Security Enhanced Linux (SELINUX)
[Prev Page][Next Page]
- [PATCH] RFC: selinux: don't filter copy-up xattrs while uninitialized,
David Disseldorp
- [PATCH][RFC] selinuxfs: saner handling of policy reloads,
Al Viro
- [PATCH] libsepol/cil: Do not allow classpermissionset to use anonymous classpermission,
James Carter
- RFC: thoughts on SELinux namespacing,
Paul Moore
- An X.509 certificate for selinuxproject.org web server has expired,
Petr Pisar
- Re: [PATCH v6 3/13] bpf: introduce BPF token object,
Paul Moore
- Re: [PATCH v6 6/13] bpf: add BPF token support to BPF_PROG_LOAD command,
Paul Moore
- [PATCH v2 87/89] fs: rename inode i_atime and i_mtime fields,
Jeff Layton
- [PATCH v2 00/89] fs: new accessor methods for inode atime and mtime,
Jeff Layton
- Re: [PATCH v2 00/89] fs: new accessor methods for inode atime and mtime, Christian Brauner
ANN: Reference Policy 2.20231002, Chris PeBenito
[PATCH v2 0/4] selinux: avtab arrays and refactors,
Jacob Satterfield
[PATCH 85/87] fs: rename i_atime and i_mtime fields to __i_atime and __i_mtime,
Jeff Layton
[PATCH 00/87] fs: new accessor methods for atime and mtime,
Jeff Layton
[PATCH 0/9] CIL Cleanups and Improved Argument handling,
James Carter
Re: [PATCH v4 2/12] bpf: introduce BPF token object,
Paul Moore
[GIT PULL] SELinux fixes for v6.6 (#1),
Paul Moore
[PATCH v15 10/11] SELinux: Add selfattr hooks, Casey Schaufler
generating new type name using CIL macro,
Vit Mojzis
[PATCH] selinux: fix handling of empty opts in selinux_fs_context_submount(),
Ondrej Mosnacek
[PATCH 0/3] avtab hotspot optimizations,
Jacob Satterfield
[PATCH] SELinux: Check correct permissions for FS_IOC32_*,
Alfred Piccioni
[PATCH v3 00/25] security: Move IMA and EVM to the LSM infrastructure,
Roberto Sassu
- [PATCH v3 01/25] ima: Align ima_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v3 02/25] ima: Align ima_post_path_mknod() definition with LSM infrastructure, Roberto Sassu
- [PATCH v3 03/25] ima: Align ima_post_create_tmpfile() definition with LSM infrastructure, Roberto Sassu
- [PATCH v3 04/25] ima: Align ima_file_mprotect() definition with LSM infrastructure, Roberto Sassu
- [PATCH v3 05/25] ima: Align ima_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v3 06/25] ima: Align ima_inode_removexattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v3 07/25] ima: Align ima_post_read_file() definition with LSM infrastructure, Roberto Sassu
- [PATCH v3 08/25] evm: Align evm_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v3 09/25] evm: Align evm_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v3 10/25] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v3 11/25] security: Align inode_setattr hook definition with EVM, Roberto Sassu
- [PATCH v3 12/25] security: Introduce inode_post_setattr hook, Roberto Sassu
- [PATCH v3 13/25] security: Introduce inode_post_removexattr hook, Roberto Sassu
- [PATCH v3 14/25] security: Introduce file_post_open hook, Roberto Sassu
- [PATCH v3 15/25] security: Introduce file_pre_free_security hook, Roberto Sassu
- [PATCH v3 16/25] security: Introduce path_post_mknod hook, Roberto Sassu
- [PATCH v3 17/25] security: Introduce inode_post_create_tmpfile hook, Roberto Sassu
- [PATCH v3 18/25] security: Introduce inode_post_set_acl hook, Roberto Sassu
- [PATCH v3 19/25] security: Introduce inode_post_remove_acl hook, Roberto Sassu
- [PATCH v3 20/25] security: Introduce key_post_create_or_update hook, Roberto Sassu
- [PATCH v3 21/25] ima: Move to LSM infrastructure, Roberto Sassu
- [PATCH v3 22/25] ima: Move IMA-Appraisal to LSM infrastructure, Roberto Sassu
- [PATCH v3 23/25] evm: Move to LSM infrastructure, Roberto Sassu
- [PATCH v3 24/25] integrity: Move integrity functions to the LSM infrastructure, Roberto Sassu
- [PATCH v3 25/25] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Roberto Sassu
- Re: [PATCH v3 00/25] security: Move IMA and EVM to the LSM infrastructure, Mimi Zohar
[PATCH v2 00/25] security: Move IMA and EVM to the LSM infrastructure,
Roberto Sassu
- [PATCH v2 01/25] ima: Align ima_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v2 02/25] ima: Align ima_post_path_mknod() definition with LSM infrastructure, Roberto Sassu
- [PATCH v2 03/25] ima: Align ima_post_create_tmpfile() definition with LSM infrastructure, Roberto Sassu
- [PATCH v2 04/25] ima: Align ima_file_mprotect() definition with LSM infrastructure, Roberto Sassu
- [PATCH v2 05/25] ima: Align ima_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v2 06/25] ima: Align ima_inode_removexattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v2 07/25] ima: Align ima_post_read_file() definition with LSM infrastructure, Roberto Sassu
- [PATCH v2 08/25] evm: Align evm_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v2 09/25] evm: Align evm_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v2 10/25] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v2 11/25] security: Align inode_setattr hook definition with EVM, Roberto Sassu
- [PATCH v2 13/25] security: Introduce inode_post_removexattr hook, Roberto Sassu
- [PATCH v2 12/25] security: Introduce inode_post_setattr hook, Roberto Sassu
- [PATCH v2 14/25] security: Introduce file_post_open hook, Roberto Sassu
- [PATCH v2 15/25] security: Introduce file_pre_free_security hook, Roberto Sassu
- [PATCH v2 17/25] security: Introduce inode_post_create_tmpfile hook, Roberto Sassu
- [PATCH v2 16/25] security: Introduce path_post_mknod hook, Roberto Sassu
- [PATCH v2 18/25] security: Introduce inode_post_set_acl hook, Roberto Sassu
- [PATCH v2 19/25] security: Introduce inode_post_remove_acl hook, Roberto Sassu
- [PATCH v2 20/25] security: Introduce key_post_create_or_update hook, Roberto Sassu
- [PATCH v2 21/25] ima: Move to LSM infrastructure, Roberto Sassu
- [PATCH v2 22/25] ima: Move IMA-Appraisal to LSM infrastructure, Roberto Sassu
- [PATCH v2 23/25] evm: Move to LSM infrastructure, Roberto Sassu
- [PATCH v2 24/25] integrity: Move integrity functions to the LSM infrastructure, Roberto Sassu
- [PATCH v2 25/25] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Roberto Sassu
- Re: [PATCH v2 00/25] security: Move IMA and EVM to the LSM infrastructure, Casey Schaufler
sb->s_fs_info freeing fixes,
Christoph Hellwig
LSM hook ordering in shmem_mknod() and shmem_tmpfile()?,
Paul Moore
[GIT PULL] SELinux patches for v6.6,
Paul Moore
[pcmoore-selinux:main 1/1] README.orig: warning: ignored by one of the .gitignore files,
kernel test robot
[PATCH v14 10/11] SELinux: Add selfattr hooks, Casey Schaufler
[PATCH] lsm: constify 'sb' parameter in security_sb_kern_mount(),
Khadija Kamran
[PATCH] lsm: constify 'mnt_opts' parameter in security_free_mnt_opts(),
Khadija Kamran
[PATCH] lsm: constify 'sb' parameter in security_sb_remount(),
Khadija Kamran
[PATCH] lsm: constify 'bprm' parameter in security_bprm_committed_creds(),
Khadija Kamran
[PATCH] lsm: constify 'bprm' parameter in security_bprm_committing_creds(),
Khadija Kamran
[PATCH] lsm: constify the 'mm' parameter in security_vm_enough_memory_mm(),
Khadija Kamran
[PATCH] lsm: constify 'sb' parameter in security_quotactl(),
Khadija Kamran
[GIT PULL] SELinux fixes for v6.5 (#1),
Paul Moore
[PATCH] secilc/docs: fixes filecon example,
Dominick Grift
[PATCH] selinux: set next pointer before attaching to list,
Christian Göttsche
[PATCH] selinux: reject invalid ebitmaps,
Christian Göttsche
[PATCH 2/6] selinux: dump statistics for more hash tables,
Christian Göttsche
[PATCH] selinux: Annotate struct sidtab_str_cache with __counted_by,
Kees Cook
[PATCH] libsepol: Fix the version number for the latest exported function,
James Carter
[PATCH 1/5] libsepol: include length squared in hashtab_hash_eval(),
Christian Göttsche
[PATCH bpf-next v14 0/4] bpf: Force to MPTCP,
Geliang Tang
[PATCH 0/1] netlabel: KMSAN warning,
Andrew Kanner
AWS RHEL Image / SplunkWeb / SELinux,
Alan Ma
[PATCH] secilc: Use versioned DocBook public identifier.,
Bruno Victal
[PATCH] Do not automatically install Russian translations,
James Carter
[RFC PATCH v2 00/27] libselinux: rework selabel_file(5) database,
Christian Göttsche
- [RFC PATCH v2 24/27] libselinux: set errno on label lookup failure, Christian Göttsche
- [RFC PATCH v2 17/27] libselinux: remove SELABEL_OPT_SUBSET support from selabel_file(5), Christian Göttsche
- [RFC PATCH v2 11/27] libselinux/utils: use type safe union assignment, Christian Göttsche
- [RFC PATCH v2 10/27] libselinux: introduce selabel_nuke, Christian Göttsche
- [RFC PATCH v2 04/27] libselinux: drop unnecessary warning overrides, Christian Göttsche
- [RFC PATCH v2 05/27] setfiles: do not issue AUDIT_FS_RELABEL on dry run, Christian Göttsche
- [RFC PATCH v2 01/27] libselinux/utils: update selabel_partial_match, Christian Göttsche
- [RFC PATCH v2 08/27] libselinux: introduce reallocarray(3), Christian Göttsche
- [RFC PATCH v2 14/27] libselinux: parameter simplifications, Christian Göttsche
- [RFC PATCH v2 09/27] libselinux: simplify zeroing allocation, Christian Göttsche
- [RFC PATCH v2 02/27] libselinux: misc label cleanup, Christian Göttsche
- [RFC PATCH v2 03/27] libselinux: drop obsolete optimization flag, Christian Göttsche
- [RFC PATCH v2 07/27] libselinux: constify selabel_cmp(3) parameters, Christian Göttsche
- [RFC PATCH v2 16/27] libselinux: update string_to_mode(), Christian Göttsche
- [RFC PATCH v2 15/27] libselinux/utils: use correct type for backend argument, Christian Göttsche
- [RFC PATCH v2 19/27] libselinux: avoid unused function, Christian Göttsche
- [RFC PATCH v2 23/27] libselinux: free elements on read_spec_entries() failure, Christian Göttsche
- [RFC PATCH v2 20/27] libselinux: check for stream rewind failures, Christian Göttsche
- [RFC PATCH v2 13/27] libselinux/utils: introduce selabel_compare, Christian Göttsche
- [RFC PATCH v2 18/27] libselinux: fix logic for building android backend, Christian Göttsche
- [RFC PATCH v2 21/27] libselinux: simplify internal selabel_validate prototype, Christian Göttsche
- [RFC PATCH v2 22/27] libselinux/utils: drop include of internal header file, Christian Göttsche
- [RFC PATCH v2 12/27] libselinux: avoid regex serialization truncations, Christian Göttsche
- [RFC PATCH v2 06/27] libselinux: cast to unsigned char for character handling function, Christian Göttsche
- [RFC PATCH v2 26/27] libselinux: remove unused hashtab code, Christian Göttsche
- [RFC PATCH v2 27/27] libselinux: add selabel_file(5) fuzzer, Christian Göttsche
[PATCH] lsm: constify the 'file' parameter in security_binder_transfer_file(),
Khadija Kamran
[PATCH mptcp-next v13 0/4] bpf: Force to MPTCP,
Geliang Tang
[RFC PATCH 00/24] libselinux: rework selabel_file(5) database,
Christian Göttsche
- [RFC PATCH 01/24] libselinux/utils: update selabel_partial_match, Christian Göttsche
- [RFC PATCH 02/24] libselinux: misc label cleanup, Christian Göttsche
- [RFC PATCH 03/24] libselinux: drop obsolete optimization flag, Christian Göttsche
- [RFC PATCH 04/24] libselinux: drop unnecessary warning overrides, Christian Göttsche
- [RFC PATCH 05/24] setfiles: do not issue AUDIT_FS_RELABEL on dry run, Christian Göttsche
- [RFC PATCH 06/24] libselinux: cast to unsigned char for character handling function, Christian Göttsche
- [RFC PATCH 09/24] libselinux: simplify zeroing allocation, Christian Göttsche
- [RFC PATCH 07/24] libselinux: constify selabel_cmp(3) parameters, Christian Göttsche
- [RFC PATCH 08/24] libselinux: introduce reallocarray(3), Christian Göttsche
- [RFC PATCH 10/24] libselinux: introduce selabel_nuke, Christian Göttsche
- [RFC PATCH 11/24] libselinux/utils: use type safe union assignment, Christian Göttsche
- [RFC PATCH 12/24] libselinux: avoid regex serialization truncations, Christian Göttsche
- [RFC PATCH 13/24] libselinux/utils: introduce selabel_compare, Christian Göttsche
- [RFC PATCH 14/24] libselinux: parameter simplifications, Christian Göttsche
- [RFC PATCH 15/24] libselinux/utils: use correct type for backend argument, Christian Göttsche
- [RFC PATCH 16/24] libselinux: update string_to_mode(), Christian Göttsche
- [RFC PATCH 18/24] libselinux: fix logic for building android backend, Christian Göttsche
- [RFC PATCH 17/24] libselinux: remove SELABEL_OPT_SUBSET support from selabel_file(5), Christian Göttsche
- [RFC PATCH 19/24] libselinux: avoid unused function, Christian Göttsche
- [RFC PATCH 20/24] libselinux: check for stream rewind failures, Christian Göttsche
- [RFC PATCH 22/24] libselinux/utils: drop include of internal header file, Christian Göttsche
- [RFC PATCH 21/24] libselinux: simplify internal selabel_validate prototype, Christian Göttsche
- [RFC PATCH 24/24] libselinux: remove unused hashtab code, Christian Göttsche
- Re: [RFC PATCH 00/24] libselinux: rework selabel_file(5) database, James Carter
[PATCH 0/9 v4] Add CIL Deny Rule,
James Carter
- [PATCH 1/9 v4] libsepol/cil: Parse and add deny rule to AST, but do not process, James Carter
- [PATCH 2/9 v4] libsepol/cil: Add cil_list_is_empty macro, James Carter
- [PATCH 3/9 v4] libsepol/cil: Add cil_tree_node_remove function, James Carter
- [PATCH 6/9 v4] libsepol: Export the cil_write_post_ast function, James Carter
- [PATCH 5/9 v4] libsepol/cil: Add cil_write_post_ast function, James Carter
- [PATCH 7/9 v4] secilc/secil2tree: Add option to write CIL AST after post processing, James Carter
