Show patches with: Archived = No       |   9222 patches
« 1 2 ... 18 19 2092 93 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[=v2] docs: update the README.md with a basic SELinux description [=v2] docs: update the README.md with a basic SELinux description - - - --- 2022-10-01 Paul Moore Superseded
docs: update the README.md with a basic SELinux description docs: update the README.md with a basic SELinux description - - - --- 2022-09-30 Paul Moore Changes Requested
[v4,10/30] selinux: implement get, set and remove acl hook Untitled series #681974 1 - - --- 2022-09-29 Christian Brauner pcmoore Handled Elsewhere
[v3,10/29] selinux: implement get, set and remove acl hook Untitled series #681546 - - - --- 2022-09-28 Christian Brauner pcmoore Superseded
[v38,39/39] LSM: Create lsm_module_list system call [v38,01/39] LSM: Identify modules by more than name - - - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,38/39] AppArmor: Remove the exclusive flag [v38,01/39] LSM: Identify modules by more than name 2 1 - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,37/39] LSM: Removed scaffolding function lsmcontext_init [v38,01/39] LSM: Identify modules by more than name - - - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,36/39] netlabel: Use a struct lsmblob in audit data [v38,01/39] LSM: Identify modules by more than name 1 - - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,35/39] Audit: Add record for multiple object contexts [v38,01/39] LSM: Identify modules by more than name 1 - - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,34/39] audit: multiple subject lsm values for netlabel [v38,01/39] LSM: Identify modules by more than name 1 - - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,33/39] Audit: Add record for multiple task security contexts [v38,01/39] LSM: Identify modules by more than name 1 - - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,32/39] Audit: Allow multiple records in an audit_buffer [v38,01/39] LSM: Identify modules by more than name - - - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,31/39] LSM: Add a function to report multiple LSMs [v38,01/39] LSM: Identify modules by more than name 1 1 - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,30/39] Audit: Create audit_stamp structure [v38,01/39] LSM: Identify modules by more than name 1 - - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,29/39] Audit: Keep multiple LSM data in audit_names [v38,01/39] LSM: Identify modules by more than name 1 - - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,28/39] LSM: security_secid_to_secctx module selection [v38,01/39] LSM: Identify modules by more than name - - - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,27/39] binder: Pass LSM identifier for confirmation [v38,01/39] LSM: Identify modules by more than name - - - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,26/39] NET: Store LSM netlabel data in a lsmblob [v38,01/39] LSM: Identify modules by more than name 2 2 - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,25/39] LSM: security_secid_to_secctx in netlink netfilter [v38,01/39] LSM: Identify modules by more than name 3 2 - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,24/39] Use lsmcontext in security_dentry_init_security [v38,01/39] LSM: Identify modules by more than name - - - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,23/39] LSM: Use lsmcontext in security_inode_getsecctx [v38,01/39] LSM: Identify modules by more than name 3 2 - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,22/39] LSM: Use lsmcontext in security_secid_to_secctx [v38,01/39] LSM: Identify modules by more than name - - - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,21/39] LSM: Ensure the correct LSM context releaser [v38,01/39] LSM: Identify modules by more than name 3 2 - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,20/39] LSM: Specify which LSM to display [v38,01/39] LSM: Identify modules by more than name - - - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,19/39] LSM: Use lsmblob in security_cred_getsecid [v38,01/39] LSM: Identify modules by more than name 2 2 - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,18/39] LSM: Use lsmblob in security_inode_getsecid [v38,01/39] LSM: Identify modules by more than name 2 2 - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,17/39] LSM: Use lsmblob in security_current_getsecid [v38,01/39] LSM: Identify modules by more than name 2 2 - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,16/39] LSM: Use lsmblob in security_ipc_getsecid [v38,01/39] LSM: Identify modules by more than name 2 2 - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,15/39] LSM: Use lsmblob in security_secid_to_secctx [v38,01/39] LSM: Identify modules by more than name 1 1 - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,14/39] LSM: Use lsmblob in security_secctx_to_secid [v38,01/39] LSM: Identify modules by more than name 1 1 - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,13/39] LSM: Use lsmblob in security_kernel_act_as [v38,01/39] LSM: Identify modules by more than name 2 2 - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,12/39] LSM: Use lsmblob in security_audit_rule_match [v38,01/39] LSM: Identify modules by more than name 1 1 - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,11/39] IMA: avoid label collisions with stacked LSMs [v38,01/39] LSM: Identify modules by more than name - - - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,10/39] LSM: provide lsm name and id slot mappings [v38,01/39] LSM: Identify modules by more than name 1 1 - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,09/39] LSM: Add the lsmblob data structure. [v38,01/39] LSM: Identify modules by more than name - - - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,08/39] LSM: Infrastructure management of the sock security [v38,01/39] LSM: Identify modules by more than name 2 2 - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,07/39] integrity: disassociate ima_filter_rule from security_audit_rule [v38,01/39] LSM: Identify modules by more than name 1 1 - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,06/39] LSM: lsm_self_attr syscall for LSM self attributes [v38,01/39] LSM: Identify modules by more than name - - - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,05/39] proc: Use lsmids instead of lsm names for attrs [v38,01/39] LSM: Identify modules by more than name - - - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,04/39] LSM: Maintain a table of LSM attribute data [v38,01/39] LSM: Identify modules by more than name - - - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,03/39] LSM: Identify the process attributes for each module [v38,01/39] LSM: Identify modules by more than name - - - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,02/39] LSM: Add an LSM identifier for external use [v38,01/39] LSM: Identify modules by more than name - 1 - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v38,01/39] LSM: Identify modules by more than name [v38,01/39] LSM: Identify modules by more than name - - - --- 2022-09-27 Casey Schaufler pcmoore Handled Elsewhere
[v2,11/30] selinux: implement set acl hook Untitled series #680558 1 - - --- 2022-09-26 Christian Brauner pcmoore Superseded
[RFC] selinux: increase the deprecation sleep for checkreqprot and runtime disable [RFC] selinux: increase the deprecation sleep for checkreqprot and runtime disable 1 - - --- 2022-09-23 Paul Moore pcmoore Accepted
docs: add Paul Moore's GPG fingerprint docs: add Paul Moore's GPG fingerprint 1 - - --- 2022-09-22 Paul Moore Accepted
libsemanage: Allow user to set SYSCONFDIR libsemanage: Allow user to set SYSCONFDIR 1 1 - --- 2022-09-22 Matthew Sheets Accepted
[10/29] selinux: implement set acl hook Untitled series #679495 - - - --- 2022-09-22 Christian Brauner pcmoore Superseded
[1/1] Add CONFIG_SECURITY_SELINUX_PERMISSIVE_DONTAUDIT Add CONFIG_SECURITY_SELINUX_PERMISSIVE_DONTAUDIT - - 2 --- 2022-09-21 Jeff Xu pcmoore Rejected
selinux: remove runtime disable message in the install_policy.sh script selinux: remove runtime disable message in the install_policy.sh script - - - --- 2022-09-20 Paul Moore pcmoore Accepted
scripts/selinux: use "grep -E" instead of "egrep" scripts/selinux: use "grep -E" instead of "egrep" - - - --- 2022-09-20 Greg KH pcmoore Accepted
[v2,RFC] LSM: lsm_self_attr syscall for LSM self attributes [v2,RFC] LSM: lsm_self_attr syscall for LSM self attributes - - - --- 2022-09-19 Casey Schaufler pcmoore Handled Elsewhere
secilc/doc: classmap is also allowed in permissionx secilc/doc: classmap is also allowed in permissionx 1 - - --- 2022-09-19 Dominick Grift Accepted
[userspace] fixfiles: do not cross mounts when traversing directories [userspace] fixfiles: do not cross mounts when traversing directories - - - --- 2022-09-19 Ondrej Mosnacek Rejected
[v3] fixfiles: Unmount temporary bind mounts on SIGINT [v3] fixfiles: Unmount temporary bind mounts on SIGINT - - - --- 2022-09-16 Petr Lautrbach Superseded
[v2] fixfiles: Unmount temporary bind mounts on SIGINT [v2] fixfiles: Unmount temporary bind mounts on SIGINT - - - --- 2022-09-15 Petr Lautrbach Superseded
fixfiles: Unmount temporary bind mounts on SIGINT fixfiles: Unmount temporary bind mounts on SIGINT - - - --- 2022-09-15 Petr Lautrbach Superseded
python: Hide error message when modifying non-local fcontext python: Hide error message when modifying non-local fcontext - - - --- 2022-09-14 Vit Mojzis Rejected
[RFC] LSM: Specify which LSM to display [RFC] LSM: Specify which LSM to display - - - --- 2022-09-14 Casey Schaufler pcmoore Handled Elsewhere
[linux-next] selinux/hooks: remove the unneeded result variable [linux-next] selinux/hooks: remove the unneeded result variable - - - --- 2022-09-12 CGEL pcmoore Accepted
python/chcat: Don't fail on missing translation files python/chcat: Don't fail on missing translation files - - - --- 2022-09-12 Johannes Segitz Rejected
[RFC] LSM: lsm_self_attr system call to get security module attributes [RFC] LSM: lsm_self_attr system call to get security module attributes - - - --- 2022-09-10 Casey Schaufler pcmoore Handled Elsewhere
[v5.19.y,3/3] Smack: Provide read control for io_uring_cmd Backport the io_uring/LSM CMD passthrough controls 1 - - --- 2022-09-06 Paul Moore pcmoore Handled Elsewhere
[v5.19.y,2/3] selinux: implement the security_uring_cmd() LSM hook Backport the io_uring/LSM CMD passthrough controls - - - --- 2022-09-06 Paul Moore pcmoore Handled Elsewhere
[v5.19.y,1/3] lsm,io_uring: add LSM hooks for the new uring_cmd file op Backport the io_uring/LSM CMD passthrough controls - - - --- 2022-09-06 Paul Moore pcmoore Handled Elsewhere
[testsuite] tests/Makefile: add missing condition for userfaultfd test [testsuite] tests/Makefile: add missing condition for userfaultfd test - - - --- 2022-09-02 Ondrej Mosnacek omos Accepted
[2/2] fs: don't call capable() prematurely in simple_xattr_list() fs: fix capable() call in simple_xattr_list() - - - --- 2022-09-01 Ondrej Mosnacek pcmoore Handled Elsewhere
[1/2] fs: convert simple_xattrs to RCU list fs: fix capable() call in simple_xattr_list() - - - --- 2022-09-01 Ondrej Mosnacek pcmoore Handled Elsewhere
[v5] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing [v5] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing 2 1 1 --- 2022-09-01 David Howells pcmoore Superseded
[v2] tests/secretmem: add test [v2] tests/secretmem: add test - - - --- 2022-08-31 Christian Göttsche omos Superseded
tests/secretmem: add test tests/secretmem: add test - - - --- 2022-08-31 Christian Göttsche Superseded
libselinux: support objname in compute_create libselinux: support objname in compute_create 1 - - --- 2022-08-30 Christian Göttsche Accepted
selinux: declare read-only parameters const selinux: declare read-only parameters const - - - --- 2022-08-30 Christian Göttsche pcmoore Accepted
selinux: use int arrays for boolean values selinux: use int arrays for boolean values - - - --- 2022-08-30 Christian Göttsche pcmoore Accepted
[linux-next] selinux: remove redundant variables rc [linux-next] selinux: remove redundant variables rc - - - --- 2022-08-30 CGEL In Next
[linux-next] selinux: Remove the unneeded result variable [linux-next] selinux: Remove the unneeded result variable - - - --- 2022-08-30 CGEL Accepted
[GIT,PULL] LSM fixes for v6.0 (#1) [GIT,PULL] LSM fixes for v6.0 (#1) - - - --- 2022-08-29 Paul Moore Handled Elsewhere
checkpolicy: avoid passing NULL pointer to memset() checkpolicy: avoid passing NULL pointer to memset() 1 - - --- 2022-08-29 Juraj Marcin Accepted
[3/3] secilc/docs: disable pandoc default css for html docs [1/3] secilc/docs: selinuxuser actually takes a string not identifier 1 - - --- 2022-08-28 bauen1 Accepted
[2/3] secilc/docs: fix syntax highlighting [1/3] secilc/docs: selinuxuser actually takes a string not identifier 1 - - --- 2022-08-28 bauen1 Accepted
[testsuite] tests: remove more stray flag/temporary files with 'make clean' [testsuite] tests: remove more stray flag/temporary files with 'make clean' - - - --- 2022-08-26 Ondrej Mosnacek omos Accepted
libsepol: fix missing double quotes in typetransition CIL rule libsepol: fix missing double quotes in typetransition CIL rule - - - --- 2022-08-25 Juraj Marcin Accepted
tests/filesystem/xfs: use a 300M xfs filesystem image tests/filesystem/xfs: use a 300M xfs filesystem image - - - --- 2022-08-24 Paul Moore omos Accepted
[testsuite,2/2] test_userfaultfd.te: adapt to upcoming Fedora policy changes Prepare userfaultfd policy for Fedora policy changes - 1 - --- 2022-08-24 Ondrej Mosnacek omos Accepted
[testsuite,1/2] policy: remove CIL workarounds for missing anon_inode class Prepare userfaultfd policy for Fedora policy changes - - - --- 2022-08-24 Ondrej Mosnacek omos Accepted
[v4] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing [v4] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing - - 1 --- 2022-08-24 David Howells pcmoore Superseded
[3/3] /dev/null: add IORING_OP_URING_CMD support LSM hooks for IORING_OP_URING_CMD 1 - - --- 2022-08-22 Paul Moore pcmoore Handled Elsewhere
[2/3] selinux: implement the security_uring_cmd() LSM hook LSM hooks for IORING_OP_URING_CMD - - - --- 2022-08-22 Paul Moore pcmoore Handled Elsewhere
[1/3] lsm,io_uring: add LSM hooks for the new uring_cmd file op LSM hooks for IORING_OP_URING_CMD 1 - - --- 2022-08-22 Paul Moore pcmoore Handled Elsewhere
[v1] selinux/ss/services.c: check the return value of audit_log_start() in security_sid_mls_copy() [v1] selinux/ss/services.c: check the return value of audit_log_start() in security_sid_mls_copy() - - - --- 2022-08-20 Li Zhong pcmoore Rejected
[selinux-testsuite] tests/binder: remove stray flag files with 'make clean' [selinux-testsuite] tests/binder: remove stray flag files with 'make clean' - - - --- 2022-08-16 Paul Moore omos Accepted
[v5,4/4] selinux: Implement userns_create hook Introduce security_create_user_ns() - - - --- 2022-08-15 Frederick Lawler pcmoore Handled Elsewhere
[v5,3/4] selftests/bpf: Add tests verifying bpf lsm userns_create hook Introduce security_create_user_ns() 1 - - --- 2022-08-15 Frederick Lawler pcmoore Handled Elsewhere
[v5,2/4] bpf-lsm: Make bpf_lsm_userns_create() sleepable Introduce security_create_user_ns() 3 - - --- 2022-08-15 Frederick Lawler pcmoore Handled Elsewhere
[v5,1/4] security, lsm: Introduce security_create_user_ns() Introduce security_create_user_ns() - 2 - --- 2022-08-15 Frederick Lawler pcmoore Handled Elsewhere
tests/sctp: reenable the SCTP ASCONF tests tests/sctp: reenable the SCTP ASCONF tests - - - --- 2022-08-09 Paul Moore omos Under Review
tests/sctp: allow both ENOSPC and EINPROGRESS for CIPSO tag space errors tests/sctp: allow both ENOSPC and EINPROGRESS for CIPSO tag space errors - - - --- 2022-08-09 Paul Moore omos Accepted
selinux: SCTP fixes, including ASCONF selinux: SCTP fixes, including ASCONF - - - --- 2022-08-09 Paul Moore pcmoore Changes Requested
[4/4] Ignore egg-info directories and clean them [1/4] ci: bump versions in GitHub Actions - - - --- 2022-08-08 Christian Göttsche Accepted
[3/4] scripts: ignore Flake8 tag E275 [1/4] ci: bump versions in GitHub Actions - - - --- 2022-08-08 Christian Göttsche Accepted
« 1 2 ... 18 19 2092 93 »