Show patches with: State = Action Required       |   173 patches
« 1 2 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
libselinux: Add CPPFLAGS to Makefile libselinux: Add CPPFLAGS to Makefile - - - --- 2023-06-06 ChungSheng Wu New
semanage: list all nodes even if not attributed with node_type semanage: list all nodes even if not attributed with node_type - - - --- 2023-06-04 Topi Miettinen bachradsusi New
[v2] semanage, sepolicy: list also ports not attributed with port_type [v2] semanage, sepolicy: list also ports not attributed with port_type - - - --- 2023-06-02 Topi Miettinen bachradsusi New
[RFC] selinux: support name based type transitions in conditional policies [RFC] selinux: support name based type transitions in conditional policies - - - --- 2023-06-02 Christian Göttsche pcmoore New
selinux: avoid bool as identifier name selinux: avoid bool as identifier name - - - --- 2023-06-02 Christian Göttsche pcmoore New
[RFC] checkpolicy, libsepol: support name based type transitions in conditional policies [RFC] checkpolicy, libsepol: support name based type transitions in conditional policies - - - --- 2023-06-02 Christian Göttsche bachradsusi New
[2/2] libsemanage/tests: consider DESTDIR [1/2] secilc: consider DESTDIR in tests - - - --- 2023-06-02 Christian Göttsche bachradsusi New
[1/2] secilc: consider DESTDIR in tests [1/2] secilc: consider DESTDIR in tests - - - --- 2023-06-02 Christian Göttsche bachradsusi New
python/sepolicy: Fix template for confined user policy modules python/sepolicy: Fix template for confined user policy modules 1 - - --- 2023-06-01 Vit Mojzis bachradsusi New
[8/8] libsepol/cil: add support for prefix/suffix filename transtions to CIL checkpolicy, libsepol: add prefix/suffix matching to filename type transitions - 1 - --- 2023-05-31 Juraj Marcin bachradsusi New
[7/8] checkpolicy, libsepol: add prefix/suffix support to module policy checkpolicy, libsepol: add prefix/suffix matching to filename type transitions - 1 - --- 2023-05-31 Juraj Marcin bachradsusi New
[6/8] checkpolicy, libsepol: add prefix/suffix support to kernel policy checkpolicy, libsepol: add prefix/suffix matching to filename type transitions - 1 - --- 2023-05-31 Juraj Marcin bachradsusi New
[5/8] libsepol: implement new module binary format of avrule checkpolicy, libsepol: add prefix/suffix matching to filename type transitions - 1 - --- 2023-05-31 Juraj Marcin bachradsusi New
[4/8] libsepol: implement new kernel binary format for avtab checkpolicy, libsepol: add prefix/suffix matching to filename type transitions - 1 - --- 2023-05-31 Juraj Marcin bachradsusi New
[3/8] checkpolicy, libsepol: move filename transition rules to avrule checkpolicy, libsepol: add prefix/suffix matching to filename type transitions - 1 - --- 2023-05-31 Juraj Marcin bachradsusi New
[2/8] checkpolicy, libsepol: move filename transitions to avtab checkpolicy, libsepol: add prefix/suffix matching to filename type transitions - 1 - --- 2023-05-31 Juraj Marcin bachradsusi New
[1/8] checkpolicy, libsepol: move transition to separate structure in avtab checkpolicy, libsepol: add prefix/suffix matching to filename type transitions - 1 - --- 2023-05-31 Juraj Marcin bachradsusi New
[5/5] selinux: add prefix/suffix matching support to filename type transitions selinux: add prefix/suffix matching to filename type transitions - 1 - --- 2023-05-31 Juraj Marcin pcmoore New
[4/5] selinux: filename transitions move tests selinux: add prefix/suffix matching to filename type transitions - 1 - --- 2023-05-31 Juraj Marcin pcmoore New
[3/5] selinux: implement new binary format for filename transitions in avtab selinux: add prefix/suffix matching to filename type transitions - 1 - --- 2023-05-31 Juraj Marcin pcmoore New
[2/5] selinux: move filename transitions to avtab selinux: add prefix/suffix matching to filename type transitions - 1 - --- 2023-05-31 Juraj Marcin pcmoore New
[1/5] selinux: move transition to separate structure in avtab_datum selinux: add prefix/suffix matching to filename type transitions - 1 - --- 2023-05-31 Juraj Marcin pcmoore New
Makefile: expand ~ in DESTDIR Makefile: expand ~ in DESTDIR - - - --- 2023-05-31 Masatake YAMATO bachradsusi New
[PR#394] semanage: list all ports even if not attributed with port_type [PR#394] semanage: list all ports even if not attributed with port_type - - - --- 2023-05-30 Topi Miettinen bachradsusi New
python/sepolicy: Add/remove user even when SELinux is disabled python/sepolicy: Add/remove user even when SELinux is disabled - - - --- 2023-05-29 Vit Mojzis bachradsusi New
[4/4] python: update python.pot [1/4] python: improve format strings for proper localization - - - --- 2023-05-17 Petr Lautrbach bachradsusi New
[3/4] semanage: Drop unnecessary import from seobject [1/4] python: improve format strings for proper localization - - - --- 2023-05-17 Petr Lautrbach bachradsusi New
[2/4] python/semanage: Drop hard formating from localized strings [1/4] python: improve format strings for proper localization - - - --- 2023-05-17 Petr Lautrbach bachradsusi New
[1/4] python: improve format strings for proper localization [1/4] python: improve format strings for proper localization - - - --- 2023-05-17 Petr Lautrbach bachradsusi New
[RFC,4/4] semodule_unpackage: update [RFC,1/4] semodule_expand: update - - - --- 2023-05-12 Christian Göttsche bachradsusi New
[RFC,3/4] semodule_package: update [RFC,1/4] semodule_expand: update - - - --- 2023-05-12 Christian Göttsche bachradsusi New
[RFC,2/4] semodule_link: update [RFC,1/4] semodule_expand: update - - - --- 2023-05-12 Christian Göttsche bachradsusi New
[RFC,9/9] restorecond: drop last matchpathcon call [RFC,1/9] libselinux: annotate interfaces with compiler attributes - - - --- 2023-05-12 Christian Göttsche bachradsusi New
[RFC,8/9] restorecond: check selinux_restorecon(3) for failure [RFC,1/9] libselinux: annotate interfaces with compiler attributes - - - --- 2023-05-12 Christian Göttsche bachradsusi New
[RFC,7/9] secon: check selinux_raw_to_trans_context(3) for failure [RFC,1/9] libselinux: annotate interfaces with compiler attributes - - - --- 2023-05-12 Christian Göttsche bachradsusi New
[RFC,6/9] libselinux: ignore internal use of deprecated interfaces [RFC,1/9] libselinux: annotate interfaces with compiler attributes - - - --- 2023-05-12 Christian Göttsche bachradsusi New
[RFC,5/9] libselinux: explicitly ignore return values [RFC,1/9] libselinux: annotate interfaces with compiler attributes - - - --- 2023-05-12 Christian Göttsche bachradsusi New
[RFC,4/9] mcstrans: check getcon(3) and context_range_set(3) for failure [RFC,1/9] libselinux: annotate interfaces with compiler attributes - - - --- 2023-05-12 Christian Göttsche bachradsusi New
[RFC,3/9] libselinux: declare avc_open(3) options parameter const [RFC,1/9] libselinux: annotate interfaces with compiler attributes - - - --- 2023-05-12 Christian Göttsche bachradsusi New
[RFC,2/9] libselinux: deprecate matchpathcon and compute_user interfaces [RFC,1/9] libselinux: annotate interfaces with compiler attributes - - - --- 2023-05-12 Christian Göttsche bachradsusi New
[RFC,1/9] libselinux: annotate interfaces with compiler attributes [RFC,1/9] libselinux: annotate interfaces with compiler attributes - - - --- 2023-05-12 Christian Göttsche bachradsusi New
[v2] checkpolicy/dismod: misc improvements [v2] checkpolicy/dismod: misc improvements 1 - - --- 2023-05-12 Christian Göttsche bachradsusi New
[v2] checkpolicy: add option to skip checking neverallow rules [v2] checkpolicy: add option to skip checking neverallow rules 1 - - --- 2023-05-12 Christian Göttsche bachradsusi New
libsepol/cil: Fix class permission verification in CIL libsepol/cil: Fix class permission verification in CIL - - - --- 2023-04-20 James Carter bachradsusi New
[9/9,v3] secilc/docs: Add deny rule to CIL documentation Add CIL Deny Rule - - - --- 2023-04-13 James Carter bachradsusi New
[8/9,v3] secilc/test: Add deny rule tests Add CIL Deny Rule - - - --- 2023-04-13 James Carter bachradsusi New
[7/9,v3] secilc/secil2tree: Add option to write CIL AST after post processing Add CIL Deny Rule - - - --- 2023-04-13 James Carter bachradsusi New
[6/9,v3] libsepol: Export the cil_write_post_ast function Add CIL Deny Rule - - - --- 2023-04-13 James Carter bachradsusi New
[5/9,v3] libsepol/cil: Add cil_write_post_ast function Add CIL Deny Rule - - - --- 2023-04-13 James Carter bachradsusi New
[4/9,v3] libsepol/cil: Process deny rules Add CIL Deny Rule - - - --- 2023-04-13 James Carter bachradsusi New
[3/9,v3] libsepol/cil: Add cil_tree_node_remove function Add CIL Deny Rule - - - --- 2023-04-13 James Carter bachradsusi New
[2/9,v3] libsepol/cil: Add cil_list_is_empty macro Add CIL Deny Rule - - - --- 2023-04-13 James Carter bachradsusi New
[1/9,v3] libsepol/cil: Parse and add deny rule to AST, but do not process Add CIL Deny Rule - - - --- 2023-04-13 James Carter bachradsusi New
[6/6] secilc/test: Add notself and other tests Add support for notself and other to CIL - - - --- 2023-04-12 James Carter bachradsusi New
[5/6] secilc/docs: Add notself and other keywords to CIL documentation Add support for notself and other to CIL - - - --- 2023-04-12 James Carter bachradsusi New
[4/6] libsepol: update CIL generation for trivial not-self rules Add support for notself and other to CIL - - - --- 2023-04-12 James Carter bachradsusi New
[3/6] libsepol/cil: Add notself and other support to CIL Add support for notself and other to CIL - - - --- 2023-04-12 James Carter bachradsusi New
[2/6] libsepol/cil: Do not call ebitmap_init twice for an ebitmap Add support for notself and other to CIL - - - --- 2023-04-12 James Carter bachradsusi New
[1/6] libsepol: Changes to ebitmap.h to fix compiler warnings Add support for notself and other to CIL - - - --- 2023-04-12 James Carter bachradsusi New
make avc audit line only have one space make avc audit line only have one space - - - --- 2023-04-01 Steven Moreland bachradsusi New
[v3,1/3] libselinux: migrating hashtab from policycoreutils Improve efficiency of detecting duplicate in libselinux 1 - - --- 2023-03-08 wanghuizhao bachradsusi New
[UTIL-LINUX] mount: add rootcontext=@target [UTIL-LINUX] mount: add rootcontext=@target - - - --- 2023-02-21 Christian Göttsche New
[3/3] libselinux: use a static match_data if single threaded improve performance of pcre matches - - - --- 2023-01-23 Carlo Arenas bachradsusi New
[2/3] libselinux: improve performance with pcre matches improve performance of pcre matches - - - --- 2023-01-23 Carlo Arenas bachradsusi New
[1/3] scripts: respect an initial LD_LIBRARY_PATH with env_use_destdir improve performance of pcre matches - - - --- 2023-01-23 Carlo Arenas bachradsusi New
[RFC,v4,6/6] libsepol: update CIL generation for trivial not-self rules not-self neverallow support 1 - - --- 2022-11-25 Christian Göttsche bachradsusi New
[RFC,v4,2/6] libsepol/cil: Add notself and minusself support to CIL not-self neverallow support - - - --- 2022-11-25 Christian Göttsche bachradsusi New
[RFC,1/2] fs/xattr: add *at family syscalls [RFC,1/2] fs/xattr: add *at family syscalls - - - --- 2022-08-30 Christian Göttsche pcmoore New
[RFC,2/2] fs/xattr: wire up syscalls [RFC,1/2] fs/xattr: add *at family syscalls - - - --- 2022-08-30 Christian Göttsche pcmoore New
[1/3] secilc/docs: selinuxuser actually takes a string not identifier [1/3] secilc/docs: selinuxuser actually takes a string not identifier - - - --- 2022-08-28 bauen1 bachradsusi New
selinux: Variable type completion selinux: Variable type completion - - - --- 2022-08-16 Xin Gao pcmoore New
[v3,8/8] secilc: include segregate attributes in tests [v3,1/8] libsepol: refactor ebitmap conversion in link.c - - - --- 2022-07-21 Christian Göttsche New
[v3,7/8] secilc: run tests against development version of libsepol [v3,1/8] libsepol: refactor ebitmap conversion in link.c - - - --- 2022-07-21 Christian Göttsche New
[v3,6/8] libsepol/cil: add support for segregate attributes [v3,1/8] libsepol: refactor ebitmap conversion in link.c - - - --- 2022-07-21 Christian Göttsche New
[v3,5/8] libsepol/tests: add test for segregate attributes [v3,1/8] libsepol: refactor ebitmap conversion in link.c - - - --- 2022-07-21 Christian Göttsche New
[v3,4/8] checkpolicy: add front-end support for segregate attributes [v3,1/8] libsepol: refactor ebitmap conversion in link.c - - - --- 2022-07-21 Christian Göttsche New
[v3,3/8] libsepol: add compile-time constraint for mutual exclusive attributes [v3,1/8] libsepol: refactor ebitmap conversion in link.c - - - --- 2022-07-21 Christian Göttsche New
[v3,2/8] libsepol: add ebitmap iterator wrapper with startnode [v3,1/8] libsepol: refactor ebitmap conversion in link.c - - - --- 2022-07-21 Christian Göttsche New
[RFC,4/4] checkpolicy: add front-end support for segregate attributes [RFC,1/4] libsepol: refactor ebitmap conversion in link.c - - - --- 2022-06-16 Christian Göttsche New
[RFC,3/4] libsepol: add compile-time constraint for mutual exclusive attributes [RFC,1/4] libsepol: refactor ebitmap conversion in link.c - - - --- 2022-06-16 Christian Göttsche New
[RFC,2/4] libsepol: add ebitmap iterator wrapper with startnode [RFC,1/4] libsepol: refactor ebitmap conversion in link.c - - - --- 2022-06-16 Christian Göttsche New
[1/4] libselinux: add man page redirections [1/4] libselinux: add man page redirections 1 - - --- 2022-05-20 Christian Göttsche New
Makefile: always include and link with DESTDIR Makefile: always include and link with DESTDIR - - - --- 2022-05-20 Christian Göttsche New
[28/32] selinux: Use mem_to_flex_dup() with xfrm and sidtab Introduce flexible array struct memcpy() helpers - - - --- 2022-05-04 Kees Cook pcmoore New
selinux: use unsigned char for boolean values selinux: use unsigned char for boolean values - - - --- 2022-05-02 Christian Göttsche pcmoore New
[RFC,7/7] SELINUXNS: Fixing concurrency issues [RFC,1/7] LSM: Infrastructure management of the superblock - - - --- 2022-04-18 Alexander Kozhevnikov pcmoore New
[RFC,6/7] SELINUXNS: Fixing superblock security structure memory leakage [RFC,1/7] LSM: Infrastructure management of the superblock - - - --- 2022-04-18 Alexander Kozhevnikov pcmoore New
[RFC,5/7] SELINUXNS: Migrate all open files and all vma to new namespace [RFC,1/7] LSM: Infrastructure management of the superblock - - - --- 2022-04-18 Alexander Kozhevnikov pcmoore New
[RFC,4/7] SELINUXNS: Namespacing for xattrs [RFC,1/7] LSM: Infrastructure management of the superblock - - - --- 2022-04-18 Alexander Kozhevnikov pcmoore New
[RFC,3/7] SELINUXNS: Fix initilization of the superblock security under spinlock [RFC,1/7] LSM: Infrastructure management of the superblock - - - --- 2022-04-18 Alexander Kozhevnikov pcmoore New
[RFC,2/7] selinux: support per-namespace superblock security structures [RFC,1/7] LSM: Infrastructure management of the superblock - - - --- 2022-04-18 Alexander Kozhevnikov pcmoore New
[RFC,1/7] LSM: Infrastructure management of the superblock [RFC,1/7] LSM: Infrastructure management of the superblock 1 2 - --- 2022-04-18 Alexander Kozhevnikov pcmoore New
[v2,6/6] Enable missing prototypes [v2,1/6] libsepol/cil: declare file local functions static - - - --- 2022-04-05 Christian Göttsche New
[RFC,1/1] selinuxns: Replace state pointer with namespace id [RFC,1/1] selinuxns: Replace state pointer with namespace id - - - --- 2022-02-16 Igor Baranov pcmoore New
libselinux: Prevent cached context giving wrong results libselinux: Prevent cached context giving wrong results - - - --- 2022-01-27 Johannes Segitz New
[libselinux] libselinux: make threadsafe for discover_class_cache [libselinux] libselinux: make threadsafe for discover_class_cache - - - --- 2022-01-20 Purushottam Choudhary New
[2/2,RFC] libsepol/cil: Add notself and minusself support to CIL libsepol: Adding support for not-self rules - - - --- 2022-01-11 James Carter New
[1/2,RFC] libsepol: Add not self support for neverallow rules libsepol: Adding support for not-self rules - - - --- 2022-01-11 James Carter New
[RFC,2/2] security, nfs: Provide a hook for fs_context security initialisation [RFC,1/2] security: Remove security_add_mnt_opt() as it's unused - - - --- 2021-12-08 David Howells pcmoore New
[XSERVER,2/2] selinux: log events with appropriate audit type [XSERVER,1/2] selinux: remap security classes on policyload - - - --- 2021-11-25 Christian Göttsche New
« 1 2 »