SELinux Security Module development
 help / color / mirror / Atom feed
 messages from 2026-07-03 02:30:41 to 2026-07-20 22:47:57 UTC [more...]

[PATCH v5 bpf-next 0/3] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling
 2026-07-20 22:47 UTC  (21+ messages)
` [PATCH v5 bpf-next 1/3] security: rework inode_init_security xattr handling
  ` [PATCH v5 "
` [PATCH v5 bpf-next 2/3] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling
  ` [PATCH v5 "
` [PATCH v5 bpf-next 3/3] selftests/bpf: add tests for bpf_init_inode_xattr kfunc

[PATCH v2] python/sepolgen: port policygen.py to setools 4 API
 2026-07-20 19:52 UTC 

[PATCH] python/sepolgen: port policygen.py to setools 4 API
 2026-07-20 19:34 UTC 

[PATCH] libsepol: add module package fuzzer
 2026-07-20 18:45 UTC  (2+ messages)

[PATCH] policycoreutils/scripts/fixfiles: drop unused functions
 2026-07-20 18:37 UTC 

[PATCH v2] libsemanage: semanage_pipe_data(): multiplex the compiler pipes
 2026-07-20 18:29 UTC 

[PATCH] semodule-utils: add bad-data tests for semodule_package
 2026-07-20 13:49 UTC 

[PATCH] policycoreutils/setfiles: introduce -j for skip_multilink
 2026-07-20 12:30 UTC  (2+ messages)

[PATCH v3 0/5] Make selinux_check_access() thread-safe
 2026-07-20 12:29 UTC  (8+ messages)
` [PATCH v3 1/5] libselinux: avc: use pthread mutexes by default when no lock callbacks set
` [PATCH v3 2/5] libselinux: stringrep: serialize access to the discover_class_cache
` [PATCH v3 3/5] libselinux: sestatus: serialize selinux status updates
` [PATCH v3 4/5] libselinux: stringrep: snapshot perm names in security_av_string()
` [PATCH v3 5/5] libselinux: update man pages for new thread safety guarantees

[PATCH] libsepol: Prevent OOB access of array when copying scope information
 2026-07-20 12:20 UTC  (2+ messages)

SELinux Userspace Utilities: Local Denial-of-Service Attack Vectors in seunshare in release 3.10
 2026-07-20  8:56 UTC 

[PATCH v4] security: Expand task_setscheduler LSM hook
 2026-07-20  1:54 UTC  (2+ messages)

[GIT PULL] selinux/selinux-pr-20260717
 2026-07-17 20:17 UTC  (2+ messages)

[PATCH v2 01/10] sandbox/seunshare: free glob on error path
 2026-07-17 18:34 UTC  (10+ messages)
` [PATCH v2 02/10] sandbox/seunshare: make a best-effort to remove tmpdir on error paths
` [PATCH v2 03/10] sandbox/seunshare: cap rm_rf() depth
` [PATCH v2 04/10] sandbox/seunshare: make -W/-P .. check exact
` [PATCH v2 05/10] sandbox/seunshare: document that -C has long been a no-op
` [PATCH v2 06/10] sandbox/seunshare: remove files under tmpdir as user
` [PATCH v2 07/10] sandbox/sandbox: use slicing rather than re.sub in copyfile()
` [PATCH v2 08/10] sandbox/sandbox: shred the correct directory
` [PATCH v2 09/10] sandbox/sandbox: clean up the runuserdir
` [PATCH v2 10/10] sandbox/sandboxX.sh: quote the command line arguments

[PATCH] policycoreutils/secon: ensure that range_bg is not left NULL
 2026-07-17 17:27 UTC 

[PATCH] python/sepolicy: generate: drop or merge symbol table overwrites
 2026-07-17 17:21 UTC 

[PATCH 1/2] libselinux: do not call close(fd) when fd < 0
 2026-07-17 14:33 UTC  (2+ messages)
` [PATCH 2/2] libselinux: selabel_digest -v: handle unexpected output

[PATCH] mcstrans: match base classification and word text case-insensitively
 2026-07-16 19:57 UTC 

[PATCH 1/4] restorecond: switch terminate to sig_atomic_t for async-signal-safety
 2026-07-16 19:37 UTC  (4+ messages)
` [PATCH 2/4] restorecond: copy homedir to avoid overwrite by later getpw*() calls
` [PATCH 3/4] restorecond: fix type of utmpwatcher_handle()
` [PATCH 4/4] restorecond: fix isspace() call to cast to unsigned

[PATCH] policycoreutils/setfiles: fix -f handling
 2026-07-16 19:11 UTC 

[PATCH] policycoreutils/scripts/fixfiles: drop /tmp cleanup
 2026-07-16 18:48 UTC 

[PATCH] mcstrans: fix inverted alias skip check in compute_trans_from_raw()
 2026-07-16 15:14 UTC 

[PATCH] semodule-utils/semodule_package: report the output filename on write errors
 2026-07-16 14:49 UTC 

[PATCH] policycoreutils/hll/pp: use argv[optind] appropriately
 2026-07-16 14:42 UTC 

[PATCH] policycoreutils/run_init: fix EINTR/EAGAIN checking in open_init_pty
 2026-07-16 14:35 UTC 

[PATCH] libsemanage: semanage_pipe_data(): multiplex the compiler pipes
 2026-07-16 14:20 UTC 

[PATCH] policycoreutils/run_init: handle NULL from crypt() in non-PAM build
 2026-07-16 12:58 UTC 

[PATCH 1/2] mcstrans: defer SIGTERM cleanup to the main loop
 2026-07-16 12:52 UTC  (2+ messages)
` [PATCH 2/2] mcstrans: bound Include nesting depth

[PATCH] selinux: compute the IMA configuration settings string length once at boot
 2026-07-16  1:41 UTC  (3+ messages)

[PATCH v2] NFSv4.2: fix nfs4_listxattr size accounting
 2026-07-15 20:41 UTC  (12+ messages)

[PATCH] libsemanage: direct_api: clamp write length in ERR_CHLD_STDERR()
 2026-07-15 19:23 UTC 

[PATCH 1/5] libselinux: selinux_set_mapping(): reject class tables with too many classes
 2026-07-15 18:49 UTC  (5+ messages)
` [PATCH 2/5] libselinux: label_file: check next_entry() when skipping
` [PATCH 3/5] libselinux: matchpathcon: make filespec table per thread and bound specind
` [PATCH 4/5] libselinux: label_file: fstat after open in open_file()
` [PATCH 5/5] libselinux: label_db: prevent integer overflows on resizing

[PATCH] selinux: use socket SID for SCTP bind/connect permission checks in softirq
 2026-07-15 17:54 UTC  (2+ messages)

[PATCH] libsemanage: user_base_parse: prevent OOB read on truncated config
 2026-07-15 16:58 UTC 

[PATCH 01/10] sandbox/seunshare: free glob on error path
 2026-07-15 16:20 UTC  (10+ messages)
` [PATCH 02/10] sandbox/seunshare: make a best-effort to remove tmpdir on error paths
` [PATCH 03/10] sandbox/seunshare: cap rm_rf() depth
` [PATCH 04/10] sandbox/seunshare: make -W/-P .. check exact
` [PATCH 05/10] sandbox/seunshare: document that -C has long been a no-op
` [PATCH 06/10] sandbox/seunshare: remove files under tmpdir as user
` [PATCH 07/10] sandbox/sandbox: use slicing rather than re.sub in copyfile()
` [PATCH 08/10] sandbox/sandbox: shred the correct directory
` [PATCH 09/10] sandbox/sandbox: clean up the runuserdir
` [PATCH 10/10] sandbox/sandboxX.sh: quote the command line arguments

[PATCH v2] libselinux: use designated initializers for label initfuncs
 2026-07-15 13:36 UTC  (3+ messages)

[PATCH] checkpolicy: add bad data protection tests
 2026-07-15 13:35 UTC  (4+ messages)

[PATCH] libselinux: drop legacy probing of /selinux and /proc nodes for selinuxfs
 2026-07-15 13:35 UTC  (3+ messages)

[PATCH] checkpolicy: fix double free of fstype in define_genfs_context_helper
 2026-07-15 13:35 UTC  (3+ messages)

[PATCH v2] selinux: fix incorrect execmem checks on overlayfs
 2026-07-14 22:10 UTC  (4+ messages)

[PATCH] selinux: fix incorrect execmem checks on overlayfs
 2026-07-14 12:51 UTC  (6+ messages)

[PATCH] libselinux: use designated initializers for label initfuncs
 2026-07-14 12:35 UTC  (2+ messages)

[PATCH v2] selinux: replace strlcat() with seq_buf in selinux_ima_collect_state()
 2026-07-13 22:15 UTC  (2+ messages)

[PATCH v3] selinux: suppress warning flood for retired DCCP netlink messages
 2026-07-13 21:26 UTC  (4+ messages)

[GIT PULL] selinux/selinux-pr-20260710
 2026-07-11  3:07 UTC  (2+ messages)

[Bug] Double free vulnerability at define_genfs_context_helper
 2026-07-10 18:14 UTC  (5+ messages)

[PATCH] skip inet_socket/mptcp when CONFIG_MPTCP is not enabled
 2026-07-10 17:59 UTC  (2+ messages)

[PATCH] tests: make IPv6 subtests optional on IPv4-only systems
 2026-07-10 17:55 UTC  (2+ messages)

[PATCH] Fix double-free in secilcheck
 2026-07-10 17:50 UTC  (3+ messages)

[PATCH] checkpolicy: add bad data protection tests
 2026-07-10 10:29 UTC 

[PATCH v2] perf test amd ibs: avoid using executable heap
 2026-07-09 14:35 UTC  (4+ messages)

[PATCH testsuite] tests/overlay: verify that execmem is not checked for the mounter
 2026-07-09 13:02 UTC  (3+ messages)

[PATCH testsuite v2] tests/overlay: verify that execmem is not checked for the mounter
 2026-07-09 13:00 UTC 

[PATCH] SECURITY.md: remove William Roberts
 2026-07-08 19:31 UTC  (2+ messages)

[PATCH] SECURITY.md: add my email address and GPG key fingerprint
 2026-07-07 14:14 UTC 

[PATCH v2 0/3] userspace: use openat2 if available
 2026-07-07 13:58 UTC  (6+ messages)
` [PATCH v2 1/3] libselinux: selinux_restorecon: use openat2 if defined
` [PATCH v2 2/3] restorecond: "
` [PATCH v2 3/3] sandbox/seunshare: pin_dir: use openat2 if available

[PATCH 02/24] libselinux/utils: fix matchpathcon usage
 2026-07-07 12:35 UTC  (4+ messages)
` [PATCH 01/24] libselinux/include: fix man page grammar, wording and consistency nits

[PATCH 2/5] newrole: compare shadow hashes in constant time
 2026-07-07 12:26 UTC  (5+ messages)
` [PATCH 5/5] newrole: fail closed for -l when the terminal context is unknown

[PATCH 1/6 v7] libselinux: Add overflow checks
 2026-07-07 12:24 UTC  (8+ messages)
` [PATCH 2/6 v7] libsemanage: "
` [PATCH 3/6 v7] libsepol/cil: Add overflow checks for circular reference checks
` [PATCH 4/6 v7] libsepol/cil: Add overflow checks and cil_reallocarray
` [PATCH 5/6 v7] libsepol: Add overflow checks to strs_* family of functions
` [PATCH 6/6 v7] libsepol: Add overflow checks

[PATCH v2] selinux: suppress warning flood for retired DCCP netlink messages
 2026-07-07 11:35 UTC  (4+ messages)

[PATCH v6 0/8] lsm: Replace security_sb_mount with granular mount hooks
 2026-07-07  2:08 UTC  (17+ messages)
` [PATCH v6 1/8] lsm: Add "
` [PATCH v6 2/8] apparmor: Remove redundant MS_MGC_MSK stripping in apparmor_sb_mount
` [PATCH v6 3/8] apparmor: Convert from sb_mount to granular mount hooks
` [PATCH v6 4/8] selinux: "
` [PATCH v6 5/8] landlock: "
` [PATCH v6 6/8] tomoyo: "
` [PATCH v6 7/8] vfs: Replace security_sb_mount/security_move_mount with granular hooks
` [PATCH v6 8/8] lsm: Remove security_sb_mount and security_move_mount

[PATCH v3] selinux: avoid sk_socket dereference in selinux_sctp_bind_connect()
 2026-07-06 19:14 UTC  (4+ messages)


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox