2026-09-11 16:37 [PATCH v3] selinux: mark status and policy inodes as immutable, drop status mmap write checks 2+ messages
2026-09-11 14:58 [PATCH v2] selinux: reject writable opens of status file, drop mmap write checks 5+ messages
2026-09-11 14:32 [PATCH v2 1/3] libsepol/fuzz: add POLICY_BASE and POLICY_MOD seed corpus entries 4+ messages
2026-09-11 13:51 [PATCH] selinux: reject writable opens of status file, drop mmap write checks 2+ messages
2026-09-11 12:32 [PATCH 1/3] libsepol/fuzz: add POLICY_BASE and POLICY_MOD seed corpus entries 3+ messages
2026-09-10 14:48 [PATCH v1 0/2] lsm: Preserve full ioctl commands in audit records 6+ messages
2026-09-10 13:24 [PATCH] libsepol: restore basic validation for path/component names 2+ messages
2026-09-09 17:54 [PATCH] libsepol,checkpolicy: update remaining policyvers comparisons to correctly handle Xen policies 2+ messages
2026-09-09 13:59 [PATCH v2 2/2] libsemanage: fall through on an unreadable semanage.conf 3+ messages
2026-09-09 13:28 [PATCH 1/2] libselinux: fall through on EACCES when searching configuration roots 2+ messages
2026-09-08 20:03 [PATCH 1/2] libsepol,checkpolicy,secilc: split min/max policydb versions between SELinux and Xen 3+ messages
2026-09-08 20:01 [PATCH 00/39] mm: make VMA flag semantics explicit, eliminate VM_SPECIAL 90+ messages
2026-09-08 19:27 [PATCH 1/4] libsepol: validate portcon protocol values 5+ messages
2026-09-08 14:43 [PATCH] selinux: treat genfscon lookup failure as non-fatal for booleans 3+ messages
2026-09-07 21:00 [PATCH v3 0/3] proc,security,selinux: let SELinux block FOLL_FORCE for /proc/self/mem 8+ messages
2026-09-07 14:39 [PATCH 5.10/5.15/6.1 0/2] selinux: reject an unclaimed class value in security_get_classes() 4+ messages
2026-09-04 12:11 [PATCH v4] Add support for UTF-8 in file context specifications 3+ messages
2026-09-03 20:35 [GIT PULL] selinux/selinux-pr-20260903 2+ messages
2026-09-03 20:13 [PATCH] libsepol: Improve validation of scopes 3+ messages
2026-09-03 18:21 [PATCH v2] libselinux: allow a '*' wildcard in file_contexts.subs_dist/.subs
2026-09-03 17:52 [PATCH] libselinux: allow a '*' wildcard in file_contexts.subs_dist/.subs
2026-09-03 15:58 [PATCH userspace] SECURITY.md: update Ondrej's email address and add GPG fingerprint 5+ messages
2026-09-03 15:56 [PATCH] MAINTAINERS, mailmap: update email address for Ondrej Mosnáček 4+ messages
2026-09-03 15:12 [PATCH v3] Add support for UTF-8 in file context labels 6+ messages
2026-09-03 14:34 [PATCH v4 0/9] libsemanage: add ro-store-root and configuration-root search list 11+ messages
2026-09-03 14:25 [PATCH v4 0/4] libselinux: add a configuration-root search list 6+ messages
2026-09-03 11:59 [PATCH v2] libsemanage: optionally sort file_contexts.local by specificity 2+ messages
2026-09-03 11:43 [PATCH] selinux: always fill AVC decision in avc_has_perm_noaudit() 3+ messages
2026-09-03 11:35 [PATCH 4/5] selinux: validate user MLS range and default level at load 17+ messages
2026-09-03 11:29 Heads up: Moving to a different email address for my Linux kernel/SELinux contributions 2+ messages
2026-09-02 22:01 [PATCH v2 1/7] net, smack: Create a function to set secmarks 22+ messages
2026-09-02 19:50 [PATCH] libsemanage: optionally sort file_contexts.local by specificity
2026-09-02 18:28 [PATCH v3] libsepol,checkpolicy: validate devicetree paths 2+ messages
2026-09-02 17:49 [PATCH v2] libsepol,checkpolicy: validate devicetree paths
2026-09-02 17:29 [PATCH] libsepol,checkpolicy: validate devicetree paths
2026-09-02 15:13 [PATCH v3 0/9] libsemanage: add ro-store-root and configuration-root search list 10+ messages
2026-09-02 14:02 [PATCH v2 1/9] libsemanage: accept a list of read-only fallback store roots 10+ messages
2026-09-02 13:33 [PATCH 0/9] libsemanage: add ro-store-root and configuration-root search list 10+ messages
2026-09-02 11:38 [PATCH] libsemanage/genhomedircon: reject users with a relative home directory 3+ messages
2026-09-01 17:21 [PATCH] libsepol: Validate the genfs file type class 3+ messages
2026-09-01 16:35 [PATCH v3 0/4] libselinux: add a configuration-root search list 5+ messages
2026-09-01 16:01 [PATCH v2 0/4] libselinux: add a configuration-root search list 5+ messages
2026-09-01 15:43 [PATCH 0/4] libselinux: add a configuration-root search list 5+ messages
2026-09-01 12:21 Fwd: kernel oops on recent policy with older kernel. 6+ messages
2026-08-31 22:37 [PATCH 3/7] LSM: Two hooks for manipulating struct lsm_prop 16+ messages
2026-08-31 18:58 [PATCH 1/2] libsepol/tests: Remove non-MLS downgrade test 6+ messages
2026-08-31 16:50 [PATCH] .github/workflows/run_tests.yml: use a modern refpolicy release 2+ messages
2026-08-31 16:18 [PATCH v2] FUZZING.md,{libsepol,checkpolicy,libselinux}/Makefile: fix fuzzer builds 2+ messages
2026-08-31 15:43 [PATCH v2] checkpolicy: Check for mls constraint expression in non-mls policy 3+ messages
2026-08-31 15:12 [PATCH] checkpolicy: Check for mls constraint expression in non-mls policy
2026-08-31 14:16 [PATCH] libsepol: Tighten validation of scope index class_perm_map array 3+ messages
2026-08-31 13:35 [PATCH] libselinux: Use correct struct name in comments 3+ messages
2026-08-31 13:05 [PATCH] FUZZING.md,{libsepol,checkpolicy,libselinux}/Makefile: fix fuzzer builds
2026-08-31 12:39 [PATCH] libsepol: do not reject control characters in pathnames 2+ messages
2026-08-30 20:11 [PATCH v2] selinux: use socket SID for SCTP ASCONF permission checks 8+ messages
2026-08-29 21:32 [PATCH v3 1/2] selinux: preserve user SID across nested backing files 7+ messages
2026-08-28 20:23 [PATCH] selinux: remove unused mls_setup_user_range() 4+ messages
2026-08-28 17:53 [PATCH] libsepol: add include/sepol/cil symlink for in-tree builds 3+ messages
2026-08-28 12:15 [PATCH v5] FUZZING.md,*/fuzz: document selinux fuzzing 2+ messages
2026-08-27 19:27 [PATCH v4] FUZZING.md,*/fuzz: document selinux fuzzing
2026-08-27 18:51 [PATCH] scripts/oss-fuzz.sh: revert building PCRE2 2+ messages
2026-08-27 18:43 [PATCH v3] FUZZING.md,*/fuzz: document selinux fuzzing
2026-08-27 15:12 [PATCH] selinux: convert selinuxfs inode numbers from unsigned long to u64 5+ messages
2026-08-27 15:11 [PATCH] selinux: fix BPF token permission checks 5+ messages
2026-08-27 15:01 [PATCH v2] FUZZING.md,{checkpolicy,libselinux}/fuzz: document selinux fuzzing
2026-08-27 12:55 [PATCH v5] libsepol: drop support for policy versions before xperms_ioctl/xen_devicetree 8+ messages
2026-08-26 18:44 [RFC PATCH v4] libsepol: drop support for policy versions before xperms_ioctl/xen_devicetree 2+ messages
2026-08-26 18:01 [PATCH] FUZZ.md,{checkpolicy,libselinux}/fuzz: document selinux fuzzing 3+ messages
2026-08-26 14:29 [PATCH] libsemanage: semanage_list_sort: handle a NULL *l correctly 2+ messages
2026-08-26 14:23 [PATCH] python/sepolicy: escape literal paths written to generated .fc files 3+ messages
2026-08-26 14:06 [PATCH] libselinux: setrans_client: free daemon response on error 3+ messages
2026-08-25 19:41 [PATCH 1/2] libsepol: Move the PERMISSION_MASK macro to private.h 5+ messages
2026-08-25 18:39 [PATCH v2 0/3] proc,security,selinux: let SELinux block FOLL_FORCE for /proc/self/mem 19+ messages
2026-08-25 18:03 [PATCH] libselinux: sefcontext_compile: include limits.h 3+ messages
2026-08-25 13:06 [PATCH] checkpolicy: fix operator precedence in flavor check 3+ messages
2026-08-25 12:46 [PATCH] libsepol: do not infer name-based bounds for attributes 3+ messages
2026-08-24 19:14 [PATCH v3] libselinux: label_file: make JIT compilation opt-in 3+ messages
2026-08-24 18:21 [PATCH] checkpolicy-fuzzer: do not abort on invalid policies or other errors during conversion 3+ messages
2026-08-24 17:35 [PATCH v2] libselinux: label_file: make JIT compilation opt-in
2026-08-24 13:11 [PATCH] libselinux: label_file: make JIT compilation opt-in
2026-08-20 18:38 [RFC PATCH v3] libsepol: drop support for policy versions before xperms_ioctl/xen_devicetree 2+ messages
2026-08-20 17:58 [PATCH v2] selinux: preserve user SID across nested backing files 8+ messages
2026-08-20 15:41 [PATCH 1/2] libsepol: Validate expressions do not mix tunables and booleans 5+ messages
2026-08-20 14:48 [RFC PATCH v2] libsepol: drop support for policy versions before xperms_ioctl/xen_devicetree
2026-08-20 14:21 [RFC PATCH] libsepol: drop support for policy versions before xperms_ioctl/xen_devicetree
2026-08-20 6:13 [PATCH] selinux: preserve user SID across nested backing files 4+ messages
2026-08-19 18:18 selinux:selabel_file_text-fuzzer: Null-dereference READ in selabel_file_text-fuzzer 3+ messages
2026-08-19 14:57 [PATCH v2] libsepol: Check all the permissions in sepol_check_access() 3+ messages
2026-08-19 14:30 [PATCH v2 3/3] policycoreutils/setfiles: honor RESTORECON_THREADS 2+ messages
2026-08-18 19:51 [PATCH 0/3] proc,security,selinux: let SELinux block FOLL_FORCE for /proc/self/mem 40+ messages
2026-08-18 19:48 [PATCH] libsepol: Use matching integer types in scope_write() 3+ messages
2026-08-18 19:23 [PATCH v1 0/3] setfiles: control relabeling parallelism from the environment 10+ messages
2026-08-18 19:22 [PATCH] libsepol: Check all the permissions in sepol_check_access() 2+ messages
2026-08-17 23:16 [GIT PULL] selinux/selinux-pr-20260814 2+ messages
2026-08-17 19:16 [RFC/Discussion] eBPF-based runtime permission auditing tool for SELinux policies 4+ messages
2026-08-14 23:04 [PATCH] libsepol: use bool instead of int in validation functions 5+ messages
2026-08-14 14:27 [PATCH v2] python/sepolicy: add missing socket template attributes 3+ messages
2026-08-14 13:34 [PATCH 1/2] libselinux: selinux_restorecon: fix error message on intermediate symlinks 4+ messages
2026-08-14 12:44 [PATCH v2] README.md: Further elaboration on minimum policy versions 2+ messages
2026-08-14 0:31 Cloud & AI grants for startups
2026-08-13 20:48 [PATCH 1/7] net, smack: Create a function to set secmarks 15+ messages
2026-08-13 19:59 [PATCH] README.md: Further elaboration on minimum policy versions 2+ messages
2026-08-13 19:12 [PATCH] .github/workflows/tf_testsuite.yml: skip testing farm on pull requests 3+ messages
2026-08-13 18:41 [PATCH] python/sepolicy: add missing socket template attributes 2+ messages
2026-08-13 18:41 [PATCH] libsemanage: treat module data as bytes in the Python bindings 3+ messages
2026-08-13 18:40 [PATCH] mcstrans: escape config text spliced into build_regexps() patterns 3+ messages
2026-08-13 18:40 [PATCH] libselinux: selinux_check_access: fail cleanly if avc_open() failed 3+ messages
2026-08-13 13:09 [Discussion] systemd-run0 policy issue 6+ messages
2026-08-13 7:35 [PATCH] libselinux: fix SEGV in JIT matching of recursive patterns in partial mode 4+ messages
2026-08-13 0:26 [PATCH bpf-next 0/5] bpf: Introduce LOADER_LOAD_FD 18+ messages
2026-08-12 20:03 [PATCH] libsepol: Check that a module does not have any commons when validating 2+ messages
2026-08-12 18:45 [PATCH] README.md: clarify minimum supported kernel and policy versions 3+ messages
2026-08-12 18:28 [PATCH] libsepol: Use spaceship comparison operator when comparing ibpkeys 3+ messages
2026-08-12 15:58 [PATCH] libsepol: Free context on genfscon wildcard error in kernel_to_* 3+ messages
2026-08-12 15:28 [PATCH] libsepol: Skip aliases when creating the type_attr_map 3+ messages
2026-08-11 19:22 [PATCH 1/2 v2] libsepol: Copy a chain of type alias references 3+ messages
2026-08-11 15:17 [PATCH 1/2] libsepol: Copy a chain of type alias references 4+ messages
2026-08-11 12:37 [PATCH] libsepol: drop support for modular policy versions < 10 3+ messages
2026-08-11 4:29 [PATCH] libsepol/cil: Output culprit rules from binary policy when CIL AST match fails 3+ messages
2026-08-10 16:53 [PATCH] .github/actions/build-userspace: drop duplicated make install, fix comment 2+ messages
2026-08-10 12:40 SECURITY: libsepol <= 3.11: NULL pointer dereference in `hierarchy_add_type_callback` via crafted binary policy (POLICY_KERN versions 20-23)
2026-08-07 19:35 [PATCH] README.md: document the minimum kernel policy version 2+ messages
2026-08-07 19:13 [PATCH v2] selinux: tighten policydb_context_isvalid() checks 4+ messages
2026-08-07 17:05 [PATCH] selinux: tighten policydb_context_isvalid() checks 2+ messages
2026-08-07 12:52 SECURITY: policycoreutils/fixfiles <= 3.11: relabel files to incorrect security context
2026-08-06 20:42 [PATCH] libsepol/cil: fix size truncation in cil_add_file() 3+ messages
2026-08-06 19:37 [PATCH] libselinux: restorecon_xattr: reset dir_xattr_list on every call 3+ messages
2026-08-06 14:30 [PATCH] libselinux: Replace PyString_FromString with PyUnicode_FromString for SWIG 4.5.0 compatibility 3+ messages
2026-08-06 14:15 [PATCH v2] checkpolicy-fuzzer: drop invalid assertion 3+ messages
2026-08-06 14:13 [PATCH] checkpolicy-fuzzer: drop invalid assertion
2026-08-05 20:24 [GIT PULL] selinux/selinux-pr-20260805 2+ messages
2026-08-05 19:14 [PATCH v2] libsepol,checkpolicy: drop support for kernel policy versions < 24 3+ messages
2026-08-05 18:36 [PATCH] libsepol,checkpolicy: drop support for kernel policy versions < 24
2026-08-05 15:29 [PATCH v3] libsepol: Validate any levels that appear in a policy 2+ messages
2026-08-05 14:44 [PATCH 1/2] libsepol: validate type datum value even for aliases 4+ messages
2026-08-05 14:36 [PATCH v2] libsepol: Validate any levels that appear in a policy 2+ messages
2026-08-05 11:07 [PATCH testsuite v2] tests/io_uring/iouring.c: bump RLIMIT_MEMLOCK up to hard limit 3+ messages
2026-08-05 10:18 [PATCH] scripts/oss-fuzz: build PCRE2 from source with sanitizer instrumentation 5+ messages
2026-08-04 18:48 [PATCH] libsepol: Do not convert mls rules to CIL for a non-mls policy 3+ messages
2026-08-04 18:39 [PATCH] .github/workflows/tf_testsuite.yml: only run on SELinuxProject/selinux 3+ messages
2026-08-04 18:34 [PATCH] .github/workflows/check_format.yml: run on all branches 2+ messages
2026-08-04 18:25 [PATCH] libsepol: Non-mls polcies should not have any levels 2+ messages
2026-08-04 17:00 Re: [PATCH] fs: fix user path of nested backing files
2026-08-04 16:53 [PATCH v2] libsepol: reject policies with no avtab entries in expand_module() 2+ messages
2026-08-04 16:08 [PATCH] README.md: add Check format badge and link 2+ messages
2026-08-04 15:04 [PATCH] libsepol: reject policies with no avtab entries in expand_module() 3+ messages
2026-08-04 13:57 [PATCH] selinux: check level category sets once at load time 6+ messages
2026-08-04 12:25 [PATCH v2] .github/workflows/cifuzz.yml: update branch and upload-artifact 3+ messages
2026-08-04 7:14 [PATCH testsuite] policy: allow all test domains to inherit limits 3+ messages
2026-08-04 0:16 Subject: [REGRESSION] selinux: ~90% throughput drop in System V IPC (msg) since commit 7edea6e8c8e8 2+ messages
2026-08-03 20:09 [PATCH v2] libsepol: log an error if we hit the max depth for __evaluate_classperms_list() 3+ messages
2026-08-03 19:56 [PATCH] libsepol: log an error if we hit the max depth for __evaluate_classperms_list()
2026-08-03 18:12 [PATCH] .github/workflows/cifuzz.yml: switch to main branch
2026-08-03 17:39 [PATCH v2] SECURITY.md: Codify the maintainer process 4+ messages
2026-08-03 17:24 [PATCH] secilc: Use size_t for file sizes 3+ messages
2026-08-03 15:47 [PATCH] libsepol/fuzz: Validate output of expand_module() before proceeding 3+ messages
2026-08-03 14:23 [PATCH] libsepol: Cap max depth and processed nodes for cil_tree_walk() 4+ messages
2026-08-03 14:00 [PATCH v2] README.md: fix CIFuzz badge link to refer to a specific workflow 2+ messages
2026-08-03 9:01 [PATCH testsuite] tests/inet_socket/connect.c: add missing include for bool 3+ messages
2026-07-31 17:51 [PATCH] libsepol: Check for zero when mapping identifier values 3+ messages
2026-07-31 17:44 [PATCH 3/4] selinux: reject an unclaimed class value in security_get_classes() 17+ messages
2026-07-31 16:20 [PATCH] libsepol: fix direct leak in user_extra_to_cil() 3+ messages
2026-07-31 15:29 [PATCH] README.md: drop broken CIFuzz status link
2026-07-31 15:26 [PATCH v2] libsepol/fuzz: Exercise module to CIL code when fuzzing 3+ messages
2026-07-31 8:40 [PATCH testsuite] tests: disable testing of f2fs when PAGE_SIZE != 4096 3+ messages
2026-07-30 23:45 [PATCH v6 bpf-next 0/4] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling 44+ messages
2026-07-30 18:10 [PATCH] selinux: bpf: check SBLABEL_MNT before isec init 9+ messages
2026-07-30 14:39 [PATCH] libsepol/fuzz: Exercise module to CIL code when fuzzing 2+ messages
2026-07-30 12:57 [PATCH v2] libsepol: Turn assert into error in type_set_expand() 3+ messages
2026-07-30 12:42 [PATCH] semodule-utils: add bad-data tests for link/expand neverallow 3+ messages
2026-07-30 10:18 [PATCH v4 0/2] checkpolicy: extend bad-data and robustness tests 4+ messages
2026-07-29 19:37 [PATCH] libsepol: Turn assert into error in type_set_expand() 3+ messages
2026-07-29 15:43 [PATCH] libsepol: Check for invalid categories when expanding semantic levels 3+ messages
2026-07-29 15:19 [PATCH v3 1/2] libselinux: add pyproject.toml file 5+ messages
2026-07-29 14:55 [PATCH] mcstrans: harden systemd service file 3+ messages
2026-07-29 13:14 [PATCH 2/2] libselinux: fix infinite loop and missing errno in partial <<none>> lookup 17+ messages
2026-07-29 13:12 [PATCH] libselinux: selinux_restorecon: avoid triggering auto-mounts unnecessarily 3+ messages
2026-07-29 12:41 [PATCH testsuite] tests/file_contexts: add test_multiple to .gitignore 3+ messages
2026-07-29 12:12 [PATCH testsuite] tests/file_contexts: update .gitignore 2+ messages
2026-07-28 20:26 [PATCH 1/1] SECURITY.md: Nicolas Iooss is stepping down 3+ messages
2026-07-28 17:55 ANN: SETools 4.7.1
2026-07-28 16:45 [PATCH v3 0/2] checkpolicy: extend bad-data and robustness tests 5+ messages
2026-07-28 13:10 [PATCH] semodule-utils: add bad-data tests for sefcontext_compile 3+ messages
2026-07-28 9:16 [PATCH] policycoreutils: Using vendor defined directories for configuration files 5+ messages
2026-07-28 6:59 [PATCH v4 1/2] selinux_restorecon: Do not exit on directory cycles 5+ messages
2026-07-28 1:30 [PATCH v2 2/2] selinux: reject a class permission count below its inherited common 10+ messages
2026-07-27 22:32 [PATCH v2 0/2] checkpolicy: extend bad-data and robustness tests 7+ messages
2026-07-27 19:17 [PATCH] checkpolicy/fuzz: ignore invalid policy versions for the Xen target 2+ messages
2026-07-27 12:47 [PATCH v3] selinux_restorecon: Do not exit on directory cycles 3+ messages
2026-07-27 11:52 [PATCH testsuite] tests/file_contexts: avoid using a C99-style for loop 3+ messages
2026-07-27 7:38 [PATCH testsuite] tmt: allow nlmsg also to the ssh_server attribute 3+ messages
2026-07-27 2:52 [PATCH testsuite v3 1/2] tests/file_contexts: refactor existing tests 5+ messages
2026-07-24 17:50 [PATCH v2 1/2] libselinux: add pyproject.toml file 5+ messages
2026-07-23 6:23 [PATCH 1/3] SECURITY.md: Update security contacts 15+ messages
2026-07-20 1:41 [PATCH v4] security: Expand task_setscheduler LSM hook 5+ messages
2026-07-09 13:00 [PATCH testsuite v2] tests/overlay: verify that execmem is not checked for the mounter 2+ messages
2026-06-22 13:57 [PATCH testsuite] tests/inet_socket: add tests for TCP Fast Open 2+ messages
2026-05-28 18:38 [RFC PATCH v3] selinux: implement namespace_init and namespace_install hooks 7+ messages
2025-08-24 13:01 [PATCH 2/2] selinux: make __inode_security_revalidate non-sleeping 6+ messages
2025-04-28 19:50 [PATCH v2] security,fs,nfs,net: update security_inode_listsecurity() interface 30+ messages
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox