messages from 2025-06-17 14:06:47 to 2025-07-01 19:08:58 UTC [more...]
[PATCH v6 0/6] fs: introduce file_getattr and file_setattr syscalls
2025-07-01 19:08 UTC (27+ messages)
` [PATCH v6 1/6] fs: split fileattr related helpers into separate file
` [PATCH v6 2/6] lsm: introduce new hooks for setting/getting inode fsxattr
` [PATCH v6 3/6] selinux: implement inode_file_[g|s]etattr hooks
` [PATCH v6 4/6] fs: make vfs_fileattr_[get|set] return -EOPNOSUPP
` [PATCH v6 5/6] fs: prepare for extending file_get/setattr()
` [PATCH v6 6/6] fs: introduce file_getattr and file_setattr syscalls
[PATCH] sepolicy: use multiprocessing 'fork' method
2025-07-01 17:42 UTC (2+ messages)
[PATCH v2] policycoreutils: make `-laudit -lbz2` conditional
2025-07-01 15:15 UTC (3+ messages)
[PATCH] Policycoreutils: Make pkg-config work for more types of builds
2025-07-01 15:14 UTC (2+ messages)
[PATCH v3] Support static-only builds
2025-07-01 15:12 UTC (10+ messages)
` [PATCH v3] Support static-only builds - unconditional `-laudit -lbz2` in non-static policycoreutils build
` [PATCH 1/2] libsemanage: add missing libaudit private library
` [PATCH 2/2] policycoreutils: use pkg-config for libsemanage
[PATCH] libsepol/cil: Expand class-permissions in deny rules
2025-07-01 12:13 UTC
[PATCH] libsepol/cil: Fix copying of declarations
2025-06-30 18:52 UTC
[PATCH 0/2] Possible TTY privilege escalation in TIOCSTI ioctl
2025-06-28 1:52 UTC (11+ messages)
` [PATCH 1/2] selftests/tty: add TIOCSTI test suite
` [PATCH 2/2] selinux: add capability checks for TIOCSTI ioctl
[PATCH] SECURITY.md: add my email address and GPG key fingerprint
2025-06-27 16:30 UTC (4+ messages)
ANN: SELinux userspace 3.9-rc2 release
2025-06-25 17:49 UTC
[PATCH testsuite] tests/mac_admin: skip all tests on NFS
2025-06-25 7:23 UTC (2+ messages)
SELinux Namespace work
2025-06-25 5:25 UTC (4+ messages)
[GIT PULL] selinux/selinux-pr-20250624
2025-06-25 0:56 UTC (2+ messages)
[PATCH] libselinux: Document thread caveat for security_compute_av.3
2025-06-24 15:10 UTC (2+ messages)
[PATCH] checkpolicy: Allow attribute assignment to attributes
2025-06-23 19:24 UTC (6+ messages)
[PATCH v2] userspace: replace all links to selinuxproject.org
2025-06-23 18:48 UTC (3+ messages)
[PATCH] libsemanage: Ignore missing field initializers in swig generated code
2025-06-23 18:47 UTC (3+ messages)
[PATCH v3 1/2] libsepol: Allow multiple policycap statements
2025-06-23 18:47 UTC (3+ messages)
[PATCH v3 2/5] libsepol: add netif_wildcard polcap
2025-06-23 18:45 UTC (4+ messages)
` [PATCH v3 1/5] libsepol: update sort order for netifcon definitions
[PATCH] policycoreutils: make `-laudit -lbz2` conditional
2025-06-23 17:58 UTC (2+ messages)
[v6.16-rc2+ Bug] panic in inode_doinit_with_dentry during booting
2025-06-23 15:23 UTC (4+ messages)
[PATCH] userspace: replace all links to selinuxproject.org
2025-06-23 15:09 UTC (3+ messages)
[PATCH] tests/mac_admin: skip another test on nfs
2025-06-23 13:37 UTC (2+ messages)
[RFC PATCH 00/15] LSM: No exclusive LSMs
2025-06-21 17:18 UTC (16+ messages)
` [RFC PATCH 01/15] Audit: Create audit_stamp structure
` [RFC PATCH 02/15] LSM: security_lsmblob_to_secctx module selection
` [RFC PATCH 03/15] Audit: Add record for multiple task security contexts
` [RFC PATCH 04/15] Audit: Add record for multiple object contexts
` [RFC PATCH 05/15] LSM: Single calls in secid hooks
` [RFC PATCH 06/15] LSM: Exclusive secmark usage
` [RFC PATCH 07/15] Audit: Call only the first of the audit rule hooks
` [RFC PATCH 08/15] AppArmor: Remove the exclusive flag
` [RFC PATCH 09/15] LSM: Add mount opts blob size tracking
` [RFC PATCH 10/15] LSM: allocate mnt_opts blobs instead of module specific data
` [RFC PATCH 11/15] LSM: Infrastructure management of the mnt_opts security blob
` [RFC PATCH 12/15] LSM: Allow reservation of netlabel
` [RFC PATCH 13/15] LSM: restrict security_cred_getsecid() to a single LSM
` [RFC PATCH 14/15] Smack: Remove LSM_FLAG_EXCLUSIVE
` [RFC PATCH 15/15] LSM: Remove exclusive LSM flag
[PATCH v2] selinux: change security_compute_sid to return the ssid or tsid on match
2025-06-21 16:58 UTC (10+ messages)
` [PATCH 1/2] selinux: prevent potential comparison mismatches when computing the SID (was [PATCH v2] selinux: change security_compute_sid to return the ssid or tsid on match)
` [PATCH 2/2] selinux: when computing the SID before policy load take into account the socket class case "
selinux userspace wiki
2025-06-20 18:48 UTC (7+ messages)
[PATCH v6 00/42] SELinux namespace support
2025-06-20 17:44 UTC (43+ messages)
` [PATCH v6 01/42] selinux: restore passing of selinux_state
` [PATCH v6 02/42] selinux: introduce current_selinux_state
` [PATCH v6 03/42] selinux: support multiple selinuxfs instances
` [PATCH v6 04/42] selinux: dynamically allocate selinux namespace
` [PATCH v6 05/42] netstate,selinux: create the selinux netlink socket per network namespace
` [PATCH v6 06/42] selinux: limit selinux netlink notifications to init namespace
` [PATCH v6 07/42] selinux: support per-task/cred selinux namespace
` [PATCH v6 08/42] selinux: introduce cred_selinux_state() and use it
` [PATCH v6 09/42] selinux: init inode from nearest initialized namespace
` [PATCH v6 10/42] selinux: add a selinuxfs interface to unshare selinux namespace
` [PATCH v6 11/42] selinux: add limits for SELinux namespaces
` [PATCH v6 12/42] selinux: exempt creation of init SELinux namespace from limits
` [PATCH v6 13/42] selinux: refactor selinux_state_create()
` [PATCH v6 14/42] selinux: allow userspace to detect non-init SELinux namespace
` [PATCH v6 15/42] selinuxfs: restrict write operations to the same selinux namespace
` [PATCH v6 16/42] selinux: introduce a global SID table
` [PATCH v6 17/42] selinux: wrap security server interfaces to use the "
` [PATCH v6 18/42] selinux: introduce a Kconfig option for SELinux namespaces
` [PATCH v6 19/42] selinux: eliminate global SID table if !CONFIG_SECURITY_SELINUX_NS
` [PATCH v6 20/42] selinux: maintain a small cache in the global SID table
` [PATCH v6 21/42] selinux: update hook functions to use correct selinux namespace
` [PATCH v6 22/42] selinux: introduce cred_task_has_perm()
` [PATCH v6 23/42] selinux: introduce cred_has_extended_perms()
` [PATCH v6 24/42] selinux: introduce cred_self_has_perm()
` [PATCH v6 25/42] selinux: introduce cred_has_perm()
` [PATCH v6 26/42] selinux: introduce cred_ssid_has_perm() and cred_other_has_perm()
` [PATCH v6 27/42] selinux: introduce task_obj_has_perm()
` [PATCH v6 28/42] selinux: update bprm hooks for selinux namespaces
` [PATCH v6 29/42] selinux: add kerneldoc to new permission checking functions
` [PATCH v6 30/42] selinux: convert selinux_file_send_sigiotask() to namespace-aware helper
` [PATCH v6 31/42] selinux: rename cred_has_perm*() to cred_tsid_has_perm*()
` [PATCH v6 32/42] selinux: update cred_tsid_has_perm_noaudit() to return the combined avd
` [PATCH v6 33/42] selinux: convert additional checks to cred_ssid_has_perm()
` [PATCH v6 34/42] selinux: introduce selinux_state_has_perm()
` [PATCH v6 35/42] selinux: annotate selinuxfs permission checks
` [PATCH v6 36/42] selinux: annotate process transition "
` [PATCH v6 37/42] selinux: convert xfrm and netlabel "
` [PATCH v6 38/42] selinux: switch selinux_lsm_setattr() checks to current namespace
` [PATCH v6 39/42] selinux: make open_perms namespace-aware
` [PATCH v6 40/42] selinux: split cred_ssid_has_perm() into two cases
` [PATCH v6 41/42] selinux: convert nlmsg_sock_has_extended_perms() to namespace-aware
` [PATCH v6 42/42] selinux: disallow writes to /sys/fs/selinux/user in non-init namespaces
[PATCH v2] Documentation/admin-guide/LSM/SELinux.rst: add links to resources
2025-06-20 12:05 UTC (3+ messages)
[PATCH] selinux: add __GFP_NOWARN to hashtab_init() allocations
2025-06-19 21:24 UTC (2+ messages)
[PATCH v2 2/2] selinux: optimize selinux_inode_getattr/permission() based on neveraudit|permissive
2025-06-19 21:23 UTC (2+ messages)
[PATCH v2 1/2] selinux: introduce neveraudit types
2025-06-19 21:23 UTC (2+ messages)
[PATCH v2] security,fs,nfs,net: update security_inode_listsecurity() interface
2025-06-19 21:18 UTC (7+ messages)
[PATCH v2 bpf-next 0/4] af_unix: Allow BPF LSM to filter SCM_RIGHTS at sendmsg()
2025-06-19 18:55 UTC (5+ messages)
[PATCH 1/2] fs: Provide function that allocates a secure anonymous inode
2025-06-19 5:36 UTC (6+ messages)
ANN: Reference Policy 2.20250618
2025-06-18 18:30 UTC
[GIT PULL] selinux/selinux-pr-20250618
2025-06-18 18:08 UTC (2+ messages)
[PATCH testsuite] tests/mac_admin: disable test of getting undefined label on nfs
2025-06-18 16:15 UTC (2+ messages)
[PATCH] Expect Key error for module_load test in lockdown mode
2025-06-18 15:35 UTC (3+ messages)
[PATCH testsuite] README.md: update dependency from iptables to iptables-nft
2025-06-18 15:26 UTC (2+ messages)
[syzbot] [selinux?] WARNING in hashtab_init
2025-06-18 15:07 UTC (4+ messages)
[PATCH testsuite] tests/inet_socket: properly detect IPSEC support
2025-06-18 14:50 UTC (4+ messages)
[PATCH 0/3] LSM: Multiple LSM mount options
2025-06-17 21:01 UTC (4+ messages)
` [PATCH 1/3] LSM: Add mount opts blob size tracking
` [PATCH 2/3] LSM: allocate mnt_opts blobs instead of module specific data
` [PATCH 3/3] LSM: Infrastructure management of the mnt_opts security blob
[PATCH v5 00/42] SELinux namespace support
2025-06-17 14:05 UTC (12+ messages)
` [PATCH v5 31/42] selinux: rename cred_has_perm*() to cred_tsid_has_perm*()
` [PATCH v5 33/42] selinux: convert additional checks to cred_ssid_has_perm()
` [PATCH v5 34/42] selinux: introduce selinux_state_has_perm()
` [PATCH v5 35/42] selinux: annotate selinuxfs permission checks
` [PATCH v5 36/42] selinux: annotate process transition "
` [PATCH v5 37/42] selinux: convert xfrm and netlabel "
` [PATCH v5 38/42] selinux: switch selinux_lsm_setattr() checks to current namespace
` [PATCH v5 39/42] selinux: make open_perms namespace-aware
` [PATCH v5 40/42] selinux: split cred_ssid_has_perm() into two cases
` [PATCH v5 41/42] selinux: convert nlmsg_sock_has_extended_perms() to namespace-aware
` [PATCH v5 42/42] selinux: disallow writes to /sys/fs/selinux/user in non-init namespaces
page: next (older) | prev (newer) | latest
- recent:[subjects (threaded)|topics (new)|topics (active)]
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox