Show patches with: State = Action Required       |   139 patches
« 1 2 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[01/13] libsepol: avoid implicit conversions checkpolicy improvements - - - --- 2021-09-14 Christian Göttsche New
[02/13] libsepol: free memory after policy validation checkpolicy improvements - - - --- 2021-09-14 Christian Göttsche New
[03/13] checkpolicy: enclose macro argument in parentheses checkpolicy improvements - - - --- 2021-09-14 Christian Göttsche New
[04/13] checkpolicy: misc checkmodule tweaks checkpolicy improvements - - - --- 2021-09-14 Christian Göttsche New
[05/13] checkpolicy: misc checkpolicy tweaks checkpolicy improvements - - - --- 2021-09-14 Christian Göttsche New
[06/13] checkpolicy: mark read-only parameters in module compiler const checkpolicy improvements - - - --- 2021-09-14 Christian Göttsche New
[07/13] checkpolicy: mark file local functions in policy_define static checkpolicy improvements - - - --- 2021-09-14 Christian Göttsche New
[08/13] checkpolicy: add missing function declarations checkpolicy improvements - - - --- 2021-09-14 Christian Göttsche New
[09/11] pragma once: convert scripts/selinux/genheaders/genheaders.c Untitled series #439529 - - - --- 2021-02-28 Alexey Dobriyan pcmoore New
[09/13] checkpolicy: resolve dismod memory leaks checkpolicy improvements - - - --- 2021-09-14 Christian Göttsche New
[1/2] ci: turn on CIFuzz [1/2] ci: turn on CIFuzz 1 - - --- 2021-07-10 Evgeny Vereshchagin New
[10/13] checkpolicy: avoid implicit conversion checkpolicy improvements - - - --- 2021-09-14 Christian Göttsche New
[11/13] checkpolicy: error out on parsing too big integers checkpolicy improvements - - - --- 2021-09-14 Christian Göttsche New
[12/13] checkpolicy: print warning on source line overflow checkpolicy improvements - - - --- 2021-09-14 Christian Göttsche New
[13/13] checkpolicy: free extended permission memory checkpolicy improvements - - - --- 2021-09-14 Christian Göttsche New
[2/1] man-pages: xattr.7: Update text for user extended xattr behavior change Relax restrictions on user.* xattr - - - --- 2021-09-02 Vivek Goyal pcmoore New
[2/2] README: add OSS-Fuzz/CIFuzz badges [1/2] ci: turn on CIFuzz - - - --- 2021-07-10 Evgeny Vereshchagin New
[GIT,PULL] SELinux fixes for v5.15 (#1) [GIT,PULL] SELinux fixes for v5.15 (#1) - - - --- 2021-09-17 Paul Moore New
[net-next,v4,01/15] mctp: Add MCTP base Add Management Component Transport Protocol support - - - --- 2021-07-29 Jeremy Kerr pcmoore New
[RESEND,v18,1/4] Add flags option to get xattr method paired to __vfs_getxattr overlayfs override_creds=off & nested get xattr fix 5 1 - --- 2020-10-21 Mark Salyzyn pcmoore New
[RESEND,v18,2/4] overlayfs: handle XATTR_NOSECURITY flag for get xattr method overlayfs override_creds=off & nested get xattr fix - - - --- 2020-10-21 Mark Salyzyn pcmoore New
[RESEND,v18,3/4] overlayfs: override_creds=off option bypass creator_cred overlayfs override_creds=off & nested get xattr fix - - - --- 2020-10-21 Mark Salyzyn pcmoore New
[RESEND,v18,4/4] overlayfs: inode_owner_or_capable called during execv Untitled series #368853 - - - --- 2020-10-22 Mark Salyzyn pcmoore New
[RESEND,v5] proc: Allow pid_revalidate() during LOOKUP_RCU [RESEND,v5] proc: Allow pid_revalidate() during LOOKUP_RCU - - - --- 2021-04-16 Stephen Brennan pcmoore New
[RESEND,v5] proc: Allow pid_revalidate() during LOOKUP_RCU [RESEND,v5] proc: Allow pid_revalidate() during LOOKUP_RCU - - - --- 2021-02-04 Stephen Brennan pcmoore New
[RFC,1/1] selinux-testsuite: Reduce sctp test runtime selinux-testsuite: Reduce sctp test runtime - - - --- 2020-11-04 Richard Haines omos Under Review
[RFC,1/5] selinux-testsuite: add tests/sandbox/nodir_no_allow.cil [RFC,1/5] selinux-testsuite: add tests/sandbox/nodir_no_allow.cil - - - --- 2020-03-13 Stephen Smalley omos New
[RFC,1/9] sk_buff: track nfct status in newly added skb->_state [RFC,1/9] sk_buff: track nfct status in newly added skb->_state - - - --- 2021-07-21 Paolo Abeni pcmoore New
[RFC,2/5] selinux-testsuite: add tests/sandbox/nodir_rx_allow.cil [RFC,1/5] selinux-testsuite: add tests/sandbox/nodir_no_allow.cil - - - --- 2020-03-13 Stephen Smalley omos New
[RFC,2/9] sk_buff: track dst status in skb->_state [RFC,1/9] sk_buff: track nfct status in newly added skb->_state - - - --- 2021-07-21 Paolo Abeni pcmoore New
[RFC,3/5] selinux-testsuite: add tests/sandbox/rxdir_no_allow.cil [RFC,1/5] selinux-testsuite: add tests/sandbox/nodir_no_allow.cil - - - --- 2020-03-13 Stephen Smalley omos New
[RFC,3/9] sk_buff: move the active_extensions into the state bitfield [RFC,1/9] sk_buff: track nfct status in newly added skb->_state - - - --- 2021-07-21 Paolo Abeni pcmoore New
[RFC,4/5] selinux-testsuite: add tests/sandbox/rxdir_rx_allow.cil [RFC,1/5] selinux-testsuite: add tests/sandbox/nodir_no_allow.cil - - - --- 2020-03-13 Stephen Smalley omos New
[RFC,4/9] net: optimize GRO for the common case. [RFC,1/9] sk_buff: track nfct status in newly added skb->_state - - - --- 2021-07-21 Paolo Abeni pcmoore New
[RFC,5/5] selinux-testsuite: add testing for unprivileged sandboxing capability [RFC,1/5] selinux-testsuite: add tests/sandbox/nodir_no_allow.cil - - - --- 2020-03-13 Stephen Smalley omos New
[RFC,5/9] skbuff: introduce has_sk state bit. [RFC,1/9] sk_buff: track nfct status in newly added skb->_state - - - --- 2021-07-21 Paolo Abeni pcmoore New
[RFC,6/9] veth: use skb_prepare_for_gro() [RFC,1/9] sk_buff: track nfct status in newly added skb->_state - - - --- 2021-07-21 Paolo Abeni pcmoore New
[RFC,7/9] sk_buff: move inner header fields after tail [RFC,1/9] sk_buff: track nfct status in newly added skb->_state - - - --- 2021-07-21 Paolo Abeni pcmoore New
[RFC,8/9] sk_buff: move vlan field after tail. [RFC,1/9] sk_buff: track nfct status in newly added skb->_state - - - --- 2021-07-21 Paolo Abeni pcmoore New
[RFC,9/9] sk_buff: access secmark via getter/setter [RFC,1/9] sk_buff: track nfct status in newly added skb->_state - - - --- 2021-07-21 Paolo Abeni pcmoore New
[RFC,V2,1/2] selinux-testsuite: Run tests using remote server selinux-testsuite: Run tests using remote server - - - --- 2020-08-26 Richard Haines omos New
[RFC,V2,2/2] selinux-testsuite: Run SCTP tests using remote server selinux-testsuite: Run tests using remote server - - - --- 2020-08-26 Richard Haines omos New
[RFC,v3] security,capability: pass object information to security_capable [RFC,v3] security,capability: pass object information to security_capable - - - --- 2019-08-15 Aaron Goidel pcmoore New
[RFC] audit, security: allow LSMs to selectively enable audit collection [RFC] audit, security: allow LSMs to selectively enable audit collection - - - --- 2019-08-15 Aaron Goidel pcmoore New
[RFC] libsepol,secilc,policycoreutils: add unprivileged sandboxing capability [RFC] libsepol,secilc,policycoreutils: add unprivileged sandboxing capability - - - --- 2020-03-13 Stephen Smalley pcmoore New
[RFC] selinux: add unprivileged sandboxing capability [RFC] selinux: add unprivileged sandboxing capability - - - --- 2020-03-13 Stephen Smalley pcmoore New
[RFC] userfaultfd: open userfaultfds with O_RDONLY [RFC] userfaultfd: open userfaultfds with O_RDONLY - - - --- 2021-06-24 Ondrej Mosnacek pcmoore New
[setools] __init__.py: Make NetworkX dep optional [setools] __init__.py: Make NetworkX dep optional - - - --- 2021-09-19 Jason Zaman New
[SYSTEMD,1/7] selinux: add function name to audit data Re-add SELinux checks for unit install operations - - - --- 2021-08-05 Christian Göttsche New
[SYSTEMD,2/7] selinux: improve debug log format Re-add SELinux checks for unit install operations - - - --- 2021-08-05 Christian Göttsche New
[SYSTEMD,3/7] selinux: mark _mac_selinux_generic_access_check with leading underscore Re-add SELinux checks for unit install operations - - - --- 2021-08-05 Christian Göttsche New
[SYSTEMD,4/7] core: add support for MAC checks on unit install operations Re-add SELinux checks for unit install operations - - - --- 2021-08-05 Christian Göttsche New
[SYSTEMD,5/7] core: implement the sd-bus generic callback for SELinux Re-add SELinux checks for unit install operations - - - --- 2021-08-05 Christian Göttsche New
[SYSTEMD,6/7] core: avoid bypasses in D-BUS SELinux filter Re-add SELinux checks for unit install operations - - - --- 2021-08-05 Christian Göttsche New
[SYSTEMD,7/7] core: tweak job_type_to_access_method SELinux permissions Re-add SELinux checks for unit install operations - - - --- 2021-08-05 Christian Göttsche New
[v2,02/13] libsepol: free memory after policy validation Untitled series #547293 - - - --- 2021-09-15 Christian Göttsche New
[v2,09/13] checkpolicy: resolve dismod memory leaks Untitled series #547293 - - - --- 2021-09-15 Christian Göttsche New
[V2,1/1] selinux-testsuite: Add btrfs support for filesystem tests selinux-testsuite: Add btrfs support for filesystem tests - - - --- 2020-11-03 Richard Haines omos Queued
[v2,1/2] vfs,LSM: introduce the FS_HANDLES_LSM_OPTS flag vfs/security/NFS/btrfs: clean up and fix LSM option handling - - 1 --- 2021-05-17 Ondrej Mosnacek pcmoore New
[v2,11/13] checkpolicy: error out on parsing too big integers Untitled series #547293 - - - --- 2021-09-15 Christian Göttsche New
[v2,2/2] selinux: fix SECURITY_LSM_NATIVE_LABELS flag handling on double mount vfs/security/NFS/btrfs: clean up and fix LSM option handling - - - --- 2021-05-17 Ondrej Mosnacek pcmoore New
[v2] checkpolicy: fix the leak memory when uses xperms [v2] checkpolicy: fix the leak memory when uses xperms - - 1 --- 2021-06-01 liwugang New
[v2] libselinux/utils: drop requirement to combine compiling and linking [v2] libselinux/utils: drop requirement to combine compiling and linking - - - --- 2021-09-14 Christian Göttsche New
[v2] libsepol/cil: move the fuzz target and build script to the selinux repository [v2] libsepol/cil: move the fuzz target and build script to the selinux repository 1 - - --- 2021-07-15 Evgeny Vereshchagin New
[v28,01/25] LSM: Infrastructure management of the sock security [v28,01/25] LSM: Infrastructure management of the sock security 2 2 - --- 2021-07-22 Casey Schaufler pcmoore New
[v28,01/25] LSM: Infrastructure management of the sock security [v28,01/25] LSM: Infrastructure management of the sock security 2 2 - --- 2021-07-22 Casey Schaufler New
[v28,02/25] LSM: Add the lsmblob data structure. [v28,01/25] LSM: Infrastructure management of the sock security 3 - - --- 2021-07-22 Casey Schaufler pcmoore New
[v28,03/25] LSM: provide lsm name and id slot mappings [v28,01/25] LSM: Infrastructure management of the sock security 1 1 - --- 2021-07-22 Casey Schaufler pcmoore New
[v28,04/25] IMA: avoid label collisions with stacked LSMs [v28,01/25] LSM: Infrastructure management of the sock security - 1 - --- 2021-07-22 Casey Schaufler pcmoore New
[v28,05/25] LSM: Use lsmblob in security_audit_rule_match [v28,01/25] LSM: Infrastructure management of the sock security 2 2 - --- 2021-07-22 Casey Schaufler pcmoore New
[v28,06/25] LSM: Use lsmblob in security_kernel_act_as [v28,01/25] LSM: Infrastructure management of the sock security 2 2 - --- 2021-07-22 Casey Schaufler pcmoore New
[v28,07/25] LSM: Use lsmblob in security_secctx_to_secid [v28,01/25] LSM: Infrastructure management of the sock security 1 1 - --- 2021-07-22 Casey Schaufler pcmoore New
[v28,08/25] LSM: Use lsmblob in security_secid_to_secctx [v28,01/25] LSM: Infrastructure management of the sock security 1 1 - --- 2021-07-22 Casey Schaufler pcmoore New
[v28,09/25] LSM: Use lsmblob in security_ipc_getsecid [v28,01/25] LSM: Infrastructure management of the sock security 2 2 - --- 2021-07-22 Casey Schaufler pcmoore New
[v28,10/25] LSM: Use lsmblob in security_task_getsecid [v28,01/25] LSM: Infrastructure management of the sock security 2 2 - --- 2021-07-22 Casey Schaufler pcmoore New
[v28,11/25] LSM: Use lsmblob in security_inode_getsecid [v28,01/25] LSM: Infrastructure management of the sock security 2 2 - --- 2021-07-22 Casey Schaufler pcmoore New
[v28,12/25] LSM: Use lsmblob in security_cred_getsecid [v28,01/25] LSM: Infrastructure management of the sock security 2 2 - --- 2021-07-22 Casey Schaufler pcmoore New
[v28,13/25] IMA: Change internal interfaces to use lsmblobs [v28,01/25] LSM: Infrastructure management of the sock security 1 2 - --- 2021-07-22 Casey Schaufler pcmoore New
[v28,14/25] LSM: Specify which LSM to display [v28,01/25] LSM: Infrastructure management of the sock security - - - --- 2021-07-22 Casey Schaufler pcmoore New
[v28,15/25] LSM: Ensure the correct LSM context releaser [v28,01/25] LSM: Infrastructure management of the sock security 3 2 - --- 2021-07-22 Casey Schaufler pcmoore New
[v28,16/25] LSM: Use lsmcontext in security_secid_to_secctx [v28,01/25] LSM: Infrastructure management of the sock security 2 1 - --- 2021-07-22 Casey Schaufler pcmoore New
[v28,17/25] LSM: Use lsmcontext in security_inode_getsecctx [v28,01/25] LSM: Infrastructure management of the sock security 3 2 - --- 2021-07-22 Casey Schaufler pcmoore New
[v28,18/25] LSM: security_secid_to_secctx in netlink netfilter [v28,01/25] LSM: Infrastructure management of the sock security 3 2 - --- 2021-07-22 Casey Schaufler pcmoore New
[v28,19/25] NET: Store LSM netlabel data in a lsmblob [v28,01/25] LSM: Infrastructure management of the sock security 2 2 - --- 2021-07-22 Casey Schaufler pcmoore New
[v28,20/25] LSM: Verify LSM display sanity in binder [v28,01/25] LSM: Infrastructure management of the sock security 2 2 - --- 2021-07-22 Casey Schaufler pcmoore New
[v28,21/25] audit: support non-syscall auxiliary records [v28,01/25] LSM: Infrastructure management of the sock security 1 - - --- 2021-07-22 Casey Schaufler pcmoore New
[v28,22/25] Audit: Add record for multiple process LSM attributes [v28,01/25] LSM: Infrastructure management of the sock security - - - --- 2021-07-22 Casey Schaufler pcmoore New
[v28,23/25] Audit: Add record for multiple object LSM attributes [v28,01/25] LSM: Infrastructure management of the sock security - - - --- 2021-07-22 Casey Schaufler pcmoore New
[v28,24/25] LSM: Add /proc attr entry for full LSM context [v28,01/25] LSM: Infrastructure management of the sock security - 1 - --- 2021-07-22 Casey Schaufler pcmoore New
[v28,25/25] AppArmor: Remove the exclusive flag [v28,01/25] LSM: Infrastructure management of the sock security 2 1 - --- 2021-07-22 Casey Schaufler pcmoore New
[v3,02/13] libsepol: free memory after policy validation Untitled series #547317 - - - --- 2021-09-15 Christian Göttsche New
[v3,1/1] xattr: Allow user.* xattr on symlink and special files Relax restrictions on user.* xattr - - - --- 2021-09-02 Vivek Goyal pcmoore New
[v4,01/21] fs: fix a posible leak of allocated superblock 1 - - --- 2016-04-26 Seth Forshee New
[v4,02/21] fs: Remove check of s_user_ns for existing mounts in fs_fully_visible() - - - --- 2016-04-26 Seth Forshee New
[v4,02/21] fs: Remove check of s_user_ns for existing mounts in fs_fully_visible() - - - --- 2016-04-26 Seth Forshee New
[v4,03/21] fs: Allow sysfs and cgroupfs to share super blocks between user namespaces 1 - - --- 2016-04-26 Seth Forshee New
[v4,04/21] block_dev: Support checking inode permissions in lookup_bdev() 1 - - --- 2016-04-26 Seth Forshee New
[v4,04/21] block_dev: Support checking inode permissions in lookup_bdev() 1 - - --- 2016-04-26 Seth Forshee New
[v4,05/21] block_dev: Check permissions towards block device inode when mounting 1 - - --- 2016-04-26 Seth Forshee New
[v4,06/21] fs: Treat foreign mounts as nosuid 2 - - --- 2016-04-26 Seth Forshee New
« 1 2 »