Security Enhanced Linux (SELINUX)

• Date Index

• Re: [PATCH v2 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), (continued)
  • Re: [PATCH v2 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Kefeng Wang
    • Re: [PATCH v2 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Paul Moore
• [PATCH] selinux: add missing newlines in print statements, Christian Göttsche
  • Re: [PATCH] selinux: add missing newlines in print statements, Paul Moore
• [PATCH 1/3] selinux: introduce SECURITY_SELINUX_DEBUG configuration, Christian Göttsche
  • [PATCH 2/3] selinux: move debug functions into debug configuration, Christian Göttsche
    • Re: [PATCH 2/3] selinux: move debug functions into debug configuration, Paul Moore
    • [PATCH v2] selinux: move debug functions into debug configuration, Christian Göttsche
      • Re: [PATCH v2] selinux: move debug functions into debug configuration, Paul Moore
  • [PATCH 3/3] selinux: log missing anonclass in debug configuration, Christian Göttsche
    • Re: [PATCH 3/3] selinux: log missing anonclass in debug configuration, Paul Moore
      • Re: [PATCH 3/3] selinux: log missing anonclass in debug configuration, Christian Göttsche
  • Re: [PATCH 1/3] selinux: introduce SECURITY_SELINUX_DEBUG configuration, Paul Moore
• [PATCH] selinux: drop avtab_search(), Christian Göttsche
  • Re: [PATCH] selinux: drop avtab_search(), Paul Moore
• [PATCH] selinux: de-brand SELinux, Stephen Smalley
  • Re: [PATCH] selinux: de-brand SELinux, Paul Moore
• [RFC bpf-next v5] bpf: Force to MPTCP, Geliang Tang
  • Re: [RFC bpf-next v5] bpf: Force to MPTCP, Paul Moore
    • Re: [RFC bpf-next v5] bpf: Force to MPTCP, Matthieu Baerts
      • Re: [RFC bpf-next v5] bpf: Force to MPTCP, Stanislav Fomichev
        • Re: [RFC bpf-next v5] bpf: Force to MPTCP, Matthieu Baerts
          • Re: [RFC bpf-next v5] bpf: Force to MPTCP, Stanislav Fomichev
            • Re: [RFC bpf-next v5] bpf: Force to MPTCP, Matthieu Baerts
• [PATCH] io_uring: don't audit the capability check in io_uring_create(), Ondrej Mosnacek
  • Re: [PATCH] io_uring: don't audit the capability check in io_uring_create(), Jeff Moyer
    • Re: [PATCH] io_uring: don't audit the capability check in io_uring_create(), Ondrej Mosnacek
  • Re: [PATCH] io_uring: don't audit the capability check in io_uring_create(), Jens Axboe
• [RFC PATCH] selinux: introduce and use ad_init_net*() helpers, Paolo Abeni
  • Re: [RFC PATCH] selinux: introduce and use ad_init_net*() helpers, Paul Moore
  • Re: [RFC PATCH] selinux: introduce and use ad_init_net*() helpers, Ondrej Mosnacek
    • Re: [RFC PATCH] selinux: introduce and use ad_init_net*() helpers, Paolo Abeni
      • Re: [RFC PATCH] selinux: introduce and use ad_init_net*() helpers, Paul Moore
  • Re: [RFC PATCH] selinux: introduce and use ad_init_net*() helpers, Paolo Abeni
    • Re: [RFC PATCH] selinux: introduce and use ad_init_net*() helpers, Paul Moore
      • Re: [RFC PATCH] selinux: introduce and use ad_init_net*() helpers, Paolo Abeni
    • Re: [RFC PATCH] selinux: introduce and use ad_init_net*() helpers, Casey Schaufler
• [PATCH testsuite] policy: allow all test domains to search user/admin home directories, Ondrej Mosnacek
  • Re: [PATCH testsuite] policy: allow all test domains to search user/admin home directories, Stephen Smalley
    • Re: [PATCH testsuite] policy: allow all test domains to search user/admin home directories, Ondrej Mosnacek
• [PATCH] libsepol: free potential transition tables on insertion failure, Christian Göttsche
  • Re: [PATCH] libsepol: free potential transition tables on insertion failure, James Carter
• [PATCH v2] libselinux/utils: introduce getpolicyload, Christian Göttsche
  • Re: [PATCH v2] libselinux/utils: introduce getpolicyload, James Carter
    • Re: [PATCH v2] libselinux/utils: introduce getpolicyload, James Carter
• [PATCH 1/4] libsepol: validate: use fixed sized integers, Christian Göttsche
  • [PATCH 3/4] libsepol: expand: use identical type to avoid implicit conversion, Christian Göttsche
  • [PATCH 2/4] hashtab: update, Christian Göttsche
  • [PATCH 4/4] libsepol: expand: check for memory allocation failure, Christian Göttsche
  • Re: [PATCH 1/4] libsepol: validate: use fixed sized integers, James Carter
    • Re: [PATCH 1/4] libsepol: validate: use fixed sized integers, James Carter
• [PATCH] libsepol: use explicit type for function parameters, Christian Göttsche
  • Re: [PATCH] libsepol: use explicit type for function parameters, James Carter
    • Re: [PATCH] libsepol: use explicit type for function parameters, James Carter
• [PATCH] libsepol: optional data destruction in hashtab_destroy(), Christian Göttsche
  • Re: [PATCH] libsepol: optional data destruction in hashtab_destroy(), James Carter
• [PATCH testsuite] policy: allow inet socket test domains to search user home content, Stephen Smalley
  • Re: [PATCH testsuite] policy: allow inet socket test domains to search user home content, Ondrej Mosnacek
• [PATCH] checkpolicy: Remove support for role dominance rules, James Carter
  • Re: [PATCH] checkpolicy: Remove support for role dominance rules, James Carter
    • Re: [PATCH] checkpolicy: Remove support for role dominance rules, Petr Lautrbach
      • Re: [PATCH] checkpolicy: Remove support for role dominance rules, James Carter
• [PATCH 1/5] libsepol: free memory on str_read() failures, Christian Göttsche
  • [PATCH 2/5] libsepol: reject avtab entries with invalid specifier, Christian Göttsche
    • Re: [PATCH 2/5] libsepol: reject avtab entries with invalid specifier, James Carter
  • [PATCH 3/5] libsepol: free ebitmap in filename_trans_comp_read_one(), Christian Göttsche
  • [PATCH 4/5] libsepol: drop superfluous check, Christian Göttsche
  • [PATCH 5/5] libsepol: avtab: check read counts for saturation, Christian Göttsche
    • Re: [PATCH 5/5] libsepol: avtab: check read counts for saturation, James Carter
• [PATCH] secilc: add check for malloc in secilc, Huaxin Lu
  • Re: [PATCH] secilc: add check for malloc in secilc, James Carter
    • Re: [PATCH] secilc: add check for malloc in secilc, James Carter
• [PATCH 0/5] mm: convert to vma_is_heap/stack(), Kefeng Wang
  • [PATCH 2/5] mm: use vma_is_stack() and vma_is_heap(), Kefeng Wang
    • Re: [PATCH 2/5] mm: use vma_is_stack() and vma_is_heap(), David Hildenbrand
      • Re: [PATCH 2/5] mm: use vma_is_stack() and vma_is_heap(), Kefeng Wang
  • [PATCH 4/5] selinux: use vma_is_stack() and vma_is_heap(), Kefeng Wang
    • Re: [PATCH 4/5] selinux: use vma_is_stack() and vma_is_heap(), Paul Moore
  • [PATCH 3/5] drm/amdkfd: use vma_is_stack() and vma_is_heap(), Kefeng Wang
    • Re: [PATCH 3/5] drm/amdkfd: use vma_is_stack() and vma_is_heap(), Christoph Hellwig
      • Re: [PATCH 3/5] drm/amdkfd: use vma_is_stack() and vma_is_heap(), Felix Kuehling
        • Re: [PATCH 3/5] drm/amdkfd: use vma_is_stack() and vma_is_heap(), Vlastimil Babka
          • Re: [PATCH 3/5] drm/amdkfd: use vma_is_stack() and vma_is_heap(), Felix Kuehling
  • [PATCH 1/5] mm: introduce vma_is_stack() and vma_is_heap(), Kefeng Wang
    • Re: [PATCH 1/5] mm: introduce vma_is_stack() and vma_is_heap(), David Hildenbrand
    • Re: [PATCH 1/5] mm: introduce vma_is_stack() and vma_is_heap(), Christian Göttsche
  • [PATCH 5/5] perf/core: use vma_is_stack() and vma_is_heap(), Kefeng Wang
• [PATCH net-next 0/4] net: Mark the sk parameter of routing functions as 'const'., Guillaume Nault
  • [PATCH net-next 1/4] security: Constify sk in the sk_getsecid hook., Guillaume Nault
    • Re: [PATCH net-next 1/4] security: Constify sk in the sk_getsecid hook., Simon Horman
    • Re: [PATCH net-next 1/4] security: Constify sk in the sk_getsecid hook., Paul Moore
      • Re: [PATCH net-next 1/4] security: Constify sk in the sk_getsecid hook., Guillaume Nault
  • Re: [PATCH net-next 0/4] net: Mark the sk parameter of routing functions as 'const'., patchwork-bot+netdevbpf
• [PATCH] restorecond: add check for strdup in strings_list_add, Huaxin Lu
  • Re: [PATCH] restorecond: add check for strdup in strings_list_add, James Carter
    • Re: [PATCH] restorecond: add check for strdup in strings_list_add, James Carter
• [PATCH] selinux: optimize major part with a kernel config in selinux_mmap_addr(), Leesoo Ahn
  • Re: [PATCH] selinux: optimize major part with a kernel config in selinux_mmap_addr(), Stephen Smalley
    • Re: [PATCH] selinux: optimize major part with a kernel config in selinux_mmap_addr(), Leesoo Ahn
  • Re: [PATCH] selinux: optimize major part with a kernel config in selinux_mmap_addr(), Paul Moore
    • Re: [PATCH] selinux: optimize major part with a kernel config in selinux_mmap_addr(), Casey Schaufler
      • Re: [PATCH] selinux: optimize major part with a kernel config in selinux_mmap_addr(), Paul Moore
  • Re: [PATCH] selinux: optimize major part with a kernel config in selinux_mmap_addr(), Thomas Weißschuh
• [PATCH] checkpolicy: free role identifier in define_role_dom(), Christian Göttsche
  • Re: [PATCH] checkpolicy: free role identifier in define_role_dom(), James Carter
• [PATCH v2] checkpolicy: add round-trip tests, Christian Göttsche
  • Re: [PATCH v2] checkpolicy: add round-trip tests, James Carter
  • <Possible follow-ups>
  • [PATCH v2] checkpolicy: add round-trip tests, Christian Göttsche
    • Re: [PATCH v2] checkpolicy: add round-trip tests, James Carter
      • Re: [PATCH v2] checkpolicy: add round-trip tests, James Carter
• [PATCH v2 1/4] semodule_expand: update, Christian Göttsche
  • [PATCH v2 2/4] semodule_link: update, Christian Göttsche
  • [PATCH v2 3/4] semodule_package: update, Christian Göttsche
  • [PATCH v2 4/4] semodule_unpackage: update, Christian Göttsche
  • Re: [PATCH v2 1/4] semodule_expand: update, James Carter
    • Re: [PATCH v2 1/4] semodule_expand: update, James Carter
• [PATCH] setsebool: improve bash-completion script, Christian Göttsche
  • Re: [PATCH] setsebool: improve bash-completion script, James Carter
    • Re: [PATCH] setsebool: improve bash-completion script, James Carter
• [PATCH] setsebool: drop unnecessary linking against libsepol, Christian Göttsche
  • Re: [PATCH] setsebool: drop unnecessary linking against libsepol, James Carter
    • Re: [PATCH] setsebool: drop unnecessary linking against libsepol, James Carter
• [RFC PATCH] libsepol/cil: support parallel neverallow checks, Christian Göttsche
  • Re: [RFC PATCH] libsepol/cil: support parallel neverallow checks, James Carter
• [PATCH] libsepol/fuzz: more strict fuzzing of binary policies, Christian Göttsche
  • Re: [PATCH] libsepol/fuzz: more strict fuzzing of binary policies, James Carter
    • Re: [PATCH] libsepol/fuzz: more strict fuzzing of binary policies, James Carter
• [PATCH] libsepol: check for overflow in put_entry(), Christian Göttsche
  • Re: [PATCH] libsepol: check for overflow in put_entry(), James Carter
    • Re: [PATCH] libsepol: check for overflow in put_entry(), James Carter
• [PATCH] libsepol: free initial sid names, Christian Göttsche
  • Re: [PATCH] libsepol: free initial sid names, James Carter
    • Re: [PATCH] libsepol: free initial sid names, James Carter
• [PATCH] libselinux/utils: introduce getpolicyload, Christian Göttsche
  • Re: [PATCH] libselinux/utils: introduce getpolicyload, James Carter
• [RFC PATCH] selinux: disable debug functions by default, Christian Göttsche
  • Re: [RFC PATCH] selinux: disable debug functions by default, Paul Moore
• [RFC PATCH] selinux: implement avtab_search() via avtab_search_node(), Christian Göttsche
  • Re: [RFC PATCH] selinux: implement avtab_search() via avtab_search_node(), Paul Moore
• [RFC PATCH 01/20] selinux: check for multiplication overflow in put_entry(), Christian Göttsche
  • [RFC PATCH 03/20] selinux: avoid avtab overflows, Christian Göttsche
    • Re: [PATCH RFC 3/20] selinux: avoid avtab overflows, Paul Moore
  • [RFC PATCH 02/20] selinux: avtab: avoid implicit conversions, Christian Göttsche
    • Re: [PATCH RFC 2/20] selinux: avtab: avoid implicit conversions, Paul Moore
  • [RFC PATCH 07/20] selinux: services: update type for umber of class permissions, Christian Göttsche
    • Re: [RFC PATCH 07/20] selinux: services: update type for umber of class permissions, Gong Ruiqi
    • Re: [PATCH RFC 7/20] selinux: services: update type for umber of class permissions, Paul Moore
      • Re: [PATCH RFC 7/20] selinux: services: update type for umber of class permissions, Gong Ruiqi
  • [RFC PATCH 06/20] selinux: mls: avoid implicit conversions, Christian Göttsche
    • Re: [PATCH RFC 6/20] selinux: mls: avoid implicit conversions, Paul Moore
  • [RFC PATCH 04/20] selinux: ebitmap: use u32 as bit type, Christian Göttsche
    • Re: [PATCH RFC 4/20] selinux: ebitmap: use u32 as bit type, Paul Moore
  • [RFC PATCH 05/20] selinux: hashtab: use identical iterator type, Christian Göttsche
    • Re: [PATCH RFC 5/20] selinux: hashtab: use identical iterator type, Paul Moore
  • [RFC PATCH 10/20] selinux: netif: avoid implicit conversions, Christian Göttsche
    • Re: [PATCH RFC 10/20] selinux: netif: avoid implicit conversions, Paul Moore
  • [RFC PATCH 09/20] selinux: status: consistently use u32 as sequence number type, Christian Göttsche
    • Re: [PATCH RFC 9/20] selinux: status: consistently use u32 as sequence number type, Paul Moore
  • [RFC PATCH 08/20] selinux: services: avoid implicit conversions, Christian Göttsche
    • Re: [PATCH RFC 8/20] selinux: services: avoid implicit conversions, Paul Moore
  • [RFC PATCH 11/20] selinux: avc: avoid implicit conversions, Christian Göttsche
    • Re: [PATCH RFC 11/20] selinux: avc: avoid implicit conversions, Paul Moore
  • [RFC PATCH 12/20] selinux: hooks: avoid implicit conversions, Christian Göttsche
    • Re: [PATCH RFC 12/20] selinux: hooks: avoid implicit conversions, Paul Moore
  • [RFC PATCH 13/20] selinux: selinuxfs: avoid implicit conversions, Christian Göttsche
    • Re: [PATCH RFC 13/20] selinux: selinuxfs: avoid implicit conversions, Paul Moore
  • [RFC PATCH 14/20] selinux: use consistent type for AV rule specifier, Christian Göttsche
    • Re: [PATCH RFC 14/20] selinux: use consistent type for AV rule specifier, Paul Moore
  • [RFC PATCH 15/20] selinux: policydb: implicit conversions, Christian Göttsche
    • Re: [PATCH RFC 15/20] selinux: policydb: implicit conversions, Paul Moore
  • [RFC PATCH 16/20] selinux: symtab: implicit conversion, Christian Göttsche
    • Re: [PATCH RFC 16/20] selinux: symtab: implicit conversion, Paul Moore
  • [RFC PATCH 17/20] selinux: services: implicit conversions, Christian Göttsche
    • Re: [PATCH RFC 17/20] selinux: services: implicit conversions, Paul Moore
  • [RFC PATCH 18/20] selinux: nlmsgtab: implicit conversion, Christian Göttsche
    • Re: [PATCH RFC 18/20] selinux: nlmsgtab: implicit conversion, Paul Moore
  • [RFC PATCH 20/20] selinux: selinuxfs: avoid implicit conversions, Christian Göttsche
    • Re: [PATCH RFC 20/20] selinux: selinuxfs: avoid implicit conversions, Paul Moore
  • [RFC PATCH 00/20] selinux: be more strict about integer conversions, Christian Göttsche
    • Re: [PATCH RFC 0/20] selinux: be more strict about integer conversions, Paul Moore
  • [RFC PATCH 19/20] selinux: status: avoid implicit conversions regarding enforcing status, Christian Göttsche
    • Re: [PATCH RFC 19/20] selinux: status: avoid implicit conversions regarding enforcing status, Paul Moore
  • Re: [PATCH RFC 1/20] selinux: check for multiplication overflow in put_entry(), Paul Moore
• [PATCH v2 91/92] selinux: convert to ctime accessor functions, Jeff Layton
  • Re: [PATCH v2 91/92] selinux: convert to ctime accessor functions, Jan Kara
• [PATCH v2 00/89] fs: new accessors for inode->i_ctime, Jeff Layton
  • [PATCH v2 07/92] fs: add ctime accessors infrastructure, Jeff Layton
    • Re: [PATCH v2 07/92] fs: add ctime accessors infrastructure, Damien Le Moal
  • [PATCH v2 08/92] fs: new helper: simple_rename_timestamp, Jeff Layton
    • Re: [PATCH v2 08/92] fs: new helper: simple_rename_timestamp, Damien Le Moal
      • Re: [PATCH v2 08/92] fs: new helper: simple_rename_timestamp, Jeff Layton
        • Re: [apparmor] [PATCH v2 08/92] fs: new helper: simple_rename_timestamp, Seth Arnold
          • Re: [apparmor] [PATCH v2 08/92] fs: new helper: simple_rename_timestamp, Jeff Layton
    • Re: [PATCH v2 08/92] fs: new helper: simple_rename_timestamp, Jan Kara
    • Re: [PATCH v2 08/92] fs: new helper: simple_rename_timestamp, Al Viro
      • Re: [PATCH v2 08/92] fs: new helper: simple_rename_timestamp, Jeff Layton
  • [PATCH v2 92/92] fs: rename i_ctime field to __i_ctime, Jeff Layton
    • Re: [PATCH v2 92/92] fs: rename i_ctime field to __i_ctime, Damien Le Moal
    • Re: [PATCH v2 92/92] fs: rename i_ctime field to __i_ctime, Jan Kara
  • Re: [PATCH v2 00/89] fs: new accessors for inode->i_ctime, Jeff Layton
    • Re: [PATCH v2 00/89] fs: new accessors for inode->i_ctime, Eric W. Biederman
      • Re: [PATCH v2 00/89] fs: new accessors for inode->i_ctime, Jeff Layton
  • Re: [PATCH v2 00/89] fs: new accessors for inode->i_ctime, Jeff Layton
    • Re: [PATCH v2 00/89] fs: new accessors for inode->i_ctime, Christian Brauner
      • Re: [PATCH v2 00/89] fs: new accessors for inode->i_ctime, Jeff Layton
  • Re: [PATCH v2 00/92] fs: new accessors for inode->i_ctime, Christian Brauner
  • Re: [f2fs-dev] [PATCH v2 00/89] fs: new accessors for inode->i_ctime, patchwork-bot+f2fs
• [PATCH v5] semanage, sepolicy: list also ports not attributed with port_type, Topi Miettinen
  • Re: [PATCH v5] semanage, sepolicy: list also ports not attributed with port_type, Petr Lautrbach
• [syzbot] [selinux?] [reiserfs?] KASAN: wild-memory-access Read in inode_doinit_with_dentry, syzbot
• [PATCH v12 10/11] SELinux: Add selfattr hooks, Casey Schaufler
  • Re: [PATCH v12 10/11] SELinux: Add selfattr hooks, Mickaël Salaün
• [GIT PULL] SELinux patches for v6.5, Paul Moore
  • Re: [GIT PULL] SELinux patches for v6.5, pr-tracker-bot
• Re: [PATCH 00/79] fs: new accessors for inode->i_ctime, Christian Brauner
  • <Possible follow-ups>
  • Re: [PATCH 00/79] fs: new accessors for inode->i_ctime, Luis Chamberlain
• Re: [PATCH 01/79] fs: add ctime accessors infrastructure, Jeff Layton
  • <Possible follow-ups>
  • Re: [PATCH 01/79] fs: add ctime accessors infrastructure, Luis Chamberlain
  • Re: [PATCH 01/79] fs: add ctime accessors infrastructure, Randy Dunlap
• [PATCH 78/79] selinux: switch to new ctime accessors, Jeff Layton
  • Re: [PATCH 78/79] selinux: switch to new ctime accessors, Paul Moore
• [PATCH v2] selinux: introduce an initial SID for early boot processes, Ondrej Mosnacek
  • Re: [PATCH v2] selinux: introduce an initial SID for early boot processes, Paul Moore
  • Login broken with old userspace (was Re: [PATCH v2] selinux: introduce an initial SID for early boot processes), Michael Ellerman
    • Re: Login broken with old userspace (was Re: [PATCH v2] selinux: introduce an initial SID for early boot processes), Ondrej Mosnacek
      • Re: Login broken with old userspace (was Re: [PATCH v2] selinux: introduce an initial SID for early boot processes), Stephen Smalley
        • Re: Login broken with old userspace (was Re: [PATCH v2] selinux: introduce an initial SID for early boot processes), Ondrej Mosnacek
          • Re: Login broken with old userspace (was Re: [PATCH v2] selinux: introduce an initial SID for early boot processes), Christian Göttsche
            • Re: Login broken with old userspace (was Re: [PATCH v2] selinux: introduce an initial SID for early boot processes), Paul Moore
              • Re: Login broken with old userspace (was Re: [PATCH v2] selinux: introduce an initial SID for early boot processes), Ondrej Mosnacek
                • Re: Login broken with old userspace (was Re: [PATCH v2] selinux: introduce an initial SID for early boot processes), Paul Moore
      • Re: Login broken with old userspace (was Re: [PATCH v2] selinux: introduce an initial SID for early boot processes), Michael Ellerman
• [PATCH v2 0/8] checkpolicy,libsepol: add prefix/suffix matching to filename type transitions, Juraj Marcin
  • [PATCH v2 1/8] checkpolicy,libsepol: move transition to separate structure in avtab, Juraj Marcin
    • Re: [PATCH v2 1/8] checkpolicy,libsepol: move transition to separate structure in avtab, James Carter
      • Re: [PATCH v2 1/8] checkpolicy,libsepol: move transition to separate structure in avtab, James Carter
        • Re: [PATCH v2 1/8] checkpolicy,libsepol: move transition to separate structure in avtab, Christian Göttsche
          • Re: [PATCH v2 1/8] checkpolicy,libsepol: move transition to separate structure in avtab, James Carter
  • [PATCH v2 2/8] checkpolicy,libsepol: move filename transitions to avtab, Juraj Marcin
  • [PATCH v2 3/8] checkpolicy,libsepol: move filename transition rules to avrule, Juraj Marcin
  • [PATCH v2 4/8] libsepol: implement new kernel binary format for avtab, Juraj Marcin
  • [PATCH v2 7/8] checkpolicy,libsepol: add prefix/suffix support to module policy, Juraj Marcin
  • [PATCH v2 6/8] checkpolicy,libsepol: add prefix/suffix support to kernel policy, Juraj Marcin
  • [PATCH v2 5/8] libsepol: implement new module binary format of avrule, Juraj Marcin
  • [PATCH v2 8/8] libsepol/cil: add support for prefix/suffix filename transtions to CIL, Juraj Marcin
• [PATCH testsuite] tests/inet_socket: cover the MPTCP protocol, Ondrej Mosnacek
  • Re: [PATCH testsuite] tests/inet_socket: cover the MPTCP protocol, Ondrej Mosnacek
• [PATCH] python/sepolicy: Fix get_os_version except clause, Jeffery To
  • Re: [PATCH] python/sepolicy: Fix get_os_version except clause, Petr Lautrbach
    • Re: [PATCH] python/sepolicy: Fix get_os_version except clause, Petr Lautrbach
• [PATCH] libselinux: fix inconsistent indentation in selinux_check_access, Huaxin Lu
  • Re: [PATCH] libselinux: fix inconsistent indentation in selinux_check_access, Petr Lautrbach
• [PATCH] libselinux: add check for calloc in check_booleans, Huaxin Lu
  • Re: [PATCH] libselinux: add check for calloc in check_booleans, Petr Lautrbach
    • Re: [PATCH] libselinux: add check for calloc in check_booleans, Petr Lautrbach
• [PATCH v4] semanage, sepolicy: list also ports not attributed with port_type, Topi Miettinen
  • Re: [PATCH v4] semanage, sepolicy: list also ports not attributed with port_type, Petr Lautrbach
• [PATCH] selinux: cleanup the policycap accessor functions, Paul Moore
  • Re: [PATCH] selinux: cleanup the policycap accessor functions, Paul Moore
• [PATCH v11 10/11] SELinux: Add selfattr hooks, Casey Schaufler
• SELinux and systemd integration, Paul Moore
  • Re: SELinux and systemd integration, Petr Lautrbach
    • Re: SELinux and systemd integration, Christian Göttsche
      • Re: SELinux and systemd integration, Paul Moore
    • Re: SELinux and systemd integration, Paul Moore
• [PATCH v2 1/2] dismod: print the policy version only in interactive mode, Masatake YAMATO
  • [PATCH v2 2/2] dismod, dispol: reduce the messages in batch mode, Masatake YAMATO
  • Re: [PATCH v2 1/2] dismod: print the policy version only in interactive mode, James Carter
    • Re: [PATCH v2 1/2] dismod: print the policy version only in interactive mode, Petr Lautrbach
• [PATCH v3] semanage, sepolicy: list also ports not attributed with port_type, Topi Miettinen
  • Re: [PATCH v3] semanage, sepolicy: list also ports not attributed with port_type, Petr Lautrbach
    • Re: [PATCH v3] semanage, sepolicy: list also ports not attributed with port_type, Topi Miettinen
      • Re: [PATCH v3] semanage, sepolicy: list also ports not attributed with port_type, Petr Lautrbach
• [PATCH 1/2] dismod: print the policy version only in interactive mode, Masatake YAMATO
  • [PATCH 2/2] dismod, dispol: reduce the messages in batch mode, Masatake YAMATO
    • Re: [PATCH 2/2] dismod, dispol: reduce the messages in batch mode, James Carter
• [PATCH userspace 0/2] Introduce an initial SID for early boot processes, Ondrej Mosnacek
  • [PATCH userspace 1/2] libsepol: stop translating deprecated intial SIDs to strings, Ondrej Mosnacek
    • Re: [PATCH userspace 1/2] libsepol: stop translating deprecated intial SIDs to strings, James Carter
      • Re: [PATCH userspace 1/2] libsepol: stop translating deprecated intial SIDs to strings, Petr Lautrbach
  • [PATCH userspace 2/2] libsepol: add support for the new "init" initial SID, Ondrej Mosnacek
• [PATCH] selinux: introduce an initial SID for early boot processes, Ondrej Mosnacek
  • Re: [PATCH] selinux: introduce an initial SID for early boot processes, Paul Moore
    • Re: [PATCH] selinux: introduce an initial SID for early boot processes, Ondrej Mosnacek
      • Re: [PATCH] selinux: introduce an initial SID for early boot processes, Paul Moore
        • Re: [PATCH] selinux: introduce an initial SID for early boot processes, Ondrej Mosnacek
  • Re: [PATCH] selinux: introduce an initial SID for early boot processes, Paul Moore
    • Re: [PATCH] selinux: introduce an initial SID for early boot processes, Ondrej Mosnacek
      • Re: [PATCH] selinux: introduce an initial SID for early boot processes, Paul Moore
• [PATCH v12 0/4] evm: Do HMAC of multiple per LSM xattrs for new inodes, Roberto Sassu
  • [PATCH v12 1/4] security: Allow all LSMs to provide xattrs for inode_init_security hook, Roberto Sassu
    • Re: [PATCH v12 1/4] security: Allow all LSMs to provide xattrs for inode_init_security hook, Paul Moore
      • RE: [PATCH v12 1/4] security: Allow all LSMs to provide xattrs for inode_init_security hook, Roberto Sassu
        • Re: [PATCH v12 1/4] security: Allow all LSMs to provide xattrs for inode_init_security hook, Paul Moore
          • Re: [PATCH v12 1/4] security: Allow all LSMs to provide xattrs for inode_init_security hook, Roberto Sassu
      • Re: [PATCH v12 1/4] security: Allow all LSMs to provide xattrs for inode_init_security hook, Casey Schaufler
        • Re: [PATCH v12 1/4] security: Allow all LSMs to provide xattrs for inode_init_security hook, Paul Moore
          • Re: [PATCH v12 1/4] security: Allow all LSMs to provide xattrs for inode_init_security hook, Paul Moore
            • Re: [PATCH v12 1/4] security: Allow all LSMs to provide xattrs for inode_init_security hook, Roberto Sassu
  • [PATCH v12 2/4] smack: Set the SMACK64TRANSMUTE xattr in smack_inode_init_security(), Roberto Sassu
    • Re: [PATCH v12 2/4] smack: Set the SMACK64TRANSMUTE xattr in smack_inode_init_security(), Casey Schaufler
  • [PATCH v12 3/4] evm: Align evm_inode_init_security() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v12 3/4] evm: Align evm_inode_init_security() definition with LSM infrastructure, Mimi Zohar
  • [PATCH v12 4/4] evm: Support multiple LSMs providing an xattr, Roberto Sassu
    • Re: [PATCH v12 4/4] evm: Support multiple LSMs providing an xattr, Mimi Zohar
• RFC: style/formatting changes for SELinux kernel code, Paul Moore
  • Re: RFC: style/formatting changes for SELinux kernel code, Paul Moore
  • Re: RFC: style/formatting changes for SELinux kernel code, Ondrej Mosnacek
    • Re: RFC: style/formatting changes for SELinux kernel code, Paul Moore
• [PATCH 1/4] dispol: add --help option, Masatake YAMATO
  • [PATCH 2/4] dispol: delete an unnecessary empty line, Masatake YAMATO
  • [PATCH 3/4] dispol: handle EOF in user interaction, Masatake YAMATO
  • [PATCH 4/4] dispol: add --actions option for non-interactive use, Masatake YAMATO
  • Re: [PATCH 1/4] dispol: add --help option, James Carter
    • Re: [PATCH 1/4] dispol: add --help option, James Carter
• ANN: SELinux and stable kernel changes, Paul Moore
• multiple inconsistent perm_map files, Stephen Smalley
  • Re: multiple inconsistent perm_map files, Christopher J. PeBenito
• [PATCH] libselinux: Add CPPFLAGS to Makefile, ChungSheng Wu
  • Re: [PATCH] libselinux: Add CPPFLAGS to Makefile, James Carter
    • [PATCH] [userspace] Add CPPFLAGS to Makefiles, Cameron Williams
      • Re: [PATCH] [userspace] Add CPPFLAGS to Makefiles, James Carter
        • Re: [PATCH] [userspace] Add CPPFLAGS to Makefiles, James Carter
• [PATCH] semanage: list all nodes even if not attributed with node_type, Topi Miettinen
• [PATCH] sepolicy: clarify manual page of sepolicy interface, Topi Miettinen
  • Re: [PATCH] sepolicy: clarify manual page of sepolicy interface, Petr Lautrbach
    • Re: [PATCH] sepolicy: clarify manual page of sepolicy interface, James Carter
• [PATCH v11 0/4] evm: Do HMAC of multiple per LSM xattrs for new inodes, Roberto Sassu
  • [PATCH v11 1/4] security: Allow all LSMs to provide xattrs for inode_init_security hook, Roberto Sassu
    • Re: [PATCH v11 1/4] security: Allow all LSMs to provide xattrs for inode_init_security hook, Paul Moore
  • [PATCH v11 2/4] smack: Set the SMACK64TRANSMUTE xattr in smack_inode_init_security(), Roberto Sassu
    • Re: [PATCH v11 2/4] smack: Set the SMACK64TRANSMUTE xattr in smack_inode_init_security(), Roberto Sassu
      • Re: [PATCH v11 2/4] smack: Set the SMACK64TRANSMUTE xattr in smack_inode_init_security(), Jarkko Sakkinen
        • Re: [PATCH v11 2/4] smack: Set the SMACK64TRANSMUTE xattr in smack_inode_init_security(), Roberto Sassu
      • Re: [PATCH v11 2/4] smack: Set the SMACK64TRANSMUTE xattr in smack_inode_init_security(), Mengchi Cheng
    • Re: [PATCH v11 2/4] smack: Set the SMACK64TRANSMUTE xattr in smack_inode_init_security(), Mimi Zohar
      • Re: [PATCH v11 2/4] smack: Set the SMACK64TRANSMUTE xattr in smack_inode_init_security(), Roberto Sassu
  • [PATCH v11 3/4] evm: Align evm_inode_init_security() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v11 3/4] evm: Align evm_inode_init_security() definition with LSM infrastructure, Mimi Zohar
  • [PATCH v11 4/4] evm: Support multiple LSMs providing an xattr, Roberto Sassu
  • Re: [PATCH v11 0/4] evm: Do HMAC of multiple per LSM xattrs for new inodes, Mimi Zohar
    • Re: [PATCH v11 0/4] evm: Do HMAC of multiple per LSM xattrs for new inodes, Roberto Sassu
  • Re: [PATCH v11 0/4] evm: Do HMAC of multiple per LSM xattrs for new inodes, Paul Moore
    • Re: [PATCH v11 0/4] evm: Do HMAC of multiple per LSM xattrs for new inodes, Roberto Sassu
• [PATCH v2] semanage, sepolicy: list also ports not attributed with port_type, Topi Miettinen
  • Re: [PATCH v2] semanage, sepolicy: list also ports not attributed with port_type, Petr Lautrbach
    • Re: [PATCH v2] semanage, sepolicy: list also ports not attributed with port_type, Topi Miettinen
      • Re: [PATCH v2] semanage, sepolicy: list also ports not attributed with port_type, Petr Lautrbach
• [RFC PATCH] selinux: support name based type transitions in conditional policies, Christian Göttsche
• [PATCH] selinux: avoid bool as identifier name, Christian Göttsche
  • Re: [PATCH] selinux: avoid bool as identifier name, Paul Moore
• [RFC PATCH] checkpolicy, libsepol: support name based type transitions in conditional policies, Christian Göttsche
• [PATCH 1/2] secilc: consider DESTDIR in tests, Christian Göttsche
  • [PATCH 2/2] libsemanage/tests: consider DESTDIR, Christian Göttsche
  • Re: [PATCH 1/2] secilc: consider DESTDIR in tests, Petr Lautrbach
• [PATCH v2 1/4] libsepol: drop message for uncommon error cases, Christian Göttsche
  • [PATCH v2 4/4] libsepol: replace log_err() by ERR(), Christian Göttsche
  • [PATCH v2 2/4] libsepol: drop duplicate newline in sepol_log_err() calls, Christian Göttsche
  • [PATCH v2 3/4] libsepol: replace sepol_log_err() by ERR(), Christian Göttsche
  • Re: [PATCH v2 1/4] libsepol: drop message for uncommon error cases, James Carter
    • Re: [PATCH v2 1/4] libsepol: drop message for uncommon error cases, James Carter
• [GIT PULL] SELinux fixes for v6.4 (#1), Paul Moore
  • Re: [GIT PULL] SELinux fixes for v6.4 (#1), pr-tracker-bot
• [PATCH] selinux: fix Makefile for versions of make < v4.3, Paul Moore
  • Re: [PATCH] selinux: fix Makefile for versions of make < v4.3, Paul Moore
    • Re: [PATCH] selinux: fix Makefile for versions of make < v4.3, Paul Moore
• [PATCH] selinux: don't use make's grouped targets feature yet, Paul Moore
  • Re: [PATCH] selinux: don't use make's grouped targets feature yet, Paul Moore
  • Re: [PATCH] selinux: don't use make's grouped targets feature yet, Luiz Capitulino
    • Re: [PATCH] selinux: don't use make's grouped targets feature yet, Paul Moore
  • Re: [PATCH] selinux: don't use make's grouped targets feature yet, Erwan Velu
    • Re: [PATCH] selinux: don't use make's grouped targets feature yet, Paul Moore
• [PATCH] python/sepolicy: Fix template for confined user policy modules, Vit Mojzis
  • Re: [PATCH] python/sepolicy: Fix template for confined user policy modules, Petr Lautrbach
    • Re: [PATCH] python/sepolicy: Fix template for confined user policy modules, Petr Lautrbach
• [PATCH 0/8] checkpolicy, libsepol: add prefix/suffix matching to filename type transitions, Juraj Marcin
  • [PATCH 1/8] checkpolicy, libsepol: move transition to separate structure in avtab, Juraj Marcin
  • [PATCH 3/8] checkpolicy, libsepol: move filename transition rules to avrule, Juraj Marcin
  • [PATCH 4/8] libsepol: implement new kernel binary format for avtab, Juraj Marcin
  • [PATCH 2/8] checkpolicy, libsepol: move filename transitions to avtab, Juraj Marcin
  • [PATCH 5/8] libsepol: implement new module binary format of avrule, Juraj Marcin
  • [PATCH 6/8] checkpolicy, libsepol: add prefix/suffix support to kernel policy, Juraj Marcin
  • [PATCH 7/8] checkpolicy, libsepol: add prefix/suffix support to module policy, Juraj Marcin
    • Re: [PATCH 7/8] checkpolicy, libsepol: add prefix/suffix support to module policy, James Carter
      • Re: [PATCH 7/8] checkpolicy, libsepol: add prefix/suffix support to module policy, Ondrej Mosnacek
        • Re: [PATCH 7/8] checkpolicy, libsepol: add prefix/suffix support to module policy, James Carter
  • [PATCH 8/8] libsepol/cil: add support for prefix/suffix filename transtions to CIL, Juraj Marcin
    • Re: [PATCH 8/8] libsepol/cil: add support for prefix/suffix filename transtions to CIL, James Carter
  • Re: [PATCH 0/8] checkpolicy, libsepol: add prefix/suffix matching to filename type transitions, James Carter
    • Re: [PATCH 0/8] checkpolicy, libsepol: add prefix/suffix matching to filename type transitions, Juraj Marcin
• [PATCH 0/5] selinux: add prefix/suffix matching to filename type transitions, Juraj Marcin
  • [PATCH 1/5] selinux: move transition to separate structure in avtab_datum, Juraj Marcin
  • [PATCH 2/5] selinux: move filename transitions to avtab, Juraj Marcin
    • Re: [PATCH 2/5] selinux: move filename transitions to avtab, Christian Göttsche
    • Re: [PATCH 2/5] selinux: move filename transitions to avtab, Christian Göttsche
      • Re: [PATCH 2/5] selinux: move filename transitions to avtab, Ondrej Mosnacek
      • Re: [PATCH 2/5] selinux: move filename transitions to avtab, Juraj Marcin
  • [PATCH 3/5] selinux: implement new binary format for filename transitions in avtab, Juraj Marcin
  • [PATCH 4/5] selinux: filename transitions move tests, Juraj Marcin
  • [PATCH 5/5] selinux: add prefix/suffix matching support to filename type transitions, Juraj Marcin
    • Re: [PATCH 5/5] selinux: add prefix/suffix matching support to filename type transitions, Stephen Smalley
      • Re: [PATCH 5/5] selinux: add prefix/suffix matching support to filename type transitions, Stephen Smalley
  • Re: [PATCH 0/5] selinux: add prefix/suffix matching to filename type transitions, Paul Moore
    • Re: [PATCH 0/5] selinux: add prefix/suffix matching to filename type transitions, Juraj Marcin
      • Re: [PATCH 0/5] selinux: add prefix/suffix matching to filename type transitions, Paul Moore
        • Re: [PATCH 0/5] selinux: add prefix/suffix matching to filename type transitions, Juraj Marcin
          • Re: [PATCH 0/5] selinux: add prefix/suffix matching to filename type transitions, Paul Moore
            • Re: [PATCH 0/5] selinux: add prefix/suffix matching to filename type transitions, Juraj Marcin
              • Re: [PATCH 0/5] selinux: add prefix/suffix matching to filename type transitions, Stephen Smalley
                • Re: [PATCH 0/5] selinux: add prefix/suffix matching to filename type transitions, Juraj Marcin
                  • Re: [PATCH 0/5] selinux: add prefix/suffix matching to filename type transitions, Stephen Smalley
                    • Re: [PATCH 0/5] selinux: add prefix/suffix matching to filename type transitions, James Carter
                      • Re: [PATCH 0/5] selinux: add prefix/suffix matching to filename type transitions, Juraj Marcin
• [PATCH] LSM: Infrastructure management of the sock, GONG, Ruiqi
  • Re: [PATCH] LSM: Infrastructure management of the sock, Casey Schaufler
    • Re: [PATCH] LSM: Infrastructure management of the sock, Paul Moore
      • Re: [PATCH] LSM: Infrastructure management of the sock, Casey Schaufler
    • Re: [PATCH] LSM: Infrastructure management of the sock, GONG, Ruiqi
• [PATCH 1/4] dismod: add --help option, Masatake YAMATO
  • [PATCH 2/4] dismod: delete an unnecessary empty line, Masatake YAMATO
  • [PATCH 3/4] dismod: handle EOF in user interaction, Masatake YAMATO
  • [PATCH 4/4] dismod: add --actions option for non-interactive use, Masatake YAMATO
  • Re: [PATCH 1/4] dismod: add --help option, James Carter
    • Re: [PATCH 1/4] dismod: add --help option, Masatake YAMATO
    • Re: [PATCH 1/4] dismod: add --help option, James Carter
• [PATCH] Makefile: expand ~ in DESTDIR, Masatake YAMATO
  • Re: [PATCH] Makefile: expand ~ in DESTDIR, Petr Lautrbach
    • Re: [PATCH] Makefile: expand ~ in DESTDIR, Christian Göttsche
      • Re: [PATCH] Makefile: expand ~ in DESTDIR, Petr Lautrbach
  • Re: [PATCH] Makefile: expand ~ in DESTDIR, Masatake YAMATO
• [PATCH PR#394] semanage: list all ports even if not attributed with port_type, Topi Miettinen
  • Re: [PATCH PR#394] semanage: list all ports even if not attributed with port_type, Petr Lautrbach
• [PATCH] python/sepolicy: Add/remove user even when SELinux is disabled, Vit Mojzis
  • Re: [PATCH] python/sepolicy: Add/remove user even when SELinux is disabled, Petr Lautrbach
    • Re: [PATCH] python/sepolicy: Add/remove user even when SELinux is disabled, Petr Lautrbach
• [PATCH] selinux: make labeled NFS work when mounted before policy load, Ondrej Mosnacek
• [PATCH] selinux: cleanup exit_sel_fs() declaration, Xiu Jianfeng
  • Re: [PATCH] selinux: cleanup exit_sel_fs() declaration, Paul Moore
• ANN: SELinux repository changes, Paul Moore
• [PATCH 1/5] policycoreutils: Add examples to man pages, Vit Mojzis
  • [PATCH 2/5] python/sepolicy: Improve man pages, Vit Mojzis
    • Re: [PATCH 2/5] python/sepolicy: Improve man pages, Petr Lautrbach
  • [PATCH 3/5] sandbox: Add examples to man pages, Vit Mojzis
  • [PATCH 5/5] libselinux: Add examples to man pages, Vit Mojzis
    • Re: [PATCH 5/5] libselinux: Add examples to man pages, Petr Lautrbach
      • [PATCH v2 1/5] policycoreutils: Add examples to man pages, Vit Mojzis
        • [PATCH v2 5/5] libselinux: Add examples to man pages, Vit Mojzis
        • [PATCH v2 2/5] python/sepolicy: Improve man pages, Vit Mojzis
        • [PATCH v2 3/5] sandbox: Add examples to man pages, Vit Mojzis
        • [PATCH v2 4/5] checkpolicy: Add examples to man pages, Vit Mojzis
        • Re: [PATCH v2 1/5] policycoreutils: Add examples to man pages, Petr Lautrbach
          • Re: [PATCH v2 1/5] policycoreutils: Add examples to man pages, James Carter
  • [PATCH 4/5] checkpolicy: Add examples to man pages, Vit Mojzis
    • Re: [PATCH 4/5] checkpolicy: Add examples to man pages, Petr Lautrbach
  • Re: [PATCH 1/5] policycoreutils: Add examples to man pages, Petr Lautrbach
• [PATCH 1/4] python: improve format strings for proper localization, Petr Lautrbach
  • [PATCH 3/4] semanage: Drop unnecessary import from seobject, Petr Lautrbach
  • [PATCH 2/4] python/semanage: Drop hard formating from localized strings, Petr Lautrbach
    • Re: [PATCH 2/4] python/semanage: Drop hard formating from localized strings, Vit Mojzis
  • [PATCH 4/4] python: update python.pot, Petr Lautrbach
  • Re: [PATCH 1/4] python: improve format strings for proper localization, Vit Mojzis
    • [no subject], Petr Lautrbach
      • [PATCH v2 2/4] python: Drop hard formating from localized strings, Petr Lautrbach
      • [PATCH v2 3/4] semanage: Drop unnecessary import from seobject, Petr Lautrbach
      • [PATCH v2 1/4] python: improve format strings for proper localization, Petr Lautrbach
        • Re: [PATCH v2 1/4] python: improve format strings for proper localization, Vit Mojzis
      • [PATCH v2 4/4] python: update python.pot, Petr Lautrbach
        • [no subject], Petr Lautrbach
          • [PATCH v3 1/4] python: improve format strings for proper localization, Petr Lautrbach
          • [PATCH v3 2/4] python: Drop hard formating from localized strings, Petr Lautrbach
          • [PATCH v3 3/4] semanage: Drop unnecessary import from seobject, Petr Lautrbach
          • [PATCH v3 4/4] python: update python.pot, Petr Lautrbach
            • [no subject], Petr Lautrbach
              • [PATCH v4 2/4] python: Drop hard formating from localized strings, Petr Lautrbach
              • [PATCH v4 3/4] semanage: Drop unnecessary import from seobject, Petr Lautrbach
              • [PATCH v4 1/4] python: improve format strings for proper localization, Petr Lautrbach
              • [PATCH v4 4/4] python: update python.pot, Petr Lautrbach
                • Re: [PATCH v4 4/4] python: update python.pot, Vit Mojzis
                  • Re: [PATCH v4 4/4] python: update python.pot, Petr Lautrbach
                    • Re: [PATCH v4 4/4] python: update python.pot, James Carter
                      • Re: [PATCH v4 4/4] python: update python.pot, James Carter
• [RFC PATCH] selinux: TESTING ONLY, PLEASE IGNORE, Paul Moore
  • Re: [PATCH RFC] selinux: TESTING ONLY, PLEASE IGNORE, Paul Moore
• [RFC PATCH 1/4] semodule_expand: update, Christian Göttsche
  • [RFC PATCH 2/4] semodule_link: update, Christian Göttsche
    • Re: [RFC PATCH 2/4] semodule_link: update, James Carter
  • [RFC PATCH 3/4] semodule_package: update, Christian Göttsche
    • Re: [RFC PATCH 3/4] semodule_package: update, James Carter
      • Re: [RFC PATCH 3/4] semodule_package: update, James Carter
  • [RFC PATCH 4/4] semodule_unpackage: update, Christian Göttsche
    • Re: [RFC PATCH 4/4] semodule_unpackage: update, James Carter
  • Re: [RFC PATCH 1/4] semodule_expand: update, James Carter
• [RFC PATCH 1/9] libselinux: annotate interfaces with compiler attributes, Christian Göttsche
  • [RFC PATCH 2/9] libselinux: deprecate matchpathcon and compute_user interfaces, Christian Göttsche
    • Re: [RFC PATCH 2/9] libselinux: deprecate matchpathcon and compute_user interfaces, James Carter
  • [RFC PATCH 3/9] libselinux: declare avc_open(3) options parameter const, Christian Göttsche
  • [RFC PATCH 4/9] mcstrans: check getcon(3) and context_range_set(3) for failure, Christian Göttsche
  • [RFC PATCH 5/9] libselinux: explicitly ignore return values, Christian Göttsche
  • [RFC PATCH 7/9] secon: check selinux_raw_to_trans_context(3) for failure, Christian Göttsche
  • [RFC PATCH 6/9] libselinux: ignore internal use of deprecated interfaces, Christian Göttsche
  • [RFC PATCH 8/9] restorecond: check selinux_restorecon(3) for failure, Christian Göttsche
  • [RFC PATCH 9/9] restorecond: drop last matchpathcon call, Christian Göttsche
  • Re: [RFC PATCH 1/9] libselinux: annotate interfaces with compiler attributes, James Carter
• [PATCH 1/4] libsepol: drop message for uncommon error cases, Christian Göttsche
  • [PATCH 4/4] libsepol: replace log_err() by ERR(), Christian Göttsche
  • [PATCH 3/4] libsepol: replace sepol_log_err() by ERR(), Christian Göttsche
  • [PATCH 2/4] libsepol: drop duplicate newline in sepol_log_err() calls, Christian Göttsche
  • Re: [PATCH 1/4] libsepol: drop message for uncommon error cases, James Carter
• [PATCH 1/5] libsepol: validate some object contexts, Christian Göttsche
  • [PATCH 2/5] libsepol: validate old style range trans classes, Christian Göttsche
  • [PATCH 3/5] libsepol: validate: check low category is not bigger than high, Christian Göttsche
  • [PATCH 4/5] libsepol: validate: reject XEN policy with xperm rules, Christian Göttsche
  • [PATCH 5/5] libsepol: expand: skip invalid cat, Christian Göttsche
  • Re: [PATCH 1/5] libsepol: validate some object contexts, James Carter
    • Re: [PATCH 1/5] libsepol: validate some object contexts, James Carter
• [PATCH 1/4] checkpolicy: drop unused token CLONE, Christian Göttsche
  • [PATCH 2/4] checkpolicy: reject condition with bool and tunable in expression, Christian Göttsche
  • [PATCH 3/4] checkpolicy: only set declared permission bits for wildcards, Christian Göttsche
  • [PATCH 4/4] libsepol: dump non-mls validatetrans rules as such, Christian Göttsche
  • Re: [PATCH 1/4] checkpolicy: drop unused token CLONE, James Carter
    • Re: [PATCH 1/4] checkpolicy: drop unused token CLONE, James Carter
• [RFC PATCH v2] fs/xattr: add *at family syscalls, Christian Göttsche
  • Re: [RFC PATCH v2] fs/xattr: add *at family syscalls, Geert Uytterhoeven
  • Re: [RFC PATCH v2] fs/xattr: add *at family syscalls, Christian Brauner
    • Re: [RFC PATCH v2] fs/xattr: add *at family syscalls, Amir Goldstein
      • Re: [RFC PATCH v2] fs/xattr: add *at family syscalls, Christian Brauner
        • Re: [RFC PATCH v2] fs/xattr: add *at family syscalls, Amir Goldstein
• [PATCH v4 1/9] capability: introduce new capable flag NODENYAUDIT, Christian Göttsche
  • [PATCH v4 3/9] capability: use new capable_any functionality, Christian Göttsche
    • Re: [PATCH v4 3/9] capability: use new capable_any functionality, Andrii Nakryiko
  • [PATCH v4 2/9] capability: add any wrapper to test for multiple caps with exactly one audit message, Christian Göttsche
  • [PATCH v4 4/9] block: use new capable_any functionality, Christian Göttsche
    • Re: [PATCH v4 4/9] block: use new capable_any functionality, Christoph Hellwig
      • Re: [PATCH v4 4/9] block: use new capable_any functionality, Christian Göttsche
  • [PATCH v4 8/9] bpf: use new capable_any functionality, Christian Göttsche
    • Re: [PATCH v4 8/9] bpf: use new capable_any functionality, Andrii Nakryiko
  • [PATCH v4 9/9] net: use new capable_any functionality, Christian Göttsche
    • Re: [PATCH v4 9/9] net: use new capable_any functionality, Miquel Raynal
  • [PATCH v4 7/9] kernel: use new capable_any functionality, Christian Göttsche
    • Re: [PATCH v4 7/9] kernel: use new capable_any functionality, Christian Brauner
  • [PATCH v4 5/9] drivers: use new capable_any functionality, Christian Göttsche
    • Re: [PATCH v4 5/9] drivers: use new capable_any functionality, Alexander Gordeev
  • [PATCH v4 0/9] Introduce capable_any(), Christian Göttsche
  • [PATCH v4 6/9] fs: use new capable_any functionality, Christian Göttsche
    • Re: [PATCH v4 6/9] fs: use new capable_any functionality, Christian Brauner
  • Re: [PATCH v4 1/9] capability: introduce new capable flag NODENYAUDIT, Serge E. Hallyn
    • Re: [PATCH v4 1/9] capability: introduce new capable flag NODENYAUDIT, Serge E. Hallyn
      • Re: [PATCH v4 1/9] capability: introduce new capable flag NODENYAUDIT, Christian Göttsche
        • Re: [PATCH v4 1/9] capability: introduce new capable flag NODENYAUDIT, Paul Moore
          • Re: [PATCH v4 1/9] capability: introduce new capable flag NODENYAUDIT, Serge E. Hallyn
• [PATCH] security: keys: perform capable check only on privileged operations, Christian Göttsche
  • Re: [PATCH] security: keys: perform capable check only on privileged operations, Paul Moore
    • Re: [PATCH] security: keys: perform capable check only on privileged operations, Christian Göttsche
      • Re: [PATCH] security: keys: perform capable check only on privileged operations, Paul Moore
        • Re: [PATCH] security: keys: perform capable check only on privileged operations, Jarkko Sakkinen
  • Re: [PATCH] security: keys: perform capable check only on privileged operations, Jarkko Sakkinen
  • <Possible follow-ups>
  • Re: [PATCH] security: keys: perform capable check only on privileged operations, Christian Göttsche
• [PATCH] selinux: make header files self-including, Christian Göttsche
  • Re: [PATCH] selinux: make header files self-including, kernel test robot
  • [PATCH v2] selinux: make header files self-including, Christian Göttsche
    • Re: [PATCH v2] selinux: make header files self-including, Paul Moore
• [PATCH] selinux: deprecated fs ocon, Christian Göttsche
  • Re: [PATCH] selinux: deprecated fs ocon, Paul Moore
    • Re: [PATCH] selinux: deprecated fs ocon, Paul Moore
      • Re: [PATCH] selinux: deprecated fs ocon, Christian Göttsche
        • Re: [PATCH] selinux: deprecated fs ocon, Paul Moore
• [PATCH] selinux: keep context struct members in sync, Christian Göttsche
  • Re: [PATCH] selinux: keep context struct members in sync, Paul Moore
• [PATCH 0/2] capability: Introduce CAP_BLOCK_ADMIN, Tianjia Zhang
  • [PATCH 1/2] capability: Introduce CAP_BLOCK_ADMIN, Tianjia Zhang
  • [PATCH 2/2] block: use block_admin_capable() for Persistent Reservations, Tianjia Zhang
  • Re: [PATCH 0/2] capability: Introduce CAP_BLOCK_ADMIN, Casey Schaufler
    • Re: [PATCH 0/2] capability: Introduce CAP_BLOCK_ADMIN, Tianjia Zhang
      • Re: [PATCH 0/2] capability: Introduce CAP_BLOCK_ADMIN, Casey Schaufler
        • Re: [PATCH 0/2] capability: Introduce CAP_BLOCK_ADMIN, Tianjia Zhang
          • Re: [PATCH 0/2] capability: Introduce CAP_BLOCK_ADMIN, Casey Schaufler
            • Re: [PATCH 0/2] capability: Introduce CAP_BLOCK_ADMIN, Tianjia Zhang
  • Re: [PATCH 0/2] capability: Introduce CAP_BLOCK_ADMIN, Christoph Hellwig
• [PATCH] selinux: small cleanups in selinux_audit_rule_init(), Paul Moore
  • Re: [PATCH] selinux: small cleanups in selinux_audit_rule_init(), Paul Moore
• [PATCH] selinux: remove avc_disable() as it is no longer used, Paul Moore
  • Re: [PATCH] selinux: remove avc_disable() as it is no longer used, Ondrej Mosnacek
    • Re: [PATCH] selinux: remove avc_disable() as it is no longer used, Paul Moore
• [PATCH] selinux: more Makefile tweaks, Paul Moore
  • Re: [PATCH] selinux: more Makefile tweaks, Ondrej Mosnacek
    • Re: [PATCH] selinux: more Makefile tweaks, Paul Moore
• [PATCH -next 0/2] lsm: Change inode_setattr() to take struct, Xiu Jianfeng
  • [PATCH -next 1/2] fs: Change notify_change() to take struct path argument, Xiu Jianfeng
    • Re: [PATCH -next 1/2] Change notify_change() to take struct path argument, Chuck Lever III
  • [PATCH -next 2/2] lsm: Change inode_setattr hook to take struct path argument, Xiu Jianfeng
  • Re: [PATCH -next 0/2] lsm: Change inode_setattr() to take struct, xiujianfeng
  • Re: [PATCH -next 0/2] lsm: Change inode_setattr() to take struct, Christian Brauner
    • Re: [PATCH -next 0/2] lsm: Change inode_setattr() to take struct, Mickaël Salaün
      • Re: [PATCH -next 0/2] lsm: Change inode_setattr() to take struct, Christian Brauner
        • Re: [PATCH -next 0/2] lsm: Change inode_setattr() to take struct, Christoph Hellwig
          • Re: [PATCH -next 0/2] lsm: Change inode_setattr() to take struct, Casey Schaufler
            • Re: [PATCH -next 0/2] lsm: Change inode_setattr() to take struct, Christian Brauner
              • Re: [PATCH -next 0/2] lsm: Change inode_setattr() to take struct, Casey Schaufler
                • Re: [PATCH -next 0/2] lsm: Change inode_setattr() to take struct, Christian Brauner
                  • Re: [PATCH -next 0/2] lsm: Change inode_setattr() to take struct, Casey Schaufler
              • Re: [PATCH -next 0/2] lsm: Change inode_setattr() to take struct, Jay Freyensee
            • Re: [PATCH -next 0/2] lsm: Change inode_setattr() to take struct, Christoph Hellwig
              • Re: [PATCH -next 0/2] lsm: Change inode_setattr() to take struct, Casey Schaufler
          • Re: [PATCH -next 0/2] lsm: Change inode_setattr() to take struct, Mickaël Salaün
• [PATCH] selinux: make cleanup on error consistent, Juraj Marcin
  • Re: [PATCH] selinux: make cleanup on error consistent, Paul Moore
• [PATCH 0/3] python: Improve man pages, Vit Mojzis
  • [PATCH 2/3] python/audit2allow: Add missing options to man page, Vit Mojzis
    • Re: [PATCH 2/3] python/audit2allow: Add missing options to man page, James Carter
  • [PATCH 1/3] python/chcat: Improve man pages, Vit Mojzis
    • Re: [PATCH 1/3] python/chcat: Improve man pages, James Carter
  • [PATCH 3/3] python/semanage: Improve man pages, Vit Mojzis
    • Re: [PATCH 3/3] python/semanage: Improve man pages, James Carter
      • [PATCH v2 0/4] python: Improve man pages, Vit Mojzis
        • [PATCH v2 2/4] python/audit2allow: Add missing options to man page, Vit Mojzis
        • [PATCH v2 1/4] python/chcat: Improve man pages, Vit Mojzis
          • Re: [PATCH v2 1/4] python/chcat: Improve man pages, James Carter
            • Re: [PATCH v2 1/4] python/chcat: Improve man pages, Petr Lautrbach
        • [PATCH v2 3/4] python/semanage: Improve man pages, Vit Mojzis
        • [PATCH v2 4/4] python/audit2allow: Remove unused "debug" option, Vit Mojzis
• [PATCH v10 10/11] SELinux: Add selfattr hooks, Casey Schaufler
  • <Possible follow-ups>
  • [PATCH v10 10/11] SELinux: Add selfattr hooks, Casey Schaufler
    • Re: [PATCH v10 10/11] SELinux: Add selfattr hooks, Paul Moore
      • Re: [PATCH v10 10/11] SELinux: Add selfattr hooks, Casey Schaufler
• policy for FFI, Ted Toth
• [PATCH v9 10/11] SELinux: Add selfattr hooks, Casey Schaufler
  • Re: [PATCH v9 10/11] SELinux: Add selfattr hooks, Kees Cook
• [GIT PULL] SELinux patches for v6.4, Paul Moore
  • Re: [GIT PULL] SELinux patches for v6.4, pr-tracker-bot
• [PATCH LSM v2 0/2] security: SELinux/LSM label with MPTCP and accept, Matthieu Baerts
  • [PATCH LSM v2 1/2] security, lsm: Introduce security_mptcp_add_subflow(), Matthieu Baerts
    • Re: [PATCH v2 1/2] security, lsm: Introduce security_mptcp_add_subflow(), Paul Moore
  • [PATCH LSM v2 2/2] selinux: Implement mptcp_add_subflow hook, Matthieu Baerts
    • Re: [PATCH v2 2/2] selinux: Implement mptcp_add_subflow hook, Paul Moore
  • Re: [PATCH LSM v2 0/2] security: SELinux/LSM label with MPTCP and accept, Ondrej Mosnacek
    • Re: [PATCH LSM v2 0/2] security: SELinux/LSM label with MPTCP and accept, Paolo Abeni
      • Re: [PATCH LSM v2 0/2] security: SELinux/LSM label with MPTCP and accept, Ondrej Mosnacek
• [PATCH] libselinux: set CFLAGS for pip installation, Christian Göttsche
  • Re: [PATCH] libselinux: set CFLAGS for pip installation, Petr Lautrbach
    • Re: [PATCH] libselinux: set CFLAGS for pip installation, Petr Lautrbach
      • Re: [PATCH] libselinux: set CFLAGS for pip installation, James Carter
• [PATCH v2 1/6] libsepol: rename struct member, Christian Göttsche
  • [PATCH v2 3/6] libsepol/tests: rename bool indentifiers, Christian Göttsche
  • [PATCH v2 2/6] checkpolicy: update cond_expr_t struct member name, Christian Göttsche
  • [PATCH v2 6/6] libsemanage/tests: rename bool identifiers, Christian Göttsche
  • [PATCH v2 4/6] checkpolicy: rename bool identifiers, Christian Göttsche
  • [PATCH v2 5/6] libsepol: rename bool identifiers, Christian Göttsche
  • Re: [PATCH v2 1/6] libsepol: rename struct member, Stephen Smalley
    • Re: [PATCH v2 1/6] libsepol: rename struct member, James Carter
      • Re: [PATCH v2 1/6] libsepol: rename struct member, Stephen Smalley
        • Re: [PATCH v2 1/6] libsepol: rename struct member, James Carter
  • Re: [PATCH v2 1/6] libsepol: rename struct member, James Carter
    • Re: [PATCH v2 1/6] libsepol: rename struct member, James Carter
• [PATCH 1/6] selinux: do not leave dangling pointer behind, Christian Göttsche
  • [PATCH 2/6] selinux: adjust typos in comments, Christian Göttsche
    • Re: [PATCH 2/6] selinux: adjust typos in comments, Paul Moore
  • [PATCH 3/6] selinux: avc: drop unused function avc_disable(), Christian Göttsche
    • Re: [PATCH 3/6] selinux: avc: drop unused function avc_disable(), Paul Moore
  • [PATCH 4/6] selinux: drop return at end of void function avc_insert(), Christian Göttsche
    • Re: [PATCH 4/6] selinux: drop return at end of void function avc_insert(), Paul Moore
  • [PATCH 6/6] selinux: declare read-only data arrays const, Christian Göttsche
    • Re: [PATCH 6/6] selinux: declare read-only data arrays const, Paul Moore
  • [PATCH 5/6] selinux: retain const qualifier on string literal in avtab_hash_eval(), Christian Göttsche
    • Re: [PATCH 5/6] selinux: retain const qualifier on string literal in avtab_hash_eval(), Paul Moore
  • Re: [PATCH 1/6] selinux: do not leave dangling pointer behind, Paul Moore
    • Re: [PATCH 1/6] selinux: do not leave dangling pointer behind, Christian Göttsche