Show patches with: Archived = No       |   9420 patches
« 1 2 3 494 95 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[RFC,v2,22/22] selinux: restrict policy strings [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche pcmoore Under Review
[RFC,v2,21/22] selinux: check for simple types [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche pcmoore Under Review
[RFC,v2,20/22] selinux: more strict bounds check [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche pcmoore Under Review
[RFC,v2,19/22] selinux: validate symbols [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche pcmoore Under Review
[RFC,v2,18/22] selinux: beef up isvalid checks [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche pcmoore Under Review
[RFC,v2,17/22] selinux: reorder policydb_index() [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche pcmoore Under Review
[RFC,v2,16/22] selinux: check type attr map overflows [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche pcmoore Under Review
[RFC,v2,15/22] selinux: introduce ebitmap_highest_set_bit() [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche pcmoore Under Review
[RFC,v2,14/22] selinux: pre-validate conditional expressions [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche pcmoore Under Review
[RFC,v2,13/22] selinux: validate constraints [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche pcmoore Under Review
[RFC,v2,12/22] selinux: check length fields in policies [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche pcmoore Under Review
[RFC,v2,11/22] selinux: more strict policy parsing [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche pcmoore Under Review
[RFC,v2,10/22] selinux: use u16 for security classes [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche pcmoore Under Review
[RFC,v2,09/22] selinux: make use of str_read() [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche pcmoore Accepted
[RFC,v2,08/22] selinux: avoid unnecessary indirection in struct level_datum [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche pcmoore Accepted
[RFC,v2,07/22] selinux: use known type instead of void pointer [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche pcmoore Accepted
[RFC,v2,06/22] selinux: rename comparison functions for clarity [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche pcmoore Accepted
[RFC,v2,05/22] selinux: avoid nontransitive comparison [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche pcmoore Changes Requested
[RFC,v2,04/22] selinux: rework match_ipv6_addrmask() [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche pcmoore Accepted
[RFC,v2,03/22] selinux: align and constify functions [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche pcmoore Accepted
[RFC,v2,02/22] selinux: avoid using types indicating user space interaction [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche pcmoore Accepted
[RFC,v2,01/22] selinux: supply missing field initializers [RFC,v2,01/22] selinux: supply missing field initializers - - - --- 2024-12-16 Christian Göttsche pcmoore Accepted
[RFC,v2] libselinux: restore previous regex spec ordering [RFC,v2] libselinux: restore previous regex spec ordering 1 - - --- 2024-12-12 Christian Göttsche bachradsusi Accepted
libsemanage: Mute error messages from selinux_restorecon libsemanage: Mute error messages from selinux_restorecon 1 - - --- 2024-12-12 Vit Mojzis bachradsusi Accepted
selinux: Read sk->sk_family once in selinux_socket_bind() selinux: Read sk->sk_family once in selinux_socket_bind() 1 - - --- 2024-12-12 Mikhail Ivanov pcmoore Under Review
[RFC] libselinux: restore previous regex spec ordering [RFC] libselinux: restore previous regex spec ordering - - - --- 2024-12-11 Christian Göttsche bachradsusi Superseded
[9/9] Revert "libselinux: rework selabel_file(5) database" [1/9] Revert "libselinux/utils: drop reachable assert in sefcontext_compile" - - - --- 2024-12-11 James Carter bachradsusi Rejected
[8/9] Revert "libselinux: add selabel_file(5) fuzzer" [1/9] Revert "libselinux/utils: drop reachable assert in sefcontext_compile" - - - --- 2024-12-11 James Carter bachradsusi Rejected
[7/9] Revert "libselinux: support parallel selabel_lookup(3)" [1/9] Revert "libselinux/utils: drop reachable assert in sefcontext_compile" - - - --- 2024-12-11 James Carter bachradsusi Rejected
[6/9] Revert "libselinux: move functions out of header file" [1/9] Revert "libselinux/utils: drop reachable assert in sefcontext_compile" - - - --- 2024-12-11 James Carter bachradsusi Rejected
[5/9] Revert "libselinux: avoid memory allocation in common file label lookup" [1/9] Revert "libselinux/utils: drop reachable assert in sefcontext_compile" - - - --- 2024-12-11 James Carter bachradsusi Rejected
[4/9] Revert "libselinux: use vector instead of linked list for substitutions" [1/9] Revert "libselinux/utils: drop reachable assert in sefcontext_compile" - - - --- 2024-12-11 James Carter bachradsusi Rejected
[3/9] Revert "libselinux: simplify string formatting" [1/9] Revert "libselinux/utils: drop reachable assert in sefcontext_compile" - - - --- 2024-12-11 James Carter bachradsusi Rejected
[2/9] Revert "libselinux/utils: use correct error handling" [1/9] Revert "libselinux/utils: drop reachable assert in sefcontext_compile" - - - --- 2024-12-11 James Carter bachradsusi Rejected
[1/9] Revert "libselinux/utils: drop reachable assert in sefcontext_compile" [1/9] Revert "libselinux/utils: drop reachable assert in sefcontext_compile" - - - --- 2024-12-11 James Carter bachradsusi Rejected
selinux: support wildcard match in genfscon selinux: support wildcard match in genfscon - - - --- 2024-12-10 Takaya Saeki pcmoore Under Review
selinux: KASAN; slab-out-of-bounds in avc_lookup selinux: KASAN; slab-out-of-bounds in avc_lookup - - - --- 2024-12-10 Joey Jiao pcmoore Under Review
libselinux/fuzz: update for lookup_all() change libselinux/fuzz: update for lookup_all() change 1 - - --- 2024-12-05 Christian Göttsche bachradsusi Accepted
[RFC] genfscon wildcard support for faster sysfs labeling [RFC] genfscon wildcard support for faster sysfs labeling - - - --- 2024-12-05 Takaya Saeki pcmoore Superseded
selinux: match extended permissions to their base permissions selinux: match extended permissions to their base permissions - - - --- 2024-12-05 Thiébaud Weksteen pcmoore Changes Requested
[v2] selinux: add netlink nlmsg_type audit message [v2] selinux: add netlink nlmsg_type audit message - - - --- 2024-12-05 Thiébaud Weksteen pcmoore Accepted
[v2] selinux: ignore unknown extended permissions [v2] selinux: ignore unknown extended permissions - - - --- 2024-12-05 Thiébaud Weksteen pcmoore Accepted
libsepol: add missing word separators in error message libsepol: add missing word separators in error message 1 - - --- 2024-12-04 Christian Göttsche bachradsusi Accepted
selinux: ignore unknown extended permissions selinux: ignore unknown extended permissions - - - --- 2024-12-03 Thiébaud Weksteen pcmoore Changes Requested
[v2] libselinux/utils: drop reachable assert in sefcontext_compile [v2] libselinux/utils: drop reachable assert in sefcontext_compile 1 - 1 --- 2024-12-03 Christian Göttsche bachradsusi Accepted
libselinux/utils: drop reachable assert in sefcontext_compile libselinux/utils: drop reachable assert in sefcontext_compile - - - --- 2024-12-03 Christian Göttsche Superseded
[RFC] Introduce POLICYDB_VERSION_KERNEL_MAX [RFC] Introduce POLICYDB_VERSION_KERNEL_MAX - - - --- 2024-12-02 Christian Göttsche Rejected
checkpolicy: drop host bits in IPv6 CIDR address checkpolicy: drop host bits in IPv6 CIDR address 1 - - --- 2024-12-02 Christian Göttsche bachradsusi Accepted
Always build for LFS mode on 32-bit archs. Always build for LFS mode on 32-bit archs. 1 - - --- 2024-11-28 Christian Göttsche bachradsusi Accepted
libsepol: avoid unnecessary memset(3) calls in hashtab libsepol: avoid unnecessary memset(3) calls in hashtab 1 - - --- 2024-11-28 Christian Göttsche bachradsusi Accepted
libselinux/utils: use correct error handling libselinux/utils: use correct error handling 1 - - --- 2024-11-28 Christian Göttsche bachradsusi Accepted
[RFC] ioctl: add test for conditional xperms [RFC] ioctl: add test for conditional xperms 1 - 1 --- 2024-11-28 Christian Göttsche omos Accepted
[v2] selinux: add generated av_permissions.h to targets [v2] selinux: add generated av_permissions.h to targets - 1 - --- 2024-11-27 Thomas Weißschuh pcmoore Accepted
[net] selinux: use sk_to_full_sk() in selinux_ip_output() [net] selinux: use sk_to_full_sk() in selinux_ip_output() 1 1 - --- 2024-11-26 Eric Dumazet pcmoore Handled Elsewhere
[v3,3/3] libselinux: simplify string formatting [v3,1/3] libselinux: avoid memory allocation in common file label lookup - - - --- 2024-11-26 Christian Göttsche bachradsusi Accepted
[v3,2/3] libselinux: use vector instead of linked list for substitutions [v3,1/3] libselinux: avoid memory allocation in common file label lookup - - - --- 2024-11-26 Christian Göttsche bachradsusi Accepted
[v3,1/3] libselinux: avoid memory allocation in common file label lookup [v3,1/3] libselinux: avoid memory allocation in common file label lookup 1 - - --- 2024-11-26 Christian Göttsche bachradsusi Accepted
[v2] bpf, lsm: Remove getlsmprop hooks BTF IDs [v2] bpf, lsm: Remove getlsmprop hooks BTF IDs - - - --- 2024-11-25 Thomas Weißschuh pcmoore Handled Elsewhere
[v2,3/3] libselinux: simplify string formatting [v2,1/3] libselinux: avoid memory allocation in common file label lookup - - - --- 2024-11-25 Christian Göttsche bachradsusi Superseded
[v2,2/3] libselinux: use vector instead of linked list for substitutions [v2,1/3] libselinux: avoid memory allocation in common file label lookup - - - --- 2024-11-25 Christian Göttsche bachradsusi Superseded
[v2,1/3] libselinux: avoid memory allocation in common file label lookup [v2,1/3] libselinux: avoid memory allocation in common file label lookup - - - --- 2024-11-25 Christian Göttsche bachradsusi Superseded
[v2,9/9] libsemanage: respect shell paths with /usr prefix [v2,1/9] libsemanage: set O_CLOEXEC flag for file descriptors 1 - - --- 2024-11-25 Christian Göttsche bachradsusi Accepted
[v2,8/9] libsemanage/man: add documentation for command overrides [v2,1/9] libsemanage: set O_CLOEXEC flag for file descriptors - - - --- 2024-11-25 Christian Göttsche bachradsusi Accepted
[v2,7/9] libsemanage: optimize policy by default [v2,1/9] libsemanage: set O_CLOEXEC flag for file descriptors - - - --- 2024-11-25 Christian Göttsche bachradsusi Accepted
[v2,6/9] libsemanage: simplify file deletion [v2,1/9] libsemanage: set O_CLOEXEC flag for file descriptors - - - --- 2024-11-25 Christian Göttsche bachradsusi Accepted
[v2,5/9] libsemanage: check closing written files [v2,1/9] libsemanage: set O_CLOEXEC flag for file descriptors - - - --- 2024-11-25 Christian Göttsche bachradsusi Accepted
[v2,4/9] libsemanage: drop duplicate newlines and error descriptions in error messages [v2,1/9] libsemanage: set O_CLOEXEC flag for file descriptors - - - --- 2024-11-25 Christian Göttsche bachradsusi Accepted
[v2,3/9] libsemanage: handle shell allocation failure [v2,1/9] libsemanage: set O_CLOEXEC flag for file descriptors - - - --- 2024-11-25 Christian Göttsche bachradsusi Accepted
[v2,2/9] libsemanage: handle cil_set_handle_unknown() failure [v2,1/9] libsemanage: set O_CLOEXEC flag for file descriptors - - - --- 2024-11-25 Christian Göttsche bachradsusi Accepted
[v2,1/9] libsemanage: set O_CLOEXEC flag for file descriptors [v2,1/9] libsemanage: set O_CLOEXEC flag for file descriptors - - - --- 2024-11-25 Christian Göttsche bachradsusi Accepted
selinux: use native iterator types selinux: use native iterator types - - - --- 2024-11-25 Christian Göttsche pcmoore Accepted
bpf, lsm: Fix getlsmprop hooks BTF IDs bpf, lsm: Fix getlsmprop hooks BTF IDs 1 - - --- 2024-11-23 Thomas Weißschuh pcmoore Handled Elsewhere
[2/2] selinux: use vector instead of linked list for substitutions [1/2] libselinux: avoid memory allocation in common file label lookup - - - --- 2024-11-22 Christian Göttsche bachradsusi Superseded
[1/2] libselinux: avoid memory allocation in common file label lookup [1/2] libselinux: avoid memory allocation in common file label lookup - - - --- 2024-11-22 Christian Göttsche bachradsusi Superseded
[2/2] libselinux: harden availability check against user CFLAGS [1/2] libsepol: harden availability check against user CFLAGS - - - --- 2024-11-20 Christian Göttsche bachradsusi Accepted
[1/2] libsepol: harden availability check against user CFLAGS [1/2] libsepol: harden availability check against user CFLAGS 1 - - --- 2024-11-20 Christian Göttsche bachradsusi Accepted
[v3,2/3] libselinux: avoid dynamic allocation in openattr() Untitled series #911259 - - - --- 2024-11-20 Christian Göttsche bachradsusi Accepted
[v2,3/3] libselinux: move functions out of header file [v2,1/3] libselinux: make use of calloc(3) - - - --- 2024-11-20 Christian Göttsche bachradsusi Accepted
[v2,2/3] libselinux: avoid dynamic allocation in openattr() [v2,1/3] libselinux: make use of calloc(3) - - - --- 2024-11-20 Christian Göttsche bachradsusi Accepted
[v2,1/3] libselinux: make use of calloc(3) [v2,1/3] libselinux: make use of calloc(3) 1 - - --- 2024-11-20 Christian Göttsche bachradsusi Accepted
selinux: explicitly clean generated av_permissions.h selinux: explicitly clean generated av_permissions.h - - - --- 2024-11-20 Thomas Weißschuh pcmoore Changes Requested
[17/17] tests: drop headers from Makefile dependencies [01/17] Fix typos - - - --- 2024-11-18 Christian Göttsche omos New
[16/17] tests: fail on compiler warnings and enable Wextra [01/17] Fix typos - - - --- 2024-11-18 Christian Göttsche omos New
[15/17] tests: test code tweaks [01/17] Fix typos - - - --- 2024-11-18 Christian Göttsche omos New
[14/17] defconfig: enable CONFIG_NETFILTER_NETLINK_LOG [01/17] Fix typos - - - --- 2024-11-18 Christian Göttsche omos New
[13/17] defconfig: enable CONFIG_XFRM_USER [01/17] Fix typos - - - --- 2024-11-18 Christian Göttsche omos New
[12/17] tests/filesystem: improve fsnotify check and preload loop module [01/17] Fix typos - - - --- 2024-11-18 Christian Göttsche omos New
[11/17] tests/inet_socket: skip mptcp if not supported [01/17] Fix typos - - - --- 2024-11-18 Christian Göttsche omos New
[10/17] tests/tun_tap: skip if not supported [01/17] Fix typos - - - --- 2024-11-18 Christian Göttsche omos New
[09/17] tests/extended_socket_class: work with CONFIG_CRYPTO_USER_API disabled [01/17] Fix typos - - - --- 2024-11-18 Christian Göttsche omos New
[08/17] tests/notify: work with CONFIG_FANOTIFY disabled [01/17] Fix typos - - - --- 2024-11-18 Christian Göttsche omos New
[07/17] test: overlayfs related tweaks [01/17] Fix typos - - - --- 2024-11-18 Christian Göttsche omos New
[06/17] Makefile: add PHONY targets [01/17] Fix typos - - - --- 2024-11-18 Christian Göttsche omos New
[05/17] tests: enable strictness for perl scripts [01/17] Fix typos - - - --- 2024-11-18 Christian Göttsche omos New
[04/17] tests: port scripts to sh and please shellcheck [01/17] Fix typos - - - --- 2024-11-18 Christian Göttsche omos New
[03/17] tools: quote command to prevent word splitting [01/17] Fix typos - - - --- 2024-11-18 Christian Göttsche omos New
[02/17] Makefile: use $(MAKE) to pass options [01/17] Fix typos - - - --- 2024-11-18 Christian Göttsche omos New
[01/17] Fix typos [01/17] Fix typos - - - --- 2024-11-18 Christian Göttsche omos New
[00/17] testsuite: misc fixes and virtme-ng support - - - --- 2024-11-18 Christian Göttsche omos New
[RFC,22/22] selinux: restrict policy strings [RFC,01/22] selinux: supply missing field initializers - - - --- 2024-11-15 Christian Göttsche pcmoore Superseded
« 1 2 3 494 95 »