messages from 2021-12-09 16:52:57 to 2022-01-21 08:40:19 UTC [more...]
[PATCH] libselinux: Cached security context not accurate
2022-01-21 8:40 UTC
[RFC PATCH userspace 0/5] Allow rebuilding policy store only if there were external changes to modules
2022-01-20 22:12 UTC (12+ messages)
` [RFC PATCH userspace 1/5] libsemanage: add missing include to boolean_record.c
` [RFC PATCH userspace 2/5] semodule,libsemanage: move module hashing into libsemanage
` [RFC PATCH userspace 3/5] libsemanage: move compressed file handling into a separate object
` [RFC PATCH userspace 4/5] libsemanage: optionally rebuild policy when modules are changed externally
` [RFC PATCH userspace 5/5] semodule: add command-line option to detect module changes
[PATCH RFC v2 0/2] selinux: parse sids earlier to avoid doing memory allocations under spinlock
2022-01-20 21:49 UTC (3+ messages)
` [PATCH RFC v2 1/2] selinux: Fix selinux_sb_mnt_opts_compat()
` [PATCH RFC v2 2/2] selinux: try to use preparsed sid before calling parse_sid()
[PATCH] libsepol: reject invalid roles before inverting
2022-01-20 17:37 UTC (4+ messages)
[libselinux][PATCH] libselinux: make threadsafe for discover_class_cache
2022-01-20 7:33 UTC
[PATCH] libsepol: handle type gaps when optimizing
2022-01-19 18:11 UTC (6+ messages)
` [PATCH v2] libsepol: handle type gaps
[PATCH 0/4 v2] libsepol/cil: Limit certain error and warning reports
2022-01-19 16:35 UTC (5+ messages)
` [PATCH 1/4 v2] libsepol/cil: Add cil_get_log_level() function
` [PATCH 2/4 v2] libsepol/cil: Provide more control over reporting bounds failures
` [PATCH 3/4 v2] libsepol/cil: Limit the neverallow violations reported
` [PATCH 4/4 v2] libsepol/cil: Limit the amount of reporting for context rule conflicts
[PATCH] libsepol: drop trailing newlines in log messages
2022-01-19 16:03 UTC
[PATCH] libsepol: return failure on saturated class name length
2022-01-19 14:39 UTC
[PATCH 1/2] libsepol/cil: Limit the amount of reporting for neverallow violations
2022-01-19 13:04 UTC (5+ messages)
` [PATCH 2/2] libsepol/cil: Limit the amount of reporting for context rule conflicts
[PATCH RFC] selinux: Fix selinux_sb_mnt_opts_compat()
2022-01-18 16:13 UTC
[PATCH] libsepol: check for saturated class name length
2022-01-18 16:15 UTC (3+ messages)
[PATCH] libselinux: Strip spaces before values in config
2022-01-17 9:42 UTC (3+ messages)
Re:[PATCH] selinux: check the return value of audit_log_start()
2022-01-15 1:22 UTC
[PATCH] selinux: check the return value of audit_log_start()
2022-01-15 1:10 UTC
[PATCH] policycoreutils: Improve error message when selabel_open fails
2022-01-14 14:55 UTC (3+ messages)
[PATCH] libsepol/cil: Ensure that the class in a classcommon is a kernel class
2022-01-13 16:04 UTC
[PATCH] selinux-notebook: Add epub build
2022-01-13 3:18 UTC (2+ messages)
[PATCH V2 0/4] SELinux Notebook: Add eBook reader build
2022-01-13 2:52 UTC (10+ messages)
` [PATCH V2 1/4] selinux-notebook: Make file links consistent
` [PATCH V2 2/4] src/images: Remove current penguin
` [PATCH V2 3/4] src/images: Add new SELinux penguin
` [PATCH V2 4/4] selinux-notebook: Add epub build
[PATCH testsuite] tests/binder: Build only for 4.11 and later kernels
2022-01-13 2:09 UTC
[PATCH] ci: run the tests under ASan/UBsan on GHActions
2022-01-12 13:37 UTC (4+ messages)
[PATCH 0/2 RFC] libsepol: Adding support for not-self rules
2022-01-11 22:08 UTC (3+ messages)
` [PATCH 1/2 RFC] libsepol: Add not self support for neverallow rules
` [PATCH 2/2 RFC] libsepol/cil: Add notself and minusself support to CIL
[PATCH 00/16 v2] Refactor and fix assertion checking
2022-01-11 21:54 UTC (17+ messages)
` [PATCH 01/16 v2] libsepol: Return an error if check_assertion() returns an error
` [PATCH 02/16 v2] libsepol: Change label in check_assertion_avtab_match()
` [PATCH 03/16 v2] libsepol: Remove uneeded error messages in assertion checking
` [PATCH 04/16 v2] libsepol: Check for error from check_assertion_extended_permissions()
` [PATCH 05/16 v2] libsepol: Use consistent return checking style
` [PATCH 06/16 v2] libsepol: Move check of target types to before check for self
` [PATCH 07/16 v2] libsepol: Create function check_assertion_self_match() and use it
` [PATCH 08/16 v2] libsepol: Use (rc < 0) instead of (rc) when calling ebitmap functions
` [PATCH 09/16 v2] libsepol: Remove unnessesary check for matching class
` [PATCH 10/16 v2] libsepol: Move assigning outer loop index out of inner loop
` [PATCH 11/16 v2] libsepol: Make use of previously created ebitmap when checking self
` [PATCH 12/16 v2] libsepol: Refactor match_any_class_permissions() to be clearer
` [PATCH 13/16 v2] libsepol: Make return value clearer when reporting neverallowx errors
` [PATCH 14/16 v2] libsepol: The src and tgt must be the same if neverallow uses self
` [PATCH 15/16 v2] libsepol: Set args avtab pointer when reporting assertion violations
` [PATCH 16/16 v2] libsepol: Fix two problems with neverallowxperm reporting
[GIT PULL] SELinux patches for v5.17
2022-01-11 21:24 UTC (2+ messages)
ANN: Reference Policy 2.20220106
2022-01-06 19:42 UTC
[PATCH 1/3] libsepol/cil: Do not copy blockabstracts when inheriting a block
2022-01-05 21:16 UTC (3+ messages)
` [PATCH 2/3] libsepol/cil: Mark as abstract all sub-blocks of an abstract block
` [PATCH 3/3] libsepol/cil: Do not resolve names to declarations in abstract blocks
[PATCH v2] libsepol: check for valid sensitivity before lookup
2022-01-05 18:25 UTC (3+ messages)
[PATCH] libsepol/cil: bail out on snprintf failure
2022-01-05 18:24 UTC (3+ messages)
[GIT PULL] SELinux fixes for v5.16 (#4)
2021-12-28 21:36 UTC (2+ messages)
[PATCH] selinux: initialize proto variable in selinux_ip_postroute_compat()
2021-12-27 15:48 UTC (2+ messages)
[PATCH] libsepol: check for valid sensitivity before lookup
2021-12-23 17:25 UTC
[PATCH] selinux: minor tweaks to selinux_add_opt()
2021-12-23 2:30 UTC (2+ messages)
Granting myself access on oss-fuzz issue reports
2021-12-22 15:40 UTC (2+ messages)
[PATCH v3] security/selinux: fix potential memleak in error branch
2021-12-21 20:00 UTC (2+ messages)
[GIT PULL] SELinux fixes for v5.16 (#3)
2021-12-18 13:40 UTC (6+ messages)
[PATCH 00/16] Refactor and fix assertion checking
2021-12-17 18:22 UTC (18+ messages)
` [PATCH 01/16] libsepol: Return an error if check_assertion() returns an error
` [PATCH 02/16] libsepol: Change label in check_assertion_avtab_match()
` [PATCH 03/16] libsepol: Remove uneeded error messages in assertion checking
` [PATCH 04/16] libsepol: Check for error from check_assertion_extended_permissions()
` [PATCH 05/16] libsepol: Use consistent return checking style
` [PATCH 06/16] libsepol: Move check of target types to before check for self
` [PATCH 07/16] libsepol: Create function check_assertion_self_match() and use it
` [PATCH 08/16] libsepol: Use (rc < 0) instead of (rc) when calling ebitmap functions
` [PATCH 09/16] libsepol: Remove unnessesary check for matching class
` [PATCH 10/16] libsepol: Move assigning outer loop index out of inner loop
` [PATCH 11/16] libsepol: Make use of previously created ebitmap when checking self
` [PATCH 12/16] libsepol: Refactor match_any_class_permissions() to be clearer
` [PATCH 13/16] libsepol: Make return value clearer when reporting neverallowx errors
` [PATCH 14/16] libsepol: The src and tgt must be the same if neverallow uses self
` [PATCH 15/16] libsepol: Set args avtab pointer when reporting assertion violations
` [PATCH 16/16] libsepol: Fix two problems with neverallowxperm reporting
[RFC PATCH v2 00/36] libsepol: add fuzzer for reading binary policies
2021-12-17 13:59 UTC (8+ messages)
` [PATCH v3 "
` [PATCH v3 11/36] libsepol: enforce avtab item limit
` [PATCH v3 25/36] libsepol: validate permission count of classes
` [PATCH v3 35/36] libsepol: validate fsuse types
[PATCH 1/2] libsepol/cil: support IPv4/IPv6 address embedding
2021-12-17 13:57 UTC (5+ messages)
` [PATCH 2/2] checkpolicy: warn on bogus IP address or netmask in nodecon statement
[PATCH v2] selinux: Fix sleeping function called from invalid context
2021-12-16 22:53 UTC (2+ messages)
[PATCH] selinux: Fix sleeping function called from invalid context
2021-12-15 21:03 UTC (2+ messages)
[PATCH v31 00/28] LSM: Module stacking for AppArmor
2021-12-15 9:14 UTC (35+ messages)
` [PATCH v31 01/28] integrity: disassociate ima_filter_rule from security_audit_rule
` [PATCH v31 02/28] LSM: Infrastructure management of the sock security
` [PATCH v31 03/28] LSM: Add the lsmblob data structure
` [PATCH v31 04/28] LSM: provide lsm name and id slot mappings
` [PATCH v31 05/28] IMA: avoid label collisions with stacked LSMs
` [PATCH v31 06/28] LSM: Use lsmblob in security_audit_rule_match
` [PATCH v31 07/28] LSM: Use lsmblob in security_kernel_act_as
` [PATCH v31 08/28] LSM: Use lsmblob in security_secctx_to_secid
` [PATCH v31 09/28] LSM: Use lsmblob in security_secid_to_secctx
` [PATCH v31 10/28] LSM: Use lsmblob in security_ipc_getsecid
` [PATCH v31 11/28] LSM: Use lsmblob in security_task_getsecid
` [PATCH v31 12/28] LSM: Use lsmblob in security_inode_getsecid
` [PATCH v31 13/28] LSM: Use lsmblob in security_cred_getsecid
` [PATCH v31 14/28] LSM: Specify which LSM to display
` [PATCH v31 15/28] LSM: Ensure the correct LSM context releaser
` [PATCH v31 16/28] LSM: Use lsmcontext in security_secid_to_secctx
` [PATCH v31 17/28] LSM: Use lsmcontext in security_inode_getsecctx
` [PATCH v31 18/28] LSM: security_secid_to_secctx in netlink netfilter
` [PATCH v31 19/28] NET: Store LSM netlabel data in a lsmblob
` [PATCH v31 20/28] binder: Pass LSM identifier for confirmation
` [PATCH v31 21/28] LSM: Extend security_secid_to_secctx to include module selection
` [PATCH v31 22/28] Audit: Keep multiple LSM data in audit_names
` [PATCH v31 23/28] Audit: Create audit_stamp structure
` [PATCH v31 24/28] Audit: Add framework for auxiliary records
` [PATCH v31 25/28] Audit: Add record for multiple task security contexts
` [PATCH v31 26/28] Audit: Add record for multiple object "
` [PATCH v31 27/28] LSM: Add /proc attr entry for full LSM context
` [PATCH v31 28/28] AppArmor: Remove the exclusive flag
[PATCH] selinux: check the return value of audit_log_start()
2021-12-14 22:59 UTC (2+ messages)
[PATCH] selinux: fix a wrong check condition of strcmp()
2021-12-14 16:48 UTC (3+ messages)
[PATCH v4] selinux-notebook: New chapter: Hardening SELinux
2021-12-13 23:46 UTC (2+ messages)
[PATCH v2] secilc: kernel policy language is infix
2021-12-12 18:49 UTC
[PATCH 0/4] SELinux Notebook: Add eBook reader build
2021-12-11 16:41 UTC (7+ messages)
` [PATCH 1/4] selinux-notebook: Make file links consistent
` [PATCH 2/4] src/images: Remove current penguin
` [PATCH 4/4] selinux-notebook: Add epub build
overlay userxattr seems to not adhere to defaultrole
2021-12-11 16:23 UTC
[PATCH 1/3] mcstrans: port to new PCRE2 from end-of-life PCRE
2021-12-09 17:33 UTC (4+ messages)
` [PATCH v2 "
[PATCH 0/5 v2] Fix/add optional file type handling for genfscon rules
2021-12-09 17:32 UTC (3+ messages)
` [PATCH 1/5 v2] libsepol: Add support for file types in writing out policy.conf
page: next (older) | prev (newer) | latest
- recent:[subjects (threaded)|topics (new)|topics (active)]
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox