Security Enhanced Linux (SELINUX)

• Date Index

• Re: [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps, (continued)
  • Re: [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps, Seth Forshee (DigitalOcean)
  • [PATCH v2 14/25] evm: add support for fscaps security hooks, Seth Forshee (DigitalOcean)
    • Re: [PATCH v2 14/25] evm: add support for fscaps security hooks, Roberto Sassu
      • Re: [PATCH v2 14/25] evm: add support for fscaps security hooks, Christian Brauner
        • Re: [PATCH v2 14/25] evm: add support for fscaps security hooks, Roberto Sassu
          • Re: [PATCH v2 14/25] evm: add support for fscaps security hooks, Christian Brauner
      • Re: [PATCH v2 14/25] evm: add support for fscaps security hooks, Seth Forshee (DigitalOcean)
        • Re: [PATCH v2 14/25] evm: add support for fscaps security hooks, Roberto Sassu
    • Re: [PATCH v2 14/25] evm: add support for fscaps security hooks, Roberto Sassu
  • [PATCH v2 13/25] smack: add hooks for fscaps operations, Seth Forshee (DigitalOcean)
    • Re: [PATCH v2 13/25] smack: add hooks for fscaps operations, Casey Schaufler
      • Re: [PATCH v2 13/25] smack: add hooks for fscaps operations, Seth Forshee (DigitalOcean)
  • [PATCH v2 08/25] xattr: add is_fscaps_xattr() helper, Seth Forshee (DigitalOcean)
    • Re: [PATCH v2 08/25] xattr: add is_fscaps_xattr() helper, Christian Brauner
  • [PATCH v2 10/25] xattr: use is_fscaps_xattr(), Seth Forshee (DigitalOcean)
    • Re: [PATCH v2 10/25] xattr: use is_fscaps_xattr(), Christian Brauner
  • [PATCH v2 09/25] commoncap: use is_fscaps_xattr(), Seth Forshee (DigitalOcean)
    • Re: [PATCH v2 09/25] commoncap: use is_fscaps_xattr(), Christian Brauner
  • [PATCH v2 22/25] fs: use vfs interfaces for capabilities xattrs, Seth Forshee (DigitalOcean)
  • [PATCH v2 16/25] fs: add inode operations to get/set/remove fscaps, Seth Forshee (DigitalOcean)
    • Re: [PATCH v2 16/25] fs: add inode operations to get/set/remove fscaps, Christian Brauner
  • [PATCH v2 17/25] fs: add vfs_get_fscaps(), Seth Forshee (DigitalOcean)
    • Re: [PATCH v2 17/25] fs: add vfs_get_fscaps(), Christian Brauner
  • [PATCH v2 20/25] ovl: add fscaps handlers, Seth Forshee (DigitalOcean)
    • Re: [PATCH v2 20/25] ovl: add fscaps handlers, Christian Brauner
    • Re: [PATCH v2 20/25] ovl: add fscaps handlers, Amir Goldstein
      • Re: [PATCH v2 20/25] ovl: add fscaps handlers, Seth Forshee (DigitalOcean)
  • [PATCH v2 21/25] ovl: use vfs_{get,set}_fscaps() for copy-up, Seth Forshee (DigitalOcean)
  • [PATCH v2 19/25] fs: add vfs_remove_fscaps(), Seth Forshee (DigitalOcean)
    • Re: [PATCH v2 19/25] fs: add vfs_remove_fscaps(), Christian Brauner
  • [PATCH v2 18/25] fs: add vfs_set_fscaps(), Seth Forshee (DigitalOcean)
    • Re: [PATCH v2 18/25] fs: add vfs_set_fscaps(), Christian Brauner
  • [PATCH v2 15/25] security: call evm fscaps hooks from generic security hooks, Seth Forshee (DigitalOcean)
    • Re: [PATCH v2 15/25] security: call evm fscaps hooks from generic security hooks, Paul Moore
      • Re: [PATCH v2 15/25] security: call evm fscaps hooks from generic security hooks, Seth Forshee (DigitalOcean)
        • Re: [PATCH v2 15/25] security: call evm fscaps hooks from generic security hooks, Paul Moore
  • [PATCH v2 23/25] commoncap: remove cap_inode_getsecurity(), Seth Forshee (DigitalOcean)
  • [PATCH v2 25/25] vfs: return -EOPNOTSUPP for fscaps from vfs_*xattr(), Seth Forshee (DigitalOcean)
  • [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Seth Forshee (DigitalOcean)
    • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Roberto Sassu
      • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Seth Forshee (DigitalOcean)
        • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Roberto Sassu
          • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Seth Forshee (DigitalOcean)
            • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Christian Brauner
              • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Roberto Sassu
                • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Christian Brauner
                  • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Roberto Sassu
                    • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Seth Forshee (DigitalOcean)
                      • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Roberto Sassu
                • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Roberto Sassu
                  • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Seth Forshee (DigitalOcean)
                    • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Roberto Sassu
                  • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Mimi Zohar
                    • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Roberto Sassu
                      • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Mimi Zohar
  • Re: [PATCH v2 00/25] fs: use type-safe uid representation for filesystem capabilities, Christian Brauner
    • Re: [PATCH v2 00/25] fs: use type-safe uid representation for filesystem capabilities, Seth Forshee (DigitalOcean)
• [PATCH v2] checkpolicy, libsepol: Fix potential double free of mls_level_t, James Carter
  • Re: [PATCH v2] checkpolicy, libsepol: Fix potential double free of mls_level_t, Christian Göttsche
    • Re: [PATCH v2] checkpolicy, libsepol: Fix potential double free of mls_level_t, James Carter
• [PATCH PR#420 v2] audit2allow: CIL output mode, Topi Miettinen
• [PATCH PR#420] audit2allow: CIL output mode, Topi Miettinen
  • Re: [PATCH PR#420] audit2allow: CIL output mode, James Carter
• [PATCH] Always build for LFS mode on 32-bit archs., Steve Langasek
  • <Possible follow-ups>
  • [PATCH] Always build for LFS mode on 32-bit archs., Steve Langasek
    • Re: [PATCH] Always build for LFS mode on 32-bit archs., Steve Langasek
      • Re: [PATCH] Always build for LFS mode on 32-bit archs., Kees Cook
        • Re: [PATCH] Always build for LFS mode on 32-bit archs., Steve Langasek
          • Re: [PATCH] Always build for LFS mode on 32-bit archs., Steve Langasek
            • Re: [PATCH] Always build for LFS mode on 32-bit archs., Christian Göttsche
              • Re: [PATCH] Always build for LFS mode on 32-bit archs., Steve Langasek
                • Re: [PATCH] Always build for LFS mode on 32-bit archs., Christian Göttsche
                  • Re: [PATCH] Always build for LFS mode on 32-bit archs., Steve Langasek
                    • Re: [PATCH] Always build for LFS mode on 32-bit archs., Petr Lautrbach
                      • Re: [PATCH] Always build for LFS mode on 32-bit archs., Steve Langasek
                        • Re: [PATCH] Always build for LFS mode on 32-bit archs., Chris Hofstaedtler
  • [PATCH] Always build for LFS mode on 32-bit archs., Christian Göttsche
    • Re: [PATCH] Always build for LFS mode on 32-bit archs., James Carter
      • Re: [PATCH] Always build for LFS mode on 32-bit archs., James Carter
• [PATCH v7 0/4] per-vma locks in userfaultfd, Lokesh Gidra
  • [PATCH v7 1/4] userfaultfd: move userfaultfd_ctx struct to header file, Lokesh Gidra
  • [PATCH v7 3/4] mm: add vma_assert_locked() for !CONFIG_PER_VMA_LOCK, Lokesh Gidra
    • Re: [PATCH v7 3/4] mm: add vma_assert_locked() for !CONFIG_PER_VMA_LOCK, Suren Baghdasaryan
  • [PATCH v7 4/4] userfaultfd: use per-vma locks in userfaultfd operations, Lokesh Gidra
    • Re: [PATCH v7 4/4] userfaultfd: use per-vma locks in userfaultfd operations, Barry Song
      • Re: [PATCH v7 4/4] userfaultfd: use per-vma locks in userfaultfd operations, Lorenzo Stoakes
        • Re: [PATCH v7 4/4] userfaultfd: use per-vma locks in userfaultfd operations, Lorenzo Stoakes
        • Re: [PATCH v7 4/4] userfaultfd: use per-vma locks in userfaultfd operations, David Hildenbrand
          • Re: [PATCH v7 4/4] userfaultfd: use per-vma locks in userfaultfd operations, Suren Baghdasaryan
      • Re: [PATCH v7 4/4] userfaultfd: use per-vma locks in userfaultfd operations, Liam R. Howlett
        • Re: [PATCH v7 4/4] userfaultfd: use per-vma locks in userfaultfd operations, Lokesh Gidra
          • Re: [PATCH v7 4/4] userfaultfd: use per-vma locks in userfaultfd operations, Barry Song
      • Re: [PATCH v7 4/4] userfaultfd: use per-vma locks in userfaultfd operations, Matthew Wilcox
  • [PATCH v7 2/4] userfaultfd: protect mmap_changing with rw_sem in userfaulfd_ctx, Lokesh Gidra
• [PATCH v10 00/25] security: Move IMA and EVM to the LSM infrastructure, Roberto Sassu
  • [PATCH v10 01/25] ima: Align ima_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v10 02/25] ima: Align ima_file_mprotect() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v10 03/25] ima: Align ima_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v10 04/25] ima: Align ima_inode_removexattr() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v10 05/25] ima: Align ima_post_read_file() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v10 06/25] evm: Align evm_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v10 07/25] evm: Align evm_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v10 08/25] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v10 09/25] security: Align inode_setattr hook definition with EVM, Roberto Sassu
  • [PATCH v10 10/25] security: Introduce inode_post_setattr hook, Roberto Sassu
  • [PATCH v10 11/25] security: Introduce inode_post_removexattr hook, Roberto Sassu
  • [PATCH v10 12/25] security: Introduce file_post_open hook, Roberto Sassu
  • [PATCH v10 13/25] security: Introduce file_release hook, Roberto Sassu
  • [PATCH v10 14/25] security: Introduce path_post_mknod hook, Roberto Sassu
  • [PATCH v10 15/25] security: Introduce inode_post_create_tmpfile hook, Roberto Sassu
  • [PATCH v10 16/25] security: Introduce inode_post_set_acl hook, Roberto Sassu
  • [PATCH v10 17/25] security: Introduce inode_post_remove_acl hook, Roberto Sassu
  • [PATCH v10 18/25] security: Introduce key_post_create_or_update hook, Roberto Sassu
  • [PATCH v10 19/25] integrity: Move integrity_kernel_module_request() to IMA, Roberto Sassu
    • Re: [PATCH v10 19/25] integrity: Move integrity_kernel_module_request() to IMA, Roberto Sassu
      • Re: [PATCH v10 19/25] integrity: Move integrity_kernel_module_request() to IMA, Mimi Zohar
  • [PATCH v10 20/25] ima: Move to LSM infrastructure, Roberto Sassu
  • [PATCH v10 21/25] ima: Move IMA-Appraisal to LSM infrastructure, Roberto Sassu
  • [PATCH v10 23/25] evm: Make it independent from 'integrity' LSM, Roberto Sassu
  • [PATCH v10 24/25] ima: Make it independent from 'integrity' LSM, Roberto Sassu
  • [PATCH v10 25/25] integrity: Remove LSM, Roberto Sassu
  • [PATCH v10 22/25] evm: Move to LSM infrastructure, Roberto Sassu
  • Re: [PATCH v10 0/25] security: Move IMA and EVM to the LSM infrastructure, Paul Moore
    • Re: [PATCH v10 0/25] security: Move IMA and EVM to the LSM infrastructure, Roberto Sassu
  • Re: [PATCH v10 00/25] security: Move IMA and EVM to the LSM infrastructure, Eric Snowberg
• [PATCH v6 0/3] per-vma locks in userfaultfd, Lokesh Gidra
  • [PATCH v6 1/3] userfaultfd: move userfaultfd_ctx struct to header file, Lokesh Gidra
  • [PATCH v6 2/3] userfaultfd: protect mmap_changing with rw_sem in userfaulfd_ctx, Lokesh Gidra
  • [PATCH v6 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Lokesh Gidra
    • Re: [PATCH v6 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Ryan Roberts
      • Re: [PATCH v6 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Suren Baghdasaryan
        • Re: [PATCH v6 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Lokesh Gidra
          • Re: [PATCH v6 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Ryan Roberts
  • Re: [PATCH v6 0/3] per-vma locks in userfaultfd, Liam R. Howlett
• [PATCH] checkpolicy, libsepol: Fix potential double free of mls_level_t, James Carter
  • Re: [PATCH] checkpolicy, libsepol: Fix potential double free of mls_level_t, Christian Göttsche
    • Re: [PATCH] checkpolicy, libsepol: Fix potential double free of mls_level_t, James Carter
• [PATCH v5 0/3] per-vma locks in userfaultfd, Lokesh Gidra
  • [PATCH v5 1/3] userfaultfd: move userfaultfd_ctx struct to header file, Lokesh Gidra
  • [PATCH v5 2/3] userfaultfd: protect mmap_changing with rw_sem in userfaulfd_ctx, Lokesh Gidra
  • [PATCH v5 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Lokesh Gidra
    • Re: [PATCH v5 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Liam R. Howlett
      • Re: [PATCH v5 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Lokesh Gidra
        • Re: [PATCH v5 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Liam R. Howlett
          • Re: [PATCH v5 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Lokesh Gidra
            • Re: [PATCH v5 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Suren Baghdasaryan
              • Re: [PATCH v5 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Liam R. Howlett
                • Re: [PATCH v5 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Suren Baghdasaryan
                  • Re: [PATCH v5 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Lokesh Gidra
                    • Re: [PATCH v5 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Liam R. Howlett
                      • Re: [PATCH v5 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Suren Baghdasaryan
                        • Re: [PATCH v5 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Lokesh Gidra
                          • Re: [PATCH v5 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Liam R. Howlett
                            • Re: [PATCH v5 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Lokesh Gidra
                              • Re: [PATCH v5 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Liam R. Howlett
                  • Re: [PATCH v5 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Liam R. Howlett
• [PATCH testsuite] tests/inet_socket: test CALIPSO also with datagram protocols, Ondrej Mosnacek
  • Re: [PATCH testsuite] tests/inet_socket: test CALIPSO also with datagram protocols, Ondrej Mosnacek
• [PATCH v4 0/3] per-vma locks in userfaultfd, Lokesh Gidra
  • [PATCH v4 1/3] userfaultfd: move userfaultfd_ctx struct to header file, Lokesh Gidra
  • [PATCH v4 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Lokesh Gidra
    • Re: [PATCH v4 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Liam R. Howlett
      • Re: [PATCH v4 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Lokesh Gidra
        • Re: [PATCH v4 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Liam R. Howlett
          • Re: [PATCH v4 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Lokesh Gidra
            • Re: [PATCH v4 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Liam R. Howlett
              • Re: [PATCH v4 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Lokesh Gidra
                • Re: [PATCH v4 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Liam R. Howlett
                  • Re: [PATCH v4 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Lokesh Gidra
                    • Re: [PATCH v4 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Liam R. Howlett
                      • Re: [PATCH v4 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Lokesh Gidra
                        • Re: [PATCH v4 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Liam R. Howlett
  • [PATCH v4 2/3] userfaultfd: protect mmap_changing with rw_sem in userfaulfd_ctx, Lokesh Gidra
• [PATCH testsuite] policy: fix testsuite_domain_type_minimal() to work with rpm-ostree, Ondrej Mosnacek
  • Re: [PATCH testsuite] policy: fix testsuite_domain_type_minimal() to work with rpm-ostree, Ondrej Mosnacek
• [PATCH] python/semanage: Do not sort local fcontext definitions, Vit Mojzis
  • Re: [PATCH] python/semanage: Do not sort local fcontext definitions, Petr Lautrbach
    • Re: [PATCH] python/semanage: Do not sort local fcontext definitions, Vit Mojzis
      • Re: [PATCH] python/semanage: Do not sort local fcontext definitions, James Carter
  • Re: [PATCH] python/semanage: Do not sort local fcontext definitions, James Carter
    • Re: [PATCH] python/semanage: Do not sort local fcontext definitions, James Carter
• [PATCH 5.4,4.19] lsm: new security_file_ioctl_compat() hook, Eric Biggers
  • Re: [PATCH 5.4,4.19] lsm: new security_file_ioctl_compat() hook, Greg KH
• [PATCH v3 0/3] per-vma locks in userfaultfd, Lokesh Gidra
  • [PATCH v3 1/3] userfaultfd: move userfaultfd_ctx struct to header file, Lokesh Gidra
  • [PATCH v3 2/3] userfaultfd: protect mmap_changing with rw_sem in userfaulfd_ctx, Lokesh Gidra
  • [PATCH v3 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Lokesh Gidra
    • Re: [PATCH v3 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Liam R. Howlett
      • Re: [PATCH v3 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Lokesh Gidra
        • Re: [PATCH v3 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Liam R. Howlett
    • Re: [PATCH v3 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Jann Horn
      • Re: [PATCH v3 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Lokesh Gidra
        • Re: [PATCH v3 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Jann Horn
• Calls to vfs_setlease() from NFSD code cause unnecessary CAP_LEASE security checks, Ondrej Mosnacek
  • Re: Calls to vfs_setlease() from NFSD code cause unnecessary CAP_LEASE security checks, Jeff Layton
    • Re: Calls to vfs_setlease() from NFSD code cause unnecessary CAP_LEASE security checks, Ondrej Mosnacek
      • Re: Calls to vfs_setlease() from NFSD code cause unnecessary CAP_LEASE security checks, Ondrej Mosnacek
• [PATCH v2] selinux: only filter copy-up xattrs following initialization, David Disseldorp
  • Re: [PATCH v2] selinux: only filter copy-up xattrs following initialization, Paul Moore
• [RFC PATCH v2 0/9] libselinux: rework selabel_file(5) database, Christian Göttsche
  • [RFC PATCH v2 3/9] libselinux: use more appropriate types in sidtab, Christian Göttsche
  • [RFC PATCH v2 4/9] libselinux: add unique id to sidtab entries, Christian Göttsche
  • [RFC PATCH v2 7/9] libselinux: remove unused hashtab code, Christian Göttsche
  • [RFC PATCH v2 2/9] libselinux/utils: introduce selabel_compare, Christian Göttsche
    • Re: [RFC PATCH v2 2/9] libselinux/utils: introduce selabel_compare, James Carter
      • Re: [RFC PATCH v2 2/9] libselinux/utils: introduce selabel_compare, Christian Göttsche
        • Re: [RFC PATCH v2 2/9] libselinux/utils: introduce selabel_compare, James Carter
  • [RFC PATCH v2 8/9] libselinux: add selabel_file(5) fuzzer, Christian Göttsche
  • [RFC PATCH v2 1/9] policycoreutils: introduce unsetfiles, Christian Göttsche
  • [RFC PATCH v2 9/9] libselinux: support parallel selabel_lookup(3), Christian Göttsche
  • [RFC PATCH v2 5/9] libselinux: sidtab updates, Christian Göttsche
    • Re: [RFC PATCH v2 5/9] libselinux: sidtab updates, James Carter
      • Re: [RFC PATCH v2 5/9] libselinux: sidtab updates, Christian Göttsche
  • [RFC PATCH v2 6/9] libselinux: rework selabel_file(5) database, Christian Göttsche
• [PATCH 1/3] libsepol: ensure transitivity in compare functions, Christian Göttsche
  • [PATCH 2/3] libsepol/cil: ensure transitivity in compare functions, Christian Göttsche
  • [PATCH 3/3] mcstrans: ensure transitivity in compare functions, Christian Göttsche
  • Re: [PATCH 1/3] libsepol: ensure transitivity in compare functions, James Carter
    • Re: [PATCH 1/3] libsepol: ensure transitivity in compare functions, James Carter
• [PATCH] selinux: correct return values in selinux_socket_getpeersec_dgram(), Paul Moore
  • Re: [PATCH] selinux: correct return values in selinux_socket_getpeersec_dgram(), Paul Moore
• [PATCH v2 0/3] per-vma locks in userfaultfd, Lokesh Gidra
  • [PATCH v2 1/3] userfaultfd: move userfaultfd_ctx struct to header file, Lokesh Gidra
    • Re: [PATCH v2 1/3] userfaultfd: move userfaultfd_ctx struct to header file, Mike Rapoport
  • [PATCH v2 2/3] userfaultfd: protect mmap_changing with rw_sem in userfaulfd_ctx, Lokesh Gidra
    • Re: [PATCH v2 2/3] userfaultfd: protect mmap_changing with rw_sem in userfaulfd_ctx, Liam R. Howlett
      • Re: [PATCH v2 2/3] userfaultfd: protect mmap_changing with rw_sem in userfaulfd_ctx, Lokesh Gidra
        • Re: [PATCH v2 2/3] userfaultfd: protect mmap_changing with rw_sem in userfaulfd_ctx, Liam R. Howlett
          • Re: [PATCH v2 2/3] userfaultfd: protect mmap_changing with rw_sem in userfaulfd_ctx, Mike Rapoport
            • Re: [PATCH v2 2/3] userfaultfd: protect mmap_changing with rw_sem in userfaulfd_ctx, Liam R. Howlett
              • Re: [PATCH v2 2/3] userfaultfd: protect mmap_changing with rw_sem in userfaulfd_ctx, Lokesh Gidra
                • Re: [PATCH v2 2/3] userfaultfd: protect mmap_changing with rw_sem in userfaulfd_ctx, Mike Rapoport
                  • Re: [PATCH v2 2/3] userfaultfd: protect mmap_changing with rw_sem in userfaulfd_ctx, Lokesh Gidra
                    • Re: [PATCH v2 2/3] userfaultfd: protect mmap_changing with rw_sem in userfaulfd_ctx, Mike Rapoport
                      • Re: [PATCH v2 2/3] userfaultfd: protect mmap_changing with rw_sem in userfaulfd_ctx, Lokesh Gidra
                        • Re: [PATCH v2 2/3] userfaultfd: protect mmap_changing with rw_sem in userfaulfd_ctx, Mike Rapoport
    • Re: [PATCH v2 2/3] userfaultfd: protect mmap_changing with rw_sem in userfaulfd_ctx, Mike Rapoport
  • [PATCH v2 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Lokesh Gidra
    • Re: [PATCH v2 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Liam R. Howlett
      • Re: [PATCH v2 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Suren Baghdasaryan
        • Re: [PATCH v2 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Liam R. Howlett
        • Re: [PATCH v2 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Lokesh Gidra
          • Re: [PATCH v2 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Liam R. Howlett
            • Re: [PATCH v2 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Lokesh Gidra
              • Re: [PATCH v2 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Liam R. Howlett
                • Re: [PATCH v2 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Suren Baghdasaryan
                  • Re: [PATCH v2 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Lokesh Gidra
                    • Re: [PATCH v2 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Liam R. Howlett
                      • Re: [PATCH v2 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Lokesh Gidra
                        • Re: [PATCH v2 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Liam R. Howlett
                          • Re: [PATCH v2 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Lokesh Gidra
                            • Re: [PATCH v2 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Liam R. Howlett
            • Re: [PATCH v2 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Suren Baghdasaryan
              • Re: [PATCH v2 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Liam R. Howlett
  • Re: [PATCH v2 0/3] per-vma locks in userfaultfd, Liam R. Howlett
    • Re: [PATCH v2 0/3] per-vma locks in userfaultfd, Lokesh Gidra
• [PATCH] security: fix no-op hook logic in security_inode_{set,remove}xattr(), Ondrej Mosnacek
  • Re: [PATCH] security: fix no-op hook logic in security_inode_{set,remove}xattr(), Paul Moore
    • Re: [PATCH] security: fix no-op hook logic in security_inode_{set,remove}xattr(), Paul Moore
      • Re: [PATCH] security: fix no-op hook logic in security_inode_{set,remove}xattr(), Paul Moore
        • Re: [PATCH] security: fix no-op hook logic in security_inode_{set,remove}xattr(), Paul Moore
          • Re: [PATCH] security: fix no-op hook logic in security_inode_{set,remove}xattr(), Casey Schaufler
            • Re: [PATCH] security: fix no-op hook logic in security_inode_{set,remove}xattr(), Paul Moore
• [PATCH] selinux: Use kfree_sensitive for certain code paths of security, Ronald Monthero
  • Re: [PATCH] selinux: Use kfree_sensitive for certain code paths of security, Casey Schaufler
  • Re: [PATCH] selinux: Use kfree_sensitive for certain code paths of security, Paul Moore
    • Re: [PATCH] selinux: Use kfree_sensitive for certain code paths of security, Ronald Monthero
• [PATCH] lsm: fix default return value of the socket_getpeersec_* hooks, Ondrej Mosnacek
  • Re: [PATCH] lsm: fix default return value of the socket_getpeersec_* hooks, Paul Moore
    • Re: [PATCH] lsm: fix default return value of the socket_getpeersec_* hooks, Casey Schaufler
      • Re: [PATCH] lsm: fix default return value of the socket_getpeersec_* hooks, Paul Moore
        • Re: [PATCH] lsm: fix default return value of the socket_getpeersec_* hooks, Ondrej Mosnacek
          • Re: [PATCH] lsm: fix default return value of the socket_getpeersec_* hooks, Casey Schaufler
  • Re: [PATCH] lsm: fix default return value of the socket_getpeersec_* hooks, Paul Moore
• [PATCH 1/3] userfaultfd: move userfaultfd_ctx struct to header file, Lokesh Gidra
  • [PATCH 2/3] userfaultfd: protect mmap_changing with rw_sem in userfaulfd_ctx, Lokesh Gidra
  • [PATCH 3/3] userfaultfd: use per-vma locks in userfaultfd operations, Lokesh Gidra
• [PATCH] security: fix the logic in security_inode_getsecctx(), Ondrej Mosnacek
  • Re: [PATCH] security: fix the logic in security_inode_getsecctx(), Ondrej Mosnacek
  • Re: [PATCH] security: fix the logic in security_inode_getsecctx(), Stephen Smalley
    • Re: [PATCH] security: fix the logic in security_inode_getsecctx(), Stephen Smalley
      • Re: [PATCH] security: fix the logic in security_inode_getsecctx(), Ondrej Mosnacek
        • Re: [PATCH] security: fix the logic in security_inode_getsecctx(), Stephen Smalley
          • Re: [PATCH] security: fix the logic in security_inode_getsecctx(), Paul Moore
            • Re: [PATCH] security: fix the logic in security_inode_getsecctx(), Stephen Smalley
              • Re: [PATCH] security: fix the logic in security_inode_getsecctx(), Paul Moore
  • Re: [PATCH] security: fix the logic in security_inode_getsecctx(), Casey Schaufler
  • Re: [PATCH] security: fix the logic in security_inode_getsecctx(), Paul Moore
• selinux-testsuite nfs tests?, Stephen Smalley
  • Re: selinux-testsuite nfs tests?, Stephen Smalley
    • Re: selinux-testsuite nfs tests?, Paul Moore
      • Re: selinux-testsuite nfs tests?, Stephen Smalley
        • Re: selinux-testsuite nfs tests?, Stephen Smalley
          • Re: selinux-testsuite nfs tests?, Paul Moore
            • Re: selinux-testsuite nfs tests?, Ondrej Mosnacek
              • Re: selinux-testsuite nfs tests?, Paul Moore
                • Re: selinux-testsuite nfs tests?, Stephen Smalley
                  • Re: selinux-testsuite nfs tests?, Paul Moore
                  • Re: selinux-testsuite nfs tests?, Stephen Smalley
                    • Re: selinux-testsuite nfs tests?, Paul Moore
                      • Re: selinux-testsuite nfs tests?, Ondrej Mosnacek
                        • Re: selinux-testsuite nfs tests?, Stephen Smalley
                          • Re: selinux-testsuite nfs tests?, Stephen Smalley
                            • Re: selinux-testsuite nfs tests?, Stephen Smalley
                              • Re: selinux-testsuite nfs tests?, Paul Moore
• [PATCH] python/semanage: Allow modifying records on "add", Vit Mojzis
  • Re: [PATCH] python/semanage: Allow modifying records on "add", James Carter
    • [PATCH v2] python/semanage: Allow modifying records on "add", Vit Mojzis
      • Re: [PATCH v2] python/semanage: Allow modifying records on "add", James Carter
• [PATCH] io_uring: enable audit and restrict cred override for IORING_OP_FIXED_FD_INSTALL, Paul Moore
  • Re: [PATCH] io_uring: enable audit and restrict cred override for IORING_OP_FIXED_FD_INSTALL, Paul Moore
    • Re: [PATCH] io_uring: enable audit and restrict cred override for IORING_OP_FIXED_FD_INSTALL, Jens Axboe
  • Re: [PATCH] io_uring: enable audit and restrict cred override for IORING_OP_FIXED_FD_INSTALL, Jens Axboe
    • Re: [PATCH] io_uring: enable audit and restrict cred override for IORING_OP_FIXED_FD_INSTALL, Jens Axboe
      • Re: [PATCH] io_uring: enable audit and restrict cred override for IORING_OP_FIXED_FD_INSTALL, Jens Axboe
        • Re: [PATCH] io_uring: enable audit and restrict cred override for IORING_OP_FIXED_FD_INSTALL, Paul Moore
• [PATCH 01/15] checkpolicy: add libfuzz based fuzzer, Christian Göttsche
  • [PATCH 02/15] checkpolicy: cleanup resources on parse error, Christian Göttsche
    • Re: [PATCH 02/15] checkpolicy: cleanup resources on parse error, James Carter
      • Re: [PATCH 02/15] checkpolicy: cleanup resources on parse error, James Carter
  • [PATCH 04/15] checkpolicy: free ebitmap on error, Christian Göttsche
    • Re: [PATCH 04/15] checkpolicy: free ebitmap on error, James Carter
      • Re: [PATCH 04/15] checkpolicy: free ebitmap on error, James Carter
  • [PATCH 03/15] checkpolicy: cleanup identifiers on error, Christian Göttsche
    • Re: [PATCH 03/15] checkpolicy: cleanup identifiers on error, James Carter
      • Re: [PATCH 03/15] checkpolicy: cleanup identifiers on error, James Carter
  • [PATCH 05/15] checkpolicy: check allocation and free memory on error at type definition, Christian Göttsche
    • Re: [PATCH 05/15] checkpolicy: check allocation and free memory on error at type definition, James Carter
      • Re: [PATCH 05/15] checkpolicy: check allocation and free memory on error at type definition, James Carter
  • [PATCH 08/15] checkpolicy: bail out on invalid role, Christian Göttsche
    • Re: [PATCH 08/15] checkpolicy: bail out on invalid role, James Carter
      • Re: [PATCH 08/15] checkpolicy: bail out on invalid role, James Carter
  • [PATCH 09/15] libsepol: use typedef, Christian Göttsche
    • Re: [PATCH 09/15] libsepol: use typedef, James Carter
      • Re: [PATCH 09/15] libsepol: use typedef, James Carter
  • [PATCH 06/15] checkpolicy: clean expression on error, Christian Göttsche
    • Re: [PATCH 06/15] checkpolicy: clean expression on error, James Carter
      • Re: [PATCH 06/15] checkpolicy: clean expression on error, James Carter
  • [PATCH 07/15] checkpolicy: call YYABORT on parse errors, Christian Göttsche
    • Re: [PATCH 07/15] checkpolicy: call YYABORT on parse errors, James Carter
      • Re: [PATCH 07/15] checkpolicy: call YYABORT on parse errors, James Carter
  • [PATCH 11/15] checkpolicy: fix use-after-free on invalid sens alias, Christian Göttsche
    • Re: [PATCH 11/15] checkpolicy: fix use-after-free on invalid sens alias, Petr Lautrbach
      • Re: [PATCH 11/15] checkpolicy: fix use-after-free on invalid sens alias, James Carter
  • [PATCH 10/15] libsepol: add copy member to level_datum, Christian Göttsche
    • Re: [PATCH 10/15] libsepol: add copy member to level_datum, James Carter
  • [PATCH 13/15] checkpolicy: free temporary bounds type, Christian Göttsche
    • Re: [PATCH 13/15] checkpolicy: free temporary bounds type, James Carter
      • Re: [PATCH 13/15] checkpolicy: free temporary bounds type, James Carter
  • [PATCH 12/15] checkpolicy: provide more descriptive error messages, Christian Göttsche
    • Re: [PATCH 12/15] checkpolicy: provide more descriptive error messages, James Carter
      • Re: [PATCH 12/15] checkpolicy: provide more descriptive error messages, James Carter
  • [PATCH 15/15] checkpolicy: misc policy_define.c cleanup, Christian Göttsche
    • Re: [PATCH 15/15] checkpolicy: misc policy_define.c cleanup, James Carter
      • Re: [PATCH 15/15] checkpolicy: misc policy_define.c cleanup, James Carter
  • [PATCH 14/15] checkpolicy: avoid assigning garbage values, Christian Göttsche
    • Re: [PATCH 14/15] checkpolicy: avoid assigning garbage values, James Carter
      • Re: [PATCH 14/15] checkpolicy: avoid assigning garbage values, James Carter
  • Re: [PATCH 01/15] checkpolicy: add libfuzz based fuzzer, James Carter
    • Re: [PATCH 01/15] checkpolicy: add libfuzz based fuzzer, James Carter
• IORING_OP_FIXED_FD_INSTALL and audit/LSM interactions, Paul Moore
  • Re: IORING_OP_FIXED_FD_INSTALL and audit/LSM interactions, Jens Axboe
    • Re: IORING_OP_FIXED_FD_INSTALL and audit/LSM interactions, Paul Moore
      • Re: IORING_OP_FIXED_FD_INSTALL and audit/LSM interactions, Jens Axboe
        • Re: IORING_OP_FIXED_FD_INSTALL and audit/LSM interactions, Paul Moore
          • Re: IORING_OP_FIXED_FD_INSTALL and audit/LSM interactions, Jens Axboe
  • Re: IORING_OP_FIXED_FD_INSTALL and audit/LSM interactions, Christian Brauner
• [PATCH] selinux: reduce the object class calculations at inode init time, Paul Moore
  • Re: [PATCH] selinux: reduce the object class calculations at inode init time, Stephen Smalley
  • Re: [PATCH] selinux: reduce the object class calculations at inode init time, Paul Moore
• Race in security/selinux/hooks.c on isec->sclass and isec->sid usage, Gabriel Ryan
  • Re: Race in security/selinux/hooks.c on isec->sclass and isec->sid usage, Stephen Smalley
    • Re: Race in security/selinux/hooks.c on isec->sclass and isec->sid usage, Paul Moore
      • Re: Race in security/selinux/hooks.c on isec->sclass and isec->sid usage, Stephen Smalley
        • Re: Race in security/selinux/hooks.c on isec->sclass and isec->sid usage, Paul Moore
          • Re: Race in security/selinux/hooks.c on isec->sclass and isec->sid usage, Stephen Smalley
• [PATCH] userfaultfd: fix return error if mmap_changing is non-zero in MOVE ioctl, Lokesh Gidra
  • Re: [PATCH] userfaultfd: fix return error if mmap_changing is non-zero in MOVE ioctl, Suren Baghdasaryan
  • Re: [PATCH] userfaultfd: fix return error if mmap_changing is non-zero in MOVE ioctl, Mike Rapoport
• [PATCH] userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb, Lokesh Gidra
  • Re: [PATCH] userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb, Andrew Morton
    • Re: [PATCH] userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb, Axel Rasmussen
    • Message not available
      • Re: [PATCH] userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb, Mike Rapoport
• [PATCH v9 00/25] security: Move IMA and EVM to the LSM infrastructure, Roberto Sassu
  • [PATCH v9 01/25] ima: Align ima_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v9 1/25] ima: Align ima_inode_post_setattr() definition with LSM infrastructure, Paul Moore
  • [PATCH v9 02/25] ima: Align ima_file_mprotect() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v9 2/25] ima: Align ima_file_mprotect() definition with LSM infrastructure, Paul Moore
  • [PATCH v9 03/25] ima: Align ima_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v9 3/25] ima: Align ima_inode_setxattr() definition with LSM infrastructure, Paul Moore
  • [PATCH v9 05/25] ima: Align ima_post_read_file() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v9 5/25] ima: Align ima_post_read_file() definition with LSM infrastructure, Paul Moore
  • [PATCH v9 06/25] evm: Align evm_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v9 6/25] evm: Align evm_inode_post_setattr() definition with LSM infrastructure, Paul Moore
  • [PATCH v9 07/25] evm: Align evm_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v9 7/25] evm: Align evm_inode_setxattr() definition with LSM infrastructure, Paul Moore
  • [PATCH v9 08/25] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v9 8/25] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure, Paul Moore
  • [PATCH v9 09/25] security: Align inode_setattr hook definition with EVM, Roberto Sassu
    • Re: [PATCH v9 9/25] security: Align inode_setattr hook definition with EVM, Paul Moore
  • [PATCH v9 10/25] security: Introduce inode_post_setattr hook, Roberto Sassu
    • Re: [PATCH v9 10/25] security: Introduce inode_post_setattr hook, Paul Moore
    • Re: [PATCH v9 10/25] security: Introduce inode_post_setattr hook, Christian Brauner
  • [PATCH v9 11/25] security: Introduce inode_post_removexattr hook, Roberto Sassu
    • Re: [PATCH v9 11/25] security: Introduce inode_post_removexattr hook, Paul Moore
