Show patches with: State = Action Required       |    Archived = No       |   71 patches
Patch Series A/R/T S/W/F Date Submitter Delegate State
[v12,4/4] evm: Support multiple LSMs providing an xattr evm: Do HMAC of multiple per LSM xattrs for new inodes - 1 - --- 2023-06-10 Roberto Sassu New
[v12,3/4] evm: Align evm_inode_init_security() definition with LSM infrastructure evm: Do HMAC of multiple per LSM xattrs for new inodes - 1 - --- 2023-06-10 Roberto Sassu New
[v12,2/4] smack: Set the SMACK64TRANSMUTE xattr in smack_inode_init_security() evm: Do HMAC of multiple per LSM xattrs for new inodes - - - --- 2023-06-10 Roberto Sassu New
[v12,1/4] security: Allow all LSMs to provide xattrs for inode_init_security hook evm: Do HMAC of multiple per LSM xattrs for new inodes - - - --- 2023-06-10 Roberto Sassu New
[UTIL-LINUX] mount: add rootcontext=@target [UTIL-LINUX] mount: add rootcontext=@target - - - --- 2023-02-21 Christian Göttsche New
libselinux: Add CPPFLAGS to Makefile libselinux: Add CPPFLAGS to Makefile - - - --- 2023-06-06 ChungSheng Wu bachradsusi New
semanage: list all nodes even if not attributed with node_type semanage: list all nodes even if not attributed with node_type - - - --- 2023-06-04 Topi Miettinen bachradsusi New
[v2] semanage, sepolicy: list also ports not attributed with port_type [v2] semanage, sepolicy: list also ports not attributed with port_type - - - --- 2023-06-02 Topi Miettinen bachradsusi New
[RFC] checkpolicy, libsepol: support name based type transitions in conditional policies [RFC] checkpolicy, libsepol: support name based type transitions in conditional policies - - - --- 2023-06-02 Christian Göttsche bachradsusi New
[2/2] libsemanage/tests: consider DESTDIR [1/2] secilc: consider DESTDIR in tests - - - --- 2023-06-02 Christian Göttsche bachradsusi New
[1/2] secilc: consider DESTDIR in tests [1/2] secilc: consider DESTDIR in tests - - - --- 2023-06-02 Christian Göttsche bachradsusi New
python/sepolicy: Fix template for confined user policy modules python/sepolicy: Fix template for confined user policy modules 1 - - --- 2023-06-01 Vit Mojzis bachradsusi New
[8/8] libsepol/cil: add support for prefix/suffix filename transtions to CIL checkpolicy, libsepol: add prefix/suffix matching to filename type transitions - 1 - --- 2023-05-31 Juraj Marcin bachradsusi New
[7/8] checkpolicy, libsepol: add prefix/suffix support to module policy checkpolicy, libsepol: add prefix/suffix matching to filename type transitions - 1 - --- 2023-05-31 Juraj Marcin bachradsusi New
[6/8] checkpolicy, libsepol: add prefix/suffix support to kernel policy checkpolicy, libsepol: add prefix/suffix matching to filename type transitions - 1 - --- 2023-05-31 Juraj Marcin bachradsusi New
[5/8] libsepol: implement new module binary format of avrule checkpolicy, libsepol: add prefix/suffix matching to filename type transitions - 1 - --- 2023-05-31 Juraj Marcin bachradsusi New
[4/8] libsepol: implement new kernel binary format for avtab checkpolicy, libsepol: add prefix/suffix matching to filename type transitions - 1 - --- 2023-05-31 Juraj Marcin bachradsusi New
[3/8] checkpolicy, libsepol: move filename transition rules to avrule checkpolicy, libsepol: add prefix/suffix matching to filename type transitions - 1 - --- 2023-05-31 Juraj Marcin bachradsusi New
[2/8] checkpolicy, libsepol: move filename transitions to avtab checkpolicy, libsepol: add prefix/suffix matching to filename type transitions - 1 - --- 2023-05-31 Juraj Marcin bachradsusi New
[1/8] checkpolicy, libsepol: move transition to separate structure in avtab checkpolicy, libsepol: add prefix/suffix matching to filename type transitions - 1 - --- 2023-05-31 Juraj Marcin bachradsusi New
Makefile: expand ~ in DESTDIR Makefile: expand ~ in DESTDIR - - - --- 2023-05-31 Masatake YAMATO bachradsusi New
[PR#394] semanage: list all ports even if not attributed with port_type [PR#394] semanage: list all ports even if not attributed with port_type - - - --- 2023-05-30 Topi Miettinen bachradsusi New
python/sepolicy: Add/remove user even when SELinux is disabled python/sepolicy: Add/remove user even when SELinux is disabled - - - --- 2023-05-29 Vit Mojzis bachradsusi New
[4/4] python: update python.pot [1/4] python: improve format strings for proper localization - - - --- 2023-05-17 Petr Lautrbach bachradsusi New
[3/4] semanage: Drop unnecessary import from seobject [1/4] python: improve format strings for proper localization - - - --- 2023-05-17 Petr Lautrbach bachradsusi New
[2/4] python/semanage: Drop hard formating from localized strings [1/4] python: improve format strings for proper localization - - - --- 2023-05-17 Petr Lautrbach bachradsusi New
[1/4] python: improve format strings for proper localization [1/4] python: improve format strings for proper localization - - - --- 2023-05-17 Petr Lautrbach bachradsusi New
[RFC,4/4] semodule_unpackage: update [RFC,1/4] semodule_expand: update - - - --- 2023-05-12 Christian Göttsche bachradsusi New
[RFC,3/4] semodule_package: update [RFC,1/4] semodule_expand: update - - - --- 2023-05-12 Christian Göttsche bachradsusi New
[RFC,2/4] semodule_link: update [RFC,1/4] semodule_expand: update - - - --- 2023-05-12 Christian Göttsche bachradsusi New
[RFC,9/9] restorecond: drop last matchpathcon call [RFC,1/9] libselinux: annotate interfaces with compiler attributes - - - --- 2023-05-12 Christian Göttsche bachradsusi New
[RFC,8/9] restorecond: check selinux_restorecon(3) for failure [RFC,1/9] libselinux: annotate interfaces with compiler attributes - - - --- 2023-05-12 Christian Göttsche bachradsusi New
[RFC,7/9] secon: check selinux_raw_to_trans_context(3) for failure [RFC,1/9] libselinux: annotate interfaces with compiler attributes - - - --- 2023-05-12 Christian Göttsche bachradsusi New
[RFC,6/9] libselinux: ignore internal use of deprecated interfaces [RFC,1/9] libselinux: annotate interfaces with compiler attributes - - - --- 2023-05-12 Christian Göttsche bachradsusi New
[RFC,5/9] libselinux: explicitly ignore return values [RFC,1/9] libselinux: annotate interfaces with compiler attributes - - - --- 2023-05-12 Christian Göttsche bachradsusi New
[RFC,4/9] mcstrans: check getcon(3) and context_range_set(3) for failure [RFC,1/9] libselinux: annotate interfaces with compiler attributes - - - --- 2023-05-12 Christian Göttsche bachradsusi New
[RFC,3/9] libselinux: declare avc_open(3) options parameter const [RFC,1/9] libselinux: annotate interfaces with compiler attributes - - - --- 2023-05-12 Christian Göttsche bachradsusi New
[RFC,2/9] libselinux: deprecate matchpathcon and compute_user interfaces [RFC,1/9] libselinux: annotate interfaces with compiler attributes - - - --- 2023-05-12 Christian Göttsche bachradsusi New
[RFC,1/9] libselinux: annotate interfaces with compiler attributes [RFC,1/9] libselinux: annotate interfaces with compiler attributes - - - --- 2023-05-12 Christian Göttsche bachradsusi New
[v2] checkpolicy/dismod: misc improvements [v2] checkpolicy/dismod: misc improvements 1 - - --- 2023-05-12 Christian Göttsche bachradsusi New
[v2] checkpolicy: add option to skip checking neverallow rules [v2] checkpolicy: add option to skip checking neverallow rules 1 - - --- 2023-05-12 Christian Göttsche bachradsusi New
libsepol/cil: Fix class permission verification in CIL libsepol/cil: Fix class permission verification in CIL - - - --- 2023-04-20 James Carter bachradsusi New
[9/9,v3] secilc/docs: Add deny rule to CIL documentation Add CIL Deny Rule - - - --- 2023-04-13 James Carter bachradsusi New
[8/9,v3] secilc/test: Add deny rule tests Add CIL Deny Rule - - - --- 2023-04-13 James Carter bachradsusi New
[7/9,v3] secilc/secil2tree: Add option to write CIL AST after post processing Add CIL Deny Rule - - - --- 2023-04-13 James Carter bachradsusi New
[6/9,v3] libsepol: Export the cil_write_post_ast function Add CIL Deny Rule - - - --- 2023-04-13 James Carter bachradsusi New
[5/9,v3] libsepol/cil: Add cil_write_post_ast function Add CIL Deny Rule - - - --- 2023-04-13 James Carter bachradsusi New
[4/9,v3] libsepol/cil: Process deny rules Add CIL Deny Rule - - - --- 2023-04-13 James Carter bachradsusi New
[3/9,v3] libsepol/cil: Add cil_tree_node_remove function Add CIL Deny Rule - - - --- 2023-04-13 James Carter bachradsusi New
[2/9,v3] libsepol/cil: Add cil_list_is_empty macro Add CIL Deny Rule - - - --- 2023-04-13 James Carter bachradsusi New
[1/9,v3] libsepol/cil: Parse and add deny rule to AST, but do not process Add CIL Deny Rule - - - --- 2023-04-13 James Carter bachradsusi New
[6/6] secilc/test: Add notself and other tests Add support for notself and other to CIL - - - --- 2023-04-12 James Carter bachradsusi New
[5/6] secilc/docs: Add notself and other keywords to CIL documentation Add support for notself and other to CIL - - - --- 2023-04-12 James Carter bachradsusi New
[4/6] libsepol: update CIL generation for trivial not-self rules Add support for notself and other to CIL - - - --- 2023-04-12 James Carter bachradsusi New
[3/6] libsepol/cil: Add notself and other support to CIL Add support for notself and other to CIL - - - --- 2023-04-12 James Carter bachradsusi New
[2/6] libsepol/cil: Do not call ebitmap_init twice for an ebitmap Add support for notself and other to CIL - - - --- 2023-04-12 James Carter bachradsusi New
[1/6] libsepol: Changes to ebitmap.h to fix compiler warnings Add support for notself and other to CIL - - - --- 2023-04-12 James Carter bachradsusi New
make avc audit line only have one space make avc audit line only have one space - - - --- 2023-04-01 Steven Moreland bachradsusi New
[v3,1/3] libselinux: migrating hashtab from policycoreutils Improve efficiency of detecting duplicate in libselinux 1 - - --- 2023-03-08 wanghuizhao bachradsusi New
[3/3] libselinux: use a static match_data if single threaded improve performance of pcre matches - - - --- 2023-01-23 Carlo Arenas bachradsusi New
[2/3] libselinux: improve performance with pcre matches improve performance of pcre matches - - - --- 2023-01-23 Carlo Arenas bachradsusi New
[1/3] scripts: respect an initial LD_LIBRARY_PATH with env_use_destdir improve performance of pcre matches - - - --- 2023-01-23 Carlo Arenas bachradsusi New
tests/sctp: reenable the SCTP ASCONF tests tests/sctp: reenable the SCTP ASCONF tests - - - --- 2022-08-09 Paul Moore omos Under Review
[RFC,1/1] selinux-testsuite: Reduce sctp test runtime selinux-testsuite: Reduce sctp test runtime - - - --- 2020-11-04 Richard Haines omos Under Review
[V2,1/1] selinux-testsuite: Add btrfs support for filesystem tests selinux-testsuite: Add btrfs support for filesystem tests - - - --- 2020-11-03 Richard Haines omos Queued
[RFC] selinux: support name based type transitions in conditional policies [RFC] selinux: support name based type transitions in conditional policies - - - --- 2023-06-02 Christian Göttsche pcmoore New
[5/5] selinux: add prefix/suffix matching support to filename type transitions selinux: add prefix/suffix matching to filename type transitions - 1 - --- 2023-05-31 Juraj Marcin pcmoore New
[4/5] selinux: filename transitions move tests selinux: add prefix/suffix matching to filename type transitions - 1 - --- 2023-05-31 Juraj Marcin pcmoore New
[3/5] selinux: implement new binary format for filename transitions in avtab selinux: add prefix/suffix matching to filename type transitions - 1 - --- 2023-05-31 Juraj Marcin pcmoore New
[2/5] selinux: move filename transitions to avtab selinux: add prefix/suffix matching to filename type transitions - 1 - --- 2023-05-31 Juraj Marcin pcmoore New
[1/5] selinux: move transition to separate structure in avtab_datum selinux: add prefix/suffix matching to filename type transitions - 1 - --- 2023-05-31 Juraj Marcin pcmoore New