Show patches with: Archived = No       |   9222 patches
« 1 2 ... 8 9 10 … 92 93 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
libsepol/cil: Clear AST node after destroying bad filecon rule libsepol/cil: Clear AST node after destroying bad filecon rule - - - --- 2023-11-29 James Carter bachradsusi Accepted
[7/7] libsepol: reject linking modules with no avrules [1/7] libsepol: validate conditional type rules have a simple default type - - - --- 2023-11-28 Christian Göttsche bachradsusi Accepted
[6/7] libsepol/fuzz: handle empty and non kernel policies [1/7] libsepol: validate conditional type rules have a simple default type - - - --- 2023-11-28 Christian Göttsche bachradsusi Accepted
[5/7] libsepol: reject invalid class datums [1/7] libsepol: validate conditional type rules have a simple default type - - - --- 2023-11-28 Christian Göttsche bachradsusi Accepted
[4/7] checkpolicy/dispol: misc updates [1/7] libsepol: validate conditional type rules have a simple default type - - - --- 2023-11-28 Christian Göttsche bachradsusi Accepted
[3/7] checkpolicy/dismod: avoid duplicate initialization and fix module linking [1/7] libsepol: validate conditional type rules have a simple default type - - - --- 2023-11-28 Christian Göttsche bachradsusi Accepted
[2/7] libsepol: use correct type to avoid truncations [1/7] libsepol: validate conditional type rules have a simple default type - - - --- 2023-11-28 Christian Göttsche bachradsusi Accepted
[1/7] libsepol: validate conditional type rules have a simple default type [1/7] libsepol: validate conditional type rules have a simple default type 1 - - --- 2023-11-28 Christian Göttsche bachradsusi Accepted
libsepol: simplify string formatting libsepol: simplify string formatting 1 - - --- 2023-11-28 Christian Göttsche bachradsusi Accepted
[testsuite] defconfig: add NF_TABLES dependency for netlink_socket tests to pass [testsuite] defconfig: add NF_TABLES dependency for netlink_socket tests to pass - 1 - --- 2023-11-27 Alan Wandke omos Accepted
[v5] checkpolicy,libsepol: add prefix/suffix matching to filename type transitions [v5] checkpolicy,libsepol: add prefix/suffix matching to filename type transitions - 1 - --- 2023-11-24 Juraj Marcin bachradsusi Superseded
[v2] sepolicy: port to dnf4 python API [v2] sepolicy: port to dnf4 python API 1 - - --- 2023-11-22 Petr Lautrbach bachradsusi Accepted
[v4] selinux: add prefix/suffix matching to filename type transitions [v4] selinux: add prefix/suffix matching to filename type transitions - 2 - --- 2023-11-21 Juraj Marcin pcmoore Changes Requested
[v6,25/25] security: Enforce ordering of 'ima' and 'evm' LSMs security: Move IMA and EVM to the LSM infrastructure - - - --- 2023-11-20 Roberto Sassu pcmoore Handled Elsewhere
[v6,24/25] integrity: Remove LSM security: Move IMA and EVM to the LSM infrastructure - - - --- 2023-11-20 Roberto Sassu pcmoore Handled Elsewhere
[v6,23/25] evm: Remove dependency on 'integrity' LSM security: Move IMA and EVM to the LSM infrastructure - - - --- 2023-11-20 Roberto Sassu pcmoore Handled Elsewhere
[v6,22/25] ima: Remove dependency on 'integrity' LSM security: Move IMA and EVM to the LSM infrastructure - - - --- 2023-11-20 Roberto Sassu pcmoore Handled Elsewhere
[v6,21/25] evm: Move to LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - - - --- 2023-11-20 Roberto Sassu pcmoore Handled Elsewhere
[v6,20/25] ima: Move IMA-Appraisal to LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - - - --- 2023-11-20 Roberto Sassu pcmoore Handled Elsewhere
[v6,19/25] ima: Move to LSM infrastructure security: Move IMA and EVM to the LSM infrastructure 1 - - --- 2023-11-20 Roberto Sassu pcmoore Handled Elsewhere
[v6,18/25] security: Introduce key_post_create_or_update hook security: Move IMA and EVM to the LSM infrastructure 1 2 - --- 2023-11-20 Roberto Sassu pcmoore Handled Elsewhere
[v6,17/25] security: Introduce inode_post_remove_acl hook security: Move IMA and EVM to the LSM infrastructure 1 2 - --- 2023-11-20 Roberto Sassu pcmoore Handled Elsewhere
[v6,16/25] security: Introduce inode_post_set_acl hook security: Move IMA and EVM to the LSM infrastructure 1 2 - --- 2023-11-20 Roberto Sassu pcmoore Handled Elsewhere
[v6,15/25] security: Introduce inode_post_create_tmpfile hook security: Move IMA and EVM to the LSM infrastructure 1 1 - --- 2023-11-20 Roberto Sassu pcmoore Handled Elsewhere
[v6,14/25] security: Introduce path_post_mknod hook security: Move IMA and EVM to the LSM infrastructure 1 - - --- 2023-11-20 Roberto Sassu pcmoore Handled Elsewhere
[v6,13/25] security: Introduce file_release hook security: Move IMA and EVM to the LSM infrastructure - - - --- 2023-11-20 Roberto Sassu pcmoore Handled Elsewhere
[v6,12/25] security: Introduce file_post_open hook security: Move IMA and EVM to the LSM infrastructure 1 2 - --- 2023-11-20 Roberto Sassu pcmoore Handled Elsewhere
[v6,11/25] security: Introduce inode_post_removexattr hook security: Move IMA and EVM to the LSM infrastructure - 2 - --- 2023-11-20 Roberto Sassu pcmoore Handled Elsewhere
[v6,10/25] security: Introduce inode_post_setattr hook security: Move IMA and EVM to the LSM infrastructure 1 2 - --- 2023-11-20 Roberto Sassu pcmoore Handled Elsewhere
[v6,09/25] security: Align inode_setattr hook definition with EVM security: Move IMA and EVM to the LSM infrastructure 1 2 - --- 2023-11-20 Roberto Sassu pcmoore Handled Elsewhere
[v6,08/25] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 3 - --- 2023-11-20 Roberto Sassu pcmoore Handled Elsewhere
[v6,07/25] evm: Align evm_inode_setxattr() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 3 - --- 2023-11-20 Roberto Sassu pcmoore Handled Elsewhere
[v6,06/25] evm: Align evm_inode_post_setattr() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 3 - --- 2023-11-20 Roberto Sassu pcmoore Handled Elsewhere
[v6,05/25] ima: Align ima_post_read_file() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 3 - --- 2023-11-20 Roberto Sassu pcmoore Handled Elsewhere
[v6,04/25] ima: Align ima_inode_removexattr() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 3 - --- 2023-11-20 Roberto Sassu pcmoore Handled Elsewhere
[v6,03/25] ima: Align ima_inode_setxattr() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 3 - --- 2023-11-20 Roberto Sassu pcmoore Handled Elsewhere
[v6,02/25] ima: Align ima_file_mprotect() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 3 - --- 2023-11-20 Roberto Sassu pcmoore Handled Elsewhere
[v6,01/25] ima: Align ima_inode_post_setattr() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 3 - --- 2023-11-20 Roberto Sassu pcmoore Handled Elsewhere
sepolicy: port to dnf4 python API sepolicy: port to dnf4 python API 1 - - --- 2023-11-20 Petr Lautrbach bachradsusi Superseded
[v2,2/2] libsepol: avoid fixed sized format buffer for xperms [v2,1/2] libsepol: avoid fixed sized format buffer for xperms 1 - - --- 2023-11-20 Christian Göttsche bachradsusi Accepted
[v2,1/2] libsepol: avoid fixed sized format buffer for xperms [v2,1/2] libsepol: avoid fixed sized format buffer for xperms - - - --- 2023-11-20 Christian Göttsche bachradsusi Accepted
[2/2] libsepol: avoid fixed sized format buffer for xperms [1/2] libsepol: avoid fixed sized format buffer for xperms - - - --- 2023-11-20 Christian Göttsche bachradsusi Accepted
[1/2] libsepol: avoid fixed sized format buffer for xperms [1/2] libsepol: avoid fixed sized format buffer for xperms - - - --- 2023-11-20 Christian Göttsche bachradsusi Accepted
[v2] libsepol: add check for category value before printing [v2] libsepol: add check for category value before printing 1 - - --- 2023-11-15 Huaxin Lu bachradsusi Accepted
MAINTAINERS: update the SELinux entry MAINTAINERS: update the SELinux entry - - - --- 2023-11-15 Paul Moore pcmoore Accepted
[v3] selinux: introduce an initial SID for early boot processes [v3] selinux: introduce an initial SID for early boot processes - 1 1 --- 2023-11-14 Ondrej Mosnacek pcmoore Accepted
[v1] libsepol: add check for category value before printing [v1] libsepol: add check for category value before printing - - - --- 2023-11-13 Huaxin Lu bachradsusi Accepted
libsepol: add check for category value before printing libsepol: add check for category value before printing - - - --- 2023-11-13 Huaxin Lu bachradsusi Superseded
libsepol: validate common classes have at least one permissions libsepol: validate common classes have at least one permissions 1 - - --- 2023-11-13 Christian Göttsche bachradsusi Accepted
selinux: update filenametr_hash() to use full_name_hash() selinux: update filenametr_hash() to use full_name_hash() - - - --- 2023-11-11 Paul Moore pcmoore Accepted
github: bump action dependencies github: bump action dependencies 1 - - --- 2023-11-09 Christian Göttsche bachradsusi Accepted
libsepol: update policy capabilities array libsepol: update policy capabilities array 1 - - --- 2023-11-09 Christian Göttsche bachradsusi Accepted
[5/5] libsepol: avoid memory corruption on realloc failure [1/5] semodule_link: avoid NULL dereference on OOM - - - --- 2023-11-09 Christian Göttsche bachradsusi Accepted
[4/5] libsepol: avoid leak in OOM branch [1/5] semodule_link: avoid NULL dereference on OOM - - - --- 2023-11-09 Christian Göttsche bachradsusi Accepted
[3/5] libselinux: fix memory leak in customizable_init() [1/5] semodule_link: avoid NULL dereference on OOM - - - --- 2023-11-09 Christian Göttsche bachradsusi Accepted
[2/5] libsepol: set number of target names [1/5] semodule_link: avoid NULL dereference on OOM - - - --- 2023-11-09 Christian Göttsche bachradsusi Accepted
[1/5] semodule_link: avoid NULL dereference on OOM [1/5] semodule_link: avoid NULL dereference on OOM 1 - - --- 2023-11-09 Christian Göttsche bachradsusi Accepted
[7/7] scripts: update run-scan-build [1/7] Drop LGTM.com configuration - - - --- 2023-11-09 Christian Göttsche bachradsusi Accepted
[6/7] Update Python installation on Debian [1/7] Drop LGTM.com configuration - - - --- 2023-11-09 Christian Göttsche bachradsusi Accepted
[5/7] libselinux: update Python binding [1/7] Drop LGTM.com configuration - - - --- 2023-11-09 Christian Göttsche bachradsusi Accepted
[4/7] ci: bump Fedora to version 39 [1/7] Drop LGTM.com configuration - - - --- 2023-11-09 Christian Göttsche bachradsusi Accepted
[3/7] scripts: ignore unavailable interpreters [1/7] Drop LGTM.com configuration - - - --- 2023-11-09 Christian Göttsche bachradsusi Accepted
[2/7] Drop Travis CI configuration [1/7] Drop LGTM.com configuration - - - --- 2023-11-09 Christian Göttsche bachradsusi Accepted
[1/7] Drop LGTM.com configuration [1/7] Drop LGTM.com configuration 1 - - --- 2023-11-09 Christian Göttsche bachradsusi Accepted
[v2,4/4] libsepol: validate the identifier for initials SID is valid [v2,1/4] libsepol: use str_read() where appropriate - - - --- 2023-11-09 Christian Göttsche bachradsusi Accepted
[v2,3/4] libsepol: enhance saturation check [v2,1/4] libsepol: use str_read() where appropriate - - - --- 2023-11-09 Christian Göttsche bachradsusi Accepted
[v2,2/4] libsepol: adjust type for saturation check [v2,1/4] libsepol: use str_read() where appropriate - - - --- 2023-11-09 Christian Göttsche bachradsusi Accepted
[v2,1/4] libsepol: use str_read() where appropriate [v2,1/4] libsepol: use str_read() where appropriate 1 - - --- 2023-11-09 Christian Göttsche bachradsusi Accepted
libsepol/tests: Update the order of neverallow test results libsepol/tests: Update the order of neverallow test results - - - --- 2023-11-09 James Carter bachradsusi Accepted
[v3] checkpolicy,libsepol: add prefix/suffix matching to filename type transitions [v3] checkpolicy,libsepol: add prefix/suffix matching to filename type transitions - 1 - --- 2023-11-08 Juraj Marcin Changes Requested
[v3] selinux: add prefix/suffix matching to filename type transitions [v3] selinux: add prefix/suffix matching to filename type transitions - 1 - --- 2023-11-08 Juraj Marcin pcmoore Changes Requested
[v5,23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache security: Move IMA and EVM to the LSM infrastructure - 1 - --- 2023-11-07 Roberto Sassu pcmoore Handled Elsewhere
[v5,22/23] integrity: Move integrity functions to the LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 1 - --- 2023-11-07 Roberto Sassu pcmoore Handled Elsewhere
[v5,21/23] evm: Move to LSM infrastructure security: Move IMA and EVM to the LSM infrastructure 1 - - --- 2023-11-07 Roberto Sassu pcmoore Handled Elsewhere
[v5,20/23] ima: Move IMA-Appraisal to LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 2 - --- 2023-11-07 Roberto Sassu pcmoore Handled Elsewhere
[v5,19/23] ima: Move to LSM infrastructure security: Move IMA and EVM to the LSM infrastructure 1 1 - --- 2023-11-07 Roberto Sassu pcmoore Handled Elsewhere
[v5,18/23] security: Introduce key_post_create_or_update hook security: Move IMA and EVM to the LSM infrastructure 1 1 - --- 2023-11-07 Roberto Sassu pcmoore Handled Elsewhere
[v5,17/23] security: Introduce inode_post_remove_acl hook security: Move IMA and EVM to the LSM infrastructure 1 1 - --- 2023-11-07 Roberto Sassu pcmoore Handled Elsewhere
[v5,16/23] security: Introduce inode_post_set_acl hook security: Move IMA and EVM to the LSM infrastructure 1 1 - --- 2023-11-07 Roberto Sassu pcmoore Handled Elsewhere
[v5,15/23] security: Introduce inode_post_create_tmpfile hook security: Move IMA and EVM to the LSM infrastructure 1 - - --- 2023-11-07 Roberto Sassu pcmoore Handled Elsewhere
[v5,14/23] security: Introduce path_post_mknod hook security: Move IMA and EVM to the LSM infrastructure 1 - - --- 2023-11-07 Roberto Sassu pcmoore Handled Elsewhere
[v5,13/23] security: Introduce file_pre_free_security hook security: Move IMA and EVM to the LSM infrastructure 1 - - --- 2023-11-07 Roberto Sassu pcmoore Handled Elsewhere
[v5,12/23] security: Introduce file_post_open hook security: Move IMA and EVM to the LSM infrastructure 1 1 - --- 2023-11-07 Roberto Sassu pcmoore Handled Elsewhere
[v5,11/23] security: Introduce inode_post_removexattr hook security: Move IMA and EVM to the LSM infrastructure - 2 - --- 2023-11-07 Roberto Sassu pcmoore Handled Elsewhere
[v5,10/23] security: Introduce inode_post_setattr hook security: Move IMA and EVM to the LSM infrastructure 1 2 - --- 2023-11-07 Roberto Sassu pcmoore Handled Elsewhere
[v5,09/23] security: Align inode_setattr hook definition with EVM security: Move IMA and EVM to the LSM infrastructure 1 2 - --- 2023-11-07 Roberto Sassu pcmoore Handled Elsewhere
[v5,08/23] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 3 - --- 2023-11-07 Roberto Sassu pcmoore Handled Elsewhere
[v5,07/23] evm: Align evm_inode_setxattr() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 3 - --- 2023-11-07 Roberto Sassu pcmoore Handled Elsewhere
[v5,06/23] evm: Align evm_inode_post_setattr() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 2 - --- 2023-11-07 Roberto Sassu pcmoore Handled Elsewhere
[v5,05/23] ima: Align ima_post_read_file() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 2 - --- 2023-11-07 Roberto Sassu pcmoore Handled Elsewhere
[v5,04/23] ima: Align ima_inode_removexattr() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 2 - --- 2023-11-07 Roberto Sassu pcmoore Handled Elsewhere
[v5,03/23] ima: Align ima_inode_setxattr() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 3 - --- 2023-11-07 Roberto Sassu pcmoore Handled Elsewhere
[v5,02/23] ima: Align ima_file_mprotect() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 2 - --- 2023-11-07 Roberto Sassu pcmoore Handled Elsewhere
[v5,01/23] ima: Align ima_inode_post_setattr() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 2 - --- 2023-11-07 Roberto Sassu pcmoore Handled Elsewhere
[v2,3/3] libsepol: more strict validation [v2,1/3] libsepol: validate default type of transition is not an attribute 1 - - --- 2023-11-03 Christian Göttsche bachradsusi Accepted
[v2,2/3] libsepol: validate constraint depth [v2,1/3] libsepol: validate default type of transition is not an attribute 1 - - --- 2023-11-03 Christian Göttsche bachradsusi Accepted
[v2,1/3] libsepol: validate default type of transition is not an attribute [v2,1/3] libsepol: validate default type of transition is not an attribute 1 - - --- 2023-11-03 Christian Göttsche bachradsusi Accepted
libsepol: reject unsupported policy capabilities libsepol: reject unsupported policy capabilities 1 - - --- 2023-11-03 Christian Göttsche bachradsusi Accepted
[v5,3/3] selinux: use arrays for avtab hashtable nodes selinux: avtab arrays and refactors - 1 - --- 2023-11-03 Jacob Satterfield pcmoore Changes Requested
[v5,2/3] selinux: fix conditional avtab slot hint selinux: avtab arrays and refactors - 1 - --- 2023-11-03 Jacob Satterfield pcmoore Changes Requested
« 1 2 ... 8 9 10 … 92 93 »