SELinux Security Module development
 help / color / mirror / Atom feed
 messages from 2026-09-01 20:14:26 to 2026-09-08 20:20:05 UTC [more...]

[PATCH 00/39] mm: make VMA flag semantics explicit, eliminate VM_SPECIAL
 2026-09-08 20:01 UTC  (38+ messages)
` [PATCH 01/39] mm/vma: predicate setting mmap_prepare VMA fields on new vma alloc
` [PATCH 02/39] mm/vma: introduce and use vma_[flags_]can_merge()
` [PATCH 03/39] mm: consistently validate VMA state after mmap[_prepare] hooks
` [PATCH 04/39] mm/vma: ensure mmap_prepare doesn't set actions on a mergeable vma
` [PATCH 05/39] mm: make map_kernel_pages_[prepare,complete] internal and unexported
` [PATCH 06/39] mm/vma: tidy up map kernel pages enum values
` [PATCH 07/39] mm: add mmap action for discontiguous kernel page mapping
` [PATCH 08/39] docs: filesystems: update mmap_prepare docs for discontig kernel pgs
` [PATCH 09/39] drivers/usb/mon: update to use mmap_prepare + map kernel pages
` [PATCH 10/39] infiniband: update hfi1 to use remap_vmalloc_range()
` [PATCH 11/39] selinux: reject writable opens of policy file, drop mmap shared/write check
` [PATCH 12/39] ALSA: pcm: use vm_insert_page() to map PCM status page
` [PATCH 13/39] bpf: arena: mark arena_map_mmap() mappings VM_MIXEDMAP
` [PATCH 14/39] mm/vma: add vma[_flags]_is_kernel_owned() predicates
` [PATCH 15/39] mm/vma: only allow mmap to clear VMA_MAYWRITE_BIT if kernel-owned
` [PATCH 16/39] mm/vma: add and use vma_[flags]_is_fixed_mapping
` [PATCH 17/39] scsi: sg: convert mmap hook to mmap_prepare and rework
` [PATCH 18/39] fbdev: defio: assert FBINFO_VIRTFB, drop VM_IO, add VM_MIXEDMAP
` [PATCH 19/39] HSI: cmt_speech: convert mmap hook to mmap_prepare, refactor
` [PATCH 20/39] mm/gup: error out early on !VMA_MAYREAD_BIT VMAs
` [PATCH 21/39] uprobes: remove VM_IO, set VM_MIXEDMAP for mapped kernel pages
` [PATCH 22/39] mm/mlock: clear VMA_LOCKED_MASK over mmap callback
` [PATCH 23/39] mm/mlock: eliminate weird VMA_IO_BIT abuse and simplify
` [PATCH 24/39] mm/vma: enforce that only kernel-owned mappings may set VMA_IO_BIT
` [PATCH 25/39] mm: remove VMA_IO_BIT check in vma[_flags]_is_kernel_owned()
` [PATCH 26/39] mm: remove hugetlb_inline.h
` [PATCH 27/39] mm: rename is_vm_hugetlb_page() to vma_is_hugetlb()
` [PATCH 28/39] mm: drop some redundant checks around hugetlb VMAs
` [PATCH 29/39] mm/madvise: update is_valid_guard_vma() to use vma_can_merge()
` [PATCH 30/39] mm/vma: introduce vma[_flags]_is_persistent()
` [PATCH 31/39] mm/uffd: use predicates for userfaultfd checks
` [PATCH 32/39] mm/madvise: use predicates for madvise(..., MADV_DOFORK)
` [PATCH 33/39] mm: eliminate VMA_SPECIAL_FLAGS usage when hugetlb explicitly tested
` [PATCH 34/39] mm: eliminate VMA_SPECIAL_FLAGS check in lru_gen_look_around()
` [PATCH 35/39] mm: avoid use of VMA_SPECIAL_FLAGS in migrate_vma_setup()
` [PATCH 36/39] mm: eliminate VM_SPECIAL, VMA_SPECIAL_FLAGS
` [PATCH 37/39] fuse: dax: do not set VM_MIXEDMAP

[PATCH 1/2] libsepol,checkpolicy,secilc: split min/max policydb versions between SELinux and Xen
 2026-09-08 20:03 UTC  (2+ messages)
` [PATCH 2/2] libsepol: only read/write the neveraudit map for SELinux policies

[PATCH 1/4] libsepol: validate portcon protocol values
 2026-09-08 19:27 UTC  (4+ messages)
` [PATCH 2/4] libsepol: validate genfs_seclabel_wildcard paths
` [PATCH 3/4] libsepol: check user MLS levels by scope not policy type
` [PATCH 4/4] libsepol,checkpolicy,python/semanage: validate portcon ranges

[PATCH] selinux: treat genfscon lookup failure as non-fatal for booleans
 2026-09-08 15:30 UTC  (3+ messages)

Fwd: kernel oops on recent policy with older kernel
 2026-09-08 12:42 UTC  (6+ messages)
  `  "

[PATCH 5.10/5.15/6.1 0/2] selinux: reject an unclaimed class value in security_get_classes()
 2026-09-08  0:53 UTC  (4+ messages)
` [PATCH 5.10/5.15/6.1] selinux: avoid implicit conversions in services code
` [PATCH 5.10/5.15/6.1] selinux: reject an unclaimed class value in security_get_classes()

[PATCH v3 0/3] proc,security,selinux: let SELinux block FOLL_FORCE for /proc/self/mem
 2026-09-07 21:09 UTC  (7+ messages)
` [PATCH v3 1/3] proc: refactor /proc/$pid/mem to use struct as private_data
` [PATCH v3 2/3] proc: query LSMs for introspective mem access (if PROC_MEM_FORCE_ALWAYS)
` [PATCH v3 3/3] selinux: require PROCESS__PTRACE for FOLL_FORCE introspection

[PATCH v5] libsepol: drop support for policy versions before xperms_ioctl/xen_devicetree
 2026-09-07 15:27 UTC  (6+ messages)

[PATCH v2] selinux: use socket SID for SCTP ASCONF permission checks
 2026-09-04 15:26 UTC  (6+ messages)

[PATCH v4 0/9] libsemanage: add ro-store-root and configuration-root search list
 2026-09-04 15:17 UTC  (11+ messages)
` [PATCH v4 1/9] libsemanage: accept a list of read-only fallback store roots
` [PATCH v4 2/9] libsemanage: add semanage_module_find_path() and use it for reads
` [PATCH v4 3/9] libsemanage: list modules across every store root
` [PATCH v4 4/9] libsemanage: read the active store through the fallback list
` [PATCH v4 5/9] libsemanage: create the writable store skeleton on first transaction
` [PATCH v4 6/9] libsemanage: create the store root when taking a lock
` [PATCH v4 7/9] libsemanage: refuse to remove or enable a module owned by a RO store
` [PATCH v4 8/9] libsemanage: search /etc and /usr/lib for semanage.conf
` [PATCH v4 9/9] libsemanage: document semanage.conf search path and ro-store-root

[PATCH v4 0/4] libselinux: add a configuration-root search list
 2026-09-04 15:16 UTC  (6+ messages)
` [PATCH v4 1/4] "
` [PATCH v4 2/4] libselinux: search for the binary policy across configuration roots
` [PATCH v4 3/4] libselinux: fall back through "
` [PATCH v4 4/4] libselinux: search file_contexts files across "

[PATCH v2] libsemanage: optionally sort file_contexts.local by specificity
 2026-09-04 15:15 UTC  (2+ messages)

[PATCH v3] libsepol,checkpolicy: validate devicetree paths
 2026-09-04 15:14 UTC  (2+ messages)

[PATCH v4] Add support for UTF-8 in file context specifications
 2026-09-04 15:12 UTC  (3+ messages)

[PATCH] libsepol: Improve validation of scopes
 2026-09-04 15:12 UTC  (3+ messages)

[PATCH userspace] SECURITY.md: update Ondrej's email address and add GPG fingerprint
 2026-09-04 15:11 UTC  (5+ messages)

[PATCH 2/5] selinux: bounds-check filename transition source types at load
 2026-09-04 12:10 UTC  (17+ messages)
` [PATCH 3/5] selinux: bounds-check role and user membership bitmaps "
` [PATCH 4/5] selinux: validate user MLS range and default level "
` [PATCH 5/5] selinux: validate permissive and neveraudit map types "
` [PATCH 1/5] selinux: reject duplicate symbol values during policy load

[PATCH v3] Add support for UTF-8 in file context labels
 2026-09-04 12:06 UTC  (6+ messages)

[PATCH v2 2/3] proc: query LSMs for introspective mem access (if PROC_MEM_FORCE_ALWAYS)
 2026-09-04  9:31 UTC  (4+ messages)

[GIT PULL] selinux/selinux-pr-20260903
 2026-09-03 20:46 UTC  (2+ messages)

[PATCH] MAINTAINERS, mailmap: update email address for Ondrej Mosnáček
 2026-09-03 20:24 UTC  (4+ messages)

[PATCH v2] libselinux: allow a '*' wildcard in file_contexts.subs_dist/.subs
 2026-09-03 18:21 UTC 

[PATCH] libselinux: allow a '*' wildcard in file_contexts.subs_dist/.subs
 2026-09-03 17:52 UTC 

[PATCH] selinux: always fill AVC decision in avc_has_perm_noaudit()
 2026-09-03 13:19 UTC  (3+ messages)

Heads up: Moving to a different email address for my Linux kernel/SELinux contributions
 2026-09-03 11:53 UTC  (2+ messages)

[PATCH v2 0/7] Change skb secmarks to x-array indexes
 2026-09-03  9:40 UTC  (22+ messages)
  ` [PATCH v2 1/7] net, smack: Create a function to set secmarks
  ` [PATCH v2 2/7] LSM: Implement x array functions for secmarks
  ` [PATCH v2 3/7] LSM: Two hooks for manipulating struct lsm_prop
  ` [PATCH v2 4/7] SELinux: hooks for secctx_to_lsmprop and update_lsmprop
  ` [PATCH v2 5/7] Smack: "
  ` [PATCH v2 6/7] Apparmor: "
  ` [PATCH v2 7/7] net, lsm: Change skb secmarks to x-array indexes

[PATCH] libsemanage: optionally sort file_contexts.local by specificity
 2026-09-02 19:50 UTC 

[PATCH 0/7] Change skb secmarks to x-array indexes
 2026-09-02 19:37 UTC  (2+ messages)

[PATCH v2] libsepol,checkpolicy: validate devicetree paths
 2026-09-02 17:49 UTC 

[PATCH] libsepol,checkpolicy: validate devicetree paths
 2026-09-02 17:29 UTC 

[PATCH] libsemanage/genhomedircon: reject users with a relative home directory
 2026-09-02 16:15 UTC  (3+ messages)

[PATCH v3 0/9] libsemanage: add ro-store-root and configuration-root search list
 2026-09-02 15:14 UTC  (10+ messages)
` [PATCH v3 1/9] libsemanage: accept a list of read-only fallback store roots
` [PATCH v3 2/9] libsemanage: add semanage_module_find_path() and use it for reads
` [PATCH v3 3/9] libsemanage: list modules across every store root
` [PATCH v3 4/9] libsemanage: read the active store through the fallback list
` [PATCH v3 5/9] libsemanage: create the writable store skeleton on first transaction
` [PATCH v3 6/9] libsemanage: create the store root when taking a lock
` [PATCH v3 7/9] libsemanage: refuse to remove or enable a module owned by a RO store
` [PATCH v3 8/9] libsemanage: search /run and /usr/lib for semanage.conf
` [PATCH v3 9/9] libsemanage: document semanage.conf search path and ro-store-root

[PATCH v2 0/9] libsemanage: add ro-store-root and configuration-root search list
 2026-09-02 14:02 UTC  (10+ messages)
` [PATCH v2 1/9] libsemanage: accept a list of read-only fallback store roots
` [PATCH v2 2/9] libsemanage: add semanage_module_find_path() and use it for reads
` [PATCH v2 3/9] libsemanage: list modules across every store root
` [PATCH v2 4/9] libsemanage: read the active store through the fallback list
` [PATCH v2 5/9] libsemanage: create the writable store skeleton on first transaction
` [PATCH v2 6/9] libsemanage: create the store root when taking a lock
` [PATCH v2 7/9] libsemanage: refuse to remove or enable a module owned by a RO store
` [PATCH v2 8/9] libsemanage: search /run and /usr/lib for semanage.conf
` [PATCH v2 9/9] libsemanage: document semanage.conf search path and ro-store-root

[PATCH 0/9] libsemanage: add ro-store-root and configuration-root search list
 2026-09-02 13:33 UTC  (10+ messages)
` [PATCH 1/9] libsemanage: accept a list of read-only fallback store roots
` [PATCH 2/9] libsemanage: add semanage_module_find_path() and use it for reads
` [PATCH 3/9] libsemanage: list modules across every store root
` [PATCH 4/9] libsemanage: read the active store through the fallback list
` [PATCH 5/9] libsemanage: create the writable store skeleton on first transaction
` [PATCH 6/9] libsemanage: create the store root when taking a lock
` [PATCH 7/9] libsemanage: refuse to remove or enable a module owned by a RO store
` [PATCH 8/9] libsemanage: search /run and /usr/lib for semanage.conf
` [PATCH 9/9] libsemanage: document semanage.conf search path and ro-store-root

[PATCH bpf-next 0/5] bpf: Introduce LOADER_LOAD_FD
 2026-09-02  3:35 UTC  (3+ messages)

[PATCH] libsepol: Validate the genfs file type class
 2026-09-01 20:14 UTC  (3+ messages)


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox