Show patches with: Archived = No       |   9442 patches
« 1 2 3 494 95 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
libselinux: warn on identical duplicate properties libselinux: warn on identical duplicate properties - - - --- 2025-02-13 Thiébaud Weksteen New
Switch from bison name-prefix to api.prefix Switch from bison name-prefix to api.prefix - - - --- 2025-02-12 Daniel Burgener New
[v3] Support static-only builds [v3] Support static-only builds - - - --- 2025-02-11 Alyssa Ross New
[v2] selinux: add permission checks for loading other kinds of kernel files [v2] selinux: add permission checks for loading other kinds of kernel files - - - --- 2025-02-11 kippndavis.work@gmx.com New
selinux: always check the file label in selinux_kernel_read_file() selinux: always check the file label in selinux_kernel_read_file() - - - --- 2025-02-07 Paul Moore pcmoore Accepted
[testsuite] policy,tests: add tests for new permissions for loading files/data [testsuite] policy,tests: add tests for new permissions for loading files/data - - - --- 2025-02-05 kippndavis.work@gmx.com omos New
selinux: add permission checks for loading other kinds of kernel files selinux: add permission checks for loading other kinds of kernel files - - - --- 2025-02-05 kippndavis.work@gmx.com pcmoore Changes Requested
[4/4] libselinux: limit fcontext regex path length [1/4] libselinux: constify global strings - - - --- 2025-01-31 Christian Göttsche bachradsusi New
[3/4] libselinux: initialize regex arch string in a thread safe way [1/4] libselinux: constify global strings - - - --- 2025-01-31 Christian Göttsche bachradsusi New
[2/4] libselinux: use local instead of global error buffer [1/4] libselinux: constify global strings - - - --- 2025-01-31 Christian Göttsche bachradsusi New
[1/4] libselinux: constify global strings [1/4] libselinux: constify global strings - - - --- 2025-01-31 Christian Göttsche bachradsusi New
[testsuite] tests/inet_socket: enable MPTCP if it's disabled via sysctl [testsuite] tests/inet_socket: enable MPTCP if it's disabled via sysctl - - - --- 2025-01-31 Ondrej Mosnacek omos Accepted
[v5,3/3] vfs: add notifications for mount attach and detach mount notification - 1 - --- 2025-01-29 Miklos Szeredi pcmoore Changes Requested
[v5,2/3] fanotify: notify on mount attach and detach mount notification - 1 - --- 2025-01-29 Miklos Szeredi pcmoore Changes Requested
[v5,1/3] fsnotify: add mount notification infrastructure mount notification - 1 - --- 2025-01-29 Miklos Szeredi pcmoore Changes Requested
[v3,2/2] lsm,io_uring: add LSM hooks for io_uring_setup() [v3,1/2] io_uring: refactor io_uring_allowed() - - - --- 2025-01-27 Hamza Mahfooz pcmoore Handled Elsewhere
[v3,1/2] io_uring: refactor io_uring_allowed() [v3,1/2] io_uring: refactor io_uring_allowed() - - - --- 2025-01-27 Hamza Mahfooz pcmoore Handled Elsewhere
selinux: fix spelling error selinux: fix spelling error - 1 - --- 2025-01-23 Tanya Agarwal pcmoore Accepted
[RFC,2/2] libsemanage: Set new restorecon handle before doing restorecon Possible solution to possible regression - - - --- 2025-01-22 James Carter bachradsusi New
[RFC,1/2] libselinux: Close old selabel handle when setting a new one Possible solution to possible regression - - - --- 2025-01-22 James Carter bachradsusi New
[GIT,PULL] selinux/selinux-pr-20250121 [GIT,PULL] selinux/selinux-pr-20250121 - - - --- 2025-01-21 Paul Moore pcmoore Accepted
selinux: Handle NULL return from selinux_inode in inode_security_rcu selinux: Handle NULL return from selinux_inode in inode_security_rcu - - - --- 2025-01-16 Ingyu Jang pcmoore Rejected
[userspace] README: fix broken testsuite run status badge [userspace] README: fix broken testsuite run status badge 1 - - --- 2025-01-16 Ondrej Mosnacek Accepted
[v2] libselinux: limit node depth while parsing compiled fcontexts [v2] libselinux: limit node depth while parsing compiled fcontexts - - - --- 2025-01-16 Christian Göttsche bachradsusi New
[1/5] libselinux: set errno in failure case [1/5] libselinux: set errno in failure case 1 - - --- 2025-01-15 Christian Göttsche bachradsusi Accepted
[5/5] checkpolicy: clear queue between parser passes [1/5] libselinux: set errno in failure case - - - --- 2025-01-15 Christian Göttsche bachradsusi Accepted
[4/5] checkpolicy: do not consume unmatched identifiers [1/5] libselinux: set errno in failure case - - - --- 2025-01-15 Christian Göttsche bachradsusi Accepted
[3/5] checkpolicy: remove unneeded queue_head() [1/5] libselinux: set errno in failure case - - - --- 2025-01-15 Christian Göttsche bachradsusi Accepted
[2/5] checkpolicy: check identifier before copying [1/5] libselinux: set errno in failure case - - - --- 2025-01-15 Christian Göttsche bachradsusi Accepted
[v2] semanage: improve -e documentation and fix delete operation [v2] semanage: improve -e documentation and fix delete operation - - - --- 2025-01-14 Christian Göttsche bachradsusi New
CONTRIBUTING.md: Drop dependency and build instructions CONTRIBUTING.md: Drop dependency and build instructions 1 - - --- 2025-01-13 Daniel Burgener bachradsusi Accepted
libselinux: limit node depth while parsing compiled fcontexts libselinux: limit node depth while parsing compiled fcontexts - - - --- 2025-01-09 Christian Göttsche bachradsusi Changes Requested
selinux: map RTM_DELNSID to nlmsg_write selinux: map RTM_DELNSID to nlmsg_write - - - --- 2025-01-08 Thiébaud Weksteen pcmoore Rejected
[1/2] libsepol/cil: free nlmsg hashtable on error [1/2] libsepol/cil: free nlmsg hashtable on error 1 - - --- 2025-01-08 Christian Göttsche bachradsusi Accepted
[2/2] libselinux/fuzz: handle inputs with trailing data [1/2] libsepol/cil: free nlmsg hashtable on error - - - --- 2025-01-08 Christian Göttsche bachradsusi Accepted
[GIT,PULL] selinux/selinux-pr-20250107 [GIT,PULL] selinux/selinux-pr-20250107 - - - --- 2025-01-07 Paul Moore pcmoore Accepted
[RFC,v2,00/17] testsuite: misc fixes and virtme-ng support - - - --- 2025-01-07 Christian Göttsche omos New
[RFC,v2,17/17] tests: drop headers from Makefile dependencies [RFC,v2,01/17] Fix typos - - - --- 2025-01-07 Christian Göttsche omos New
[RFC,v2,16/17] tests: fail on compiler warnings and enable Wextra [RFC,v2,01/17] Fix typos - - - --- 2025-01-07 Christian Göttsche omos New
[RFC,v2,15/17] tests: test code tweaks [RFC,v2,01/17] Fix typos - - - --- 2025-01-07 Christian Göttsche omos New
[RFC,v2,14/17] defconfig: enable CONFIG_NETFILTER_NETLINK_LOG [RFC,v2,01/17] Fix typos - - - --- 2025-01-07 Christian Göttsche omos New
[RFC,v2,13/17] defconfig: enable CONFIG_XFRM_USER [RFC,v2,01/17] Fix typos - - - --- 2025-01-07 Christian Göttsche omos New
[RFC,v2,12/17] tests/filesystem: improve fsnotify check and preload loop module [RFC,v2,01/17] Fix typos - - - --- 2025-01-07 Christian Göttsche omos New
[RFC,v2,11/17] tests/inet_socket: skip mptcp if not supported [RFC,v2,01/17] Fix typos - - - --- 2025-01-07 Christian Göttsche omos New
[RFC,v2,10/17] tests/tun_tap: skip if not supported [RFC,v2,01/17] Fix typos - - - --- 2025-01-07 Christian Göttsche omos New
[RFC,v2,09/17] tests/extended_socket_class: work with CONFIG_CRYPTO_USER_API disabled [RFC,v2,01/17] Fix typos - - - --- 2025-01-07 Christian Göttsche omos New
[RFC,v2,08/17] tests/notify: work with CONFIG_FANOTIFY disabled [RFC,v2,01/17] Fix typos - - - --- 2025-01-07 Christian Göttsche omos New
[RFC,v2,07/17] test: overlayfs related tweaks [RFC,v2,01/17] Fix typos - - - --- 2025-01-07 Christian Göttsche omos New
[RFC,v2,06/17] Makefile: add PHONY targets [RFC,v2,01/17] Fix typos - - - --- 2025-01-07 Christian Göttsche omos New
[RFC,v2,05/17] tests: enable strictness for perl scripts [RFC,v2,01/17] Fix typos - - - --- 2025-01-07 Christian Göttsche omos New
[RFC,v2,04/17] tests: port scripts to sh and please shellcheck [RFC,v2,01/17] Fix typos - - - --- 2025-01-07 Christian Göttsche omos New
[RFC,v2,03/17] tools: quote command to prevent word splitting [RFC,v2,01/17] Fix typos - - - --- 2025-01-07 Christian Göttsche omos New
[RFC,v2,02/17] Makefile: use $(MAKE) to pass options [RFC,v2,01/17] Fix typos - - - --- 2025-01-07 Christian Göttsche omos New
[RFC,v2,01/17] Fix typos [RFC,v2,01/17] Fix typos - - - --- 2025-01-07 Christian Göttsche omos New
[userspace,4/4] ci: fix pypy conditional ci: fix and migrate the testsuite part to Testing Farm - - - --- 2025-01-03 Ondrej Mosnacek omos Accepted
[userspace,3/4] ci: add missing libbz2-dev dependency ci: fix and migrate the testsuite part to Testing Farm - - - --- 2025-01-03 Ondrej Mosnacek omos Accepted
[userspace,2/4] ci: update Python versions ci: fix and migrate the testsuite part to Testing Farm - - - --- 2025-01-03 Ondrej Mosnacek omos Accepted
[userspace,1/4] ci: use Testing Farm for running the testsuite ci: fix and migrate the testsuite part to Testing Farm 1 - - --- 2025-01-03 Ondrej Mosnacek omos Accepted
[RFC,44/44] selinux: fix inode initialization when no namespace is initialized SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,43/44] selinux: introduce a Kconfig option for SELinux namespaces SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,42/44] selinux: exempt creation of init SELinux namespace from limits SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,41/44] selinux: allow userspace to detect non-init SELinux namespace SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,40/44] selinux: init inode from nearest initialized namespace SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,39/44] selinux: defer inode init on current selinux state SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,38/44] selinux: convert nlmsg_sock_has_extended_perms() to namespace-aware SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,37/44] selinux: disallow writes to /sys/fs/selinux/user in non-init namespaces SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,36/44] selinux: set initial SID context for init to "kernel" in global SID table SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,35/44] selinux: split cred_ssid_has_perm() into two cases SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,34/44] selinux: make open_perms namespace-aware SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,33/44] selinux: refactor selinux_state_create() SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,32/44] selinux: limit selinux netlink notifications to init namespace SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,31/44] selinux: fix namespace creation SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,30/44] selinux: add limits for SELinux namespaces SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,29/44] selinux: switch selinux_lsm_setattr() checks to current namespace SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,28/44] selinux: convert xfrm and netlabel permission checks SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,27/44] selinux: annotate process transition permission checks SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,26/44] selinux: annotate selinuxfs permission checks SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,25/44] selinux: introduce selinux_state_has_perm() SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,24/44] selinux: convert additional checks to cred_ssid_has_perm() SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,23/44] selinux: rename cred_has_perm*() to cred_tsid_has_perm*() SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,22/44] selinux: convert selinux_file_send_sigiotask() to namespace-aware helper SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,21/44] selinux: add kerneldoc to new permission checking functions SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,20/44] selinux: update bprm hooks for selinux namespaces SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,19/44] selinux: fix selinux_lsm_getattr() check SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,18/44] selinux: introduce task_obj_perm() SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,17/44] selinux: introduce cred_ssid_has_perm() and cred_other_has_perm() SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,16/44] selinux: introduce cred_has_perm() SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,15/44] selinux: introduce cred_self_has_perm() SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,14/44] selinux: introduce cred_has_extended_perms() SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,13/44] selinux: introduce cred_task_has_perm() SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,12/44] selinux: update hook functions to use correct selinux namespace SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,11/44] selinux: wrap security server interfaces to use the global SID table SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,10/44] selinux: introduce a global SID table SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,09/44] selinuxfs: restrict write operations to the same selinux namespace SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,08/44] selinux: add a selinuxfs interface to unshare selinux namespace SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,07/44] selinux: introduce cred_selinux_state() and use it SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,06/44] selinux: support per-task/cred selinux namespace SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,05/44] netstate,selinux: create the selinux netlink socket per network namespace SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,04/44] selinux: dynamically allocate selinux namespace SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
[RFC,03/44] selinux: support multiple selinuxfs instances SELinux namespace support - - - --- 2025-01-02 Stephen Smalley pcmoore New
« 1 2 3 494 95 »