Show patches with: State = Action Required       |   149 patches
« 1 2 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[6/6] libsepol/cil: Resolve anonymous levels only once More secilc-fuzzer problems fixed - - - --- 2021-05-13 James Carter New
[5/6] libsepol/cil: Pointers to datums should be set to NULL when resetting More secilc-fuzzer problems fixed - - - --- 2021-05-13 James Carter New
[4/6] libsepol/cil: Resolve anonymous class permission sets only once More secilc-fuzzer problems fixed - - - --- 2021-05-13 James Carter New
[3/6] libsepol/cil: Limit the number of open parenthesis allowed More secilc-fuzzer problems fixed - - - --- 2021-05-13 James Carter New
[2/6] libsepol/cil: Destroy the permission nodes when exiting with an error More secilc-fuzzer problems fixed - - - --- 2021-05-13 James Carter New
[1/6] libsepol/cil: Handle disabled optional blocks in earlier passes More secilc-fuzzer problems fixed - - - --- 2021-05-13 James Carter New
[userspace,2/2] scripts/ci: use F34 image instead of F33 Bump testsuite CI image to F34 1 - - --- 2021-05-12 Ondrej Mosnacek New
[userspace,1/2] libselinux: fix invalid free in store_stem()/load_mmap() Bump testsuite CI image to F34 - - - --- 2021-05-12 Ondrej Mosnacek New
[5/5,v2] secilc/docs: Relocate and reword macro call name resolution order secilc/cil: Fix name resolution for macro calls - - - --- 2021-05-11 James Carter New
[4/5,v2] libsepol/cil: Do not resolve arguments to declarations in the call secilc/cil: Fix name resolution for macro calls - - - --- 2021-05-11 James Carter New
[3/5,v2] libsepo/cil: Refactor macro call resolution secilc/cil: Fix name resolution for macro calls - - - --- 2021-05-11 James Carter New
[2/5,v2] libsepol/cil: Do not add NULL node when inserting key into symtab secilc/cil: Fix name resolution for macro calls - - - --- 2021-05-11 James Carter New
[1/5,v2] libsepol/cil: Make name resolution in macros work as documented secilc/cil: Fix name resolution for macro calls - - - --- 2021-05-11 James Carter New
checkpolicy: fix the leak memory when uses xperms checkpolicy: fix the leak memory when uses xperms - - - --- 2021-05-10 liwugang New
[3/3] libselinux: do not use status page fallback mode internally libselinux: quirks of the status page - - - --- 2021-05-10 Christian Göttsche New
[2/3] libselinux: make selinux_status_open(3) reentrant libselinux: quirks of the status page - - - --- 2021-05-10 Christian Göttsche New
[1/3] libselinux: avc_destroy(3) closes status page libselinux: quirks of the status page - - - --- 2021-05-10 Christian Göttsche New
[3/3] secilc/docs: Relocate and reword macro call name resolution order [1/3] libsepol/cil: Make name resolution in macros work as documented - - - --- 2021-05-07 James Carter New
[2/3] libsepol/cil: Copy and resolve macro calls in one pass [1/3] libsepol/cil: Make name resolution in macros work as documented - - - --- 2021-05-07 James Carter New
[1/3] libsepol/cil: Make name resolution in macros work as documented [1/3] libsepol/cil: Make name resolution in macros work as documented - - - --- 2021-05-07 James Carter New
[2/2] secilc/docs: Document the order that inherited rules are resolved in [1/2] libsepol/cil: Fix name resolution involving inherited blocks - - - --- 2021-05-06 James Carter New
[1/2] libsepol/cil: Fix name resolution involving inherited blocks [1/2] libsepol/cil: Fix name resolution involving inherited blocks - - - --- 2021-05-06 James Carter New
[v2] libsepol/cil: Check for self-referential loops in sets [v2] libsepol/cil: Check for self-referential loops in sets - - - --- 2021-05-04 James Carter New
[25/25] libselinux: label_file.c: fix indent libselinux: misc compiler and static analyzer findings - - - --- 2021-05-03 Christian Göttsche New
[24/25] libselinux: regex: unify parameter names libselinux: misc compiler and static analyzer findings - - - --- 2021-05-03 Christian Göttsche New
[23/25] libselinux: sidtab_sid_stats(): unify parameter name libselinux: misc compiler and static analyzer findings - - - --- 2021-05-03 Christian Göttsche New
[22/25] libselinux: drop redundant casts to the same type libselinux: misc compiler and static analyzer findings - - - --- 2021-05-03 Christian Göttsche New
[21/25] libselinux: label_db::db_init(): open file with CLOEXEC mode libselinux: misc compiler and static analyzer findings - - - --- 2021-05-03 Christian Göttsche New
[20/25] libselinux: matchpathcon: free memory on realloc failure libselinux: misc compiler and static analyzer findings - - - --- 2021-05-03 Christian Göttsche New
[19/25] libselinux: label_file::init(): do not pass NULL to strdup libselinux: misc compiler and static analyzer findings - - - --- 2021-05-03 Christian Göttsche New
[18/25] libselinux: init_selinux_config(): free resources on error libselinux: misc compiler and static analyzer findings - - - --- 2021-05-03 Christian Göttsche New
[17/25] libselinux: matchmediacon(): close file on error libselinux: misc compiler and static analyzer findings - - - --- 2021-05-03 Christian Göttsche New
[16/25] libselinux: store_stem(): do not free possible non-heap object libselinux: misc compiler and static analyzer findings - - - --- 2021-05-03 Christian Göttsche New
[15/25] libselinux: getdefaultcon: free memory on multiple same arguments libselinux: misc compiler and static analyzer findings - - - --- 2021-05-03 Christian Göttsche New
[14/25] libselinux: setexecfilecon(): drop dead assignment libselinux: misc compiler and static analyzer findings - - - --- 2021-05-03 Christian Göttsche New
[13/25] libselinux: label_media::init(): drop dead assignment libselinux: misc compiler and static analyzer findings - - - --- 2021-05-03 Christian Göttsche New
[12/25] libselinux: label_x::init(): drop dead assignment libselinux: misc compiler and static analyzer findings - - - --- 2021-05-03 Christian Göttsche New
[11/25] libselinux: context_new(): drop dead assignment libselinux: misc compiler and static analyzer findings - - - --- 2021-05-03 Christian Göttsche New
[10/25] libselinux: exclude_non_seclabel_mounts(): drop unused variable libselinux: misc compiler and static analyzer findings - - - --- 2021-05-03 Christian Göttsche New
[09/25] libselinux: getconlist: free memory on multiple level arguments libselinux: misc compiler and static analyzer findings - - - --- 2021-05-03 Christian Göttsche New
[08/25] libselinux: selabel_get_digests_all_partial_matches: free memory after FTS_D block libselinux: misc compiler and static analyzer findings - - - --- 2021-05-03 Christian Göttsche New
[07/25] libselinux: selinux_restorecon: mark local variable static libselinux: misc compiler and static analyzer findings - - - --- 2021-05-03 Christian Göttsche New
[06/25] libselinux: avcstat: use standard length modifier for unsigned long long libselinux: misc compiler and static analyzer findings - - - --- 2021-05-03 Christian Göttsche New
[05/25] libselinux: sefcontext_compile: mark local variable static libselinux: misc compiler and static analyzer findings - - - --- 2021-05-03 Christian Göttsche New
[04/25] libselinux: Sha1Finalise(): do not discard const qualifier libselinux: misc compiler and static analyzer findings - - - --- 2021-05-03 Christian Göttsche New
[03/25] libselinux: label_common(): do not discard const qualifier libselinux: misc compiler and static analyzer findings - - - --- 2021-05-03 Christian Göttsche New
[02/25] libselinux: selinux_file_context_cmp(): do not discard const qualifier libselinux: misc compiler and static analyzer findings - - - --- 2021-05-03 Christian Göttsche New
[01/25] libselinux: sidtab_hash(): do not discard const qualifier libselinux: misc compiler and static analyzer findings - - - --- 2021-05-03 Christian Göttsche New
[5/5] libsepol/cil: Return an error if a call argument fails to resolve Fix bugs identified by the secilc-fuzzer - - - --- 2021-04-28 James Carter New
[4/5] libsepol/cil: Check for self-referential loops in sets Fix bugs identified by the secilc-fuzzer 1 - - --- 2021-04-28 James Carter New
[3/5] libsepol/cil: Check datum in ordered list for expected flavor Fix bugs identified by the secilc-fuzzer - - - --- 2021-04-28 James Carter New
[2/5] libsepol/cil: Detect degenerate inheritance and exit with an error Fix bugs identified by the secilc-fuzzer - - - --- 2021-04-28 James Carter New
[1/5] libsepol/cil: Fix instances where an error returns SEPOL_OK Fix bugs identified by the secilc-fuzzer - - - --- 2021-04-28 James Carter New
[3/3] libsepol/cil: Move check for the shadowing of macro parameters libsepol/cil: Allow permission expressions when using map classes - - - --- 2021-03-22 James Carter New
[2/3] libsepol/cil: Create function cil_add_decl_to_symtab() and refactor libsepol/cil: Allow permission expressions when using map classes - - - --- 2021-03-22 James Carter New
[1/3] libsepol/cil: Refactor helper function for cil_gen_node() [1/3] libsepol/cil: Refactor helper function for cil_gen_node() - - - --- 2021-03-22 James Carter New
libsepol/cil: Allow permission expressions when using map classes libsepol/cil: Allow permission expressions when using map classes - - - --- 2021-03-22 James Carter New
libsepol/cil: Allow permission expressions when using map classes libsepol/cil: Allow permission expressions when using map classes - - - --- 2021-03-22 James Carter New
[V2] libsepol/cil: Exit with an error if declaration name is a reserved word [V2] libsepol/cil: Exit with an error if declaration name is a reserved word - - - --- 2021-03-22 James Carter New
[v2] libsepol/cil: fix out-of-bound read of a file context pattern ending with "\" [v2] libsepol/cil: fix out-of-bound read of a file context pattern ending with "\" - - - --- 2021-03-18 Nicolas Iooss New
selinux: make use of variables when defining libdir and includedir selinux: make use of variables when defining libdir and includedir - - - --- 2020-07-16 W. Michael Petullo New
[v4,21/21] fuse: Allow user namespace mounts 1 - - --- 2016-04-26 Seth Forshee New
[v4,20/21] fuse: Restrict allow_other to the superblock's namespace or a descendant 2 - - --- 2016-04-26 Seth Forshee New
[v4,19/21] fuse: Support fuse filesystems outside of init_user_ns - - - --- 2016-04-26 Seth Forshee New
[v4,18/21] fuse: Add support for pid namespaces 1 - - --- 2016-04-26 Seth Forshee New
[v4,17/21] capabilities: Allow privileged user in s_user_ns to set security.* xattrs 2 - - --- 2016-04-26 Seth Forshee New
[v4,16/21] fs: Allow superblock owner to access do_remount_sb() 2 - - --- 2016-04-26 Seth Forshee New
[v4,15/21] fs: Don't remove suid for CAP_FSETID in s_user_ns 1 - - --- 2016-04-26 Seth Forshee New
[v4,14/21] fs: Allow superblock owner to change ownership of inodes with unmappable ids 1 - - --- 2016-04-26 Seth Forshee New
[v4,13/21] fs: Update posix_acl support to handle user namespace mounts 1 - - --- 2016-04-26 Seth Forshee New
[v4,12/21] fs: Refuse uid/gid changes which don't map into s_user_ns 1 - - --- 2016-04-26 Seth Forshee New
[v4,11/21] cred: Reject inodes with invalid ids in set_create_file_as() 1 - - --- 2016-04-26 Seth Forshee New
[v4,10/21] fs: Check for invalid i_uid in may_follow_link() 1 1 - --- 2016-04-26 Seth Forshee New
[v4,09/21] Smack: Handle labels consistently in untrusted mounts 1 - - --- 2016-04-26 Seth Forshee New
[v4,08/21] userns: Replace in_userns with current_in_userns 2 - - --- 2016-04-26 Seth Forshee New
[v4,07/21] selinux: Add support for unprivileged mounts from user namespaces 2 - - --- 2016-04-26 Seth Forshee New
[v4,06/21] fs: Treat foreign mounts as nosuid 2 - - --- 2016-04-26 Seth Forshee New
[v4,05/21] block_dev: Check permissions towards block device inode when mounting 1 - - --- 2016-04-26 Seth Forshee New
[v4,04/21] block_dev: Support checking inode permissions in lookup_bdev() 1 - - --- 2016-04-26 Seth Forshee New
[v4,03/21] fs: Allow sysfs and cgroupfs to share super blocks between user namespaces 1 - - --- 2016-04-26 Seth Forshee New
[v4,02/21] fs: Remove check of s_user_ns for existing mounts in fs_fully_visible() - - - --- 2016-04-26 Seth Forshee New
[v4,01/21] fs: fix a posible leak of allocated superblock 1 - - --- 2016-04-26 Seth Forshee New
[v4,19/21] fuse: Support fuse filesystems outside of init_user_ns - - - --- 2016-04-26 Seth Forshee New
[v4,18/21] fuse: Add support for pid namespaces 1 - - --- 2016-04-26 Seth Forshee New
[v4,16/21] fs: Allow superblock owner to access do_remount_sb() 2 - - --- 2016-04-26 Seth Forshee New
[v4,14/21] fs: Allow superblock owner to change ownership of inodes with unmappable ids 1 - - --- 2016-04-26 Seth Forshee New
[v4,13/21] fs: Update posix_acl support to handle user namespace mounts 1 - - --- 2016-04-26 Seth Forshee New
[v4,11/21] cred: Reject inodes with invalid ids in set_create_file_as() 1 - - --- 2016-04-26 Seth Forshee New
[v4,10/21] fs: Check for invalid i_uid in may_follow_link() 1 - - --- 2016-04-26 Seth Forshee New
[v4,08/21] userns: Replace in_userns with current_in_userns 2 - - --- 2016-04-26 Seth Forshee New
[v4,04/21] block_dev: Support checking inode permissions in lookup_bdev() 1 - - --- 2016-04-26 Seth Forshee New
[v4,02/21] fs: Remove check of s_user_ns for existing mounts in fs_fully_visible() - - - --- 2016-04-26 Seth Forshee New
[RFC,1/1] selinux-testsuite: Reduce sctp test runtime selinux-testsuite: Reduce sctp test runtime - - - --- 2020-11-04 Richard Haines omos Under Review
[V2,1/1] selinux-testsuite: Add btrfs support for filesystem tests selinux-testsuite: Add btrfs support for filesystem tests - - - --- 2020-11-03 Richard Haines omos Queued
[RFC,V2,2/2] selinux-testsuite: Run SCTP tests using remote server selinux-testsuite: Run tests using remote server - - - --- 2020-08-26 Richard Haines omos New
[RFC,V2,1/2] selinux-testsuite: Run tests using remote server selinux-testsuite: Run tests using remote server - - - --- 2020-08-26 Richard Haines omos New
[RFC,5/5] selinux-testsuite: add testing for unprivileged sandboxing capability [RFC,1/5] selinux-testsuite: add tests/sandbox/nodir_no_allow.cil - - - --- 2020-03-13 Stephen Smalley omos New
[RFC,4/5] selinux-testsuite: add tests/sandbox/rxdir_rx_allow.cil [RFC,1/5] selinux-testsuite: add tests/sandbox/nodir_no_allow.cil - - - --- 2020-03-13 Stephen Smalley omos New
[RFC,3/5] selinux-testsuite: add tests/sandbox/rxdir_no_allow.cil [RFC,1/5] selinux-testsuite: add tests/sandbox/nodir_no_allow.cil - - - --- 2020-03-13 Stephen Smalley omos New
[RFC,2/5] selinux-testsuite: add tests/sandbox/nodir_rx_allow.cil [RFC,1/5] selinux-testsuite: add tests/sandbox/nodir_no_allow.cil - - - --- 2020-03-13 Stephen Smalley omos New
« 1 2 »