2026-11-14 13:01 [PATCH RFC v2 00/42] fs: don't use pseudo filesystem files as storage 88+ messages
2026-11-13 14:31 [PATCH v3] projects/selinux: enroll the SELinux userspace project 2+ messages
2026-11-13 14:01 [RFC PATCH v2] projects/selinux: enroll the SELinux userspace project 2+ messages
2026-11-13 13:24 [RFC PATCH] projects/selinux: enroll the SELinux userspace project 2+ messages
2026-11-12 15:05 ANN: SELinux userspace 3.12-rc2 release
2026-11-11 16:40 [PATCH RESEND] selinux: use isdigit() in selinux_genfs_get_sid() 2+ messages
2026-11-10 20:30 [PATCH 2/6] landlock: Restrict capabilities guarding other LSMs' policies 13+ messages
2026-11-10 20:28 [PATCH 1/2] capabilities: Check PR_SET_SECUREBITS with ns_capable() 6+ messages
2026-11-10 17:17 [PATCH] tests/bpf: reformat to match CI astyle defaults 2+ messages
2026-11-10 15:41 [PATCH v2] tests/binder: fix binder tests to work with the Rust binder driver 3+ messages
2026-11-10 15:31 [PATCH] tests/binder: fix binder tests to work with the Rust binder driver 2+ messages
2026-11-10 13:54 [PATCH v2] libsepol: check all declaring blocks when enabling types 2+ messages
2026-11-10 11:29 [RFC PATCH 2/8] libselinux/man: make set_selinuxmnt(3) the canonical mountpoint page 8+ messages
2026-11-10 11:07 [RFC PATCH 2/6] libsepol: skip the conditional lists without matching rules for neverallowx 6+ messages
2026-11-10 10:58 [PATCH] libsepol: avoid quadratic removal of redundant conditional rules 13+ messages
2026-11-10 9:14 [PATCH RFC 00/41] fs: don't use pseudo filesystem files as storage 144+ messages
2026-11-09 18:34 [PATCH] libsemanage: canonicalize NSS homes before deriving their parent 2+ messages
2026-11-09 18:24 [PATCH] libsepol: check all declaring blocks when enabling types
2026-11-09 16:59 [PATCH] selinux: fix potential use-after-free in sel_netif_flush() 3+ messages
2026-11-09 15:38 [PATCH v2 5/5] selinux: do not cache permissive grants after enabling enforcing mode 11+ messages
2026-11-09 15:25 [PATCH v2 1/3] python/semanage: fix test-permissive-store.py when run by CI 4+ messages
2026-11-09 14:19 [PATCH 1/2] python/semanage: fix permissive add with bytes module bindings 2+ messages
2026-11-06 21:40 [PATCH net] cipso: stop modifying live ip_options_rcu 10+ messages
2026-11-06 18:29 [PATCH] selinux: check MAP_SHARED_VALIDATE mappings as shared 3+ messages
2026-11-06 18:10 [PATCH] libselinux: apply requested level to failsafe contexts 3+ messages
2026-11-06 18:05 [PATCH 1/4] libsemanage: reject missing scalar configuration arguments 5+ messages
2026-11-06 15:59 [PATCH 1/2] libsepol: fix permission value collision when linking an undeclared class 4+ messages
2026-11-06 14:23 [PATCH] libsepol: avoid quadratic removal of redundant conditional rules 3+ messages
2026-11-06 13:51 [PATCH 1/2] libselinux: link the Python bindings with -fPIC 5+ messages
2026-11-06 13:16 [PATCH 2/2] libsepol: keep the uncompressed filename transition format for Xen 7+ messages
2026-11-06 12:34 [PATCH 04/16] libsepol: skip MLS alias slots when writing kernel policies as CIL 33+ messages
2026-11-06 12:17 [PATCH v2 5/5] libselinux/audit2why: free reason_buf on a TE denial in audit2why analyze() 11+ messages
2026-11-05 21:30 [PATCH 00/13] mm: continue vma_flags_t conversion 78+ messages
2026-11-05 21:05 [PATCH 00/14] mm: convert further simple mmap hooks to mmap_prepare 25+ messages
2026-11-05 20:35 ANN: SELinux userspace 3.12-rc1 release
2026-11-05 17:22 [PATCH v5] security: Expand task_setscheduler LSM hook 6+ messages
2026-11-04 15:08 [PATCH v3 01/20] libselinux: wait for relabel completion before writing digests 21+ messages
2026-11-04 11:09 [PATCH v4 0/8] memcg: dma-buf cgroup accounting and charge transfer 28+ messages
2026-11-03 18:52 [PATCH v2 01/20] libselinux: wait for relabel completion before writing digests 20+ messages
2026-11-02 13:47 [PATCH v3 2/2] libsemanage/genhomedircon: apply path substitution rules to home directories 5+ messages
2026-11-02 13:08 [RFC PATCH testsuite v2] tests/unix_socket: add test for MSG_CMSG_SEALED 2+ messages
2026-11-02 13:05 [RFC PATCH testsuite 1/2] DEBUG 3+ messages
2026-11-02 13:05 [RFC PATCH] af_unix: introduce MSG_CMSG_SEALED 6+ messages
2026-10-30 19:28 [PATCH 01/11] libsemanage/tests: cover user join caches across transactions 11+ messages
2026-10-30 19:19 [PATCH 01/10] libselinux: wait for relabel completion before writing digests 10+ messages
2026-10-29 19:03 [PATCH v2 1/2] libsemanage: add path substitution helpers 3+ messages
2026-10-28 14:28 [PATCH 1/2] libsemanage: add path substitution helpers 3+ messages
2026-10-28 8:07 [PATCH 5.15.y] mm: call the security_mmap_file() LSM hook in remap_file_pages() 3+ messages
2026-10-28 7:42 [PATCH 5.15.y] mm: call the security_mmap_file() LSM hook in remap_file_pages() 2+ messages
2026-10-27 19:13 [PATCH] libsemanage: synchronize user join caches across transactions 2+ messages
2026-10-27 16:18 [PATCH] policycoreutils: fixfiles: honor last exclude line without newline 3+ messages
2026-10-27 15:02 [PATCH v3 0/8] memcg: dma-buf cgroup accounting and charge transfer 25+ messages
2026-10-27 14:14 [PATCH] CONTRIBUTING.md: sync with Contributing wiki page 2+ messages
2026-10-27 12:11 [PATCH v3 -next 01/18] fs: pass struct path to notify_change() 41+ messages
2026-10-26 17:35 [PATCH] libselinux: Allow unknown permissions in permissive mode 4+ messages
2026-10-23 19:31 [PATCH] libsemanage: use the availabe user name when a join fails 2+ messages
2026-10-23 19:21 [PATCH] libsemanage: handle module writer close and cleanup errors 2+ messages
2026-10-23 19:04 [PATCH] libsemanage: clear the policy file pointer after reading a cache 2+ messages
2026-10-23 18:58 [PATCH] libsemanage: report commit flag-file errors after user updates 2+ messages
2026-10-23 18:49 [PATCH] libsemanage: clear freed keys during component merges 2+ messages
2026-10-23 18:40 [PATCH] libsemanage: release the transaction lock when setup fails 2+ messages
2026-10-23 18:31 [PATCH] libsemanage: preserve cached records when replacement cloning fails 2+ messages
2026-10-23 18:04 [PATCH] libsemanage: preserve read-only store overrides 2+ messages
2026-10-21 15:42 [PATCH RFC v2 0/8] memcg: dma-buf cgroup accounting and charge transfer 19+ messages
2026-10-20 15:49 [PATCH testsuite] tests/binder: add missing parentheses in print_trans_data() 4+ messages
2026-10-19 14:02 [PATCH] policycoreutils: omit excluded mounts from the fixfiles relabel list 3+ messages
2026-10-19 14:02 [PATCH] tests/tun_tap: set an owner on the device for the relabel tests 3+ messages
2026-10-19 12:54 Updated SELinux / SE for Android tutorial available 3+ messages
2026-10-18 16:36 BUG: selinux-testsuite binder tests fail with CONFIG_ANDROID_BINDER_IPC_RUST=y 6+ messages
2026-10-18 1:29 [PATCH] tests: fix format string mismatches on s390x/ppc64le 4+ messages
2026-10-18 1:28 [PATCH] tests/keys: skip KEYCTL_DH_COMPUTE when unavailable 5+ messages
2026-10-17 3:00 [GIT PULL] selinux/selinux-pr-20261015 2+ messages
2026-10-16 15:10 [PATCH testsuite] tests/inet_socket: test CALIPSO over the IPv6 forwarding path 4+ messages
2026-10-16 14:37 [PATCH] selinux: don't label bridged packets in selinux_ip_forward() 4+ messages
2026-10-15 12:54 [PATCH v2 -next 00/18] landlock: Add READ_METADATA and WRITE_METADATA access rights 44+ messages
2026-10-15 5:49 [PATCH testsuite 0/4] Fix build warnings on ppc64le and s390x 10+ messages
2026-10-15 5:45 [PATCH testsuite 0/5] Misc CI fixes 12+ messages
2026-10-15 1:44 [PATCH 0/3] libselinux: sefcontext_compile.8 updates 15+ messages
2026-10-14 16:07 [PATCH] selinux: use isdigit() in selinux_genfs_get_sid() 4+ messages
2026-10-13 15:55 [PATCH] libsepol: skip initial SIDs with no assigned context in module_to_cil 2+ messages
2026-10-13 15:46 [PATCH] libsepol: compare policy_type, not policyvers, with POLICY_KERN 2+ messages
2026-10-13 15:32 [RFC PATCH v2] checkpolicy: validate policydb before writing 2+ messages
2026-10-13 15:04 [PATCH v6 00/39] mm: make VMA flag semantics explicit, eliminate VM_SPECIAL 87+ messages
2026-10-13 14:05 [RFC PATCH] checkpolicy: validate policydb before writing
2026-10-13 13:50 [PATCH] libsepol: clear attribute member set after building type_attr_map 2+ messages
2026-10-12 14:38 [BUG REPORT] selinux: general protection fault in avtab_search_node() during an AVC lookup 2+ messages
2026-10-09 18:03 [PATCH v5 00/38] mm: make VMA flag semantics explicit, eliminate VM_SPECIAL 119+ messages
2026-10-09 12:36 [PATCH v2] sestatus: avoid self-referential symlink 2+ messages
2026-10-08 7:27 [PATCH] libselinux: avcstat: reject out-of-range interval values 4+ messages
2026-10-06 13:01 [RFC PATCH userspace 00/17] libsepol: add public API for policy introspection 26+ messages
2026-10-05 18:53 [PATCH] tests/io_uring: check io_uring_disabled before probing 3+ messages
2026-10-05 13:29 [PATCH v2 1/2] libsemanage: backport sha256 WaterJuice/WjCryptLib 3.0.0 fixes 5+ messages
2026-10-05 10:24 [GIT PULL] selinux/selinux-pr-20261005 2+ messages
2026-10-03 16:32 [PATCH v4 00/38] mm: make VMA flag semantics explicit, eliminate VM_SPECIAL 92+ messages
2026-10-01 15:32 [PATCH 1/3] tests/netlink_socket: skip iscsi subtest when NETLINK_ISCSI is unsupported 12+ messages
2026-09-30 11:14 [PATCH] Replace SHA-1 with SHA-256 9+ messages
2026-09-29 12:58 [PATCH] sestatus: avoid self-referential symlink 2+ messages
2026-09-29 12:47 [PATCH v2] userspace: update man pages for /usr/lib fallbacks 2+ messages
2026-09-28 19:24 [PATCH] userspace: update man pages for /usr/lib fallbacks
2026-09-28 17:58 [PATCH 1/2] python/sepolgen: search fallback location for sepolgen.conf 3+ messages
2026-09-28 17:46 [RFC PATCH 02/32] selinux: drop event filtering from AVC callbacks 64+ messages
2026-09-28 17:23 [PATCH] sandbox: shell-quote the command written to .sandboxrc 2+ messages
2026-09-28 16:52 [PATCH v2 2/3] selinux: validate user MLS range and default level at load 15+ messages
2026-09-28 15:57 [PATCH v2 04/21] tests: skip module_load tests without a kernel build directory 44+ messages
2026-09-28 15:43 [PATCH testsuite] Revert "tools/nfs.sh: comment out the fscontext= tests for now" 4+ messages
2026-09-28 14:23 [PATCH testsuite] Revert "tests/nfs_filesystem: comment out failing mount" 4+ messages
2026-09-28 14:19 [PATCH] selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts 4+ messages
2026-09-28 6:24 [PATCH v2] libsepol,checkpolicy: add --multiple-decls option 3+ messages
2026-09-25 17:17 [PATCH 06/21] README.md: update the Debian dependencies 47+ messages
2026-09-24 17:34 [PATCH 1/2] libselinux: add Python binding for selinux_policy_open() 3+ messages
2026-09-24 16:22 [PATCH] python/semanage: fall back to filename completion for fcontext paths 2+ messages
2026-09-24 15:54 [PATCH v2] python/semanage: document and export the user labeling prefix 2+ messages
2026-09-24 15:30 [PATCH] python/semanage: document and export the user labeling prefix
2026-09-24 10:48 [PATCH RFC -next 00/12] landlock: Add READ_METADATA and WRITE_METADATA access rights 33+ messages
2026-09-23 16:52 [PATCH] SECURITY.md: update to reflect our current disclosure practice 3+ messages
2026-09-23 15:56 [PATCH] policycoreutils/scripts/fixfiles: search fallback configuration roots 2+ messages
2026-09-23 10:19 [PATCH] CIL: misc doc updates 3+ messages
2026-09-23 10:13 [PATCH v2] selinux: fix data race on AVC latest_notif 5+ messages
2026-09-23 5:58 [PATCH] libsepol,checkpolicy: add --multiple-decls option 2+ messages
2026-09-22 18:55 ANN: Reference Policy 2.20260922 2+ messages
2026-09-22 16:17 [PATCH v2 1/2] restorecond: search fallback configuration roots for the watch lists 3+ messages
2026-09-22 16:08 [PATCH v2 1/3] libselinux: export selinux_policy_open() 4+ messages
2026-09-22 15:17 [PATCH 1/2] restorecond: search fallback configuration roots for the watch lists 2+ messages
2026-09-22 14:33 [PATCH 1/3] libselinux: export selinux_policy_open() 3+ messages
2026-09-21 19:53 [PATCH 1/5] libsepol: consolidate IPPROTO_DCCP/SCTP fallbacks into kernel_to_common.h 6+ messages
2026-09-21 13:31 [PATCH v5] selinux: implement namespace_init and namespace_install hooks 2+ messages
2026-09-21 13:28 [PATCH v4] selinux: implement namespace_init and namespace_install hooks 2+ messages
2026-09-20 2:07 [GIT PULL] selinux/selinux-pr-20260919 2+ messages
2026-09-18 19:26 [PATCH v2] policycoreutils/scripts/fixfiles: pass -I/-D through to setfiles/restorecon 2+ messages
2026-09-18 16:58 [PATCH] policycoreutils/scripts/fixfiles: pass -I/-D through to setfiles/restorecon
2026-09-18 16:19 [PATCH] python/semanage: update semanage-fcontext.8 for fixed regex anchoring 2+ messages
2026-09-18 15:31 [PATCH] libsepol: skip unrequired class slots in is_decl_requires_met() 2+ messages
2026-09-18 14:31 [PATCH v3] lsm,nscommon: initialize the security blob for the initial namespaces 6+ messages
2026-09-18 13:44 [PATCH v2] lsm,nscommon: initialize the security blob for the initial namespaces 2+ messages
2026-09-18 10:18 selinux_kernfs_init_security() ignores genfscon-resolved parent label, breaks type_transition on cgroup2/sysfs 8+ messages
2026-09-17 16:22 [PATCH v3 00/40] mm: make VMA flag semantics explicit, eliminate VM_SPECIAL 188+ messages
2026-09-17 14:20 [PATCH] selinux: reject a policy that both rejects and allows unknown classes 4+ messages
2026-09-17 14:13 [PATCH 1/2] selinux: check neveraudit in avc_xperms_audit_required() 8+ messages
2026-09-16 19:48 [PATCH] lsm: initialize the security blob for the initial namespaces 5+ messages
2026-09-16 18:05 [PATCH v7] libselinux: fix incorrect regexp anchoring 2+ messages
2026-09-16 17:58 [PATCH v6] libselinux: fix incorrect regexp anchoring
2026-09-16 17:26 [PATCH v5] libselinux: fix incorrect regexp anchoring
2026-09-16 17:02 [PATCH v4] libselinux: fix incorrect regexp anchoring
2026-09-15 21:38 [PATCH] selinux: avoid 64-bit division of inode numbers 3+ messages
2026-09-15 19:56 [PATCH] selinux: use explicit 64-bit division 5+ messages
2026-09-15 19:29 [PATCH] libsepol: drop dead store in ocontext_read_xen() 2+ messages
2026-09-15 16:07 [PATCH 1/4] libsepol: reject out-of-range OCON_PORT field at read time 5+ messages
2026-09-15 15:04 [PATCH v3] libselinux: fix incorrect regexp anchoring 2+ messages
2026-09-14 20:00 [PATCH v2] libselinux: fix incorrect regexp anchoring
2026-09-14 18:15 [PATCH 1/2] libselinux/Makefile: use $(MAKE) instead of a bare make for fuzz clean 4+ messages
2026-09-14 17:13 [PATCH] libselinux: fix incorrect regexp anchoring
2026-09-14 15:57 [PATCH] libsepol: module_to_cil: warn and drop non-trivial -self neverallows 2+ messages
2026-09-14 15:38 [PATCH] libsepol: use the correct value in validate_type_datum() for TYPE_ALIAS 2+ messages
2026-09-14 14:57 [PATCH v2 00/40] mm: make VMA flag semantics explicit, eliminate VM_SPECIAL 95+ messages
2026-09-11 16:37 [PATCH v3] selinux: mark status and policy inodes as immutable, drop status mmap write checks 11+ messages
2026-09-11 14:58 [PATCH v2] selinux: reject writable opens of status file, drop mmap write checks 6+ messages
2026-09-11 14:32 [PATCH v2 1/3] libsepol/fuzz: add POLICY_BASE and POLICY_MOD seed corpus entries 4+ messages
2026-09-11 13:51 [PATCH] selinux: reject writable opens of status file, drop mmap write checks 2+ messages
2026-09-11 12:32 [PATCH 1/3] libsepol/fuzz: add POLICY_BASE and POLICY_MOD seed corpus entries 3+ messages
2026-09-10 14:48 [PATCH v1 0/2] lsm: Preserve full ioctl commands in audit records 8+ messages
2026-09-10 13:24 [PATCH] libsepol: restore basic validation for path/component names 2+ messages
2026-09-09 17:54 [PATCH] libsepol,checkpolicy: update remaining policyvers comparisons to correctly handle Xen policies 2+ messages
2026-09-09 13:59 [PATCH v2 2/2] libsemanage: fall through on an unreadable semanage.conf 3+ messages
2026-09-09 13:28 [PATCH 1/2] libselinux: fall through on EACCES when searching configuration roots 2+ messages
2026-09-08 20:03 [PATCH 1/2] libsepol,checkpolicy,secilc: split min/max policydb versions between SELinux and Xen 3+ messages
2026-09-08 20:01 [PATCH 00/39] mm: make VMA flag semantics explicit, eliminate VM_SPECIAL 90+ messages
2026-09-08 19:27 [PATCH 1/4] libsepol: validate portcon protocol values 5+ messages
2026-09-08 14:43 [PATCH] selinux: treat genfscon lookup failure as non-fatal for booleans 3+ messages
2026-09-07 21:00 [PATCH v3 0/3] proc,security,selinux: let SELinux block FOLL_FORCE for /proc/self/mem 17+ messages
2026-09-07 14:39 [PATCH 5.10/5.15/6.1 0/2] selinux: reject an unclaimed class value in security_get_classes() 4+ messages
2026-09-04 12:11 [PATCH v4] Add support for UTF-8 in file context specifications 3+ messages
2026-09-03 20:35 [GIT PULL] selinux/selinux-pr-20260903 2+ messages
2026-09-03 20:13 [PATCH] libsepol: Improve validation of scopes 3+ messages
2026-09-03 18:21 [PATCH v2] libselinux: allow a '*' wildcard in file_contexts.subs_dist/.subs
2026-09-03 17:52 [PATCH] libselinux: allow a '*' wildcard in file_contexts.subs_dist/.subs
2026-09-03 15:58 [PATCH userspace] SECURITY.md: update Ondrej's email address and add GPG fingerprint 5+ messages
2026-09-03 15:56 [PATCH] MAINTAINERS, mailmap: update email address for Ondrej Mosnáček 4+ messages
2026-09-03 15:12 [PATCH v3] Add support for UTF-8 in file context labels 6+ messages
2026-09-03 14:34 [PATCH v4 0/9] libsemanage: add ro-store-root and configuration-root search list 11+ messages
2026-09-03 14:25 [PATCH v4 0/4] libselinux: add a configuration-root search list 6+ messages
2026-09-03 11:59 [PATCH v2] libsemanage: optionally sort file_contexts.local by specificity 2+ messages
2026-09-03 11:43 [PATCH] selinux: always fill AVC decision in avc_has_perm_noaudit() 4+ messages
2026-09-03 11:35 [PATCH 4/5] selinux: validate user MLS range and default level at load 22+ messages
2026-09-03 11:29 Heads up: Moving to a different email address for my Linux kernel/SELinux contributions 2+ messages
2026-09-02 22:01 [PATCH v2 1/7] net, smack: Create a function to set secmarks 22+ messages
2026-09-02 19:50 [PATCH] libsemanage: optionally sort file_contexts.local by specificity
2026-09-02 18:28 [PATCH v3] libsepol,checkpolicy: validate devicetree paths 2+ messages
2026-09-02 17:49 [PATCH v2] libsepol,checkpolicy: validate devicetree paths
2026-09-02 17:29 [PATCH] libsepol,checkpolicy: validate devicetree paths
2026-09-01 12:21 Fwd: kernel oops on recent policy with older kernel. 9+ messages
2026-08-31 22:37 [PATCH 3/7] LSM: Two hooks for manipulating struct lsm_prop 16+ messages
2026-08-30 20:11 [PATCH v2] selinux: use socket SID for SCTP ASCONF permission checks 8+ messages
2026-08-29 21:32 [PATCH v3 1/2] selinux: preserve user SID across nested backing files 9+ messages
2026-08-27 12:55 [PATCH v5] libsepol: drop support for policy versions before xperms_ioctl/xen_devicetree 8+ messages
2026-08-25 18:39 [PATCH v2 0/3] proc,security,selinux: let SELinux block FOLL_FORCE for /proc/self/mem 19+ messages
2026-07-10 8:25 [PATCH] tests: make IPv6 subtests optional on IPv4-only systems 7+ messages
2026-07-10 8:15 [PATCH] skip inet_socket/mptcp when CONFIG_MPTCP is not enabled 6+ messages
2026-07-06 23:50 [PATCH v6 0/8] lsm: Replace security_sb_mount with granular mount hooks 27+ messages
2026-05-28 18:38 [RFC PATCH v3] selinux: implement namespace_init and namespace_install hooks 9+ messages
2026-03-12 18:10 Question about libselinux *_with_level functions 9+ messages
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox