Security Enhanced Linux (SELINUX)

• Date Index

• Re: [PATCH 02/11] vfs: Remove unnecessary list_for_each_entry_safe() variants, (continued)
  • Re: [PATCH 02/11] vfs: Remove unnecessary list_for_each_entry_safe() variants, Al Viro
  • Re: [PATCH 02/11] vfs: Remove unnecessary list_for_each_entry_safe() variants, Kent Overstreet
  • [PATCH 09/11] hash-bl: explicitly initialise hash-bl heads, Dave Chinner
    • Re: [PATCH 09/11] hash-bl: explicitly initialise hash-bl heads, Al Viro
  • [PATCH 11/11] hlist-bl: introduced nested locking for dm-snap, Dave Chinner
  • [PATCH 04/11] lib/dlock-list: Make sibling CPUs share the same linked list, Dave Chinner
    • Re: [PATCH 04/11] lib/dlock-list: Make sibling CPUs share the same linked list, Kent Overstreet
    • Re: [PATCH 04/11] lib/dlock-list: Make sibling CPUs share the same linked list, Kent Overstreet
      • Re: [PATCH 04/11] lib/dlock-list: Make sibling CPUs share the same linked list, Dave Chinner
    • Re: [PATCH 04/11] lib/dlock-list: Make sibling CPUs share the same linked list, Al Viro
  • [PATCH 01/11] lib/dlock-list: Distributed and lock-protected lists, Dave Chinner
    • Re: [PATCH 01/11] lib/dlock-list: Distributed and lock-protected lists, Al Viro
  • [PATCH 10/11] list_bl: don't use bit locks for PREEMPT_RT or lockdep, Dave Chinner
    • Re: [PATCH 10/11] list_bl: don't use bit locks for PREEMPT_RT or lockdep, Kent Overstreet
      • Re: [PATCH 10/11] list_bl: don't use bit locks for PREEMPT_RT or lockdep, Dave Chinner
  • [PATCH 08/11] vfs: inode cache conversion to hash-bl, Dave Chinner
    • Re: [PATCH 08/11] vfs: inode cache conversion to hash-bl, Kent Overstreet
      • Re: [PATCH 08/11] vfs: inode cache conversion to hash-bl, Dave Chinner
    • Re: [PATCH 08/11] vfs: inode cache conversion to hash-bl, Al Viro
  • [PATCH 03/11] vfs: Use dlock list for superblock's inode list, Dave Chinner
    • Re: [PATCH 03/11] vfs: Use dlock list for superblock's inode list, Al Viro
      • Re: [PATCH 03/11] vfs: Use dlock list for superblock's inode list, Dave Chinner
        • Re: [PATCH 03/11] vfs: Use dlock list for superblock's inode list, Kent Overstreet
  • Re: [PATCH 0/11] vfs: inode cache scalability improvements, Kent Overstreet
• [PATCH v6] checkpolicy,libsepol: add prefix/suffix matching to filename type transitions, Juraj Marcin
  • Re: [PATCH v6] checkpolicy,libsepol: add prefix/suffix matching to filename type transitions, James Carter
• setools build is broken by 61f21385004 ("libsepol: rename struct member"), revert?, Petr Lautrbach
  • Re: setools build is broken by 61f21385004 ("libsepol: rename struct member"), revert?, James Carter
  • [PATCH 1/2] Revert "libsepol/tests: rename bool indentifiers", Petr Lautrbach
    • [PATCH 2/2] Revert "libsepol: rename struct member", Petr Lautrbach
    • Re: [PATCH 1/2] Revert "libsepol/tests: rename bool indentifiers", James Carter
      • Re: [PATCH 1/2] Revert "libsepol/tests: rename bool indentifiers", Christian Göttsche
        • Re: [PATCH 1/2] Revert "libsepol/tests: rename bool indentifiers", James Carter
        • Re: [PATCH 1/2] Revert "libsepol/tests: rename bool indentifiers", Petr Lautrbach
          • Re: [PATCH 1/2] Revert "libsepol/tests: rename bool indentifiers", Chris PeBenito
• [PATCH] libsemanage: fix src/genhomedircon.c build on `gcc-14` (`-Werror=alloc-size`), Sergei Trofimovich
  • Re: [PATCH] libsemanage: fix src/genhomedircon.c build on `gcc-14` (`-Werror=alloc-size`), James Carter
    • Re: [PATCH] libsemanage: fix src/genhomedircon.c build on `gcc-14` (`-Werror=alloc-size`), James Carter
• [PATCH v2 0/3] clean up io_uring cmd header structure, Pavel Begunkov
  • [PATCH v2 2/3] io_uring/cmd: inline io_uring_cmd_do_in_task_lazy, Pavel Begunkov
    • Re: [PATCH v2 2/3] io_uring/cmd: inline io_uring_cmd_do_in_task_lazy, Ming Lei
  • [PATCH v2 3/3] io_uring/cmd: inline io_uring_cmd_get_task, Pavel Begunkov
    • Re: [PATCH v2 3/3] io_uring/cmd: inline io_uring_cmd_get_task, Ming Lei
  • [PATCH v2 1/3] io_uring: split out cmd api into a separate header, Pavel Begunkov
    • Re: [PATCH v2 1/3] io_uring: split out cmd api into a separate header, Ming Lei
  • Re: [PATCH v2 0/3] clean up io_uring cmd header structure, Jens Axboe
• [PATCH v7 19/23] ima: Move to LSM infrastructure, Roberto Sassu
  • [PATCH v7 20/23] ima: Move IMA-Appraisal to LSM infrastructure, Roberto Sassu
  • [PATCH v7 21/23] evm: Move to LSM infrastructure, Roberto Sassu
  • [PATCH v7 22/23] integrity: Remove 'integrity' LSM and move integrity functions to 'ima' LSM, Roberto Sassu
  • [PATCH v7 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Roberto Sassu
    • Re: [PATCH v7 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Roberto Sassu
• [PATCH] selinux: bring the comment about multithreaded process handling back, Munehisa Kamata
  • Re: [PATCH] selinux: bring the comment about multithreaded process handling back, Paul Moore
    • [PATCH v2] selinux: remove the wrong comment about multithreaded process handling, Munehisa Kamata
      • Re: [PATCH v2] selinux: remove the wrong comment about multithreaded process handling, Paul Moore
        • Re: [PATCH v2] selinux: remove the wrong comment about multithreaded process handling, Munehisa Kamata
• [PATCH] libsepol/cil: Clear AST node after destroying bad filecon rule, James Carter
  • Re: [PATCH] libsepol/cil: Clear AST node after destroying bad filecon rule, James Carter
    • Re: [PATCH] libsepol/cil: Clear AST node after destroying bad filecon rule, James Carter
• [PATCH 1/7] libsepol: validate conditional type rules have a simple default type, Christian Göttsche
  • [PATCH 3/7] checkpolicy/dismod: avoid duplicate initialization and fix module linking, Christian Göttsche
  • [PATCH 2/7] libsepol: use correct type to avoid truncations, Christian Göttsche
  • [PATCH 4/7] checkpolicy/dispol: misc updates, Christian Göttsche
    • Re: [PATCH 4/7] checkpolicy/dispol: misc updates, James Carter
  • [PATCH 5/7] libsepol: reject invalid class datums, Christian Göttsche
  • [PATCH 6/7] libsepol/fuzz: handle empty and non kernel policies, Christian Göttsche
  • [PATCH 7/7] libsepol: reject linking modules with no avrules, Christian Göttsche
  • Re: [PATCH 1/7] libsepol: validate conditional type rules have a simple default type, James Carter
    • Re: [PATCH 1/7] libsepol: validate conditional type rules have a simple default type, James Carter
• [PATCH] libsepol: simplify string formatting, Christian Göttsche
  • Re: [PATCH] libsepol: simplify string formatting, James Carter
    • Re: [PATCH] libsepol: simplify string formatting, James Carter
• [PATCH testsuite] defconfig: add NF_TABLES dependency for netlink_socket tests to pass, Alan Wandke
  • Re: [PATCH testsuite] defconfig: add NF_TABLES dependency for netlink_socket tests to pass, Stephen Smalley
    • Re: [PATCH testsuite] defconfig: add NF_TABLES dependency for netlink_socket tests to pass, Ondrej Mosnacek
• [PATCH v5] checkpolicy,libsepol: add prefix/suffix matching to filename type transitions, Juraj Marcin
  • Re: [PATCH v5] checkpolicy,libsepol: add prefix/suffix matching to filename type transitions, James Carter
• PSA: this list has moved to new vger infra (no action required), Konstantin Ryabitsev
• ANN: SELinux userspace 3.6-rc2 release, Petr Lautrbach
  • <Possible follow-ups>
  • ANN: SELinux userspace 3.6-rc2 release, Petr Lautrbach
    • Re: ANN: SELinux userspace 3.6, Petr Lautrbach
      • Re: ANN: SELinux userspace 3.6, Cathy Hu
        • Re: ANN: SELinux userspace 3.6, Petr Lautrbach
          • Re: ANN: SELinux userspace 3.6, Paul Moore
• getpolicyload returns 0, 2, 3, 4, ..., Petr Lautrbach
  • Re: getpolicyload returns 0, 2, 3, 4, ..., William Roberts
    • Re: getpolicyload returns 0, 2, 3, 4, ..., Christian Göttsche
• [PATCH v4] checkpolicy,libsepol: add prefix/suffix matching to filename type transitions, Juraj Marcin
  • Re: [PATCH v4] checkpolicy,libsepol: add prefix/suffix matching to filename type transitions, James Carter
• [PATCH v4] selinux: add prefix/suffix matching to filename type transitions, Juraj Marcin
  • Re: [PATCH v4] selinux: add prefix/suffix matching to filename type transitions, Stephen Smalley
  • Re: [PATCH v4] selinux: add prefix/suffix matching to filename type transitions, Paul Moore
    • Re: [PATCH v4] selinux: add prefix/suffix matching to filename type transitions, Juraj Marcin
      • Re: [PATCH v4] selinux: add prefix/suffix matching to filename type transitions, Paul Moore
        • Re: [PATCH v4] selinux: add prefix/suffix matching to filename type transitions, Juraj Marcin
          • [PATCH v5] selinux: add prefix/suffix matching to filename type transitions, Juraj Marcin
            • Re: [PATCH v5] selinux: add prefix/suffix matching to filename type transitions, Paul Moore
              • Re: [PATCH v5] selinux: add prefix/suffix matching to filename type transitions, Juraj Marcin
                • Re: [PATCH v5] selinux: add prefix/suffix matching to filename type transitions, Paul Moore
• [PATCH v6 00/25] security: Move IMA and EVM to the LSM infrastructure, Roberto Sassu
  • [PATCH v6 01/25] ima: Align ima_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v6 05/25] ima: Align ima_post_read_file() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v6 03/25] ima: Align ima_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v6 02/25] ima: Align ima_file_mprotect() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v6 04/25] ima: Align ima_inode_removexattr() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v6 06/25] evm: Align evm_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v6 07/25] evm: Align evm_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v6 08/25] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v6 09/25] security: Align inode_setattr hook definition with EVM, Roberto Sassu
  • [PATCH v6 10/25] security: Introduce inode_post_setattr hook, Roberto Sassu
  • [PATCH v6 11/25] security: Introduce inode_post_removexattr hook, Roberto Sassu
  • [PATCH v6 12/25] security: Introduce file_post_open hook, Roberto Sassu
  • [PATCH v6 13/25] security: Introduce file_release hook, Roberto Sassu
  • [PATCH v6 14/25] security: Introduce path_post_mknod hook, Roberto Sassu
  • [PATCH v6 15/25] security: Introduce inode_post_create_tmpfile hook, Roberto Sassu
  • [PATCH v6 16/25] security: Introduce inode_post_set_acl hook, Roberto Sassu
  • [PATCH v6 19/25] ima: Move to LSM infrastructure, Roberto Sassu
    • Re: [PATCH v6 19/25] ima: Move to LSM infrastructure, Roberto Sassu
  • [PATCH v6 17/25] security: Introduce inode_post_remove_acl hook, Roberto Sassu
  • [PATCH v6 18/25] security: Introduce key_post_create_or_update hook, Roberto Sassu
  • [PATCH v6 21/25] evm: Move to LSM infrastructure, Roberto Sassu
  • [PATCH v6 24/25] integrity: Remove LSM, Roberto Sassu
  • [PATCH v6 22/25] ima: Remove dependency on 'integrity' LSM, Roberto Sassu
  • [PATCH v6 25/25] security: Enforce ordering of 'ima' and 'evm' LSMs, Roberto Sassu
    • Re: [PATCH v6 25/25] security: Enforce ordering of 'ima' and 'evm' LSMs, Casey Schaufler
      • Re: [PATCH v6 25/25] security: Enforce ordering of 'ima' and 'evm' LSMs, Roberto Sassu
  • [PATCH v6 23/25] evm: Remove dependency on 'integrity' LSM, Roberto Sassu
  • [PATCH v6 20/25] ima: Move IMA-Appraisal to LSM infrastructure, Roberto Sassu
• [PATCH] sepolicy: port to dnf4 python API, Petr Lautrbach
  • Re: [PATCH] sepolicy: port to dnf4 python API, James Carter
  • Re: [PATCH] sepolicy: port to dnf4 python API, Ondrej Mosnacek
    • [PATCH v2] sepolicy: port to dnf4 python API, Petr Lautrbach
      • Re: [PATCH v2] sepolicy: port to dnf4 python API, Ondrej Mosnacek
        • Re: [PATCH v2] sepolicy: port to dnf4 python API, James Carter
• [PATCH v2 1/2] libsepol: avoid fixed sized format buffer for xperms, Christian Göttsche
  • [PATCH v2 2/2] libsepol: avoid fixed sized format buffer for xperms, Christian Göttsche
    • Re: [PATCH v2 2/2] libsepol: avoid fixed sized format buffer for xperms, James Carter
      • Re: [PATCH v2 2/2] libsepol: avoid fixed sized format buffer for xperms, James Carter
• [PATCH 1/2] libsepol: avoid fixed sized format buffer for xperms, Christian Göttsche
  • [PATCH 2/2] libsepol: avoid fixed sized format buffer for xperms, Christian Göttsche
• [PATCH v2] libsepol: add check for category value before printing, luhuaxin1
  • Re: [PATCH v2] libsepol: add check for category value before printing, James Carter
    • Re: [PATCH v2] libsepol: add check for category value before printing, James Carter
• [PATCH] MAINTAINERS: update the SELinux entry, Paul Moore
  • Re: [PATCH] MAINTAINERS: update the SELinux entry, Paul Moore
    • Re: [PATCH] MAINTAINERS: update the SELinux entry, Paul Moore
• [PATCH v3] selinux: introduce an initial SID for early boot processes, Ondrej Mosnacek
  • Re: [PATCH v3] selinux: introduce an initial SID for early boot processes, Paul Moore
    • Re: [PATCH v3] selinux: introduce an initial SID for early boot processes, Ondrej Mosnacek
    • Re: [PATCH v3] selinux: introduce an initial SID for early boot processes, Michael Ellerman
  • Re: [PATCH v3] selinux: introduce an initial SID for early boot processes, Stephen Smalley
    • Re: [PATCH v3] selinux: introduce an initial SID for early boot processes, Ondrej Mosnacek
      • Re: [PATCH v3] selinux: introduce an initial SID for early boot processes, Paul Moore
• [RFC PATCH] selinux: assorted hash table improvements, Paul Moore
  • Re: [RFC PATCH] selinux: assorted hash table improvements, Linus Torvalds
• [PATCH v1] libsepol: add check for category value before printing, luhuaxin1
  • Re: [PATCH v1] libsepol: add check for category value before printing, James Carter
• [PATCH] libsepol: add check for category value before printing, l00564439
• [PATCH] libsepol: validate common classes have at least one permissions, Christian Göttsche
  • Re: [PATCH] libsepol: validate common classes have at least one permissions, James Carter
    • Re: [PATCH] libsepol: validate common classes have at least one permissions, James Carter
• [PATCH] selinux: update filenametr_hash() to use full_name_hash(), Paul Moore
  • Re: [PATCH] selinux: update filenametr_hash() to use full_name_hash(), Linus Torvalds
    • Re: [PATCH] selinux: update filenametr_hash() to use full_name_hash(), Linus Torvalds
    • Re: [PATCH] selinux: update filenametr_hash() to use full_name_hash(), Paul Moore
• Proposed feature: fine-grained file descriptors in SELinux, Chris PeBenito
  • Re: Proposed feature: fine-grained file descriptors in SELinux, Paul Moore
    • Re: Proposed feature: fine-grained file descriptors in SELinux, Stephen Smalley
      • Re: Proposed feature: fine-grained file descriptors in SELinux, Paul Moore
      • Re: Proposed feature: fine-grained file descriptors in SELinux, Chris PeBenito
        • Re: Proposed feature: fine-grained file descriptors in SELinux, Stephen Smalley
• [PATCH] github: bump action dependencies, Christian Göttsche
  • Re: [PATCH] github: bump action dependencies, James Carter
    • Re: [PATCH] github: bump action dependencies, James Carter
• [PATCH] libsepol: update policy capabilities array, Christian Göttsche
  • Re: [PATCH] libsepol: update policy capabilities array, James Carter
    • Re: [PATCH] libsepol: update policy capabilities array, James Carter
• [PATCH 1/5] semodule_link: avoid NULL dereference on OOM, Christian Göttsche
  • [PATCH 2/5] libsepol: set number of target names, Christian Göttsche
  • [PATCH 5/5] libsepol: avoid memory corruption on realloc failure, Christian Göttsche
  • [PATCH 3/5] libselinux: fix memory leak in customizable_init(), Christian Göttsche
  • [PATCH 4/5] libsepol: avoid leak in OOM branch, Christian Göttsche
  • Re: [PATCH 1/5] semodule_link: avoid NULL dereference on OOM, James Carter
    • Re: [PATCH 1/5] semodule_link: avoid NULL dereference on OOM, James Carter
• [PATCH 1/7] Drop LGTM.com configuration, Christian Göttsche
  • [PATCH 7/7] scripts: update run-scan-build, Christian Göttsche
  • [PATCH 6/7] Update Python installation on Debian, Christian Göttsche
  • [PATCH 3/7] scripts: ignore unavailable interpreters, Christian Göttsche
  • [PATCH 2/7] Drop Travis CI configuration, Christian Göttsche
  • [PATCH 4/7] ci: bump Fedora to version 39, Christian Göttsche
  • [PATCH 5/7] libselinux: update Python binding, Christian Göttsche
  • Re: [PATCH 1/7] Drop LGTM.com configuration, James Carter
    • Re: [PATCH 1/7] Drop LGTM.com configuration, James Carter
• [PATCH v2 1/4] libsepol: use str_read() where appropriate, Christian Göttsche
  • [PATCH v2 4/4] libsepol: validate the identifier for initials SID is valid, Christian Göttsche
  • [PATCH v2 3/4] libsepol: enhance saturation check, Christian Göttsche
  • [PATCH v2 2/4] libsepol: adjust type for saturation check, Christian Göttsche
  • Re: [PATCH v2 1/4] libsepol: use str_read() where appropriate, James Carter
    • Re: [PATCH v2 1/4] libsepol: use str_read() where appropriate, James Carter
• [PATCH] libsepol/tests: Update the order of neverallow test results, James Carter
  • Re: [PATCH] libsepol/tests: Update the order of neverallow test results, James Carter
    • Re: [PATCH] libsepol/tests: Update the order of neverallow test results, James Carter
• ANN: SELinux userspace 3.6-rc1 release, Petr Lautrbach
• [PATCH v3] checkpolicy,libsepol: add prefix/suffix matching to filename type transitions, Juraj Marcin
  • Re: [PATCH v3] checkpolicy,libsepol: add prefix/suffix matching to filename type transitions, James Carter
    • Re: [PATCH v3] checkpolicy,libsepol: add prefix/suffix matching to filename type transitions, Christian Göttsche
  • Re: [PATCH v3] checkpolicy,libsepol: add prefix/suffix matching to filename type transitions, James Carter
    • Re: [PATCH v3] checkpolicy,libsepol: add prefix/suffix matching to filename type transitions, Juraj Marcin
• [PATCH v3] selinux: add prefix/suffix matching to filename type transitions, Juraj Marcin
  • Re: [PATCH v3] selinux: add prefix/suffix matching to filename type transitions, Stephen Smalley
• [PATCH v5 00/23] security: Move IMA and EVM to the LSM infrastructure, Roberto Sassu
  • [PATCH v5 01/23] ima: Align ima_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v5 01/23] ima: Align ima_inode_post_setattr() definition with LSM infrastructure, Casey Schaufler
  • [PATCH v5 02/23] ima: Align ima_file_mprotect() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v5 02/23] ima: Align ima_file_mprotect() definition with LSM infrastructure, Casey Schaufler
  • [PATCH v5 03/23] ima: Align ima_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v5 03/23] ima: Align ima_inode_setxattr() definition with LSM infrastructure, Casey Schaufler
  • [PATCH v5 04/23] ima: Align ima_inode_removexattr() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v5 04/23] ima: Align ima_inode_removexattr() definition with LSM infrastructure, Casey Schaufler
  • [PATCH v5 05/23] ima: Align ima_post_read_file() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v5 05/23] ima: Align ima_post_read_file() definition with LSM infrastructure, Casey Schaufler
  • [PATCH v5 06/23] evm: Align evm_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v5 06/23] evm: Align evm_inode_post_setattr() definition with LSM infrastructure, Casey Schaufler
  • [PATCH v5 07/23] evm: Align evm_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v5 07/23] evm: Align evm_inode_setxattr() definition with LSM infrastructure, Casey Schaufler
  • [PATCH v5 08/23] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v5 08/23] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure, Casey Schaufler
  • [PATCH v5 09/23] security: Align inode_setattr hook definition with EVM, Roberto Sassu
  • [PATCH v5 10/23] security: Introduce inode_post_setattr hook, Roberto Sassu
    • Re: [PATCH v5 10/23] security: Introduce inode_post_setattr hook, Casey Schaufler
    • Re: [PATCH v5 10/23] security: Introduce inode_post_setattr hook, Paul Moore
      • Re: [PATCH v5 10/23] security: Introduce inode_post_setattr hook, Roberto Sassu
        • Re: [PATCH v5 10/23] security: Introduce inode_post_setattr hook, Paul Moore
  • [PATCH v5 11/23] security: Introduce inode_post_removexattr hook, Roberto Sassu
    • Re: [PATCH v5 11/23] security: Introduce inode_post_removexattr hook, Casey Schaufler
      • Re: [PATCH v5 11/23] security: Introduce inode_post_removexattr hook, Roberto Sassu
      • Re: [PATCH v5 11/23] security: Introduce inode_post_removexattr hook, Roberto Sassu
        • Re: [PATCH v5 11/23] security: Introduce inode_post_removexattr hook, Casey Schaufler
          • Re: [PATCH v5 11/23] security: Introduce inode_post_removexattr hook, Paul Moore
    • Re: [PATCH v5 11/23] security: Introduce inode_post_removexattr hook, Paul Moore
  • [PATCH v5 12/23] security: Introduce file_post_open hook, Roberto Sassu
    • Re: [PATCH v5 12/23] security: Introduce file_post_open hook, Casey Schaufler
  • [PATCH v5 14/23] security: Introduce path_post_mknod hook, Roberto Sassu
    • Re: [PATCH v5 14/23] security: Introduce path_post_mknod hook, Casey Schaufler
  • [PATCH v5 13/23] security: Introduce file_pre_free_security hook, Roberto Sassu
    • Re: [PATCH v5 13/23] security: Introduce file_pre_free_security hook, Casey Schaufler
    • Re: [PATCH v5 13/23] security: Introduce file_pre_free_security hook, Paul Moore
      • Re: [PATCH v5 13/23] security: Introduce file_pre_free_security hook, Roberto Sassu
        • Re: [PATCH v5 13/23] security: Introduce file_pre_free_security hook, Paul Moore
  • [PATCH v5 15/23] security: Introduce inode_post_create_tmpfile hook, Roberto Sassu
    • Re: [PATCH v5 15/23] security: Introduce inode_post_create_tmpfile hook, Casey Schaufler
    • Re: [PATCH v5 15/23] security: Introduce inode_post_create_tmpfile hook, Paul Moore
  • [PATCH v5 16/23] security: Introduce inode_post_set_acl hook, Roberto Sassu
    • Re: [PATCH v5 16/23] security: Introduce inode_post_set_acl hook, Casey Schaufler
    • Re: [PATCH v5 16/23] security: Introduce inode_post_set_acl hook, Paul Moore
  • [PATCH v5 17/23] security: Introduce inode_post_remove_acl hook, Roberto Sassu
    • Re: [PATCH v5 17/23] security: Introduce inode_post_remove_acl hook, Casey Schaufler
    • Re: [PATCH v5 17/23] security: Introduce inode_post_remove_acl hook, Paul Moore
  • [PATCH v5 18/23] security: Introduce key_post_create_or_update hook, Roberto Sassu
    • Re: [PATCH v5 18/23] security: Introduce key_post_create_or_update hook, Casey Schaufler
  • [PATCH v5 19/23] ima: Move to LSM infrastructure, Roberto Sassu
    • Re: [PATCH v5 19/23] ima: Move to LSM infrastructure, Casey Schaufler
  • [PATCH v5 20/23] ima: Move IMA-Appraisal to LSM infrastructure, Roberto Sassu
    • Re: [PATCH v5 20/23] ima: Move IMA-Appraisal to LSM infrastructure, Casey Schaufler
  • [PATCH v5 22/23] integrity: Move integrity functions to the LSM infrastructure, Roberto Sassu
    • Re: [PATCH v5 22/23] integrity: Move integrity functions to the LSM infrastructure, Casey Schaufler
    • Re: [PATCH v5 22/23] integrity: Move integrity functions to the LSM infrastructure, Paul Moore
      • Re: [PATCH v5 22/23] integrity: Move integrity functions to the LSM infrastructure, Roberto Sassu
        • Re: [PATCH v5 22/23] integrity: Move integrity functions to the LSM infrastructure, Paul Moore
          • Re: [PATCH v5 22/23] integrity: Move integrity functions to the LSM infrastructure, Roberto Sassu
  • [PATCH v5 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Roberto Sassu
    • Re: [PATCH v5 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Paul Moore
      • Re: [PATCH v5 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Roberto Sassu
        • Re: [PATCH v5 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Paul Moore
          • Re: [PATCH v5 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Roberto Sassu
            • Re: [PATCH v5 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Roberto Sassu
            • Re: [PATCH v5 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Paul Moore
              • Re: [PATCH v5 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Roberto Sassu
                • Re: [PATCH v5 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Casey Schaufler
                  • Re: [PATCH v5 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Petr Tesarik
                    • Re: [PATCH v5 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Casey Schaufler
                      • Re: [PATCH v5 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Roberto Sassu
                        • Re: [PATCH v5 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Casey Schaufler
                          • Re: [PATCH v5 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Roberto Sassu
                            • Re: [PATCH v5 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Casey Schaufler
                • Re: [PATCH v5 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Mimi Zohar
                  • Re: [PATCH v5 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Paul Moore
                    • Re: [PATCH v5 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Paul Moore
                • Re: [PATCH v5 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Paul Moore
                  • Re: [PATCH v5 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Roberto Sassu
                  • Re: [PATCH v5 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Roberto Sassu
                    • Re: [PATCH v5 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Mimi Zohar
                    • Re: [PATCH v5 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Roberto Sassu
                      • Re: [PATCH v5 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Mimi Zohar
                        • Re: [PATCH v5 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Roberto Sassu
                • Re: [PATCH v5 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Dr. Greg
                  • Re: [PATCH v5 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Casey Schaufler
                    • Re: [PATCH v5 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Dr. Greg
                      • Re: [PATCH v5 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Casey Schaufler
      • Re: [PATCH v5 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Roberto Sassu
        • Re: [PATCH v5 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Casey Schaufler
  • [PATCH v5 21/23] evm: Move to LSM infrastructure, Roberto Sassu
    • Re: [PATCH v5 21/23] evm: Move to LSM infrastructure, Casey Schaufler
  • Re: [PATCH v5 00/23] security: Move IMA and EVM to the LSM infrastructure, Roberto Sassu
    • Re: [PATCH v5 00/23] security: Move IMA and EVM to the LSM infrastructure, Mimi Zohar
    • Re: [PATCH v5 00/23] security: Move IMA and EVM to the LSM infrastructure, Paul Moore
• [PATCH v2 1/3] libsepol: validate default type of transition is not an attribute, Christian Göttsche
  • [PATCH v2 3/3] libsepol: more strict validation, Christian Göttsche
    • Re: [PATCH v2 3/3] libsepol: more strict validation, James Carter
  • [PATCH v2 2/3] libsepol: validate constraint depth, Christian Göttsche
    • Re: [PATCH v2 2/3] libsepol: validate constraint depth, James Carter
  • Re: [PATCH v2 1/3] libsepol: validate default type of transition is not an attribute, James Carter
    • Re: [PATCH v2 1/3] libsepol: validate default type of transition is not an attribute, James Carter
• [PATCH] libsepol: reject unsupported policy capabilities, Christian Göttsche
  • Re: [PATCH] libsepol: reject unsupported policy capabilities, James Carter
    • Re: [PATCH] libsepol: reject unsupported policy capabilities, James Carter
• [PATCH v5 0/3] selinux: avtab arrays and refactors, Jacob Satterfield
  • [PATCH v5 1/3] selinux: refactor avtab_node comparisons, Jacob Satterfield
    • Re: [PATCH v5 1/3] selinux: refactor avtab_node comparisons, Paul Moore
  • [PATCH v5 2/3] selinux: fix conditional avtab slot hint, Jacob Satterfield
    • Re: [PATCH v5 2/3] selinux: fix conditional avtab slot hint, Stephen Smalley
    • Re: [PATCH v5 2/3] selinux: fix conditional avtab slot hint, Paul Moore
      • Re: [PATCH v5 2/3] selinux: fix conditional avtab slot hint, Jacob Satterfield
        • Re: [PATCH v5 2/3] selinux: fix conditional avtab slot hint, Paul Moore
          • Re: [PATCH v5 2/3] selinux: fix conditional avtab slot hint, Jacob Satterfield
            • Re: [PATCH v5 2/3] selinux: fix conditional avtab slot hint, Paul Moore
  • [PATCH v5 3/3] selinux: use arrays for avtab hashtable nodes, Jacob Satterfield
    • Re: [PATCH v5 3/3] selinux: use arrays for avtab hashtable nodes, Stephen Smalley
• [PATCH v4 0/3] selinux: avtab arrays and refactors, Jacob Satterfield
  • [PATCH v4 1/3] selinux: refactor avtab_node comparisons, Jacob Satterfield
  • [PATCH v4 3/3] selinux: use arrays for avtab hashtable nodes, Jacob Satterfield
    • Re: [PATCH v4 3/3] selinux: use arrays for avtab hashtable nodes, Stephen Smalley
      • Re: [PATCH v4 3/3] selinux: use arrays for avtab hashtable nodes, Jacob Satterfield
  • [PATCH v4 2/3] selinux: fix conditional avtab slot hint, Jacob Satterfield
• [PATCH v3 1/2] libselinux: cast to unsigned char for character handling function, Christian Göttsche
  • [PATCH v3 2/2] libselinux: introduce reallocarray(3), Christian Göttsche
    • Re: [PATCH v3 2/2] libselinux: introduce reallocarray(3), James Carter
  • Re: [PATCH v3 1/2] libselinux: cast to unsigned char for character handling function, James Carter
    • Re: [PATCH v3 1/2] libselinux: cast to unsigned char for character handling function, James Carter
• [PATCH 1/2] libsepol: use str_read() where appropriate, Christian Göttsche
  • [PATCH 2/2] libsepol: rework saturation check, Christian Göttsche
    • Re: [PATCH 2/2] libsepol: rework saturation check, James Carter
• [PATCH] libsepol: ignore writing invalid polcaps in fuzzer, Christian Göttsche
  • Re: [PATCH] libsepol: ignore writing invalid polcaps in fuzzer, James Carter
• [PATCH 1/3] libsepol: validate default type of transition is not an attribute, Christian Göttsche
  • [PATCH 2/3] libsepol: validate constraint depth, Christian Göttsche
    • Re: [PATCH 2/3] libsepol: validate constraint depth, James Carter
  • [PATCH 3/3] libsepol: more strict validation, Christian Göttsche
    • Re: [PATCH 3/3] libsepol: more strict validation, James Carter
  • Re: [PATCH 1/3] libsepol: validate default type of transition is not an attribute, James Carter
• [PATCH] libselinux/utils: update getdefaultcon, Christian Göttsche
  • Re: [PATCH] libselinux/utils: update getdefaultcon, James Carter
    • Re: [PATCH] libselinux/utils: update getdefaultcon, James Carter
• [PATCH v2 1/2] libsepol: reject avtab entries with invalid specifier, Christian Göttsche
  • [PATCH v2 2/2] libsepol: avtab: check read counts for saturation, Christian Göttsche
  • Re: [PATCH v2 1/2] libsepol: reject avtab entries with invalid specifier, James Carter
    • Re: [PATCH v2 1/2] libsepol: reject avtab entries with invalid specifier, James Carter
• SELinux userspace 3.6 release - the current status and plan, Petr Lautrbach
  • Re: SELinux userspace 3.6 release - the current status and plan, James Carter
    • Re: SELinux userspace 3.6 release - the current status and plan, James Carter
  • Re: SELinux userspace 3.6 release - the current status and plan, Daniel Burgener
• [GIT PULL] selinux/selinux-pr-20231030, Paul Moore
  • Re: [GIT PULL] selinux/selinux-pr-20231030, Linus Torvalds
    • Re: [GIT PULL] selinux/selinux-pr-20231030, Paul Moore
  • Re: [GIT PULL] selinux/selinux-pr-20231030, pr-tracker-bot
• [PATCH v4 00/23] security: Move IMA and EVM to the LSM infrastructure, Roberto Sassu
  • [PATCH v4 01/23] ima: Align ima_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v4 02/23] ima: Align ima_file_mprotect() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v4 03/23] ima: Align ima_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v4 04/23] ima: Align ima_inode_removexattr() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v4 05/23] ima: Align ima_post_read_file() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v4 06/23] evm: Align evm_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v4 07/23] evm: Align evm_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v4 08/23] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v4 09/23] security: Align inode_setattr hook definition with EVM, Roberto Sassu
  • [PATCH v4 10/23] security: Introduce inode_post_setattr hook, Roberto Sassu
  • [PATCH v4 11/23] security: Introduce inode_post_removexattr hook, Roberto Sassu
  • [PATCH v4 12/23] security: Introduce file_post_open hook, Roberto Sassu
    • Re: [PATCH v4 12/23] security: Introduce file_post_open hook, Mimi Zohar
  • [PATCH v4 13/23] security: Introduce file_pre_free_security hook, Roberto Sassu
  • [PATCH v4 14/23] security: Introduce path_post_mknod hook, Roberto Sassu
  • [PATCH v4 15/23] security: Introduce inode_post_create_tmpfile hook, Roberto Sassu
  • [PATCH v4 16/23] security: Introduce inode_post_set_acl hook, Roberto Sassu
  • [PATCH v4 17/23] security: Introduce inode_post_remove_acl hook, Roberto Sassu
    • Re: [PATCH v4 17/23] security: Introduce inode_post_remove_acl hook, Mimi Zohar
  • [PATCH v4 18/23] security: Introduce key_post_create_or_update hook, Roberto Sassu
  • [PATCH v4 19/23] ima: Move to LSM infrastructure, Roberto Sassu
  • [PATCH v4 20/23] ima: Move IMA-Appraisal to LSM infrastructure, Roberto Sassu
    • Re: [PATCH v4 20/23] ima: Move IMA-Appraisal to LSM infrastructure, Mimi Zohar
  • [PATCH v4 21/23] evm: Move to LSM infrastructure, Roberto Sassu
  • [PATCH v4 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Roberto Sassu
  • [PATCH v4 22/23] integrity: Move integrity functions to the LSM infrastructure, Roberto Sassu
  • Re: [PATCH v4 00/23] security: Move IMA and EVM to the LSM infrastructure, Mimi Zohar
• ANN: kernel git branches and process changes, Paul Moore
  • Re: ANN: kernel git branches and process changes, Bagas Sanjaya
    • Re: ANN: kernel git branches and process changes, Paul Moore
      • Re: ANN: kernel git branches and process changes, Bagas Sanjaya
• SELinux Userspace Release?, James Carter
  • Re: SELinux Userspace Release?, Petr Lautrbach
• [PATCH] sepolicy/manpage.py: make output deterministic, Cathy Hu
  • Re: [PATCH] sepolicy/manpage.py: make output deterministic, Petr Lautrbach
    • [PATCH v2] sepolicy/manpage.py: make output deterministic, Cathy Hu
      • Re: [PATCH v2] sepolicy/manpage.py: make output deterministic, Petr Lautrbach
        • Re: [PATCH v2] sepolicy/manpage.py: make output deterministic, James Carter
• [RFC PATCH 0/3] LSM syscall tweaks, Paul Moore
  • [RFC PATCH 1/3] lsm: cleanup the size counters in security_getselfattr(), Paul Moore
    • Re: [RFC PATCH 1/3] lsm: cleanup the size counters in security_getselfattr(), Casey Schaufler
      • Re: [RFC PATCH 1/3] lsm: cleanup the size counters in security_getselfattr(), Paul Moore
        • Re: [RFC PATCH 1/3] lsm: cleanup the size counters in security_getselfattr(), Casey Schaufler
          • Re: [RFC PATCH 1/3] lsm: cleanup the size counters in security_getselfattr(), Paul Moore
    • Re: [RFC PATCH 1/3] lsm: cleanup the size counters in security_getselfattr(), Mickaël Salaün
  • [RFC PATCH 2/3] lsm: correct error codes in security_getselfattr(), Paul Moore
    • Re: [RFC PATCH 2/3] lsm: correct error codes in security_getselfattr(), Casey Schaufler
    • Re: [RFC PATCH 2/3] lsm: correct error codes in security_getselfattr(), Mickaël Salaün
  • [RFC PATCH 3/3] lsm: consolidate buffer size handling into lsm_fill_user_ctx(), Paul Moore
    • Re: [RFC PATCH 3/3] lsm: consolidate buffer size handling into lsm_fill_user_ctx(), Mickaël Salaün
      • Re: [RFC PATCH 3/3] lsm: consolidate buffer size handling into lsm_fill_user_ctx(), Paul Moore
    • Re: [RFC PATCH 3/3] lsm: consolidate buffer size handling into lsm_fill_user_ctx(), Aishwarya TCV
      • Re: [RFC PATCH 3/3] lsm: consolidate buffer size handling into lsm_fill_user_ctx(), Paul Moore
        • Re: [RFC PATCH 3/3] lsm: consolidate buffer size handling into lsm_fill_user_ctx(), Mark Brown
          • Re: [RFC PATCH 3/3] lsm: consolidate buffer size handling into lsm_fill_user_ctx(), Paul Moore
            • Re: [RFC PATCH 3/3] lsm: consolidate buffer size handling into lsm_fill_user_ctx(), Mark Brown
  • Re: [RFC PATCH 0/3] LSM syscall tweaks, Paul Moore
    • Re: [RFC PATCH 0/3] LSM syscall tweaks, Casey Schaufler
  • Re: [RFC PATCH 0/3] LSM syscall tweaks, Paul Moore
• [PATCH v4 0/4] vduse: add support for networking devices, Maxime Coquelin
  • [PATCH v4 2/4] vduse: enable Virtio-net device type, Maxime Coquelin
  • [PATCH v4 1/4] vduse: validate block features only with block devices, Maxime Coquelin
    • Re: [PATCH v4 1/4] vduse: validate block features only with block devices, Casey Schaufler
      • Re: [PATCH v4 1/4] vduse: validate block features only with block devices, Maxime Coquelin
  • [PATCH v4 3/4] vduse: Temporarily disable control queue features, Maxime Coquelin
    • Re: [PATCH v4 3/4] vduse: Temporarily disable control queue features, Jason Wang
      • Re: [PATCH v4 3/4] vduse: Temporarily disable control queue features, Maxime Coquelin
  • [PATCH v4 4/4] vduse: Add LSM hooks to check Virtio device type, Maxime Coquelin
    • Re: [PATCH v4 4/4] vduse: Add LSM hooks to check Virtio device type, Casey Schaufler
      • Re: [PATCH v4 4/4] vduse: Add LSM hooks to check Virtio device type, Maxime Coquelin
        • Re: [PATCH v4 4/4] vduse: Add LSM hooks to check Virtio device type, Casey Schaufler
          • Re: [PATCH v4 4/4] vduse: Add LSM hooks to check Virtio device type, Maxime Coquelin
            • Re: [PATCH v4 4/4] vduse: Add LSM hooks to check Virtio device type, Casey Schaufler
              • Re: [PATCH v4 4/4] vduse: Add LSM hooks to check Virtio device type, Maxime Coquelin
                • Re: [PATCH v4 4/4] vduse: Add LSM hooks to check Virtio device type, Michael S. Tsirkin
                  • Re: [PATCH v4 4/4] vduse: Add LSM hooks to check Virtio device type, Maxime Coquelin
                    • Re: [PATCH v4 4/4] vduse: Add LSM hooks to check Virtio device type, Michael S. Tsirkin
    • Re: [PATCH v4 4/4] vduse: Add LSM hooks to check Virtio device type, Jason Wang
    • Re: [PATCH v4 4/4] vduse: Add LSM hooks to check Virtio device type, Paul Moore
      • Re: [PATCH v4 4/4] vduse: Add LSM hooks to check Virtio device type, Maxime Coquelin
        • Re: [PATCH v4 4/4] vduse: Add LSM hooks to check Virtio device type, Michael S. Tsirkin
          • Re: [PATCH v4 4/4] vduse: Add LSM hooks to check Virtio device type, Maxime Coquelin
            • Re: [PATCH v4 4/4] vduse: Add LSM hooks to check Virtio device type, Michael S. Tsirkin
              • Re: [PATCH v4 4/4] vduse: Add LSM hooks to check Virtio device type, Maxime Coquelin
• [PATCH v3 0/3] selinux: avtab arrays and refactors, Jacob Satterfield
  • [PATCH v3 1/3] selinux: refactor avtab_node comparisons, Jacob Satterfield
    • Re: [PATCH v3 1/3] selinux: refactor avtab_node comparisons, Stephen Smalley
      • Re: [PATCH v3 1/3] selinux: refactor avtab_node comparisons, Jacob Satterfield
  • [PATCH v3 2/3] selinux: avtab iteration macros, Jacob Satterfield
    • Re: [PATCH v3 2/3] selinux: avtab iteration macros, Jacob Satterfield
  • [PATCH v3 3/3] selinux: use arrays for avtab hashtable nodes, Jacob Satterfield
    • Re: [PATCH v3 3/3] selinux: use arrays for avtab hashtable nodes, Stephen Smalley
      • Re: [PATCH v3 3/3] selinux: use arrays for avtab hashtable nodes, Jacob Satterfield
• [PATCH] RFC: selinux: don't filter copy-up xattrs while uninitialized, David Disseldorp
  • Re: [PATCH] RFC: selinux: don't filter copy-up xattrs while uninitialized, Stephen Smalley
    • Re: [PATCH] RFC: selinux: don't filter copy-up xattrs while uninitialized, Paul Moore
      • Re: [PATCH] RFC: selinux: don't filter copy-up xattrs while uninitialized, David Disseldorp
        • Re: [PATCH] RFC: selinux: don't filter copy-up xattrs while uninitialized, Paul Moore
• [PATCH][RFC] selinuxfs: saner handling of policy reloads, Al Viro
  • Re: [PATCH][RFC] selinuxfs: saner handling of policy reloads, Paul Moore
    • Re: [PATCH][RFC] selinuxfs: saner handling of policy reloads, Al Viro
      • Re: [PATCH][RFC] selinuxfs: saner handling of policy reloads, Paul Moore
      • Re: [PATCH][RFC] selinuxfs: saner handling of policy reloads, Stephen Smalley
        • Re: [PATCH][RFC] selinuxfs: saner handling of policy reloads, Paul Moore
  • Re: [PATCH][RFC] selinuxfs: saner handling of policy reloads, Stephen Smalley
  • Re: [PATCH][RFC] selinuxfs: saner handling of policy reloads, Paul Moore
    • Re: [PATCH][RFC] selinuxfs: saner handling of policy reloads, Stephen Smalley
      • Re: [PATCH][RFC] selinuxfs: saner handling of policy reloads, Al Viro
        • Re: [PATCH][RFC] selinuxfs: saner handling of policy reloads, Al Viro
      • Re: [PATCH][RFC] selinuxfs: saner handling of policy reloads, Paul Moore
        • Re: [PATCH][RFC] selinuxfs: saner handling of policy reloads, Stephen Smalley
          • Re: [PATCH][RFC] selinuxfs: saner handling of policy reloads, Stephen Smalley
            • Re: [PATCH][RFC] selinuxfs: saner handling of policy reloads, Stephen Smalley
              • Re: [PATCH][RFC] selinuxfs: saner handling of policy reloads, Paul Moore
• [PATCH] libsepol/cil: Do not allow classpermissionset to use anonymous classpermission, James Carter
  • Re: [PATCH] libsepol/cil: Do not allow classpermissionset to use anonymous classpermission, James Carter
    • Re: [PATCH] libsepol/cil: Do not allow classpermissionset to use anonymous classpermission, James Carter
• RFC: thoughts on SELinux namespacing, Paul Moore
  • Re: RFC: thoughts on SELinux namespacing, James Carter
    • Re: RFC: thoughts on SELinux namespacing, Paul Moore
  • Re: RFC: thoughts on SELinux namespacing, Stephen Smalley
    • Re: RFC: thoughts on SELinux namespacing, Paul Moore
  • Re: RFC: thoughts on SELinux namespacing, Casey Schaufler
    • Re: RFC: thoughts on SELinux namespacing, Paul Moore
      • Re: RFC: thoughts on SELinux namespacing, Casey Schaufler
• An X.509 certificate for selinuxproject.org web server has expired, Petr Pisar
  • Re: An X.509 certificate for selinuxproject.org web server has expired, Paul Moore
    • Re: An X.509 certificate for selinuxproject.org web server has expired, Paul Moore
• Re: [PATCH v6 3/13] bpf: introduce BPF token object, Paul Moore
  • Re: [PATCH v6 3/13] bpf: introduce BPF token object, Andrii Nakryiko
    • Re: [PATCH v6 3/13] bpf: introduce BPF token object, Andrii Nakryiko
      • Re: [PATCH v6 3/13] bpf: introduce BPF token object, Paul Moore
        • Re: [PATCH v6 3/13] bpf: introduce BPF token object, Andrii Nakryiko
    • Re: [PATCH v6 3/13] bpf: introduce BPF token object, Paul Moore
      • Re: [PATCH v6 3/13] bpf: introduce BPF token object, Andrii Nakryiko
• Re: [PATCH v6 6/13] bpf: add BPF token support to BPF_PROG_LOAD command, Paul Moore
  • Re: [PATCH v6 6/13] bpf: add BPF token support to BPF_PROG_LOAD command, Andrii Nakryiko
• [PATCH v2 87/89] fs: rename inode i_atime and i_mtime fields, Jeff Layton
  • [PATCH v2 89/89] fs: move i_generation into new hole created after timestamp conversion, Jeff Layton
  • [PATCH v2 88/89] fs: switch timespec64 fields in inode to discrete integers, Jeff Layton
• [PATCH v2 00/89] fs: new accessor methods for inode atime and mtime, Jeff Layton
  • [PATCH v2 01/89] fs: new accessor methods for atime and mtime, Jeff Layton
    • [PATCH v2 02/89] fs: convert core infrastructure to new timestamp accessors, Jeff Layton
  • Message not available
    • [PATCH v2 85/89] selinux: convert to new timestamp accessors, Jeff Layton
  • Re: [PATCH v2 00/89] fs: new accessor methods for inode atime and mtime, Christian Brauner
• ANN: Reference Policy 2.20231002, Chris PeBenito
• [PATCH v2 0/4] selinux: avtab arrays and refactors, Jacob Satterfield
  • [PATCH 2/4] selinux: refactor avtab_node comparisons, Jacob Satterfield
    • Re: [PATCH 2/4] selinux: refactor avtab_node comparisons, Stephen Smalley
    • Re: [PATCH 2/4] selinux: refactor avtab_node comparisons, Paul Moore
      • Re: [PATCH 2/4] selinux: refactor avtab_node comparisons, Jacob Satterfield
  • [PATCH 3/4] selinux: avtab iteration macros, Jacob Satterfield
    • Re: [PATCH 3/4] selinux: avtab iteration macros, Stephen Smalley
      • Re: [PATCH 3/4] selinux: avtab iteration macros, Jacob Satterfield
  • [PATCH 1/4] selinux: simplify avtab_insert_node() prototype, Jacob Satterfield
    • Re: [PATCH 1/4] selinux: simplify avtab_insert_node() prototype, Stephen Smalley
    • Re: [PATCH 1/4] selinux: simplify avtab_insert_node() prototype, Paul Moore
  • [PATCH 4/4] selinux: use arrays for avtab hashtable nodes, Jacob Satterfield
• [PATCH 85/87] fs: rename i_atime and i_mtime fields to __i_atime and __i_mtime, Jeff Layton
  • [PATCH 87/87] fs: move i_blocks up a few places in struct inode, Jeff Layton
    • Re: [PATCH 87/87] fs: move i_blocks up a few places in struct inode, Amir Goldstein
      • Re: [PATCH 87/87] fs: move i_blocks up a few places in struct inode, Jeff Layton
    • Re: [PATCH 87/87] fs: move i_blocks up a few places in struct inode, Linus Torvalds
      • Re: [PATCH 87/87] fs: move i_blocks up a few places in struct inode, Jeff Layton
      • Re: [PATCH 87/87] fs: move i_blocks up a few places in struct inode, Christian Brauner
  • [PATCH 86/87] fs: switch timespec64 fields in inode to discrete integers, Jeff Layton
    • Re: [PATCH 86/87] fs: switch timespec64 fields in inode to discrete integers, Arnd Bergmann
      • Re: [PATCH 86/87] fs: switch timespec64 fields in inode to discrete integers, Jeff Layton
        • Re: [PATCH 86/87] fs: switch timespec64 fields in inode to discrete integers, Darrick J. Wong
          • Re: [PATCH 86/87] fs: switch timespec64 fields in inode to discrete integers, Jeff Layton
            • Re: [PATCH 86/87] fs: switch timespec64 fields in inode to discrete integers, Arnd Bergmann
            • Re: [PATCH 86/87] fs: switch timespec64 fields in inode to discrete integers, Theodore Ts'o
              • Re: [PATCH 86/87] fs: switch timespec64 fields in inode to discrete integers, Linus Torvalds
                • Re: [PATCH 86/87] fs: switch timespec64 fields in inode to discrete integers, Amir Goldstein
                  • Re: [PATCH 86/87] fs: switch timespec64 fields in inode to discrete integers, Linus Torvalds
          • Re: [PATCH 86/87] fs: switch timespec64 fields in inode to discrete integers, Amir Goldstein
          • Re: [PATCH 86/87] fs: switch timespec64 fields in inode to discrete integers, David Howells
            • Re: [PATCH 86/87] fs: switch timespec64 fields in inode to discrete integers, Steve French
              • [OT] Re: [PATCH 86/87] fs: switch timespec64 fields in inode to discrete integers, Gabriel Paubert
        • Re: [PATCH 86/87] fs: switch timespec64 fields in inode to discrete integers, Christian Brauner
          • Re: [PATCH 86/87] fs: switch timespec64 fields in inode to discrete integers, Jeff Layton
    • Re: [PATCH 86/87] fs: switch timespec64 fields in inode to discrete integers, Jeff Layton
• [PATCH 00/87] fs: new accessor methods for atime and mtime, Jeff Layton
  • [PATCH 01/87] fs: new accessor methods for atime and mtime, Jeff Layton
  • Message not available
    • [PATCH 83/87] security/selinux: convert to new inode {a,m}time accessors, Jeff Layton
      • Re: [PATCH 83/87] security/selinux: convert to new inode {a,m}time accessors, Paul Moore
• [PATCH 0/9] CIL Cleanups and Improved Argument handling, James Carter
  • [PATCH 1/9] libsepol/cil: Use struct cil_db * instead of void *, James Carter
    • Re: [PATCH 1/9] libsepol/cil: Use struct cil_db * instead of void *, Daniel Burgener
      • Re: [PATCH 1/9] libsepol/cil: Use struct cil_db * instead of void *, James Carter
        • Re: [PATCH 1/9] libsepol/cil: Use struct cil_db * instead of void *, Daniel Burgener
          • Re: [PATCH 1/9] libsepol/cil: Use struct cil_db * instead of void *, Petr Lautrbach
            • Re: [PATCH 1/9] libsepol/cil: Use struct cil_db * instead of void *, James Carter
              • Re: [PATCH 1/9] libsepol/cil: Use struct cil_db * instead of void *, James Carter
  • [PATCH 4/9] secilc/docs: Update syntax for IP addresses and nodecon, James Carter
  • [PATCH 2/9] libsepol/cil: Refactor and improve handling of order rules, James Carter
  • [PATCH 3/9] libsepol/cil: Allow IP address and mask values to be directly written, James Carter
  • [PATCH 9/9] libsepol/cil: Give warning for name that has different flavor, James Carter
  • [PATCH 7/9] secilc/docs: Fix and update the documentation for macro parameters, James Carter
  • [PATCH 5/9] libsepol/cil: Refactor Named Type Transition Filename Creation, James Carter
  • [PATCH 8/9] libsepol/cil: Add pointers to datums to improve writing out AST, James Carter
  • [PATCH 6/9] libsepol/cil: Allow paths in filecon rules to be passed as arguments, James Carter
• Re: [PATCH v4 2/12] bpf: introduce BPF token object, Paul Moore
  • Re: [PATCH v4 2/12] bpf: introduce BPF token object, Paul Moore
  • Re: [PATCH v4 2/12] bpf: introduce BPF token object, Andrii Nakryiko
    • Re: [PATCH v4 2/12] bpf: introduce BPF token object, Paul Moore
    • Re: [PATCH v4 2/12] bpf: introduce BPF token object, Paul Moore
      • Re: [PATCH v4 2/12] bpf: introduce BPF token object, Andrii Nakryiko
• [GIT PULL] SELinux fixes for v6.6 (#1), Paul Moore
  • Re: [GIT PULL] SELinux fixes for v6.6 (#1), pr-tracker-bot
• [PATCH v15 10/11] SELinux: Add selfattr hooks, Casey Schaufler
• generating new type name using CIL macro, Vit Mojzis
  • Re: generating new type name using CIL macro, Dominick Grift
    • Re: generating new type name using CIL macro, Vit Mojzis
      • Re: generating new type name using CIL macro, Dominick Grift
    • Re: generating new type name using CIL macro, James Carter
      • Re: generating new type name using CIL macro, Vit Mojzis
        • Re: generating new type name using CIL macro, James Carter
        • Re: generating new type name using CIL macro, James Carter
• [PATCH] selinux: fix handling of empty opts in selinux_fs_context_submount(), Ondrej Mosnacek
  • Re: [PATCH] selinux: fix handling of empty opts in selinux_fs_context_submount(), Jeff Layton
  • Re: [PATCH] selinux: fix handling of empty opts in selinux_fs_context_submount(), Paul Moore
  • Re: [PATCH] selinux: fix handling of empty opts in selinux_fs_context_submount(), Christian Brauner
• [PATCH 0/3] avtab hotspot optimizations, Jacob Satterfield
  • [PATCH 1/3] selinux: use arrays for avtab hashtable nodes, Jacob Satterfield
    • Re: [PATCH 1/3] selinux: use arrays for avtab hashtable nodes, Stephen Smalley
    • Re: [PATCH 1/3] selinux: use arrays for avtab hashtable nodes, Paul Moore
      • Re: [PATCH 1/3] selinux: use arrays for avtab hashtable nodes, Jacob Satterfield
        • Re: [PATCH 1/3] selinux: use arrays for avtab hashtable nodes, Paul Moore
          • Re: [PATCH 1/3] selinux: use arrays for avtab hashtable nodes, Jacob Satterfield
  • [PATCH 2/3] selinux: shrink conditional avtab node array, Jacob Satterfield
    • Re: [PATCH 2/3] selinux: shrink conditional avtab node array, Stephen Smalley
  • [PATCH 3/3] selinux: hweight optimization in avtab_read_item, Jacob Satterfield
    • Re: [PATCH 3/3] selinux: hweight optimization in avtab_read_item, Stephen Smalley
    • Re: [PATCH 3/3] selinux: hweight optimization in avtab_read_item, Paul Moore
• [PATCH] SELinux: Check correct permissions for FS_IOC32_*, Alfred Piccioni
  • [PATCH V2] SELinux: Check correct permissions for FS_IOC32_*, Alfred Piccioni
    • Re: [PATCH V2] SELinux: Check correct permissions for FS_IOC32_*, Stephen Smalley
    • Re: [PATCH V2] SELinux: Check correct permissions for FS_IOC32_*, kernel test robot
      • Re: [PATCH V2] SELinux: Check correct permissions for FS_IOC32_*, Stephen Smalley
        • Re: [PATCH V2] SELinux: Check correct permissions for FS_IOC32_*, Stephen Smalley
          • Re: [PATCH V2] SELinux: Check correct permissions for FS_IOC32_*, Alfred Piccioni
            • Re: [PATCH V2] SELinux: Check correct permissions for FS_IOC32_*, Stephen Smalley
              • Re: [PATCH V2] SELinux: Check correct permissions for FS_IOC32_*, Mickaël Salaün
        • Re: [PATCH V2] SELinux: Check correct permissions for FS_IOC32_*, Paul Moore
  • [PATCH] SELinux: Introduce security_file_ioctl_compat hook, Alfred Piccioni
    • Re: [PATCH] SELinux: Introduce security_file_ioctl_compat hook, Stephen Smalley
      • Re: [PATCH] SELinux: Introduce security_file_ioctl_compat hook, Stephen Smalley
  • [PATCH] security: new security_file_ioctl_compat() hook, Alfred Piccioni
    • Re: [PATCH] security: new security_file_ioctl_compat() hook, Alfred Piccioni
      • Re: [PATCH] security: new security_file_ioctl_compat() hook, Alfred Piccioni
      • Re: [PATCH] security: new security_file_ioctl_compat() hook, Stephen Smalley
      • Re: [PATCH] security: new security_file_ioctl_compat() hook, Tetsuo Handa
    • Re: [PATCH] security: new security_file_ioctl_compat() hook, Stephen Smalley
    • Re: [PATCH] security: new security_file_ioctl_compat() hook, Eric Biggers
    • Re: [PATCH] security: new security_file_ioctl_compat() hook, Paul Moore
      • Re: [PATCH] security: new security_file_ioctl_compat() hook, Tetsuo Handa
        • Re: [PATCH] security: new security_file_ioctl_compat() hook, Paul Moore
      • Re: [PATCH] security: new security_file_ioctl_compat() hook, Eric Biggers
        • Re: [PATCH] security: new security_file_ioctl_compat() hook, Paul Moore
          • Re: [PATCH] security: new security_file_ioctl_compat() hook, Paul Moore
      • Re: [PATCH] security: new security_file_ioctl_compat() hook, Casey Schaufler
    • Re: [PATCH] security: new security_file_ioctl_compat() hook, Paul Moore
      • Re: [PATCH] security: new security_file_ioctl_compat() hook, Eric Biggers
• [PATCH v3 00/25] security: Move IMA and EVM to the LSM infrastructure, Roberto Sassu
  • [PATCH v3 01/25] ima: Align ima_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v3 01/25] ima: Align ima_inode_post_setattr() definition with LSM infrastructure, Mimi Zohar
  • [PATCH v3 02/25] ima: Align ima_post_path_mknod() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v3 02/25] ima: Align ima_post_path_mknod() definition with LSM infrastructure, Stefan Berger
    • Re: [PATCH v3 02/25] ima: Align ima_post_path_mknod() definition with LSM infrastructure, Mimi Zohar
      • Re: [PATCH v3 02/25] ima: Align ima_post_path_mknod() definition with LSM infrastructure, Roberto Sassu
        • Re: [PATCH v3 02/25] ima: Align ima_post_path_mknod() definition with LSM infrastructure, Mimi Zohar
          • Re: [PATCH v3 02/25] ima: Align ima_post_path_mknod() definition with LSM infrastructure, Roberto Sassu
            • Re: [PATCH v3 02/25] ima: Align ima_post_path_mknod() definition with LSM infrastructure, Mimi Zohar
              • Re: [PATCH v3 02/25] ima: Align ima_post_path_mknod() definition with LSM infrastructure, Roberto Sassu
                • Re: [PATCH v3 02/25] ima: Align ima_post_path_mknod() definition with LSM infrastructure, Mimi Zohar
                  • Re: [PATCH v3 02/25] ima: Align ima_post_path_mknod() definition with LSM infrastructure, Roberto Sassu
                    • Re: [PATCH v3 02/25] ima: Align ima_post_path_mknod() definition with LSM infrastructure, Mimi Zohar
                      • Re: [PATCH v3 02/25] ima: Align ima_post_path_mknod() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v3 03/25] ima: Align ima_post_create_tmpfile() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v3 03/25] ima: Align ima_post_create_tmpfile() definition with LSM infrastructure, Stefan Berger
  • [PATCH v3 04/25] ima: Align ima_file_mprotect() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v3 04/25] ima: Align ima_file_mprotect() definition with LSM infrastructure, Mimi Zohar
      • Re: [PATCH v3 04/25] ima: Align ima_file_mprotect() definition with LSM infrastructure, Roberto Sassu
        • Re: [PATCH v3 04/25] ima: Align ima_file_mprotect() definition with LSM infrastructure, Mimi Zohar
  • [PATCH v3 05/25] ima: Align ima_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v3 05/25] ima: Align ima_inode_setxattr() definition with LSM infrastructure, Mimi Zohar
  • [PATCH v3 06/25] ima: Align ima_inode_removexattr() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v3 07/25] ima: Align ima_post_read_file() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v3 07/25] ima: Align ima_post_read_file() definition with LSM infrastructure, Mimi Zohar
  • [PATCH v3 08/25] evm: Align evm_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v3 08/25] evm: Align evm_inode_post_setattr() definition with LSM infrastructure, Mimi Zohar
  • [PATCH v3 09/25] evm: Align evm_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v3 09/25] evm: Align evm_inode_setxattr() definition with LSM infrastructure, Mimi Zohar
  • [PATCH v3 10/25] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v3 10/25] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure, Mimi Zohar
  • [PATCH v3 11/25] security: Align inode_setattr hook definition with EVM, Roberto Sassu
    • Re: [PATCH v3 11/25] security: Align inode_setattr hook definition with EVM, Mimi Zohar
  • [PATCH v3 12/25] security: Introduce inode_post_setattr hook, Roberto Sassu