Show patches with: none      |   9511 patches
« 1 2 3 4 … 95 96 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[v2] selinux: match extended permissions to their base permissions [v2] selinux: match extended permissions to their base permissions - - - --- 2024-12-20 Thiébaud Weksteen New
[1/2] lsm: add LSM hooks for io_uring_setup() [1/2] lsm: add LSM hooks for io_uring_setup() - - - --- 2024-12-19 Hamza Mahfooz New
lsm,io_uring: add LSM hooks for io_uring_setup() lsm,io_uring: add LSM hooks for io_uring_setup() - - - --- 2024-12-19 Hamza Mahfooz New
[GIT,PULL] selinux/selinux-pr-20241217 [GIT,PULL] selinux/selinux-pr-20241217 - - - --- 2024-12-18 Paul Moore New
[6/6] Audit: Add record for multiple object contexts [1/6] Audit: Create audit_stamp structure - - - --- 2024-12-17 Casey Schaufler New
[5/6] Audit: multiple subject lsm values for netlabel [1/6] Audit: Create audit_stamp structure - - - --- 2024-12-17 Casey Schaufler New
[4/6] Audit: Add record for multiple task security contexts [1/6] Audit: Create audit_stamp structure - - - --- 2024-12-17 Casey Schaufler New
[3/6] LSM: security_lsmblob_to_secctx module selection [1/6] Audit: Create audit_stamp structure - - - --- 2024-12-17 Casey Schaufler New
[2/6] Audit: Allow multiple records in an audit_buffer [1/6] Audit: Create audit_stamp structure - - - --- 2024-12-17 Casey Schaufler New
[1/6] Audit: Create audit_stamp structure [1/6] Audit: Create audit_stamp structure - - - --- 2024-12-17 Casey Schaufler New
libselinux/fuzz: readjust load_mmap() update libselinux/fuzz: readjust load_mmap() update - - - --- 2024-12-17 Christian Göttsche New
[RFC,1/3] libsepol: update sort order for netifcon definitions [RFC,1/3] libsepol: update sort order for netifcon definitions - - - --- 2024-12-17 Christian Göttsche New
[RFC,3/3] secilc/test: add test for wildcard netifcon statement [RFC,1/3] libsepol: update sort order for netifcon definitions - - - --- 2024-12-17 Christian Göttsche New
[RFC,2/3] checkpolicy: add support for wildcard netifcon names [RFC,1/3] libsepol: update sort order for netifcon definitions - - - --- 2024-12-17 Christian Göttsche New
[RFC] selinux: support wildcard network interface names [RFC] selinux: support wildcard network interface names - - - --- 2024-12-17 Christian Göttsche New
[RFC,v2,22/22] selinux: restrict policy strings [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche New
[RFC,v2,21/22] selinux: check for simple types [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche New
[RFC,v2,20/22] selinux: more strict bounds check [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche New
[RFC,v2,19/22] selinux: validate symbols [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche New
[RFC,v2,18/22] selinux: beef up isvalid checks [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche New
[RFC,v2,17/22] selinux: reorder policydb_index() [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche New
[RFC,v2,16/22] selinux: check type attr map overflows [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche New
[RFC,v2,15/22] selinux: introduce ebitmap_highest_set_bit() [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche New
[RFC,v2,14/22] selinux: pre-validate conditional expressions [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche New
[RFC,v2,13/22] selinux: validate constraints [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche New
[RFC,v2,12/22] selinux: check length fields in policies [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche New
[RFC,v2,11/22] selinux: more strict policy parsing [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche New
[RFC,v2,10/22] selinux: use u16 for security classes [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche New
[RFC,v2,09/22] selinux: make use of str_read() [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche New
[RFC,v2,08/22] selinux: avoid unnecessary indirection in struct level_datum [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche New
[RFC,v2,07/22] selinux: use known type instead of void pointer [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche New
[RFC,v2,06/22] selinux: rename comparison functions for clarity [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche New
[RFC,v2,05/22] selinux: avoid nontransitive comparison [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche New
[RFC,v2,04/22] selinux: rework match_ipv6_addrmask() [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche New
[RFC,v2,03/22] selinux: align and constify functions [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche New
[RFC,v2,02/22] selinux: avoid using types indicating user space interaction [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche New
[RFC,v2,01/22] selinux: supply missing field initializers [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche New
[RFC,v2] libselinux: restore previous regex spec ordering [RFC,v2] libselinux: restore previous regex spec ordering 1 - - --- 2024-12-12 Christian Göttsche bachradsusi Accepted
libsemanage: Mute error messages from selinux_restorecon libsemanage: Mute error messages from selinux_restorecon 1 - - --- 2024-12-12 Vit Mojzis bachradsusi Accepted
selinux: Read sk->sk_family once in selinux_socket_bind() selinux: Read sk->sk_family once in selinux_socket_bind() - - - --- 2024-12-12 Mikhail Ivanov pcmoore Under Review
[RFC] libselinux: restore previous regex spec ordering [RFC] libselinux: restore previous regex spec ordering - - - --- 2024-12-11 Christian Göttsche bachradsusi Superseded
[9/9] Revert "libselinux: rework selabel_file(5) database" [1/9] Revert "libselinux/utils: drop reachable assert in sefcontext_compile" - - - --- 2024-12-11 James Carter bachradsusi Rejected
[8/9] Revert "libselinux: add selabel_file(5) fuzzer" [1/9] Revert "libselinux/utils: drop reachable assert in sefcontext_compile" - - - --- 2024-12-11 James Carter bachradsusi Rejected
[7/9] Revert "libselinux: support parallel selabel_lookup(3)" [1/9] Revert "libselinux/utils: drop reachable assert in sefcontext_compile" - - - --- 2024-12-11 James Carter bachradsusi Rejected
[6/9] Revert "libselinux: move functions out of header file" [1/9] Revert "libselinux/utils: drop reachable assert in sefcontext_compile" - - - --- 2024-12-11 James Carter bachradsusi Rejected
[5/9] Revert "libselinux: avoid memory allocation in common file label lookup" [1/9] Revert "libselinux/utils: drop reachable assert in sefcontext_compile" - - - --- 2024-12-11 James Carter bachradsusi Rejected
[4/9] Revert "libselinux: use vector instead of linked list for substitutions" [1/9] Revert "libselinux/utils: drop reachable assert in sefcontext_compile" - - - --- 2024-12-11 James Carter bachradsusi Rejected
[3/9] Revert "libselinux: simplify string formatting" [1/9] Revert "libselinux/utils: drop reachable assert in sefcontext_compile" - - - --- 2024-12-11 James Carter bachradsusi Rejected
[2/9] Revert "libselinux/utils: use correct error handling" [1/9] Revert "libselinux/utils: drop reachable assert in sefcontext_compile" - - - --- 2024-12-11 James Carter bachradsusi Rejected
[1/9] Revert "libselinux/utils: drop reachable assert in sefcontext_compile" [1/9] Revert "libselinux/utils: drop reachable assert in sefcontext_compile" - - - --- 2024-12-11 James Carter bachradsusi Rejected
selinux: support wildcard match in genfscon selinux: support wildcard match in genfscon - - - --- 2024-12-10 Takaya Saeki pcmoore Under Review
selinux: KASAN; slab-out-of-bounds in avc_lookup selinux: KASAN; slab-out-of-bounds in avc_lookup - - - --- 2024-12-10 Joey Jiao pcmoore Under Review
libselinux/fuzz: update for lookup_all() change libselinux/fuzz: update for lookup_all() change 1 - - --- 2024-12-05 Christian Göttsche bachradsusi Accepted
[RFC] genfscon wildcard support for faster sysfs labeling [RFC] genfscon wildcard support for faster sysfs labeling - - - --- 2024-12-05 Takaya Saeki pcmoore Superseded
selinux: match extended permissions to their base permissions selinux: match extended permissions to their base permissions - - - --- 2024-12-05 Thiébaud Weksteen pcmoore Under Review
[v2] selinux: add netlink nlmsg_type audit message [v2] selinux: add netlink nlmsg_type audit message - - - --- 2024-12-05 Thiébaud Weksteen pcmoore Accepted
[v2] selinux: ignore unknown extended permissions [v2] selinux: ignore unknown extended permissions - - - --- 2024-12-05 Thiébaud Weksteen pcmoore Accepted
libsepol: add missing word separators in error message libsepol: add missing word separators in error message 1 - - --- 2024-12-04 Christian Göttsche bachradsusi Accepted
selinux: ignore unknown extended permissions selinux: ignore unknown extended permissions - - - --- 2024-12-03 Thiébaud Weksteen pcmoore Changes Requested
[v2] libselinux/utils: drop reachable assert in sefcontext_compile [v2] libselinux/utils: drop reachable assert in sefcontext_compile 1 - 1 --- 2024-12-03 Christian Göttsche bachradsusi Accepted
libselinux/utils: drop reachable assert in sefcontext_compile libselinux/utils: drop reachable assert in sefcontext_compile - - - --- 2024-12-03 Christian Göttsche Superseded
[RFC] Introduce POLICYDB_VERSION_KERNEL_MAX [RFC] Introduce POLICYDB_VERSION_KERNEL_MAX - - - --- 2024-12-02 Christian Göttsche Rejected
checkpolicy: drop host bits in IPv6 CIDR address checkpolicy: drop host bits in IPv6 CIDR address 1 - - --- 2024-12-02 Christian Göttsche bachradsusi Accepted
Always build for LFS mode on 32-bit archs. Always build for LFS mode on 32-bit archs. 1 - - --- 2024-11-28 Christian Göttsche bachradsusi Accepted
libsepol: avoid unnecessary memset(3) calls in hashtab libsepol: avoid unnecessary memset(3) calls in hashtab 1 - - --- 2024-11-28 Christian Göttsche bachradsusi Accepted
libselinux/utils: use correct error handling libselinux/utils: use correct error handling 1 - - --- 2024-11-28 Christian Göttsche bachradsusi Accepted
[RFC] ioctl: add test for conditional xperms [RFC] ioctl: add test for conditional xperms 1 - 1 --- 2024-11-28 Christian Göttsche omos Under Review
[v2] selinux: add generated av_permissions.h to targets [v2] selinux: add generated av_permissions.h to targets - 1 - --- 2024-11-27 Thomas Weißschuh pcmoore Accepted
[net] selinux: use sk_to_full_sk() in selinux_ip_output() [net] selinux: use sk_to_full_sk() in selinux_ip_output() 1 1 - --- 2024-11-26 Eric Dumazet pcmoore Handled Elsewhere
[v3,3/3] libselinux: simplify string formatting [v3,1/3] libselinux: avoid memory allocation in common file label lookup - - - --- 2024-11-26 Christian Göttsche bachradsusi Accepted
[v3,2/3] libselinux: use vector instead of linked list for substitutions [v3,1/3] libselinux: avoid memory allocation in common file label lookup - - - --- 2024-11-26 Christian Göttsche bachradsusi Accepted
[v3,1/3] libselinux: avoid memory allocation in common file label lookup [v3,1/3] libselinux: avoid memory allocation in common file label lookup 1 - - --- 2024-11-26 Christian Göttsche bachradsusi Accepted
[v2] bpf, lsm: Remove getlsmprop hooks BTF IDs [v2] bpf, lsm: Remove getlsmprop hooks BTF IDs - - - --- 2024-11-25 Thomas Weißschuh pcmoore Handled Elsewhere
[v2,3/3] libselinux: simplify string formatting [v2,1/3] libselinux: avoid memory allocation in common file label lookup - - - --- 2024-11-25 Christian Göttsche bachradsusi Superseded
[v2,2/3] libselinux: use vector instead of linked list for substitutions [v2,1/3] libselinux: avoid memory allocation in common file label lookup - - - --- 2024-11-25 Christian Göttsche bachradsusi Superseded
[v2,1/3] libselinux: avoid memory allocation in common file label lookup [v2,1/3] libselinux: avoid memory allocation in common file label lookup - - - --- 2024-11-25 Christian Göttsche bachradsusi Superseded
[v2,9/9] libsemanage: respect shell paths with /usr prefix [v2,1/9] libsemanage: set O_CLOEXEC flag for file descriptors 1 - - --- 2024-11-25 Christian Göttsche bachradsusi Accepted
[v2,8/9] libsemanage/man: add documentation for command overrides [v2,1/9] libsemanage: set O_CLOEXEC flag for file descriptors - - - --- 2024-11-25 Christian Göttsche bachradsusi Accepted
[v2,7/9] libsemanage: optimize policy by default [v2,1/9] libsemanage: set O_CLOEXEC flag for file descriptors - - - --- 2024-11-25 Christian Göttsche bachradsusi Accepted
[v2,6/9] libsemanage: simplify file deletion [v2,1/9] libsemanage: set O_CLOEXEC flag for file descriptors - - - --- 2024-11-25 Christian Göttsche bachradsusi Accepted
[v2,5/9] libsemanage: check closing written files [v2,1/9] libsemanage: set O_CLOEXEC flag for file descriptors - - - --- 2024-11-25 Christian Göttsche bachradsusi Accepted
[v2,4/9] libsemanage: drop duplicate newlines and error descriptions in error messages [v2,1/9] libsemanage: set O_CLOEXEC flag for file descriptors - - - --- 2024-11-25 Christian Göttsche bachradsusi Accepted
[v2,3/9] libsemanage: handle shell allocation failure [v2,1/9] libsemanage: set O_CLOEXEC flag for file descriptors - - - --- 2024-11-25 Christian Göttsche bachradsusi Accepted
[v2,2/9] libsemanage: handle cil_set_handle_unknown() failure [v2,1/9] libsemanage: set O_CLOEXEC flag for file descriptors - - - --- 2024-11-25 Christian Göttsche bachradsusi Accepted
[v2,1/9] libsemanage: set O_CLOEXEC flag for file descriptors [v2,1/9] libsemanage: set O_CLOEXEC flag for file descriptors - - - --- 2024-11-25 Christian Göttsche bachradsusi Accepted
selinux: use native iterator types selinux: use native iterator types - - - --- 2024-11-25 Christian Göttsche pcmoore Accepted
bpf, lsm: Fix getlsmprop hooks BTF IDs bpf, lsm: Fix getlsmprop hooks BTF IDs 1 - - --- 2024-11-23 Thomas Weißschuh pcmoore Handled Elsewhere
[2/2] selinux: use vector instead of linked list for substitutions [1/2] libselinux: avoid memory allocation in common file label lookup - - - --- 2024-11-22 Christian Göttsche bachradsusi Superseded
[1/2] libselinux: avoid memory allocation in common file label lookup [1/2] libselinux: avoid memory allocation in common file label lookup - - - --- 2024-11-22 Christian Göttsche bachradsusi Superseded
[2/2] libselinux: harden availability check against user CFLAGS [1/2] libsepol: harden availability check against user CFLAGS - - - --- 2024-11-20 Christian Göttsche bachradsusi Accepted
[1/2] libsepol: harden availability check against user CFLAGS [1/2] libsepol: harden availability check against user CFLAGS 1 - - --- 2024-11-20 Christian Göttsche bachradsusi Accepted
[v3,2/3] libselinux: avoid dynamic allocation in openattr() Untitled series #911259 - - - --- 2024-11-20 Christian Göttsche bachradsusi Accepted
[v2,3/3] libselinux: move functions out of header file [v2,1/3] libselinux: make use of calloc(3) - - - --- 2024-11-20 Christian Göttsche bachradsusi Accepted
[v2,2/3] libselinux: avoid dynamic allocation in openattr() [v2,1/3] libselinux: make use of calloc(3) - - - --- 2024-11-20 Christian Göttsche bachradsusi Accepted
[v2,1/3] libselinux: make use of calloc(3) [v2,1/3] libselinux: make use of calloc(3) 1 - - --- 2024-11-20 Christian Göttsche bachradsusi Accepted
selinux: explicitly clean generated av_permissions.h selinux: explicitly clean generated av_permissions.h - - - --- 2024-11-20 Thomas Weißschuh pcmoore Changes Requested
[17/17] tests: drop headers from Makefile dependencies [01/17] Fix typos - - - --- 2024-11-18 Christian Göttsche omos New
[16/17] tests: fail on compiler warnings and enable Wextra [01/17] Fix typos - - - --- 2024-11-18 Christian Göttsche omos New
[15/17] tests: test code tweaks [01/17] Fix typos - - - --- 2024-11-18 Christian Göttsche omos New
[14/17] defconfig: enable CONFIG_NETFILTER_NETLINK_LOG [01/17] Fix typos - - - --- 2024-11-18 Christian Göttsche omos New
« 1 2 3 4 … 95 96 »