Show patches with: Archived = No       |   9494 patches
« 1 2 3 4 … 94 95 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[RFC,6/6] tomoyo: explicitly skip mediation of O_PATH file descriptors fs, lsm: mediate O_PATH fd creation in file_open hook - - - --- 2025-03-12 Ryan Lee New
[RFC,5/6] smack: explicitly skip mediation of O_PATH file descriptors fs, lsm: mediate O_PATH fd creation in file_open hook - - - --- 2025-03-12 Ryan Lee New
[RFC,4/6] selinux: explicitly skip mediation of O_PATH file descriptors fs, lsm: mediate O_PATH fd creation in file_open hook - - - --- 2025-03-12 Ryan Lee New
[RFC,3/6] landlock: explicitly skip mediation of O_PATH file descriptors fs, lsm: mediate O_PATH fd creation in file_open hook - - - --- 2025-03-12 Ryan Lee New
[RFC,2/6] apparmor: explicitly skip mediation of O_PATH file descriptors fs, lsm: mediate O_PATH fd creation in file_open hook - - - --- 2025-03-12 Ryan Lee New
[RFC,1/6] fs: invoke LSM file_open hook in do_dentry_open for O_PATH fds as well fs, lsm: mediate O_PATH fd creation in file_open hook - - - --- 2025-03-12 Ryan Lee New
selinux: get netlabel_wildcard policycap from policy instead of cache selinux: get netlabel_wildcard policycap from policy instead of cache 1 - - --- 2025-03-12 Christian Göttsche New
[v2] selinux: support wildcard match in genfscon [v2] selinux: support wildcard match in genfscon - - - --- 2025-03-11 Takaya Saeki New
[V2] selinux: access sid under READ/WRITE_ONCE [V2] selinux: access sid under READ/WRITE_ONCE - - - --- 2025-03-11 Edward Adam Davis New
[v7,bpf-next,2/2] selftests/bpf: Add a kernel flag test for LSM bpf hook security: Propagate caller information in bpf hooks 1 - - --- 2025-03-10 Blaise Boscaccy New
[v7,bpf-next,1/2] security: Propagate caller information in bpf hooks security: Propagate caller information in bpf hooks 2 - - --- 2025-03-10 Blaise Boscaccy New
mailmap: map my old email addresses mailmap: map my old email addresses - - - --- 2025-03-10 Stephen Smalley pcmoore Accepted
selinux: read and write sid under lock selinux: read and write sid under lock - - - --- 2025-03-09 Edward Adam Davis pcmoore Changes Requested
[v6,bpf-next,2/2] selftests/bpf: Add a kernel flag test for LSM bpf hook security: Propagate caller information in bpf hooks - - - --- 2025-03-08 Blaise Boscaccy pcmoore Handled Elsewhere
[v6,bpf-next,1/2] security: Propagate caller information in bpf hooks security: Propagate caller information in bpf hooks 2 - - --- 2025-03-08 Blaise Boscaccy pcmoore Handled Elsewhere
[v5,bpf-next,2/2] selftests/bpf: Add a kernel flag test for LSM bpf hook security: Propagate caller information in bpf hooks - - - --- 2025-03-07 Blaise Boscaccy pcmoore Handled Elsewhere
[v5,bpf-next,1/2] security: Propagate caller information in bpf hooks security: Propagate caller information in bpf hooks 2 - - --- 2025-03-07 Blaise Boscaccy pcmoore Handled Elsewhere
[v2,6/6] Audit: Add record for multiple object contexts [v2,1/6] Audit: Create audit_stamp structure - - - --- 2025-03-07 Casey Schaufler pcmoore Handled Elsewhere
[v2,5/6] Audit: multiple subject lsm values for netlabel [v2,1/6] Audit: Create audit_stamp structure - - - --- 2025-03-07 Casey Schaufler pcmoore Handled Elsewhere
[v2,4/6] Audit: Add record for multiple task security contexts [v2,1/6] Audit: Create audit_stamp structure - - - --- 2025-03-07 Casey Schaufler pcmoore Handled Elsewhere
[v2,3/6] LSM: security_lsmblob_to_secctx module selection [v2,1/6] Audit: Create audit_stamp structure - - - --- 2025-03-07 Casey Schaufler pcmoore Handled Elsewhere
[v2,2/6] Audit: Allow multiple records in an audit_buffer [v2,1/6] Audit: Create audit_stamp structure - - - --- 2025-03-07 Casey Schaufler pcmoore Handled Elsewhere
[v2,1/6] Audit: Create audit_stamp structure [v2,1/6] Audit: Create audit_stamp structure - - - --- 2025-03-07 Casey Schaufler pcmoore Handled Elsewhere
selinux: Chain up tool resolving errors in install_policy.sh selinux: Chain up tool resolving errors in install_policy.sh - - - --- 2025-03-07 Tim Schumacher pcmoore Accepted
[RFC,2/2] mm/madvise: utilise anon_vma unfaulted flag on guard region install mm: introduce anon_vma flags, reduce kernel allocs - - - --- 2025-03-05 Lorenzo Stoakes pcmoore RFC
[RFC,1/2] mm: introduce anon_vma flags and use wrapper functions mm: introduce anon_vma flags, reduce kernel allocs - - - --- 2025-03-05 Lorenzo Stoakes pcmoore RFC
[v4,bpf-next,2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs security: Propagate caller information in bpf hooks - - - --- 2025-03-04 Blaise Boscaccy pcmoore Handled Elsewhere
[v4,bpf-next,1/2] security: Propagate caller information in bpf hooks security: Propagate caller information in bpf hooks 2 - - --- 2025-03-04 Blaise Boscaccy pcmoore Handled Elsewhere
[1/1] security: Propagate caller information in bpf hooks security: Propagate caller information in bpf hooks 1 - - --- 2025-03-03 Blaise Boscaccy pcmoore Handled Elsewhere
[v16,3/3] binder: generic netlink binder_features flag binder: report txn errors via generic netlink - - - --- 2025-03-03 Li Li pcmoore Changes Requested
[v16,2/3] binder: report txn errors via generic netlink binder: report txn errors via generic netlink - - - --- 2025-03-03 Li Li pcmoore Changes Requested
[v16,1/3] lsm, selinux: Add setup_report permission to binder binder: report txn errors via generic netlink - - - --- 2025-03-03 Li Li pcmoore Changes Requested
selinux: support wildcard network interface names selinux: support wildcard network interface names - - - --- 2025-03-02 Christian Göttsche pcmoore Accepted
[1/1] security: Propagate caller information in bpf hooks v2 security: Propagate caller information in bpf hooks - - - --- 2025-02-28 Blaise Boscaccy pcmoore Handled Elsewhere
Insert -I../../libselinux/include and -L../../libselinux/src into subprograms where needed Insert -I../../libselinux/include and -L../../libselinux/src into subprograms where needed - - - --- 2025-02-27 наб bachradsusi New
Don't inject matchpathcon_filespec_add64() ifdef __x86_64__ Don't inject matchpathcon_filespec_add64() ifdef __x86_64__ - - - --- 2025-02-27 наб bachradsusi New
[v15,3/3] binder: generic netlink binder_features flag binder: report txn errors via generic netlink - - - --- 2025-02-26 Li Li pcmoore Superseded
[v15,2/3] binder: report txn errors via generic netlink binder: report txn errors via generic netlink - - - --- 2025-02-26 Li Li pcmoore Superseded
[v15,1/3] lsm, selinux: Add setup_report permission to binder binder: report txn errors via generic netlink - - - --- 2025-02-26 Li Li pcmoore Superseded
[1/2] libselinux: introduce context_to_str(3) [1/2] libselinux: introduce context_to_str(3) - - - --- 2025-02-26 Christian Göttsche bachradsusi New
[2/2] mcstrans: make use of context_to_str(3) [1/2] libselinux: introduce context_to_str(3) - - - --- 2025-02-26 Christian Göttsche bachradsusi New
[1/2] libselinux: add restore option to modify user and role portions [1/2] libselinux: add restore option to modify user and role portions - - - --- 2025-02-26 Christian Göttsche bachradsusi New
[2/2] setfiles: add option to modify user and role portions [1/2] libselinux: add restore option to modify user and role portions - - - --- 2025-02-26 Christian Göttsche bachradsusi New
[1/1] security: Propagate universal pointer data in bpf hooks security: Propagate universal pointer data in bpf hooks - - - --- 2025-02-26 Blaise Boscaccy pcmoore Handled Elsewhere
[1/3] checkpolicy: free left hand conditional expression on error [1/3] checkpolicy: free left hand conditional expression on error - - - --- 2025-02-25 Christian Göttsche bachradsusi New
[3/3] checkpolicy: perform cleanup on error in define_filename_trans() [1/3] checkpolicy: free left hand conditional expression on error - - - --- 2025-02-25 Christian Göttsche bachradsusi New
[2/3] checkpolicy: abort on mismatched declarations [1/3] checkpolicy: free left hand conditional expression on error - - - --- 2025-02-25 Christian Göttsche bachradsusi New
libsemanage: improve performance of semanage store rebuild libsemanage: improve performance of semanage store rebuild 1 - - --- 2025-02-25 Petr Lautrbach bachradsusi New
selinux: add FILE__WATCH_MOUNTNS selinux: add FILE__WATCH_MOUNTNS 1 - - --- 2025-02-24 Miklos Szeredi pcmoore Under Review
checkpolicy: rework cleanup in define_te_avtab_xperms_helper() checkpolicy: rework cleanup in define_te_avtab_xperms_helper() - - - --- 2025-02-22 Christian Göttsche bachradsusi New
[v2] libsemanage: create semanage_basename to ensure posix compliance [v2] libsemanage: create semanage_basename to ensure posix compliance - - - --- 2025-02-21 Rahul Sandhu bachradsusi New
libsemanage: define basename macro for non-glibc systems libsemanage: define basename macro for non-glibc systems - - - --- 2025-02-20 Rahul Sandhu bachradsusi New
libselinux: warn on identical duplicate properties libselinux: warn on identical duplicate properties 1 - - --- 2025-02-13 Thiébaud Weksteen bachradsusi New
Switch from bison name-prefix to api.prefix Switch from bison name-prefix to api.prefix 1 - - --- 2025-02-12 Daniel Burgener bachradsusi New
[v3] Support static-only builds [v3] Support static-only builds - - - --- 2025-02-11 Alyssa Ross bachradsusi New
[v2] selinux: add permission checks for loading other kinds of kernel files [v2] selinux: add permission checks for loading other kinds of kernel files 1 - - --- 2025-02-11 kippndavis.work@gmx.com pcmoore Accepted
selinux: always check the file label in selinux_kernel_read_file() selinux: always check the file label in selinux_kernel_read_file() - - - --- 2025-02-07 Paul Moore pcmoore Accepted
[testsuite] policy,tests: add tests for new permissions for loading files/data [testsuite] policy,tests: add tests for new permissions for loading files/data - 1 1 --- 2025-02-05 kippndavis.work@gmx.com omos New
selinux: add permission checks for loading other kinds of kernel files selinux: add permission checks for loading other kinds of kernel files - - - --- 2025-02-05 kippndavis.work@gmx.com pcmoore Changes Requested
[4/4] libselinux: limit fcontext regex path length [1/4] libselinux: constify global strings - - - --- 2025-01-31 Christian Göttsche bachradsusi New
[3/4] libselinux: initialize regex arch string in a thread safe way [1/4] libselinux: constify global strings - - - --- 2025-01-31 Christian Göttsche bachradsusi New
[2/4] libselinux: use local instead of global error buffer [1/4] libselinux: constify global strings - - - --- 2025-01-31 Christian Göttsche bachradsusi New
[1/4] libselinux: constify global strings [1/4] libselinux: constify global strings - - - --- 2025-01-31 Christian Göttsche bachradsusi New
[testsuite] tests/inet_socket: enable MPTCP if it's disabled via sysctl [testsuite] tests/inet_socket: enable MPTCP if it's disabled via sysctl - - - --- 2025-01-31 Ondrej Mosnacek omos Accepted
[v5,3/3] vfs: add notifications for mount attach and detach mount notification - 1 - --- 2025-01-29 Miklos Szeredi pcmoore Changes Requested
[v5,2/3] fanotify: notify on mount attach and detach mount notification - 1 - --- 2025-01-29 Miklos Szeredi pcmoore Changes Requested
[v5,1/3] fsnotify: add mount notification infrastructure mount notification - 1 - --- 2025-01-29 Miklos Szeredi pcmoore Changes Requested
[v3,2/2] lsm,io_uring: add LSM hooks for io_uring_setup() [v3,1/2] io_uring: refactor io_uring_allowed() - - - --- 2025-01-27 Hamza Mahfooz pcmoore Handled Elsewhere
[v3,1/2] io_uring: refactor io_uring_allowed() [v3,1/2] io_uring: refactor io_uring_allowed() - - - --- 2025-01-27 Hamza Mahfooz pcmoore Handled Elsewhere
selinux: fix spelling error selinux: fix spelling error - 1 - --- 2025-01-23 Tanya Agarwal pcmoore Accepted
[RFC,2/2] libsemanage: Set new restorecon handle before doing restorecon Possible solution to possible regression - - - --- 2025-01-22 James Carter bachradsusi New
[RFC,1/2] libselinux: Close old selabel handle when setting a new one Possible solution to possible regression - - - --- 2025-01-22 James Carter bachradsusi New
[GIT,PULL] selinux/selinux-pr-20250121 [GIT,PULL] selinux/selinux-pr-20250121 - - - --- 2025-01-21 Paul Moore pcmoore Accepted
selinux: Handle NULL return from selinux_inode in inode_security_rcu selinux: Handle NULL return from selinux_inode in inode_security_rcu - - - --- 2025-01-16 Ingyu Jang pcmoore Rejected
[userspace] README: fix broken testsuite run status badge [userspace] README: fix broken testsuite run status badge 1 - - --- 2025-01-16 Ondrej Mosnacek Accepted
[v2] libselinux: limit node depth while parsing compiled fcontexts [v2] libselinux: limit node depth while parsing compiled fcontexts 1 - - --- 2025-01-16 Christian Göttsche bachradsusi New
[1/5] libselinux: set errno in failure case [1/5] libselinux: set errno in failure case 1 - - --- 2025-01-15 Christian Göttsche bachradsusi Accepted
[5/5] checkpolicy: clear queue between parser passes [1/5] libselinux: set errno in failure case - - - --- 2025-01-15 Christian Göttsche bachradsusi Accepted
[4/5] checkpolicy: do not consume unmatched identifiers [1/5] libselinux: set errno in failure case - - - --- 2025-01-15 Christian Göttsche bachradsusi Accepted
[3/5] checkpolicy: remove unneeded queue_head() [1/5] libselinux: set errno in failure case - - - --- 2025-01-15 Christian Göttsche bachradsusi Accepted
[2/5] checkpolicy: check identifier before copying [1/5] libselinux: set errno in failure case - - - --- 2025-01-15 Christian Göttsche bachradsusi Accepted
[v2] semanage: improve -e documentation and fix delete operation [v2] semanage: improve -e documentation and fix delete operation - - - --- 2025-01-14 Christian Göttsche bachradsusi New
CONTRIBUTING.md: Drop dependency and build instructions CONTRIBUTING.md: Drop dependency and build instructions 1 - - --- 2025-01-13 Daniel Burgener bachradsusi Accepted
libselinux: limit node depth while parsing compiled fcontexts libselinux: limit node depth while parsing compiled fcontexts - - - --- 2025-01-09 Christian Göttsche bachradsusi Changes Requested
selinux: map RTM_DELNSID to nlmsg_write selinux: map RTM_DELNSID to nlmsg_write - - - --- 2025-01-08 Thiébaud Weksteen pcmoore Rejected
[1/2] libsepol/cil: free nlmsg hashtable on error [1/2] libsepol/cil: free nlmsg hashtable on error 1 - - --- 2025-01-08 Christian Göttsche bachradsusi Accepted
[2/2] libselinux/fuzz: handle inputs with trailing data [1/2] libsepol/cil: free nlmsg hashtable on error - - - --- 2025-01-08 Christian Göttsche bachradsusi Accepted
[GIT,PULL] selinux/selinux-pr-20250107 [GIT,PULL] selinux/selinux-pr-20250107 - - - --- 2025-01-07 Paul Moore pcmoore Accepted
[RFC,v2,00/17] testsuite: misc fixes and virtme-ng support - - - --- 2025-01-07 Christian Göttsche omos New
[RFC,v2,17/17] tests: drop headers from Makefile dependencies [RFC,v2,01/17] Fix typos - - - --- 2025-01-07 Christian Göttsche omos New
[RFC,v2,16/17] tests: fail on compiler warnings and enable Wextra [RFC,v2,01/17] Fix typos - - - --- 2025-01-07 Christian Göttsche omos New
[RFC,v2,15/17] tests: test code tweaks [RFC,v2,01/17] Fix typos - - - --- 2025-01-07 Christian Göttsche omos New
[RFC,v2,14/17] defconfig: enable CONFIG_NETFILTER_NETLINK_LOG [RFC,v2,01/17] Fix typos - - - --- 2025-01-07 Christian Göttsche omos New
[RFC,v2,13/17] defconfig: enable CONFIG_XFRM_USER [RFC,v2,01/17] Fix typos - - - --- 2025-01-07 Christian Göttsche omos New
[RFC,v2,12/17] tests/filesystem: improve fsnotify check and preload loop module [RFC,v2,01/17] Fix typos - - - --- 2025-01-07 Christian Göttsche omos New
[RFC,v2,11/17] tests/inet_socket: skip mptcp if not supported [RFC,v2,01/17] Fix typos - - - --- 2025-01-07 Christian Göttsche omos New
[RFC,v2,10/17] tests/tun_tap: skip if not supported [RFC,v2,01/17] Fix typos - - - --- 2025-01-07 Christian Göttsche omos New
[RFC,v2,09/17] tests/extended_socket_class: work with CONFIG_CRYPTO_USER_API disabled [RFC,v2,01/17] Fix typos - - - --- 2025-01-07 Christian Göttsche omos New
[RFC,v2,08/17] tests/notify: work with CONFIG_FANOTIFY disabled [RFC,v2,01/17] Fix typos - - - --- 2025-01-07 Christian Göttsche omos New
[RFC,v2,07/17] test: overlayfs related tweaks [RFC,v2,01/17] Fix typos - - - --- 2025-01-07 Christian Göttsche omos New
« 1 2 3 4 … 94 95 »