2026-07-31 17:51 [PATCH] libsepol: Check for zero when mapping identifier values 3+ messages
2026-07-31 17:44 [PATCH 3/4] selinux: reject an unclaimed class value in security_get_classes() 12+ messages
2026-07-31 16:20 [PATCH] libsepol: fix direct leak in user_extra_to_cil() 3+ messages
2026-07-31 15:29 [PATCH] README.md: drop broken CIFuzz status link
2026-07-31 15:26 [PATCH v2] libsepol/fuzz: Exercise module to CIL code when fuzzing 3+ messages
2026-07-31 8:40 [PATCH testsuite] tests: disable testing of f2fs when PAGE_SIZE != 4096 2+ messages
2026-07-30 23:45 [PATCH v6 bpf-next 0/4] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling 44+ messages
2026-07-30 18:10 [PATCH] selinux: bpf: check SBLABEL_MNT before isec init 9+ messages
2026-07-30 14:39 [PATCH] libsepol/fuzz: Exercise module to CIL code when fuzzing 2+ messages
2026-07-30 12:57 [PATCH v2] libsepol: Turn assert into error in type_set_expand() 3+ messages
2026-07-30 12:42 [PATCH] semodule-utils: add bad-data tests for link/expand neverallow 3+ messages
2026-07-30 10:18 [PATCH v4 0/2] checkpolicy: extend bad-data and robustness tests 4+ messages
2026-07-29 19:37 [PATCH] libsepol: Turn assert into error in type_set_expand() 3+ messages
2026-07-29 15:43 [PATCH] libsepol: Check for invalid categories when expanding semantic levels 3+ messages
2026-07-29 15:19 [PATCH v3 1/2] libselinux: add pyproject.toml file 5+ messages
2026-07-29 14:55 [PATCH] mcstrans: harden systemd service file 3+ messages
2026-07-29 13:14 [PATCH 2/2] libselinux: fix infinite loop and missing errno in partial <<none>> lookup 11+ messages
2026-07-29 13:12 [PATCH] libselinux: selinux_restorecon: avoid triggering auto-mounts unnecessarily 3+ messages
2026-07-29 12:41 [PATCH testsuite] tests/file_contexts: add test_multiple to .gitignore 3+ messages
2026-07-29 12:12 [PATCH testsuite] tests/file_contexts: update .gitignore 2+ messages
2026-07-28 20:26 [PATCH 1/1] SECURITY.md: Nicolas Iooss is stepping down 3+ messages
2026-07-28 17:55 ANN: SETools 4.7.1
2026-07-28 16:45 [PATCH v3 0/2] checkpolicy: extend bad-data and robustness tests 5+ messages
2026-07-28 13:10 [PATCH] semodule-utils: add bad-data tests for sefcontext_compile 3+ messages
2026-07-28 9:16 [PATCH] policycoreutils: Using vendor defined directories for configuration files 5+ messages
2026-07-28 6:59 [PATCH v4 1/2] selinux_restorecon: Do not exit on directory cycles 5+ messages
2026-07-28 1:30 [PATCH v2 2/2] selinux: reject a class permission count below its inherited common 10+ messages
2026-07-27 22:32 [PATCH v2 0/2] checkpolicy: extend bad-data and robustness tests 7+ messages
2026-07-27 19:17 [PATCH] checkpolicy/fuzz: ignore invalid policy versions for the Xen target 2+ messages
2026-07-27 17:38 [PATCH] libsepol/cil: Return SEPOL_ERR on failure to set bit 3+ messages
2026-07-27 15:25 [PATCH 0/2] checkpolicy: extend bad-data and robustness tests 7+ messages
2026-07-27 14:44 [PATCH] selinux: validate constraint expression attr and op at load time 3+ messages
2026-07-27 13:59 [PATCH] libsepol: cap max depth for __evaluate_classperms_list() 3+ messages
2026-07-27 12:47 [PATCH v3] selinux_restorecon: Do not exit on directory cycles 3+ messages
2026-07-27 11:52 [PATCH testsuite] tests/file_contexts: avoid using a C99-style for loop 3+ messages
2026-07-27 7:38 [PATCH testsuite] tmt: allow nlmsg also to the ssh_server attribute 3+ messages
2026-07-27 2:52 [PATCH testsuite v3 1/2] tests/file_contexts: refactor existing tests 5+ messages
2026-07-27 1:39 [PATCH v3 1/2] libselinux: support multiple spec_files 6+ messages
2026-07-24 19:28 [PATCH] libsepol: Add overflow checks when linking file and netfilter contexts 5+ messages
2026-07-24 18:29 [PATCH 1/2 v3] libsepol: Validate more access vector permissions 3+ messages
2026-07-24 17:50 [PATCH v2 1/2] libselinux: add pyproject.toml file 5+ messages
2026-07-24 15:09 [PATCH] libsepol/cil: Fix double free in cil_deny.c 2+ messages
2026-07-24 14:47 [PATCH] selinux: reject a permission value exceeding the class permission count 9+ messages
2026-07-24 0:54 [PATCH v3] libselinux: improve performance with pcre matches 3+ messages
2026-07-23 19:18 [PATCH 1/2 v2] libsepol: Validate more access vector permissions 3+ messages
2026-07-23 18:05 [BUG] restorecon of a single file can trigger systemd automounts 2+ messages
2026-07-23 16:54 [PATCH v2] libsepol: Validate string fields used in various labeling rules 3+ messages
2026-07-23 13:09 [PATCH v3] semodule-utils: add bad-data tests for semodule_package 3+ messages
2026-07-23 8:58 [PATCH v2] libselinux: improve performance with pcre matches 3+ messages
2026-07-23 8:55 [PATCH] selinux_restorecon: Do not exit on directory cycles 6+ messages
2026-07-23 6:23 [PATCH 1/3] SECURITY.md: Update security contacts 15+ messages
2026-07-23 3:13 [PATCH testsuite v2 1/2] tests/file_contexts: refactor existing tests 3+ messages
2026-07-23 3:11 [PATCH v2 1/2] libselinux: support multiple spec_files 5+ messages
2026-07-22 19:22 [PATCH] libsepol: Validate string fields used in various labeling rules
2026-07-22 18:13 [PATCH] libsepol: Check for embedded NUL when reading from policy file 3+ messages
2026-07-22 17:45 [PATCH 2/2] libsepol: Validate scope index class_perm_map array 3+ messages
2026-07-22 14:49 [PATCH v3] libsemanage: block on store lock by default 2+ messages
2026-07-22 13:45 [PATCH v2] libsemanage: block on store lock by default
2026-07-21 18:53 [PATCH 1/2] libselinux: add pyproject.toml file 7+ messages
2026-07-21 17:53 [PATCH] mcstrans: increase context length limit in secolor.conf 2+ messages
2026-07-21 17:16 [PATCH] libselinux: fix Python binding for security_load_policy() 2+ messages
2026-07-21 16:16 [PATCH] libsemanage: block on store lock by default
2026-07-21 13:32 [PATCH] sandbox/seunshare.8: Fix typo
2026-07-21 7:35 [PATCH] policycoreutils: Using vendor defined directories for configuration files 2+ messages
2026-07-21 7:23 [PATCH] selinux(8): note on conflicting configurations 4+ messages
2026-07-21 7:17 [PATCH] selinux_restorecon: Do not exit on directory cycles 3+ messages
2026-07-21 2:11 [PATCH testsuite 1/2] tests/file_contexts: refactor existing tests 4+ messages
2026-07-21 2:11 [PATCH 1/2] libselinux: support multiple spec_files 10+ messages
2026-07-20 19:52 [PATCH v2] python/sepolgen: port policygen.py to setools 4 API 2+ messages
2026-07-20 19:34 [PATCH] python/sepolgen: port policygen.py to setools 4 API
2026-07-20 18:37 [PATCH] policycoreutils/scripts/fixfiles: drop unused functions 2+ messages
2026-07-20 18:29 [PATCH v2] libsemanage: semanage_pipe_data(): multiplex the compiler pipes 2+ messages
2026-07-20 13:49 [PATCH] semodule-utils: add bad-data tests for semodule_package 5+ messages
2026-07-20 10:56 [PATCH] libsepol: add module package fuzzer 5+ messages
2026-07-20 8:56 SELinux Userspace Utilities: Local Denial-of-Service Attack Vectors in seunshare in release 3.10 2+ messages
2026-07-20 1:41 [PATCH v4] security: Expand task_setscheduler LSM hook 3+ messages
2026-07-17 18:34 [PATCH v2 01/10] sandbox/seunshare: free glob on error path 11+ messages
2026-07-17 17:35 [PATCH] libsepol: Prevent OOB access of array when copying scope information 3+ messages
2026-07-17 17:27 [PATCH] policycoreutils/secon: ensure that range_bg is not left NULL 2+ messages
2026-07-17 17:21 [PATCH] python/sepolicy: generate: drop or merge symbol table overwrites 2+ messages
2026-07-17 17:03 [GIT PULL] selinux/selinux-pr-20260717 2+ messages
2026-07-17 14:33 [PATCH 1/2] libselinux: do not call close(fd) when fd < 0 3+ messages
2026-07-16 19:57 [PATCH] mcstrans: match base classification and word text case-insensitively 2+ messages
2026-07-16 19:37 [PATCH 4/4] restorecond: fix isspace() call to cast to unsigned 5+ messages
2026-07-16 19:11 [PATCH] policycoreutils/setfiles: fix -f handling 2+ messages
2026-07-16 18:48 [PATCH] policycoreutils/scripts/fixfiles: drop /tmp cleanup 2+ messages
2026-07-16 15:14 [PATCH] mcstrans: fix inverted alias skip check in compute_trans_from_raw() 2+ messages
2026-07-16 14:49 [PATCH] semodule-utils/semodule_package: report the output filename on write errors 2+ messages
2026-07-16 14:42 [PATCH] policycoreutils/hll/pp: use argv[optind] appropriately 2+ messages
2026-07-16 14:35 [PATCH] policycoreutils/run_init: fix EINTR/EAGAIN checking in open_init_pty 2+ messages
2026-07-16 14:20 [PATCH] libsemanage: semanage_pipe_data(): multiplex the compiler pipes
2026-07-16 12:58 [PATCH] policycoreutils/run_init: handle NULL from crypt() in non-PAM build 2+ messages
2026-07-16 12:52 [PATCH 1/2] mcstrans: defer SIGTERM cleanup to the main loop 3+ messages
2026-07-15 19:23 [PATCH] libsemanage: direct_api: clamp write length in ERR_CHLD_STDERR() 2+ messages
2026-07-15 18:49 [PATCH 1/5] libselinux: selinux_set_mapping(): reject class tables with too many classes 6+ messages
2026-07-15 17:45 [PATCH] selinux: use socket SID for SCTP bind/connect permission checks in softirq 3+ messages
2026-07-15 16:58 [PATCH] libsemanage: user_base_parse: prevent OOB read on truncated config 2+ messages
2026-07-15 16:20 [PATCH 01/10] sandbox/seunshare: free glob on error path 10+ messages
2026-07-14 23:25 [PATCH v2] libselinux: use designated initializers for label initfuncs 3+ messages
2026-07-14 12:57 [PATCH v2] selinux: fix incorrect execmem checks on overlayfs 4+ messages
2026-07-14 4:09 [PATCH] selinux: compute the IMA configuration settings string length once at boot 3+ messages
2026-07-14 3:50 [PATCH] libselinux: use designated initializers for label initfuncs 2+ messages
2026-07-10 19:29 [PATCH] checkpolicy: fix double free of fstype in define_genfs_context_helper 3+ messages
2026-07-10 19:13 [GIT PULL] selinux/selinux-pr-20260710 2+ messages
2026-07-10 11:03 [PATCH] checkpolicy: add bad data protection tests 4+ messages
2026-07-10 10:29 [PATCH] checkpolicy: add bad data protection tests
2026-07-10 8:25 [PATCH] tests: make IPv6 subtests optional on IPv4-only systems 2+ messages
2026-07-10 8:15 [PATCH] skip inet_socket/mptcp when CONFIG_MPTCP is not enabled 2+ messages
2026-07-09 20:07 [PATCH] policycoreutils/setfiles: introduce -j for skip_multilink 2+ messages
2026-07-09 18:45 [Bug] Double free vulnerability at define_genfs_context_helper 5+ messages
2026-07-09 13:00 [PATCH testsuite v2] tests/overlay: verify that execmem is not checked for the mounter 2+ messages
2026-07-09 6:31 [PATCH v3] selinux: suppress warning flood for retired DCCP netlink messages 4+ messages
2026-07-08 0:09 [PATCH v5 bpf-next 0/3] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling 22+ messages
2026-07-07 18:48 Re: [PATCH v2] NFSv4.2: fix nfs4_listxattr size accounting 12+ messages
2026-07-07 15:17 [PATCH] libselinux: drop legacy probing of /selinux and /proc nodes for selinuxfs 3+ messages
2026-07-07 14:39 [PATCH] SECURITY.md: remove William Roberts 2+ messages
2026-07-07 14:14 [PATCH] SECURITY.md: add my email address and GPG key fingerprint
2026-07-07 12:19 [PATCH] Fix double-free in secilcheck 3+ messages
2026-07-06 23:50 [PATCH v6 0/8] lsm: Replace security_sb_mount with granular mount hooks 18+ messages
2026-07-06 14:38 [PATCH 1/6 v7] libselinux: Add overflow checks 8+ messages
2026-07-06 14:37 [PATCH v2 0/3] userspace: use openat2 if available 6+ messages
2026-07-06 14:31 [PATCH v3 0/5] Make selinux_check_access() thread-safe 8+ messages
2026-07-03 11:48 [PATCH testsuite] tests/overlay: verify that execmem is not checked for the mounter 3+ messages
2026-07-03 11:47 [PATCH] selinux: fix incorrect execmem checks on overlayfs 6+ messages
2026-07-03 2:30 [PATCH v2] selinux: suppress warning flood for retired DCCP netlink messages 4+ messages
2026-07-01 17:38 ANN: SELinux userspace 3.11
2026-07-01 6:23 [PATCH v2] perf test amd ibs: avoid using executable heap 10+ messages
2026-07-01 5:48 [PATCH] perf test amd ibs: avoid using executable heap 2+ messages
2026-06-30 18:39 [PATCH v4 bpf-next 0/3] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling 15+ messages
2026-06-30 10:21 3.11 release notes draft
2026-06-30 10:15 [PATCH v2] selinux: hooks: use kmalloc() to allocate path buffer 5+ messages
2026-06-29 7:06 [PATCH stable/linux-5.10.y 0/7] Backport Fix incorrect overlayfs mmap() and mprotect() LSM access controls 18+ messages
2026-06-29 7:03 [PATCH v3 stable/linux-6.12.y 1/3] fs: constify file ptr in backing_file accessor helpers 8+ messages
2026-06-29 6:30 [PATCH] selinux: suppress warning flood for retired DCCP netlink messages 6+ messages
2026-06-28 0:41 [PATCH] libselinux: selinux_restorecon(): fstat() if skip_multilink set 3+ messages
2026-06-27 6:57 [PATCH v2 stable/linux-6.6.y 0/3] Backport Fix incorrect overlayfs mmap() and mprotect() LSM access controls 8+ messages
2026-06-27 4:28 [PATCH v2 stable/linux-6.12.y 0/2] Backport Fix incorrect overlayfs mmap() and mprotect() LSM access controls 6+ messages
2026-06-26 15:57 [PATCH v2] selinux: replace strlcat() with seq_buf in selinux_ima_collect_state() 7+ messages
2026-06-26 7:50 [PATCH v2 stable/linux-6.18.y 0/2] Backport Fix incorrect overlayfs mmap() and mprotect() LSM access controls 6+ messages
2026-06-26 2:40 [PATCH v2 stable/linux-6.18.y 0/2] Backport Fix incorrect overlayfs mmap() and mprotect() LSM access controls 6+ messages
2026-06-26 1:17 [PATCH -next 0/2] Fix call security_backing_file_free second time 7+ messages
2026-06-25 23:53 [PATCH v3] selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() 6+ messages
2026-06-24 20:51 ANN: Sashiko reviews coming to the selinux mailing list 2+ messages
2026-06-24 19:34 ANN: SELinux userspace 3.11-rc3 release 3+ messages
2026-06-24 14:35 [PATCH 1/6 v6] libselinux: Add overflow checks 7+ messages
2026-06-23 19:26 ANN: SETools 4.7.0
2026-06-23 17:49 [PATCH 1/6 v5] libselinux: Add overflow checks 7+ messages
2026-06-23 15:49 [PATCH 1/6 v4] libselinux: Add overflow checks 10+ messages
2026-06-23 14:10 [PATCH 2/5] newrole: compare shadow hashes in constant time 12+ messages
2026-06-23 13:41 [PATCH 03/24] libselinux: strip only a trailing newline in type lookups 49+ messages
2026-06-23 13:39 [PATCH] Makefile: avoid 0 as NULL pointer constant 3+ messages
2026-06-22 20:39 [PATCH v2] selinux: drop unnecessary goto and label from avc_alloc_node() 3+ messages
2026-06-22 17:42 [PATCH v2] selinux: use bool instead of int in ss/services.c 3+ messages
2026-06-22 17:35 [PATCH 1/6 v3] libselinux: Add overflow checks 15+ messages
2026-06-22 15:33 [PATCH v2 1/2] libsepol: bound type values in type_set_expand negset loop 4+ messages
2026-06-22 15:00 [PATCH] selinux: replace strlcat() with seq_buf in selinux_ima_collect_state() 4+ messages
2026-06-22 14:37 [PATCH] selinux: clean up selinuxfs resources on init failure 3+ messages
2026-06-22 13:57 [PATCH testsuite] tests/inet_socket: add tests for TCP Fast Open 2+ messages
2026-06-22 12:42 [PATCH] libsepol/cil: fix double free of borrowed type datum on error path 3+ messages
2026-06-22 12:42 [PATCH] mcstrans: fix out-of-bounds read in parse_raw sensitivity parsing 3+ messages
2026-06-22 12:41 [PATCH] checkpolicy: reject out-of-range extended permission values 2+ messages
2026-06-22 12:40 [PATCH] checkpolicy: fix xperm complement at range boundaries 2+ messages
2026-06-22 3:15 [stable/linux-6.6.y 0/3] Backport Fix incorrect overlayfs mmap() and mprotect() LSM access controls 4+ messages
2026-06-22 3:15 [stable/linux-6.12.y 0/2] Backport Fix incorrect overlayfs mmap() and mprotect() LSM access controls 4+ messages
2026-06-22 3:14 [stable/linux-6.18.y 2/2] selinux: fix overlayfs mmap() and mprotect() access checks 5+ messages
2026-06-18 23:21 [PATCH] selinux: fix NULL pointer dereference in selinux_sctp_bind_connect() 7+ messages
2026-06-18 20:34 [PATCH bpf-next v3 0/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling 18+ messages
2026-06-18 17:55 [PATCH] selinux: check connect-related permissions on TCP Fast Open 4+ messages
2026-06-17 19:56 [PATCH 1/4 v2] libselinux: Add checks when growing lists to prevent wrapping 11+ messages
2026-06-17 18:55 [PATCH 1/4] libselinux: Add checks when growing lists to prevent wrapping 6+ messages
2026-06-17 15:42 [PATCH] libsemanage: guard end of path in semanage_fc_find_meta 3+ messages
2026-06-17 12:46 [PATCH] libsepol: bound category values in mls_semantic_level_expand 3+ messages
2026-06-17 1:44 SELinux kernel code and clang-format 2+ messages
2026-06-17 1:38 [PATCH] selinux: use bool instead of int in ss/services.c 2+ messages
2026-06-16 19:46 [PATCH v4] python/semanage: do not leak an audit fd per logger instance 2+ messages
2026-06-16 19:41 [PATCH v3] python/semanage: do not leak an audit fd per logger instance
2026-06-16 19:33 [PATCH v2] python/semanage: do not leak an audit fd per logger instance
2026-06-16 18:14 ANN: Reference Policy 2.20260616
2026-06-16 17:53 About SELinux userspace AVC 6+ messages
2026-06-16 16:41 [PATCH] secilc: Use fstat instead of stat to avoid TOCTOU issues 3+ messages
2026-06-16 16:14 [PATCH] libsepol: Add missing comment to context.h 3+ messages
2026-06-16 15:07 [PATCH v3] libsepol: Check for proper length of addr and mask buffers 3+ messages
2026-06-16 14:43 [PATCH 2/2] secilc/docs: mention nlmsg extended permissions 4+ messages
2026-06-16 14:34 [PATCH v2] libselinux: Add EXTRA_LD_FLAGS for musl+llvm builds 2+ messages
2026-06-16 14:18 [PATCH v2] libsepol: Check for proper length of addr and mask buffers 2+ messages
2026-06-16 12:38 [PATCH] libsepol: null-terminate temporary buffer in mls_to_string 3+ messages
2026-06-16 2:55 [GIT PULL] selinux/selinux-pr-20260615 4+ messages
2026-06-15 19:45 Should verify_shell() be in a library? 2+ messages
2026-06-15 18:01 [PATCH] libsepol: Check for proper length of addr and mask buffers 2+ messages
2026-06-15 17:27 [PATCH] libselinux: Add EXTRA_LD_SONAME_FLAGS for musl+llvm builds 2+ messages
2026-06-15 16:39 [PATCH] mcstrans: use sig_atomic_t and bool instead of int 3+ messages
2026-06-15 16:20 [PATCH] libsepol: fix out-of-bounds typealias_lists access in module_to_cil 3+ messages
2026-06-15 12:28 [PATCH] libsepol: cast to unsigned char in ctype calls 3+ messages
2026-06-14 16:23 [PATCH] policycoreutils: use bool instead of int 5+ messages
2026-05-31 16:58 [PATCH v3] selinux: hooks: use kmalloc() to allocate path buffer 7+ messages
2026-05-28 18:25 [PATCH v5 0/8] lsm: Replace security_sb_mount with granular mount hooks 15+ messages
2026-05-26 14:28 [PATCH v3] security: Expand task_setscheduler LSM hook to include CPU affinity mask 11+ messages
2026-05-07 16:16 [PATCH v3] selinux: tighten type validation during policy load 6+ messages
2026-04-30 23:24 [PATCH] selinux: remove unneeded goto and its label 2+ messages
2025-04-28 19:50 [PATCH v2] security,fs,nfs,net: update security_inode_listsecurity() interface 30+ messages
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox