Security Enhanced Linux (SELINUX)
[Prev Page][Next Page]
- Re: [PATCH] python/semanage: Do not sort local fcontext definitions, (continued)
- [PATCH 5.4,4.19] lsm: new security_file_ioctl_compat() hook,
Eric Biggers
- [PATCH v3 0/3] per-vma locks in userfaultfd,
Lokesh Gidra
- Calls to vfs_setlease() from NFSD code cause unnecessary CAP_LEASE security checks,
Ondrej Mosnacek
- [PATCH v2] selinux: only filter copy-up xattrs following initialization,
David Disseldorp
- [RFC PATCH v2 0/9] libselinux: rework selabel_file(5) database,
Christian Göttsche
- [PATCH 1/3] libsepol: ensure transitivity in compare functions,
Christian Göttsche
- [PATCH] selinux: correct return values in selinux_socket_getpeersec_dgram(),
Paul Moore
- [PATCH v2 0/3] per-vma locks in userfaultfd,
Lokesh Gidra
- [PATCH] security: fix no-op hook logic in security_inode_{set,remove}xattr(),
Ondrej Mosnacek
- [PATCH] selinux: Use kfree_sensitive for certain code paths of security,
Ronald Monthero
- [PATCH] lsm: fix default return value of the socket_getpeersec_* hooks,
Ondrej Mosnacek
- [PATCH 1/3] userfaultfd: move userfaultfd_ctx struct to header file,
Lokesh Gidra
- [PATCH] security: fix the logic in security_inode_getsecctx(),
Ondrej Mosnacek
- selinux-testsuite nfs tests?,
Stephen Smalley
- [PATCH] python/semanage: Allow modifying records on "add",
Vit Mojzis
- [PATCH] io_uring: enable audit and restrict cred override for IORING_OP_FIXED_FD_INSTALL,
Paul Moore
- [PATCH 01/15] checkpolicy: add libfuzz based fuzzer,
Christian Göttsche
- [PATCH 02/15] checkpolicy: cleanup resources on parse error, Christian Göttsche
- [PATCH 04/15] checkpolicy: free ebitmap on error, Christian Göttsche
- [PATCH 03/15] checkpolicy: cleanup identifiers on error, Christian Göttsche
- [PATCH 05/15] checkpolicy: check allocation and free memory on error at type definition, Christian Göttsche
- [PATCH 08/15] checkpolicy: bail out on invalid role, Christian Göttsche
- [PATCH 09/15] libsepol: use typedef, Christian Göttsche
- [PATCH 06/15] checkpolicy: clean expression on error, Christian Göttsche
- [PATCH 07/15] checkpolicy: call YYABORT on parse errors, Christian Göttsche
- [PATCH 11/15] checkpolicy: fix use-after-free on invalid sens alias, Christian Göttsche
- [PATCH 10/15] libsepol: add copy member to level_datum, Christian Göttsche
- [PATCH 13/15] checkpolicy: free temporary bounds type, Christian Göttsche
- [PATCH 12/15] checkpolicy: provide more descriptive error messages, Christian Göttsche
- [PATCH 15/15] checkpolicy: misc policy_define.c cleanup, Christian Göttsche
- [PATCH 14/15] checkpolicy: avoid assigning garbage values, Christian Göttsche
- Re: [PATCH 01/15] checkpolicy: add libfuzz based fuzzer, James Carter
- IORING_OP_FIXED_FD_INSTALL and audit/LSM interactions,
Paul Moore
- [PATCH] selinux: reduce the object class calculations at inode init time,
Paul Moore
- Race in security/selinux/hooks.c on isec->sclass and isec->sid usage,
Gabriel Ryan
- [PATCH] userfaultfd: fix return error if mmap_changing is non-zero in MOVE ioctl,
Lokesh Gidra
- [PATCH] userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb,
Lokesh Gidra
[PATCH v9 00/25] security: Move IMA and EVM to the LSM infrastructure,
Roberto Sassu
- [PATCH v9 01/25] ima: Align ima_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v9 02/25] ima: Align ima_file_mprotect() definition with LSM infrastructure, Roberto Sassu
- [PATCH v9 03/25] ima: Align ima_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v9 05/25] ima: Align ima_post_read_file() definition with LSM infrastructure, Roberto Sassu
- [PATCH v9 06/25] evm: Align evm_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v9 07/25] evm: Align evm_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v9 08/25] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v9 09/25] security: Align inode_setattr hook definition with EVM, Roberto Sassu
- [PATCH v9 10/25] security: Introduce inode_post_setattr hook, Roberto Sassu
- [PATCH v9 11/25] security: Introduce inode_post_removexattr hook, Roberto Sassu
- [PATCH v9 12/25] security: Introduce file_post_open hook, Roberto Sassu
- [PATCH v9 14/25] security: Introduce path_post_mknod hook, Roberto Sassu
- [PATCH v9 15/25] security: Introduce inode_post_create_tmpfile hook, Roberto Sassu
- [PATCH v9 16/25] security: Introduce inode_post_set_acl hook, Roberto Sassu
- [PATCH v9 17/25] security: Introduce inode_post_remove_acl hook, Roberto Sassu
- [PATCH v9 18/25] security: Introduce key_post_create_or_update hook, Roberto Sassu
- [PATCH v9 19/25] integrity: Move integrity_kernel_module_request() to IMA, Roberto Sassu
- [PATCH v9 20/25] ima: Move to LSM infrastructure, Roberto Sassu
- [PATCH v9 21/25] ima: Move IMA-Appraisal to LSM infrastructure, Roberto Sassu
- [PATCH v9 22/25] evm: Move to LSM infrastructure, Roberto Sassu
- [PATCH v9 23/25] evm: Make it independent from 'integrity' LSM, Roberto Sassu
- [PATCH v9 24/25] ima: Make it independent from 'integrity' LSM, Roberto Sassu
- [PATCH v9 25/25] integrity: Remove LSM, Roberto Sassu
- [PATCH v9 04/25] ima: Align ima_inode_removexattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v9 13/25] security: Introduce file_release hook, Roberto Sassu
- Re: [PATCH v9 0/25] security: Move IMA and EVM to the LSM infrastructure, Paul Moore
[PATCH] libselinux: use reentrant strtok_r(3),
Christian Göttsche
ANN: SELint 1.5, Daniel Burgener
[PATCH] libsepol/src/Makefile: fix reallocarray detection,
Fabrice Fontaine
[RFC PATCH] libselinux: disable capturing in fcontext matching,
Christian Göttsche
[GIT PULL] selinux/selinux-pr-20240105,
Paul Moore
[PATCH] libselinux: Fix ordering of arguments to calloc,
James Carter
[PATCH 1/4] libsepol: reorder calloc(3) arguments,
Christian Göttsche
SELinux style fixes,
Paul Moore
- [PATCH 03/15] selinux: align avc_has_perm_noaudit() prototype with definition, Paul Moore
- [PATCH 02/15] selinux: fix style issues in security/selinux/include/avc.h, Paul Moore
- [PATCH 01/15] selinux: fix style issues in security/selinux/include/audit.h, Paul Moore
- [PATCH 06/15] selinux: fix style issues in security/selinux/include/conditional.h, Paul Moore
- [PATCH 04/15] selinux: fix style issues in security/selinux/include/avc_ss.h, Paul Moore
- [PATCH 05/15] selinux: fix style issues in security/selinux/include/classmap.h, Paul Moore
- [PATCH 08/15] selinux: fix style issues in security/selinux/include/netif.h, Paul Moore
- [PATCH 09/15] selinux: fix style issues with security/selinux/include/netlabel.h, Paul Moore
- [PATCH 07/15] selinux: fix style issues in security/selinux/include/ima.h, Paul Moore
- [PATCH 10/15] selinux: fix style issues in security/selinux/include/objsec.h, Paul Moore
- [PATCH 11/15] selinux: fix style issues in security/selinux/include/policycap.h, Paul Moore
- [PATCH 13/15] selinux: fix style issues in security/selinux/include/security.h, Paul Moore
- [PATCH 12/15] selinux: fix style issues with security/selinux/include/policycap_names.h, Paul Moore
- [PATCH 14/15] selinux: fix style issues in security/selinux/include/xfrm.h, Paul Moore
- [PATCH 15/15] selinux: fix style issues in security/selinux/include/initial_sid_to_string.h, Paul Moore
[PATCH] MAINTAINERS: drop Eric Paris from his SELinux role,
Paul Moore
[PATCH] MAINTAINERS: add Ondrej Mosnacek as a SELinux reviewer,
Paul Moore
[PATCH 01/11] libselinux/man: mention errno for regex compilation failure,
Christian Göttsche
- [PATCH 02/11] libselinux/man: sync selinux_check_securetty_context(3), Christian Göttsche
- [PATCH 06/11] libselinux: fail selabel_open(3) on invalid option, Christian Göttsche
- [PATCH 04/11] libselinux/utils: improve compute_av output, Christian Göttsche
- [PATCH 03/11] libselinux/utils: free allocated resources, Christian Göttsche
- [PATCH 05/11] libselinux: align SELABEL_OPT_DIGEST usage with man page, Christian Göttsche
- [PATCH 07/11] libselinux: use logging wrapper in getseuser(3) and get_default_context(3) family, Christian Göttsche
- [PATCH 09/11] libsemanage: support huge passwd entries, Christian Göttsche
- [PATCH 08/11] libselinux: support huge passwd/group entries, Christian Göttsche
- [PATCH 11/11] setfiles: avoid unsigned integer underflow, Christian Göttsche
- [PATCH 10/11] libselinux: enable usage with pedantic UB sanitizers, Christian Göttsche
- Re: [PATCH 01/11] libselinux/man: mention errno for regex compilation failure, James Carter
[PATCH] SELinux: Introduce security_file_ioctl_compat hook,
Alfred Piccioni
[PATCH v8 00/24] security: Move IMA and EVM to the LSM infrastructure,
Roberto Sassu
- [PATCH v8 01/24] ima: Align ima_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v8 02/24] ima: Align ima_file_mprotect() definition with LSM infrastructure, Roberto Sassu
- [PATCH v8 03/24] ima: Align ima_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v8 04/24] ima: Align ima_inode_removexattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v8 05/24] ima: Align ima_post_read_file() definition with LSM infrastructure, Roberto Sassu
- [PATCH v8 06/24] evm: Align evm_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v8 07/24] evm: Align evm_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v8 08/24] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v8 09/24] security: Align inode_setattr hook definition with EVM, Roberto Sassu
- [PATCH v8 10/24] security: Introduce inode_post_setattr hook, Roberto Sassu
- [PATCH v8 11/24] security: Introduce inode_post_removexattr hook, Roberto Sassu
- [PATCH v8 12/24] security: Introduce file_post_open hook, Roberto Sassu
- [PATCH v8 13/24] security: Introduce file_release hook, Roberto Sassu
- [PATCH v8 14/24] security: Introduce path_post_mknod hook, Roberto Sassu
- [PATCH v8 15/24] security: Introduce inode_post_create_tmpfile hook, Roberto Sassu
- [PATCH v8 16/24] security: Introduce inode_post_set_acl hook, Roberto Sassu
- [PATCH v8 17/24] security: Introduce inode_post_remove_acl hook, Roberto Sassu
- [PATCH v8 18/24] security: Introduce key_post_create_or_update hook, Roberto Sassu
- [PATCH v8 19/24] ima: Move to LSM infrastructure, Roberto Sassu
- [PATCH v8 20/24] ima: Move IMA-Appraisal to LSM infrastructure, Roberto Sassu
- [PATCH v8 21/24] evm: Move to LSM infrastructure, Roberto Sassu
- [PATCH v8 22/24] evm: Make it independent from 'integrity' LSM, Roberto Sassu
- [PATCH v8 23/24] ima: Make it independent from 'integrity' LSM, Roberto Sassu
- [PATCH v8 24/24] integrity: Remove LSM, Roberto Sassu
Fwd: SELinux mprotect EACCES/execheap for memory segment directly adjacent to heap,
Bagas Sanjaya
[UTIL-LINUX PATCH] sulogin: relabel terminal according to SELinux policy,
Christian Göttsche
[PATCH v2] libsepol: Use a dynamic buffer in sepol_av_to_string(),
James Carter
[PATCH v5 0/4] vduse: add support for networking devices,
Maxime Coquelin
[PATCH] libsepol: Use a dynamic buffer in sepol_av_to_string(),
James Carter
[PATCH 1/3] libselinux: update const qualifier of parameters in man pages,
Christian Göttsche
[PATCH] libsepol: validate empty common classes in scope indices,
Christian Göttsche
[RFC PATCH] libsepol: handle long permission names in sepol_av_to_string(),
Christian Göttsche
[PATCH 1/3] libsepol: constify tokenized input,
Christian Göttsche
Where's 3.6-rc3 and plan with 3.6 release,
Petr Lautrbach
[PATCH] libsepol: validate common classes in scope indices,
Christian Göttsche
[PATCH v2] checkpolicy/dispol: misc updates,
Christian Göttsche
[RFC PATCH] libsepol: validate permission identifier length,
Christian Göttsche
ANN: SETools 4.4.4, Chris PeBenito
[PATCH] mm: fix VMA heap bounds checking,
Kefeng Wang
[PATCH] python: Harden more tools agains "rogue" modules,
Vit Mojzis
[PATCH 0/11] vfs: inode cache scalability improvements,
Dave Chinner
- [PATCH 06/11] vfs: factor out inode hash head calculation, Dave Chinner
- [PATCH 07/11] hlist-bl: add hlist_bl_fake(), Dave Chinner
- [PATCH 05/11] selinux: use dlist for isec inode list, Dave Chinner
- [PATCH 02/11] vfs: Remove unnecessary list_for_each_entry_safe() variants, Dave Chinner
- [PATCH 09/11] hash-bl: explicitly initialise hash-bl heads, Dave Chinner
- [PATCH 11/11] hlist-bl: introduced nested locking for dm-snap, Dave Chinner
- [PATCH 04/11] lib/dlock-list: Make sibling CPUs share the same linked list, Dave Chinner
- [PATCH 01/11] lib/dlock-list: Distributed and lock-protected lists, Dave Chinner
- [PATCH 10/11] list_bl: don't use bit locks for PREEMPT_RT or lockdep, Dave Chinner
- [PATCH 08/11] vfs: inode cache conversion to hash-bl, Dave Chinner
- [PATCH 03/11] vfs: Use dlock list for superblock's inode list, Dave Chinner
- Re: [PATCH 0/11] vfs: inode cache scalability improvements, Kent Overstreet
[PATCH v6] checkpolicy,libsepol: add prefix/suffix matching to filename type transitions,
Juraj Marcin
setools build is broken by 61f21385004 ("libsepol: rename struct member"), revert?,
Petr Lautrbach
[PATCH] libsemanage: fix src/genhomedircon.c build on `gcc-14` (`-Werror=alloc-size`),
Sergei Trofimovich
[PATCH v2 0/3] clean up io_uring cmd header structure,
Pavel Begunkov
[PATCH v7 19/23] ima: Move to LSM infrastructure,
Roberto Sassu
[PATCH] selinux: bring the comment about multithreaded process handling back,
Munehisa Kamata
[PATCH] libsepol/cil: Clear AST node after destroying bad filecon rule,
James Carter
[PATCH 1/7] libsepol: validate conditional type rules have a simple default type,
Christian Göttsche
[PATCH] libsepol: simplify string formatting,
Christian Göttsche
[PATCH testsuite] defconfig: add NF_TABLES dependency for netlink_socket tests to pass,
Alan Wandke
[PATCH v5] checkpolicy,libsepol: add prefix/suffix matching to filename type transitions,
Juraj Marcin
PSA: this list has moved to new vger infra (no action required), Konstantin Ryabitsev
ANN: SELinux userspace 3.6-rc2 release,
Petr Lautrbach
getpolicyload returns 0, 2, 3, 4, ...,
Petr Lautrbach
[PATCH v4] checkpolicy,libsepol: add prefix/suffix matching to filename type transitions,
Juraj Marcin
[PATCH v4] selinux: add prefix/suffix matching to filename type transitions,
Juraj Marcin
[PATCH v6 00/25] security: Move IMA and EVM to the LSM infrastructure,
Roberto Sassu
- [PATCH v6 01/25] ima: Align ima_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v6 05/25] ima: Align ima_post_read_file() definition with LSM infrastructure, Roberto Sassu
- [PATCH v6 03/25] ima: Align ima_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v6 02/25] ima: Align ima_file_mprotect() definition with LSM infrastructure, Roberto Sassu
- [PATCH v6 04/25] ima: Align ima_inode_removexattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v6 06/25] evm: Align evm_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v6 07/25] evm: Align evm_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v6 08/25] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v6 09/25] security: Align inode_setattr hook definition with EVM, Roberto Sassu
- [PATCH v6 10/25] security: Introduce inode_post_setattr hook, Roberto Sassu
- [PATCH v6 11/25] security: Introduce inode_post_removexattr hook, Roberto Sassu
- [PATCH v6 12/25] security: Introduce file_post_open hook, Roberto Sassu
- [PATCH v6 13/25] security: Introduce file_release hook, Roberto Sassu
- [PATCH v6 14/25] security: Introduce path_post_mknod hook, Roberto Sassu
- [PATCH v6 15/25] security: Introduce inode_post_create_tmpfile hook, Roberto Sassu
- [PATCH v6 16/25] security: Introduce inode_post_set_acl hook, Roberto Sassu
- [PATCH v6 19/25] ima: Move to LSM infrastructure, Roberto Sassu
- [PATCH v6 17/25] security: Introduce inode_post_remove_acl hook, Roberto Sassu
- [PATCH v6 18/25] security: Introduce key_post_create_or_update hook, Roberto Sassu
- [PATCH v6 21/25] evm: Move to LSM infrastructure, Roberto Sassu
- [PATCH v6 24/25] integrity: Remove LSM, Roberto Sassu
- [PATCH v6 22/25] ima: Remove dependency on 'integrity' LSM, Roberto Sassu
- [PATCH v6 25/25] security: Enforce ordering of 'ima' and 'evm' LSMs, Roberto Sassu
- [PATCH v6 23/25] evm: Remove dependency on 'integrity' LSM, Roberto Sassu
- [PATCH v6 20/25] ima: Move IMA-Appraisal to LSM infrastructure, Roberto Sassu
[PATCH] sepolicy: port to dnf4 python API,
Petr Lautrbach
[PATCH v2 1/2] libsepol: avoid fixed sized format buffer for xperms,
Christian Göttsche
[PATCH 1/2] libsepol: avoid fixed sized format buffer for xperms,
Christian Göttsche
[PATCH v2] libsepol: add check for category value before printing,
luhuaxin1
[PATCH] MAINTAINERS: update the SELinux entry,
Paul Moore
[PATCH v3] selinux: introduce an initial SID for early boot processes,
Ondrej Mosnacek
[RFC PATCH] selinux: assorted hash table improvements,
Paul Moore
[PATCH v1] libsepol: add check for category value before printing,
luhuaxin1
[PATCH] libsepol: add check for category value before printing, l00564439
[PATCH] libsepol: validate common classes have at least one permissions,
Christian Göttsche
[PATCH] selinux: update filenametr_hash() to use full_name_hash(),
Paul Moore
Proposed feature: fine-grained file descriptors in SELinux,
Chris PeBenito
[PATCH] github: bump action dependencies,
Christian Göttsche
[PATCH] libsepol: update policy capabilities array,
Christian Göttsche
[PATCH 1/5] semodule_link: avoid NULL dereference on OOM,
Christian Göttsche
[Index of Archives]
[Selinux Refpolicy]
[Fedora Users]
[Fedora Desktop]
[Kernel]
[KDE Users]
[Gnome Users]