SELinux Security Module development
 help / color / mirror / Atom feed
- recent:[subjects (threaded)|topics (new)|topics (active)]
2026-11-14 13:02 [PATCH RFC v2 24/42] efivarfs: use fc_init_pseudo() 25+ messages
2026-11-14 11:55 Re: [PATCH RFC 38/41] fuse: refuse files on pseudo filesystems as passthrough backing files 144+ messages
2026-11-13 19:26 Re: [PATCH net] cipso: stop modifying live ip_options_rcu 10+ messages
2026-11-13 14:35 Re: [PATCH v3] projects/selinux: enroll the SELinux userspace project 2+ messages
2026-11-13 14:08 Re: [RFC PATCH v2] projects/selinux: enroll the SELinux userspace project 2+ messages
2026-11-13 13:30 Re: [RFC PATCH] projects/selinux: enroll the SELinux userspace project 2+ messages
2026-11-13  2:07 Re: [PATCH v3 -next 00/18] landlock: Add READ_METADATA and WRITE_METADATA access rights 41+ messages
2026-11-12 22:46 Re: [PATCH v5] security: Expand task_setscheduler LSM hook 6+ messages
2026-11-12 19:51 Re: [PATCH v2] tests/binder: fix binder tests to work with the Rust binder driver 3+ messages
2026-11-12 15:05 ANN: SELinux userspace 3.12-rc2 release
2026-11-12 14:56 Re: [PATCH] tests/bpf: reformat to match CI astyle defaults 2+ messages
2026-11-12 13:02 Re: [PATCH 1/2] capabilities: Check PR_SET_SECUREBITS with ns_capable() 6+ messages
2026-11-12 11:54 Re: [PATCH v2] libsepol: check all declaring blocks when enabling types 2+ messages
2026-11-12 10:35 Re: [Linaro-mm-sig] [PATCH v4 2/8] dma-heap: charge dma-buf memory via explicit memcg 28+ messages
2026-11-12  5:36 Re: [PATCH 08/13] mm: convert miscellaneous VMA flag tests to use vma_flags_t 78+ messages
2026-11-11 16:54 Re: [PATCH RESEND] selinux: use isdigit() in selinux_genfs_get_sid() 2+ messages
2026-11-10 21:02 Re: [PATCH 6/6] selftests/landlock: Test capabilities guarding other LSMs' policies 13+ messages
2026-11-10 19:15 Re: [PATCH] tests/binder: fix binder tests to work with the Rust binder driver 2+ messages
2026-11-10 17:06 Re: [PATCH 3/7] libselinux: set errno on matchmediacon() failure 13+ messages
2026-11-10 15:35 Re: BUG: selinux-testsuite binder tests fail with CONFIG_ANDROID_BINDER_IPC_RUST=y 6+ messages
2026-11-10 13:53 Re: [PATCH] libsemanage: canonicalize NSS homes before deriving their parent 2+ messages
2026-11-10 11:29 [RFC PATCH 1/8] libselinux/man: correct man pages contradicting the API 8+ messages
2026-11-10 11:07 [RFC PATCH 1/6] libsepol/cil: shrink the avtabs before checking neverallow rules 6+ messages
2026-11-09 23:56 Re: [PATCH] selinux: don't label bridged packets in  selinux_ip_forward() 4+ messages
2026-11-09 23:32 Re: [PATCH] selinux: check MAP_SHARED_VALIDATE mappings as shared 3+ messages
2026-11-09 20:23 Re: [PATCH testsuite] Revert "tests/nfs_filesystem: comment out failing mount" 4+ messages
2026-11-09 18:24 [PATCH] libsepol: check all declaring blocks when enabling types
2026-11-09 18:07 Re: Question about libselinux *_with_level functions 9+ messages
2026-11-09 17:58 Re: [PATCH] selinux: fix potential use-after-free in sel_netif_flush() 3+ messages
2026-11-09 17:53 Re: [PATCH v2 1/5] selinux: zero-initialize permission name array in masked av dump 11+ messages
2026-11-09 16:29 Re: [PATCH] libselinux: apply requested level to failsafe contexts 3+ messages
2026-11-09 16:27 Re: [PATCH v2 1/3] python/semanage: fix test-permissive-store.py when run by CI 4+ messages
2026-11-09 16:25 Re: [PATCH 1/4] libsemanage: reject missing scalar configuration arguments 5+ messages
2026-11-09 16:23 Re: [PATCH] libsepol: avoid quadratic removal of redundant conditional rules 3+ messages
2026-11-09 16:23 Re: [PATCH 1/2] libselinux: link the Python bindings with -fPIC 5+ messages
2026-11-09 16:22 Re: [PATCH 1/2] python/semanage: fix permissive add with bytes module bindings 7+ messages
2026-11-09 16:20 Re: [PATCH 01/16] libselinux: correct realpath_not_final() buffer size documentation 33+ messages
2026-11-09 16:17 Re: [PATCH v2 1/5] libselinux/audit2why: free boolean names returned by check_booleans() 11+ messages
2026-11-09 14:19 [PATCH 2/2] python/semanage: replace removed unittest.makeSuite in test driver 2+ messages
2026-11-09 13:06 Re: [PATCH 14/14] vhost-vdpa: convert mmap hook to mmap_prepare 25+ messages
2026-11-06 19:00 Re: [PATCH 2/2] semanage: raise a clean error on unterminated quote in import data 4+ messages
2026-11-06 18:39 Re: [PATCH testsuite] Revert "tools/nfs.sh: comment out the fscontext= tests for now" 4+ messages
2026-11-05 20:35 ANN: SELinux userspace 3.12-rc1 release
2026-11-04 22:21 Re: [PATCH v3] lsm,nscommon: initialize the security blob for the initial namespaces 6+ messages
2026-11-04 16:57 Re: [PATCH v3 20/20] libselinux: free shared regex contexts on library unload 21+ messages
2026-11-03 18:53 [PATCH v2 20/20] libselinux: free shared regex contexts on library unload 20+ messages
2026-11-03 15:51 Re: [PATCH v3 1/2] libsemanage: add path substitution helpers 5+ messages
2026-11-03 13:05 Re: [RFC PATCH] af_unix: introduce MSG_CMSG_SEALED 6+ messages
2026-11-02 14:02 Re: [PATCH v3 7/8] dma-buf: transfer memcg charges via DMA_BUF_IOCTL_XFER_CHARGE 25+ messages
2026-11-02 13:14 Re: [RFC PATCH testsuite v2] tests/unix_socket: add test for MSG_CMSG_SEALED 2+ messages
2026-11-02 13:10 Re: [RFC PATCH testsuite 1/2] DEBUG 3+ messages
2026-11-01 22:15 Re: [PATCH v6 00/39] mm: make VMA flag semantics explicit, eliminate VM_SPECIAL 87+ messages
2026-10-30 19:28 [PATCH 11/11] libsemanage: reject missing scalar configuration arguments 11+ messages
2026-10-30 19:19 [PATCH 10/10] libselinux: grow the digest specification file list dynamically 10+ messages
2026-10-30 12:43 Re: [PATCH v2 2/2] libsemanage/genhomedircon: apply path substitution rules to home directories 3+ messages
2026-10-29 18:43 Re: [PATCH 5.15.y] mm: call the security_mmap_file() LSM hook in remap_file_pages() 3+ messages
2026-10-29  7:43 Re: [PATCH 5.15.y] mm: call the security_mmap_file() LSM hook in remap_file_pages() 2+ messages
2026-10-28 15:12 Re: [PATCH 1/2] libsemanage: add path substitution helpers 3+ messages
2026-10-28 13:12 Re: [PATCH] libselinux: Allow unknown permissions in permissive mode 4+ messages
2026-10-28 13:06 Re: [PATCH] libsemanage: synchronize user join caches across transactions 2+ messages
2026-10-28 13:05 Re: [PATCH] CONTRIBUTING.md: sync with Contributing wiki page 2+ messages
2026-10-27 19:23 Re: [PATCH] policycoreutils: fixfiles: honor last exclude line without newline 3+ messages
2026-10-26 14:53 Re: [PATCH RFC v2 7/8] dma-buf: transfer memcg charges via DMA_BUF_IOCTL_XFER_CHARGE 19+ messages
2026-10-26 13:46 Re: [PATCH] libsemanage: use the availabe user name when a join fails 2+ messages
2026-10-26 13:45 Re: [PATCH] libsemanage: handle module writer close and cleanup errors 2+ messages
2026-10-26 13:44 Re: [PATCH] libsemanage: clear the policy file pointer after reading a cache 2+ messages
2026-10-26 13:43 Re: [PATCH] libsemanage: report commit flag-file errors after user updates 2+ messages
2026-10-26 13:43 Re: [PATCH] libsemanage: clear freed keys during component merges 2+ messages
2026-10-26 13:42 Re: [PATCH] libsemanage: release the transaction lock when setup fails 2+ messages
2026-10-26 13:41 Re: [PATCH] libsemanage: preserve cached records when replacement cloning fails 2+ messages
2026-10-26 13:41 Re: [PATCH] libsemanage: preserve read-only store overrides 2+ messages
2026-10-26 13:39 Re: [PATCH] policycoreutils: omit excluded mounts from the fixfiles relabel list 3+ messages
2026-10-23  6:31 Re: [PATCH v2 -next 01/18] fs: pass struct path to notify_change() 44+ messages
2026-10-21 19:38 Re: Updated SELinux / SE for Android tutorial available 3+ messages
2026-10-21 14:24 Re: [PATCH] Replace SHA-1 with SHA-256 9+ messages
2026-10-21 14:19 Re: [PATCH testsuite] tests/inet_socket: test CALIPSO over the IPv6 forwarding path 4+ messages
2026-10-21 12:57 Re: [PATCH v2] tests/keys: skip KEYCTL_DH_COMPUTE when unavailable 5+ messages
2026-10-21  7:58 Re: [PATCH testsuite] tests/binder: add missing parentheses in print_trans_data() 4+ messages
2026-10-21  6:28 Re: [GIT PULL] selinux/selinux-pr-20261015 2+ messages
2026-10-20 16:43 Re: [PATCH] tests: fix format string mismatches on s390x/ppc64le 4+ messages
2026-10-20  9:08 Re: [PATCH] tests/tun_tap: set an owner on the device for the relabel tests 3+ messages
2026-10-16 18:27 Re: [PATCH v2 1/3] libselinux: add -r option to sefcontext_compile.8 15+ messages
2026-10-16 10:02 Re: [PATCH testsuite 0/4] Fix build warnings on ppc64le and s390x 10+ messages
2026-10-16 10:02 Re: [PATCH testsuite 0/5] Misc CI fixes 12+ messages
2026-10-15 14:05 Re: [PATCH] selinux: use isdigit() in selinux_genfs_get_sid() 4+ messages
2026-10-14 12:53 Re: [RFC PATCH v2] checkpolicy: validate policydb before writing 2+ messages
2026-10-14 12:52 Re: [PATCH] libsepol: skip initial SIDs with no assigned context in module_to_cil 2+ messages
2026-10-14 12:51 Re: [PATCH] libsepol: compare policy_type, not policyvers, with POLICY_KERN 2+ messages
2026-10-14 12:50 Re: [PATCH] libsepol: clear attribute member set after building type_attr_map 2+ messages
2026-10-13 14:05 [RFC PATCH] checkpolicy: validate policydb before writing
2026-10-13 14:04 Re: [PATCH v2] sestatus: avoid self-referential symlink 2+ messages
2026-10-13 11:46 Re: [PATCH v5 35/38] mm: avoid use of VMA_SPECIAL_FLAGS in migrate_vma_setup() 119+ messages
2026-10-12 15:23 Re: [BUG REPORT] selinux: general protection fault in avtab_search_node() during an AVC lookup 2+ messages
2026-10-11 10:16 Re: selinux_kernfs_init_security() ignores genfscon-resolved parent label, breaks type_transition on cgroup2/sysfs 8+ messages
2026-10-09 16:56 Re: [PATCH v4 07/38] mm: add mmap action for discontiguous kernel page mapping 92+ messages
2026-10-09 12:29 Re: [PATCH v2] libselinux: avcstat: reject out-of-range interval values 4+ messages
2026-10-08 15:11 Re: [PATCH] tests/io_uring: check io_uring_disabled before probing 3+ messages
2026-10-08 12:35 Re: [RFC PATCH userspace 13/17] libsepol: add ocontext iterators for initial SIDs and named contexts 26+ messages
2026-10-06 15:31 Re: [PATCH RFC -next 03/12] fs: pass struct path to xattr helpers 33+ messages
2026-10-06 12:55 Re: [PATCH] tests: make IPv6 subtests optional on IPv4-only systems 7+ messages
2026-10-05 15:47 Re: [PATCH v2 2/2] libselinux: Use SHA256 for label digests 5+ messages
2026-10-05 14:41 Re: [GIT PULL] selinux/selinux-pr-20261005 2+ messages
2026-10-05 14:15 Re: [PATCH v2] tests: skip io_uring when unsupported or disabled 12+ messages
2026-10-03 13:16 Re: [PATCH v3 31/40] mm/vma: introduce vma[_flags]_is_persistent() 188+ messages
2026-10-02 23:59 Re: [PATCH v6 0/8] lsm: Replace security_sb_mount with granular mount hooks 27+ messages
2026-10-02 14:21 Re: [PATCH] skip inet_socket/mptcp when MPTCP is not supported 6+ messages
2026-10-01 19:51 Re: [PATCH v2 01/21] policy: allow io_uring allowed in the io_uring test domains 44+ messages
2026-09-30 20:59 Re: [PATCH v2 3/3] selinux: validate permissive and neveraudit map  types at load 15+ messages
2026-09-30 19:10 Re: [PATCH] selinux: preserve NATIVE_LABELS on already-initialized sb  in set_mnt_opts 4+ messages
2026-09-29 16:34 Re: [PATCH] sestatus: avoid self-referential symlink 2+ messages
2026-09-29 16:11 Re: [RFC PATCH 32/32] selinux: drop unused policydb parameter of context_write() 64+ messages
2026-09-29 13:53 Re: [PATCH v2] userspace: update man pages for /usr/lib fallbacks 2+ messages
2026-09-29 13:50 Re: [PATCH 1/2] python/sepolgen: search fallback location for sepolgen.conf 3+ messages
2026-09-29 13:49 Re: [PATCH] sandbox: shell-quote the command written to .sandboxrc 2+ messages
2026-09-28 19:30 Re: [PATCH v2] libsepol,checkpolicy: add --multiple-decls option 3+ messages
2026-09-28 19:24 [PATCH] userspace: update man pages for /usr/lib fallbacks
2026-09-28 15:53 Re: [PATCH 14/21] tests/notify: work with CONFIG_FANOTIFY disabled 47+ messages
2026-09-25 18:59 Re: [PATCH v2] selinux: fix data race on AVC latest_notif 5+ messages
2026-09-25 14:35 Re: ANN: Reference Policy 2.20260922 2+ messages
2026-09-25 12:27 Re: [PATCH] SECURITY.md: update to reflect our current disclosure practice 3+ messages
2026-09-25 10:45 Re: kernel oops on recent policy with older kernel. 9+ messages
2026-09-24 21:36 Re: [PATCH 1/2] selinux: check neveraudit in avc_xperms_audit_required() 8+ messages
2026-09-24 21:30 Re: [PATCH 2/5] selinux: bounds-check filename transition source types  at load 22+ messages
2026-09-24 21:08 Re: [PATCH] selinux: reject a policy that both rejects and allows  unknown classes 4+ messages
2026-09-24 19:08 Re: [PATCH 1/2] libselinux: add Python binding for selinux_policy_open() 3+ messages
2026-09-24 19:08 Re: [PATCH] python/semanage: fall back to filename completion for fcontext paths 2+ messages
2026-09-24 19:07 Re: [PATCH v2] python/semanage: document and export the user labeling prefix 2+ messages
2026-09-24 15:30 [PATCH] python/semanage: document and export the user labeling prefix
2026-09-23 19:31 Re: [PATCH] policycoreutils/scripts/fixfiles: search fallback configuration roots 2+ messages
2026-09-23 17:25 Re: [PATCH] CIL: misc doc updates 3+ messages
2026-09-23 14:31 Re: [PATCH v2 00/40] mm: make VMA flag semantics explicit, eliminate VM_SPECIAL 95+ messages
2026-09-23 13:38 Re: [PATCH] libsepol,checkpolicy: add --multiple-decls option 2+ messages
2026-09-22 19:44 Re: [PATCH v2 1/2] restorecond: search fallback configuration roots for the watch lists 3+ messages
2026-09-22 19:43 Re: [PATCH v2 1/3] libselinux: export selinux_policy_open() 4+ messages
2026-09-22 15:20 Re: [PATCH 1/5] libsepol: consolidate IPPROTO_DCCP/SCTP fallbacks into kernel_to_common.h 6+ messages
2026-09-22 15:17 [PATCH 2/2] policycoreutils/newrole: search fallback location for newrole_pam.conf 2+ messages
2026-09-22 14:33 [PATCH 3/3] policycoreutils/run_init: search fallback configuration roots for initrc_context 3+ messages
2026-09-21 13:48 Re: [PATCH v5] selinux: implement namespace_init and namespace_install hooks 2+ messages
2026-09-21 13:45 Re: [PATCH v4] selinux: implement namespace_init and namespace_install hooks 2+ messages
2026-09-21 12:27 Re: [PATCH v2] policycoreutils/scripts/fixfiles: pass -I/-D through to setfiles/restorecon 2+ messages
2026-09-21  2:33 Re: [PATCH v3 0/3] proc,security,selinux: let SELinux block FOLL_FORCE for /proc/self/mem 17+ messages
2026-09-20 15:10 Re: [GIT PULL] selinux/selinux-pr-20260919 2+ messages
2026-09-18 20:09 Re: [PATCH RFC v3] selinux: implement namespace_init and namespace_install hooks 9+ messages
2026-09-18 20:03 Re: [PATCH] python/semanage: update semanage-fcontext.8 for fixed regex anchoring 2+ messages
2026-09-18 20:02 Re: [PATCH] libsepol: skip unrequired class slots in is_decl_requires_met() 2+ messages
2026-09-18 16:58 [PATCH] policycoreutils/scripts/fixfiles: pass -I/-D through to setfiles/restorecon
2026-09-18 13:55 Re: [PATCH v2] lsm,nscommon: initialize the security blob for the initial namespaces 2+ messages
2026-09-18 13:55 Re: [PATCH] lsm: initialize the security blob for the initial namespaces 5+ messages
2026-09-18 12:37 Re: [PATCH v7] libselinux: fix incorrect regexp anchoring 2+ messages
2026-09-16 17:58 [PATCH v6] libselinux: fix incorrect regexp anchoring
2026-09-16 17:26 [PATCH v5] libselinux: fix incorrect regexp anchoring
2026-09-16 17:02 [PATCH v4] libselinux: fix incorrect regexp anchoring
2026-09-16  3:32 Re: [PATCH] selinux: avoid 64-bit division of inode numbers 3+ messages
2026-09-16  3:30 Re: [PATCH v3 2/2] selinux: recheck intermediate backing files on  mprotect 9+ messages
2026-09-15 21:51 Re: [PATCH] selinux: always fill AVC decision in  avc_has_perm_noaudit() 4+ messages
2026-09-15 21:40 Re: [PATCH] selinux: use explicit 64-bit division 5+ messages
2026-09-15 21:28 Re: [PATCH v3] selinux: mark status and policy inodes as immutable, drop status mmap write checks 11+ messages
2026-09-15 19:31 Re: [PATCH] libsepol: drop dead store in ocontext_read_xen() 2+ messages
2026-09-15 18:48 Re: [PATCH 1/4] libsepol: reject out-of-range OCON_PORT field at read time 5+ messages
2026-09-15 17:50 Re: [PATCH v3] libselinux: fix incorrect regexp anchoring 2+ messages
2026-09-15 14:11 Re: [PATCH 2/2] libsepol/fuzz/Makefile: drop -I../cil/include from CFLAGS 4+ messages
2026-09-15 14:10 Re: [PATCH] libsepol: module_to_cil: warn and drop non-trivial -self neverallows 2+ messages
2026-09-15 14:09 Re: [PATCH] libsepol: use the correct value in validate_type_datum() for TYPE_ALIAS 2+ messages
2026-09-14 20:41 Re: [PATCH v1 2/2] selftests/landlock: Check full ioctl commands in  audit records 8+ messages
2026-09-14 20:00 [PATCH v2] libselinux: fix incorrect regexp anchoring
2026-09-14 17:13 [PATCH] libselinux: fix incorrect regexp anchoring
2026-09-14  7:46 Re: [PATCH v2] selinux: reject writable opens of status file, drop mmap write checks 6+ messages
2026-09-11 18:31 Re: [PATCH v2 1/3] libsepol/fuzz: add POLICY_BASE and POLICY_MOD seed corpus entries 4+ messages
2026-09-11 15:05 Re: [PATCH 11/39] selinux: reject writable opens of policy file, drop mmap shared/write check 90+ messages
2026-09-11 14:09 Re: [PATCH] selinux: reject writable opens of status file, drop mmap write checks 2+ messages
2026-09-11 12:33 [PATCH 3/3] libsepol/fuzz: link a trailing module into a base policy 3+ messages
2026-09-10 19:15 Re: [PATCH] libsepol: restore basic validation for path/component names 2+ messages
2026-09-10 13:47 Re: [PATCH v2 1/2] libselinux: fall through on EACCES when searching configuration roots 3+ messages
2026-09-09 19:44 Re: [PATCH] libsepol,checkpolicy: update remaining policyvers comparisons to correctly handle Xen policies 2+ messages
2026-09-09 19:43 Re: [PATCH 1/2] libsepol,checkpolicy,secilc: split min/max policydb versions between SELinux and Xen 3+ messages
2026-09-09 19:43 Re: [PATCH 1/4] libsepol: validate portcon protocol values 5+ messages
2026-09-09 13:28 [PATCH 2/2] libsemanage: fall through on an unreadable semanage.conf 2+ messages
2026-09-08 15:30 Re: [PATCH] selinux: treat genfscon lookup failure as non-fatal for booleans 3+ messages
2026-09-08  0:53 Re: [PATCH 5.10/5.15/6.1 0/2] selinux: reject an unclaimed class value in security_get_classes() 4+ messages
2026-09-07 15:27 Re: [PATCH v5] libsepol: drop support for policy versions before xperms_ioctl/xen_devicetree 8+ messages
2026-09-04 15:26 Re: [PATCH v2] selinux: use socket SID for SCTP ASCONF permission checks 8+ messages
2026-09-04 15:17 Re: [PATCH v4 0/9] libsemanage: add ro-store-root and configuration-root search list 11+ messages
2026-09-04 15:16 Re: [PATCH v4 0/4] libselinux: add a configuration-root search list 6+ messages
2026-09-04 15:15 Re: [PATCH v2] libsemanage: optionally sort file_contexts.local by specificity 2+ messages
2026-09-04 15:14 Re: [PATCH v3] libsepol,checkpolicy: validate devicetree paths 2+ messages
2026-09-04 15:12 Re: [PATCH v4] Add support for UTF-8 in file context specifications 3+ messages
2026-09-04 15:12 Re: [PATCH] libsepol: Improve validation of scopes 3+ messages
2026-09-04 15:11 Re: [PATCH userspace] SECURITY.md: update Ondrej's email address and add GPG fingerprint 5+ messages
2026-09-04 12:06 Re: [PATCH v3] Add support for UTF-8 in file context labels 6+ messages
2026-09-04  9:31 Re: [PATCH v2 2/3] proc: query LSMs for introspective mem access (if PROC_MEM_FORCE_ALWAYS) 19+ messages
2026-09-03 20:46 Re: [GIT PULL] selinux/selinux-pr-20260903 2+ messages
2026-09-03 20:24 Re: [PATCH] MAINTAINERS, mailmap: update email address for Ondrej  Mosnáček 4+ messages
2026-09-03 18:21 [PATCH v2] libselinux: allow a '*' wildcard in file_contexts.subs_dist/.subs
2026-09-03 17:52 [PATCH] libselinux: allow a '*' wildcard in file_contexts.subs_dist/.subs
2026-09-03 11:53 Re: Heads up: Moving to a different email address for my Linux kernel/SELinux contributions 2+ messages
2026-09-03  9:40 Re: [PATCH v2 3/7] LSM: Two hooks for manipulating struct lsm_prop 22+ messages
2026-09-02 19:50 [PATCH] libsemanage: optionally sort file_contexts.local by specificity
2026-09-02 19:37 Re: [PATCH 0/7] Change skb secmarks to x-array indexes 16+ messages
2026-09-02 17:49 [PATCH v2] libsepol,checkpolicy: validate devicetree paths
2026-09-02 17:29 [PATCH] libsepol,checkpolicy: validate devicetree paths

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox