Show patches with: none      |   8965 patches
« 1 2 ... 22 23 24 … 89 90 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[10/16,v2] libsepol: Move assigning outer loop index out of inner loop Refactor and fix assertion checking - - - --- 2022-01-11 James Carter Accepted
[09/16,v2] libsepol: Remove unnessesary check for matching class Refactor and fix assertion checking - - - --- 2022-01-11 James Carter Accepted
[08/16,v2] libsepol: Use (rc < 0) instead of (rc) when calling ebitmap functions Refactor and fix assertion checking - - - --- 2022-01-11 James Carter Accepted
[07/16,v2] libsepol: Create function check_assertion_self_match() and use it Refactor and fix assertion checking - - - --- 2022-01-11 James Carter Accepted
[06/16,v2] libsepol: Move check of target types to before check for self Refactor and fix assertion checking - - - --- 2022-01-11 James Carter Accepted
[05/16,v2] libsepol: Use consistent return checking style Refactor and fix assertion checking - - - --- 2022-01-11 James Carter Accepted
[04/16,v2] libsepol: Check for error from check_assertion_extended_permissions() Refactor and fix assertion checking - - - --- 2022-01-11 James Carter Accepted
[03/16,v2] libsepol: Remove uneeded error messages in assertion checking Refactor and fix assertion checking - - - --- 2022-01-11 James Carter Accepted
[02/16,v2] libsepol: Change label in check_assertion_avtab_match() Refactor and fix assertion checking - - - --- 2022-01-11 James Carter Accepted
[01/16,v2] libsepol: Return an error if check_assertion() returns an error. Refactor and fix assertion checking - - - --- 2022-01-11 James Carter Accepted
[GIT,PULL] SELinux patches for v5.17 [GIT,PULL] SELinux patches for v5.17 - - - --- 2022-01-10 Paul Moore pcmoore Accepted
policycoreutils: Improve error message when selabel_open fails policycoreutils: Improve error message when selabel_open fails 1 - - --- 2022-01-10 Vit Mojzis Accepted
libsepol: check for saturated class name length libsepol: check for saturated class name length 1 - - --- 2022-01-06 Christian Göttsche Accepted
[v2] libsepol: handle type gaps [v2] libsepol: handle type gaps - - - --- 2022-01-06 Christian Göttsche Superseded
[3/3] libsepol/cil: Do not resolve names to declarations in abstract blocks [1/3] libsepol/cil: Do not copy blockabstracts when inheriting a block - - - --- 2022-01-05 James Carter Accepted
[2/3] libsepol/cil: Mark as abstract all sub-blocks of an abstract block [1/3] libsepol/cil: Do not copy blockabstracts when inheriting a block - - - --- 2022-01-05 James Carter Accepted
[1/3] libsepol/cil: Do not copy blockabstracts when inheriting a block [1/3] libsepol/cil: Do not copy blockabstracts when inheriting a block - - - --- 2022-01-05 James Carter Accepted
[GIT,PULL] SELinux fixes for v5.16 (#4) [GIT,PULL] SELinux fixes for v5.16 (#4) - - - --- 2021-12-28 Paul Moore pcmoore Accepted
selinux: initialize proto variable in selinux_ip_postroute_compat() selinux: initialize proto variable in selinux_ip_postroute_compat() - - - --- 2021-12-24 Tom Rix pcmoore Accepted
libsepol: handle type gaps when optimizing libsepol: handle type gaps when optimizing - - - --- 2021-12-23 Christian Göttsche Superseded
[v2] libsepol: check for valid sensitivity before lookup [v2] libsepol: check for valid sensitivity before lookup 1 - - --- 2021-12-23 Christian Göttsche Accepted
libsepol: check for valid sensitivity before lookup libsepol: check for valid sensitivity before lookup - - - --- 2021-12-23 Christian Göttsche Superseded
selinux: minor tweaks to selinux_add_opt() selinux: minor tweaks to selinux_add_opt() - - - --- 2021-12-22 Paul Moore pcmoore Accepted
libsepol/cil: bail out on snprintf failure libsepol/cil: bail out on snprintf failure 1 - - --- 2021-12-20 Christian Göttsche Accepted
[GIT,PULL] SELinux fixes for v5.16 (#3) [GIT,PULL] SELinux fixes for v5.16 (#3) - - - --- 2021-12-17 Paul Moore pcmoore Accepted
[16/16] libsepol: Fix two problems with neverallowxperm reporting Refactor and fix assertion checking - - - --- 2021-12-17 James Carter Superseded
[15/16] libsepol: Set args avtab pointer when reporting assertion violations Refactor and fix assertion checking - - - --- 2021-12-17 James Carter Superseded
[14/16] libsepol: The src and tgt must be the same if neverallow uses self Refactor and fix assertion checking - - - --- 2021-12-17 James Carter Superseded
[13/16] libsepol: Make return value clearer when reporting neverallowx errors Refactor and fix assertion checking - - - --- 2021-12-17 James Carter Superseded
[12/16] libsepol: Refactor match_any_class_permissions() to be clearer Refactor and fix assertion checking - - - --- 2021-12-17 James Carter Superseded
[11/16] libsepol: Make use of previously created ebitmap when checking self Refactor and fix assertion checking - - - --- 2021-12-17 James Carter Superseded
[10/16] libsepol: Move assigning outer loop index out of inner loop Refactor and fix assertion checking - - - --- 2021-12-17 James Carter Superseded
[09/16] libsepol: Remove unnessesary check for matching class Refactor and fix assertion checking - - - --- 2021-12-17 James Carter Superseded
[08/16] libsepol: Use (rc < 0) instead of (rc) when calling ebitmap functions Refactor and fix assertion checking - - - --- 2021-12-17 James Carter Superseded
[07/16] libsepol: Create function check_assertion_self_match() and use it Refactor and fix assertion checking - - - --- 2021-12-17 James Carter Superseded
[06/16] libsepol: Move check of target types to before check for self Refactor and fix assertion checking - - - --- 2021-12-17 James Carter Superseded
[05/16] libsepol: Use consistent return checking style Refactor and fix assertion checking - - - --- 2021-12-17 James Carter Superseded
[04/16] libsepol: Check for error from check_assertion_extended_permissions() Refactor and fix assertion checking - - - --- 2021-12-17 James Carter Superseded
[03/16] libsepol: Remove uneeded error messages in assertion checking Refactor and fix assertion checking - - - --- 2021-12-17 James Carter Superseded
[02/16] libsepol: Change label in check_assertion_avtab_match() Refactor and fix assertion checking - - - --- 2021-12-17 James Carter Superseded
[01/16] libsepol: Return an error if check_assertion() returns an error. Refactor and fix assertion checking - - - --- 2021-12-17 James Carter Superseded
selinux-notebook: Add epub build selinux-notebook: Add epub build - - - --- 2021-12-16 Richard Haines pcmoore Accepted
[v2] selinux: Fix sleeping function called from invalid context [v2] selinux: Fix sleeping function called from invalid context - - - --- 2021-12-15 Scott Mayhew pcmoore Accepted
selinux: Fix sleeping function called from invalid context selinux: Fix sleeping function called from invalid context - - - --- 2021-12-15 Scott Mayhew pcmoore Changes Requested
selinux: fix a wrong check condition of strcmp() selinux: fix a wrong check condition of strcmp() - - - --- 2021-12-14 Xiaoke Wang pcmoore Rejected
selinux: check the return value of audit_log_start() selinux: check the return value of audit_log_start() - - - --- 2021-12-14 Xiaoke Wang pcmoore Rejected
[v31,28/28] AppArmor: Remove the exclusive flag [v31,01/28] integrity: disassociate ima_filter_rule from security_audit_rule 2 1 - --- 2021-12-13 Casey Schaufler pcmoore Superseded
[v31,27/28] LSM: Add /proc attr entry for full LSM context [v31,01/28] integrity: disassociate ima_filter_rule from security_audit_rule - 1 - --- 2021-12-13 Casey Schaufler pcmoore Superseded
[v31,26/28] Audit: Add record for multiple object security contexts [v31,01/28] integrity: disassociate ima_filter_rule from security_audit_rule - - - --- 2021-12-13 Casey Schaufler pcmoore Superseded
[v31,25/28] Audit: Add record for multiple task security contexts [v31,01/28] integrity: disassociate ima_filter_rule from security_audit_rule - - - --- 2021-12-13 Casey Schaufler pcmoore Superseded
[v31,24/28] Audit: Add framework for auxiliary records [v31,01/28] integrity: disassociate ima_filter_rule from security_audit_rule - - - --- 2021-12-13 Casey Schaufler pcmoore Superseded
[v31,23/28] Audit: Create audit_stamp structure [v31,01/28] integrity: disassociate ima_filter_rule from security_audit_rule 1 - - --- 2021-12-13 Casey Schaufler pcmoore Superseded
[v31,22/28] Audit: Keep multiple LSM data in audit_names [v31,01/28] integrity: disassociate ima_filter_rule from security_audit_rule 1 - - --- 2021-12-13 Casey Schaufler pcmoore Superseded
[v31,21/28] LSM: Extend security_secid_to_secctx to include module selection [v31,01/28] integrity: disassociate ima_filter_rule from security_audit_rule - - - --- 2021-12-13 Casey Schaufler pcmoore Superseded
[v31,20/28] binder: Pass LSM identifier for confirmation [v31,01/28] integrity: disassociate ima_filter_rule from security_audit_rule - - - --- 2021-12-13 Casey Schaufler pcmoore Superseded
[v31,19/28] NET: Store LSM netlabel data in a lsmblob [v31,01/28] integrity: disassociate ima_filter_rule from security_audit_rule 2 2 - --- 2021-12-13 Casey Schaufler pcmoore Superseded
[v31,18/28] LSM: security_secid_to_secctx in netlink netfilter [v31,01/28] integrity: disassociate ima_filter_rule from security_audit_rule 3 2 - --- 2021-12-13 Casey Schaufler pcmoore Superseded
[v31,17/28] LSM: Use lsmcontext in security_inode_getsecctx [v31,01/28] integrity: disassociate ima_filter_rule from security_audit_rule 3 2 - --- 2021-12-13 Casey Schaufler pcmoore Superseded
[v31,16/28] LSM: Use lsmcontext in security_secid_to_secctx [v31,01/28] integrity: disassociate ima_filter_rule from security_audit_rule - - - --- 2021-12-13 Casey Schaufler pcmoore Superseded
[v31,15/28] LSM: Ensure the correct LSM context releaser [v31,01/28] integrity: disassociate ima_filter_rule from security_audit_rule 3 2 - --- 2021-12-13 Casey Schaufler pcmoore Superseded
[v31,14/28] LSM: Specify which LSM to display [v31,01/28] integrity: disassociate ima_filter_rule from security_audit_rule - - - --- 2021-12-13 Casey Schaufler pcmoore Superseded
[v31,13/28] LSM: Use lsmblob in security_cred_getsecid [v31,01/28] integrity: disassociate ima_filter_rule from security_audit_rule 2 2 - --- 2021-12-13 Casey Schaufler pcmoore Superseded
[v31,12/28] LSM: Use lsmblob in security_inode_getsecid [v31,01/28] integrity: disassociate ima_filter_rule from security_audit_rule 2 2 - --- 2021-12-13 Casey Schaufler pcmoore Superseded
[v31,11/28] LSM: Use lsmblob in security_task_getsecid [v31,01/28] integrity: disassociate ima_filter_rule from security_audit_rule 2 2 - --- 2021-12-13 Casey Schaufler pcmoore Superseded
[v31,10/28] LSM: Use lsmblob in security_ipc_getsecid [v31,01/28] integrity: disassociate ima_filter_rule from security_audit_rule 2 2 - --- 2021-12-13 Casey Schaufler pcmoore Superseded
[v31,09/28] LSM: Use lsmblob in security_secid_to_secctx [v31,01/28] integrity: disassociate ima_filter_rule from security_audit_rule 1 1 - --- 2021-12-13 Casey Schaufler pcmoore Superseded
[v31,08/28] LSM: Use lsmblob in security_secctx_to_secid [v31,01/28] integrity: disassociate ima_filter_rule from security_audit_rule 1 1 - --- 2021-12-13 Casey Schaufler pcmoore Superseded
[v31,07/28] LSM: Use lsmblob in security_kernel_act_as [v31,01/28] integrity: disassociate ima_filter_rule from security_audit_rule 2 2 - --- 2021-12-13 Casey Schaufler pcmoore Superseded
[v31,06/28] LSM: Use lsmblob in security_audit_rule_match [v31,01/28] integrity: disassociate ima_filter_rule from security_audit_rule 1 - - --- 2021-12-13 Casey Schaufler pcmoore Superseded
[v31,05/28] IMA: avoid label collisions with stacked LSMs [v31,01/28] integrity: disassociate ima_filter_rule from security_audit_rule - - - --- 2021-12-13 Casey Schaufler pcmoore Superseded
[v31,04/28] LSM: provide lsm name and id slot mappings [v31,01/28] integrity: disassociate ima_filter_rule from security_audit_rule 1 1 - --- 2021-12-13 Casey Schaufler pcmoore Superseded
[v31,03/28] LSM: Add the lsmblob data structure. [v31,01/28] integrity: disassociate ima_filter_rule from security_audit_rule - - - --- 2021-12-13 Casey Schaufler pcmoore Superseded
[v31,02/28] LSM: Infrastructure management of the sock security [v31,01/28] integrity: disassociate ima_filter_rule from security_audit_rule 2 2 - --- 2021-12-13 Casey Schaufler pcmoore Superseded
[v31,01/28] integrity: disassociate ima_filter_rule from security_audit_rule [v31,01/28] integrity: disassociate ima_filter_rule from security_audit_rule 1 - - --- 2021-12-13 Casey Schaufler pcmoore Superseded
[V2,4/4] selinux-notebook: Add epub build SELinux Notebook: Add eBook reader build - - - --- 2021-12-13 Richard Haines pcmoore Superseded
[V2,3/4] src/images: Add new SELinux penguin SELinux Notebook: Add eBook reader build - - - --- 2021-12-13 Richard Haines pcmoore Accepted
[V2,2/4] src/images: Remove current penguin SELinux Notebook: Add eBook reader build - - - --- 2021-12-13 Richard Haines pcmoore Accepted
[V2,1/4] selinux-notebook: Make file links consistent SELinux Notebook: Add eBook reader build - - - --- 2021-12-13 Richard Haines pcmoore Accepted
[v2] secilc: kernel policy language is infix [v2] secilc: kernel policy language is infix 1 - - --- 2021-12-12 Topi Miettinen Accepted
[v4] selinux-notebook: New chapter: Hardening SELinux [v4] selinux-notebook: New chapter: Hardening SELinux - 2 - --- 2021-12-12 Topi Miettinen pcmoore Accepted
[v3] security/selinux: fix potential memleak in error branch [v3] security/selinux: fix potential memleak in error branch - - - --- 2021-12-10 Bernard Zhao pcmoore Accepted
[4/4] selinux-notebook: Add epub build SELinux Notebook: Add eBook reader build - - - --- 2021-12-10 Richard Haines pcmoore Superseded
[2/4] src/images: Remove current penguin SELinux Notebook: Add eBook reader build - - - --- 2021-12-10 Richard Haines pcmoore Superseded
[1/4] selinux-notebook: Make file links consistent SELinux Notebook: Add eBook reader build - - - --- 2021-12-10 Richard Haines pcmoore Superseded
[v3,36/36] libsepol: validate class default targets libsepol: add fuzzer for reading binary policies - - - --- 2021-12-09 Christian Göttsche Accepted
[v3,35/36] libsepol: validate fsuse types libsepol: add fuzzer for reading binary policies - - - --- 2021-12-09 Christian Göttsche Accepted
[v3,34/36] libsepol: validate categories libsepol: add fuzzer for reading binary policies - - - --- 2021-12-09 Christian Göttsche Accepted
[v3,33/36] libsepol: validate policy properties libsepol: add fuzzer for reading binary policies - - - --- 2021-12-09 Christian Göttsche Accepted
[v3,32/36] libsepol: validate permissive types libsepol: add fuzzer for reading binary policies - - - --- 2021-12-09 Christian Göttsche Accepted
[v3,31/36] libsepol: validate genfs contexts libsepol: add fuzzer for reading binary policies - - - --- 2021-12-09 Christian Göttsche Accepted
[v3,30/36] libsepol: validate ocontexts libsepol: add fuzzer for reading binary policies - - - --- 2021-12-09 Christian Göttsche Accepted
[v3,29/36] libsepol: validate type of avtab type rules libsepol: add fuzzer for reading binary policies - - - --- 2021-12-09 Christian Göttsche Accepted
[v3,28/36] libsepol: validate constraint expression operators and attributes libsepol: add fuzzer for reading binary policies - - - --- 2021-12-09 Christian Göttsche Accepted
[v3,27/36] libsepol: validate avtab and avrule types libsepol: add fuzzer for reading binary policies - - - --- 2021-12-09 Christian Göttsche Accepted
[v3,26/36] libsepol: resolve log message mismatch libsepol: add fuzzer for reading binary policies - - - --- 2021-12-09 Christian Göttsche Accepted
[v3,25/36] libsepol: validate permission count of classes libsepol: add fuzzer for reading binary policies - - - --- 2021-12-09 Christian Göttsche Accepted
[v3,24/36] libsepol: validate expanded user range and level libsepol: add fuzzer for reading binary policies - - - --- 2021-12-09 Christian Göttsche Accepted
[v3,23/36] libsepol: validate MLS levels libsepol: add fuzzer for reading binary policies - - - --- 2021-12-09 Christian Göttsche Accepted
[v3,22/36] libsepol: split validation of datum array gaps and entries libsepol: add fuzzer for reading binary policies - - - --- 2021-12-09 Christian Göttsche Accepted
[v3,21/36] libsepol: do not create a string list with initial size zero libsepol: add fuzzer for reading binary policies - - - --- 2021-12-09 Christian Göttsche Accepted
« 1 2 ... 22 23 24 … 89 90 »