Security Enhanced Linux (SELINUX)

• Date Index

• Re: [PATCH v6] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, (continued)
  • Re: [PATCH v6] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Paul Moore
    • Re: [PATCH v6] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Jeff Layton
  • Re: [PATCH v6] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Christian Brauner
    • Re: [PATCH v6] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Jeff Layton
      • Re: [PATCH v6] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Christian Brauner
        • Re: [PATCH v6] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Jeff Layton
          • Re: [PATCH v6] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Christian Brauner
            • Re: [PATCH v6] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Jeff Layton
              • Re: [PATCH v6] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Christian Brauner
  • Re: [PATCH v6] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, David Howells
  • Re: [PATCH v6] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, David Howells
    • Re: [PATCH v6] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing, Jeff Layton
• File context rule for file in /run not working, Ian Pilcher
  • Re: File context rule for file in /run not working, Petr Lautrbach
• [PATCH -next] selinux: cleanup obsolete comments for selinux_hooks[], Xiu Jianfeng
  • Re: [PATCH -next] selinux: cleanup obsolete comments for selinux_hooks[], Paul Moore
    • Re: [PATCH -next] selinux: cleanup obsolete comments for selinux_hooks[], xiujianfeng
• [PATCH 0/2] lsm: change security_capget LSM hook, Khadija Kamran
  • [PATCH 1/2] lsm: change 'target' parameter to 'const' in security_capget LSM hook, Khadija Kamran
    • Re: [PATCH 1/2] lsm: change 'target' parameter to 'const' in security_capget LSM hook, Alison Schofield
      • Re: [PATCH 1/2] lsm: change 'target' parameter to 'const' in security_capget LSM hook, Paul Moore
  • [PATCH 2/2] lsm: split cap_capget() declaration to multiple lines, Khadija Kamran
• Network ports - multiple types?, Ian Pilcher
  • Re: Network ports - multiple types?, Stephen Smalley
    • Re: Network ports - multiple types?, Ian Pilcher
      • Re: Network ports - multiple types?, Stephen Smalley
        • Re: Network ports - multiple types?, Stephen Smalley
• [RFC bpf-next v7 0/6] bpf: Force to MPTCP, Geliang Tang
  • [RFC bpf-next v7 1/6] net: socket: add update_socket_protocol hook, Geliang Tang
  • [RFC bpf-next v7 2/6] bpf: Register mptcp modret set, Geliang Tang
  • [RFC bpf-next v7 3/6] selftests/bpf: Add mptcpify program, Geliang Tang
  • [RFC bpf-next v7 4/6] selftests/bpf: use random netns name for mptcp, Geliang Tang
  • [RFC bpf-next v7 5/6] selftests/bpf: add two mptcp netns helpers, Geliang Tang
  • [RFC bpf-next v7 6/6] selftests/bpf: Add mptcpify selftest, Geliang Tang
  • Re: [RFC bpf-next v7 0/6] bpf: Force to MPTCP, Alexei Starovoitov
    • Re: [RFC bpf-next v7 0/6] bpf: Force to MPTCP, Geliang Tang
      • Re: [RFC bpf-next v7 0/6] bpf: Force to MPTCP, Alexei Starovoitov
        • Re: [RFC bpf-next v7 0/6] bpf: Force to MPTCP, Matthieu Baerts
    • Re: [RFC bpf-next v7 0/6] bpf: Force to MPTCP, Paolo Abeni
• [RFC PATCH] selinux: optimize ebitmap_and(), Christian Göttsche
• [PATCH v2 2/9] selinux: use u32 as bit type in ebitmap code, Christian Göttsche
  • [PATCH v2 3/9] selinux: use identical iterator type in hashtab_duplicate(), Christian Göttsche
    • Re: [PATCH v2 3/9] selinux: use identical iterator type in hashtab_duplicate(), Paul Moore
  • [PATCH v2 4/9] selinux: avoid implicit conversions in mls code, Christian Göttsche
    • Re: [PATCH v2 4/9] selinux: avoid implicit conversions in mls code, Paul Moore
  • [PATCH v2 5/9] selinux: services: update type for number of class permissions, Christian Göttsche
    • Re: [PATCH v2 5/9] selinux: services: update type for number of class permissions, Gong Ruiqi
    • Re: [PATCH v2 5/9] selinux: services: update type for number of class permissions, Paul Moore
      • RE: [PATCH v2 5/9] selinux: services: update type for number of class permissions, David Laight
  • [PATCH v2 6/9] selinux: avoid implicit conversions in services code, Christian Göttsche
    • Re: [PATCH v2 6/9] selinux: avoid implicit conversions in services code, Gong Ruiqi
    • Re: [PATCH v2 6/9] selinux: avoid implicit conversions in services code, Paul Moore
  • [PATCH v2 7/9] selinux: avoid implicit conversions in selinuxfs code, Christian Göttsche
    • Re: [PATCH v2 7/9] selinux: avoid implicit conversions in selinuxfs code, Paul Moore
  • [PATCH v2 9/9] selinux: avoid implicit conversion in nlmsgtab code, Christian Göttsche
    • Re: [PATCH v2 9/9] selinux: avoid implicit conversion in nlmsgtab code, Paul Moore
  • [PATCH v2 1/9] selinux: avoid implicit conversions in avtab code, Christian Göttsche
    • Re: [PATCH v2 1/9] selinux: avoid implicit conversions in avtab code, Paul Moore
  • [PATCH v2 8/9] selinux: policydb: implicit conversions, Christian Göttsche
    • Re: [PATCH v2 8/9] selinux: policydb: implicit conversions, Paul Moore
  • Re: [PATCH v2 2/9] selinux: use u32 as bit type in ebitmap code, Paul Moore
    • RE: [PATCH v2 2/9] selinux: use u32 as bit type in ebitmap code, David Laight
• [PATCH v2] selinux: log about VM being executable by default, Christian Göttsche
  • Re: [PATCH v2] selinux: log about VM being executable by default, Paul Moore
• [PATCH v6] semanage, sepolicy: list also ports not attributed with port_type, Topi Miettinen
• [RFC bpf-next v6] bpf: Force to MPTCP, Geliang Tang
  • Re: [RFC bpf-next v6] bpf: Force to MPTCP, Yonghong Song
• [PATCH v3 0/4] mm: convert to vma_is_initial_heap/stack(), Kefeng Wang
  • [PATCH v3 2/4] drm/amdkfd: use vma_is_initial_stack() and vma_is_initial_heap(), Kefeng Wang
  • [PATCH v3 1/4] mm: factor out VMA stack and heap checks, Kefeng Wang
  • [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Kefeng Wang
    • Fwd: [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Stephen Smalley
      • Re: [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Paul Moore
        • Message not available
          • Message not available
            • Re: [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Ondrej Mosnacek
              • Re: [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Paul Moore
                • Re: [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Kefeng Wang
                  • Re: [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Ondrej Mosnacek
                    • Re: [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Kefeng Wang
                      • Re: [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Marc Reisner
                        • Re: [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Paul Moore
                          • Re: [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Kefeng Wang
                            • Re: [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Kefeng Wang
                              • Re: [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Stephen Smalley
                                • Re: [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Kefeng Wang
                                  • Re: [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Marc Reisner
                                    • Re: [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Liam R. Howlett
                                      • Re: [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Marc Reisner
                                        • Re: [PATCH v3 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Paul Moore
  • [PATCH v3 4/4] perf/core: use vma_is_initial_stack() and vma_is_initial_heap(), Kefeng Wang
  • Re: [PATCH v3 0/4] mm: convert to vma_is_initial_heap/stack(), Peter Zijlstra
• ANN: SETools 4.4.3, Chris PeBenito
• [PATCH 0/8] Revert the prefix/suffix filename transition patches, James Carter
  • [PATCH 1/8] Revert "libsepol/cil: add support for prefix/suffix filename transtions to CIL", James Carter
  • [PATCH 2/8] Revert "checkpolicy,libsepol: add prefix/suffix support to module policy", James Carter
  • [PATCH 3/8] Revert "checkpolicy,libsepol: add prefix/suffix support to kernel policy", James Carter
  • [PATCH 4/8] Revert "libsepol: implement new module binary format of avrule", James Carter
  • [PATCH 5/8] Revert "libsepol: implement new kernel binary format for avtab", James Carter
  • [PATCH 8/8] Revert "checkpolicy,libsepol: move transition to separate structure in avtab", James Carter
  • [PATCH 6/8] Revert "checkpolicy,libsepol: move filename transition rules to avrule", James Carter
  • [PATCH 7/8] Revert "checkpolicy,libsepol: move filename transitions to avtab", James Carter
  • Re: [PATCH 0/8] Revert the prefix/suffix filename transition patches, Paul Moore
  • Re: [PATCH 0/8] Revert the prefix/suffix filename transition patches, Petr Lautrbach
    • Re: [PATCH 0/8] Revert the prefix/suffix filename transition patches, James Carter
• [PATCH testsuite] ci: test also on CentOS Stream 9, Ondrej Mosnacek
• [linux-next:master] BUILD REGRESSION ae867bc97b713121b2a7f5fcac68378a0774739b, kernel test robot
• [PATCH] selinux: Use NULL for pointers, Jiapeng Chong
  • Re: [PATCH] selinux: Use NULL for pointers, Paul Moore
• [PATCH] selinux: fix a 0/NULL mistmatch in ad_net_init_from_iif(), Paul Moore
  • Re: [PATCH] selinux: fix a 0/NULL mistmatch in ad_net_init_from_iif(), Paolo Abeni
    • Re: [PATCH] selinux: fix a 0/NULL mistmatch in ad_net_init_from_iif(), Paul Moore
• [RFC PATCH] selinux: log about VM being executable by default, Christian Göttsche
  • Re: [RFC PATCH] selinux: log about VM being executable by default, Paul Moore
• SELinux Mascot/Logo, Brett Anderson
  • Re: SELinux Mascot/Logo, Paul Moore
  • Re: SELinux Mascot/Logo, Dominick Grift
    • Re: SELinux Mascot/Logo, Brett Anderson
• [PATCH userspace] checkpolicy,libselinux,libsepol,policycoreutils,semodule-utils: update my email, Stephen Smalley
  • Re: [PATCH userspace] checkpolicy,libselinux,libsepol,policycoreutils,semodule-utils: update my email, Stephen Smalley
  • Re: [PATCH userspace] checkpolicy,libselinux,libsepol,policycoreutils,semodule-utils: update my email, James Carter
    • Re: [PATCH userspace] checkpolicy,libselinux,libsepol,policycoreutils,semodule-utils: update my email, James Carter
• [PATCH userspace] libselinux,policycoreutils,python,semodule-utils: de-brand SELinux, Stephen Smalley
  • Re: [PATCH userspace] libselinux,policycoreutils,python,semodule-utils: de-brand SELinux, James Carter
    • Re: [PATCH userspace] libselinux,policycoreutils,python,semodule-utils: de-brand SELinux, James Carter
  • RFC: remove /ru/ man pages from the repo, Petr Lautrbach
    • Re: RFC: remove /ru/ man pages from the repo, Stephen Smalley
• [PATCH] selinux: update my email address, Stephen Smalley
  • Re: [PATCH] selinux: update my email address, Paul Moore
• [PATCH] selinux: introduce and use lsm_ad_net_init*() helpers, Paolo Abeni
  • Re: [PATCH] selinux: introduce and use lsm_ad_net_init*() helpers, Paul Moore
• [PATCH v2 0/4] mm: convert to vma_is_initial_heap/stack(), Kefeng Wang
  • [PATCH v2 2/4] drm/amdkfd: use vma_is_initial_stack() and vma_is_initial_heap(), Kefeng Wang
    • Re: [PATCH v2 2/4] drm/amdkfd: use vma_is_initial_stack() and vma_is_initial_heap(), David Hildenbrand
    • Re: [PATCH v2 2/4] drm/amdkfd: use vma_is_initial_stack() and vma_is_initial_heap(), Felix Kuehling
  • [PATCH v2 1/4] mm: factor out VMA stack and heap checks, Kefeng Wang
    • Re: [PATCH v2 1/4] mm: factor out VMA stack and heap checks, David Hildenbrand
  • [PATCH v2 4/4] perf/core: use vma_is_initial_stack() and vma_is_initial_heap(), Kefeng Wang
    • Re: [PATCH v2 4/4] perf/core: use vma_is_initial_stack() and vma_is_initial_heap(), David Hildenbrand
    • Re: [PATCH v2 4/4] perf/core: use vma_is_initial_stack() and vma_is_initial_heap(), Peter Zijlstra
      • Re: [PATCH v2 4/4] perf/core: use vma_is_initial_stack() and vma_is_initial_heap(), Kefeng Wang
  • [PATCH v2 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Kefeng Wang
    • Re: [PATCH v2 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), David Hildenbrand
    • Re: [PATCH v2 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Christian Göttsche
      • Re: [PATCH v2 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Kefeng Wang
        • Re: [PATCH v2 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Paul Moore
          • Re: [PATCH v2 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Kefeng Wang
            • Re: [PATCH v2 3/4] selinux: use vma_is_initial_stack() and vma_is_initial_heap(), Paul Moore
• [PATCH] selinux: add missing newlines in print statements, Christian Göttsche
  • Re: [PATCH] selinux: add missing newlines in print statements, Paul Moore
• [PATCH 1/3] selinux: introduce SECURITY_SELINUX_DEBUG configuration, Christian Göttsche
  • [PATCH 2/3] selinux: move debug functions into debug configuration, Christian Göttsche
    • Re: [PATCH 2/3] selinux: move debug functions into debug configuration, Paul Moore
    • [PATCH v2] selinux: move debug functions into debug configuration, Christian Göttsche
      • Re: [PATCH v2] selinux: move debug functions into debug configuration, Paul Moore
  • [PATCH 3/3] selinux: log missing anonclass in debug configuration, Christian Göttsche
    • Re: [PATCH 3/3] selinux: log missing anonclass in debug configuration, Paul Moore
      • Re: [PATCH 3/3] selinux: log missing anonclass in debug configuration, Christian Göttsche
  • Re: [PATCH 1/3] selinux: introduce SECURITY_SELINUX_DEBUG configuration, Paul Moore
• [PATCH] selinux: drop avtab_search(), Christian Göttsche
  • Re: [PATCH] selinux: drop avtab_search(), Paul Moore
• [PATCH] selinux: de-brand SELinux, Stephen Smalley
  • Re: [PATCH] selinux: de-brand SELinux, Paul Moore
• [RFC bpf-next v5] bpf: Force to MPTCP, Geliang Tang
  • Re: [RFC bpf-next v5] bpf: Force to MPTCP, Paul Moore
    • Re: [RFC bpf-next v5] bpf: Force to MPTCP, Matthieu Baerts
      • Re: [RFC bpf-next v5] bpf: Force to MPTCP, Stanislav Fomichev
        • Re: [RFC bpf-next v5] bpf: Force to MPTCP, Matthieu Baerts
          • Re: [RFC bpf-next v5] bpf: Force to MPTCP, Stanislav Fomichev
            • Re: [RFC bpf-next v5] bpf: Force to MPTCP, Matthieu Baerts
• [PATCH] io_uring: don't audit the capability check in io_uring_create(), Ondrej Mosnacek
  • Re: [PATCH] io_uring: don't audit the capability check in io_uring_create(), Jeff Moyer
    • Re: [PATCH] io_uring: don't audit the capability check in io_uring_create(), Ondrej Mosnacek
  • Re: [PATCH] io_uring: don't audit the capability check in io_uring_create(), Jens Axboe
• [RFC PATCH] selinux: introduce and use ad_init_net*() helpers, Paolo Abeni
  • Re: [RFC PATCH] selinux: introduce and use ad_init_net*() helpers, Paul Moore
  • Re: [RFC PATCH] selinux: introduce and use ad_init_net*() helpers, Ondrej Mosnacek
    • Re: [RFC PATCH] selinux: introduce and use ad_init_net*() helpers, Paolo Abeni
      • Re: [RFC PATCH] selinux: introduce and use ad_init_net*() helpers, Paul Moore
  • Re: [RFC PATCH] selinux: introduce and use ad_init_net*() helpers, Paolo Abeni
    • Re: [RFC PATCH] selinux: introduce and use ad_init_net*() helpers, Paul Moore
      • Re: [RFC PATCH] selinux: introduce and use ad_init_net*() helpers, Paolo Abeni
    • Re: [RFC PATCH] selinux: introduce and use ad_init_net*() helpers, Casey Schaufler
• [PATCH testsuite] policy: allow all test domains to search user/admin home directories, Ondrej Mosnacek
  • Re: [PATCH testsuite] policy: allow all test domains to search user/admin home directories, Stephen Smalley
    • Re: [PATCH testsuite] policy: allow all test domains to search user/admin home directories, Ondrej Mosnacek
• [PATCH] libsepol: free potential transition tables on insertion failure, Christian Göttsche
  • Re: [PATCH] libsepol: free potential transition tables on insertion failure, James Carter
• [PATCH v2] libselinux/utils: introduce getpolicyload, Christian Göttsche
  • Re: [PATCH v2] libselinux/utils: introduce getpolicyload, James Carter
    • Re: [PATCH v2] libselinux/utils: introduce getpolicyload, James Carter
• [PATCH 1/4] libsepol: validate: use fixed sized integers, Christian Göttsche
  • [PATCH 3/4] libsepol: expand: use identical type to avoid implicit conversion, Christian Göttsche
  • [PATCH 2/4] hashtab: update, Christian Göttsche
  • [PATCH 4/4] libsepol: expand: check for memory allocation failure, Christian Göttsche
  • Re: [PATCH 1/4] libsepol: validate: use fixed sized integers, James Carter
    • Re: [PATCH 1/4] libsepol: validate: use fixed sized integers, James Carter
• [PATCH] libsepol: use explicit type for function parameters, Christian Göttsche
  • Re: [PATCH] libsepol: use explicit type for function parameters, James Carter
    • Re: [PATCH] libsepol: use explicit type for function parameters, James Carter
• [PATCH] libsepol: optional data destruction in hashtab_destroy(), Christian Göttsche
  • Re: [PATCH] libsepol: optional data destruction in hashtab_destroy(), James Carter
• [PATCH testsuite] policy: allow inet socket test domains to search user home content, Stephen Smalley
  • Re: [PATCH testsuite] policy: allow inet socket test domains to search user home content, Ondrej Mosnacek
• [PATCH] checkpolicy: Remove support for role dominance rules, James Carter
  • Re: [PATCH] checkpolicy: Remove support for role dominance rules, James Carter
    • Re: [PATCH] checkpolicy: Remove support for role dominance rules, Petr Lautrbach
      • Re: [PATCH] checkpolicy: Remove support for role dominance rules, James Carter
• [PATCH 1/5] libsepol: free memory on str_read() failures, Christian Göttsche
  • [PATCH 2/5] libsepol: reject avtab entries with invalid specifier, Christian Göttsche
    • Re: [PATCH 2/5] libsepol: reject avtab entries with invalid specifier, James Carter
  • [PATCH 3/5] libsepol: free ebitmap in filename_trans_comp_read_one(), Christian Göttsche
  • [PATCH 4/5] libsepol: drop superfluous check, Christian Göttsche
  • [PATCH 5/5] libsepol: avtab: check read counts for saturation, Christian Göttsche
    • Re: [PATCH 5/5] libsepol: avtab: check read counts for saturation, James Carter
• [PATCH] secilc: add check for malloc in secilc, Huaxin Lu
  • Re: [PATCH] secilc: add check for malloc in secilc, James Carter
    • Re: [PATCH] secilc: add check for malloc in secilc, James Carter
• [PATCH 0/5] mm: convert to vma_is_heap/stack(), Kefeng Wang
  • [PATCH 2/5] mm: use vma_is_stack() and vma_is_heap(), Kefeng Wang
    • Re: [PATCH 2/5] mm: use vma_is_stack() and vma_is_heap(), David Hildenbrand
      • Re: [PATCH 2/5] mm: use vma_is_stack() and vma_is_heap(), Kefeng Wang
  • [PATCH 4/5] selinux: use vma_is_stack() and vma_is_heap(), Kefeng Wang
    • Re: [PATCH 4/5] selinux: use vma_is_stack() and vma_is_heap(), Paul Moore
  • [PATCH 3/5] drm/amdkfd: use vma_is_stack() and vma_is_heap(), Kefeng Wang
    • Re: [PATCH 3/5] drm/amdkfd: use vma_is_stack() and vma_is_heap(), Christoph Hellwig
      • Re: [PATCH 3/5] drm/amdkfd: use vma_is_stack() and vma_is_heap(), Felix Kuehling
        • Re: [PATCH 3/5] drm/amdkfd: use vma_is_stack() and vma_is_heap(), Vlastimil Babka
          • Re: [PATCH 3/5] drm/amdkfd: use vma_is_stack() and vma_is_heap(), Felix Kuehling
  • [PATCH 1/5] mm: introduce vma_is_stack() and vma_is_heap(), Kefeng Wang
    • Re: [PATCH 1/5] mm: introduce vma_is_stack() and vma_is_heap(), David Hildenbrand
    • Re: [PATCH 1/5] mm: introduce vma_is_stack() and vma_is_heap(), Christian Göttsche
  • [PATCH 5/5] perf/core: use vma_is_stack() and vma_is_heap(), Kefeng Wang
• [PATCH net-next 0/4] net: Mark the sk parameter of routing functions as 'const'., Guillaume Nault
  • [PATCH net-next 1/4] security: Constify sk in the sk_getsecid hook., Guillaume Nault
    • Re: [PATCH net-next 1/4] security: Constify sk in the sk_getsecid hook., Simon Horman
    • Re: [PATCH net-next 1/4] security: Constify sk in the sk_getsecid hook., Paul Moore
      • Re: [PATCH net-next 1/4] security: Constify sk in the sk_getsecid hook., Guillaume Nault
  • Re: [PATCH net-next 0/4] net: Mark the sk parameter of routing functions as 'const'., patchwork-bot+netdevbpf
• [PATCH] restorecond: add check for strdup in strings_list_add, Huaxin Lu
  • Re: [PATCH] restorecond: add check for strdup in strings_list_add, James Carter
    • Re: [PATCH] restorecond: add check for strdup in strings_list_add, James Carter
• [PATCH] selinux: optimize major part with a kernel config in selinux_mmap_addr(), Leesoo Ahn
  • Re: [PATCH] selinux: optimize major part with a kernel config in selinux_mmap_addr(), Stephen Smalley
    • Re: [PATCH] selinux: optimize major part with a kernel config in selinux_mmap_addr(), Leesoo Ahn
  • Re: [PATCH] selinux: optimize major part with a kernel config in selinux_mmap_addr(), Paul Moore
    • Re: [PATCH] selinux: optimize major part with a kernel config in selinux_mmap_addr(), Casey Schaufler
      • Re: [PATCH] selinux: optimize major part with a kernel config in selinux_mmap_addr(), Paul Moore
  • Re: [PATCH] selinux: optimize major part with a kernel config in selinux_mmap_addr(), Thomas Weißschuh
• [PATCH] checkpolicy: free role identifier in define_role_dom(), Christian Göttsche
  • Re: [PATCH] checkpolicy: free role identifier in define_role_dom(), James Carter
• [PATCH v2] checkpolicy: add round-trip tests, Christian Göttsche
  • Re: [PATCH v2] checkpolicy: add round-trip tests, James Carter
  • <Possible follow-ups>
  • [PATCH v2] checkpolicy: add round-trip tests, Christian Göttsche
    • Re: [PATCH v2] checkpolicy: add round-trip tests, James Carter
      • Re: [PATCH v2] checkpolicy: add round-trip tests, James Carter
• [PATCH v2 1/4] semodule_expand: update, Christian Göttsche
  • [PATCH v2 2/4] semodule_link: update, Christian Göttsche
  • [PATCH v2 3/4] semodule_package: update, Christian Göttsche
  • [PATCH v2 4/4] semodule_unpackage: update, Christian Göttsche
  • Re: [PATCH v2 1/4] semodule_expand: update, James Carter
    • Re: [PATCH v2 1/4] semodule_expand: update, James Carter
• [PATCH] setsebool: improve bash-completion script, Christian Göttsche
  • Re: [PATCH] setsebool: improve bash-completion script, James Carter
    • Re: [PATCH] setsebool: improve bash-completion script, James Carter
• [PATCH] setsebool: drop unnecessary linking against libsepol, Christian Göttsche
  • Re: [PATCH] setsebool: drop unnecessary linking against libsepol, James Carter
    • Re: [PATCH] setsebool: drop unnecessary linking against libsepol, James Carter
• [RFC PATCH] libsepol/cil: support parallel neverallow checks, Christian Göttsche
  • Re: [RFC PATCH] libsepol/cil: support parallel neverallow checks, James Carter
• [PATCH] libsepol/fuzz: more strict fuzzing of binary policies, Christian Göttsche
  • Re: [PATCH] libsepol/fuzz: more strict fuzzing of binary policies, James Carter
    • Re: [PATCH] libsepol/fuzz: more strict fuzzing of binary policies, James Carter
• [PATCH] libsepol: check for overflow in put_entry(), Christian Göttsche
  • Re: [PATCH] libsepol: check for overflow in put_entry(), James Carter
    • Re: [PATCH] libsepol: check for overflow in put_entry(), James Carter
• [PATCH] libsepol: free initial sid names, Christian Göttsche
  • Re: [PATCH] libsepol: free initial sid names, James Carter
    • Re: [PATCH] libsepol: free initial sid names, James Carter
• [PATCH] libselinux/utils: introduce getpolicyload, Christian Göttsche
  • Re: [PATCH] libselinux/utils: introduce getpolicyload, James Carter
• [RFC PATCH] selinux: disable debug functions by default, Christian Göttsche
  • Re: [RFC PATCH] selinux: disable debug functions by default, Paul Moore
• [RFC PATCH] selinux: implement avtab_search() via avtab_search_node(), Christian Göttsche
  • Re: [RFC PATCH] selinux: implement avtab_search() via avtab_search_node(), Paul Moore
• [RFC PATCH 01/20] selinux: check for multiplication overflow in put_entry(), Christian Göttsche
  • [RFC PATCH 03/20] selinux: avoid avtab overflows, Christian Göttsche
    • Re: [PATCH RFC 3/20] selinux: avoid avtab overflows, Paul Moore
  • [RFC PATCH 02/20] selinux: avtab: avoid implicit conversions, Christian Göttsche
    • Re: [PATCH RFC 2/20] selinux: avtab: avoid implicit conversions, Paul Moore
  • [RFC PATCH 07/20] selinux: services: update type for umber of class permissions, Christian Göttsche
    • Re: [RFC PATCH 07/20] selinux: services: update type for umber of class permissions, Gong Ruiqi
    • Re: [PATCH RFC 7/20] selinux: services: update type for umber of class permissions, Paul Moore
      • Re: [PATCH RFC 7/20] selinux: services: update type for umber of class permissions, Gong Ruiqi
  • [RFC PATCH 06/20] selinux: mls: avoid implicit conversions, Christian Göttsche
    • Re: [PATCH RFC 6/20] selinux: mls: avoid implicit conversions, Paul Moore
  • [RFC PATCH 04/20] selinux: ebitmap: use u32 as bit type, Christian Göttsche
    • Re: [PATCH RFC 4/20] selinux: ebitmap: use u32 as bit type, Paul Moore
  • [RFC PATCH 05/20] selinux: hashtab: use identical iterator type, Christian Göttsche
    • Re: [PATCH RFC 5/20] selinux: hashtab: use identical iterator type, Paul Moore
  • [RFC PATCH 10/20] selinux: netif: avoid implicit conversions, Christian Göttsche
    • Re: [PATCH RFC 10/20] selinux: netif: avoid implicit conversions, Paul Moore
  • [RFC PATCH 09/20] selinux: status: consistently use u32 as sequence number type, Christian Göttsche
    • Re: [PATCH RFC 9/20] selinux: status: consistently use u32 as sequence number type, Paul Moore
  • [RFC PATCH 08/20] selinux: services: avoid implicit conversions, Christian Göttsche
    • Re: [PATCH RFC 8/20] selinux: services: avoid implicit conversions, Paul Moore
  • [RFC PATCH 11/20] selinux: avc: avoid implicit conversions, Christian Göttsche
    • Re: [PATCH RFC 11/20] selinux: avc: avoid implicit conversions, Paul Moore
  • [RFC PATCH 12/20] selinux: hooks: avoid implicit conversions, Christian Göttsche
    • Re: [PATCH RFC 12/20] selinux: hooks: avoid implicit conversions, Paul Moore
  • [RFC PATCH 13/20] selinux: selinuxfs: avoid implicit conversions, Christian Göttsche
    • Re: [PATCH RFC 13/20] selinux: selinuxfs: avoid implicit conversions, Paul Moore
  • [RFC PATCH 14/20] selinux: use consistent type for AV rule specifier, Christian Göttsche
    • Re: [PATCH RFC 14/20] selinux: use consistent type for AV rule specifier, Paul Moore
  • [RFC PATCH 15/20] selinux: policydb: implicit conversions, Christian Göttsche
    • Re: [PATCH RFC 15/20] selinux: policydb: implicit conversions, Paul Moore
  • [RFC PATCH 16/20] selinux: symtab: implicit conversion, Christian Göttsche
    • Re: [PATCH RFC 16/20] selinux: symtab: implicit conversion, Paul Moore
  • [RFC PATCH 17/20] selinux: services: implicit conversions, Christian Göttsche
    • Re: [PATCH RFC 17/20] selinux: services: implicit conversions, Paul Moore
  • [RFC PATCH 18/20] selinux: nlmsgtab: implicit conversion, Christian Göttsche
    • Re: [PATCH RFC 18/20] selinux: nlmsgtab: implicit conversion, Paul Moore
  • [RFC PATCH 20/20] selinux: selinuxfs: avoid implicit conversions, Christian Göttsche
    • Re: [PATCH RFC 20/20] selinux: selinuxfs: avoid implicit conversions, Paul Moore
  • [RFC PATCH 00/20] selinux: be more strict about integer conversions, Christian Göttsche
    • Re: [PATCH RFC 0/20] selinux: be more strict about integer conversions, Paul Moore
  • [RFC PATCH 19/20] selinux: status: avoid implicit conversions regarding enforcing status, Christian Göttsche
    • Re: [PATCH RFC 19/20] selinux: status: avoid implicit conversions regarding enforcing status, Paul Moore
  • Re: [PATCH RFC 1/20] selinux: check for multiplication overflow in put_entry(), Paul Moore
• [PATCH v2 91/92] selinux: convert to ctime accessor functions, Jeff Layton
  • Re: [PATCH v2 91/92] selinux: convert to ctime accessor functions, Jan Kara
• [PATCH v2 00/89] fs: new accessors for inode->i_ctime, Jeff Layton
  • [PATCH v2 07/92] fs: add ctime accessors infrastructure, Jeff Layton
    • Re: [PATCH v2 07/92] fs: add ctime accessors infrastructure, Damien Le Moal
  • [PATCH v2 08/92] fs: new helper: simple_rename_timestamp, Jeff Layton
    • Re: [PATCH v2 08/92] fs: new helper: simple_rename_timestamp, Damien Le Moal
      • Re: [PATCH v2 08/92] fs: new helper: simple_rename_timestamp, Jeff Layton
        • Re: [apparmor] [PATCH v2 08/92] fs: new helper: simple_rename_timestamp, Seth Arnold
          • Re: [apparmor] [PATCH v2 08/92] fs: new helper: simple_rename_timestamp, Jeff Layton
    • Re: [PATCH v2 08/92] fs: new helper: simple_rename_timestamp, Jan Kara
    • Re: [PATCH v2 08/92] fs: new helper: simple_rename_timestamp, Al Viro
      • Re: [PATCH v2 08/92] fs: new helper: simple_rename_timestamp, Jeff Layton
  • [PATCH v2 92/92] fs: rename i_ctime field to __i_ctime, Jeff Layton
    • Re: [PATCH v2 92/92] fs: rename i_ctime field to __i_ctime, Damien Le Moal
    • Re: [PATCH v2 92/92] fs: rename i_ctime field to __i_ctime, Jan Kara
  • Re: [PATCH v2 00/89] fs: new accessors for inode->i_ctime, Jeff Layton
    • Re: [PATCH v2 00/89] fs: new accessors for inode->i_ctime, Eric W. Biederman
      • Re: [PATCH v2 00/89] fs: new accessors for inode->i_ctime, Jeff Layton
  • Re: [PATCH v2 00/89] fs: new accessors for inode->i_ctime, Jeff Layton
    • Re: [PATCH v2 00/89] fs: new accessors for inode->i_ctime, Christian Brauner
      • Re: [PATCH v2 00/89] fs: new accessors for inode->i_ctime, Jeff Layton
  • Re: [PATCH v2 00/92] fs: new accessors for inode->i_ctime, Christian Brauner
  • Re: [f2fs-dev] [PATCH v2 00/89] fs: new accessors for inode->i_ctime, patchwork-bot+f2fs
• [PATCH v5] semanage, sepolicy: list also ports not attributed with port_type, Topi Miettinen
  • Re: [PATCH v5] semanage, sepolicy: list also ports not attributed with port_type, Petr Lautrbach
• [syzbot] [selinux?] [reiserfs?] KASAN: wild-memory-access Read in inode_doinit_with_dentry, syzbot
• [PATCH v12 10/11] SELinux: Add selfattr hooks, Casey Schaufler
  • Re: [PATCH v12 10/11] SELinux: Add selfattr hooks, Mickaël Salaün
• [GIT PULL] SELinux patches for v6.5, Paul Moore
  • Re: [GIT PULL] SELinux patches for v6.5, pr-tracker-bot
• Re: [PATCH 00/79] fs: new accessors for inode->i_ctime, Christian Brauner
  • <Possible follow-ups>
  • Re: [PATCH 00/79] fs: new accessors for inode->i_ctime, Luis Chamberlain
• Re: [PATCH 01/79] fs: add ctime accessors infrastructure, Jeff Layton
  • <Possible follow-ups>
  • Re: [PATCH 01/79] fs: add ctime accessors infrastructure, Luis Chamberlain
  • Re: [PATCH 01/79] fs: add ctime accessors infrastructure, Randy Dunlap
• [PATCH 78/79] selinux: switch to new ctime accessors, Jeff Layton
  • Re: [PATCH 78/79] selinux: switch to new ctime accessors, Paul Moore
• [PATCH v2] selinux: introduce an initial SID for early boot processes, Ondrej Mosnacek
  • Re: [PATCH v2] selinux: introduce an initial SID for early boot processes, Paul Moore
  • Login broken with old userspace (was Re: [PATCH v2] selinux: introduce an initial SID for early boot processes), Michael Ellerman
    • Re: Login broken with old userspace (was Re: [PATCH v2] selinux: introduce an initial SID for early boot processes), Ondrej Mosnacek
      • Re: Login broken with old userspace (was Re: [PATCH v2] selinux: introduce an initial SID for early boot processes), Stephen Smalley
        • Re: Login broken with old userspace (was Re: [PATCH v2] selinux: introduce an initial SID for early boot processes), Ondrej Mosnacek
          • Re: Login broken with old userspace (was Re: [PATCH v2] selinux: introduce an initial SID for early boot processes), Christian Göttsche
            • Re: Login broken with old userspace (was Re: [PATCH v2] selinux: introduce an initial SID for early boot processes), Paul Moore
              • Re: Login broken with old userspace (was Re: [PATCH v2] selinux: introduce an initial SID for early boot processes), Ondrej Mosnacek
                • Re: Login broken with old userspace (was Re: [PATCH v2] selinux: introduce an initial SID for early boot processes), Paul Moore
      • Re: Login broken with old userspace (was Re: [PATCH v2] selinux: introduce an initial SID for early boot processes), Michael Ellerman
• [PATCH v2 0/8] checkpolicy,libsepol: add prefix/suffix matching to filename type transitions, Juraj Marcin
  • [PATCH v2 1/8] checkpolicy,libsepol: move transition to separate structure in avtab, Juraj Marcin
    • Re: [PATCH v2 1/8] checkpolicy,libsepol: move transition to separate structure in avtab, James Carter
      • Re: [PATCH v2 1/8] checkpolicy,libsepol: move transition to separate structure in avtab, James Carter
        • Re: [PATCH v2 1/8] checkpolicy,libsepol: move transition to separate structure in avtab, Christian Göttsche
          • Re: [PATCH v2 1/8] checkpolicy,libsepol: move transition to separate structure in avtab, James Carter
  • [PATCH v2 2/8] checkpolicy,libsepol: move filename transitions to avtab, Juraj Marcin
  • [PATCH v2 3/8] checkpolicy,libsepol: move filename transition rules to avrule, Juraj Marcin
  • [PATCH v2 4/8] libsepol: implement new kernel binary format for avtab, Juraj Marcin
  • [PATCH v2 7/8] checkpolicy,libsepol: add prefix/suffix support to module policy, Juraj Marcin
  • [PATCH v2 6/8] checkpolicy,libsepol: add prefix/suffix support to kernel policy, Juraj Marcin
  • [PATCH v2 5/8] libsepol: implement new module binary format of avrule, Juraj Marcin
  • [PATCH v2 8/8] libsepol/cil: add support for prefix/suffix filename transtions to CIL, Juraj Marcin
• [PATCH testsuite] tests/inet_socket: cover the MPTCP protocol, Ondrej Mosnacek
  • Re: [PATCH testsuite] tests/inet_socket: cover the MPTCP protocol, Ondrej Mosnacek
• [PATCH] python/sepolicy: Fix get_os_version except clause, Jeffery To
  • Re: [PATCH] python/sepolicy: Fix get_os_version except clause, Petr Lautrbach
    • Re: [PATCH] python/sepolicy: Fix get_os_version except clause, Petr Lautrbach
• [PATCH] libselinux: fix inconsistent indentation in selinux_check_access, Huaxin Lu
  • Re: [PATCH] libselinux: fix inconsistent indentation in selinux_check_access, Petr Lautrbach
• [PATCH] libselinux: add check for calloc in check_booleans, Huaxin Lu
  • Re: [PATCH] libselinux: add check for calloc in check_booleans, Petr Lautrbach
    • Re: [PATCH] libselinux: add check for calloc in check_booleans, Petr Lautrbach
• [PATCH v4] semanage, sepolicy: list also ports not attributed with port_type, Topi Miettinen
  • Re: [PATCH v4] semanage, sepolicy: list also ports not attributed with port_type, Petr Lautrbach
• [PATCH] selinux: cleanup the policycap accessor functions, Paul Moore
  • Re: [PATCH] selinux: cleanup the policycap accessor functions, Paul Moore
• [PATCH v11 10/11] SELinux: Add selfattr hooks, Casey Schaufler
• SELinux and systemd integration, Paul Moore
  • Re: SELinux and systemd integration, Petr Lautrbach
    • Re: SELinux and systemd integration, Christian Göttsche
      • Re: SELinux and systemd integration, Paul Moore
    • Re: SELinux and systemd integration, Paul Moore
• [PATCH v2 1/2] dismod: print the policy version only in interactive mode, Masatake YAMATO
  • [PATCH v2 2/2] dismod, dispol: reduce the messages in batch mode, Masatake YAMATO
  • Re: [PATCH v2 1/2] dismod: print the policy version only in interactive mode, James Carter
    • Re: [PATCH v2 1/2] dismod: print the policy version only in interactive mode, Petr Lautrbach
• [PATCH v3] semanage, sepolicy: list also ports not attributed with port_type, Topi Miettinen
  • Re: [PATCH v3] semanage, sepolicy: list also ports not attributed with port_type, Petr Lautrbach
    • Re: [PATCH v3] semanage, sepolicy: list also ports not attributed with port_type, Topi Miettinen
      • Re: [PATCH v3] semanage, sepolicy: list also ports not attributed with port_type, Petr Lautrbach
• [PATCH 1/2] dismod: print the policy version only in interactive mode, Masatake YAMATO
  • [PATCH 2/2] dismod, dispol: reduce the messages in batch mode, Masatake YAMATO
    • Re: [PATCH 2/2] dismod, dispol: reduce the messages in batch mode, James Carter
• [PATCH userspace 0/2] Introduce an initial SID for early boot processes, Ondrej Mosnacek
  • [PATCH userspace 1/2] libsepol: stop translating deprecated intial SIDs to strings, Ondrej Mosnacek
    • Re: [PATCH userspace 1/2] libsepol: stop translating deprecated intial SIDs to strings, James Carter
      • Re: [PATCH userspace 1/2] libsepol: stop translating deprecated intial SIDs to strings, Petr Lautrbach
  • [PATCH userspace 2/2] libsepol: add support for the new "init" initial SID, Ondrej Mosnacek
• [PATCH] selinux: introduce an initial SID for early boot processes, Ondrej Mosnacek
  • Re: [PATCH] selinux: introduce an initial SID for early boot processes, Paul Moore
    • Re: [PATCH] selinux: introduce an initial SID for early boot processes, Ondrej Mosnacek
      • Re: [PATCH] selinux: introduce an initial SID for early boot processes, Paul Moore
        • Re: [PATCH] selinux: introduce an initial SID for early boot processes, Ondrej Mosnacek
  • Re: [PATCH] selinux: introduce an initial SID for early boot processes, Paul Moore
    • Re: [PATCH] selinux: introduce an initial SID for early boot processes, Ondrej Mosnacek
      • Re: [PATCH] selinux: introduce an initial SID for early boot processes, Paul Moore
• [PATCH v12 0/4] evm: Do HMAC of multiple per LSM xattrs for new inodes, Roberto Sassu
  • [PATCH v12 1/4] security: Allow all LSMs to provide xattrs for inode_init_security hook, Roberto Sassu
    • Re: [PATCH v12 1/4] security: Allow all LSMs to provide xattrs for inode_init_security hook, Paul Moore
      • RE: [PATCH v12 1/4] security: Allow all LSMs to provide xattrs for inode_init_security hook, Roberto Sassu
        • Re: [PATCH v12 1/4] security: Allow all LSMs to provide xattrs for inode_init_security hook, Paul Moore
          • Re: [PATCH v12 1/4] security: Allow all LSMs to provide xattrs for inode_init_security hook, Roberto Sassu
      • Re: [PATCH v12 1/4] security: Allow all LSMs to provide xattrs for inode_init_security hook, Casey Schaufler
        • Re: [PATCH v12 1/4] security: Allow all LSMs to provide xattrs for inode_init_security hook, Paul Moore
          • Re: [PATCH v12 1/4] security: Allow all LSMs to provide xattrs for inode_init_security hook, Paul Moore
            • Re: [PATCH v12 1/4] security: Allow all LSMs to provide xattrs for inode_init_security hook, Roberto Sassu
  • [PATCH v12 2/4] smack: Set the SMACK64TRANSMUTE xattr in smack_inode_init_security(), Roberto Sassu
    • Re: [PATCH v12 2/4] smack: Set the SMACK64TRANSMUTE xattr in smack_inode_init_security(), Casey Schaufler
  • [PATCH v12 3/4] evm: Align evm_inode_init_security() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v12 3/4] evm: Align evm_inode_init_security() definition with LSM infrastructure, Mimi Zohar
  • [PATCH v12 4/4] evm: Support multiple LSMs providing an xattr, Roberto Sassu
    • Re: [PATCH v12 4/4] evm: Support multiple LSMs providing an xattr, Mimi Zohar
• RFC: style/formatting changes for SELinux kernel code, Paul Moore
  • Re: RFC: style/formatting changes for SELinux kernel code, Paul Moore
  • Re: RFC: style/formatting changes for SELinux kernel code, Ondrej Mosnacek
    • Re: RFC: style/formatting changes for SELinux kernel code, Paul Moore
• [PATCH 1/4] dispol: add --help option, Masatake YAMATO
  • [PATCH 2/4] dispol: delete an unnecessary empty line, Masatake YAMATO
  • [PATCH 3/4] dispol: handle EOF in user interaction, Masatake YAMATO
  • [PATCH 4/4] dispol: add --actions option for non-interactive use, Masatake YAMATO
  • Re: [PATCH 1/4] dispol: add --help option, James Carter
    • Re: [PATCH 1/4] dispol: add --help option, James Carter
• ANN: SELinux and stable kernel changes, Paul Moore
• multiple inconsistent perm_map files, Stephen Smalley
  • Re: multiple inconsistent perm_map files, Christopher J. PeBenito
• [PATCH] libselinux: Add CPPFLAGS to Makefile, ChungSheng Wu
  • Re: [PATCH] libselinux: Add CPPFLAGS to Makefile, James Carter
    • [PATCH] [userspace] Add CPPFLAGS to Makefiles, Cameron Williams
      • Re: [PATCH] [userspace] Add CPPFLAGS to Makefiles, James Carter
        • Re: [PATCH] [userspace] Add CPPFLAGS to Makefiles, James Carter
• [PATCH] semanage: list all nodes even if not attributed with node_type, Topi Miettinen
• [PATCH] sepolicy: clarify manual page of sepolicy interface, Topi Miettinen
  • Re: [PATCH] sepolicy: clarify manual page of sepolicy interface, Petr Lautrbach
    • Re: [PATCH] sepolicy: clarify manual page of sepolicy interface, James Carter
• [PATCH v11 0/4] evm: Do HMAC of multiple per LSM xattrs for new inodes, Roberto Sassu
  • [PATCH v11 1/4] security: Allow all LSMs to provide xattrs for inode_init_security hook, Roberto Sassu
    • Re: [PATCH v11 1/4] security: Allow all LSMs to provide xattrs for inode_init_security hook, Paul Moore
  • [PATCH v11 2/4] smack: Set the SMACK64TRANSMUTE xattr in smack_inode_init_security(), Roberto Sassu
    • Re: [PATCH v11 2/4] smack: Set the SMACK64TRANSMUTE xattr in smack_inode_init_security(), Roberto Sassu
      • Re: [PATCH v11 2/4] smack: Set the SMACK64TRANSMUTE xattr in smack_inode_init_security(), Jarkko Sakkinen
        • Re: [PATCH v11 2/4] smack: Set the SMACK64TRANSMUTE xattr in smack_inode_init_security(), Roberto Sassu
      • Re: [PATCH v11 2/4] smack: Set the SMACK64TRANSMUTE xattr in smack_inode_init_security(), Mengchi Cheng
    • Re: [PATCH v11 2/4] smack: Set the SMACK64TRANSMUTE xattr in smack_inode_init_security(), Mimi Zohar
      • Re: [PATCH v11 2/4] smack: Set the SMACK64TRANSMUTE xattr in smack_inode_init_security(), Roberto Sassu
  • [PATCH v11 3/4] evm: Align evm_inode_init_security() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v11 3/4] evm: Align evm_inode_init_security() definition with LSM infrastructure, Mimi Zohar
  • [PATCH v11 4/4] evm: Support multiple LSMs providing an xattr, Roberto Sassu
  • Re: [PATCH v11 0/4] evm: Do HMAC of multiple per LSM xattrs for new inodes, Mimi Zohar
    • Re: [PATCH v11 0/4] evm: Do HMAC of multiple per LSM xattrs for new inodes, Roberto Sassu
  • Re: [PATCH v11 0/4] evm: Do HMAC of multiple per LSM xattrs for new inodes, Paul Moore
    • Re: [PATCH v11 0/4] evm: Do HMAC of multiple per LSM xattrs for new inodes, Roberto Sassu
• [PATCH v2] semanage, sepolicy: list also ports not attributed with port_type, Topi Miettinen
  • Re: [PATCH v2] semanage, sepolicy: list also ports not attributed with port_type, Petr Lautrbach
    • Re: [PATCH v2] semanage, sepolicy: list also ports not attributed with port_type, Topi Miettinen
      • Re: [PATCH v2] semanage, sepolicy: list also ports not attributed with port_type, Petr Lautrbach
• [RFC PATCH] selinux: support name based type transitions in conditional policies, Christian Göttsche
• [PATCH] selinux: avoid bool as identifier name, Christian Göttsche
  • Re: [PATCH] selinux: avoid bool as identifier name, Paul Moore
• [RFC PATCH] checkpolicy, libsepol: support name based type transitions in conditional policies, Christian Göttsche
• [PATCH 1/2] secilc: consider DESTDIR in tests, Christian Göttsche
  • [PATCH 2/2] libsemanage/tests: consider DESTDIR, Christian Göttsche
  • Re: [PATCH 1/2] secilc: consider DESTDIR in tests, Petr Lautrbach
• [PATCH v2 1/4] libsepol: drop message for uncommon error cases, Christian Göttsche
  • [PATCH v2 4/4] libsepol: replace log_err() by ERR(), Christian Göttsche
  • [PATCH v2 2/4] libsepol: drop duplicate newline in sepol_log_err() calls, Christian Göttsche
  • [PATCH v2 3/4] libsepol: replace sepol_log_err() by ERR(), Christian Göttsche
  • Re: [PATCH v2 1/4] libsepol: drop message for uncommon error cases, James Carter
    • Re: [PATCH v2 1/4] libsepol: drop message for uncommon error cases, James Carter
• [GIT PULL] SELinux fixes for v6.4 (#1), Paul Moore
  • Re: [GIT PULL] SELinux fixes for v6.4 (#1), pr-tracker-bot
• [PATCH] selinux: fix Makefile for versions of make < v4.3, Paul Moore
  • Re: [PATCH] selinux: fix Makefile for versions of make < v4.3, Paul Moore
    • Re: [PATCH] selinux: fix Makefile for versions of make < v4.3, Paul Moore
• [PATCH] selinux: don't use make's grouped targets feature yet, Paul Moore
  • Re: [PATCH] selinux: don't use make's grouped targets feature yet, Paul Moore
  • Re: [PATCH] selinux: don't use make's grouped targets feature yet, Luiz Capitulino
    • Re: [PATCH] selinux: don't use make's grouped targets feature yet, Paul Moore
  • Re: [PATCH] selinux: don't use make's grouped targets feature yet, Erwan Velu
    • Re: [PATCH] selinux: don't use make's grouped targets feature yet, Paul Moore
• [PATCH] python/sepolicy: Fix template for confined user policy modules, Vit Mojzis
  • Re: [PATCH] python/sepolicy: Fix template for confined user policy modules, Petr Lautrbach
    • Re: [PATCH] python/sepolicy: Fix template for confined user policy modules, Petr Lautrbach
• [PATCH 0/8] checkpolicy, libsepol: add prefix/suffix matching to filename type transitions, Juraj Marcin
  • [PATCH 1/8] checkpolicy, libsepol: move transition to separate structure in avtab, Juraj Marcin
  • [PATCH 3/8] checkpolicy, libsepol: move filename transition rules to avrule, Juraj Marcin
  • [PATCH 4/8] libsepol: implement new kernel binary format for avtab, Juraj Marcin
  • [PATCH 2/8] checkpolicy, libsepol: move filename transitions to avtab, Juraj Marcin
  • [PATCH 5/8] libsepol: implement new module binary format of avrule, Juraj Marcin
  • [PATCH 6/8] checkpolicy, libsepol: add prefix/suffix support to kernel policy, Juraj Marcin
  • [PATCH 7/8] checkpolicy, libsepol: add prefix/suffix support to module policy, Juraj Marcin
    • Re: [PATCH 7/8] checkpolicy, libsepol: add prefix/suffix support to module policy, James Carter
      • Re: [PATCH 7/8] checkpolicy, libsepol: add prefix/suffix support to module policy, Ondrej Mosnacek
        • Re: [PATCH 7/8] checkpolicy, libsepol: add prefix/suffix support to module policy, James Carter
  • [PATCH 8/8] libsepol/cil: add support for prefix/suffix filename transtions to CIL, Juraj Marcin
    • Re: [PATCH 8/8] libsepol/cil: add support for prefix/suffix filename transtions to CIL, James Carter
  • Re: [PATCH 0/8] checkpolicy, libsepol: add prefix/suffix matching to filename type transitions, James Carter
    • Re: [PATCH 0/8] checkpolicy, libsepol: add prefix/suffix matching to filename type transitions, Juraj Marcin
• [PATCH 0/5] selinux: add prefix/suffix matching to filename type transitions, Juraj Marcin
  • [PATCH 1/5] selinux: move transition to separate structure in avtab_datum, Juraj Marcin
  • [PATCH 2/5] selinux: move filename transitions to avtab, Juraj Marcin
    • Re: [PATCH 2/5] selinux: move filename transitions to avtab, Christian Göttsche
    • Re: [PATCH 2/5] selinux: move filename transitions to avtab, Christian Göttsche
      • Re: [PATCH 2/5] selinux: move filename transitions to avtab, Ondrej Mosnacek
      • Re: [PATCH 2/5] selinux: move filename transitions to avtab, Juraj Marcin
  • [PATCH 3/5] selinux: implement new binary format for filename transitions in avtab, Juraj Marcin
  • [PATCH 4/5] selinux: filename transitions move tests, Juraj Marcin
  • [PATCH 5/5] selinux: add prefix/suffix matching support to filename type transitions, Juraj Marcin
    • Re: [PATCH 5/5] selinux: add prefix/suffix matching support to filename type transitions, Stephen Smalley
      • Re: [PATCH 5/5] selinux: add prefix/suffix matching support to filename type transitions, Stephen Smalley
  • Re: [PATCH 0/5] selinux: add prefix/suffix matching to filename type transitions, Paul Moore
    • Re: [PATCH 0/5] selinux: add prefix/suffix matching to filename type transitions, Juraj Marcin
      • Re: [PATCH 0/5] selinux: add prefix/suffix matching to filename type transitions, Paul Moore
        • Re: [PATCH 0/5] selinux: add prefix/suffix matching to filename type transitions, Juraj Marcin
          • Re: [PATCH 0/5] selinux: add prefix/suffix matching to filename type transitions, Paul Moore
            • Re: [PATCH 0/5] selinux: add prefix/suffix matching to filename type transitions, Juraj Marcin
              • Re: [PATCH 0/5] selinux: add prefix/suffix matching to filename type transitions, Stephen Smalley
                • Re: [PATCH 0/5] selinux: add prefix/suffix matching to filename type transitions, Juraj Marcin
                  • Re: [PATCH 0/5] selinux: add prefix/suffix matching to filename type transitions, Stephen Smalley
                    • Re: [PATCH 0/5] selinux: add prefix/suffix matching to filename type transitions, James Carter
                      • Re: [PATCH 0/5] selinux: add prefix/suffix matching to filename type transitions, Juraj Marcin
• [PATCH] LSM: Infrastructure management of the sock, GONG, Ruiqi
  • Re: [PATCH] LSM: Infrastructure management of the sock, Casey Schaufler
    • Re: [PATCH] LSM: Infrastructure management of the sock, Paul Moore
      • Re: [PATCH] LSM: Infrastructure management of the sock, Casey Schaufler
    • Re: [PATCH] LSM: Infrastructure management of the sock, GONG, Ruiqi
• [PATCH 1/4] dismod: add --help option, Masatake YAMATO
  • [PATCH 2/4] dismod: delete an unnecessary empty line, Masatake YAMATO
  • [PATCH 3/4] dismod: handle EOF in user interaction, Masatake YAMATO
  • [PATCH 4/4] dismod: add --actions option for non-interactive use, Masatake YAMATO
  • Re: [PATCH 1/4] dismod: add --help option, James Carter
    • Re: [PATCH 1/4] dismod: add --help option, Masatake YAMATO
    • Re: [PATCH 1/4] dismod: add --help option, James Carter
• [PATCH] Makefile: expand ~ in DESTDIR, Masatake YAMATO
  • Re: [PATCH] Makefile: expand ~ in DESTDIR, Petr Lautrbach
    • Re: [PATCH] Makefile: expand ~ in DESTDIR, Christian Göttsche
      • Re: [PATCH] Makefile: expand ~ in DESTDIR, Petr Lautrbach
  • Re: [PATCH] Makefile: expand ~ in DESTDIR, Masatake YAMATO
• [PATCH PR#394] semanage: list all ports even if not attributed with port_type, Topi Miettinen
  • Re: [PATCH PR#394] semanage: list all ports even if not attributed with port_type, Petr Lautrbach
• [PATCH] python/sepolicy: Add/remove user even when SELinux is disabled, Vit Mojzis
  • Re: [PATCH] python/sepolicy: Add/remove user even when SELinux is disabled, Petr Lautrbach
    • Re: [PATCH] python/sepolicy: Add/remove user even when SELinux is disabled, Petr Lautrbach
• [PATCH] selinux: make labeled NFS work when mounted before policy load, Ondrej Mosnacek
• [PATCH] selinux: cleanup exit_sel_fs() declaration, Xiu Jianfeng
  • Re: [PATCH] selinux: cleanup exit_sel_fs() declaration, Paul Moore
• ANN: SELinux repository changes, Paul Moore
• [PATCH 1/5] policycoreutils: Add examples to man pages, Vit Mojzis
  • [PATCH 2/5] python/sepolicy: Improve man pages, Vit Mojzis
    • Re: [PATCH 2/5] python/sepolicy: Improve man pages, Petr Lautrbach
  • [PATCH 3/5] sandbox: Add examples to man pages, Vit Mojzis
  • [PATCH 5/5] libselinux: Add examples to man pages, Vit Mojzis
    • Re: [PATCH 5/5] libselinux: Add examples to man pages, Petr Lautrbach
      • [PATCH v2 1/5] policycoreutils: Add examples to man pages, Vit Mojzis
        • [PATCH v2 5/5] libselinux: Add examples to man pages, Vit Mojzis
        • [PATCH v2 2/5] python/sepolicy: Improve man pages, Vit Mojzis
        • [PATCH v2 3/5] sandbox: Add examples to man pages, Vit Mojzis
        • [PATCH v2 4/5] checkpolicy: Add examples to man pages, Vit Mojzis
        • Re: [PATCH v2 1/5] policycoreutils: Add examples to man pages, Petr Lautrbach
          • Re: [PATCH v2 1/5] policycoreutils: Add examples to man pages, James Carter
  • [PATCH 4/5] checkpolicy: Add examples to man pages, Vit Mojzis
    • Re: [PATCH 4/5] checkpolicy: Add examples to man pages, Petr Lautrbach
  • Re: [PATCH 1/5] policycoreutils: Add examples to man pages, Petr Lautrbach
• [PATCH 1/4] python: improve format strings for proper localization, Petr Lautrbach
  • [PATCH 3/4] semanage: Drop unnecessary import from seobject, Petr Lautrbach
  • [PATCH 2/4] python/semanage: Drop hard formating from localized strings, Petr Lautrbach
    • Re: [PATCH 2/4] python/semanage: Drop hard formating from localized strings, Vit Mojzis
  • [PATCH 4/4] python: update python.pot, Petr Lautrbach
  • Re: [PATCH 1/4] python: improve format strings for proper localization, Vit Mojzis
    • [no subject], Petr Lautrbach
      • [PATCH v2 2/4] python: Drop hard formating from localized strings, Petr Lautrbach
      • [PATCH v2 3/4] semanage: Drop unnecessary import from seobject, Petr Lautrbach
      • [PATCH v2 1/4] python: improve format strings for proper localization, Petr Lautrbach
        • Re: [PATCH v2 1/4] python: improve format strings for proper localization, Vit Mojzis
      • [PATCH v2 4/4] python: update python.pot, Petr Lautrbach
        • [no subject], Petr Lautrbach
          • [PATCH v3 1/4] python: improve format strings for proper localization, Petr Lautrbach
          • [PATCH v3 2/4] python: Drop hard formating from localized strings, Petr Lautrbach
          • [PATCH v3 3/4] semanage: Drop unnecessary import from seobject, Petr Lautrbach
          • [PATCH v3 4/4] python: update python.pot, Petr Lautrbach
            • [no subject], Petr Lautrbach
              • [PATCH v4 2/4] python: Drop hard formating from localized strings, Petr Lautrbach
              • [PATCH v4 3/4] semanage: Drop unnecessary import from seobject, Petr Lautrbach
              • [PATCH v4 1/4] python: improve format strings for proper localization, Petr Lautrbach
              • [PATCH v4 4/4] python: update python.pot, Petr Lautrbach
                • Re: [PATCH v4 4/4] python: update python.pot, Vit Mojzis
                  • Re: [PATCH v4 4/4] python: update python.pot, Petr Lautrbach
                    • Re: [PATCH v4 4/4] python: update python.pot, James Carter
                      • Re: [PATCH v4 4/4] python: update python.pot, James Carter
• [RFC PATCH] selinux: TESTING ONLY, PLEASE IGNORE, Paul Moore
  • Re: [PATCH RFC] selinux: TESTING ONLY, PLEASE IGNORE, Paul Moore
• [RFC PATCH 1/4] semodule_expand: update, Christian Göttsche
  • [RFC PATCH 2/4] semodule_link: update, Christian Göttsche
    • Re: [RFC PATCH 2/4] semodule_link: update, James Carter
  • [RFC PATCH 3/4] semodule_package: update, Christian Göttsche
    • Re: [RFC PATCH 3/4] semodule_package: update, James Carter
      • Re: [RFC PATCH 3/4] semodule_package: update, James Carter
  • [RFC PATCH 4/4] semodule_unpackage: update, Christian Göttsche
    • Re: [RFC PATCH 4/4] semodule_unpackage: update, James Carter
  • Re: [RFC PATCH 1/4] semodule_expand: update, James Carter
• [RFC PATCH 1/9] libselinux: annotate interfaces with compiler attributes, Christian Göttsche
  • [RFC PATCH 2/9] libselinux: deprecate matchpathcon and compute_user interfaces, Christian Göttsche
    • Re: [RFC PATCH 2/9] libselinux: deprecate matchpathcon and compute_user interfaces, James Carter
  • [RFC PATCH 3/9] libselinux: declare avc_open(3) options parameter const, Christian Göttsche
  • [RFC PATCH 4/9] mcstrans: check getcon(3) and context_range_set(3) for failure, Christian Göttsche
  • [RFC PATCH 5/9] libselinux: explicitly ignore return values, Christian Göttsche
  • [RFC PATCH 7/9] secon: check selinux_raw_to_trans_context(3) for failure, Christian Göttsche
  • [RFC PATCH 6/9] libselinux: ignore internal use of deprecated interfaces, Christian Göttsche
  • [RFC PATCH 8/9] restorecond: check selinux_restorecon(3) for failure, Christian Göttsche
  • [RFC PATCH 9/9] restorecond: drop last matchpathcon call, Christian Göttsche
  • Re: [RFC PATCH 1/9] libselinux: annotate interfaces with compiler attributes, James Carter
• [PATCH 1/4] libsepol: drop message for uncommon error cases, Christian Göttsche
  • [PATCH 4/4] libsepol: replace log_err() by ERR(), Christian Göttsche
  • [PATCH 3/4] libsepol: replace sepol_log_err() by ERR(), Christian Göttsche
  • [PATCH 2/4] libsepol: drop duplicate newline in sepol_log_err() calls, Christian Göttsche
  • Re: [PATCH 1/4] libsepol: drop message for uncommon error cases, James Carter
• [PATCH 1/5] libsepol: validate some object contexts, Christian Göttsche
  • [PATCH 2/5] libsepol: validate old style range trans classes, Christian Göttsche
  • [PATCH 3/5] libsepol: validate: check low category is not bigger than high, Christian Göttsche
  • [PATCH 4/5] libsepol: validate: reject XEN policy with xperm rules, Christian Göttsche
  • [PATCH 5/5] libsepol: expand: skip invalid cat, Christian Göttsche
  • Re: [PATCH 1/5] libsepol: validate some object contexts, James Carter
    • Re: [PATCH 1/5] libsepol: validate some object contexts, James Carter
• [PATCH 1/4] checkpolicy: drop unused token CLONE, Christian Göttsche
  • [PATCH 2/4] checkpolicy: reject condition with bool and tunable in expression, Christian Göttsche
  • [PATCH 3/4] checkpolicy: only set declared permission bits for wildcards, Christian Göttsche
  • [PATCH 4/4] libsepol: dump non-mls validatetrans rules as such, Christian Göttsche
  • Re: [PATCH 1/4] checkpolicy: drop unused token CLONE, James Carter
    • Re: [PATCH 1/4] checkpolicy: drop unused token CLONE, James Carter
• [RFC PATCH v2] fs/xattr: add *at family syscalls, Christian Göttsche