SELinux Security Module development
 help / color / mirror / Atom feed
 messages from 2021-04-22 03:31:30 to 2021-05-13 20:33:43 UTC [more...]

[PATCH v26 00/25] LSM: Module stacking for AppArmor
 2021-05-13 20:08 UTC  (24+ messages)
  ` [PATCH v26 01/25] LSM: Infrastructure management of the sock security
  ` [PATCH v26 02/25] LSM: Add the lsmblob data structure
  ` [PATCH v26 03/25] LSM: provide lsm name and id slot mappings
  ` [PATCH v26 04/25] IMA: avoid label collisions with stacked LSMs
  ` [PATCH v26 05/25] LSM: Use lsmblob in security_audit_rule_match
  ` [PATCH v26 06/25] LSM: Use lsmblob in security_kernel_act_as
  ` [PATCH v26 07/25] LSM: Use lsmblob in security_secctx_to_secid
  ` [PATCH v26 08/25] LSM: Use lsmblob in security_secid_to_secctx
  ` [PATCH v26 09/25] LSM: Use lsmblob in security_ipc_getsecid
  ` [PATCH v26 10/25] LSM: Use lsmblob in security_task_getsecid
  ` [PATCH v26 11/25] LSM: Use lsmblob in security_inode_getsecid
  ` [PATCH v26 12/25] LSM: Use lsmblob in security_cred_getsecid
  ` [PATCH v26 13/25] IMA: Change internal interfaces to use lsmblobs
  ` [PATCH v26 14/25] LSM: Specify which LSM to display
  ` [PATCH v26 15/25] LSM: Ensure the correct LSM context releaser
  ` [PATCH v26 16/25] LSM: Use lsmcontext in security_secid_to_secctx
  ` [PATCH v26 17/25] LSM: Use lsmcontext in security_inode_getsecctx
  ` [PATCH v26 18/25] LSM: security_secid_to_secctx in netlink netfilter
  ` [PATCH v26 19/25] NET: Store LSM netlabel data in a lsmblob
  ` [PATCH v26 20/25] LSM: Verify LSM display sanity in binder
  ` [PATCH v26 21/25] audit: add support for non-syscall auxiliary records
  ` [PATCH v26 22/25] Audit: Add new record for multiple process LSM attributes
  ` [PATCH v26 23/25] Audit: Add a new record for multiple object "

[PATCH 0/6] More secilc-fuzzer problems fixed
 2021-05-13 18:52 UTC  (7+ messages)
` [PATCH 1/6] libsepol/cil: Handle disabled optional blocks in earlier passes
` [PATCH 2/6] libsepol/cil: Destroy the permission nodes when exiting with an error
` [PATCH 3/6] libsepol/cil: Limit the number of open parenthesis allowed
` [PATCH 4/6] libsepol/cil: Resolve anonymous class permission sets only once
` [PATCH 5/6] libsepol/cil: Pointers to datums should be set to NULL when resetting
` [PATCH 6/6] libsepol/cil: Resolve anonymous levels only once

[PATCH v2] libsepol/cil: Check for self-referential loops in sets
 2021-05-13 14:57 UTC  (2+ messages)

[PATCH v2] lsm_audit,selinux: pass IB device name by reference
 2021-05-12 18:28 UTC  (2+ messages)

[PATCH] lockdown,selinux: fix bogus SELinux lockdown permission checks
 2021-05-12 17:12 UTC  (6+ messages)

[PATCH userspace 0/2] Bump testsuite CI image to F34
 2021-05-12 16:18 UTC  (5+ messages)
` [PATCH userspace 1/2] libselinux: fix invalid free in store_stem()/load_mmap()
` [PATCH userspace 2/2] scripts/ci: use F34 image instead of F33

[PATCH] selinux: use strlcpy() when copying IB device name
 2021-05-12 13:52 UTC  (3+ messages)

[PATCH] libselinux: selinux_check_passwd_access_internal(): respect deny_unknown
 2021-05-12  8:09 UTC  (4+ messages)
` [PATCH v2] "

[PATCH] libselinux: silence -Wstringop-overflow warning from gcc 10.3.1
 2021-05-12  8:08 UTC  (3+ messages)

[PATCH userspace] fixfiles: do not exclude /dev and /run in -C mode
 2021-05-12  8:08 UTC  (3+ messages)

[PATCH 0/5 v2] secilc/cil: Fix name resolution for macro calls
 2021-05-11 20:03 UTC  (6+ messages)
` [PATCH 1/5 v2] libsepol/cil: Make name resolution in macros work as documented
` [PATCH 2/5 v2] libsepol/cil: Do not add NULL node when inserting key into symtab
` [PATCH 3/5 v2] libsepo/cil: Refactor macro call resolution
` [PATCH 4/5 v2] libsepol/cil: Do not resolve arguments to declarations in the call
` [PATCH 5/5 v2] secilc/docs: Relocate and reword macro call name resolution order

[PATCH] selinux: Remove redundant assignment to rc
 2021-05-11  1:49 UTC  (2+ messages)

[PATCH v2] selinux: Corrected comment to match kernel-doc comment
 2021-05-11  1:42 UTC  (3+ messages)

[PATCH 2/2] selinux:Delete selinux_xfrm_policy_lookup() useless argument
 2021-05-11  1:40 UTC  (2+ messages)

[PATCH 0/3] selinux: fix changing booleans
 2021-05-11  1:36 UTC  (5+ messages)
` [PATCH 2/3] selinux: simplify duplicate_policydb_cond_list() by using kmemdup()
` [PATCH 3/3] selinux: constify some avtab function arguments

[PATCH] serial: core: fix suspicious security_locked_down() call
 2021-05-10 19:36 UTC  (4+ messages)

[PATCH 1/3] libsepol/cil: Make name resolution in macros work as documented
 2021-05-10 13:55 UTC  (4+ messages)
` [PATCH 2/3] libsepol/cil: Copy and resolve macro calls in one pass
` [PATCH 3/3] secilc/docs: Relocate and reword macro call name resolution order

[PATCH 2/3] libselinux: make selinux_status_open(3) reentrant
 2021-05-10 11:56 UTC 

[PATCH 0/3] libselinux: quirks of the status page
 2021-05-10 10:56 UTC  (4+ messages)
` [PATCH 1/3] libselinux: avc_destroy(3) closes "
` [PATCH 2/3] libselinux: make selinux_status_open(3) reentrant
` [PATCH 3/3] libselinux: do not use status page fallback mode internally

[PATCH] checkpolicy: fix the leak memory when uses xperms
 2021-05-10 11:03 UTC 

[PATCH testsuite] Add AF_VSOCK SOCK_STREAM client/server tests
 2021-05-10  9:00 UTC  (4+ messages)

[PATCH 7/7 v2] tracing: Do not create tracefs files if tracefs lockdown is in effect
 2021-05-07 13:26 UTC  (3+ messages)

[PATCH v2] debugfs: fix security_locked_down() call for SELinux
 2021-05-07 12:53 UTC 

[PATCH] debugfs: fix security_locked_down() call for SELinux
 2021-05-07 12:41 UTC  (5+ messages)

[PATCH] vfio: Lock down no-IOMMU mode when kernel is locked down
 2021-05-07 12:31 UTC 

[PATCH 1/2] libsepol/cil: Fix name resolution involving inherited blocks
 2021-05-06 18:46 UTC  (4+ messages)
` [PATCH 2/2] secilc/docs: Document the order that inherited rules are resolved in

improvement of setfiles man page
 2021-05-06  5:40 UTC 

Stable backport request - perf/core: Fix unconditional security_locked_down() call
 2021-05-05 12:17 UTC  (3+ messages)

[PATCH 0/5] Fix bugs identified by the secilc-fuzzer
 2021-05-04 20:07 UTC  (9+ messages)
` [PATCH 1/5] libsepol/cil: Fix instances where an error returns SEPOL_OK
` [PATCH 2/5] libsepol/cil: Detect degenerate inheritance and exit with an error
` [PATCH 3/5] libsepol/cil: Check datum in ordered list for expected flavor
` [PATCH 4/5] libsepol/cil: Check for self-referential loops in sets
` [PATCH 5/5] libsepol/cil: Return an error if a call argument fails to resolve

[PATCH] libsepol/cil: Properly reset an anonymous classperm set
 2021-05-04 20:06 UTC  (3+ messages)

[PATCH 00/25] libselinux: misc compiler and static analyzer findings
 2021-05-03 17:53 UTC  (26+ messages)
` [PATCH 01/25] libselinux: sidtab_hash(): do not discard const qualifier
` [PATCH 02/25] libselinux: selinux_file_context_cmp(): "
` [PATCH 03/25] libselinux: label_common(): "
` [PATCH 04/25] libselinux: Sha1Finalise(): "
` [PATCH 05/25] libselinux: sefcontext_compile: mark local variable static
` [PATCH 06/25] libselinux: avcstat: use standard length modifier for unsigned long long
` [PATCH 07/25] libselinux: selinux_restorecon: mark local variable static
` [PATCH 08/25] libselinux: selabel_get_digests_all_partial_matches: free memory after FTS_D block
` [PATCH 09/25] libselinux: getconlist: free memory on multiple level arguments
` [PATCH 10/25] libselinux: exclude_non_seclabel_mounts(): drop unused variable
` [PATCH 11/25] libselinux: context_new(): drop dead assignment
` [PATCH 12/25] libselinux: label_x::init(): "
` [PATCH 13/25] libselinux: label_media::init(): "
` [PATCH 14/25] libselinux: setexecfilecon(): "
` [PATCH 15/25] libselinux: getdefaultcon: free memory on multiple same arguments
` [PATCH 16/25] libselinux: store_stem(): do not free possible non-heap object
` [PATCH 17/25] libselinux: matchmediacon(): close file on error
` [PATCH 18/25] libselinux: init_selinux_config(): free resources "
` [PATCH 19/25] libselinux: label_file::init(): do not pass NULL to strdup
` [PATCH 20/25] libselinux: matchpathcon: free memory on realloc failure
` [PATCH 21/25] libselinux: label_db::db_init(): open file with CLOEXEC mode
` [PATCH 22/25] libselinux: drop redundant casts to the same type
` [PATCH 23/25] libselinux: sidtab_sid_stats(): unify parameter name
` [PATCH 24/25] libselinux: regex: unify parameter names
` [PATCH 25/25] libselinux: label_file.c: fix indent

[PATCH testsuite] tests/lockdown: use /sys/kernel/debug/fault_around_bytes for integrity test
 2021-05-03 16:42 UTC  (2+ messages)

[PATCH testsuite] ci: test also on F34 images
 2021-05-03 16:42 UTC  (2+ messages)

[PATCH testsuite] policy: only define anon_inode class if not defined in system policy
 2021-05-01  7:54 UTC  (4+ messages)

[PATCH] libselinux: do not duplicate make target when going into subdirectory
 2021-04-30 19:24 UTC  (3+ messages)

[PATCH] libsepol: use checked arithmetic builtin to perform safe addition
 2021-04-30 19:24 UTC  (3+ messages)

[RFC PATCH userspace 0/6] Parallel setfiles/restorecon
 2021-04-30 12:49 UTC  (5+ messages)

[bug report?] other unexpected behaviours in secilc and CIL semantics
 2021-04-28 16:07 UTC  (2+ messages)

[PATCH 2] testsuite: fix cap_userns for kernels >= v5.12
 2021-04-28 14:27 UTC  (4+ messages)

[RFC SHADOW PATCH 0/7] SELinux modernizations
 2021-04-28 14:10 UTC  (4+ messages)

[GIT PULL] SELinux patches for v5.13
 2021-04-27 20:54 UTC  (2+ messages)

[PATCH] testsuite: fix cap_userns for kernels >= v5.12
 2021-04-27 20:06 UTC  (3+ messages)

[PATCH v3 0/6] evm: Prepare for moving to the LSM infrastructure
 2021-04-27 11:37 UTC  (7+ messages)
` [PATCH v3 1/6] reiserfs: Add missing calls to reiserfs_security_free()
` [PATCH v3 2/6] security: Rewrite security_old_inode_init_security()
` [PATCH v3 3/6] security: Pass xattrs allocated by LSMs to the inode_init_security hook
` [PATCH v3 4/6] security: Support multiple LSMs implementing "
` [PATCH v3 5/6] evm: Align evm_inode_init_security() definition with LSM infrastructure
` [PATCH v3 6/6] evm: Support multiple LSMs providing an xattr

[RFC PATCH 0/2] selinux,anon_inodes: Use a separate SELinux class for each type of anon inode
 2021-04-26 16:00 UTC  (10+ messages)
` [RFC PATCH 2/2] selinux: add capability to map anon inode types to separate classes

[PATCH] selinux: Corrected comment to match kernel-doc comment
 2021-04-24 15:46 UTC  (2+ messages)

[PATCH] libselinux android: Add keystore2_key label module
 2021-04-23 16:54 UTC  (2+ messages)

[PATCH] selinux: add proper NULL termination to the secclass_map permissions
 2021-04-23  2:19 UTC  (2+ messages)

[PATCH v2 0/6] evm: Prepare for moving to the LSM infrastructure
 2021-04-22 21:39 UTC  (7+ messages)
` [PATCH v2 3/6] security: Pass xattrs allocated by LSMs to the inode_init_security hook

[PATCH 0/3 v3] Create secil2tree to write CIL AST
 2021-04-22 19:11 UTC  (3+ messages)

[PATCH userspace] policycoreutils/setfiles: do not create useless setfiles.8.man file
 2021-04-22 19:10 UTC  (3+ messages)


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox