Security Enhanced Linux (SELINUX)
[Prev Page][Next Page]
- [TESTSUITE PATCH] README.md: update dependencies,
Christian Göttsche
- [PATCH] libsepol/cil: Fix class permission verification in CIL,
James Carter
- [PATCH LSM 0/2] security: SELinux/LSM label with MPTCP and accept,
Matthieu Baerts
- Re: [PATCH] mm/mmap: Map MAP_STACK to VM_STACK,
Matthew Wilcox
- [ANNOUNCE] [CFP] Linux Security Summit Europe (LSS-EU), Reshetova, Elena
- [PATCH 0/9 v3] Add CIL Deny Rule,
James Carter
- [PATCH 2/9 v3] libsepol/cil: Add cil_list_is_empty macro, James Carter
- [PATCH 1/9 v3] libsepol/cil: Parse and add deny rule to AST, but do not process, James Carter
- [PATCH 3/9 v3] libsepol/cil: Add cil_tree_node_remove function, James Carter
- [PATCH 5/9 v3] libsepol/cil: Add cil_write_post_ast function, James Carter
- [PATCH 6/9 v3] libsepol: Export the cil_write_post_ast function, James Carter
- [PATCH 7/9 v3] secilc/secil2tree: Add option to write CIL AST after post processing, James Carter
- [PATCH 4/9 v3] libsepol/cil: Process deny rules, James Carter
- [PATCH 9/9 v3] secilc/docs: Add deny rule to CIL documentation, James Carter
- [PATCH 8/9 v3] secilc/test: Add deny rule tests, James Carter
- Re: [PATCH 0/9 v3] Add CIL Deny Rule, Daniel Burgener
- [PATCH v2] selinux: ensure av_permissions.h is built when needed,
Paul Moore
- [PATCH 0/6] Add support for notself and other to CIL,
James Carter
- [PATCH] selinux: ensure av_permissions.h is built when needed,
Paul Moore
- [PATCH] selinux: fix Makefile dependencies of flask.h,
Ondrej Mosnacek
- portcon tcp 80 change type,
Etienne Champetier
- [PATCH v8 10/11] SELinux: Add selfattr hooks, Casey Schaufler
- [PATCH] selinux: stop returning node from avc_insert,
Stephen Smalley
- [PATCH] libsemanage: fix memory leak in semanage_user_roles,
Christian Göttsche
- [PATCH] make avc audit line only have one space,
Steven Moreland
- [PATCH 1/3] checkpolicy: add option to skip checking neverallow rules,
Christian Göttsche
- Possible bug in policy compilation,
Jonathan Strauss
- [PATCH v10 0/4] evm: Do HMAC of multiple per LSM xattrs for new inodes,
Roberto Sassu
- sesearch --neverallow,
Petr Lautrbach
- [PATCH v9 0/4] evm: Do HMAC of multiple per LSM xattrs for new inodes,
Roberto Sassu
- Potential regression/bug in net/mlx5 driver,
Paul Moore
- Re: [PATCH v2] selinux: Adjust implementation of security_get_bools(),
Paul Moore
[PATCH v2] selinux: clean up dead code after removing runtime disable,
Lukas Bulwahn
[PATCH] selinux: clean up dead code after removing runtime disable,
Lukas Bulwahn
[PATCH] selinux: update the file list in MAINTAINERS,
Paul Moore
[PATCH userspace] scripts/ci: install rdma-core-devel for selinux-testsuite,
Ondrej Mosnacek
cgroup2 labeling question,
Dominick Grift
[PATCH] selinux: remove the runtime disable functionality,
Paul Moore
[PATCH v2] selinux: remove the 'checkreqprot' functionality,
Paul Moore
[PATCH] selinux: remove the 'checkreqprot' functionality,
Paul Moore
[PATCH v7 10/11] SELinux: Add selfattr hooks,
Casey Schaufler
Re: [PATCH v2] selinux: stop passing selinux_state pointers and their offspring, Paul Moore
[PATCH testsuite] tests/atsecure: avoid running bash under test domains,
Ondrej Mosnacek
[RFC PATCH v2] selinux: cache access vector decisions in the inode security blob,
Stephen Smalley
[PATCH v8 0/6] evm: Do HMAC of multiple per LSM xattrs for new inodes,
Roberto Sassu
Re: [PATCH net-next v2] scm: fix MSG_CTRUNC setting condition for SO_PASSSEC,
Paul Moore
[RFC PATCH] selinux: cache access vector decisions in the inode security blob, Stephen Smalley
[PATCH testsuite] defconfig: add FAT and GRE config options,
Stephen Smalley
[RFC PATCH 0/9 v2] Add CIL Deny Rule,
James Carter
- [RFC PATCH 2/9 v2] libsepol/cil: Add cil_list_is_empty macro, James Carter
- [RFC PATCH 1/9 v2] libsepol/cil: Parse and add deny rule to AST, but do not process, James Carter
- [RFC PATCH 3/9 v2] libsepol/cil: Add cil_tree_node_remove function, James Carter
- [RFC PATCH 5/9 v2] libsepol/cil: Add cil_write_post_ast function, James Carter
- [RFC PATCH 6/9 v2] libsepol: Export the cil_write_post_ast function, James Carter
- [RFC PATCH 7/9 v2] secilc/secil2tree: Add option to write CIL AST after post processing, James Carter
- [RFC PATCH 4/9 v2] libsepol/cil: Process deny rules, James Carter
- [RFC PATCH 9/9 v2] secilc/docs: Add deny rule to CIL documentation, James Carter
- [RFC PATCH 8/9 v2] secilc/test: Add deny rule tests, James Carter
Re: [PATCH] selinux: stop passing selinux_state pointers and their offspring,
Paul Moore
[PATCH userspace] libsemanage: include more parameters in the module checksum,
Ondrej Mosnacek
[PATCH v3 0/3] Improve efficiency of detecting duplicate in libselinux,
wanghuizhao
[RFC PATCH] selinux: uninline unlikely parts of avc_has_perm_noaudit(),
Paul Moore
[PATCH 00/28] security: Move IMA and EVM to the LSM infrastructure,
Roberto Sassu
- [PATCH 12/28] fs: Fix description of vfs_tmpfile(), Roberto Sassu
- [PATCH 13/28] security: Align inode_setattr hook definition with EVM, Roberto Sassu
- [PATCH 14/28] security: Introduce inode_post_setattr hook, Roberto Sassu
- [PATCH 15/28] security: Introduce inode_post_removexattr hook, Roberto Sassu
- [PATCH 16/28] security: Introduce file_post_open hook, Roberto Sassu
- [PATCH 17/28] security: Introduce file_pre_free_security hook, Roberto Sassu
- [PATCH 18/28] security: Introduce path_post_mknod hook, Roberto Sassu
- [PATCH 19/28] security: Introduce inode_post_create_tmpfile hook, Roberto Sassu
- [PATCH 20/28] security: Introduce inode_post_set_acl hook, Roberto Sassu
- [PATCH 23/28] security: Introduce LSM_ORDER_LAST, Roberto Sassu
- [PATCH 26/28] evm: Move to LSM infrastructure, Roberto Sassu
- [PATCH 25/28] ima: Move IMA-Appraisal to LSM infrastructure, Roberto Sassu
- [PATCH 24/28] ima: Move to LSM infrastructure, Roberto Sassu
- [PATCH 28/28] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Roberto Sassu
- [PATCH 05/28] ima: Align ima_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH 04/28] ima: Align ima_file_mprotect() definition with LSM infrastructure, Roberto Sassu
- [PATCH 10/28] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH 02/28] ima: Align ima_post_path_mknod() definition with LSM infrastructure, Roberto Sassu
- [PATCH 08/28] evm: Align evm_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH 06/28] ima: Align ima_inode_removexattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH 01/28] ima: Align ima_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH 09/28] evm: Align evm_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH 07/28] ima: Align ima_post_read_file() definition with LSM infrastructure, Roberto Sassu
- [PATCH 11/28] evm: Complete description of evm_inode_setattr(), Roberto Sassu
- [PATCH 03/28] ima: Align ima_post_create_tmpfile() definition with LSM infrastructure, Roberto Sassu
- [PATCH 21/28] security: Introduce inode_post_remove_acl hook, Roberto Sassu
- [PATCH 22/28] security: Introduce key_post_create_or_update hook, Roberto Sassu
- [PATCH 27/28] integrity: Move integrity functions to the LSM infrastructure, Roberto Sassu
- Re: [PATCH 00/28] security: Move IMA and EVM to the LSM infrastructure, Mimi Zohar
[PATCH 2/6] libsepol/cil: Add notself and other support to CIL, James Carter
[PATCH testsuite] tests/file: make the SIGIO tests work with CONFIG_LEGACY_TIOCSTI=n,
Ondrej Mosnacek
[PATCH testsuite 0/3] Infiniband test fixes/improvements,
Ondrej Mosnacek
ANN: SELinux userspace 3.5 release, Jason Zaman
What's wrong with this usage of semanage fcontext?,
Alan Stern
[UTIL-LINUX PATCH] mount: add rootcontext=@target, Christian Göttsche
SELinux pull request for Linux v6.3, Paul Moore
[PATCH v2] kernel/sys.c: fix and improve control flow in __sys_setres[ug]id(),
Ondrej Mosnacek
[PATCH] selinux: allow to opt-out from skipping kernel sockets in sock_has_perm(),
Ondrej Mosnacek
[PATCH] kernel/sys.c: fix and improve control flow in __sys_setres[ug]id(),
Ondrej Mosnacek
ANN: SELinux userspace 3.5-rc3 release, Jason Zaman
selinux-testsuite failures, CONFIG_LEGACY_TIOCSTI, and recent Rawhide builds,
Paul Moore
[PATCH 0/2] Improve efficiency of detecting duplicate in libselinux,
wanghuizhao
ANN: SETools 4.4.1,
Chris PeBenito
[PATCH 1/3] libselinux: drop obsolete optimization flag,
Christian Göttsche
Looking at profile data once again - avc lookup,
Linus Torvalds
[PATCH v2 0/6] introduce vm_flags modifier functions,
Suren Baghdasaryan
[PATCH] python/sepolicy: Cache conditional rule queries,
Vit Mojzis
selinux-testsuite broken pipe noise,
Paul Moore
[PATCH net-next v6 0/2] Add IP_LOCAL_PORT_RANGE socket option,
Jakub Sitnicki
[PATCH net-next v5 0/2] Add IP_LOCAL_PORT_RANGE socket option,
Jakub Sitnicki
[PATCH v2 0/4] Track exported dma-buffers with memcg,
T.J. Mercier
[PATCH net-next v4 0/2] Add IP_LOCAL_PORT_RANGE socket option,
Jakub Sitnicki
[RFC PATCH] libselinux: improve performance with pcre matches,
Carlo Marcelo Arenas Belón
[ANNOUNCE] Linux Security Summit North Americ (LSS-NA) CfP, James Morris
[PATCH net-next v3 0/2] Add IP_LOCAL_PORT_RANGE socket option,
Jakub Sitnicki
[PATCH] mcstrans: preserve runtime directory,
Christian Göttsche
[TESTSUITE PATCH] policy: drop usage of files_list_pids(),
Christian Göttsche
ANN: SELinux userspace 3.5-rc2 release, Jason Zaman
[PATCH] ci: bump to python 3.11 in GitHub Actions,
Jason Zaman
Re: [PATCH net-next 06/10] cipso_ipv4: use iph_set_totlen in skbuff_setattr,
Paul Moore
[PATCH v2 RESEND] libselinux: Workaround for heap overhead of pcre,
Inseob Kim
[PATCH testsuite] tests/filesystem: use native quota support for ext4,
Ondrej Mosnacek
[PATCH 0/4] Track exported dma-buffers with memcg,
T.J. Mercier
[PATCH testsuite] tests/keys: remove extraneous zero byte from the DH prime,
Ondrej Mosnacek
[PATCH] libselinux: add getpidprevcon,
Christian Göttsche
[PATCH] python/sepolicy: add missing booleans to man pages,
Vit Mojzis
[PATCH 1/2] libsepol: do not write empty class definitions,
Christian Göttsche
[PATCH] sepolicy: Make generated boolean descriptions translatable,
Petr Lautrbach
[PATCH v2] libselinux: Workaround for heap overhead of pcre, Inseob Kim
ANN: SELinux userspace 3.5-rc1 release, Jason Zaman
[PATCH 1/2] libselinux: Ignore installed when installing python bindings to DESTDIR,
Jason Zaman
[PATCH] libsepol: reject attributes in type av rules for kernel policies,
Christian Göttsche
[PATCH RESEND 0/2] Provide matching audit timestamp in the SELinux AVC trace event,
Ondrej Mosnacek
[PATCH 0/2] Provide matching audit timestamp in the SELinux AVC trace event,
Ondrej Mosnacek
[PATCH v2 0/2] lsm: introduce and use security_mptcp_add_subflow(),
Paolo Abeni
[PATCH] libselinux: Workaround for heap overhead of pcre,
Inseob Kim
[Index of Archives]
[Selinux Refpolicy]
[Fedora Users]
[Fedora Desktop]
[Kernel]
[KDE Users]
[Gnome Users]
