Show patches with: none      |   9375 patches
« 1 2 3 493 94 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[v2,11/13] Audit: Change context data from secid to lsmblob [v2,01/13] LSM: Add the lsmblob data structure. - - - --- 2024-08-30 Casey Schaufler pcmoore Handled Elsewhere
[v2,10/13] LSM: Create new security_cred_getlsmblob LSM hook [v2,01/13] LSM: Add the lsmblob data structure. - - - --- 2024-08-30 Casey Schaufler pcmoore Handled Elsewhere
[v2,09/13] Audit: use an lsmblob in audit_names [v2,01/13] LSM: Add the lsmblob data structure. - - - --- 2024-08-30 Casey Schaufler pcmoore Handled Elsewhere
[v2,08/13] LSM: Use lsmblob in security_inode_getsecid [v2,01/13] LSM: Add the lsmblob data structure. - - - --- 2024-08-30 Casey Schaufler pcmoore Handled Elsewhere
[v2,07/13] LSM: Use lsmblob in security_current_getsecid [v2,01/13] LSM: Add the lsmblob data structure. - - - --- 2024-08-30 Casey Schaufler pcmoore Handled Elsewhere
[v2,06/13] Audit: Update shutdown LSM data [v2,01/13] LSM: Add the lsmblob data structure. - - - --- 2024-08-30 Casey Schaufler pcmoore Handled Elsewhere
[v2,05/13] LSM: Use lsmblob in security_ipc_getsecid [v2,01/13] LSM: Add the lsmblob data structure. - - - --- 2024-08-30 Casey Schaufler pcmoore Handled Elsewhere
[v2,04/13] Audit: maintain an lsmblob in audit_context [v2,01/13] LSM: Add the lsmblob data structure. - - - --- 2024-08-30 Casey Schaufler pcmoore Handled Elsewhere
[v2,03/13] LSM: Add lsmblob_to_secctx hook [v2,01/13] LSM: Add the lsmblob data structure. - - - --- 2024-08-30 Casey Schaufler pcmoore Handled Elsewhere
[v2,02/13] LSM: Use lsmblob in security_audit_rule_match [v2,01/13] LSM: Add the lsmblob data structure. - - - --- 2024-08-30 Casey Schaufler pcmoore Handled Elsewhere
[v2,01/13] LSM: Add the lsmblob data structure. [v2,01/13] LSM: Add the lsmblob data structure. - - - --- 2024-08-30 Casey Schaufler pcmoore Handled Elsewhere
[testsuite,v2] tests/extended_socket_class: test SMC sockets [testsuite,v2] tests/extended_socket_class: test SMC sockets - - - --- 2024-08-29 Stephen Smalley omos Accepted
[testsuite] policy,tests: add tests for netlink xperms [testsuite] policy,tests: add tests for netlink xperms - - 1 --- 2024-08-28 Stephen Smalley omos Accepted
[1/1] selinux,smack: don't bypass permissions check in inode_setsecctx hook selinux,smack: don't bypass permissions check in inode_setsecctx hook 1 3 1 --- 2024-08-28 Scott Mayhew pcmoore Handled Elsewhere
[v3] checkpolicy: Fix MLS users in optional blocks [v3] checkpolicy: Fix MLS users in optional blocks - - - --- 2024-08-28 James Carter bachradsusi New
[RESEND] selinux: mark all newly created Internet domain sockets as labeled sockets [RESEND] selinux: mark all newly created Internet domain sockets as labeled sockets - - - --- 2024-08-28 Guido Trentalancia pcmoore Accepted
[v8,8/8] drm: Replace strcpy() with strscpy() Improve the copy of task comm 1 1 - --- 2024-08-28 Yafang Shao pcmoore Handled Elsewhere
[v8,7/8] net: Replace strcpy() with strscpy() Improve the copy of task comm - 1 - --- 2024-08-28 Yafang Shao pcmoore Handled Elsewhere
[v8,6/8] mm/util: Deduplicate code in {kstrdup,kstrndup,kmemdup_nul} Improve the copy of task comm - 1 - --- 2024-08-28 Yafang Shao pcmoore Handled Elsewhere
[v8,5/8] mm/util: Fix possible race condition in kstrdup() Improve the copy of task comm - - - --- 2024-08-28 Yafang Shao pcmoore Handled Elsewhere
[v8,4/8] bpftool: Ensure task comm is always NUL-terminated Improve the copy of task comm - 1 - --- 2024-08-28 Yafang Shao pcmoore Handled Elsewhere
[v8,3/8] security: Replace memcpy() with get_task_comm() Improve the copy of task comm 1 - - --- 2024-08-28 Yafang Shao pcmoore Handled Elsewhere
[v8,2/8] auditsc: Replace memcpy() with strscpy() Improve the copy of task comm 1 1 - --- 2024-08-28 Yafang Shao pcmoore Handled Elsewhere
[v8,1/8] Get rid of __get_task_comm() Improve the copy of task comm - - - --- 2024-08-28 Yafang Shao pcmoore Handled Elsewhere
selinux: replace kmem_cache_create() with KMEM_CACHE() selinux: replace kmem_cache_create() with KMEM_CACHE() - - - --- 2024-08-27 ericsu@linux.microsoft.com pcmoore Accepted
[testsuite] tests/key_socket: skip the test if CONFIG_NET_KEY is not enabled [testsuite] tests/key_socket: skip the test if CONFIG_NET_KEY is not enabled 1 - - --- 2024-08-27 Ondrej Mosnacek omos Accepted
[v2] sepolgen-ifgen: allow M4 escaped filenames [v2] sepolgen-ifgen: allow M4 escaped filenames - - - --- 2024-08-27 Petr Lautrbach bachradsusi New
[net] sctp: fix association labeling in the duplicate COOKIE-ECHO case [net] sctp: fix association labeling in the duplicate COOKIE-ECHO case 2 - - --- 2024-08-26 Ondrej Mosnacek pcmoore Handled Elsewhere
selinux: annotate false positive data race to avoid KCSAN warnings selinux: annotate false positive data race to avoid KCSAN warnings - - - --- 2024-08-26 Stephen Smalley pcmoore Accepted
libselinux: rename hashtab functions libselinux: rename hashtab functions 1 - - --- 2024-08-26 Thiébaud Weksteen bachradsusi Accepted
[1/1] selinux: simplify avc_xperms_audit_required() [1/1] selinux: simplify avc_xperms_audit_required() - - - --- 2024-08-22 Leizhen (ThunderTown) pcmoore Accepted
[3/3] libsepol: Add policy capability netlink_xperm [1/3] libsepol: Rename ioctl xperms structures and functions 1 - - --- 2024-08-22 Thiébaud Weksteen bachradsusi Accepted
[2/3] libsepol: Support nlmsg extended permissions [1/3] libsepol: Rename ioctl xperms structures and functions 1 - - --- 2024-08-22 Thiébaud Weksteen bachradsusi Accepted
[1/3] libsepol: Rename ioctl xperms structures and functions [1/3] libsepol: Rename ioctl xperms structures and functions 1 - - --- 2024-08-22 Thiébaud Weksteen bachradsusi Accepted
[v3,2/2] security: Update file_set_fowner documentation [v3,1/2] fs: Fix file_set_fowner LSM hook inconsistencies - - - --- 2024-08-21 Mickaël Salaün pcmoore Handled Elsewhere
[v3,1/2] fs: Fix file_set_fowner LSM hook inconsistencies [v3,1/2] fs: Fix file_set_fowner LSM hook inconsistencies - - - --- 2024-08-21 Mickaël Salaün pcmoore Handled Elsewhere
selinux: Add netlink xperm support selinux: Add netlink xperm support 1 - 1 --- 2024-08-20 Thiébaud Weksteen pcmoore Superseded
sepolgen-ifgen: allow M4 escaped filenames sepolgen-ifgen: allow M4 escaped filenames - - - --- 2024-08-19 Petr Lautrbach bachradsusi Superseded
[v7,8/8] drm: Replace strcpy() with strscpy() Improve the copy of task comm 1 - - --- 2024-08-17 Yafang Shao pcmoore Handled Elsewhere
[v7,7/8] net: Replace strcpy() with strscpy() Improve the copy of task comm - - - --- 2024-08-17 Yafang Shao pcmoore Handled Elsewhere
[v7,6/8] mm/util: Deduplicate code in {kstrdup,kstrndup,kmemdup_nul} Improve the copy of task comm - - - --- 2024-08-17 Yafang Shao pcmoore Handled Elsewhere
[v7,5/8] mm/util: Fix possible race condition in kstrdup() Improve the copy of task comm - - - --- 2024-08-17 Yafang Shao pcmoore Handled Elsewhere
[v7,4/8] bpftool: Ensure task comm is always NUL-terminated Improve the copy of task comm - 1 - --- 2024-08-17 Yafang Shao pcmoore Handled Elsewhere
[v7,3/8] security: Replace memcpy() with get_task_comm() Improve the copy of task comm 1 - - --- 2024-08-17 Yafang Shao pcmoore Handled Elsewhere
[v7,2/8] auditsc: Replace memcpy() with strscpy() Improve the copy of task comm 1 - - --- 2024-08-17 Yafang Shao pcmoore Handled Elsewhere
[v7,1/8] Get rid of __get_task_comm() Improve the copy of task comm - - - --- 2024-08-17 Yafang Shao pcmoore Handled Elsewhere
[testsuite] tests/extended_socket_class: test SMC sockets [testsuite] tests/extended_socket_class: test SMC sockets - 1 - --- 2024-08-16 Stephen Smalley omos Superseded
selinux: support IPPROTO_SMC in socket_type_to_security_class() selinux: support IPPROTO_SMC in socket_type_to_security_class() 1 - - --- 2024-08-15 Jeongjun Park pcmoore Under Review
checkpolicy: Fix MLS users in optional blocks checkpolicy: Fix MLS users in optional blocks - - - --- 2024-08-14 James Carter bachradsusi Superseded
[GIT,PULL] selinux/selinux-pr-20240814 [GIT,PULL] selinux/selinux-pr-20240814 - - - --- 2024-08-14 Paul Moore pcmoore Accepted
selinux: fix Null pointer deference at sidtab_convert_hashtable() selinux: fix Null pointer deference at sidtab_convert_hashtable() - - - --- 2024-08-13 Samasth Norway Ananda pcmoore Rejected
checkpolicy: Fix MLS users in optional blocks checkpolicy: Fix MLS users in optional blocks - - - --- 2024-08-12 James Carter bachradsusi Superseded
[v2] fs,security: Fix file_set_fowner LSM hook inconsistencies [v2] fs,security: Fix file_set_fowner LSM hook inconsistencies - - - --- 2024-08-12 Mickaël Salaün pcmoore Handled Elsewhere
libsepol/cil: Allow dotted names in aliasactual rules libsepol/cil: Allow dotted names in aliasactual rules - - - --- 2024-08-12 James Carter bachradsusi Accepted
fs,security: Fix file_set_fowner LSM hook inconsistencies fs,security: Fix file_set_fowner LSM hook inconsistencies - - - --- 2024-08-12 Mickaël Salaün pcmoore Handled Elsewhere
[v6,9/9] drm: Replace strcpy() with strscpy() Improve the copy of task comm 1 - - --- 2024-08-12 Yafang Shao pcmoore Handled Elsewhere
[v6,8/9] net: Replace strcpy() with strscpy() Improve the copy of task comm - - - --- 2024-08-12 Yafang Shao pcmoore Handled Elsewhere
[v6,7/9] tracing: Replace strncpy() with strscpy() Improve the copy of task comm 1 - - --- 2024-08-12 Yafang Shao pcmoore Handled Elsewhere
[v6,6/9] mm/util: Deduplicate code in {kstrdup,kstrndup,kmemdup_nul} Improve the copy of task comm - - - --- 2024-08-12 Yafang Shao pcmoore Handled Elsewhere
[v6,5/9] mm/util: Fix possible race condition in kstrdup() Improve the copy of task comm - - - --- 2024-08-12 Yafang Shao pcmoore Handled Elsewhere
[v6,4/9] bpftool: Ensure task comm is always NUL-terminated Improve the copy of task comm - 1 - --- 2024-08-12 Yafang Shao pcmoore Handled Elsewhere
[v6,3/9] security: Replace memcpy() with get_task_comm() Improve the copy of task comm 1 - - --- 2024-08-12 Yafang Shao pcmoore Handled Elsewhere
[v6,2/9] auditsc: Replace memcpy() with strscpy() Improve the copy of task comm 1 - - --- 2024-08-12 Yafang Shao pcmoore Handled Elsewhere
[v6,1/9] Get rid of __get_task_comm() Improve the copy of task comm - - - --- 2024-08-12 Yafang Shao pcmoore Handled Elsewhere
[2/2] selinux: move genheaders to security/selinux/ selinux: Do not include <linux/*.h> from host programs (+ extra clean-up) - - - --- 2024-08-09 Masahiro Yamada pcmoore Superseded
[1/2] selinux: do not include <linux/*.h> headers from host programs selinux: Do not include <linux/*.h> from host programs (+ extra clean-up) - - - --- 2024-08-09 Masahiro Yamada pcmoore Superseded
selinux: revert our use of vma_is_initial_heap() selinux: revert our use of vma_is_initial_heap() - - - --- 2024-08-08 Paul Moore pcmoore Accepted
Revert "selinux: use vma_is_initial_stack() and vma_is_initial_heap()" Revert "selinux: use vma_is_initial_stack() and vma_is_initial_heap()" 1 - - --- 2024-08-08 Kefeng Wang pcmoore Superseded
[1/1] selinux: add the processing of the failure of avc_add_xperms_decision() [1/1] selinux: add the processing of the failure of avc_add_xperms_decision() 1 - - --- 2024-08-07 Leizhen (ThunderTown) pcmoore Accepted
[12/12] scripts/kallsyms: add compatibility support for macos Enable build system on macOS hosts - - - --- 2024-08-06 Daniel Gomez via B4 Relay pcmoore Handled Elsewhere
[11/12] tty/vt: conmakehash requires linux/limits.h Enable build system on macOS hosts - - - --- 2024-08-06 Daniel Gomez via B4 Relay pcmoore Handled Elsewhere
[10/12] scripts/mod: add byteswap support Enable build system on macOS hosts - - - --- 2024-08-06 Daniel Gomez via B4 Relay pcmoore Handled Elsewhere
[09/12] include: add endian.h support Enable build system on macOS hosts - - - --- 2024-08-06 Daniel Gomez via B4 Relay pcmoore Handled Elsewhere
[08/12] include: add elf.h support Enable build system on macOS hosts - - - --- 2024-08-06 Daniel Gomez via B4 Relay pcmoore Handled Elsewhere
[07/12] selinux/mdp: include bitsperlong and posix_types headers Enable build system on macOS hosts - - - --- 2024-08-06 Daniel Gomez via B4 Relay pcmoore Changes Requested
[06/12] selinux/genheaders: include bitsperlong and posix_types headers Enable build system on macOS hosts - - - --- 2024-08-06 Daniel Gomez via B4 Relay pcmoore Changes Requested
[05/12] accessiblity/speakup: genmap and makemapdata require linux/version.h Enable build system on macOS hosts - - - --- 2024-08-06 Daniel Gomez via B4 Relay pcmoore Handled Elsewhere
[04/12] drm/xe: xe_gen_wa_oob: fix program_invocation_short_name for macos Enable build system on macOS hosts - - - --- 2024-08-06 Daniel Gomez via B4 Relay pcmoore Handled Elsewhere
[03/12] file2alias: fix uuid_t definitions for macos Enable build system on macOS hosts - - - --- 2024-08-06 Daniel Gomez via B4 Relay pcmoore Handled Elsewhere
[02/12] kbuild: add header_install dependency to scripts Enable build system on macOS hosts - - - --- 2024-08-06 Daniel Gomez via B4 Relay pcmoore Handled Elsewhere
[01/12] scripts: subarch.include: fix SUBARCH on MacOS hosts Enable build system on macOS hosts - 1 - --- 2024-08-06 Daniel Gomez via B4 Relay pcmoore Handled Elsewhere
[1/1] selinux: Fix potential counting error in avc_add_xperms_decision() [1/1] selinux: Fix potential counting error in avc_add_xperms_decision() 1 - - --- 2024-08-06 Leizhen (ThunderTown) pcmoore Accepted
[v2,2/2] security: remove unused cred_alloc_blank/cred_transfer helpers get rid of cred_transfer - - - --- 2024-08-05 Jann Horn pcmoore New
[v2,1/2] KEYS: use synchronous task work for changing parent credentials get rid of cred_transfer - - - --- 2024-08-05 Jann Horn pcmoore New
[v5,9/9] drm: Replace strcpy() with __get_task_comm() Improve the copy of task comm 1 - - --- 2024-08-04 Yafang Shao pcmoore Handled Elsewhere
[v5,8/9] net: Replace strcpy() with __get_task_comm() Improve the copy of task comm - - - --- 2024-08-04 Yafang Shao pcmoore Handled Elsewhere
[v5,7/9] tracing: Replace strncpy() with __get_task_comm() Improve the copy of task comm 1 - - --- 2024-08-04 Yafang Shao pcmoore Handled Elsewhere
[v5,6/9] mm/util: Deduplicate code in {kstrdup,kstrndup,kmemdup_nul} Improve the copy of task comm - - - --- 2024-08-04 Yafang Shao pcmoore Handled Elsewhere
[v5,5/9] mm/util: Fix possible race condition in kstrdup() Improve the copy of task comm - - - --- 2024-08-04 Yafang Shao pcmoore Handled Elsewhere
[v5,4/9] bpftool: Ensure task comm is always NUL-terminated Improve the copy of task comm - 1 - --- 2024-08-04 Yafang Shao pcmoore Handled Elsewhere
[v5,3/9] security: Replace memcpy() with __get_task_comm() Improve the copy of task comm 1 - - --- 2024-08-04 Yafang Shao pcmoore Handled Elsewhere
[v5,2/9] auditsc: Replace memcpy() with __get_task_comm() Improve the copy of task comm 1 - - --- 2024-08-04 Yafang Shao pcmoore Handled Elsewhere
[v5,1/9] fs/exec: Drop task_lock() inside __get_task_comm() Improve the copy of task comm - - - --- 2024-08-04 Yafang Shao pcmoore Handled Elsewhere
[RFC] security/KEYS: get rid of cred_alloc_blank and cred_transfer [RFC] security/KEYS: get rid of cred_alloc_blank and cred_transfer - - - --- 2024-08-02 Jann Horn pcmoore Superseded
[v1,2/2] policygen: respect CIL option when generating comments [v1,1/2] sepolgen: initialize gen_cil - - - --- 2024-08-01 dmitry.sharshakov@siderolabs.com bachradsusi Accepted
[v1,1/2] sepolgen: initialize gen_cil [v1,1/2] sepolgen: initialize gen_cil 1 - - --- 2024-08-01 dmitry.sharshakov@siderolabs.com bachradsusi Accepted
[v5] libsemanage: Preserve file context and ownership in policy store [v5] libsemanage: Preserve file context and ownership in policy store 1 - - --- 2024-07-29 Vit Mojzis Accepted
[v4,11/11] drm: Replace strcpy() with __get_task_comm() Improve the copy of task comm 1 - - --- 2024-07-29 Yafang Shao pcmoore Handled Elsewhere
[v4,10/11] net: Replace strcpy() with __get_task_comm() Improve the copy of task comm - - - --- 2024-07-29 Yafang Shao pcmoore Handled Elsewhere
[v4,09/11] tracing: Replace strncpy() with __get_task_comm() Improve the copy of task comm 1 - - --- 2024-07-29 Yafang Shao pcmoore Handled Elsewhere
« 1 2 3 493 94 »