    • Re: [PATCH v9 11/25] security: Introduce inode_post_removexattr hook, Christian Brauner
  • [PATCH v9 12/25] security: Introduce file_post_open hook, Roberto Sassu
    • Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Paul Moore
    • Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Christian Brauner
      • Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Christian Brauner
    • Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Christian Brauner
      • Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Roberto Sassu
        • Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Christian Brauner
          • Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Roberto Sassu
    • Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Mimi Zohar
      • Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Paul Moore
        • Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Roberto Sassu
          • Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Paul Moore
            • Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Mimi Zohar
              • Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Paul Moore
                • Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Mimi Zohar
                  • Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Paul Moore
  • [PATCH v9 14/25] security: Introduce path_post_mknod hook, Roberto Sassu
    • Re: [PATCH v9 14/25] security: Introduce path_post_mknod hook, Paul Moore
    • Re: [PATCH v9 14/25] security: Introduce path_post_mknod hook, Christian Brauner
    • Re: [PATCH v9 14/25] security: Introduce path_post_mknod hook, Stefan Berger
  • [PATCH v9 15/25] security: Introduce inode_post_create_tmpfile hook, Roberto Sassu
    • Re: [PATCH v9 15/25] security: Introduce inode_post_create_tmpfile hook, Paul Moore
    • Re: [PATCH v9 15/25] security: Introduce inode_post_create_tmpfile hook, Christian Brauner
    • Re: [PATCH v9 15/25] security: Introduce inode_post_create_tmpfile hook, Stefan Berger
  • [PATCH v9 16/25] security: Introduce inode_post_set_acl hook, Roberto Sassu
    • Re: [PATCH v9 16/25] security: Introduce inode_post_set_acl hook, Paul Moore
    • Re: [PATCH v9 16/25] security: Introduce inode_post_set_acl hook, Christian Brauner
  • [PATCH v9 17/25] security: Introduce inode_post_remove_acl hook, Roberto Sassu
    • Re: [PATCH v9 17/25] security: Introduce inode_post_remove_acl hook, Paul Moore
    • Re: [PATCH v9 17/25] security: Introduce inode_post_remove_acl hook, Christian Brauner
  • [PATCH v9 18/25] security: Introduce key_post_create_or_update hook, Roberto Sassu
    • Re: [PATCH v9 18/25] security: Introduce key_post_create_or_update hook, Paul Moore
  • [PATCH v9 19/25] integrity: Move integrity_kernel_module_request() to IMA, Roberto Sassu
    • Re: [PATCH v9 19/25] integrity: Move integrity_kernel_module_request() to IMA, Paul Moore
    • Re: [PATCH v9 19/25] integrity: Move integrity_kernel_module_request() to IMA, Stefan Berger
      • Re: [PATCH v9 19/25] integrity: Move integrity_kernel_module_request() to IMA, Paul Moore
        • Re: [PATCH v9 19/25] integrity: Move integrity_kernel_module_request() to IMA, Stefan Berger
          • Re: [PATCH v9 19/25] integrity: Move integrity_kernel_module_request() to IMA, Roberto Sassu
            • Re: [PATCH v9 19/25] integrity: Move integrity_kernel_module_request() to IMA, Stefan Berger
              • Re: [PATCH v9 19/25] integrity: Move integrity_kernel_module_request() to IMA, Roberto Sassu
  • [PATCH v9 20/25] ima: Move to LSM infrastructure, Roberto Sassu
    • Re: [PATCH v9 20/25] ima: Move to LSM infrastructure, Casey Schaufler
    • Re: [PATCH v9 20/25] ima: Move to LSM infrastructure, Paul Moore
    • Re: [PATCH v9 20/25] ima: Move to LSM infrastructure, Christian Brauner
    • Re: [PATCH v9 20/25] ima: Move to LSM infrastructure, Stefan Berger
  • [PATCH v9 21/25] ima: Move IMA-Appraisal to LSM infrastructure, Roberto Sassu
    • Re: [PATCH v9 21/25] ima: Move IMA-Appraisal to LSM infrastructure, Casey Schaufler
    • Re: [PATCH v9 21/25] ima: Move IMA-Appraisal to LSM infrastructure, Paul Moore
    • Re: [PATCH v9 21/25] ima: Move IMA-Appraisal to LSM infrastructure, Christian Brauner
  • [PATCH v9 22/25] evm: Move to LSM infrastructure, Roberto Sassu
    • Re: [PATCH v9 22/25] evm: Move to LSM infrastructure, Paul Moore
    • Re: [PATCH v9 22/25] evm: Move to LSM infrastructure, Christian Brauner
    • Re: [PATCH v9 22/25] evm: Move to LSM infrastructure, Stefan Berger
  • [PATCH v9 23/25] evm: Make it independent from 'integrity' LSM, Roberto Sassu
    • Re: [PATCH v9 23/25] evm: Make it independent from 'integrity' LSM, Casey Schaufler
    • Re: [PATCH v9 23/25] evm: Make it independent from 'integrity' LSM, Paul Moore
    • Re: [PATCH v9 23/25] evm: Make it independent from 'integrity' LSM, Stefan Berger
  • [PATCH v9 24/25] ima: Make it independent from 'integrity' LSM, Roberto Sassu
    • Re: [PATCH v9 24/25] ima: Make it independent from 'integrity' LSM, Casey Schaufler
    • Re: [PATCH v9 24/25] ima: Make it independent from 'integrity' LSM, Stefan Berger
  • [PATCH v9 25/25] integrity: Remove LSM, Roberto Sassu
    • Re: [PATCH v9 25/25] integrity: Remove LSM, Casey Schaufler
    • Re: [PATCH v9 25/25] integrity: Remove LSM, Paul Moore
    • Re: [PATCH v9 25/25] integrity: Remove LSM, Stefan Berger
  • [PATCH v9 04/25] ima: Align ima_inode_removexattr() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v9 4/25] ima: Align ima_inode_removexattr() definition with LSM infrastructure, Paul Moore
  • [PATCH v9 13/25] security: Introduce file_release hook, Roberto Sassu
    • Re: [PATCH v9 13/25] security: Introduce file_release hook, Al Viro
      • Re: [PATCH v9 13/25] security: Introduce file_release hook, Roberto Sassu
        • Re: [PATCH v9 13/25] security: Introduce file_release hook, Casey Schaufler
          • Re: [PATCH v9 13/25] security: Introduce file_release hook, Al Viro
            • Re: [PATCH v9 13/25] security: Introduce file_release hook, Casey Schaufler
    • Re: [PATCH v9 13/25] security: Introduce file_release hook, Paul Moore
    • Re: [PATCH v9 13/25] security: Introduce file_release hook, Christian Brauner
    • Re: [PATCH v9 13/25] security: Introduce file_release hook, Stefan Berger
  • Re: [PATCH v9 0/25] security: Move IMA and EVM to the LSM infrastructure, Paul Moore
    • Re: [PATCH v9 0/25] security: Move IMA and EVM to the LSM infrastructure, Roberto Sassu
      • Re: [PATCH v9 0/25] security: Move IMA and EVM to the LSM infrastructure, Paul Moore
• [PATCH] libselinux: use reentrant strtok_r(3), Christian Göttsche
  • Re: [PATCH] libselinux: use reentrant strtok_r(3), James Carter
    • Re: [PATCH] libselinux: use reentrant strtok_r(3), James Carter
• ANN: SELint 1.5, Daniel Burgener
• [PATCH] libsepol/src/Makefile: fix reallocarray detection, Fabrice Fontaine
  • Re: [PATCH] libsepol/src/Makefile: fix reallocarray detection, James Carter
    • Re: [PATCH] libsepol/src/Makefile: fix reallocarray detection, James Carter
• [RFC PATCH] libselinux: disable capturing in fcontext matching, Christian Göttsche
  • Re: [RFC PATCH] libselinux: disable capturing in fcontext matching, James Carter
• [GIT PULL] selinux/selinux-pr-20240105, Paul Moore
  • Re: [GIT PULL] selinux/selinux-pr-20240105, pr-tracker-bot
• [PATCH] libselinux: Fix ordering of arguments to calloc, James Carter
  • Re: [PATCH] libselinux: Fix ordering of arguments to calloc, James Carter
• [PATCH 1/4] libsepol: reorder calloc(3) arguments, Christian Göttsche
  • [PATCH 2/4] libselinux: reorder calloc(3) arguments, Christian Göttsche
  • [PATCH 4/4] mcstrans: check memory allocations, Christian Göttsche
  • [PATCH 3/4] sandbox: do not override warning CFLAGS, Christian Göttsche
  • Re: [PATCH 1/4] libsepol: reorder calloc(3) arguments, James Carter
    • Re: [PATCH 1/4] libsepol: reorder calloc(3) arguments, James Carter
• SELinux style fixes, Paul Moore
  • [PATCH 03/15] selinux: align avc_has_perm_noaudit() prototype with definition, Paul Moore
  • [PATCH 02/15] selinux: fix style issues in security/selinux/include/avc.h, Paul Moore
  • [PATCH 01/15] selinux: fix style issues in security/selinux/include/audit.h, Paul Moore
    • Re: [PATCH 1/15] selinux: fix style issues in security/selinux/include/audit.h, Paul Moore
  • [PATCH 06/15] selinux: fix style issues in security/selinux/include/conditional.h, Paul Moore
  • [PATCH 04/15] selinux: fix style issues in security/selinux/include/avc_ss.h, Paul Moore
  • [PATCH 05/15] selinux: fix style issues in security/selinux/include/classmap.h, Paul Moore
  • [PATCH 08/15] selinux: fix style issues in security/selinux/include/netif.h, Paul Moore
  • [PATCH 09/15] selinux: fix style issues with security/selinux/include/netlabel.h, Paul Moore
  • [PATCH 07/15] selinux: fix style issues in security/selinux/include/ima.h, Paul Moore
  • [PATCH 10/15] selinux: fix style issues in security/selinux/include/objsec.h, Paul Moore
  • [PATCH 11/15] selinux: fix style issues in security/selinux/include/policycap.h, Paul Moore
  • [PATCH 13/15] selinux: fix style issues in security/selinux/include/security.h, Paul Moore
  • [PATCH 12/15] selinux: fix style issues with security/selinux/include/policycap_names.h, Paul Moore
  • [PATCH 14/15] selinux: fix style issues in security/selinux/include/xfrm.h, Paul Moore
  • [PATCH 15/15] selinux: fix style issues in security/selinux/include/initial_sid_to_string.h, Paul Moore
• [PATCH] MAINTAINERS: drop Eric Paris from his SELinux role, Paul Moore
  • Re: [PATCH] MAINTAINERS: drop Eric Paris from his SELinux role, Stephen Smalley
  • Re: [PATCH] MAINTAINERS: drop Eric Paris from his SELinux role, Paul Moore
• [PATCH] MAINTAINERS: add Ondrej Mosnacek as a SELinux reviewer, Paul Moore
  • Re: [PATCH] MAINTAINERS: add Ondrej Mosnacek as a SELinux reviewer, Stephen Smalley
  • Re: [PATCH] MAINTAINERS: add Ondrej Mosnacek as a SELinux reviewer, Ondrej Mosnacek
  • Re: [PATCH] MAINTAINERS: add Ondrej Mosnacek as a SELinux reviewer, Paul Moore
• [PATCH 01/11] libselinux/man: mention errno for regex compilation failure, Christian Göttsche
  • [PATCH 02/11] libselinux/man: sync selinux_check_securetty_context(3), Christian Göttsche
  • [PATCH 06/11] libselinux: fail selabel_open(3) on invalid option, Christian Göttsche
  • [PATCH 04/11] libselinux/utils: improve compute_av output, Christian Göttsche
  • [PATCH 03/11] libselinux/utils: free allocated resources, Christian Göttsche
  • [PATCH 05/11] libselinux: align SELABEL_OPT_DIGEST usage with man page, Christian Göttsche
  • [PATCH 07/11] libselinux: use logging wrapper in getseuser(3) and get_default_context(3) family, Christian Göttsche
  • [PATCH 09/11] libsemanage: support huge passwd entries, Christian Göttsche
  • [PATCH 08/11] libselinux: support huge passwd/group entries, Christian Göttsche
  • [PATCH 11/11] setfiles: avoid unsigned integer underflow, Christian Göttsche
  • [PATCH 10/11] libselinux: enable usage with pedantic UB sanitizers, Christian Göttsche
  • Re: [PATCH 01/11] libselinux/man: mention errno for regex compilation failure, James Carter
    • Re: [PATCH 01/11] libselinux/man: mention errno for regex compilation failure, James Carter
• [PATCH] SELinux: Introduce security_file_ioctl_compat hook, Alfred Piccioni
  • Re: [PATCH] SELinux: Introduce security_file_ioctl_compat hook, Alfred Piccioni
  • Re: [PATCH] SELinux: Introduce security_file_ioctl_compat hook, Stephen Smalley
    • Re: [PATCH] SELinux: Introduce security_file_ioctl_compat hook, Stephen Smalley
  • Re: [PATCH] SELinux: Introduce security_file_ioctl_compat hook, Casey Schaufler
    • Re: [PATCH] SELinux: Introduce security_file_ioctl_compat hook, Stephen Smalley
      • Re: [PATCH] SELinux: Introduce security_file_ioctl_compat hook, Casey Schaufler
• [PATCH v8 00/24] security: Move IMA and EVM to the LSM infrastructure, Roberto Sassu
  • [PATCH v8 01/24] ima: Align ima_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v8 02/24] ima: Align ima_file_mprotect() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v8 03/24] ima: Align ima_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v8 04/24] ima: Align ima_inode_removexattr() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v8 05/24] ima: Align ima_post_read_file() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v8 06/24] evm: Align evm_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v8 07/24] evm: Align evm_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v8 08/24] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v8 09/24] security: Align inode_setattr hook definition with EVM, Roberto Sassu
  • [PATCH v8 10/24] security: Introduce inode_post_setattr hook, Roberto Sassu
  • [PATCH v8 11/24] security: Introduce inode_post_removexattr hook, Roberto Sassu
    • Re: [PATCH v8 11/24] security: Introduce inode_post_removexattr hook, Casey Schaufler
  • [PATCH v8 12/24] security: Introduce file_post_open hook, Roberto Sassu
  • [PATCH v8 13/24] security: Introduce file_release hook, Roberto Sassu
    • Re: [PATCH v8 13/24] security: Introduce file_release hook, Casey Schaufler
  • [PATCH v8 14/24] security: Introduce path_post_mknod hook, Roberto Sassu
  • [PATCH v8 15/24] security: Introduce inode_post_create_tmpfile hook, Roberto Sassu
  • [PATCH v8 16/24] security: Introduce inode_post_set_acl hook, Roberto Sassu
  • [PATCH v8 17/24] security: Introduce inode_post_remove_acl hook, Roberto Sassu
  • [PATCH v8 18/24] security: Introduce key_post_create_or_update hook, Roberto Sassu
  • [PATCH v8 19/24] ima: Move to LSM infrastructure, Roberto Sassu
    • Re: [PATCH v8 19/24] ima: Move to LSM infrastructure, Mimi Zohar
      • Re: [PATCH v8 19/24] ima: Move to LSM infrastructure, Casey Schaufler
        • Re: [PATCH v8 19/24] ima: Move to LSM infrastructure, Mimi Zohar
          • Re: [PATCH v8 19/24] ima: Move to LSM infrastructure, Casey Schaufler
  • [PATCH v8 20/24] ima: Move IMA-Appraisal to LSM infrastructure, Roberto Sassu
    • Re: [PATCH v8 20/24] ima: Move IMA-Appraisal to LSM infrastructure, Mimi Zohar
  • [PATCH v8 21/24] evm: Move to LSM infrastructure, Roberto Sassu
    • Re: [PATCH v8 21/24] evm: Move to LSM infrastructure, Casey Schaufler
    • Re: [PATCH v8 21/24] evm: Move to LSM infrastructure, Mimi Zohar
      • Re: [PATCH v8 21/24] evm: Move to LSM infrastructure, Roberto Sassu
        • Re: [PATCH v8 21/24] evm: Move to LSM infrastructure, Mimi Zohar
  • [PATCH v8 22/24] evm: Make it independent from 'integrity' LSM, Roberto Sassu
    • Re: [PATCH v8 22/24] evm: Make it independent from 'integrity' LSM, Mimi Zohar
  • [PATCH v8 23/24] ima: Make it independent from 'integrity' LSM, Roberto Sassu
    • Re: [PATCH v8 23/24] ima: Make it independent from 'integrity' LSM, Roberto Sassu
    • Re: [PATCH v8 23/24] ima: Make it independent from 'integrity' LSM, Mimi Zohar
      • Re: [PATCH v8 23/24] ima: Make it independent from 'integrity' LSM, Roberto Sassu
        • Re: [PATCH v8 23/24] ima: Make it independent from 'integrity' LSM, Mimi Zohar
          • Re: [PATCH v8 23/24] ima: Make it independent from 'integrity' LSM, Roberto Sassu
  • [PATCH v8 24/24] integrity: Remove LSM, Roberto Sassu
• Fwd: SELinux mprotect EACCES/execheap for memory segment directly adjacent to heap, Bagas Sanjaya
  • Re: SELinux mprotect EACCES/execheap for memory segment directly adjacent to heap, Ondrej Mosnacek
• [UTIL-LINUX PATCH] sulogin: relabel terminal according to SELinux policy, Christian Göttsche
  • Re: [UTIL-LINUX PATCH] sulogin: relabel terminal according to SELinux policy, James Carter
    • Re: [UTIL-LINUX PATCH] sulogin: relabel terminal according to SELinux policy, Christian Göttsche
• [PATCH v2] libsepol: Use a dynamic buffer in sepol_av_to_string(), James Carter
  • Re: [PATCH v2] libsepol: Use a dynamic buffer in sepol_av_to_string(), Christian Göttsche
    • Re: [PATCH v2] libsepol: Use a dynamic buffer in sepol_av_to_string(), James Carter
  • Re: [PATCH v2] libsepol: Use a dynamic buffer in sepol_av_to_string(), James Carter
• [PATCH v5 0/4] vduse: add support for networking devices, Maxime Coquelin
  • [PATCH v5 1/4] vduse: validate block features only with block devices, Maxime Coquelin
  • [PATCH v5 2/4] vduse: Temporarily disable control queue features, Maxime Coquelin
    • Re: [PATCH v5 2/4] vduse: Temporarily disable control queue features, Jason Wang
      • Re: [PATCH v5 2/4] vduse: Temporarily disable control queue features, Maxime Coquelin
        • Re: [PATCH v5 2/4] vduse: Temporarily disable control queue features, Jason Wang
          • Re: [PATCH v5 2/4] vduse: Temporarily disable control queue features, Maxime Coquelin
            • Re: [PATCH v5 2/4] vduse: Temporarily disable control queue features, Jason Wang
  • [PATCH v5 3/4] vduse: enable Virtio-net device type, Maxime Coquelin
  • [PATCH v5 4/4] vduse: Add LSM hook to check Virtio device type, Maxime Coquelin
    • Re: [PATCH v5 4/4] vduse: Add LSM hook to check Virtio device type, Casey Schaufler
      • Re: [PATCH v5 4/4] vduse: Add LSM hook to check Virtio device type, Michael S. Tsirkin
        • Re: [PATCH v5 4/4] vduse: Add LSM hook to check Virtio device type, Casey Schaufler
          • Re: [PATCH v5 4/4] vduse: Add LSM hook to check Virtio device type, Serge E. Hallyn
    • Re: [PATCH v5 4/4] vduse: Add LSM hook to check Virtio device type, Stephen Smalley
      • Re: [PATCH v5 4/4] vduse: Add LSM hook to check Virtio device type, Stephen Smalley
        • Re: [PATCH v5 4/4] vduse: Add LSM hook to check Virtio device type, Maxime Coquelin
      • Re: [PATCH v5 4/4] vduse: Add LSM hook to check Virtio device type, Paul Moore
• [PATCH] libsepol: Use a dynamic buffer in sepol_av_to_string(), James Carter
  • Re: [PATCH] libsepol: Use a dynamic buffer in sepol_av_to_string(), Christian Göttsche
    • Re: [PATCH] libsepol: Use a dynamic buffer in sepol_av_to_string(), James Carter
• [PATCH 1/3] libselinux: update const qualifier of parameters in man pages, Christian Göttsche
  • [PATCH 2/3] libselinux: always set errno on context translation failure, Christian Göttsche
  • [PATCH 3/3] libselinux: state setexecfilecon(3) sets errno on failure, Christian Göttsche
  • Re: [PATCH 1/3] libselinux: update const qualifier of parameters in man pages, James Carter
    • Re: [PATCH 1/3] libselinux: update const qualifier of parameters in man pages, James Carter
• [PATCH] libsepol: validate empty common classes in scope indices, Christian Göttsche
  • Re: [PATCH] libsepol: validate empty common classes in scope indices, James Carter
    • Re: [PATCH] libsepol: validate empty common classes in scope indices, James Carter
• [RFC PATCH] libsepol: handle long permission names in sepol_av_to_string(), Christian Göttsche
  • Re: [RFC PATCH] libsepol: handle long permission names in sepol_av_to_string(), James Carter
    • Re: [RFC PATCH] libsepol: handle long permission names in sepol_av_to_string(), Stephen Smalley
      • Re: [RFC PATCH] libsepol: handle long permission names in sepol_av_to_string(), James Carter
• [PATCH 1/3] libsepol: constify tokenized input, Christian Göttsche
  • [PATCH 2/3] libsepol: avoid integer overflow in add_i_to_a(), Christian Göttsche
  • [PATCH 3/3] libsepol: extended permission formatting cleanup, Christian Göttsche
  • Re: [PATCH 1/3] libsepol: constify tokenized input, James Carter
    • Re: [PATCH 1/3] libsepol: constify tokenized input, James Carter
• Where's 3.6-rc3 and plan with 3.6 release, Petr Lautrbach
  • Re: Where's 3.6-rc3 and plan with 3.6 release, Johannes Segitz
    • Re: Where's 3.6-rc3 and plan with 3.6 release, James Carter
      • Re: Where's 3.6-rc3 and plan with 3.6 release, Petr Lautrbach
• [PATCH] libsepol: validate common classes in scope indices, Christian Göttsche
  • Re: [PATCH] libsepol: validate common classes in scope indices, James Carter
• [PATCH v2] checkpolicy/dispol: misc updates, Christian Göttsche
  • Re: [PATCH v2] checkpolicy/dispol: misc updates, James Carter
    • Re: [PATCH v2] checkpolicy/dispol: misc updates, James Carter
• [RFC PATCH] libsepol: validate permission identifier length, Christian Göttsche
  • Re: [RFC PATCH] libsepol: validate permission identifier length, Stephen Smalley
    • Re: [RFC PATCH] libsepol: validate permission identifier length, Stephen Smalley
    • Re: [RFC PATCH] libsepol: validate permission identifier length, James Carter
• ANN: SETools 4.4.4, Chris PeBenito
• [PATCH] mm: fix VMA heap bounds checking, Kefeng Wang
  • Re: [PATCH] mm: fix VMA heap bounds checking, Andrew Morton
    • Re: [PATCH] mm: fix VMA heap bounds checking, Kefeng Wang
• [PATCH] python: Harden more tools agains "rogue" modules, Vit Mojzis
  • Re: [PATCH] python: Harden more tools agains "rogue" modules, James Carter
    • Re: [PATCH] python: Harden more tools agains "rogue" modules, James Carter
• [PATCH 0/11] vfs: inode cache scalability improvements, Dave Chinner
  • [PATCH 06/11] vfs: factor out inode hash head calculation, Dave Chinner
    • Re: [PATCH 06/11] vfs: factor out inode hash head calculation, Al Viro
  • [PATCH 07/11] hlist-bl: add hlist_bl_fake(), Dave Chinner
    • Re: [PATCH 07/11] hlist-bl: add hlist_bl_fake(), Al Viro
  • [PATCH 05/11] selinux: use dlist for isec inode list, Dave Chinner
    • Re: [PATCH 05/11] selinux: use dlist for isec inode list, Paul Moore
      • Re: [PATCH 05/11] selinux: use dlist for isec inode list, Dave Chinner
        • Re: [PATCH 05/11] selinux: use dlist for isec inode list, Paul Moore
  • [PATCH 02/11] vfs: Remove unnecessary list_for_each_entry_safe() variants, Dave Chinner