Security Enhanced Linux (SELINUX)

Date Index

[Prev Page][Next Page]

Re: [PATCH v2 0/3] Add support for extracting modules, (continued)
[PATCH] libselinux: test for file_contexts.bin format, Stephen Smalley
[PATCH] libselinux: add selabel_cmp interface and label_file backend, Stephen Smalley
[PATCH] sepolgen: convert cmp functions to key functions, Robert Kuska
- Re: [PATCH] sepolgen: convert cmp functions to key functions, Stephen Smalley
[PATCH] sepolgen: Decode output from Popen in Python3, Robert Kuska
- Re: [PATCH] sepolgen: Decode output from Popen in Python3, Stephen Smalley
How do you relabel all SELinux file contexts of an offline system's file system?, Bond Masuda
- Re: How do you relabel all SELinux file contexts of an offline system's file system?, Jason Zaman
  - Re: How do you relabel all SELinux file contexts of an offline system's file system?, Stephen Smalley
  - Re: How do you relabel all SELinux file contexts of an offline system's file system?, Bond Masuda
    - Re: How do you relabel all SELinux file contexts of an offline system's file system?, Bond Masuda
      - 答复: How do you relabel all SELinux file contexts of an offline system's file system?, rowan
      - Re: How do you relabel all SELinux file contexts of an offline system's file system?, Bond Masuda
        
        Re: How do you relabel all SELinux file contexts of an offline system's file system?, Stephen Smalley
        
        Re: How do you relabel all SELinux file contexts of an offline system's file system?, Bond Masuda
        
        Re: How do you relabel all SELinux file contexts of an offline system's file system?, Daniel J Walsh
[PATCH] libselinux: support specifying file_contexts.bin file path, Stephen Smalley
[PATCH] libselinux: support file_contexts.bin without file_contexts, Stephen Smalley
m4 synclines always 1?, Roberts, William C
- Re: m4 synclines always 1?, Stephen Smalley
[PATCH] checkpolicy: fix double free on name-based type transitions, Stephen Smalley
Re: [PATCH 1/7] fs: Add user namesapace member to struct super_block, Amir Goldstein
- Re: [PATCH 1/7] fs: Add user namesapace member to struct super_block, Eric W. Biederman
Does it matter where .cil modules are build., Dan
- Re: Does it matter where .cil modules are build., James Carter
  - Re: Does it matter where .cil modules are build., Dan
    - Re: Does it matter where .cil modules are build., Miroslav Grepl
      - Re: Does it matter where .cil modules are build., Dan
[PATCH] policycoreutils: Comment constraint rules in audit2allow and sepolgen output, Petr Lautrbach
- Re: [PATCH] policycoreutils: Comment constraint rules in audit2allow and sepolgen output, Stephen Smalley
[PATCH] semanage_migrate_store: add -r <root> option for migrating inside chroots, Petr Lautrbach
- Re: [PATCH] semanage_migrate_store: add -r <root> option for migrating inside chroots, Stephen Smalley
Android checkpolicy crash, Roberts, William C
- Re: Android checkpolicy crash, Stephen Smalley
  - Re: Android checkpolicy crash, Stephen Smalley
Improve Python 3 support in policycoreutils/semanage/seobject.py, Michal Srb
- [PATCH] policycoreutils/semanage: improve compatibility with Python 3 in seobject.py, Michal Srb
  - Re: [PATCH] policycoreutils/semanage: improve compatibility with Python 3 in seobject.py, Jason Zaman
    - Re: [PATCH] policycoreutils/semanage: improve compatibility with Python 3 in seobject.py, Michal Srb
[PATCH v2] libsepol: Replace sscanf in module_to_cil, Yuli Khodorkovskiy
- Re: [PATCH v2] libsepol: Replace sscanf in module_to_cil, Stephen Smalley
[PATCH 0/3] Add support for extracting modules, Yuli Khodorkovskiy
- [PATCH 2/3] libsemanage: Fix null pointer dereference in semanage_module_key_destroy, Yuli Khodorkovskiy
- [PATCH 3/3] policycoreutils/semodule: update semodule to allow extracting modules, Yuli Khodorkovskiy
  - Re: [PATCH 3/3] policycoreutils/semodule: update semodule to allow extracting modules, Sven Vermeulen
  - Re: [PATCH 3/3] policycoreutils/semodule: update semodule to allow extracting modules, Stephen Smalley
    - Re: [PATCH 3/3] policycoreutils/semodule: update semodule to allow extracting modules, James Carter
- [PATCH 1/3] libsemanage: Add ability to extract modules, Yuli Khodorkovskiy
[PATCH 0/2] Generalize tokenizer and remove sscanf calls from libsepol, Yuli Khodorkovskiy
- [PATCH 1/2] libselinux: generalize read_spec_entries for any delimiter, Yuli Khodorkovskiy
  - Re: [PATCH 1/2] libselinux: generalize read_spec_entries for any delimiter, Stephen Smalley
    - RE: [PATCH 1/2] libselinux: generalize read_spec_entries for any delimiter, Yuli Khodorkovskiy
- [PATCH 2/2] libsepol: Replace sscanf in module_to_cil, Yuli Khodorkovskiy
[PATCH v2] ipc: Use private shmem or hugetlbfs inodes for shm segments., Stephen Smalley
- Re: [PATCH v2] ipc: Use private shmem or hugetlbfs inodes for shm segments., Paul Moore
- Re: [PATCH v2] ipc: Use private shmem or hugetlbfs inodes for shm segments., Hugh Dickins
  - Re: [PATCH v2] ipc: Use private shmem or hugetlbfs inodes for shm segments., Stephen Smalley
    - Re: [PATCH v2] ipc: Use private shmem or hugetlbfs inodes for shm segments., Hugh Dickins
- Re: [PATCH v2] ipc: Use private shmem or hugetlbfs inodes for shm segments., Dave Chinner
[PATCH v3 00/11] Smack namespace, Lukasz Pawelczyk
- [PATCH v3 04/11] lsm: inode_pre_setxattr hook, Lukasz Pawelczyk
  - Re: [PATCH v3 04/11] lsm: inode_pre_setxattr hook, Serge E. Hallyn
    - Re: [PATCH v3 04/11] lsm: inode_pre_setxattr hook, Lukasz Pawelczyk
- [PATCH v3 06/11] smack: don't use implicit star to display smackfs/syslog, Lukasz Pawelczyk
  - Re: [PATCH v3 06/11] smack: don't use implicit star to display smackfs/syslog, Serge E. Hallyn
- [PATCH v3 05/11] smack: extend capability functions and fix 2 checks, Lukasz Pawelczyk
  - Re: [PATCH v3 05/11] smack: extend capability functions and fix 2 checks, Serge E. Hallyn
- [PATCH v3 08/11] smack: misc cleanups in preparation for a namespace patch, Lukasz Pawelczyk
- [PATCH v3 09/11] smack: namespace groundwork, Lukasz Pawelczyk
- [PATCH v3 07/11] smack: abstraction layer for 2 common Smack operations, Lukasz Pawelczyk
- [PATCH v3 02/11] lsm: /proc/$PID/attr/label_map file and getprocattr_seq hook, Lukasz Pawelczyk
  - Re: [PATCH v3 02/11] lsm: /proc/$PID/attr/label_map file and getprocattr_seq hook, Serge E. Hallyn
  - Re: [PATCH v3 02/11] lsm: /proc/$PID/attr/label_map file and getprocattr_seq hook, Paul Moore
    - Re: [PATCH v3 02/11] lsm: /proc/$PID/attr/label_map file and getprocattr_seq hook, Lukasz Pawelczyk
- [PATCH v3 11/11] smack: documentation for the Smack namespace, Lukasz Pawelczyk
  - Re: [PATCH v3 11/11] smack: documentation for the Smack namespace, Serge E. Hallyn
    - Re: [PATCH v3 11/11] smack: documentation for the Smack namespace, Lukasz Pawelczyk
    - Re: [PATCH v3 11/11] smack: documentation for the Smack namespace, Lukasz Pawelczyk
      - Re: [PATCH v3 11/11] smack: documentation for the Smack namespace, Serge E. Hallyn
        
        Re: [PATCH v3 11/11] smack: documentation for the Smack namespace, Lukasz Pawelczyk
        
        Re: [PATCH v3 11/11] smack: documentation for the Smack namespace, Serge E. Hallyn
      - Re: [PATCH v3 11/11] smack: documentation for the Smack namespace, Lukasz Pawelczyk
- [PATCH v3 10/11] smack: namespace implementation, Lukasz Pawelczyk
- [PATCH v3 01/11] user_ns: 3 new LSM hooks for user namespace operations, Lukasz Pawelczyk
  - Re: [PATCH v3 01/11] user_ns: 3 new LSM hooks for user namespace operations, Serge E. Hallyn
    - Re: [PATCH v3 01/11] user_ns: 3 new LSM hooks for user namespace operations, Lukasz Pawelczyk
      - Re: [PATCH v3 01/11] user_ns: 3 new LSM hooks for user namespace operations, Serge E. Hallyn
        
        Re: [PATCH v3 01/11] user_ns: 3 new LSM hooks for user namespace operations, Lukasz Pawelczyk
        
        Re: [PATCH v3 01/11] user_ns: 3 new LSM hooks for user namespace operations, Kees Cook
        
        Re: [PATCH v3 01/11] user_ns: 3 new LSM hooks for user namespace operations, Paul Moore
  - Re: [PATCH v3 01/11] user_ns: 3 new LSM hooks for user namespace operations, Paul Moore
- [PATCH v3 03/11] lsm: add file opener's cred to a setprocattr arguments, Lukasz Pawelczyk
  - Re: [PATCH v3 03/11] lsm: add file opener's cred to a setprocattr arguments, Serge E. Hallyn
[RFC][PATCH] ipc: Use private shmem or hugetlbfs inodes for shm segments., Stephen Smalley
- Re: [RFC][PATCH] ipc: Use private shmem or hugetlbfs inodes for shm segments., Paul Moore
- Re: [RFC][PATCH] ipc: Use private shmem or hugetlbfs inodes for shm segments., Dave Chinner
  - Re: [RFC][PATCH] ipc: Use private shmem or hugetlbfs inodes for shm segments., Stephen Smalley
Trouble building a .cil policy from scratch., Dan
- Re: Trouble building a .cil policy from scratch., Steve Lawrence
  - Re: Trouble building a .cil policy from scratch., Dan
[PATCH] libsepol/cil: Improve resolution error messages, Steve Lawrence
[PATCH] policycoreutils: semanage: fix moduleRecords deleteall method, Stephen Smalley
[PATCH] libsemanage: Add file_contexts and seusers to the store, Yuli Khodorkovskiy
- Re: [PATCH] libsemanage: Add file_contexts and seusers to the store, Stephen Smalley
  - Re: [PATCH] libsemanage: Add file_contexts and seusers to the store, Stephen Smalley
Improve Python 3 support in policycoreutils, Michal Srb
- [PATCH 1/4] policycoreutils/audit2allow: improve compatibility with Python 3, Michal Srb
- [PATCH 2/4] policycoreutils/sandbox: improve compatibility with Python 3, Michal Srb
- [PATCH 3/4] policycoreutils/semanage: improve compatibility with Python 3, Michal Srb
  - Re: [PATCH 3/4] policycoreutils/semanage: improve compatibility with Python 3, Stephen Smalley
    - Re: [PATCH 3/4] policycoreutils/semanage: improve compatibility with Python 3, Michal Srb
- [PATCH 4/4] policycoreutils/scripts: improve compatibility with Python 3, Michal Srb
- Re: Improve Python 3 support in policycoreutils, Stephen Smalley
[PATCH] libselinux: simplify procattr cache, Stephen Smalley
- Re: [PATCH] libselinux: simplify procattr cache, Dominick Grift
  - Re: [PATCH] libselinux: simplify procattr cache, Stephen Smalley
    - Re: [PATCH] libselinux: simplify procattr cache, Stephen Smalley
      - Re: [PATCH] libselinux: simplify procattr cache, Dominick Grift
[GIT PULL] policycoreutils: fix PEP8 issues, Jason Zaman
- Re: [GIT PULL] policycoreutils: fix PEP8 issues, Stephen Smalley
  - Re: [GIT PULL] policycoreutils: fix PEP8 issues, Jason Zaman
    - Re: [GIT PULL] policycoreutils: fix PEP8 issues, Stephen Smalley
      - Re: [GIT PULL] policycoreutils: fix PEP8 issues, Petr Lautrbach
        
        Re: [GIT PULL] policycoreutils: fix PEP8 issues, Petr Lautrbach
        
        Re: [GIT PULL] policycoreutils: fix PEP8 issues, Jason Zaman
        
        Re: [GIT PULL] policycoreutils: fix PEP8 issues, Jason Zaman
        
        Re: [GIT PULL] policycoreutils: fix PEP8 issues, Stephen Smalley
        
        Re: [GIT PULL] policycoreutils: fix PEP8 issues, Stephen Smalley
Restricting samba to only talk to one network interface?, Colin Powers
- Re: Restricting samba to only talk to one network interface?, Stephen Smalley
  - Re: Restricting samba to only talk to one network interface?, Stephen Smalley
  - RE: Restricting samba to only talk to one network interface?, Colin Powers
  - Re: Restricting samba to only talk to one network interface?, Paul Moore
- Re: Restricting samba to only talk to one network interface?, Dominick Grift
[PATCH] libsepol: fix policydb_read for policy versions < 24, Stephen Smalley
Trouble building secilc compiler, Dan
- Re: Trouble building secilc compiler, Petr Lautrbach
[PATCH 0/7] Initial support for user namespace owned mounts, Seth Forshee
- Re: [PATCH 0/7] Initial support for user namespace owned mounts, Casey Schaufler
  - Re: [PATCH 0/7] Initial support for user namespace owned mounts, Eric W. Biederman
    - Re: [PATCH 0/7] Initial support for user namespace owned mounts, Casey Schaufler
      - Re: [PATCH 0/7] Initial support for user namespace owned mounts, Andy Lutomirski
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Casey Schaufler
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Eric W. Biederman
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Dave Chinner
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Eric W. Biederman
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Dave Chinner
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, J. Bruce Fields
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Dave Chinner
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, J. Bruce Fields
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Austin S Hemmelgarn
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, J. Bruce Fields
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Dave Chinner
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, J. Bruce Fields
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Dave Chinner
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Serge E. Hallyn
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Colin Walters
    - Re: [PATCH 0/7] Initial support for user namespace owned mounts, Seth Forshee
      - Re: [PATCH 0/7] Initial support for user namespace owned mounts, Eric W. Biederman
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Andy Lutomirski
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Eric W. Biederman
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Stephen Smalley
      - Re: [PATCH 0/7] Initial support for user namespace owned mounts, Casey Schaufler
    - Re: [PATCH 0/7] Initial support for user namespace owned mounts, Lukasz Pawelczyk
      - Re: [PATCH 0/7] Initial support for user namespace owned mounts, Eric W. Biederman
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Lukasz Pawelczyk
- Re: [PATCH 0/7] Initial support for user namespace owned mounts, Eric W. Biederman
  - Re: [PATCH 0/7] Initial support for user namespace owned mounts, Seth Forshee
    - Re: [PATCH 0/7] Initial support for user namespace owned mounts, Casey Schaufler
      - Re: [PATCH 0/7] Initial support for user namespace owned mounts, Seth Forshee
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Casey Schaufler
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Andy Lutomirski
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Casey Schaufler
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Andy Lutomirski
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Casey Schaufler
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Andy Lutomirski
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Serge E. Hallyn
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Seth Forshee
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Seth Forshee
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Casey Schaufler
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Seth Forshee
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Casey Schaufler
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Seth Forshee
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Casey Schaufler
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Eric W. Biederman
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Seth Forshee
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Casey Schaufler
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Seth Forshee
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Casey Schaufler
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Eric W. Biederman
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Seth Forshee
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Eric W. Biederman
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Seth Forshee
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Casey Schaufler
    - Re: [PATCH 0/7] Initial support for user namespace owned mounts, Seth Forshee
- [PATCH 1/7] fs: Add user namesapace member to struct super_block, Seth Forshee
  - Re: [PATCH 1/7] fs: Add user namesapace member to struct super_block, Eric W. Biederman
    - Re: [PATCH 1/7] fs: Add user namesapace member to struct super_block, Seth Forshee
      - Re: [PATCH 1/7] fs: Add user namesapace member to struct super_block, Eric W. Biederman
        
        Re: [PATCH 1/7] fs: Add user namesapace member to struct super_block, Seth Forshee
        
        Re: [PATCH 1/7] fs: Add user namesapace member to struct super_block, Stephen Smalley
        
        Re: [PATCH 1/7] fs: Add user namesapace member to struct super_block, Seth Forshee
        
        Re: [PATCH 1/7] fs: Add user namesapace member to struct super_block, Stephen Smalley
        
        Re: [PATCH 1/7] fs: Add user namesapace member to struct super_block, Seth Forshee
        
        Re: [PATCH 1/7] fs: Add user namesapace member to struct super_block, Seth Forshee
        
        Re: [PATCH 1/7] fs: Add user namesapace member to struct super_block, Casey Schaufler
        
        Re: [PATCH 1/7] fs: Add user namesapace member to struct super_block, Seth Forshee
- [PATCH 3/7] fs: Ignore file caps in mounts from other user namespaces, Seth Forshee
  - Re: [PATCH 3/7] fs: Ignore file caps in mounts from other user namespaces, Serge E. Hallyn
    - Re: [PATCH 3/7] fs: Ignore file caps in mounts from other user namespaces, Andy Lutomirski
      - Re: [PATCH 3/7] fs: Ignore file caps in mounts from other user namespaces, Eric W. Biederman
        
        Re: [PATCH 3/7] fs: Ignore file caps in mounts from other user namespaces, Seth Forshee
        
        Re: [PATCH 3/7] fs: Ignore file caps in mounts from other user namespaces, Andy Lutomirski
        
        Re: [PATCH 3/7] fs: Ignore file caps in mounts from other user namespaces, Seth Forshee
        
        Re: [PATCH 3/7] fs: Ignore file caps in mounts from other user namespaces, Andy Lutomirski
        
        Re: [PATCH 3/7] fs: Ignore file caps in mounts from other user namespaces, Eric W. Biederman
        
        Re: [PATCH 3/7] fs: Ignore file caps in mounts from other user namespaces, Andy Lutomirski
        
        Re: [PATCH 3/7] fs: Ignore file caps in mounts from other user namespaces, Eric W. Biederman
        
        Re: [PATCH 3/7] fs: Ignore file caps in mounts from other user namespaces, Andy Lutomirski
        
        Re: [PATCH 3/7] fs: Ignore file caps in mounts from other user namespaces, Eric W. Biederman
        
        Re: [PATCH 3/7] fs: Ignore file caps in mounts from other user namespaces, Seth Forshee
        
        Re: [PATCH 3/7] fs: Ignore file caps in mounts from other user namespaces, Eric W. Biederman
        
        Re: [PATCH 3/7] fs: Ignore file caps in mounts from other user namespaces, Serge E. Hallyn
        
        Re: [PATCH 3/7] fs: Ignore file caps in mounts from other user namespaces, Serge E. Hallyn
- [PATCH 2/7] userns: Simpilify MNT_NODEV handling., Seth Forshee
- [PATCH 5/7] security: Restrict security attribute updates for userns mounts, Seth Forshee
- [PATCH 4/7] fs: Treat foreign mounts as nosuid, Seth Forshee
  - Re: [PATCH 4/7] fs: Treat foreign mounts as nosuid, Nikolay Borisov
- [PATCH 6/7] selinux: Ignore security labels on user namespace mounts, Seth Forshee
  - Re: [PATCH 6/7] selinux: Ignore security labels on user namespace mounts, Stephen Smalley
    - Re: [PATCH 6/7] selinux: Ignore security labels on user namespace mounts, Stephen Smalley
      - Re: [PATCH 6/7] selinux: Ignore security labels on user namespace mounts, Seth Forshee
        
        Re: [PATCH 6/7] selinux: Ignore security labels on user namespace mounts, Stephen Smalley
        
        Re: [PATCH 6/7] selinux: Ignore security labels on user namespace mounts, Stephen Smalley
        
        Re: [PATCH 6/7] selinux: Ignore security labels on user namespace mounts, Stephen Smalley
        
        Re: [PATCH 6/7] selinux: Ignore security labels on user namespace mounts, Seth Forshee
        
        Re: [PATCH 6/7] selinux: Ignore security labels on user namespace mounts, Stephen Smalley
        
        Re: [PATCH 6/7] selinux: Ignore security labels on user namespace mounts, Seth Forshee
        
        Re: [PATCH 6/7] selinux: Ignore security labels on user namespace mounts, Seth Forshee
        
        Re: [PATCH 6/7] selinux: Ignore security labels on user namespace mounts, Stephen Smalley
        
        Re: [PATCH 6/7] selinux: Ignore security labels on user namespace mounts, Seth Forshee
- [PATCH 7/7] smack: Don't use security labels for user namespace mounts, Seth Forshee
  - Re: [PATCH 7/7] smack: Don't use security labels for user namespace mounts, Casey Schaufler
- <Possible follow-ups>
- Re: [PATCH 0/7] Initial support for user namespace owned mounts, Amir Goldstein
  - Re: [PATCH 0/7] Initial support for user namespace owned mounts, Seth Forshee
    - Re: [PATCH 0/7] Initial support for user namespace owned mounts, Amir Goldstein
      - Re: [PATCH 0/7] Initial support for user namespace owned mounts, Casey Schaufler
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Colin Walters
        
        Re: [PATCH 0/7] Initial support for user namespace owned mounts, Eric W. Biederman
  - Re: [PATCH 0/7] Initial support for user namespace owned mounts, Serge Hallyn
    - Re: [PATCH 0/7] Initial support for user namespace owned mounts, Amir Goldstein
- Re: [PATCH 0/7] Initial support for user namespace owned mounts, Amir Goldstein
  - Re: [PATCH 0/7] Initial support for user namespace owned mounts, Casey Schaufler
    - Re: [PATCH 0/7] Initial support for user namespace owned mounts, Amir Goldstein
[no subject], Robert Kuska
- [PATCH 01/11] sepolgen: Replace deprecated *Equals functions in tests, Robert Kuska
- [PATCH 03/11] sepolgen: Replace func_code calls with __code__., Robert Kuska
- [PATCH 02/11] sepolgen: Use relative imports for modules within sepolgen., Robert Kuska
- [PATCH 04/11] sepolgen: Use sort function with key parameter., Robert Kuska
- [PATCH 05/11] sepolgen: Unicode-objects must be encoded before hashing., Robert Kuska
- [PATCH 06/11] sepolgen: Replace usage of __cmp__ with rich comparison., Robert Kuska
  - Re: [PATCH 06/11] sepolgen: Replace usage of __cmp__ with rich comparison., Jason Zaman
    - Re: [PATCH 06/11] sepolgen: Replace usage of __cmp__ with rich comparison., Robert Kuska
- [PATCH 07/11] sepolgen: Replace usage of attributes of types module, Robert Kuska
- [PATCH 08/11] sepolgen: Replace usage of xrange inside of tests., Robert Kuska
- [PATCH 10/11] sepolgen: Close files after reading/writing in tests., Robert Kuska
- [PATCH 09/11] sepolgen: Apply fixes discovered by 2to3 where needed., Robert Kuska
- [PATCH 11/11] sepolgen: Edit tests so they pass even on Python3 where hash is random., Robert Kuska
- Re: Python3 Support for Sepolgen module, Robert Kuska
  - Re: Python3 Support for Sepolgen module, Stephen Smalley
  - Re: Python3 Support for Sepolgen module, Jason Zaman
    - Re: Python3 Support for Sepolgen module, Robert Kuska
      - Re: Python3 Support for Sepolgen module, Jason Zaman
        
        Re: Python3 Support for Sepolgen module, Robert Kuska
        
        Re: Python3 Support for Sepolgen module, Jason Zaman
        
        Re: Python3 Support for Sepolgen module, Jason Zaman
        
        Re: Python3 Support for Sepolgen module, Michal Srb
[PATCH v2] Currently, jobs run by at are run in the crond_t domain and not transitioned outside of it., Laurent Bigonville
[PATCH] Set self.sename to sename after calling semanage_seuser_set_sename(), Laurent Bigonville
- Re: [PATCH] Set self.sename to sename after calling semanage_seuser_set_sename(), Stephen Smalley
[PATCH] selinux-testsuite: ipsec-load: Derive state context from current context., Stephen Smalley
[PATCH] selinux-testsuite: enable running new tests on RHEL6/7, Stephen Smalley
[PATCH] selinux-testsuite: Clean up prerequisites/dependencies., Stephen Smalley
[PATCH] selinux-testsuite: move unix_socket and mmmap tests out of SUBDIRS_COMMON, Stephen Smalley
[PATCH] sepolgen: add support for python3, Robert Kuska
- Re: [PATCH] sepolgen: add support for python3, Stephen Smalley
  - Re: [PATCH] sepolgen: add support for python3, Robert Kuska
    - Re: [PATCH] sepolgen: add support for python3, Robert Kuska
      - Re: [PATCH] sepolgen: add support for python3, Jason Zaman
[PATCH v2] libselinux: use /proc/thread-self when available, Stephen Smalley
- Re: [PATCH v2] libselinux: use /proc/thread-self when available, Eric Paris
  - Re: [PATCH v2] libselinux: use /proc/thread-self when available, Stephen Smalley
    - Re: [PATCH v2] libselinux: use /proc/thread-self when available, Eric Paris
      - Re: [PATCH v2] libselinux: use /proc/thread-self when available, Stephen Smalley
[PATCH] libselinux: use /proc/thread-self when available, Stephen Smalley
[PATCH] selinux-testsuite: update for mprotect PROT_EXEC regression fix, Stephen Smalley
[GIT PULL] SELinux fixes for 4.2 (#2), Paul Moore
[PATCH] libselinux: Add const to selinux_opt for label backends., Richard Haines
- Re: [PATCH] libselinux: Add const to selinux_opt for label backends., Stephen Smalley
[PATCH] selinux: fix mprotect PROT_EXEC regression caused by mm change, Stephen Smalley
- Re: [PATCH] selinux: fix mprotect PROT_EXEC regression caused by mm change, Andrew Morton
- Re: [PATCH] selinux: fix mprotect PROT_EXEC regression caused by mm change, Paul Moore
- Re: [PATCH] selinux: fix mprotect PROT_EXEC regression caused by mm change, Hugh Dickins
[GIT PULL] SELinux fixes for 4.2, Paul Moore
executing off of a fusefs, Roberts, William C
- Re: executing off of a fusefs, Stephen Smalley
  - Re: executing off of a fusefs, William Roberts
    - RE: executing off of a fusefs, Roberts, William C
      - Re: executing off of a fusefs, Stephen Smalley
        
        Re: executing off of a fusefs, William Roberts
[PATCH] Add SELinux support to run jobs in the proper domain, Laurent Bigonville
- Re: [PATCH] Add SELinux support to run jobs in the proper domain, Stephen Smalley
[PATCH] Fix typo in semanage args for minimum policy store, Petr Lautrbach
- Re: [PATCH] Fix typo in semanage args for minimum policy store, Dominick Grift
  - Re: [PATCH] Fix typo in semanage args for minimum policy store, Petr Lautrbach
    - Re: [PATCH] Fix typo in semanage args for minimum policy store, Stephen Smalley
Re: Linux 4.2-rc1, Casey Schaufler
- Re: Linux 4.2-rc1, Stephen Smalley
- Re: Linux 4.2-rc1, William Roberts
  - Re: Linux 4.2-rc1, Casey Schaufler
- <Possible follow-ups>
- Re: Linux 4.2-rc1, Casey Schaufler
[PATCH] selinux-testsuite: unix_socket: Add tests for file namespace., Stephen Smalley
Re: mm: shmem_zero_setup skip security check and lockdep conflict with XFS, Stephen Smalley
- Re: mm: shmem_zero_setup skip security check and lockdep conflict with XFS, Stephen Smalley
  - Re: mm: shmem_zero_setup skip security check and lockdep conflict with XFS, Morten Stevens
  - Re: mm: shmem_zero_setup skip security check and lockdep conflict with XFS, Hugh Dickins
    - Re: mm: shmem_zero_setup skip security check and lockdep conflict with XFS, Stephen Smalley
      - Re: mm: shmem_zero_setup skip security check and lockdep conflict with XFS, Hugh Dickins
        
        Re: mm: shmem_zero_setup skip security check and lockdep conflict with XFS, Stephen Smalley
[PATCH] Explicitly declare the role "base_r", Laurent Bigonville
- Re: [PATCH] Explicitly declare the role "base_r", Stephen Smalley
- Re: [PATCH] Explicitly declare the role "base_r", Paul Moore
[PATCH] selinux-testsuite: Add tests for mmap/mprotect, Stephen Smalley
[PATCH] libselinux: Fix binary file labels for regexes with metachars, Richard Haines
- Re: [PATCH] libselinux: Fix binary file labels for regexes with metachars, Jeffrey Vander Stoep
  - Re: [PATCH] libselinux: Fix binary file labels for regexes with metachars, Richard Haines
- Re: [PATCH] libselinux: Fix binary file labels for regexes with metachars, Stephen Smalley
  - Re: [PATCH] libselinux: Fix binary file labels for regexes with metachars, Stephen Smalley
  - Re: [PATCH] libselinux: Fix binary file labels for regexes with metachars, Richard Haines
    - Re: [PATCH] libselinux: Fix binary file labels for regexes with metachars, Jeffrey Vander Stoep
      - Re: [PATCH] libselinux: Fix binary file labels for regexes with metachars, Stephen Smalley
[PATCH v2] libsemanage: Add policy binary and file_contexts.local to the store, Yuli Khodorkovskiy
- Re: [PATCH v2] libsemanage: Add policy binary and file_contexts.local to the store, Stephen Smalley
[PATCH v2] libselinux: Fix file labels for regexes with metachars, Jeff Vander Stoep
- Re: [PATCH v2] libselinux: Fix file labels for regexes with metachars, Jeffrey Vander Stoep
- <Possible follow-ups>
- [PATCH v2] libselinux: Fix file labels for regexes with metachars, Jeff Vander Stoep
  - Re: [PATCH v2] libselinux: Fix file labels for regexes with metachars, Stephen Smalley
[PATCH] libsemanage: Add policy binary and file_contexts.local to the store, Yuli Khodorkovskiy
- Re: [PATCH] libsemanage: Add policy binary and file_contexts.local to the store, James Carter
[PATCH] libselinux: Fix file labels for regexes with metachars, Jeff Vander Stoep
- Re: [PATCH] libselinux: Fix file labels for regexes with metachars, Richard Haines
- Re: [PATCH] libselinux: Fix file labels for regexes with metachars, Stephen Smalley
[PATCH] selinux: don't waste ebitmap space when importing NetLabel categories, Paul Moore
type inheritance in CIL, Miroslav Grepl
- Re: type inheritance in CIL, Dominick Grift
  - Re: type inheritance in CIL, Miroslav Grepl
    - Re: type inheritance in CIL, James Carter
      - Re: type inheritance in CIL, Dominick Grift
        
        Re: type inheritance in CIL, James Carter
        
        Re: type inheritance in CIL, Miroslav Grepl
        
        Re: type inheritance in CIL, James Carter
[PATCH V2] libselinux: Fix if file_contexts not '\n' terminated, Richard Haines
- Re: [PATCH V2] libselinux: Fix if file_contexts not '\n' terminated, Stephen Smalley
[PATCH] selinux-testsuite: Add a ToDo list., Stephen Smalley
[PATCH] selinux-testsuite: add secmark tests, Stephen Smalley
[PATCH] libselinux: Fix if file_contexts not '\n' terminated, Richard Haines
- Re: [PATCH] libselinux: Fix if file_contexts not '\n' terminated, Stephen Smalley
[PATCH] selinux-testsuite: add labeled ipsec tests, Stephen Smalley
[PATCH] Allow to use compressed modules without a compression extension, Petr Lautrbach
- Re: [PATCH] Allow to use compressed modules without a compression extension, Steve Lawrence
[PATCH v3] selinux-testsuite: fix unix/inet socket tests, Stephen Smalley
[PATCH] selinux-testsuite: Add tests for name_bind/node_bind/name_connect., Stephen Smalley
- Re: [PATCH] selinux-testsuite: Add tests for name_bind/node_bind/name_connect., Paul Moore
[PATCH v2] selinux-testsuite: fix unix/inet socket tests, Stephen Smalley
[PATCH] selinux-testsuite: fix unix/inet socket tests, Stephen Smalley
- Re: [PATCH] selinux-testsuite: fix unix/inet socket tests, Paul Moore
  - Re: [PATCH] selinux-testsuite: fix unix/inet socket tests, Stephen Smalley
    - Re: [PATCH] selinux-testsuite: fix unix/inet socket tests, Paul Moore
      - Re: [PATCH] selinux-testsuite: fix unix/inet socket tests, Stephen Smalley
        
        Re: [PATCH] selinux-testsuite: fix unix/inet socket tests, Paul Moore
        
        Re: [PATCH] selinux-testsuite: fix unix/inet socket tests, Stephen Smalley
[PATCH] libselinux: Correctly handle an empty file_contexts file., Stephen Smalley
- Re: [PATCH] libselinux: Correctly handle an empty file_contexts file., Jeffrey Vander Stoep
NFS, Andrew Holway
- Re: NFS, James Carter
  - Re: NFS, Andrew Holway
    - Re: NFS, Daniel J Walsh
[PATCH 00/10 v3] Improve libsepol and CIL neverallow and bounds checking, James Carter
- [PATCH 01/10 v3] libsepol: Add new ebitmap function named ebitmap_match_any(), James Carter
  - Re: [PATCH 01/10 v3] libsepol: Add new ebitmap function named ebitmap_match_any(), Stephen Smalley
- [PATCH 02/10 v3] libsepol: Treat types like an attribute in the attr_type_map., James Carter
  - Re: [PATCH 02/10 v3] libsepol: Treat types like an attribute in the attr_type_map., Stephen Smalley
- [PATCH 03/10 v3] libsepol: Refactored neverallow checking., James Carter
  - Re: [PATCH 03/10 v3] libsepol: Refactored neverallow checking., Stephen Smalley
- [PATCH 07/10 v3] libsepol/cil: Track number of classes and number of types and attributes., James Carter
  - Re: [PATCH 07/10 v3] libsepol/cil: Track number of classes and number of types and attributes., Steve Lawrence
- [PATCH 05/10 v3] libsepol/cil: Add function to search the CIL AST for an AV rule., James Carter
  - Re: [PATCH 05/10 v3] libsepol/cil: Add function to search the CIL AST for an AV rule., Steve Lawrence
- [PATCH 04/10 v3] libsepol: Refactored bounds (hierarchy) checking code, James Carter
  - Re: [PATCH 04/10 v3] libsepol: Refactored bounds (hierarchy) checking code, Stephen Smalley
- [PATCH 06/10 v3] libsepol/cil: Refactored CIL neverallow checking and reporting., James Carter
  - Re: [PATCH 06/10 v3] libsepol/cil: Refactored CIL neverallow checking and reporting., Steve Lawrence
- [PATCH 09/10 v3] secilc: Add a CIL policy file to test neverallow checking., James Carter
  - Re: [PATCH 09/10 v3] secilc: Add a CIL policy file to test neverallow checking., Steve Lawrence
- [PATCH 08/10 v3] libsepol/cil: Add CIL bounds checking and reporting., James Carter
  - Re: [PATCH 08/10 v3] libsepol/cil: Add CIL bounds checking and reporting., Steve Lawrence
- [PATCH 10/10 v3] secilc: Add a CIL policy file to test bounds checking., James Carter
  - Re: [PATCH 10/10 v3] secilc: Add a CIL policy file to test bounds checking., Steve Lawrence
- Re: [PATCH 00/10 v3] Improve libsepol and CIL neverallow and bounds checking, James Carter
[PATCH] SELinux: Create a common helper to determine an inode label [ver #3], David Howells
- Re: [PATCH] SELinux: Create a common helper to determine an inode label [ver #3], Stephen Smalley
- Re: [PATCH] SELinux: Create a common helper to determine an inode label [ver #3], Paul Moore
- Re: [PATCH] SELinux: Create a common helper to determine an inode label [ver #3], David Howells
  - libselinux equivalent of restorecon -F, Dominick Grift
    - Re: libselinux equivalent of restorecon -F, Stephen Smalley
  - Re: [PATCH] SELinux: Create a common helper to determine an inode label [ver #3], Paul Moore
[PATCH] SELinux: Create a common helper to determine an inode label [ver #2], David Howells
- Re: [PATCH] SELinux: Create a common helper to determine an inode label [ver #2], Stephen Smalley
  - Re: [PATCH] SELinux: Create a common helper to determine an inode label [ver #2], David Howells
  - Re: [PATCH] SELinux: Create a common helper to determine an inode label [ver #2], Stephen Smalley
- Re: [PATCH] SELinux: Create a common helper to determine an inode label [ver #2], David Howells
[PATCH] SELinux: Create a common helper to determine an inode label, David Howells
- Re: [PATCH] SELinux: Create a common helper to determine an inode label, Stephen Smalley
- Re: [PATCH] SELinux: Create a common helper to determine an inode label, David Howells
- Re: [PATCH] SELinux: Create a common helper to determine an inode label, David Howells
Re: [PATCH 7/8] SELinux: Create a common helper to determine an inode label, Stephen Smalley
- Message not available
  - Message not available
    - Re: [PATCH 7/8] SELinux: Create a common helper to determine an inode label, David Howells
      - Re: [PATCH 7/8] SELinux: Create a common helper to determine an inode label, Stephen Smalley
      - Re: [PATCH 7/8] SELinux: Create a common helper to determine an inode label, David Howells
        
        Re: [PATCH 7/8] SELinux: Create a common helper to determine an inode label, Stephen Smalley
        
        Re: [PATCH 7/8] SELinux: Create a common helper to determine an inode label, Stephen Smalley
Re: [PATCH 6/8] SELinux: Handle opening of a unioned file, Stephen Smalley
- Message not available
  - Message not available
    - Re: [PATCH 6/8] SELinux: Handle opening of a unioned file, David Howells
Re: [PATCH 5/8] SELinux: Stub in copy-up handling, Stephen Smalley
- Message not available
  - Message not available
    - Re: [PATCH 5/8] SELinux: Stub in copy-up handling, David Howells
[PATCH 00/10 v2] Improve libsepol and CIL neverallow and bounds checking, James Carter
- [PATCH 01/10 v2] libsepol: Add new ebitmap function named ebitmap_match_any(), James Carter
  - Re: [PATCH 01/10 v2] libsepol: Add new ebitmap function named ebitmap_match_any(), Stephen Smalley
- [PATCH 10/10 v2] secilc: Add a CIL policy file to test bounds checking., James Carter
- [PATCH 05/10 v2] libsepol/cil: Add function to search the CIL AST for an AV rule., James Carter
- [PATCH 03/10 v2] libsepol: Refactored neverallow checking., James Carter
- [PATCH 02/10 v2] libsepol: Treat types like an attribute in the attr_type_map., James Carter
  - Re: [PATCH 02/10 v2] libsepol: Treat types like an attribute in the attr_type_map., Stephen Smalley
    - Re: [PATCH 02/10 v2] libsepol: Treat types like an attribute in the attr_type_map., Stephen Smalley
    - Re: [PATCH 02/10 v2] libsepol: Treat types like an attribute in the attr_type_map., James Carter
      - Re: [PATCH 02/10 v2] libsepol: Treat types like an attribute in the attr_type_map., Stephen Smalley
        
        Re: [PATCH 02/10 v2] libsepol: Treat types like an attribute in the attr_type_map., Stephen Smalley
- [PATCH 07/10 v2] libsepol/cil: Track number of classes and number of types and attributes., James Carter
- [PATCH 08/10 v2] libsepol/cil: Add CIL bounds checking and reporting., James Carter
- [PATCH 09/10 v2] secilc: Add a CIL policy file to test neverallow checking., James Carter
- [PATCH 04/10 v2] libsepol: Refactored bounds (hierarchy) checking code, James Carter
  - Re: [PATCH 04/10 v2] libsepol: Refactored bounds (hierarchy) checking code, Stephen Smalley
    - Re: [PATCH 04/10 v2] libsepol: Refactored bounds (hierarchy) checking code, James Carter
      - Re: [PATCH 04/10 v2] libsepol: Refactored bounds (hierarchy) checking code, Stephen Smalley
        
        Re: [PATCH 04/10 v2] libsepol: Refactored bounds (hierarchy) checking code, James Carter
- [PATCH 06/10 v2] libsepol/cil: Refactored CIL neverallow checking and reporting., James Carter
[RFC][PATCH] net/tipc: initialize security state for new connection socket, Stephen Smalley
- Re: [RFC][PATCH] net/tipc: initialize security state for new connection socket, Paul Moore
[PATCH v2] selinux-testsuite: add inet_socket tests, Stephen Smalley
- Re: [PATCH v2] selinux-testsuite: add inet_socket tests, Paul Moore
[PATCH] selinux-testsuite: add inet_socket tests, Stephen Smalley
[PATCH V3] libselinux: Enhance file context support, Richard Haines
- Re: [PATCH V3] libselinux: Enhance file context support, Stephen Smalley
[PATCH V2] libselinux: Enhance file context support, Richard Haines
- Re: [PATCH V2] libselinux: Enhance file context support, Stephen Smalley
  - Re: [PATCH V2] libselinux: Enhance file context support, Richard Haines
[PATCH V2] libselinux: Fix property processing and cleanup formatting, Richard Haines
- Re: [PATCH V2] libselinux: Fix property processing and cleanup formatting, Stephen Smalley
[PATCH v3] selinux: reduce locking overhead in inode_free_security(), Waiman Long
- Re: [PATCH v3] selinux: reduce locking overhead in inode_free_security(), Stephen Smalley
- Re: [PATCH v3] selinux: reduce locking overhead in inode_free_security(), Yury
- Re: [PATCH v3] selinux: reduce locking overhead in inode_free_security(), Paul Moore
[PATCH] selinux: Augment BUG_ON assertion for secclass_map., Stephen Smalley
- Re: [PATCH] selinux: Augment BUG_ON assertion for secclass_map., Paul Moore
[PATCH] selinux: initialize sock security class to default value, Stephen Smalley
- Re: [PATCH] selinux: initialize sock security class to default value, Paul Moore
[PATCH] libselinux: Fix property processing and cleanup formatting, Richard Haines
- Re: [PATCH] libselinux: Fix property processing and cleanup formatting, Stephen Smalley
[PATCH] libselinux: Enhance file context support, Richard Haines
- Re: [PATCH] libselinux: Enhance file context support, Stephen Smalley
  - Re: [PATCH] libselinux: Enhance file context support, Richard Haines
- Re: [PATCH] libselinux: Enhance file context support, Stephen Smalley
[PATCH] policy_define.c: fix compiler warnings, Nick Kralevich
- Re: [PATCH] policy_define.c: fix compiler warnings, Jeffrey Vander Stoep
- Re: [PATCH] policy_define.c: fix compiler warnings, Stephen Smalley
R: R: SELinux: Interface Labeling Problem, Gmail
[PATCH] Remove uses of -Wno-return-type., Dan Albert
- Re: [PATCH] Remove uses of -Wno-return-type., Paul Moore
- Re: [PATCH] Remove uses of -Wno-return-type., Stephen Smalley
Kernel error: SELinux: Invalid class 0, Tim Shearer
- Re: Kernel error: SELinux: Invalid class 0, Stephen Smalley
  - Re: Kernel error: SELinux: Invalid class 0, Stephen Smalley
[PATCH 2/2 v6] selinux: extended permissions for ioctls, Jeff Vander Stoep
- Re: [PATCH 2/2 v6] selinux: extended permissions for ioctls, Nick Kralevich
- Re: [PATCH 2/2 v6] selinux: extended permissions for ioctls, Paul Moore
  - Re: [PATCH 2/2 v6] selinux: extended permissions for ioctls, Jeffrey Vander Stoep
    - Re: [PATCH 2/2 v6] selinux: extended permissions for ioctls, Paul Moore
[PATCH] checkpolicy: switch operations to extended perms, Jeff Vander Stoep
- Re: [PATCH] checkpolicy: switch operations to extended perms, Stephen Smalley
New module store + /var being split off, Miroslav Grepl
- Re: New module store + /var being split off, Steve Lawrence
- Re: New module store + /var being split off, Sven Vermeulen
[PATCH] Fix -Wreturn-type issues., Dan Albert
- Re: [PATCH] Fix -Wreturn-type issues., Stephen Smalley
[PATCH v2] selinux: reduce locking overhead in inode_free_security(), Waiman Long
- Re: [PATCH v2] selinux: reduce locking overhead in inode_free_security(), Raghavendra K T
  - Re: [PATCH v2] selinux: reduce locking overhead in inode_free_security(), Stephen Smalley
    - Re: [PATCH v2] selinux: reduce locking overhead in inode_free_security(), Eric Paris
    - Re: [PATCH v2] selinux: reduce locking overhead in inode_free_security(), Waiman Long
      - Re: [PATCH v2] selinux: reduce locking overhead in inode_free_security(), Yury
        
        Re: [PATCH v2] selinux: reduce locking overhead in inode_free_security(), Eric Paris
        
        Re: [PATCH v2] selinux: reduce locking overhead in inode_free_security(), Waiman Long
      - Re: [PATCH v2] selinux: reduce locking overhead in inode_free_security(), Raghavendra K T
        
        Re: [PATCH v2] selinux: reduce locking overhead in inode_free_security(), Stephen Smalley
Why does semanage_migrate_store migrate file_contexts.local?, Sven Vermeulen
[PATCH 00/10] Improve libsepol and CIL neverallow and bounds checking, James Carter
- [PATCH 10/10] secilc: Add a CIL policy file to test bounds checking., James Carter
- [PATCH 01/10] libsepol: Add new ebitmap function named ebitmap_match_any(), James Carter
- [PATCH 07/10] libsepol/cil: Track number of classes and number of types and attributes., James Carter
- [PATCH 05/10] libsepol/cil: Add function to search the CIL AST for an AV rule., James Carter
  - Re: [PATCH 05/10] libsepol/cil: Add function to search the CIL AST for an AV rule., Steve Lawrence
    - Re: [PATCH 05/10] libsepol/cil: Add function to search the CIL AST for an AV rule., James Carter
- [PATCH 02/10] libsepol: Treat types like an attribute in the attr_type_map., James Carter
  - Re: [PATCH 02/10] libsepol: Treat types like an attribute in the attr_type_map., Stephen Smalley
    - Re: [PATCH 02/10] libsepol: Treat types like an attribute in the attr_type_map., James Carter
      - Re: [PATCH 02/10] libsepol: Treat types like an attribute in the attr_type_map., Stephen Smalley
        
        Re: [PATCH 02/10] libsepol: Treat types like an attribute in the attr_type_map., James Carter
- [PATCH 04/10] libsepol: Refactored bounds (hierarchy) checking code, James Carter
- [PATCH 03/10] libsepol: Refactored neverallow checking., James Carter
  - Re: [PATCH 03/10] libsepol: Refactored neverallow checking., Stephen Smalley
    - Re: [PATCH 03/10] libsepol: Refactored neverallow checking., Christopher J. PeBenito
    - Re: [PATCH 03/10] libsepol: Refactored neverallow checking., James Carter
      - Re: [PATCH 03/10] libsepol: Refactored neverallow checking., James Carter
- [PATCH 06/10] libsepol/cil: Refactored CIL neverallow checking and reporting., James Carter
- [PATCH 09/10] secilc: Add a CIL policy file to test neverallow checking., James Carter
- [PATCH 08/10] libsepol/cil: Add CIL bounds checking and reporting., James Carter
Re: SELinux: Interface Labeling Problem, Maurizio Pagani
- Re: SELinux: Interface Labeling Problem, Sven Vermeulen
[PATCH] selinux: reduce locking overhead in inode_free_security(), Waiman Long
- Re: [PATCH] selinux: reduce locking overhead in inode_free_security(), Stephen Smalley
  - Re: [PATCH] selinux: reduce locking overhead in inode_free_security(), Waiman Long
- Re: [PATCH] selinux: reduce locking overhead in inode_free_security(), Stephen Smalley
[PATCH] selinux-testsuite: update socket tests, Stephen Smalley
- Re: [PATCH] selinux-testsuite: update socket tests, Serge E. Hallyn
  - Re: [PATCH] selinux-testsuite: update socket tests, Paul Moore
[PATCH] Initialize kernfs nodes with LSMs, william . c . roberts
- [PATCH] kernfs: hook inode initialization for LSMs, william . c . roberts
  - Re: [PATCH] kernfs: hook inode initialization for LSMs, Greg KH
    - RE: [PATCH] kernfs: hook inode initialization for LSMs, Roberts, William C
      - Re: [PATCH] kernfs: hook inode initialization for LSMs, Greg KH
        
        RE: [PATCH] kernfs: hook inode initialization for LSMs, Roberts, William C
[RFC][PATCH] net/unix: support SCM_SECURITY for stream sockets, Stephen Smalley
- Re: [RFC][PATCH] net/unix: support SCM_SECURITY for stream sockets, Stephen Smalley
- Re: [RFC][PATCH] net/unix: support SCM_SECURITY for stream sockets, Paul Moore
  - Re: [RFC][PATCH] net/unix: support SCM_SECURITY for stream sockets, Casey Schaufler
[PATCH] selinux: do not remap unknown SIDs to the unlabeled context, Stephen Smalley
- Re: [PATCH] selinux: do not remap unknown SIDs to the unlabeled context, Paul Moore
  - Re: [PATCH] selinux: do not remap unknown SIDs to the unlabeled context, Stephen Smalley
  - Re: [PATCH] selinux: do not remap unknown SIDs to the unlabeled context, Stephen Smalley
    - Re: [PATCH] selinux: do not remap unknown SIDs to the unlabeled context, Stephen Smalley
    - Re: [PATCH] selinux: do not remap unknown SIDs to the unlabeled context, Paul Moore
[PATCH] Only invoke RPM on RPM-enabled Linux distributions, Sven Vermeulen
- Re: [PATCH] Only invoke RPM on RPM-enabled Linux distributions, Stephen Smalley
  - Re: [PATCH] Only invoke RPM on RPM-enabled Linux distributions, Sven Vermeulen
    - Re: [PATCH] Only invoke RPM on RPM-enabled Linux distributions, Stephen Smalley
    - Re: [PATCH] Only invoke RPM on RPM-enabled Linux distributions, Petr Lautrbach
- Re: [PATCH] Only invoke RPM on RPM-enabled Linux distributions, Stephen Smalley
refpolicywarn usage, Ted Toth
- Re: refpolicywarn usage, Christopher J. PeBenito
  - Re: refpolicywarn usage, Ted Toth
SELinux tree updates, Paul Moore
- <Possible follow-ups>
- SELinux tree updates, Paul Moore
[PATCH] sepolicy-generate: Handle more reserved port types, Masatake YAMATO
- Re: [PATCH] sepolicy-generate: Handle more reserved port types, Stephen Smalley
  - Re: [PATCH] sepolicy-generate: Handle more reserved port types, Masatake YAMATO
Seeing new denial on AOSP 5.1.1 w.r.t shell request read access on lnk_file ., Ravi Kumar
- Re: Seeing new denial on AOSP 5.1.1 w.r.t shell request read access on lnk_file ., Stephen Smalley
  - RE: Seeing new denial on AOSP 5.1.1 w.r.t shell request read access on lnk_file ., Roberts, William C
[PATCH v3 0/6] SELinux testsuite compilation fixes, Paul Moore
- [PATCH v3 1/6] selinux-testsuite: add _GNU_SOURCE to tests/Makefile, Paul Moore
- [PATCH v3 2/6] selinux-testsuite: add some default CFLAGS, Paul Moore
- [PATCH v3 3/6] selinux-testsuite: fix some compile warnings in tests/nnp, Paul Moore
- [PATCH v3 4/6] selinux-testsuite: fix compile warnings in tests/setnice, Paul Moore
- [PATCH v3 5/6] selinux-testsuite: fix compile problems in tests/shm, Paul Moore
- [PATCH v3 6/6] selinux-testsuite: fix compile problems in tests/capable_file, Paul Moore
  - Re: [PATCH v3 6/6] selinux-testsuite: fix compile problems in tests/capable_file, Stephen Smalley
    - Re: [PATCH v3 6/6] selinux-testsuite: fix compile problems in tests/capable_file, Paul Moore
[GIT PULL] SELinux patches for 4.2, Paul Moore
- Re: [GIT PULL] SELinux patches for 4.2, James Morris
  - Re: [GIT PULL] SELinux patches for 4.2, Paul Moore
    - Re: [GIT PULL] SELinux patches for 4.2, James Morris
[PATCH] selinux: fix setting of security labels on NFS, J. Bruce Fields
- Re: [PATCH] selinux: fix setting of security labels on NFS, Stephen Smalley
- Re: [PATCH] selinux: fix setting of security labels on NFS, Paul Moore
  - Re: [PATCH] selinux: fix setting of security labels on NFS, J. Bruce Fields
    - Re: [PATCH] selinux: fix setting of security labels on NFS, Paul Moore
[PATCH] selinux-testsuite: adopt a more consistent style, Paul Moore
[PATCH v2 0/6] SELinux testsuite compilation fixes, Paul Moore
- [PATCH 1/6] selinux-testsuite: add _GNU_SOURCE to tests/Makefile, Paul Moore
  - Re: [PATCH 1/6] selinux-testsuite: add _GNU_SOURCE to tests/Makefile, Stephen Smalley
    - Re: [PATCH 1/6] selinux-testsuite: add _GNU_SOURCE to tests/Makefile, Paul Moore
- [PATCH 2/6] selinux-testsuite: add some default CFLAGS, Paul Moore
- [PATCH 3/6] selinux-testsuite: fix some compile warnings in tests/nnp, Paul Moore
- [PATCH 5/6] selinux-testsuite: fix compile problems in tests/shm, Paul Moore
- [PATCH 6/6] selinux-testsuite: fix compile problems in tests/capable_file, Paul Moore
- [PATCH 4/6] selinux-testsuite: fix compile warnings in tests/setnice, Paul Moore
[PATCH 0/3] SELinux testsuite compilation fixes, Paul Moore
- [PATCH 1/3] selinux-testsuite: fix some compile warnings in tests/nnp, Paul Moore
- [PATCH 2/3] selinux-testsuite: fix compile warnings in tests/setnice, Paul Moore
- [PATCH 3/3] selinux-testsuite: fix compile warnings in tests/execshare, Paul Moore
  - Re: [PATCH 3/3] selinux-testsuite: fix compile warnings in tests/execshare, Stephen Smalley
    - Re: [PATCH 3/3] selinux-testsuite: fix compile warnings in tests/execshare, Paul Moore
[PATCH 2/2 v5] selinux: extended permissions for ioctls, Jeff Vander Stoep
- Re: [PATCH 2/2 v5] selinux: extended permissions for ioctls, Stephen Smalley
- Re: [PATCH 2/2 v5] selinux: extended permissions for ioctls, Paul Moore
[PATCH 0/2 v2] selinux: extended permissions for ioctl commands, Jeff Vander Stoep
[RFC PATCH] libselinux: Add read_spec_entries function to replace sscanf, Richard Haines
- Re: [RFC PATCH] libselinux: Add read_spec_entries function to replace sscanf, Stephen Smalley
getpidcon() behaviour when other LSM is enabled, Laurent Bigonville
- Re: getpidcon() behaviour when other LSM is enabled, Stephen Smalley
postgresql policy, Ted Toth
- Re: postgresql policy, Stephen Smalley
  - Re: postgresql policy, Stephen Frost
    - Re: postgresql policy, Stephen Smalley
      - Re: postgresql policy, Ted Toth
        
        Re: postgresql policy, Stephen Frost
        
        Re: postgresql policy, Ted Toth
  - Re: postgresql policy, Ted Toth
    - Re: postgresql policy, Stephen Smalley
      - Re: postgresql policy, Ted Toth
        
        Re: postgresql policy, Stephen Frost
        
        Re: postgresql policy, Ted Toth
        
        Re: postgresql policy, Stephen Frost
  - Re: postgresql policy, Christopher J. PeBenito
[PATCH V2] libselinux: Support consistent mode size for bin files, Richard Haines
- Re: [PATCH V2] libselinux: Support consistent mode size for bin files, Stephen Smalley
[PATCH] libselinux: Expunge remaining references to flask.h and av_permissions.h., Stephen Smalley
[RFC][PATCH] selinux: Remove unused permission definitions, Stephen Smalley
- Re: [RFC][PATCH] selinux: Remove unused permission definitions, Paul Moore
  - Re: [RFC][PATCH] selinux: Remove unused permission definitions, Dominick Grift
    - Re: [RFC][PATCH] selinux: Remove unused permission definitions, Paul Moore
  - Re: [RFC][PATCH] selinux: Remove unused permission definitions, Christopher J. PeBenito
- Re: [RFC][PATCH] selinux: Remove unused permission definitions, Paul Moore
- Re: [RFC][PATCH] selinux: Remove unused permission definitions, Dominick Grift
  - Re: [RFC][PATCH] selinux: Remove unused permission definitions, Dominick Grift
  - Re: [RFC][PATCH] selinux: Remove unused permission definitions, Stephen Smalley
    - Re: [RFC][PATCH] selinux: Remove unused permission definitions, Nick Kralevich
      - Re: [RFC][PATCH] selinux: Remove unused permission definitions, Stephen Smalley
[PATCH] libselinux: Support consistent mode size for bin files, Richard Haines
- Re: [PATCH] libselinux: Support consistent mode size for bin files, Stephen Smalley
[PATCH V4] Fix more bin file processing core dumps, Richard Haines
- Re: [PATCH V4] Fix more bin file processing core dumps, Stephen Smalley
[PATCH] libsepol/cil: Do not allow categories/sensitivities inside blocks, Yuli Khodorkovskiy
- Re: [PATCH] libsepol/cil: Do not allow categories/sensitivities inside blocks, James Carter
[RFC] [PATCH] kernfs: hook inode initialization for LSMs, william . c . roberts
- [PATCH] [RFC] kernfs: hook inode initialization for LSMs, william . c . roberts
  - Re: [PATCH] [RFC] kernfs: hook inode initialization for LSMs, Greg KH
    - RE: [PATCH] [RFC] kernfs: hook inode initialization for LSMs, Roberts, William C
- Re: [RFC] [PATCH] kernfs: hook inode initialization for LSMs, Greg KH
  - RE: [RFC] [PATCH] kernfs: hook inode initialization for LSMs, Roberts, William C
[PATCH 1/2] libsepol: with pp to CIL, only associate declared roleattributes with in-scope types, Steve Lawrence
- [PATCH 2/2] libsepol: with pp to CIL, always write auditadm_r and secadm_r roles to the base module, Steve Lawrence
  - Re: [PATCH 2/2] libsepol: with pp to CIL, always write auditadm_r and secadm_r roles to the base module, Miroslav Grepl
  - Re: [PATCH 2/2] libsepol: with pp to CIL, always write auditadm_r and secadm_r roles to the base module, James Carter

[Index of Archives] [Selinux Refpolicy] [Fedora Users] [Fedora Desktop] [Kernel] [KDE Users] [Gnome Users]