- [PATCH 4/9 v4] libsepol/cil: Process deny rules, James Carter
- [PATCH 9/9 v4] secilc/docs: Add deny rule to CIL documentation, James Carter
- [PATCH 8/9 v4] secilc/test: Add deny rule tests, James Carter
- Re: [PATCH 0/9 v4] Add CIL Deny Rule, Petr Lautrbach
[PATCH 0/7 v2] Add support for notself and other to CIL,
James Carter
[PATCH 00/13 v2] Remove the Russian translations,
James Carter
- [PATCH 01/13 v2] checkpolicy: Remove the Russian translations, James Carter
- [PATCH 02/13 v2] gui: Remove the Russian translations, James Carter
- [PATCH 04/13 v2] libselinux: Remove the Russian translations, James Carter
- [PATCH 06/13 v2] libsepol: Remove the Russian translations, James Carter
- [PATCH 05/13 v2] libsemanage: Remove the Russian translations, James Carter
- [PATCH 03/13 v2] libselinux: Remove the Russian translations, James Carter
- [PATCH 07/13 v2] mcstrans: Remove the Russian translations, James Carter
- [PATCH 08/13 v2] policycoreutils: Remove the Russian translations, James Carter
- [PATCH 11/13 v2] restorecond: Remove the Russian translations, James Carter
- [PATCH 12/13 v2] sandbox: Remove the Russian translations, James Carter
- [PATCH 10/13 v2] python: Remove the Russian translations, James Carter
- [PATCH 13/13 v2] semodule-utils: Remove the Russian translations, James Carter
- Re: [PATCH 00/13 v2] Remove the Russian translations, Petr Lautrbach
[PATCH 01/12] checkpolicy: Remove the Russian translations,
James Carter
- [PATCH 02/12] gui: Remove the Russian translations, James Carter
- [PATCH 05/12] libsemanage: Remove the Russian translations, James Carter
- [PATCH 04/12] libselinux: Remove the Russian translations, James Carter
- [PATCH 06/12] libsepol: Remove the Russian translations, James Carter
- [PATCH 03/12] libselinux: Remove the Russian translations, James Carter
- [PATCH 07/12] mcstrans: Remove the Russian translations, James Carter
- [PATCH 10/12] restorecond: Remove the Russian translations, James Carter
- [PATCH 11/12] sandbox: Remove the Russian translations, James Carter
- [PATCH 08/12] policycoreutils: Remove the Russian translations, James Carter
- [PATCH 12/12] semodule-utils: Remove the Russian translations, James Carter
[PATCH v9] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing,
Jeff Layton
[PATCH] selinux: revert SECINITSID_INIT support,
Paul Moore
[RFC PATCH] semanage: use instance check,
Christian Göttsche
[RFC PATCH] selinux: use GFP_KERNEL while reading binary policy,
Christian Göttsche
[PATCH v3 2/7] selinux: use u32 as bit type in ebitmap code,
Christian Göttsche
[PATCH v8] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing,
Jeff Layton
[PATCH v2] lsm: constify the 'target' parameter in security_capget(),
Khadija Kamran
[PATCH mptcp-next v12 0/5] bpf: Force to MPTCP,
Geliang Tang
[PATCH] libsemanage/tests: use strict prototypes,
Christian Göttsche
[PATCH] restorecond: compatible with the use of EUID,
Huizhao Wang
[PATCH v7] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing,
Jeff Layton
[PATCH bpf-next v11 0/5] bpf: Force to MPTCP,
Geliang Tang
[PATCH -next] selinux: update comment on selinux_hooks[],
Xiu Jianfeng
[PATCH bpf-next v10 0/5] bpf: Force to MPTCP,
Geliang Tang
[Index of Archives]
[Selinux Refpolicy]
[Fedora Users]
[Fedora Desktop]
[Kernel]
[KDE Users]
[Gnome Users]