Show patches with: State = Action Required       |   195 patches
« 1 2 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[01/87] fs: new accessor methods for atime and mtime fs: new accessor methods for atime and mtime - - - --- 2023-09-28 Jeff Layton New
[09/11] pragma once: convert scripts/selinux/genheaders/genheaders.c Untitled series #439529 - - - --- 2021-02-28 Alexey Dobriyan pcmoore New
[1/2,RFC] libsepol: Add not self support for neverallow rules libsepol: Adding support for not-self rules - - - --- 2022-01-11 James Carter New
[1/2] selinux: Add map perms [1/2] selinux: Add map perms - - - --- 2021-11-21 Jason Zaman New
[1/3] secilc/docs: selinuxuser actually takes a string not identifier [1/3] secilc/docs: selinuxuser actually takes a string not identifier - - - --- 2022-08-28 bauen1 bachradsusi New
[1/3] selinux: use arrays for avtab hashtable nodes avtab hotspot optimizations - 1 - --- 2023-09-06 Jacob Satterfield pcmoore Under Review
[1/4] libselinux: add man page redirections [1/4] libselinux: add man page redirections 1 - - --- 2022-05-20 Christian Göttsche New
[1/4] libselinux/utils: update selabel_partial_match [1/4] libselinux/utils: update selabel_partial_match 1 - - --- 2023-08-03 Christian Göttsche bachradsusi New
[1/4] selinux: simplify avtab_insert_node() prototype selinux: avtab arrays and refactors - - - --- 2023-09-29 Jacob Satterfield New
[1/5] libsepol: free memory on str_read() failures [1/5] libsepol: free memory on str_read() failures - - - --- 2023-07-13 Christian Göttsche bachradsusi New
[1/5] libsepol: include length squared in hashtab_hash_eval() [1/5] libsepol: include length squared in hashtab_hash_eval() - - - --- 2023-08-16 Christian Göttsche bachradsusi New
[1/9] libsepol/cil: Use struct cil_db * instead of void * CIL Cleanups and Improved Argument handling - 1 - --- 2023-09-27 James Carter New
[2/2,RFC] libsepol/cil: Add notself and minusself support to CIL libsepol: Adding support for not-self rules - - - --- 2022-01-11 James Carter New
[2/2] dbus: Add filetrans for /tmp/dbus-* session socket [1/2] selinux: Add map perms - - - --- 2021-11-21 Jason Zaman New
[2/3] selinux: shrink conditional avtab node array avtab hotspot optimizations - 1 - --- 2023-09-06 Jacob Satterfield pcmoore Under Review
[2/4] libselinux: misc label cleanup [1/4] libselinux/utils: update selabel_partial_match - - - --- 2023-08-03 Christian Göttsche bachradsusi New
[2/4] selinux: refactor avtab_node comparisons selinux: avtab arrays and refactors - - - --- 2023-09-29 Jacob Satterfield New
[2/5] libsepol: reject avtab entries with invalid specifier [1/5] libsepol: free memory on str_read() failures - - - --- 2023-07-13 Christian Göttsche bachradsusi New
[2/5] libsepol: use DJB2a string hash function [1/5] libsepol: include length squared in hashtab_hash_eval() - - - --- 2023-08-16 Christian Göttsche bachradsusi New
[2/6] selinux: dump statistics for more hash tables [1/6] selinux: print sum of chain lengths^2 for hash tables - 1 - --- 2023-08-18 Christian Göttsche pcmoore Under Review
[2/9] libsepol/cil: Refactor and improve handling of order rules CIL Cleanups and Improved Argument handling - - - --- 2023-09-27 James Carter New
[28/32] selinux: Use mem_to_flex_dup() with xfrm and sidtab Introduce flexible array struct memcpy() helpers - - - --- 2022-05-04 Kees Cook pcmoore New
[3/4] selinux: avtab iteration macros selinux: avtab arrays and refactors - - - --- 2023-09-29 Jacob Satterfield New
[3/5] libsepol: free ebitmap in filename_trans_comp_read_one() [1/5] libsepol: free memory on str_read() failures - - - --- 2023-07-13 Christian Göttsche bachradsusi New
[3/5] libsepol/cil: use DJB2a string hash function [1/5] libsepol: include length squared in hashtab_hash_eval() - - - --- 2023-08-16 Christian Göttsche bachradsusi New
[3/9] libsepol/cil: Allow IP address and mask values to be directly written CIL Cleanups and Improved Argument handling - - - --- 2023-09-27 James Carter New
[4/4] libselinux: drop unnecessary warning overrides [1/4] libselinux/utils: update selabel_partial_match - - - --- 2023-08-03 Christian Göttsche bachradsusi New
[4/4] selinux: use arrays for avtab hashtable nodes selinux: avtab arrays and refactors - - - --- 2023-09-29 Jacob Satterfield New
[4/5] libselinux: use DJB2a string hash function [1/5] libsepol: include length squared in hashtab_hash_eval() - - - --- 2023-08-16 Christian Göttsche bachradsusi New
[4/5] libsepol: drop superfluous check [1/5] libsepol: free memory on str_read() failures - - - --- 2023-07-13 Christian Göttsche bachradsusi New
[4/9] secilc/docs: Update syntax for IP addresses and nodecon CIL Cleanups and Improved Argument handling - - - --- 2023-09-27 James Carter New
[5/5] libsepol: avtab: check read counts for saturation [1/5] libsepol: free memory on str_read() failures - - - --- 2023-07-13 Christian Göttsche bachradsusi New
[5/5] newrole: use DJB2a string hash function [1/5] libsepol: include length squared in hashtab_hash_eval() - - - --- 2023-08-16 Christian Göttsche bachradsusi New
[5/9] libsepol/cil: Refactor Named Type Transition Filename Creation CIL Cleanups and Improved Argument handling - - - --- 2023-09-27 James Carter New
[6/9] libsepol/cil: Allow paths in filecon rules to be passed as arguments CIL Cleanups and Improved Argument handling - - - --- 2023-09-27 James Carter New
[7/7,v2] secilc/test: Add notself and other tests Add support for notself and other to CIL - - - --- 2023-08-09 James Carter bachradsusi New
[7/9] secilc/docs: Fix and update the documentation for macro parameters CIL Cleanups and Improved Argument handling - - - --- 2023-09-27 James Carter New
[8/9,v4] secilc/test: Add deny rule tests Add CIL Deny Rule - - - --- 2023-08-09 James Carter bachradsusi New
[8/9] libsepol/cil: Add pointers to datums to improve writing out AST CIL Cleanups and Improved Argument handling - - - --- 2023-09-27 James Carter New
[83/87] security/selinux: convert to new inode {a,m}time accessors fs: new accessor methods for atime and mtime - - - --- 2023-09-28 Jeff Layton New
[85/87] fs: rename i_atime and i_mtime fields to __i_atime and __i_mtime fs: new accessor methods for atime and mtime - - - --- 2023-09-28 Jeff Layton New
[86/87] fs: switch timespec64 fields in inode to discrete integers fs: new accessor methods for atime and mtime - - - --- 2023-09-28 Jeff Layton New
[87/87] fs: move i_blocks up a few places in struct inode fs: new accessor methods for atime and mtime - - - --- 2023-09-28 Jeff Layton New
[9/9] libsepol/cil: Give warning for name that has different flavor CIL Cleanups and Improved Argument handling - - - --- 2023-09-27 James Carter New
[libselinux] libselinux: make threadsafe for discover_class_cache [libselinux] libselinux: make threadsafe for discover_class_cache - - - --- 2022-01-20 Purushottam Choudhary New
[RESEND,v18,1/4] Add flags option to get xattr method paired to __vfs_getxattr overlayfs override_creds=off & nested get xattr fix 5 1 - --- 2020-10-21 Mark Salyzyn pcmoore New
[RESEND,v18,2/4] overlayfs: handle XATTR_NOSECURITY flag for get xattr method overlayfs override_creds=off & nested get xattr fix - - - --- 2020-10-21 Mark Salyzyn pcmoore New
[RESEND,v18,3/4] overlayfs: override_creds=off option bypass creator_cred overlayfs override_creds=off & nested get xattr fix - - - --- 2020-10-21 Mark Salyzyn pcmoore New
[RESEND,v18,4/4] overlayfs: inode_owner_or_capable called during execv Untitled series #368853 - - - --- 2020-10-22 Mark Salyzyn pcmoore New
[RESEND,v5] proc: Allow pid_revalidate() during LOOKUP_RCU [RESEND,v5] proc: Allow pid_revalidate() during LOOKUP_RCU - - - --- 2021-04-16 Stephen Brennan pcmoore New
[RESEND,v5] proc: Allow pid_revalidate() during LOOKUP_RCU [RESEND,v5] proc: Allow pid_revalidate() during LOOKUP_RCU - - - --- 2021-02-04 Stephen Brennan pcmoore New
[RFC,07/20] selinux: services: update type for umber of class permissions [RFC,01/20] selinux: check for multiplication overflow in put_entry() - - - --- 2023-07-06 Christian Göttsche pcmoore Under Review
[RFC,1/1] selinux-testsuite: Reduce sctp test runtime selinux-testsuite: Reduce sctp test runtime - - - --- 2020-11-04 Richard Haines omos Under Review
[RFC,1/1] selinuxns: Replace state pointer with namespace id [RFC,1/1] selinuxns: Replace state pointer with namespace id - - - --- 2022-02-16 Igor Baranov pcmoore New
[RFC,1/2] fs/xattr: add *at family syscalls [RFC,1/2] fs/xattr: add *at family syscalls - - - --- 2022-08-30 Christian Göttsche pcmoore New
[RFC,1/5] selinux-testsuite: add tests/sandbox/nodir_no_allow.cil [RFC,1/5] selinux-testsuite: add tests/sandbox/nodir_no_allow.cil - - - --- 2020-03-13 Stephen Smalley omos New
[RFC,1/7] LSM: Infrastructure management of the superblock [RFC,1/7] LSM: Infrastructure management of the superblock 1 2 - --- 2022-04-18 Alexander Kozhevnikov pcmoore New
[RFC,1/9] sk_buff: track nfct status in newly added skb->_state [RFC,1/9] sk_buff: track nfct status in newly added skb->_state - - - --- 2021-07-21 Paolo Abeni pcmoore New
[RFC,2/2] fs/xattr: wire up syscalls [RFC,1/2] fs/xattr: add *at family syscalls - - - --- 2022-08-30 Christian Göttsche pcmoore New
[RFC,2/2] security, nfs: Provide a hook for fs_context security initialisation [RFC,1/2] security: Remove security_add_mnt_opt() as it's unused - - - --- 2021-12-08 David Howells pcmoore New
[RFC,2/4] libsepol: add ebitmap iterator wrapper with startnode [RFC,1/4] libsepol: refactor ebitmap conversion in link.c - - - --- 2022-06-16 Christian Göttsche New
[RFC,2/5] selinux-testsuite: add tests/sandbox/nodir_rx_allow.cil [RFC,1/5] selinux-testsuite: add tests/sandbox/nodir_no_allow.cil - - - --- 2020-03-13 Stephen Smalley omos New
[RFC,2/7] selinux: support per-namespace superblock security structures [RFC,1/7] LSM: Infrastructure management of the superblock - - - --- 2022-04-18 Alexander Kozhevnikov pcmoore New
[RFC,2/9] sk_buff: track dst status in skb->_state [RFC,1/9] sk_buff: track nfct status in newly added skb->_state - - - --- 2021-07-21 Paolo Abeni pcmoore New
[RFC,3/4] libsepol: add compile-time constraint for mutual exclusive attributes [RFC,1/4] libsepol: refactor ebitmap conversion in link.c - - - --- 2022-06-16 Christian Göttsche New
[RFC,3/5] selinux-testsuite: add tests/sandbox/rxdir_no_allow.cil [RFC,1/5] selinux-testsuite: add tests/sandbox/nodir_no_allow.cil - - - --- 2020-03-13 Stephen Smalley omos New
[RFC,3/7] SELINUXNS: Fix initilization of the superblock security under spinlock [RFC,1/7] LSM: Infrastructure management of the superblock - - - --- 2022-04-18 Alexander Kozhevnikov pcmoore New
[RFC,3/9] libselinux: declare avc_open(3) options parameter const [RFC,1/9] libselinux: annotate interfaces with compiler attributes - - - --- 2023-05-12 Christian Göttsche bachradsusi New
[RFC,3/9] sk_buff: move the active_extensions into the state bitfield [RFC,1/9] sk_buff: track nfct status in newly added skb->_state - - - --- 2021-07-21 Paolo Abeni pcmoore New
[RFC,4/4] checkpolicy: add front-end support for segregate attributes [RFC,1/4] libsepol: refactor ebitmap conversion in link.c - - - --- 2022-06-16 Christian Göttsche New
[RFC,4/5] selinux-testsuite: add tests/sandbox/rxdir_rx_allow.cil [RFC,1/5] selinux-testsuite: add tests/sandbox/nodir_no_allow.cil - - - --- 2020-03-13 Stephen Smalley omos New
[RFC,4/7] SELINUXNS: Namespacing for xattrs [RFC,1/7] LSM: Infrastructure management of the superblock - - - --- 2022-04-18 Alexander Kozhevnikov pcmoore New
[RFC,4/9] mcstrans: check getcon(3) and context_range_set(3) for failure [RFC,1/9] libselinux: annotate interfaces with compiler attributes - - - --- 2023-05-12 Christian Göttsche bachradsusi New
[RFC,4/9] net: optimize GRO for the common case. [RFC,1/9] sk_buff: track nfct status in newly added skb->_state - - - --- 2021-07-21 Paolo Abeni pcmoore New
[RFC,5/5] selinux-testsuite: add testing for unprivileged sandboxing capability [RFC,1/5] selinux-testsuite: add tests/sandbox/nodir_no_allow.cil - - - --- 2020-03-13 Stephen Smalley omos New
[RFC,5/7] SELINUXNS: Migrate all open files and all vma to new namespace [RFC,1/7] LSM: Infrastructure management of the superblock - - - --- 2022-04-18 Alexander Kozhevnikov pcmoore New
[RFC,5/9] libselinux: explicitly ignore return values [RFC,1/9] libselinux: annotate interfaces with compiler attributes - - - --- 2023-05-12 Christian Göttsche bachradsusi New
[RFC,5/9] skbuff: introduce has_sk state bit. [RFC,1/9] sk_buff: track nfct status in newly added skb->_state - - - --- 2021-07-21 Paolo Abeni pcmoore New
[RFC,6/7] SELINUXNS: Fixing superblock security structure memory leakage [RFC,1/7] LSM: Infrastructure management of the superblock - - - --- 2022-04-18 Alexander Kozhevnikov pcmoore New
[RFC,6/9] veth: use skb_prepare_for_gro() [RFC,1/9] sk_buff: track nfct status in newly added skb->_state - - - --- 2021-07-21 Paolo Abeni pcmoore New
[RFC,7/7] SELINUXNS: Fixing concurrency issues [RFC,1/7] LSM: Infrastructure management of the superblock - - - --- 2022-04-18 Alexander Kozhevnikov pcmoore New
[RFC,7/9] secon: check selinux_raw_to_trans_context(3) for failure [RFC,1/9] libselinux: annotate interfaces with compiler attributes - - - --- 2023-05-12 Christian Göttsche bachradsusi New
[RFC,7/9] sk_buff: move inner header fields after tail [RFC,1/9] sk_buff: track nfct status in newly added skb->_state - - - --- 2021-07-21 Paolo Abeni pcmoore New
[RFC,8/9] restorecond: check selinux_restorecon(3) for failure [RFC,1/9] libselinux: annotate interfaces with compiler attributes - - - --- 2023-05-12 Christian Göttsche bachradsusi New
[RFC,8/9] sk_buff: move vlan field after tail. [RFC,1/9] sk_buff: track nfct status in newly added skb->_state - - - --- 2021-07-21 Paolo Abeni pcmoore New
[RFC,9/9] restorecond: drop last matchpathcon call [RFC,1/9] libselinux: annotate interfaces with compiler attributes - - - --- 2023-05-12 Christian Göttsche bachradsusi New
[RFC,9/9] sk_buff: access secmark via getter/setter [RFC,1/9] sk_buff: track nfct status in newly added skb->_state - - - --- 2021-07-21 Paolo Abeni pcmoore New
[RFC,v2,01/27] libselinux/utils: update selabel_partial_match libselinux: rework selabel_file(5) database - - - --- 2023-08-14 Christian Göttsche bachradsusi New
[RFC,v2,02/27] libselinux: misc label cleanup libselinux: rework selabel_file(5) database - - - --- 2023-08-14 Christian Göttsche bachradsusi New
[RFC,v2,04/27] libselinux: drop unnecessary warning overrides libselinux: rework selabel_file(5) database - - - --- 2023-08-14 Christian Göttsche bachradsusi New
[RFC,v2,05/27] setfiles: do not issue AUDIT_FS_RELABEL on dry run libselinux: rework selabel_file(5) database - - - --- 2023-08-14 Christian Göttsche bachradsusi New
[RFC,v2,06/27] libselinux: cast to unsigned char for character handling function libselinux: rework selabel_file(5) database - - - --- 2023-08-14 Christian Göttsche bachradsusi New
[RFC,v2,07/27] libselinux: constify selabel_cmp(3) parameters libselinux: rework selabel_file(5) database - - - --- 2023-08-14 Christian Göttsche bachradsusi New
[RFC,v2,08/27] libselinux: introduce reallocarray(3) libselinux: rework selabel_file(5) database - - - --- 2023-08-14 Christian Göttsche bachradsusi New
[RFC,v2,09/27] libselinux: simplify zeroing allocation libselinux: rework selabel_file(5) database - - - --- 2023-08-14 Christian Göttsche bachradsusi New
[RFC,V2,1/2] selinux-testsuite: Run tests using remote server selinux-testsuite: Run tests using remote server - - - --- 2020-08-26 Richard Haines omos New
[RFC,v2,10/27] libselinux: introduce selabel_nuke libselinux: rework selabel_file(5) database - - - --- 2023-08-14 Christian Göttsche bachradsusi New
[RFC,v2,11/27] libselinux/utils: use type safe union assignment libselinux: rework selabel_file(5) database - - - --- 2023-08-14 Christian Göttsche bachradsusi New
[RFC,v2,12/27] libselinux: avoid regex serialization truncations libselinux: rework selabel_file(5) database - - - --- 2023-08-14 Christian Göttsche bachradsusi New
[RFC,v2,13/27] libselinux/utils: introduce selabel_compare libselinux: rework selabel_file(5) database - - - --- 2023-08-14 Christian Göttsche bachradsusi New
« 1 2 »