitalOcean)
- [PATCH v2 03/25] capability: add static asserts for comapatibility of vfs_cap_data and vfs_ns_cap_data, Seth Forshee (DigitalOcean)
- [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps, Seth Forshee (DigitalOcean)
- [PATCH v2 05/25] capability: use vfsuid_t for vfs_caps rootids, Seth Forshee (DigitalOcean)
- [PATCH v2 07/25] capability: provide a helper for converting vfs_caps to xattr for userspace, Seth Forshee (DigitalOcean)
- [PATCH v2 12/25] selinux: add hooks for fscaps operations, Seth Forshee (DigitalOcean)
- [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps, Seth Forshee (DigitalOcean)
- [PATCH v2 14/25] evm: add support for fscaps security hooks, Seth Forshee (DigitalOcean)
- [PATCH v2 13/25] smack: add hooks for fscaps operations, Seth Forshee (DigitalOcean)
- [PATCH v2 08/25] xattr: add is_fscaps_xattr() helper, Seth Forshee (DigitalOcean)
- [PATCH v2 10/25] xattr: use is_fscaps_xattr(), Seth Forshee (DigitalOcean)
- [PATCH v2 09/25] commoncap: use is_fscaps_xattr(), Seth Forshee (DigitalOcean)
- [PATCH v2 22/25] fs: use vfs interfaces for capabilities xattrs, Seth Forshee (DigitalOcean)
- [PATCH v2 16/25] fs: add inode operations to get/set/remove fscaps, Seth Forshee (DigitalOcean)
- [PATCH v2 17/25] fs: add vfs_get_fscaps(), Seth Forshee (DigitalOcean)
- [PATCH v2 20/25] ovl: add fscaps handlers, Seth Forshee (DigitalOcean)
- [PATCH v2 21/25] ovl: use vfs_{get,set}_fscaps() for copy-up, Seth Forshee (DigitalOcean)
- [PATCH v2 19/25] fs: add vfs_remove_fscaps(), Seth Forshee (DigitalOcean)
- [PATCH v2 18/25] fs: add vfs_set_fscaps(), Seth Forshee (DigitalOcean)
- [PATCH v2 15/25] security: call evm fscaps hooks from generic security hooks, Seth Forshee (DigitalOcean)
- [PATCH v2 23/25] commoncap: remove cap_inode_getsecurity(), Seth Forshee (DigitalOcean)
- [PATCH v2 25/25] vfs: return -EOPNOTSUPP for fscaps from vfs_*xattr(), Seth Forshee (DigitalOcean)
- [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Seth Forshee (DigitalOcean)
- Re: [PATCH v2 00/25] fs: use type-safe uid representation for filesystem capabilities, Christian Brauner
- [PATCH v2] checkpolicy, libsepol: Fix potential double free of mls_level_t,
James Carter
- [PATCH PR#420 v2] audit2allow: CIL output mode, Topi Miettinen
- [PATCH PR#420] audit2allow: CIL output mode,
Topi Miettinen
- [PATCH] Always build for LFS mode on 32-bit archs.,
Steve Langasek
- [PATCH v7 0/4] per-vma locks in userfaultfd,
Lokesh Gidra
- [PATCH v10 00/25] security: Move IMA and EVM to the LSM infrastructure,
Roberto Sassu
- [PATCH v10 01/25] ima: Align ima_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v10 02/25] ima: Align ima_file_mprotect() definition with LSM infrastructure, Roberto Sassu
- [PATCH v10 03/25] ima: Align ima_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v10 04/25] ima: Align ima_inode_removexattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v10 05/25] ima: Align ima_post_read_file() definition with LSM infrastructure, Roberto Sassu
- [PATCH v10 06/25] evm: Align evm_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v10 07/25] evm: Align evm_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v10 08/25] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v10 09/25] security: Align inode_setattr hook definition with EVM, Roberto Sassu
- [PATCH v10 10/25] security: Introduce inode_post_setattr hook, Roberto Sassu
- [PATCH v10 11/25] security: Introduce inode_post_removexattr hook, Roberto Sassu
- [PATCH v10 12/25] security: Introduce file_post_open hook, Roberto Sassu
- [PATCH v10 13/25] security: Introduce file_release hook, Roberto Sassu
- [PATCH v10 14/25] security: Introduce path_post_mknod hook, Roberto Sassu
- [PATCH v10 15/25] security: Introduce inode_post_create_tmpfile hook, Roberto Sassu
- [PATCH v10 16/25] security: Introduce inode_post_set_acl hook, Roberto Sassu
- [PATCH v10 17/25] security: Introduce inode_post_remove_acl hook, Roberto Sassu
- [PATCH v10 18/25] security: Introduce key_post_create_or_update hook, Roberto Sassu
- [PATCH v10 19/25] integrity: Move integrity_kernel_module_request() to IMA, Roberto Sassu
- [PATCH v10 20/25] ima: Move to LSM infrastructure, Roberto Sassu
- [PATCH v10 21/25] ima: Move IMA-Appraisal to LSM infrastructure, Roberto Sassu
- [PATCH v10 23/25] evm: Make it independent from 'integrity' LSM, Roberto Sassu
- [PATCH v10 24/25] ima: Make it independent from 'integrity' LSM, Roberto Sassu
- [PATCH v10 25/25] integrity: Remove LSM, Roberto Sassu
- [PATCH v10 22/25] evm: Move to LSM infrastructure, Roberto Sassu
- Re: [PATCH v10 0/25] security: Move IMA and EVM to the LSM infrastructure, Paul Moore
- Re: [PATCH v10 00/25] security: Move IMA and EVM to the LSM infrastructure, Eric Snowberg
- [PATCH v6 0/3] per-vma locks in userfaultfd,
Lokesh Gidra
- [PATCH] checkpolicy, libsepol: Fix potential double free of mls_level_t,
James Carter
- [PATCH v5 0/3] per-vma locks in userfaultfd,
Lokesh Gidra
- [PATCH testsuite] tests/inet_socket: test CALIPSO also with datagram protocols,
Ondrej Mosnacek
- [PATCH v4 0/3] per-vma locks in userfaultfd,
Lokesh Gidra
- [PATCH testsuite] policy: fix testsuite_domain_type_minimal() to work with rpm-ostree,
Ondrej Mosnacek
- [PATCH] python/semanage: Do not sort local fcontext definitions,
Vit Mojzis
- [PATCH 5.4,4.19] lsm: new security_file_ioctl_compat() hook,
Eric Biggers
- [PATCH v3 0/3] per-vma locks in userfaultfd,
Lokesh Gidra
- Calls to vfs_setlease() from NFSD code cause unnecessary CAP_LEASE security checks,
Ondrej Mosnacek
- [PATCH v2] selinux: only filter copy-up xattrs following initialization,
David Disseldorp
- [RFC PATCH v2 0/9] libselinux: rework selabel_file(5) database,
Christian Göttsche
- [PATCH 1/3] libsepol: ensure transitivity in compare functions,
Christian Göttsche
- [PATCH] selinux: correct return values in selinux_socket_getpeersec_dgram(),
Paul Moore
- [PATCH v2 0/3] per-vma locks in userfaultfd,
Lokesh Gidra
- [PATCH] security: fix no-op hook logic in security_inode_{set,remove}xattr(),
Ondrej Mosnacek
- [PATCH] selinux: Use kfree_sensitive for certain code paths of security,
Ronald Monthero
- [PATCH] lsm: fix default return value of the socket_getpeersec_* hooks,
Ondrej Mosnacek
- [PATCH 1/3] userfaultfd: move userfaultfd_ctx struct to header file,
Lokesh Gidra
- [PATCH] security: fix the logic in security_inode_getsecctx(),
Ondrej Mosnacek
- selinux-testsuite nfs tests?,
Stephen Smalley
- [PATCH] python/semanage: Allow modifying records on "add",
Vit Mojzis
- [PATCH] io_uring: enable audit and restrict cred override for IORING_OP_FIXED_FD_INSTALL,
Paul Moore
- [PATCH 01/15] checkpolicy: add libfuzz based fuzzer,
Christian Göttsche
- [PATCH 02/15] checkpolicy: cleanup resources on parse error, Christian Göttsche
- [PATCH 04/15] checkpolicy: free ebitmap on error, Christian Göttsche
- [PATCH 03/15] checkpolicy: cleanup identifiers on error, Christian Göttsche
- [PATCH 05/15] checkpolicy: check allocation and free memory on error at type definition, Christian Göttsche
- [PATCH 08/15] checkpolicy: bail out on invalid role, Christian Göttsche
- [PATCH 09/15] libsepol: use typedef, Christian Göttsche
- [PATCH 06/15] checkpolicy: clean expression on error, Christian Göttsche
- [PATCH 07/15] checkpolicy: call YYABORT on parse errors, Christian Göttsche
- [PATCH 11/15] checkpolicy: fix use-after-free on invalid sens alias, Christian Göttsche
- [PATCH 10/15] libsepol: add copy member to level_datum, Christian Göttsche
- [PATCH 13/15] checkpolicy: free temporary bounds type, Christian Göttsche
- [PATCH 12/15] checkpolicy: provide more descriptive error messages, Christian Göttsche
- [PATCH 15/15] checkpolicy: misc policy_define.c cleanup, Christian Göttsche
- [PATCH 14/15] checkpolicy: avoid assigning garbage values, Christian Göttsche
- Re: [PATCH 01/15] checkpolicy: add libfuzz based fuzzer, James Carter
- IORING_OP_FIXED_FD_INSTALL and audit/LSM interactions,
Paul Moore
- [PATCH] selinux: reduce the object class calculations at inode init time,
Paul Moore
- Race in security/selinux/hooks.c on isec->sclass and isec->sid usage,
Gabriel Ryan
- [PATCH] userfaultfd: fix return error if mmap_changing is non-zero in MOVE ioctl,
Lokesh Gidra
- [PATCH] userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb,
Lokesh Gidra
[PATCH v9 00/25] security: Move IMA and EVM to the LSM infrastructure,
Roberto Sassu
- [PATCH v9 01/25] ima: Align ima_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v9 02/25] ima: Align ima_file_mprotect() definition with LSM infrastructure, Roberto Sassu
- [PATCH v9 03/25] ima: Align ima_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v9 05/25] ima: Align ima_post_read_file() definition with LSM infrastructure, Roberto Sassu
- [PATCH v9 06/25] evm: Align evm_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v9 07/25] evm: Align evm_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v9 08/25] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v9 09/25] security: Align inode_setattr hook definition with EVM, Roberto Sassu
- [PATCH v9 10/25] security: Introduce inode_post_setattr hook, Roberto Sassu
- [PATCH v9 11/25] security: Introduce inode_post_removexattr hook, Roberto Sassu
- [PATCH v9 12/25] security: Introduce file_post_open hook, Roberto Sassu
- [PATCH v9 14/25] security: Introduce path_post_mknod hook, Roberto Sassu
- [PATCH v9 15/25] security: Introduce inode_post_create_tmpfile hook, Roberto Sassu
- [PATCH v9 16/25] security: Introduce inode_post_set_acl hook, Roberto Sassu
- [PATCH v9 17/25] security: Introduce inode_post_remove_acl hook, Roberto Sassu
- [PATCH v9 18/25] security: Introduce key_post_create_or_update hook, Roberto Sassu
- [PATCH v9 19/25] integrity: Move integrity_kernel_module_request() to IMA, Roberto Sassu
- [PATCH v9 20/25] ima: Move to LSM infrastructure, Roberto Sassu
- [PATCH v9 21/25] ima: Move IMA-Appraisal to LSM infrastructure, Roberto Sassu
- [PATCH v9 22/25] evm: Move to LSM infrastructure, Roberto Sassu
- [PATCH v9 23/25] evm: Make it independent from 'integrity' LSM, Roberto Sassu
[Index of Archives]
[Selinux Refpolicy]
[Fedora Users]
[Fedora Desktop]
[Kernel]
[KDE Users]
[Gnome Users]