Security Enhanced Linux (SELINUX)

• Date Index

• [PATCH 1/5] libsepol: include length squared in hashtab_hash_eval(), Christian Göttsche
  • [PATCH 4/5] libselinux: use DJB2a string hash function, Christian Göttsche
  • [PATCH 2/5] libsepol: use DJB2a string hash function, Christian Göttsche
  • [PATCH 5/5] newrole: use DJB2a string hash function, Christian Göttsche
  • [PATCH 3/5] libsepol/cil: use DJB2a string hash function, Christian Göttsche
• [PATCH bpf-next v14 0/4] bpf: Force to MPTCP, Geliang Tang
  • [PATCH bpf-next v14 2/4] selftests/bpf: Add two mptcp netns helpers, Geliang Tang
  • [PATCH bpf-next v14 3/4] selftests/bpf: Fix error checks of mptcp open_and_load, Geliang Tang
  • [PATCH bpf-next v14 1/4] bpf: Add update_socket_protocol hook, Geliang Tang
    • Re: [PATCH bpf-next v14 1/4] bpf: Add update_socket_protocol hook, Geliang Tang
      • Re: [PATCH bpf-next v14 1/4] bpf: Add update_socket_protocol hook, Yonghong Song
  • [PATCH bpf-next v14 4/4] selftests/bpf: Add mptcpify test, Geliang Tang
    • Re: [PATCH bpf-next v14 4/4] selftests/bpf: Add mptcpify test, Martin KaFai Lau
  • Re: [PATCH bpf-next v14 0/4] bpf: Force to MPTCP, patchwork-bot+netdevbpf
• [PATCH 0/1] netlabel: KMSAN warning, Andrew Kanner
  • [PATCH 1/1] selinux: netlabel: Prevent KMSAN warning in selinux_inet_conn_request(), Andrew Kanner
    • Re: [PATCH 1/1] selinux: netlabel: Prevent KMSAN warning in selinux_inet_conn_request(), Greg KH
      • Re: [PATCH 1/1] selinux: netlabel: Prevent KMSAN warning in selinux_inet_conn_request(), Andrew Kanner
    • Re: [PATCH 1/1] selinux: netlabel: Prevent KMSAN warning in selinux_inet_conn_request(), Paul Moore
  • Re: [PATCH 0/1] netlabel: KMSAN warning, Paul Moore
    • Re: [PATCH 0/1] netlabel: KMSAN warning, Andrew Kanner
• AWS RHEL Image / SplunkWeb / SELinux, Alan Ma
  • <Possible follow-ups>
  • Re: AWS RHEL Image / SplunkWeb / SELinux, Stephen Smalley
• [PATCH] secilc: Use versioned DocBook public identifier., Bruno Victal
  • Re: [PATCH] secilc: Use versioned DocBook public identifier., James Carter
    • Re: [PATCH] secilc: Use versioned DocBook public identifier., James Carter
• [PATCH] Do not automatically install Russian translations, James Carter
  • Re: [PATCH] Do not automatically install Russian translations, Petr Lautrbach
    • Re: [PATCH] Do not automatically install Russian translations, James Carter
• [RFC PATCH v2 00/27] libselinux: rework selabel_file(5) database, Christian Göttsche
  • [RFC PATCH v2 24/27] libselinux: set errno on label lookup failure, Christian Göttsche
    • Re: [RFC PATCH v2 24/27] libselinux: set errno on label lookup failure, James Carter
      • Re: [RFC PATCH v2 24/27] libselinux: set errno on label lookup failure, James Carter
  • [RFC PATCH v2 17/27] libselinux: remove SELABEL_OPT_SUBSET support from selabel_file(5), Christian Göttsche
    • Re: [RFC PATCH v2 17/27] libselinux: remove SELABEL_OPT_SUBSET support from selabel_file(5), James Carter
      • Re: [RFC PATCH v2 17/27] libselinux: remove SELABEL_OPT_SUBSET support from selabel_file(5), Stephen Smalley
        • Re: [RFC PATCH v2 17/27] libselinux: remove SELABEL_OPT_SUBSET support from selabel_file(5), Christian Göttsche
          • Re: [RFC PATCH v2 17/27] libselinux: remove SELABEL_OPT_SUBSET support from selabel_file(5), Stephen Smalley
  • [RFC PATCH v2 11/27] libselinux/utils: use type safe union assignment, Christian Göttsche
    • Re: [RFC PATCH v2 11/27] libselinux/utils: use type safe union assignment, James Carter
      • Re: [RFC PATCH v2 11/27] libselinux/utils: use type safe union assignment, James Carter
  • [RFC PATCH v2 10/27] libselinux: introduce selabel_nuke, Christian Göttsche
    • Re: [RFC PATCH v2 10/27] libselinux: introduce selabel_nuke, James Carter
  • [RFC PATCH v2 04/27] libselinux: drop unnecessary warning overrides, Christian Göttsche
    • Re: [RFC PATCH v2 04/27] libselinux: drop unnecessary warning overrides, James Carter
      • Re: [RFC PATCH v2 04/27] libselinux: drop unnecessary warning overrides, James Carter
  • [RFC PATCH v2 05/27] setfiles: do not issue AUDIT_FS_RELABEL on dry run, Christian Göttsche
    • Re: [RFC PATCH v2 05/27] setfiles: do not issue AUDIT_FS_RELABEL on dry run, James Carter
      • Re: [RFC PATCH v2 05/27] setfiles: do not issue AUDIT_FS_RELABEL on dry run, James Carter
  • [RFC PATCH v2 01/27] libselinux/utils: update selabel_partial_match, Christian Göttsche
    • Re: [RFC PATCH v2 01/27] libselinux/utils: update selabel_partial_match, James Carter
      • Re: [RFC PATCH v2 01/27] libselinux/utils: update selabel_partial_match, James Carter
  • [RFC PATCH v2 08/27] libselinux: introduce reallocarray(3), Christian Göttsche
    • Re: [RFC PATCH v2 08/27] libselinux: introduce reallocarray(3), James Carter
  • [RFC PATCH v2 14/27] libselinux: parameter simplifications, Christian Göttsche
    • Re: [RFC PATCH v2 14/27] libselinux: parameter simplifications, James Carter
      • Re: [RFC PATCH v2 14/27] libselinux: parameter simplifications, James Carter
  • [RFC PATCH v2 09/27] libselinux: simplify zeroing allocation, Christian Göttsche
    • Re: [RFC PATCH v2 09/27] libselinux: simplify zeroing allocation, James Carter
      • Re: [RFC PATCH v2 09/27] libselinux: simplify zeroing allocation, James Carter
  • [RFC PATCH v2 02/27] libselinux: misc label cleanup, Christian Göttsche
    • Re: [RFC PATCH v2 02/27] libselinux: misc label cleanup, James Carter
      • Re: [RFC PATCH v2 02/27] libselinux: misc label cleanup, James Carter
  • [RFC PATCH v2 03/27] libselinux: drop obsolete optimization flag, Christian Göttsche
    • Re: [RFC PATCH v2 03/27] libselinux: drop obsolete optimization flag, James Carter
      • Re: [RFC PATCH v2 03/27] libselinux: drop obsolete optimization flag, James Carter
  • [RFC PATCH v2 07/27] libselinux: constify selabel_cmp(3) parameters, Christian Göttsche
    • Re: [RFC PATCH v2 07/27] libselinux: constify selabel_cmp(3) parameters, James Carter
      • Re: [RFC PATCH v2 07/27] libselinux: constify selabel_cmp(3) parameters, James Carter
  • [RFC PATCH v2 16/27] libselinux: update string_to_mode(), Christian Göttsche
    • Re: [RFC PATCH v2 16/27] libselinux: update string_to_mode(), James Carter
      • Re: [RFC PATCH v2 16/27] libselinux: update string_to_mode(), James Carter
  • [RFC PATCH v2 15/27] libselinux/utils: use correct type for backend argument, Christian Göttsche
    • Re: [RFC PATCH v2 15/27] libselinux/utils: use correct type for backend argument, James Carter
      • Re: [RFC PATCH v2 15/27] libselinux/utils: use correct type for backend argument, James Carter
  • [RFC PATCH v2 19/27] libselinux: avoid unused function, Christian Göttsche
    • Re: [RFC PATCH v2 19/27] libselinux: avoid unused function, James Carter
      • Re: [RFC PATCH v2 19/27] libselinux: avoid unused function, James Carter
  • [RFC PATCH v2 23/27] libselinux: free elements on read_spec_entries() failure, Christian Göttsche
    • Re: [RFC PATCH v2 23/27] libselinux: free elements on read_spec_entries() failure, James Carter
      • Re: [RFC PATCH v2 23/27] libselinux: free elements on read_spec_entries() failure, James Carter
  • [RFC PATCH v2 20/27] libselinux: check for stream rewind failures, Christian Göttsche
    • Re: [RFC PATCH v2 20/27] libselinux: check for stream rewind failures, James Carter
      • Re: [RFC PATCH v2 20/27] libselinux: check for stream rewind failures, James Carter
  • [RFC PATCH v2 13/27] libselinux/utils: introduce selabel_compare, Christian Göttsche
    • Re: [RFC PATCH v2 13/27] libselinux/utils: introduce selabel_compare, James Carter
      • Re: [RFC PATCH v2 13/27] libselinux/utils: introduce selabel_compare, Christian Göttsche
        • Re: [RFC PATCH v2 13/27] libselinux/utils: introduce selabel_compare, James Carter
          • Re: [RFC PATCH v2 13/27] libselinux/utils: introduce selabel_compare, Christian Göttsche
  • [RFC PATCH v2 18/27] libselinux: fix logic for building android backend, Christian Göttsche
    • Re: [RFC PATCH v2 18/27] libselinux: fix logic for building android backend, James Carter
      • Re: [RFC PATCH v2 18/27] libselinux: fix logic for building android backend, James Carter
  • [RFC PATCH v2 21/27] libselinux: simplify internal selabel_validate prototype, Christian Göttsche
    • Re: [RFC PATCH v2 21/27] libselinux: simplify internal selabel_validate prototype, James Carter
      • Re: [RFC PATCH v2 21/27] libselinux: simplify internal selabel_validate prototype, James Carter
  • [RFC PATCH v2 22/27] libselinux/utils: drop include of internal header file, Christian Göttsche
    • Re: [RFC PATCH v2 22/27] libselinux/utils: drop include of internal header file, James Carter
      • Re: [RFC PATCH v2 22/27] libselinux/utils: drop include of internal header file, James Carter
  • [RFC PATCH v2 12/27] libselinux: avoid regex serialization truncations, Christian Göttsche
    • Re: [RFC PATCH v2 12/27] libselinux: avoid regex serialization truncations, James Carter
      • Re: [RFC PATCH v2 12/27] libselinux: avoid regex serialization truncations, James Carter
  • [RFC PATCH v2 06/27] libselinux: cast to unsigned char for character handling function, Christian Göttsche
    • Re: [RFC PATCH v2 06/27] libselinux: cast to unsigned char for character handling function, James Carter
  • [RFC PATCH v2 26/27] libselinux: remove unused hashtab code, Christian Göttsche
  • [RFC PATCH v2 27/27] libselinux: add selabel_file(5) fuzzer, Christian Göttsche
• [PATCH] lsm: constify the 'file' parameter in security_binder_transfer_file(), Khadija Kamran
  • Re: [PATCH] lsm: constify the 'file' parameter in security_binder_transfer_file(), Paul Moore
• [PATCH mptcp-next v13 0/4] bpf: Force to MPTCP, Geliang Tang
  • [PATCH mptcp-next v13 1/4] bpf: Add update_socket_protocol hook, Geliang Tang
  • [PATCH mptcp-next v13 2/4] selftests/bpf: Add two mptcp netns helpers, Geliang Tang
  • [PATCH mptcp-next v13 3/4] selftests/bpf: Fix error checks of mptcp open_and_load, Geliang Tang
  • [PATCH mptcp-next v13 4/4] selftests/bpf: Add mptcpify test, Geliang Tang
    • Re: [PATCH mptcp-next v13 4/4] selftests/bpf: Add mptcpify test, Martin KaFai Lau
      • Re: [PATCH mptcp-next v13 4/4] selftests/bpf: Add mptcpify test, Geliang Tang
        • Re: [PATCH mptcp-next v13 4/4] selftests/bpf: Add mptcpify test, Martin KaFai Lau
• [RFC PATCH 00/24] libselinux: rework selabel_file(5) database, Christian Göttsche
  • [RFC PATCH 01/24] libselinux/utils: update selabel_partial_match, Christian Göttsche
  • [RFC PATCH 02/24] libselinux: misc label cleanup, Christian Göttsche
  • [RFC PATCH 03/24] libselinux: drop obsolete optimization flag, Christian Göttsche
  • [RFC PATCH 04/24] libselinux: drop unnecessary warning overrides, Christian Göttsche
  • [RFC PATCH 05/24] setfiles: do not issue AUDIT_FS_RELABEL on dry run, Christian Göttsche
  • [RFC PATCH 06/24] libselinux: cast to unsigned char for character handling function, Christian Göttsche
  • [RFC PATCH 09/24] libselinux: simplify zeroing allocation, Christian Göttsche
  • [RFC PATCH 07/24] libselinux: constify selabel_cmp(3) parameters, Christian Göttsche
  • [RFC PATCH 08/24] libselinux: introduce reallocarray(3), Christian Göttsche
  • [RFC PATCH 10/24] libselinux: introduce selabel_nuke, Christian Göttsche
  • [RFC PATCH 11/24] libselinux/utils: use type safe union assignment, Christian Göttsche
  • [RFC PATCH 12/24] libselinux: avoid regex serialization truncations, Christian Göttsche
  • [RFC PATCH 13/24] libselinux/utils: introduce selabel_compare, Christian Göttsche
  • [RFC PATCH 14/24] libselinux: parameter simplifications, Christian Göttsche
  • [RFC PATCH 15/24] libselinux/utils: use correct type for backend argument, Christian Göttsche
  • [RFC PATCH 16/24] libselinux: update string_to_mode(), Christian Göttsche
  • [RFC PATCH 18/24] libselinux: fix logic for building android backend, Christian Göttsche
  • [RFC PATCH 17/24] libselinux: remove SELABEL_OPT_SUBSET support from selabel_file(5), Christian Göttsche
  • [RFC PATCH 19/24] libselinux: avoid unused function, Christian Göttsche
  • [RFC PATCH 20/24] libselinux: check for stream rewind failures, Christian Göttsche
  • [RFC PATCH 22/24] libselinux/utils: drop include of internal header file, Christian Göttsche
  • [RFC PATCH 21/24] libselinux: simplify internal selabel_validate prototype, Christian Göttsche
  • [RFC PATCH 24/24] libselinux: remove unused hashtab code, Christian Göttsche
  • Re: [RFC PATCH 00/24] libselinux: rework selabel_file(5) database, James Carter
• [PATCH 0/9 v4] Add CIL Deny Rule, James Carter
  • [PATCH 1/9 v4] libsepol/cil: Parse and add deny rule to AST, but do not process, James Carter
  • [PATCH 2/9 v4] libsepol/cil: Add cil_list_is_empty macro, James Carter
  • [PATCH 3/9 v4] libsepol/cil: Add cil_tree_node_remove function, James Carter
  • [PATCH 6/9 v4] libsepol: Export the cil_write_post_ast function, James Carter
  • [PATCH 5/9 v4] libsepol/cil: Add cil_write_post_ast function, James Carter
  • [PATCH 7/9 v4] secilc/secil2tree: Add option to write CIL AST after post processing, James Carter
  • [PATCH 4/9 v4] libsepol/cil: Process deny rules, James Carter
    • Re: [PATCH 4/9 v4] libsepol/cil: Process deny rules, James Carter
  • [PATCH 9/9 v4] secilc/docs: Add deny rule to CIL documentation, James Carter
    • Re: [PATCH 9/9 v4] secilc/docs: Add deny rule to CIL documentation, Daniel Burgener
  • [PATCH 8/9 v4] secilc/test: Add deny rule tests, James Carter
  • Re: [PATCH 0/9 v4] Add CIL Deny Rule, Petr Lautrbach
    • Re: [PATCH 0/9 v4] Add CIL Deny Rule, James Carter
      • Re: [PATCH 0/9 v4] Add CIL Deny Rule, Christian Göttsche
        • Re: [PATCH 0/9 v4] Add CIL Deny Rule, James Carter
          • Re: [PATCH 0/9 v4] Add CIL Deny Rule, James Carter
            • Re: [PATCH 0/9 v4] Add CIL Deny Rule, Christian Göttsche
• [PATCH 0/7 v2] Add support for notself and other to CIL, James Carter
  • [PATCH 1/7 v2] libsepol: Changes to ebitmap.h to fix compiler warnings, James Carter
  • [PATCH 2/7 v2] libsepol/cil: Do not call ebitmap_init twice for an ebitmap, James Carter
  • [PATCH 3/7 v2] libsepol/cil: Add notself and other support to CIL, James Carter
  • [PATCH 4/7 v2] libsepol: update CIL generation for trivial not-self rules, James Carter
  • [PATCH 5/7 v2] libsepol: Use ERR() instead of log_err(), James Carter
  • [PATCH 7/7 v2] secilc/test: Add notself and other tests, James Carter
  • [PATCH 6/7 v2] secilc/docs: Add notself and other keywords to CIL documentation, James Carter
• [PATCH 00/13 v2] Remove the Russian translations, James Carter
  • [PATCH 01/13 v2] checkpolicy: Remove the Russian translations, James Carter
  • [PATCH 02/13 v2] gui: Remove the Russian translations, James Carter
  • [PATCH 04/13 v2] libselinux: Remove the Russian translations, James Carter
  • [PATCH 06/13 v2] libsepol: Remove the Russian translations, James Carter
  • [PATCH 05/13 v2] libsemanage: Remove the Russian translations, James Carter
  • [PATCH 03/13 v2] libselinux: Remove the Russian translations, James Carter
  • [PATCH 07/13 v2] mcstrans: Remove the Russian translations, James Carter
  • [PATCH 08/13 v2] policycoreutils: Remove the Russian translations, James Carter
  • [PATCH 11/13 v2] restorecond: Remove the Russian translations, James Carter
  • [PATCH 12/13 v2] sandbox: Remove the Russian translations, James Carter
  • [PATCH 10/13 v2] python: Remove the Russian translations, James Carter
  • [PATCH 13/13 v2] semodule-utils: Remove the Russian translations, James Carter
  • Re: [PATCH 00/13 v2] Remove the Russian translations, Petr Lautrbach
• [PATCH 01/12] checkpolicy: Remove the Russian translations, James Carter
  • [PATCH 02/12] gui: Remove the Russian translations, James Carter
  • [PATCH 05/12] libsemanage: Remove the Russian translations, James Carter
  • [PATCH 04/12] libselinux: Remove the Russian translations, James Carter
  • [PATCH 06/12] libsepol: Remove the Russian translations, James Carter
  • [PATCH 03/12] libselinux: Remove the Russian translations, James Carter
  • [PATCH 07/12] mcstrans: Remove the Russian translations, James Carter
  • [PATCH 10/12] restorecond: Remove the Russian translations, James Carter
  • [PATCH 11/12] sandbox: Remove the Russian translations, James Carter
  • [PATCH 08/12] policycoreutils: Remove the Russian translations, James Carter
  • [PATCH 12/12] semodule-utils: Remove the Russian translations, James Carter
    • Re: [PATCH 12/12] semodule-utils: Remove the Russian translations, Petr Lautrbach
      • Re: [PATCH 12/12] semodule-utils: Remove the Russian translations, James Carter
        • Re: [PATCH 12/12] semodule-utils: Remove the Russian translations, James Carter
          • Re: [PATCH 12/12] semodule-utils: Remove the Russian translations, Petr Lautrbach
            • Re: [PATCH 12/12] semodule-utils: Remove the Russian translations, James Carter
      • Re: [PATCH 12/12] semodule-utils: Remove the Russian translations, James Carter
• [PATCH v9] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Jeff Layton
  • Re: [PATCH v9] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Christian Brauner
    • Re: [PATCH v9] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Jeff Layton
      • Re: [PATCH v9] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Casey Schaufler
      • Re: [PATCH v9] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Paul Moore
  • Re: [PATCH v9] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Christian Brauner
• [PATCH] selinux: revert SECINITSID_INIT support, Paul Moore
  • Re: [PATCH] selinux: revert SECINITSID_INIT support, Ondrej Mosnacek
    • Re: [PATCH] selinux: revert SECINITSID_INIT support, James Carter
    • Re: [PATCH] selinux: revert SECINITSID_INIT support, Paul Moore
• [RFC PATCH] semanage: use instance check, Christian Göttsche
  • Re: [RFC PATCH] semanage: use instance check, Petr Lautrbach
  • Re: [RFC PATCH] semanage: use instance check, James Carter
• [RFC PATCH] selinux: use GFP_KERNEL while reading binary policy, Christian Göttsche
  • Re: [PATCH RFC] selinux: use GFP_KERNEL while reading binary policy, Paul Moore
  • Re: [RFC PATCH] selinux: use GFP_KERNEL while reading binary policy, Stephen Smalley
    • Re: [RFC PATCH] selinux: use GFP_KERNEL while reading binary policy, Paul Moore
• [PATCH v3 2/7] selinux: use u32 as bit type in ebitmap code, Christian Göttsche
  • [PATCH v3 3/7] selinux: update type for number of class permissions in services code, Christian Göttsche
    • Re: [PATCH v3 3/7] selinux: update type for number of class permissions in services code, Paul Moore
  • [PATCH v3 5/7] selinux: avoid implicit conversions in selinuxfs code, Christian Göttsche
    • Re: [PATCH v3 5/7] selinux: avoid implicit conversions in selinuxfs code, Paul Moore
  • [PATCH v3 4/7] selinux: make left shifts well defined, Christian Göttsche
    • Re: [PATCH v3 4/7] selinux: make left shifts well defined, Paul Moore
  • [PATCH v3 7/7] selinux: use unsigned iterator in nlmsgtab code, Christian Göttsche
    • Re: [PATCH v3 7/7] selinux: use unsigned iterator in nlmsgtab code, Paul Moore
  • [PATCH v3 1/7] selinux: avoid implicit conversions in avtab code, Christian Göttsche
    • Re: [PATCH v3 1/7] selinux: avoid implicit conversions in avtab code, Paul Moore
  • [PATCH v3 6/7] selinux: avoid implicit conversions in policydb code, Christian Göttsche
    • Re: [PATCH v3 6/7] selinux: avoid implicit conversions in policydb code, Paul Moore
  • Re: [PATCH v3 2/7] selinux: use u32 as bit type in ebitmap code, Paul Moore
    • Re: [PATCH v3 2/7] selinux: use u32 as bit type in ebitmap code, Christian Göttsche
      • Re: [PATCH v3 2/7] selinux: use u32 as bit type in ebitmap code, Christian Göttsche
• [PATCH v8] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Jeff Layton
  • Re: [PATCH v8] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Christian Brauner
    • Re: [PATCH v8] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Jeff Layton
      • Re: [PATCH v8] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Christian Brauner
        • Re: [PATCH v8] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Jeff Layton
• [PATCH v2] lsm: constify the 'target' parameter in security_capget(), Khadija Kamran
  • Re: [PATCH v2] lsm: constify the 'target' parameter in security_capget(), Paul Moore
    • Re: [PATCH v2] lsm: constify the 'target' parameter in security_capget(), Khadija Kamran
      • Re: [PATCH v2] lsm: constify the 'target' parameter in security_capget(), Paul Moore
  • Re: [PATCH v2] lsm: constify the 'target' parameter in security_capget(), John Johansen
• [PATCH mptcp-next v12 0/5] bpf: Force to MPTCP, Geliang Tang
  • [PATCH mptcp-next v12 1/5] bpf: Add update_socket_protocol hook, Geliang Tang
  • [PATCH mptcp-next v12 2/5] selftests/bpf: Use random netns name for mptcp, Geliang Tang
  • [PATCH mptcp-next v12 3/5] selftests/bpf: Add two mptcp netns helpers, Geliang Tang
  • [PATCH mptcp-next v12 4/5] selftests/bpf: Fix error checks of mptcp open_and_load, Geliang Tang
  • [PATCH mptcp-next v12 5/5] selftests/bpf: Add mptcpify test, Geliang Tang
• [PATCH] libsemanage/tests: use strict prototypes, Christian Göttsche
  • Re: [PATCH] libsemanage/tests: use strict prototypes, James Carter
    • Re: [PATCH] libsemanage/tests: use strict prototypes, James Carter
• [PATCH] restorecond: compatible with the use of EUID, Huizhao Wang
  • Re: [PATCH] restorecond: compatible with the use of EUID, Petr Lautrbach
    • Re: [PATCH] restorecond: compatible with the use of EUID, James Carter
• [PATCH v7] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Jeff Layton
  • Re: [PATCH v7] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Christian Brauner
    • Re: [PATCH v7] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Christian Brauner
    • Re: [PATCH v7] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Jeff Layton
      • Re: [PATCH v7] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Christian Brauner
• [PATCH bpf-next v11 0/5] bpf: Force to MPTCP, Geliang Tang
  • [PATCH bpf-next v11 1/5] bpf: Add update_socket_protocol hook, Geliang Tang
    • Re: [PATCH bpf-next v11 1/5] bpf: Add update_socket_protocol hook, Martin KaFai Lau
  • [PATCH bpf-next v11 2/5] selftests/bpf: Use random netns name for mptcp, Geliang Tang
    • Re: [PATCH bpf-next v11 2/5] selftests/bpf: Use random netns name for mptcp, Martin KaFai Lau
      • Re: [PATCH bpf-next v11 2/5] selftests/bpf: Use random netns name for mptcp, Geliang Tang
        • Re: [PATCH bpf-next v11 2/5] selftests/bpf: Use random netns name for mptcp, Martin KaFai Lau
          • Re: [PATCH bpf-next v11 2/5] selftests/bpf: Use random netns name for mptcp, Geliang Tang
            • Re: [PATCH bpf-next v11 2/5] selftests/bpf: Use random netns name for mptcp, Martin KaFai Lau
              • Re: [PATCH bpf-next v11 2/5] selftests/bpf: Use random netns name for mptcp, Geliang Tang
                • Re: [PATCH bpf-next v11 2/5] selftests/bpf: Use random netns name for mptcp, Martin KaFai Lau
  • [PATCH bpf-next v11 3/5] selftests/bpf: Add two mptcp netns helpers, Geliang Tang
  • [PATCH bpf-next v11 4/5] selftests/bpf: Drop unneeded checks for mptcp, Geliang Tang
  • [PATCH bpf-next v11 5/5] selftests/bpf: Add mptcpify test, Geliang Tang
    • Re: [PATCH bpf-next v11 5/5] selftests/bpf: Add mptcpify test, Martin KaFai Lau
• [PATCH -next] selinux: update comment on selinux_hooks[], Xiu Jianfeng
  • Re: [PATCH] selinux: update comment on selinux_hooks[], Paul Moore
• [PATCH bpf-next v10 0/5] bpf: Force to MPTCP, Geliang Tang
  • [PATCH bpf-next v10 1/5] bpf: Add update_socket_protocol hook, Geliang Tang
    • Re: [PATCH bpf-next v10 1/5] bpf: Add update_socket_protocol hook, Yonghong Song
  • [PATCH bpf-next v10 2/5] selftests/bpf: Use random netns name for mptcp, Geliang Tang
  • [PATCH bpf-next v10 3/5] selftests/bpf: Add two mptcp netns helpers, Geliang Tang
  • [PATCH bpf-next v10 4/5] selftests/bpf: Drop unneeded checks for mptcp, Geliang Tang
    • Re: [PATCH bpf-next v10 4/5] selftests/bpf: Drop unneeded checks for mptcp, Yonghong Song
  • [PATCH bpf-next v10 5/5] selftests/bpf: Add mptcpify test, Geliang Tang
    • Re: [PATCH bpf-next v10 5/5] selftests/bpf: Add mptcpify test, Yonghong Song
• [PATCH v2] selinux: optimize ebitmap_and(), Christian Göttsche
• [PATCH 1/4] libselinux/utils: update selabel_partial_match, Christian Göttsche
  • [PATCH 2/4] libselinux: misc label cleanup, Christian Göttsche
  • [PATCH 3/4] libselinux: drop obsolete optimization flag, Christian Göttsche
    • Re: [PATCH 3/4] libselinux: drop obsolete optimization flag, James Carter
  • [PATCH 4/4] libselinux: drop unnecessary warning overrides, Christian Göttsche
  • Re: [PATCH 1/4] libselinux/utils: update selabel_partial_match, James Carter
• [PATCH] libsepol: ebitmap: avoid branches for iteration, Christian Göttsche
  • Re: [PATCH] libsepol: ebitmap: avoid branches for iteration, James Carter
    • Re: [PATCH] libsepol: ebitmap: avoid branches for iteration, James Carter
• [PATCH] setfiles: do not issue AUDIT_FS_RELABEL on dry run, Christian Göttsche
• [PATCH bpf-next v9 0/4] bpf: Force to MPTCP, Geliang Tang
  • [PATCH bpf-next v9 1/4] bpf: Add update_socket_protocol hook, Geliang Tang
    • Re: [PATCH bpf-next v9 1/4] bpf: Add update_socket_protocol hook, Yonghong Song
  • [PATCH bpf-next v9 2/4] selftests/bpf: Use random netns name for mptcp, Geliang Tang
    • Re: [PATCH bpf-next v9 2/4] selftests/bpf: Use random netns name for mptcp, Yonghong Song
  • [PATCH bpf-next v9 3/4] selftests/bpf: Add two mptcp netns helpers, Geliang Tang
    • Re: [PATCH bpf-next v9 3/4] selftests/bpf: Add two mptcp netns helpers, Yonghong Song
  • [PATCH bpf-next v9 4/4] selftests/bpf: Add mptcpify test, Geliang Tang
    • Re: [PATCH bpf-next v9 4/4] selftests/bpf: Add mptcpify test, Yonghong Song
    • Re: [PATCH bpf-next v9 4/4] selftests/bpf: Add mptcpify test, Yonghong Song
      • Re: [PATCH bpf-next v9 4/4] selftests/bpf: Add mptcpify test, Geliang Tang
        • Re: [PATCH bpf-next v9 4/4] selftests/bpf: Add mptcpify test, Yonghong Song
• [PATCH] python: Use isinstance() instead of type(), James Carter
  • Re: [PATCH] python: Use isinstance() instead of type(), Petr Lautrbach
    • Re: [PATCH] python: Use isinstance() instead of type(), Petr Lautrbach
• [PATCH bpf-next v8 0/4] bpf: Force to MPTCP, Geliang Tang
  • [PATCH bpf-next v8 1/4] bpf: Add update_socket_protocol hook, Geliang Tang
    • Re: [PATCH bpf-next v8 1/4] bpf: Add update_socket_protocol hook, Matthieu Baerts
    • Re: [PATCH bpf-next v8 1/4] bpf: Add update_socket_protocol hook, Simon Horman
      • Re: [PATCH bpf-next v8 1/4] bpf: Add update_socket_protocol hook, Geliang Tang
  • [PATCH bpf-next v8 2/4] selftests/bpf: Use random netns name for mptcp, Geliang Tang
  • [PATCH bpf-next v8 3/4] selftests/bpf: Add two mptcp netns helpers, Geliang Tang
  • [PATCH bpf-next v8 4/4] selftests/bpf: Add mptcpify test, Geliang Tang
    • Re: [PATCH bpf-next v8 4/4] selftests/bpf: Add mptcpify test, Matthieu Baerts
• [PATCH v13 10/11] SELinux: Add selfattr hooks, Casey Schaufler
  • Re: [PATCH v13 10/11] SELinux: Add selfattr hooks, Paul Moore
  • Re: [PATCH v13 10/11] SELinux: Add selfattr hooks, Mickaël Salaün
• [PATCH v6] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Jeff Layton
  • Re: [PATCH v6] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Paul Moore
    • Re: [PATCH v6] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Jeff Layton
      • Re: [PATCH v6] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Paul Moore
        • Re: [PATCH v6] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Jeff Layton
          • Re: [PATCH v6] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Paul Moore
            • Re: [PATCH v6] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Jeff Layton
      • Re: [PATCH v6] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Christian Brauner
        • Re: [PATCH v6] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Jeff Layton
          • Re: [PATCH v6] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Christian Brauner
            • Re: [PATCH v6] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Jeff Layton
              • Re: [PATCH v6] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Christian Brauner
                • Re: [PATCH v6] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Jeff Layton
                  • Re: [PATCH v6] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Christian Brauner
  • Re: [PATCH v6] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, David Howells
  • Re: [PATCH v6] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, David Howells
    • Re: [PATCH v6] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Jeff Layton
• File context rule for file in /run not working, Ian Pilcher
  • Re: File context rule for file in /run not working, Petr Lautrbach
• [PATCH -next] selinux: cleanup obsolete comments for selinux_hooks[], Xiu Jianfeng
  • Re: [PATCH -next] selinux: cleanup obsolete comments for selinux_hooks[], Paul Moore
    • Re: [PATCH -next] selinux: cleanup obsolete comments for selinux_hooks[], xiujianfeng
• [PATCH 0/2] lsm: change security_capget LSM hook, Khadija Kamran
  • [PATCH 1/2] lsm: change 'target' parameter to 'const' in security_capget LSM hook, Khadija Kamran
    • Re: [PATCH 1/2] lsm: change 'target' parameter to 'const' in security_capget LSM hook, Alison Schofield
      • Re: [PATCH 1/2] lsm: change 'target' parameter to 'const' in security_capget LSM hook, Paul Moore
  • [PATCH 2/2] lsm: split cap_capget() declaration to multiple lines, Khadija Kamran
• Network ports - multiple types?, Ian Pilcher
  • Re: Network ports - multiple types?, Stephen Smalley
    • Re: Network ports - multiple types?, Ian Pilcher
      • Re: Network ports - multiple types?, Stephen Smalley
        • Re: Network ports - multiple types?, Stephen Smalley
• [RFC bpf-next v7 0/6] bpf: Force to MPTCP, Geliang Tang
  • [RFC bpf-next v7 1/6] net: socket: add update_socket_protocol hook, Geliang Tang
  • [RFC bpf-next v7 2/6] bpf: Register mptcp modret set, Geliang Tang
  • [RFC bpf-next v7 3/6] selftests/bpf: Add mptcpify program, Geliang Tang
  • [RFC bpf-next v7 4/6] selftests/bpf: use random netns name for mptcp, Geliang Tang
  • [RFC bpf-next v7 5/6] selftests/bpf: add two mptcp netns helpers, Geliang Tang
  • [RFC bpf-next v7 6/6] selftests/bpf: Add mptcpify selftest, Geliang Tang
  • Re: [RFC bpf-next v7 0/6] bpf: Force to MPTCP, Alexei Starovoitov
    • Re: [RFC bpf-next v7 0/6] bpf: Force to MPTCP, Geliang Tang
      • Re: [RFC bpf-next v7 0/6] bpf: Force to MPTCP, Alexei Starovoitov
        • Re: [RFC bpf-next v7 0/6] bpf: Force to MPTCP, Matthieu Baerts
    • Re: [RFC bpf-next v7 0/6] bpf: Force to MPTCP, Paolo Abeni
• [RFC PATCH] selinux: optimize ebitmap_and(), Christian Göttsche
• [PATCH v2 2/9] selinux: use u32 as bit type in ebitmap code, Christian Göttsche
  • [PATCH v2 3/9] selinux: use identical iterator type in hashtab_duplicate(), Christian Göttsche
    • Re: [PATCH v2 3/9] selinux: use identical iterator type in hashtab_duplicate(), Paul Moore
  • [PATCH v2 4/9] selinux: avoid implicit conversions in mls code, Christian Göttsche
    • Re: [PATCH v2 4/9] selinux: avoid implicit conversions in mls code, Paul Moore
  • [PATCH v2 5/9] selinux: services: update type for number of class permissions, Christian Göttsche
    • Re: [PATCH v2 5/9] selinux: services: update type for number of class permissions, Gong Ruiqi
    • Re: [PATCH v2 5/9] selinux: services: update type for number of class permissions, Paul Moore
      • RE: [PATCH v2 5/9] selinux: services: update type for number of class permissions, David Laight
  • [PATCH v2 6/9] selinux: avoid implicit conversions in services code, Christian Göttsche
    • Re: [PATCH v2 6/9] selinux: avoid implicit conversions in services code, Gong Ruiqi
    • Re: [PATCH v2 6/9] selinux: avoid implicit conversions in services code, Paul Moore
  • [PATCH v2 7/9] selinux: avoid implicit conversions in selinuxfs code, Christian Göttsche
    • Re: [PATCH v2 7/9] selinux: avoid implicit conversions in selinuxfs code, Paul Moore
  • [PATCH v2 9/9] selinux: avoid implicit conversion in nlmsgtab code, Christian Göttsche
    • Re: [PATCH v2 9/9] selinux: avoid implicit conversion in nlmsgtab code, Paul Moore
  • [PATCH v2 1/9] selinux: avoid implicit conversions in avtab code, Christian Göttsche
    • Re: [PATCH v2 1/9] selinux: avoid implicit conversions in avtab code, Paul Moore
  • [PATCH v2 8/9] selinux: policydb: implicit conversions, Christian Göttsche
    • Re: [PATCH v2 8/9] selinux: policydb: implicit conversions, Paul Moore
  • Re: [PATCH v2 2/9] selinux: use u32 as bit type in ebitmap code, Paul Moore
    • RE: [PATCH v2 2/9] selinux: use u32 as bit type in ebitmap code, David Laight
• [PATCH v2] selinux: log about VM being executable by default, Christian Göttsche
  • Re: [PATCH v2] selinux: log about VM being executable by default, Paul Moore
• [PATCH v6] semanage, sepolicy: list also ports not attributed with port_type, Topi Miettinen
• [RFC bpf-next v6] bpf: Force to MPTCP, Geliang Tang
  • Re: [RFC bpf-next v6] bpf: Force to MPTCP, Yonghong Song
• [PATCH v3 0/4] mm: convert to vma_is_initial_heap/stack(), Kefeng Wang
  • [PATCH v3 2/4] drm/amdkfd: use vma_is_initial_stack() and vma_is_initial_heap(), Kefeng Wang
  • [PATCH v3 1/4] mm: factor out VMA stack and heap checks, Kefeng Wang
  • [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Kefeng Wang
    • Fwd: [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Stephen Smalley
      • Re: [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Paul Moore
        • Message not available
          • Message not available
            • Re: [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Ondrej Mosnacek
              • Re: [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Paul Moore
                • Re: [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Kefeng Wang
                  • Re: [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Ondrej Mosnacek
                    • Re: [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Kefeng Wang
                      • Re: [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Marc Reisner
                        • Re: [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Paul Moore
                          • Re: [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Kefeng Wang
                            • Re: [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Kefeng Wang
                              • Re: [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Stephen Smalley
                                • Re: [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Kefeng Wang
                                  • Re: [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Marc Reisner
                                    • Re: [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Liam R. Howlett
                                      • Re: [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Marc Reisner
                                        • Re: [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Paul Moore
  • [PATCH v3 4/4] perf/core: use vma_is_initial_stack() and vma_is_initial_heap(), Kefeng Wang
  • Re: [PATCH v3 0/4] mm: convert to vma_is_initial_heap/stack(), Peter Zijlstra
• ANN: SETools 4.4.3, Chris PeBenito
• [PATCH 0/8] Revert the prefix/suffix filename transition patches, James Carter
  • [PATCH 1/8] Revert "libsepol/cil: add support for prefix/suffix filename transtions to CIL", James Carter
  • [PATCH 2/8] Revert "checkpolicy,libsepol: add prefix/suffix support to module policy", James Carter
  • [PATCH 3/8] Revert "checkpolicy,libsepol: add prefix/suffix support to kernel policy", James Carter
  • [PATCH 4/8] Revert "libsepol: implement new module binary format of avrule", James Carter
  • [PATCH 5/8] Revert "libsepol: implement new kernel binary format for avtab", James Carter
  • [PATCH 8/8] Revert "checkpolicy,libsepol: move transition to separate structure in avtab", James Carter
  • [PATCH 6/8] Revert "checkpolicy,libsepol: move filename transition rules to avrule", James Carter
  • [PATCH 7/8] Revert "checkpolicy,libsepol: move filename transitions to avtab", James Carter
  • Re: [PATCH 0/8] Revert the prefix/suffix filename transition patches, Paul Moore
  • Re: [PATCH 0/8] Revert the prefix/suffix filename transition patches, Petr Lautrbach
    • Re: [PATCH 0/8] Revert the prefix/suffix filename transition patches, James Carter
• [PATCH testsuite] ci: test also on CentOS Stream 9, Ondrej Mosnacek
• [linux-next:master] BUILD REGRESSION ae867bc97b713121b2a7f5fcac68378a0774739b, kernel test robot
• [PATCH] selinux: Use NULL for pointers, Jiapeng Chong
  • Re: [PATCH] selinux: Use NULL for pointers, Paul Moore
• [PATCH] selinux: fix a 0/NULL mistmatch in ad_net_init_from_iif(), Paul Moore
  • Re: [PATCH] selinux: fix a 0/NULL mistmatch in ad_net_init_from_iif(), Paolo Abeni
    • Re: [PATCH] selinux: fix a 0/NULL mistmatch in ad_net_init_from_iif(), Paul Moore
• [RFC PATCH] selinux: log about VM being executable by default, Christian Göttsche
  • Re: [RFC PATCH] selinux: log about VM being executable by default, Paul Moore
• SELinux Mascot/Logo, Brett Anderson
  • Re: SELinux Mascot/Logo, Paul Moore
  • Re: SELinux Mascot/Logo, Dominick Grift
    • Re: SELinux Mascot/Logo, Brett Anderson
• [PATCH userspace] checkpolicy,libselinux,libsepol,policycoreutils,semodule-utils: update my email, Stephen Smalley
  • Re: [PATCH userspace] checkpolicy,libselinux,libsepol,policycoreutils,semodule-utils: update my email, Stephen Smalley
  • Re: [PATCH userspace] checkpolicy,libselinux,libsepol,policycoreutils,semodule-utils: update my email, James Carter
    • Re: [PATCH userspace] checkpolicy,libselinux,libsepol,policycoreutils,semodule-utils: update my email, James Carter
• [PATCH userspace] libselinux,policycoreutils,python,semodule-utils: de-brand SELinux, Stephen Smalley
  • Re: [PATCH userspace] libselinux,policycoreutils,python,semodule-utils: de-brand SELinux, James Carter
    • Re: [PATCH userspace] libselinux,policycoreutils,python,semodule-utils: de-brand SELinux, James Carter
  • RFC: remove /ru/ man pages from the repo, Petr Lautrbach
    • Re: RFC: remove /ru/ man pages from the repo, Stephen Smalley
• [PATCH] selinux: update my email address, Stephen Smalley
  • Re: [PATCH] selinux: update my email address, Paul Moore
• [PATCH] selinux: introduce and use lsm_ad_net_init*() helpers, Paolo Abeni
  • Re: [PATCH] selinux: introduce and use lsm_ad_net_init*() helpers, Paul Moore
• [PATCH v2 0/4] mm: convert to vma_is_initial_heap/stack(), Kefeng Wang
  • [PATCH v2 2/4] drm/amdkfd: use vma_is_initial_stack() and vma_is_initial_heap(), Kefeng Wang
    • Re: [PATCH v2 2/4] drm/amdkfd: use vma_is_initial_stack() and vma_is_initial_heap(), David Hildenbrand
    • Re: [PATCH v2 2/4] drm/amdkfd: use vma_is_initial_stack() and vma_is_initial_heap(), Felix Kuehling
  • [PATCH v2 1/4] mm: factor out VMA stack and heap checks, Kefeng Wang
    • Re: [PATCH v2 1/4] mm: factor out VMA stack and heap checks, David Hildenbrand
  • [PATCH v2 4/4] perf/core: use vma_is_initial_stack() and vma_is_initial_heap(), Kefeng Wang
    • Re: [PATCH v2 4/4] perf/core: use vma_is_initial_stack() and vma_is_initial_heap(), David Hildenbrand
    • Re: [PATCH v2 4/4] perf/core: use vma_is_initial_stack() and vma_is_initial_heap(), Peter Zijlstra
      • Re: [PATCH v2 4/4] perf/core: use vma_is_initial_stack() and vma_is_initial_heap(), Kefeng Wang
  • [PATCH v2 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Kefeng Wang
    • Re: [PATCH v2 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), David Hildenbrand
    • Re: [PATCH v2 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Christian Göttsche
      • Re: [PATCH v2 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Kefeng Wang
        • Re: [PATCH v2 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Paul Moore
          • Re: [PATCH v2 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Kefeng Wang
            • Re: [PATCH v2 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Paul Moore
• [PATCH] selinux: add missing newlines in print statements, Christian Göttsche
  • Re: [PATCH] selinux: add missing newlines in print statements, Paul Moore
• [PATCH 1/3] selinux: introduce SECURITY_SELINUX_DEBUG configuration, Christian Göttsche
  • [PATCH 2/3] selinux: move debug functions into debug configuration, Christian Göttsche
    • Re: [PATCH 2/3] selinux: move debug functions into debug configuration, Paul Moore
    • [PATCH v2] selinux: move debug functions into debug configuration, Christian Göttsche
      • Re: [PATCH v2] selinux: move debug functions into debug configuration, Paul Moore
  • [PATCH 3/3] selinux: log missing anonclass in debug configuration, Christian Göttsche
    • Re: [PATCH 3/3] selinux: log missing anonclass in debug configuration, Paul Moore
      • Re: [PATCH 3/3] selinux: log missing anonclass in debug configuration, Christian Göttsche
  • Re: [PATCH 1/3] selinux: introduce SECURITY_SELINUX_DEBUG configuration, Paul Moore
• [PATCH] selinux: drop avtab_search(), Christian Göttsche
  • Re: [PATCH] selinux: drop avtab_search(), Paul Moore
• [PATCH] selinux: de-brand SELinux, Stephen Smalley
  • Re: [PATCH] selinux: de-brand SELinux, Paul Moore
• [RFC bpf-next v5] bpf: Force to MPTCP, Geliang Tang
  • Re: [RFC bpf-next v5] bpf: Force to MPTCP, Paul Moore
    • Re: [RFC bpf-next v5] bpf: Force to MPTCP, Matthieu Baerts
      • Re: [RFC bpf-next v5] bpf: Force to MPTCP, Stanislav Fomichev
        • Re: [RFC bpf-next v5] bpf: Force to MPTCP, Matthieu Baerts
          • Re: [RFC bpf-next v5] bpf: Force to MPTCP, Stanislav Fomichev
            • Re: [RFC bpf-next v5] bpf: Force to MPTCP, Matthieu Baerts
• [PATCH] io_uring: don't audit the capability check in io_uring_create(), Ondrej Mosnacek
  • Re: [PATCH] io_uring: don't audit the capability check in io_uring_create(), Jeff Moyer
    • Re: [PATCH] io_uring: don't audit the capability check in io_uring_create(), Ondrej Mosnacek
  • Re: [PATCH] io_uring: don't audit the capability check in io_uring_create(), Jens Axboe
• [RFC PATCH] selinux: introduce and use ad_init_net*() helpers, Paolo Abeni
  • Re: [RFC PATCH] selinux: introduce and use ad_init_net*() helpers, Paul Moore
  • Re: [RFC PATCH] selinux: introduce and use ad_init_net*() helpers, Ondrej Mosnacek
    • Re: [RFC PATCH] selinux: introduce and use ad_init_net*() helpers, Paolo Abeni
      • Re: [RFC PATCH] selinux: introduce and use ad_init_net*() helpers, Paul Moore
  • Re: [RFC PATCH] selinux: introduce and use ad_init_net*() helpers, Paolo Abeni
    • Re: [RFC PATCH] selinux: introduce and use ad_init_net*() helpers, Paul Moore
      • Re: [RFC PATCH] selinux: introduce and use ad_init_net*() helpers, Paolo Abeni
    • Re: [RFC PATCH] selinux: introduce and use ad_init_net*() helpers, Casey Schaufler
• [PATCH testsuite] policy: allow all test domains to search user/admin home directories, Ondrej Mosnacek
  • Re: [PATCH testsuite] policy: allow all test domains to search user/admin home directories, Stephen Smalley
    • Re: [PATCH testsuite] policy: allow all test domains to search user/admin home directories, Ondrej Mosnacek
• [PATCH] libsepol: free potential transition tables on insertion failure, Christian Göttsche
  • Re: [PATCH] libsepol: free potential transition tables on insertion failure, James Carter
• [PATCH v2] libselinux/utils: introduce getpolicyload, Christian Göttsche
  • Re: [PATCH v2] libselinux/utils: introduce getpolicyload, James Carter
    • Re: [PATCH v2] libselinux/utils: introduce getpolicyload, James Carter
• [PATCH 1/4] libsepol: validate: use fixed sized integers, Christian Göttsche
  • [PATCH 3/4] libsepol: expand: use identical type to avoid implicit conversion, Christian Göttsche
  • [PATCH 2/4] hashtab: update, Christian Göttsche
  • [PATCH 4/4] libsepol: expand: check for memory allocation failure, Christian Göttsche
  • Re: [PATCH 1/4] libsepol: validate: use fixed sized integers, James Carter
    • Re: [PATCH 1/4] libsepol: validate: use fixed sized integers, James Carter
• [PATCH] libsepol: use explicit type for function parameters, Christian Göttsche
  • Re: [PATCH] libsepol: use explicit type for function parameters, James Carter
    • Re: [PATCH] libsepol: use explicit type for function parameters, James Carter
• [PATCH] libsepol: optional data destruction in hashtab_destroy(), Christian Göttsche
  • Re: [PATCH] libsepol: optional data destruction in hashtab_destroy(), James Carter
• [PATCH testsuite] policy: allow inet socket test domains to search user home content, Stephen Smalley
  • Re: [PATCH testsuite] policy: allow inet socket test domains to search user home content, Ondrej Mosnacek
• [PATCH] checkpolicy: Remove support for role dominance rules, James Carter
  • Re: [PATCH] checkpolicy: Remove support for role dominance rules, James Carter
    • Re: [PATCH] checkpolicy: Remove support for role dominance rules, Petr Lautrbach
      • Re: [PATCH] checkpolicy: Remove support for role dominance rules, James Carter
• [PATCH 1/5] libsepol: free memory on str_read() failures, Christian Göttsche
  • [PATCH 2/5] libsepol: reject avtab entries with invalid specifier, Christian Göttsche
    • Re: [PATCH 2/5] libsepol: reject avtab entries with invalid specifier, James Carter
  • [PATCH 3/5] libsepol: free ebitmap in filename_trans_comp_read_one(), Christian Göttsche
  • [PATCH 4/5] libsepol: drop superfluous check, Christian Göttsche
  • [PATCH 5/5] libsepol: avtab: check read counts for saturation, Christian Göttsche
    • Re: [PATCH 5/5] libsepol: avtab: check read counts for saturation, James Carter
• [PATCH] secilc: add check for malloc in secilc, Huaxin Lu
  • Re: [PATCH] secilc: add check for malloc in secilc, James Carter
    • Re: [PATCH] secilc: add check for malloc in secilc, James Carter
• [PATCH 0/5] mm: convert to vma_is_heap/stack(), Kefeng Wang
  • [PATCH 2/5] mm: use vma_is_stack() and vma_is_heap(), Kefeng Wang
    • Re: [PATCH 2/5] mm: use vma_is_stack() and vma_is_heap(), David Hildenbrand
      • Re: [PATCH 2/5] mm: use vma_is_stack() and vma_is_heap(), Kefeng Wang
  • [PATCH 4/5] selinux: use vma_is_stack() and vma_is_heap(), Kefeng Wang
    • Re: [PATCH 4/5] selinux: use vma_is_stack() and vma_is_heap(), Paul Moore
  • [PATCH 3/5] drm/amdkfd: use vma_is_stack() and vma_is_heap(), Kefeng Wang
    • Re: [PATCH 3/5] drm/amdkfd: use vma_is_stack() and vma_is_heap(), Christoph Hellwig
      • Re: [PATCH 3/5] drm/amdkfd: use vma_is_stack() and vma_is_heap(), Felix Kuehling
        • Re: [PATCH 3/5] drm/amdkfd: use vma_is_stack() and vma_is_heap(), Vlastimil Babka
          • Re: [PATCH 3/5] drm/amdkfd: use vma_is_stack() and vma_is_heap(), Felix Kuehling
  • [PATCH 1/5] mm: introduce vma_is_stack() and vma_is_heap(), Kefeng Wang
    • Re: [PATCH 1/5] mm: introduce vma_is_stack() and vma_is_heap(), David Hildenbrand
    • Re: [PATCH 1/5] mm: introduce vma_is_stack() and vma_is_heap(), Christian Göttsche
  • [PATCH 5/5] perf/core: use vma_is_stack() and vma_is_heap(), Kefeng Wang
• [PATCH net-next 0/4] net: Mark the sk parameter of routing functions as 'const'., Guillaume Nault
  • [PATCH net-next 1/4] security: Constify sk in the sk_getsecid hook., Guillaume Nault
    • Re: [PATCH net-next 1/4] security: Constify sk in the sk_getsecid hook., Simon Horman
    • Re: [PATCH net-next 1/4] security: Constify sk in the sk_getsecid hook., Paul Moore
      • Re: [PATCH net-next 1/4] security: Constify sk in the sk_getsecid hook., Guillaume Nault
  • Re: [PATCH net-next 0/4] net: Mark the sk parameter of routing functions as 'const'., patchwork-bot+netdevbpf
• [PATCH] restorecond: add check for strdup in strings_list_add, Huaxin Lu
  • Re: [PATCH] restorecond: add check for strdup in strings_list_add, James Carter
    • Re: [PATCH] restorecond: add check for strdup in strings_list_add, James Carter
• [PATCH] selinux: optimize major part with a kernel config in selinux_mmap_addr(), Leesoo Ahn
  • Re: [PATCH] selinux: optimize major part with a kernel config in selinux_mmap_addr(), Stephen Smalley
    • Re: [PATCH] selinux: optimize major part with a kernel config in selinux_mmap_addr(), Leesoo Ahn
  • Re: [PATCH] selinux: optimize major part with a kernel config in selinux_mmap_addr(), Paul Moore
    • Re: [PATCH] selinux: optimize major part with a kernel config in selinux_mmap_addr(), Casey Schaufler
      • Re: [PATCH] selinux: optimize major part with a kernel config in selinux_mmap_addr(), Paul Moore
  • Re: [PATCH] selinux: optimize major part with a kernel config in selinux_mmap_addr(), Thomas Weißschuh
• [PATCH] checkpolicy: free role identifier in define_role_dom(), Christian Göttsche
  • Re: [PATCH] checkpolicy: free role identifier in define_role_dom(), James Carter
• [PATCH v2] checkpolicy: add round-trip tests, Christian Göttsche
  • Re: [PATCH v2] checkpolicy: add round-trip tests, James Carter
  • <Possible follow-ups>
  • [PATCH v2] checkpolicy: add round-trip tests, Christian Göttsche
    • Re: [PATCH v2] checkpolicy: add round-trip tests, James Carter
      • Re: [PATCH v2] checkpolicy: add round-trip tests, James Carter
• [PATCH v2 1/4] semodule_expand: update, Christian Göttsche
  • [PATCH v2 2/4] semodule_link: update, Christian Göttsche
  • [PATCH v2 3/4] semodule_package: update, Christian Göttsche
  • [PATCH v2 4/4] semodule_unpackage: update, Christian Göttsche
  • Re: [PATCH v2 1/4] semodule_expand: update, James Carter
    • Re: [PATCH v2 1/4] semodule_expand: update, James Carter
• [PATCH] setsebool: improve bash-completion script, Christian Göttsche
  • Re: [PATCH] setsebool: improve bash-completion script, James Carter
    • Re: [PATCH] setsebool: improve bash-completion script, James Carter
• [PATCH] setsebool: drop unnecessary linking against libsepol, Christian Göttsche
  • Re: [PATCH] setsebool: drop unnecessary linking against libsepol, James Carter
    • Re: [PATCH] setsebool: drop unnecessary linking against libsepol, James Carter
• [RFC PATCH] libsepol/cil: support parallel neverallow checks, Christian Göttsche
  • Re: [RFC PATCH] libsepol/cil: support parallel neverallow checks, James Carter
• [PATCH] libsepol/fuzz: more strict fuzzing of binary policies, Christian Göttsche
  • Re: [PATCH] libsepol/fuzz: more strict fuzzing of binary policies, James Carter
    • Re: [PATCH] libsepol/fuzz: more strict fuzzing of binary policies, James Carter
• [PATCH] libsepol: check for overflow in put_entry(), Christian Göttsche
  • Re: [PATCH] libsepol: check for overflow in put_entry(), James Carter
    • Re: [PATCH] libsepol: check for overflow in put_entry(), James Carter
• [PATCH] libsepol: free initial sid names, Christian Göttsche
  • Re: [PATCH] libsepol: free initial sid names, James Carter
    • Re: [PATCH] libsepol: free initial sid names, James Carter
• [PATCH] libselinux/utils: introduce getpolicyload, Christian Göttsche
  • Re: [PATCH] libselinux/utils: introduce getpolicyload, James Carter
• [RFC PATCH] selinux: disable debug functions by default, Christian Göttsche
  • Re: [RFC PATCH] selinux: disable debug functions by default, Paul Moore
• [RFC PATCH] selinux: implement avtab_search() via avtab_search_node(), Christian Göttsche
  • Re: [RFC PATCH] selinux: implement avtab_search() via avtab_search_node(), Paul Moore
• [RFC PATCH 01/20] selinux: check for multiplication overflow in put_entry(), Christian Göttsche
  • [RFC PATCH 03/20] selinux: avoid avtab overflows, Christian Göttsche
    • Re: [PATCH RFC 3/20] selinux: avoid avtab overflows, Paul Moore
  • [RFC PATCH 02/20] selinux: avtab: avoid implicit conversions, Christian Göttsche
    • Re: [PATCH RFC 2/20] selinux: avtab: avoid implicit conversions, Paul Moore
  • [RFC PATCH 07/20] selinux: services: update type for umber of class permissions, Christian Göttsche
    • Re: [RFC PATCH 07/20] selinux: services: update type for umber of class permissions, Gong Ruiqi
    • Re: [PATCH RFC 7/20] selinux: services: update type for umber of class permissions, Paul Moore
      • Re: [PATCH RFC 7/20] selinux: services: update type for umber of class permissions, Gong Ruiqi
  • [RFC PATCH 06/20] selinux: mls: avoid implicit conversions, Christian Göttsche
    • Re: [PATCH RFC 6/20] selinux: mls: avoid implicit conversions, Paul Moore
  • [RFC PATCH 04/20] selinux: ebitmap: use u32 as bit type, Christian Göttsche
    • Re: [PATCH RFC 4/20] selinux: ebitmap: use u32 as bit type, Paul Moore
  • [RFC PATCH 05/20] selinux: hashtab: use identical iterator type, Christian Göttsche
    • Re: [PATCH RFC 5/20] selinux: hashtab: use identical iterator type, Paul Moore
  • [RFC PATCH 10/20] selinux: netif: avoid implicit conversions, Christian Göttsche
    • Re: [PATCH RFC 10/20] selinux: netif: avoid implicit conversions, Paul Moore
  • [RFC PATCH 09/20] selinux: status: consistently use u32 as sequence number type, Christian Göttsche
    • Re: [PATCH RFC 9/20] selinux: status: consistently use u32 as sequence number type, Paul Moore
  • [RFC PATCH 08/20] selinux: services: avoid implicit conversions, Christian Göttsche
    • Re: [PATCH RFC 8/20] selinux: services: avoid implicit conversions, Paul Moore
  • [RFC PATCH 11/20] selinux: avc: avoid implicit conversions, Christian Göttsche
    • Re: [PATCH RFC 11/20] selinux: avc: avoid implicit conversions, Paul Moore
  • [RFC PATCH 12/20] selinux: hooks: avoid implicit conversions, Christian Göttsche
    • Re: [PATCH RFC 12/20] selinux: hooks: avoid implicit conversions, Paul Moore
  • [RFC PATCH 13/20] selinux: selinuxfs: avoid implicit conversions, Christian Göttsche
    • Re: [PATCH RFC 13/20] selinux: selinuxfs: avoid implicit conversions, Paul Moore
  • [RFC PATCH 14/20] selinux: use consistent type for AV rule specifier, Christian Göttsche
    • Re: [PATCH RFC 14/20] selinux: use consistent type for AV rule specifier, Paul Moore
  • [RFC PATCH 15/20] selinux: policydb: implicit conversions, Christian Göttsche
    • Re: [PATCH RFC 15/20] selinux: policydb: implicit conversions, Paul Moore
  • [RFC PATCH 16/20] selinux: symtab: implicit conversion, Christian Göttsche
    • Re: [PATCH RFC 16/20] selinux: symtab: implicit conversion, Paul Moore
  • [RFC PATCH 17/20] selinux: services: implicit conversions, Christian Göttsche
    • Re: [PATCH RFC 17/20] selinux: services: implicit conversions, Paul Moore
  • [RFC PATCH 18/20] selinux: nlmsgtab: implicit conversion, Christian Göttsche
    • Re: [PATCH RFC 18/20] selinux: nlmsgtab: implicit conversion, Paul Moore
  • [RFC PATCH 20/20] selinux: selinuxfs: avoid implicit conversions, Christian Göttsche
    • Re: [PATCH RFC 20/20] selinux: selinuxfs: avoid implicit conversions, Paul Moore
  • [RFC PATCH 00/20] selinux: be more strict about integer conversions, Christian Göttsche
    • Re: [PATCH RFC 0/20] selinux: be more strict about integer conversions, Paul Moore
  • [RFC PATCH 19/20] selinux: status: avoid implicit conversions regarding enforcing status, Christian Göttsche
    • Re: [PATCH RFC 19/20] selinux: status: avoid implicit conversions regarding enforcing status, Paul Moore
  • Re: [PATCH RFC 1/20] selinux: check for multiplication overflow in put_entry(), Paul Moore
• [PATCH v2 91/92] selinux: convert to ctime accessor functions, Jeff Layton
  • Re: [PATCH v2 91/92] selinux: convert to ctime accessor functions, Jan Kara
• [PATCH v2 00/89] fs: new accessors for inode->i_ctime, Jeff Layton
  • [PATCH v2 07/92] fs: add ctime accessors infrastructure, Jeff Layton
    • Re: [PATCH v2 07/92] fs: add ctime accessors infrastructure, Damien Le Moal
  • [PATCH v2 08/92] fs: new helper: simple_rename_timestamp, Jeff Layton
    • Re: [PATCH v2 08/92] fs: new helper: simple_rename_timestamp, Damien Le Moal
      • Re: [PATCH v2 08/92] fs: new helper: simple_rename_timestamp, Jeff Layton
        • Re: [apparmor] [PATCH v2 08/92] fs: new helper: simple_rename_timestamp, Seth Arnold
          • Re: [apparmor] [PATCH v2 08/92] fs: new helper: simple_rename_timestamp, Jeff Layton
    • Re: [PATCH v2 08/92] fs: new helper: simple_rename_timestamp, Jan Kara
    • Re: [PATCH v2 08/92] fs: new helper: simple_rename_timestamp, Al Viro
      • Re: [PATCH v2 08/92] fs: new helper: simple_rename_timestamp, Jeff Layton