Security Enhanced Linux (SELINUX)
[Prev Page][Next Page]
- Re: cgroup2 labeling question, (continued)
- [PATCH] selinux: remove the runtime disable functionality,
Paul Moore
- [PATCH v2] selinux: remove the 'checkreqprot' functionality,
Paul Moore
- [PATCH] selinux: remove the 'checkreqprot' functionality,
Paul Moore
- [PATCH v7 10/11] SELinux: Add selfattr hooks,
Casey Schaufler
- Re: [PATCH v2] selinux: stop passing selinux_state pointers and their offspring, Paul Moore
- [PATCH testsuite] tests/atsecure: avoid running bash under test domains,
Ondrej Mosnacek
- [RFC PATCH v2] selinux: cache access vector decisions in the inode security blob,
Stephen Smalley
- [PATCH v8 0/6] evm: Do HMAC of multiple per LSM xattrs for new inodes,
Roberto Sassu
- Re: [PATCH net-next v2] scm: fix MSG_CTRUNC setting condition for SO_PASSSEC,
Paul Moore
- [RFC PATCH] selinux: cache access vector decisions in the inode security blob, Stephen Smalley
- [PATCH testsuite] defconfig: add FAT and GRE config options,
Stephen Smalley
- [RFC PATCH 0/9 v2] Add CIL Deny Rule,
James Carter
- [RFC PATCH 2/9 v2] libsepol/cil: Add cil_list_is_empty macro, James Carter
- [RFC PATCH 1/9 v2] libsepol/cil: Parse and add deny rule to AST, but do not process, James Carter
- [RFC PATCH 3/9 v2] libsepol/cil: Add cil_tree_node_remove function, James Carter
- [RFC PATCH 5/9 v2] libsepol/cil: Add cil_write_post_ast function, James Carter
- [RFC PATCH 6/9 v2] libsepol: Export the cil_write_post_ast function, James Carter
- [RFC PATCH 7/9 v2] secilc/secil2tree: Add option to write CIL AST after post processing, James Carter
- [RFC PATCH 4/9 v2] libsepol/cil: Process deny rules, James Carter
- [RFC PATCH 9/9 v2] secilc/docs: Add deny rule to CIL documentation, James Carter
- [RFC PATCH 8/9 v2] secilc/test: Add deny rule tests, James Carter
- Re: [PATCH] selinux: stop passing selinux_state pointers and their offspring,
Paul Moore
- [PATCH userspace] libsemanage: include more parameters in the module checksum,
Ondrej Mosnacek
- [PATCH v3 0/3] Improve efficiency of detecting duplicate in libselinux,
wanghuizhao
- [RFC PATCH] selinux: uninline unlikely parts of avc_has_perm_noaudit(),
Paul Moore
- [PATCH 00/28] security: Move IMA and EVM to the LSM infrastructure,
Roberto Sassu
- [PATCH 12/28] fs: Fix description of vfs_tmpfile(), Roberto Sassu
- [PATCH 13/28] security: Align inode_setattr hook definition with EVM, Roberto Sassu
- [PATCH 14/28] security: Introduce inode_post_setattr hook, Roberto Sassu
- [PATCH 15/28] security: Introduce inode_post_removexattr hook, Roberto Sassu
- [PATCH 16/28] security: Introduce file_post_open hook, Roberto Sassu
- [PATCH 17/28] security: Introduce file_pre_free_security hook, Roberto Sassu
- [PATCH 18/28] security: Introduce path_post_mknod hook, Roberto Sassu
- [PATCH 19/28] security: Introduce inode_post_create_tmpfile hook, Roberto Sassu
- [PATCH 20/28] security: Introduce inode_post_set_acl hook, Roberto Sassu
- [PATCH 23/28] security: Introduce LSM_ORDER_LAST, Roberto Sassu
- [PATCH 26/28] evm: Move to LSM infrastructure, Roberto Sassu
- [PATCH 25/28] ima: Move IMA-Appraisal to LSM infrastructure, Roberto Sassu
- [PATCH 24/28] ima: Move to LSM infrastructure, Roberto Sassu
- [PATCH 28/28] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache, Roberto Sassu
- [PATCH 05/28] ima: Align ima_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH 04/28] ima: Align ima_file_mprotect() definition with LSM infrastructure, Roberto Sassu
- [PATCH 10/28] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH 02/28] ima: Align ima_post_path_mknod() definition with LSM infrastructure, Roberto Sassu
- [PATCH 08/28] evm: Align evm_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH 06/28] ima: Align ima_inode_removexattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH 01/28] ima: Align ima_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH 09/28] evm: Align evm_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH 07/28] ima: Align ima_post_read_file() definition with LSM infrastructure, Roberto Sassu
- [PATCH 11/28] evm: Complete description of evm_inode_setattr(), Roberto Sassu
- [PATCH 03/28] ima: Align ima_post_create_tmpfile() definition with LSM infrastructure, Roberto Sassu
- [PATCH 21/28] security: Introduce inode_post_remove_acl hook, Roberto Sassu
- [PATCH 22/28] security: Introduce key_post_create_or_update hook, Roberto Sassu
- [PATCH 27/28] integrity: Move integrity functions to the LSM infrastructure, Roberto Sassu
- Re: [PATCH 00/28] security: Move IMA and EVM to the LSM infrastructure, Mimi Zohar
- [PATCH 2/6] libsepol/cil: Add notself and other support to CIL, James Carter
- [PATCH testsuite] tests/file: make the SIGIO tests work with CONFIG_LEGACY_TIOCSTI=n,
Ondrej Mosnacek
- [PATCH testsuite 0/3] Infiniband test fixes/improvements,
Ondrej Mosnacek
- ANN: SELinux userspace 3.5 release, Jason Zaman
- What's wrong with this usage of semanage fcontext?,
Alan Stern
- [UTIL-LINUX PATCH] mount: add rootcontext=@target, Christian Göttsche
- SELinux pull request for Linux v6.3, Paul Moore
- [PATCH v2] kernel/sys.c: fix and improve control flow in __sys_setres[ug]id(),
Ondrej Mosnacek
- [PATCH] selinux: allow to opt-out from skipping kernel sockets in sock_has_perm(),
Ondrej Mosnacek
- [PATCH] kernel/sys.c: fix and improve control flow in __sys_setres[ug]id(),
Ondrej Mosnacek
- ANN: SELinux userspace 3.5-rc3 release, Jason Zaman
- selinux-testsuite failures, CONFIG_LEGACY_TIOCSTI, and recent Rawhide builds,
Paul Moore
- [PATCH 0/2] Improve efficiency of detecting duplicate in libselinux,
wanghuizhao
- ANN: SETools 4.4.1,
Chris PeBenito
- [PATCH 1/3] libselinux: drop obsolete optimization flag,
Christian Göttsche
- Looking at profile data once again - avc lookup,
Linus Torvalds
- [PATCH v2 0/6] introduce vm_flags modifier functions,
Suren Baghdasaryan
- [PATCH] python/sepolicy: Cache conditional rule queries,
Vit Mojzis
- selinux-testsuite broken pipe noise,
Paul Moore
[PATCH net-next v6 0/2] Add IP_LOCAL_PORT_RANGE socket option,
Jakub Sitnicki
[PATCH net-next v5 0/2] Add IP_LOCAL_PORT_RANGE socket option,
Jakub Sitnicki
[PATCH v2 0/4] Track exported dma-buffers with memcg,
T.J. Mercier
[PATCH net-next v4 0/2] Add IP_LOCAL_PORT_RANGE socket option,
Jakub Sitnicki
[RFC PATCH] libselinux: improve performance with pcre matches,
Carlo Marcelo Arenas Belón
[ANNOUNCE] Linux Security Summit North Americ (LSS-NA) CfP, James Morris
[PATCH net-next v3 0/2] Add IP_LOCAL_PORT_RANGE socket option,
Jakub Sitnicki
[PATCH] mcstrans: preserve runtime directory,
Christian Göttsche
[TESTSUITE PATCH] policy: drop usage of files_list_pids(),
Christian Göttsche
ANN: SELinux userspace 3.5-rc2 release, Jason Zaman
[PATCH] ci: bump to python 3.11 in GitHub Actions,
Jason Zaman
Re: [PATCH net-next 06/10] cipso_ipv4: use iph_set_totlen in skbuff_setattr,
Paul Moore
[PATCH v2 RESEND] libselinux: Workaround for heap overhead of pcre,
Inseob Kim
[PATCH testsuite] tests/filesystem: use native quota support for ext4,
Ondrej Mosnacek
[PATCH 0/4] Track exported dma-buffers with memcg,
T.J. Mercier
[PATCH testsuite] tests/keys: remove extraneous zero byte from the DH prime,
Ondrej Mosnacek
[PATCH] libselinux: add getpidprevcon,
Christian Göttsche
[PATCH] python/sepolicy: add missing booleans to man pages,
Vit Mojzis
[PATCH 1/2] libsepol: do not write empty class definitions,
Christian Göttsche
[PATCH] sepolicy: Make generated boolean descriptions translatable,
Petr Lautrbach
[PATCH v2] libselinux: Workaround for heap overhead of pcre, Inseob Kim
ANN: SELinux userspace 3.5-rc1 release, Jason Zaman
[PATCH 1/2] libselinux: Ignore installed when installing python bindings to DESTDIR,
Jason Zaman
[PATCH] libsepol: reject attributes in type av rules for kernel policies,
Christian Göttsche
[PATCH RESEND 0/2] Provide matching audit timestamp in the SELinux AVC trace event,
Ondrej Mosnacek
[PATCH 0/2] Provide matching audit timestamp in the SELinux AVC trace event,
Ondrej Mosnacek
[PATCH v2 0/2] lsm: introduce and use security_mptcp_add_subflow(),
Paolo Abeni
[PATCH] libselinux: Workaround for heap overhead of pcre,
Inseob Kim
ANN: a new release of The SELinux Notebook, Paul Moore
[PATCH] notebook: make use of "allowlist" instead of "whitelist", Paul Moore
[PATCH] notebook: fix broken sepgsql.googlecode.com URL, Paul Moore
Re: memory leak in inet_create,
Willy Tarreau
[PATCH] sepolicy: fix a spelling mistake,
kkz
[RFC PATCH 0/9] Add CIL Deny Rule,
James Carter
- [RFC PATCH 2/9] libsepol/cil: Add cil_list_is_empty macro, James Carter
- [RFC PATCH 1/9] libsepol/cil: Parse and add deny rule to AST, but do not process, James Carter
- [RFC PATCH 6/9] libsepol: Export the cil_write_post_ast function, James Carter
- [RFC PATCH 9/9] secilc/docs: Add deny rule to CIL documentation, James Carter
- [RFC PATCH 3/9] libsepol/cil: Add cil_tree_remove_node function, James Carter
- [RFC PATCH 7/9] secilc/secil2tree: Add option to write CIL AST after post processing, James Carter
- [RFC PATCH 4/9] libsepol/cil: Process deny rules, James Carter
- [RFC PATCH 8/9] secilc/test: Add a deny rule test, James Carter
- [RFC PATCH 5/9] libsepol/cil: Add cil_write_post_ast function, James Carter
- Re: [RFC PATCH 0/9] Add CIL Deny Rule, Daniel Burgener
[PATCH 0/2] lsm: introduce and use security_mptcp_add_subflow(),
Paolo Abeni
[PATCH 0/1][RFC] SELINUX: Remove obsolete deferred inode security,
Alexander Kozhevnikov
[GIT PULL] SELinux patches for v6.2,
Paul Moore
[PATCH] sepolicy: Call os.makedirs() with exist_ok=True,
Petr Lautrbach
BUG: selinux-testsuite failures in tests/cap_userns,
Paul Moore
[PATCH testsuite] policy: allow user_namespace::create where appropriate,
Ondrej Mosnacek
[RFC] IMA LSM based rule race condition issue on 4.19 LTS,
Guozihua (Scott)
[PATCH 1/2] sepolicy: Switch main selection menu to GtkPopover,
Petr Lautrbach
[PATCH testsuite 0/4] Bump Fedora versions in CI,
Ondrej Mosnacek
[PATCH mptcp-net] mptcp: fix LSM labeling for passive msk,
Paolo Abeni
Intent to release SELinux userspace 3.5-rc1,
Jason Zaman
[PATCH 1/3] libselinux: fix potential NULL reference and memory leak in audit2why,
Jie Lu
[PATCH security-next] selinux: use sysfs_emit() to instead of scnprintf(),
ye.xingchen
Broken SELinux/LSM labeling with MPTCP and accept(2),
Ondrej Mosnacek
[PATCH v7 0/6] evm: Do HMAC of multiple per LSM xattrs for new inodes,
Roberto Sassu
ANN/RFC: SELinux Reference Policy 3 pre-alpha, Chris PeBenito
[PATCH v2] Use `pip install` instead of `setup.py install`,
Petr Lautrbach
[PATCH] libselinux:add check for malloc,
Jie Lu
semanage export does not distinguish between --modify and --add, Vit Mojzis
[RFC PATCH v4 0/6] not-self neverallow support,
Christian Göttsche
[PATCH 1/2] checkpolicy: Improve error message for type bounds,
Vit Mojzis
secilc genfscon parsing error,
Matthew Sheets
[PATCH v6 0/6] evm: Do HMAC of multiple per LSM xattrs for new inodes,
Roberto Sassu
[Index of Archives]
[Selinux Refpolicy]
[Fedora Users]
[Fedora Desktop]
[Kernel]
[KDE Users]
[Gnome Users]
