SELinux Security Module development
 help / color / mirror / Atom feed
 messages from 2021-04-13 08:26:54 to 2021-05-07 12:00:27 UTC [more...]

[PATCH 7/7 v2] tracing: Do not create tracefs files if tracefs lockdown is in effect
 2021-05-07 12:00 UTC  (2+ messages)

[PATCH] serial: core: fix suspicious security_locked_down() call
 2021-05-07 11:57 UTC 

[PATCH] debugfs: fix security_locked_down() call for SELinux
 2021-05-07 11:41 UTC 

[PATCH] lockdown,selinux: fix bogus SELinux lockdown permission checks
 2021-05-07 11:40 UTC 

[PATCH] libselinux: silence -Wstringop-overflow warning from gcc 10.3.1
 2021-05-07 11:21 UTC  (2+ messages)

[PATCH] libselinux: selinux_check_passwd_access_internal(): respect deny_unknown
 2021-05-07 10:05 UTC  (2+ messages)

[PATCH 1/2] libsepol/cil: Fix name resolution involving inherited blocks
 2021-05-06 18:46 UTC  (4+ messages)
` [PATCH 2/2] secilc/docs: Document the order that inherited rules are resolved in

improvement of setfiles man page
 2021-05-06  5:40 UTC 

Stable backport request - perf/core: Fix unconditional security_locked_down() call
 2021-05-05 12:17 UTC  (3+ messages)

[PATCH v2] libsepol/cil: Check for self-referential loops in sets
 2021-05-04 20:41 UTC 

[PATCH 0/5] Fix bugs identified by the secilc-fuzzer
 2021-05-04 20:07 UTC  (9+ messages)
` [PATCH 1/5] libsepol/cil: Fix instances where an error returns SEPOL_OK
` [PATCH 2/5] libsepol/cil: Detect degenerate inheritance and exit with an error
` [PATCH 3/5] libsepol/cil: Check datum in ordered list for expected flavor
` [PATCH 4/5] libsepol/cil: Check for self-referential loops in sets
` [PATCH 5/5] libsepol/cil: Return an error if a call argument fails to resolve

[PATCH] libsepol/cil: Properly reset an anonymous classperm set
 2021-05-04 20:06 UTC  (3+ messages)

[PATCH 00/25] libselinux: misc compiler and static analyzer findings
 2021-05-03 17:53 UTC  (26+ messages)
` [PATCH 01/25] libselinux: sidtab_hash(): do not discard const qualifier
` [PATCH 02/25] libselinux: selinux_file_context_cmp(): "
` [PATCH 03/25] libselinux: label_common(): "
` [PATCH 04/25] libselinux: Sha1Finalise(): "
` [PATCH 05/25] libselinux: sefcontext_compile: mark local variable static
` [PATCH 06/25] libselinux: avcstat: use standard length modifier for unsigned long long
` [PATCH 07/25] libselinux: selinux_restorecon: mark local variable static
` [PATCH 08/25] libselinux: selabel_get_digests_all_partial_matches: free memory after FTS_D block
` [PATCH 09/25] libselinux: getconlist: free memory on multiple level arguments
` [PATCH 10/25] libselinux: exclude_non_seclabel_mounts(): drop unused variable
` [PATCH 11/25] libselinux: context_new(): drop dead assignment
` [PATCH 12/25] libselinux: label_x::init(): "
` [PATCH 13/25] libselinux: label_media::init(): "
` [PATCH 14/25] libselinux: setexecfilecon(): "
` [PATCH 15/25] libselinux: getdefaultcon: free memory on multiple same arguments
` [PATCH 16/25] libselinux: store_stem(): do not free possible non-heap object
` [PATCH 17/25] libselinux: matchmediacon(): close file on error
` [PATCH 18/25] libselinux: init_selinux_config(): free resources "
` [PATCH 19/25] libselinux: label_file::init(): do not pass NULL to strdup
` [PATCH 20/25] libselinux: matchpathcon: free memory on realloc failure
` [PATCH 21/25] libselinux: label_db::db_init(): open file with CLOEXEC mode
` [PATCH 22/25] libselinux: drop redundant casts to the same type
` [PATCH 23/25] libselinux: sidtab_sid_stats(): unify parameter name
` [PATCH 24/25] libselinux: regex: unify parameter names
` [PATCH 25/25] libselinux: label_file.c: fix indent

[PATCH testsuite] tests/lockdown: use /sys/kernel/debug/fault_around_bytes for integrity test
 2021-05-03 16:42 UTC  (2+ messages)

[PATCH testsuite] ci: test also on F34 images
 2021-05-03 16:42 UTC  (2+ messages)

[PATCH testsuite] policy: only define anon_inode class if not defined in system policy
 2021-05-01  7:54 UTC  (4+ messages)

[PATCH] libselinux: do not duplicate make target when going into subdirectory
 2021-04-30 19:24 UTC  (3+ messages)

[PATCH] libsepol: use checked arithmetic builtin to perform safe addition
 2021-04-30 19:24 UTC  (3+ messages)

[RFC PATCH userspace 0/6] Parallel setfiles/restorecon
 2021-04-30 12:49 UTC  (5+ messages)

[bug report?] other unexpected behaviours in secilc and CIL semantics
 2021-04-28 16:07 UTC  (2+ messages)

[PATCH 2] testsuite: fix cap_userns for kernels >= v5.12
 2021-04-28 14:27 UTC  (4+ messages)

[RFC SHADOW PATCH 0/7] SELinux modernizations
 2021-04-28 14:10 UTC  (11+ messages)
` [RFC SHADOW PATCH 1/7] struct commonio_db[selinux]: do not use deprecated type security_context_t
` [RFC SHADOW PATCH 2/7] vipw[selinux]: do not use deprecated typedef and skip context translation
` [RFC SHADOW PATCH 3/7] selinux.c: "
` [RFC SHADOW PATCH 4/7] selinux.c:reset_selinux_file_context(): do not fail in permissive mode
` [RFC SHADOW PATCH 5/7] selinux.c: use modern selabel interface instead of deprecated matchpathcon
` [RFC SHADOW PATCH 6/7] set_selinux_file_context(): prepare context for actual file type
` [RFC SHADOW PATCH 7/7] selinux: only open selabel database once

[PATCH] selinux: Remove redundant assignment to rc
 2021-04-28 10:00 UTC 

[GIT PULL] SELinux patches for v5.13
 2021-04-27 20:54 UTC  (2+ messages)

[PATCH] testsuite: fix cap_userns for kernels >= v5.12
 2021-04-27 20:06 UTC  (3+ messages)

[PATCH v3 0/6] evm: Prepare for moving to the LSM infrastructure
 2021-04-27 11:37 UTC  (7+ messages)
` [PATCH v3 1/6] reiserfs: Add missing calls to reiserfs_security_free()
` [PATCH v3 2/6] security: Rewrite security_old_inode_init_security()
` [PATCH v3 3/6] security: Pass xattrs allocated by LSMs to the inode_init_security hook
` [PATCH v3 4/6] security: Support multiple LSMs implementing "
` [PATCH v3 5/6] evm: Align evm_inode_init_security() definition with LSM infrastructure
` [PATCH v3 6/6] evm: Support multiple LSMs providing an xattr

[RFC PATCH 0/2] selinux,anon_inodes: Use a separate SELinux class for each type of anon inode
 2021-04-26 16:00 UTC  (11+ messages)
` [RFC PATCH 1/2] LSM,anon_inodes: explicitly distinguish anon inode types
` [RFC PATCH 2/2] selinux: add capability to map anon inode types to separate classes

[PATCH v2] selinux: Corrected comment to match kernel-doc comment
 2021-04-25 16:30 UTC  (2+ messages)

[PATCH] selinux: Corrected comment to match kernel-doc comment
 2021-04-24 15:46 UTC  (2+ messages)

[PATCH] libselinux android: Add keystore2_key label module
 2021-04-23 16:54 UTC  (2+ messages)

[PATCH] selinux: add proper NULL termination to the secclass_map permissions
 2021-04-23  2:19 UTC  (2+ messages)

[PATCH v2 0/6] evm: Prepare for moving to the LSM infrastructure
 2021-04-22 21:39 UTC  (13+ messages)
` [PATCH v2 1/6] xattr: Complete constify ->name member of "struct xattr"
` [PATCH v2 2/6] reiserfs: Add missing calls to reiserfs_security_free()
` [PATCH v2 3/6] security: Pass xattrs allocated by LSMs to the inode_init_security hook
` [PATCH v2 4/6] security: Support multiple LSMs implementing "
` [PATCH v2 5/6] evm: Align evm_inode_init_security() definition with LSM infrastructure
` [PATCH v2 6/6] evm: Support multiple LSMs providing an xattr

[PATCH 0/3 v3] Create secil2tree to write CIL AST
 2021-04-22 19:11 UTC  (6+ messages)
` [PATCH 1/3 v3] libsepol/cil: Create functions to write the "
` [PATCH 2/3 v3] libsepol/cil: Add functions to make use of cil_write_ast()
` [PATCH 3/3 v3] secilc: Create the new program called secil2tree to write out CIL AST

[PATCH userspace] policycoreutils/setfiles: do not create useless setfiles.8.man file
 2021-04-22 19:10 UTC  (3+ messages)

[RFC PATCH testsuite] Add extended_anon_inode_class policy capability support
 2021-04-21 17:15 UTC 

[PATCH 0/3 v2] Create secil2tree to write CIL AST
 2021-04-21 16:56 UTC  (9+ messages)
` [PATCH 1/3 v2] libsepol/cil: Create functions to write the "
` [PATCH 2/3 v2] libsepol/cil: Add functions to make use of cil_write_ast()
` [PATCH 3/3 v2] secilc: Create the new program called secil2tree to write out CIL AST

[PATCH 0/5] evm: Prepare for moving to the LSM infrastructure
 2021-04-20 16:09 UTC  (12+ messages)
` [PATCH 1/5] xattr: Complete constify ->name member of "struct xattr"
` [PATCH 2/5] security: Support multiple LSMs implementing the inode_init_security hook
` [PATCH 3/5] security: Pass xattrs allocated by LSMs to "
` [PATCH 4/5] evm: Align evm_inode_init_security() definition with LSM infrastructure
` [PATCH 5/5] evm: Support multiple LSMs providing an xattr

[PATCH 00/12] Update checks for invalid rules in blocks
 2021-04-20  7:53 UTC  (4+ messages)

no SELinux common criteria?
 2021-04-19 20:25 UTC  (2+ messages)

no SELinux common criteria?
 2021-04-19 20:05 UTC 

[PATCH 00/11 v2] Various CIL patches
 2021-04-19 18:24 UTC  (13+ messages)
` [PATCH 01/11 v2] libsepol/cil: Fix out-of-bound read of file context pattern ending with "\"
` [PATCH 02/11 v2] libsepol/cil: Destroy classperms list when resetting classpermission
` [PATCH 03/11 v2] libsepol/cil: Destroy classperm list when resetting map perms
` [PATCH 04/11 v2] libsepol/cil: cil_reset_classperms_set() should not reset classpermission
` [PATCH 05/11 v2] libsepol/cil: Set class field to NULL when resetting struct cil_classperms
` [PATCH 06/11 v2] libsepol/cil: More strict verification of constraint leaf expressions
` [PATCH 07/11 v2] libsepol/cil: Exit with an error if declaration name is a reserved word
` [PATCH 08/11 v2] libsepol/cil: Allow permission expressions when using map classes
` [PATCH 09/11 v2] libsepol/cil: Refactor helper function for cil_gen_node()
` [PATCH 10/11 v2] libsepol/cil: Create function cil_add_decl_to_symtab() and refactor
` [PATCH 11/11 v2] libsepol/cil: Move check for the shadowing of macro parameters

[PATCH 00/11] Various CIL patches
 2021-04-19 18:24 UTC  (4+ messages)

[PATCH 10/12] libsepol/cil: Make invalid statement error messages consistent
 2021-04-19 15:30 UTC  (4+ messages)
` [PATCH 12/12] secilc/docs: Update the CIL documentation for various blocks

[PATCH] secilc.c: Don't fail if input file is empty
 2021-04-19 14:33 UTC  (3+ messages)

MCS NetLabel
 2021-04-19  1:44 UTC  (4+ messages)

[PATCH RESEND v5] proc: Allow pid_revalidate() during LOOKUP_RCU
 2021-04-16  1:16 UTC 

[PATCH 0/3] Create secil2tree to write CIL AST
 2021-04-15 20:33 UTC  (4+ messages)
` [PATCH 1/3] libsepol/cil: Create functions to write the "
` [PATCH 2/3] libsepol/cil: Add functions to make use of cil_write_ast()
` [PATCH 3/3] secilc: Create the new program called secil2tree to write out CIL AST

[PATCH v6 24/40] fs: make helpers idmap mount aware
 2021-04-13  8:26 UTC  (3+ messages)


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox