Show patches with: Archived = No       |   8772 patches
« 1 2 ... 30 31 32 … 87 88 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[RFC,SHADOW,4/7] selinux.c:reset_selinux_file_context(): do not fail in permissive mode SELinux modernizations - - - --- 2021-04-13 Christian Göttsche Not Applicable
[RFC,SHADOW,3/7] selinux.c: do not use deprecated typedef and skip context translation SELinux modernizations - - - --- 2021-04-13 Christian Göttsche Not Applicable
[RFC,SHADOW,2/7] vipw[selinux]: do not use deprecated typedef and skip context translation SELinux modernizations - - - --- 2021-04-13 Christian Göttsche Not Applicable
[RFC,SHADOW,1/7] struct commonio_db[selinux]: do not use deprecated type security_context_t SELinux modernizations - - - --- 2021-04-13 Christian Göttsche Not Applicable
[GIT,PULL] SELinux fixes for v5.12 (#2) [GIT,PULL] SELinux fixes for v5.12 (#2) - - - --- 2021-04-09 Paul Moore Accepted
[2/2] selinux: fix SECURITY_LSM_NATIVE_LABELS flag handling on double mount vfs/security/NFS/btrfs: clean up and fix LSM option handling - - - --- 2021-04-09 Ondrej Mosnacek pcmoore Superseded
[1/2] vfs,LSM: introduce the FS_HANDLES_LSM_OPTS flag vfs/security/NFS/btrfs: clean up and fix LSM option handling - - - --- 2021-04-09 Ondrej Mosnacek pcmoore Superseded
[2/2] selinux:Delete selinux_xfrm_policy_lookup() useless argument Untitled series #463965 - - - --- 2021-04-09 Zhongjun Tan pcmoore Accepted
[11/11] libsepol/cil: Move check for the shadowing of macro parameters Various CIL patches - - - --- 2021-04-08 James Carter Accepted
[10/11] libsepol/cil: Create function cil_add_decl_to_symtab() and refactor Various CIL patches - - - --- 2021-04-08 James Carter Accepted
[09/11] libsepol/cil: Refactor helper function for cil_gen_node() Various CIL patches - - - --- 2021-04-08 James Carter Accepted
[08/11] libsepol/cil: Allow permission expressions when using map classes Various CIL patches - - - --- 2021-04-08 James Carter Accepted
[07/11,v2] libsepol/cil: Exit with an error if declaration name is a reserved word Various CIL patches - - - --- 2021-04-08 James Carter Accepted
[06/11] libsepol/cil: More strict verification of constraint leaf expressions Various CIL patches - - - --- 2021-04-08 James Carter Accepted
[05/11] libsepol/cil: Set class field to NULL when resetting struct cil_classperms Various CIL patches - - - --- 2021-04-08 James Carter Accepted
[04/11] libsepol/cil: cil_reset_classperms_set() should not reset classpermission Various CIL patches - - - --- 2021-04-08 James Carter Accepted
[03/11] libsepol/cil: Destroy classperm list when resetting map perms Various CIL patches - - - --- 2021-04-08 James Carter Accepted
[02/11] libsepol/cil: Destroy classperms list when resetting classpermission Various CIL patches - - - --- 2021-04-08 James Carter Accepted
[01/11] libsepol/cil: Fix out-of-bound read of file context pattern ending with "\" Various CIL patches - - - --- 2021-04-08 James Carter Accepted
selinux:Delete selinux_xfrm_policy_lookup() useless argument selinux:Delete selinux_xfrm_policy_lookup() useless argument - - - --- 2021-04-08 Zhongjun Tan Superseded
selinux:Delete selinux_xfrm_policy_lookup() useless argument selinux:Delete selinux_xfrm_policy_lookup() useless argument - - - --- 2021-04-08 Zhongjun Tan Superseded
[v2,4/4] selinux: add "mls" binary version of the policy Untitled series #462281 - - - --- 2021-04-07 Vit Mojzis Not Applicable
[v2,3/4] selinux: Remove 'make' dependency Untitled series #462281 - - - --- 2021-04-07 Vit Mojzis Not Applicable
[v2,2/4,DO,NOT,MERGE] Install selinux-policy-devel in test environment Untitled series #462281 - - - --- 2021-04-07 Vit Mojzis Not Applicable
[v3] selinux: fix race between old and new sidtab [v3] selinux: fix race between old and new sidtab - - - --- 2021-04-07 Ondrej Mosnacek pcmoore Accepted
[testsuite] Deactivate userfaultfd test policy if no xperm support [testsuite] Deactivate userfaultfd test policy if no xperm support - - - --- 2021-04-06 Ondrej Mosnacek omos Accepted
[v2] selinux: fix race between old and new sidtab [v2] selinux: fix race between old and new sidtab - - - --- 2021-04-06 Ondrej Mosnacek pcmoore Changes Requested
selinux: fix race between old and new sidtab selinux: fix race between old and new sidtab - - - --- 2021-04-05 Ondrej Mosnacek pcmoore Changes Requested
[v3,2/2] selinux: fix cond_list corruption when changing booleans selinux: fix changing booleans - - - --- 2021-04-02 Ondrej Mosnacek pcmoore Accepted
[v3,1/2] selinux: make nslot handling in avtab more robust selinux: fix changing booleans - - - --- 2021-04-02 Ondrej Mosnacek pcmoore Accepted
[v2,2/2] selinux: fix cond_list corruption when changing booleans selinux: fix changing booleans - - - --- 2021-04-01 Ondrej Mosnacek pcmoore Changes Requested
[v2,1/2] selinux: make nslot handling in avtab more robust selinux: fix changing booleans - - - --- 2021-04-01 Ondrej Mosnacek pcmoore Changes Requested
[12/12] secilc/docs: Update the CIL documentation for various blocks Update checks for invalid rules in blocks - - - --- 2021-03-30 James Carter Accepted
[11/12] libsepol/cil: Use CIL_ERR for error messages in cil_compile() Update checks for invalid rules in blocks - - - --- 2021-03-30 James Carter Accepted
[10/12] libsepol/cil: Make invalid statement error messages consistent Update checks for invalid rules in blocks - - - --- 2021-03-30 James Carter Accepted
[09/12] libsepol/cil: Do not allow tunable declarations in in-statements Update checks for invalid rules in blocks - - - --- 2021-03-30 James Carter Accepted
[08/12] libsepol/cil: Sync checks for invalid rules in macros Update checks for invalid rules in blocks - - - --- 2021-03-30 James Carter Accepted
[07/12] libsepol/cil: Check for statements not allowed in optional blocks Update checks for invalid rules in blocks - - - --- 2021-03-30 James Carter Accepted
[06/12] libsepol/cil: Sync checks for invalid rules in booleanifs Update checks for invalid rules in blocks - - - --- 2021-03-30 James Carter Accepted
[05/12] libsepol/cil: Reorder checks for invalid rules when resolving AST Update checks for invalid rules in blocks - - - --- 2021-03-30 James Carter Accepted
[04/12] libsepol/cil: Use AST to track blocks and optionals when resolving Update checks for invalid rules in blocks - - - --- 2021-03-30 James Carter Accepted
[03/12] libsepol/cil: Create new first child helper function for building AST Update checks for invalid rules in blocks - - - --- 2021-03-30 James Carter Accepted
[02/12] libsepol/cil: Cleanup build AST helper functions Update checks for invalid rules in blocks - - - --- 2021-03-30 James Carter Accepted
[01/12] libsepol/cil: Reorder checks for invalid rules when building AST Update checks for invalid rules in blocks - - - --- 2021-03-30 James Carter Accepted
[3/3] selinux: constify some avtab function arguments selinux: fix changing booleans - - - --- 2021-03-30 Ondrej Mosnacek pcmoore Accepted
[2/3] selinux: simplify duplicate_policydb_cond_list() by using kmemdup() selinux: fix changing booleans - - - --- 2021-03-30 Ondrej Mosnacek pcmoore Accepted
[1/3] selinux: fix cond_list corruption when changing booleans selinux: fix changing booleans - - - --- 2021-03-30 Ondrej Mosnacek pcmoore Changes Requested
[testsuite] Add AF_VSOCK SOCK_STREAM client/server tests [testsuite] Add AF_VSOCK SOCK_STREAM client/server tests - - - --- 2021-03-29 David Brazdil omos Accepted
cil_conditional_statements.md: fix expr definition cil_conditional_statements.md: fix expr definition 1 - - --- 2021-03-24 Dominick Grift Accepted
[testsuite] tests/userfaultfd: handle __NR_userfaultfd not being defined [testsuite] tests/userfaultfd: handle __NR_userfaultfd not being defined - - - --- 2021-03-24 Ondrej Mosnacek omos Accepted
[RFC,userspace,6/6] setfiles/restorecon: support parallel relabeling Parallel setfiles/restorecon - - - --- 2021-03-23 Ondrej Mosnacek RFC
[RFC,userspace,5/6] selinux_restorecon: introduce selinux_restorecon_parallel(3) Parallel setfiles/restorecon - - - --- 2021-03-23 Ondrej Mosnacek RFC
[RFC,userspace,4/6] selinux_restorecon: add a global mutex to synchronize progress output Parallel setfiles/restorecon - - - --- 2021-03-23 Ondrej Mosnacek RFC
[RFC,userspace,3/6] selinux_restorecon: introduce selinux_log_sync() Parallel setfiles/restorecon - - - --- 2021-03-23 Ondrej Mosnacek RFC
[RFC,userspace,2/6] selinux_restorecon: protect file_spec list with a mutex Parallel setfiles/restorecon - - - --- 2021-03-23 Ondrej Mosnacek RFC
[RFC,userspace,1/6] selinux_restorecon: simplify fl_head allocation by using calloc() Parallel setfiles/restorecon - - - --- 2021-03-23 Ondrej Mosnacek RFC
[GIT,PULL] SELinux fixes for v5.12 (#1) [GIT,PULL] SELinux fixes for v5.12 (#1) - - - --- 2021-03-22 Paul Moore pcmoore Accepted
[3/3] libsepol/cil: Move check for the shadowing of macro parameters libsepol/cil: Allow permission expressions when using map classes - - - --- 2021-03-22 James Carter Accepted
[2/3] libsepol/cil: Create function cil_add_decl_to_symtab() and refactor libsepol/cil: Allow permission expressions when using map classes - - - --- 2021-03-22 James Carter Accepted
[1/3] libsepol/cil: Refactor helper function for cil_gen_node() [1/3] libsepol/cil: Refactor helper function for cil_gen_node() - - - --- 2021-03-22 James Carter Accepted
libsepol/cil: Allow permission expressions when using map classes libsepol/cil: Allow permission expressions when using map classes - - - --- 2021-03-22 James Carter Rejected
libsepol/cil: Allow permission expressions when using map classes libsepol/cil: Allow permission expressions when using map classes - - - --- 2021-03-22 James Carter Accepted
[V2] libsepol/cil: Exit with an error if declaration name is a reserved word [V2] libsepol/cil: Exit with an error if declaration name is a reserved word - - - --- 2021-03-22 James Carter Accepted
[userspace] policycoreutils/setfiles: do not create useless setfiles.8.man file [userspace] policycoreutils/setfiles: do not create useless setfiles.8.man file 1 - - --- 2021-03-19 Ondrej Mosnacek Accepted
[v2] selinux: vsock: Set SID for socket returned by accept() [v2] selinux: vsock: Set SID for socket returned by accept() - - - --- 2021-03-19 David Brazdil Accepted
[v2] libsepol/cil: fix out-of-bound read of a file context pattern ending with "\" [v2] libsepol/cil: fix out-of-bound read of a file context pattern ending with "\" - - - --- 2021-03-18 Nicolas Iooss Accepted
[v3,3/3] selinuxfs: unify policy load error reporting selinux: policy load fixes - - - --- 2021-03-18 Ondrej Mosnacek Accepted
[v3,2/3] selinux: fix variable scope issue in live sidtab conversion selinux: policy load fixes - 1 1 --- 2021-03-18 Ondrej Mosnacek Accepted
[v3,1/3] selinux: don't log MAC_POLICY_LOAD record on failed policy load selinux: policy load fixes - - - --- 2021-03-18 Ondrej Mosnacek Accepted
[v2,3/3] smack: differentiate between subjective and objective task credentials Split security_task_getsecid() into subj and obj variants 1 2 - --- 2021-03-18 Paul Moore pcmoore Accepted
[v2,2/3] selinux: clarify task subjective and objective credentials Split security_task_getsecid() into subj and obj variants - 1 - --- 2021-03-18 Paul Moore pcmoore Accepted
[v2,1/3] lsm: separate security_task_getsecid() into subjective and objective variants Split security_task_getsecid() into subj and obj variants 2 1 - --- 2021-03-18 Paul Moore pcmoore Accepted
libsepol/cil: More strict verification of constraint leaf expressions libsepol/cil: More strict verification of constraint leaf expressions - - - --- 2021-03-18 James Carter Superseded
libsepol/cil: Exit with an error if declaration name is a reserved word libsepol/cil: Exit with an error if declaration name is a reserved word - - - --- 2021-03-18 James Carter Superseded
libsepol/cil: Set class field to NULL when resetting struct cil_classperms libsepol/cil: Set class field to NULL when resetting struct cil_classperms - - - --- 2021-03-18 James Carter Superseded
libsepol/cil: cil_reset_classperms_set() should not reset classpermission libsepol/cil: cil_reset_classperms_set() should not reset classpermission - - - --- 2021-03-18 James Carter Superseded
libsepol/cil: Destroy classperm list when resetting map perms libsepol/cil: Destroy classperm list when resetting map perms - - - --- 2021-03-17 James Carter Superseded
libsepol/cil: Destroy classperms list when resetting classpermission libsepol/cil: Destroy classperms list when resetting classpermission - - - --- 2021-03-17 James Carter Rejected
selinux: vsock: Set SID for socket returned by accept() selinux: vsock: Set SID for socket returned by accept() - - - --- 2021-03-17 David Brazdil pcmoore Changes Requested
[1/1] libsepol: make num_* unsigned int in module_to_cil [1/1] libsepol: make num_* unsigned int in module_to_cil 1 - - --- 2021-03-16 Nicolas Iooss Accepted
[4/4] libsepol: Write "NO_IDENTIFIER" for empty CIL constraint expression [1/4] libsepol/cil: Allow lists in constraint expressions - - - --- 2021-03-16 James Carter Accepted
[3/4] libsepol: Enclose identifier lists in CIL constraint expressions [1/4] libsepol/cil: Allow lists in constraint expressions - - - --- 2021-03-16 James Carter Accepted
[2/4] secilc/docs: Lists are now allowed in constraint expressions [1/4] libsepol/cil: Allow lists in constraint expressions - - - --- 2021-03-16 James Carter Accepted
[1/4] libsepol/cil: Allow lists in constraint expressions [1/4] libsepol/cil: Allow lists in constraint expressions 1 - - --- 2021-03-16 James Carter Accepted
[2/2] libsepol: Enclose identifier lists in constraint expressions [1/2] libsepol: Write "NO_IDENTIFIER" for empty constraint expression - - - --- 2021-03-16 James Carter Accepted
[1/2] libsepol: Write "NO_IDENTIFIER" for empty constraint expression [1/2] libsepol: Write "NO_IDENTIFIER" for empty constraint expression 1 - - --- 2021-03-16 James Carter Accepted
xfs: use has_capability_noaudit() instead of capable() where appropriate xfs: use has_capability_noaudit() instead of capable() where appropriate - - - --- 2021-03-16 Ondrej Mosnacek pcmoore Changes Requested
libsepol/cil: Check for duplicate blocks, optionals, and macros libsepol/cil: Check for duplicate blocks, optionals, and macros 1 - - --- 2021-03-16 James Carter Accepted
[v2] vfs: fix fsconfig(2) LSM mount option handling for btrfs [v2] vfs: fix fsconfig(2) LSM mount option handling for btrfs - - 1 --- 2021-03-16 Ondrej Mosnacek pcmoore Changes Requested
[2/2,v2] libsepol: Check kernel to CIL and Conf functions for supported versions [1/2,v2] checkpolicy: Do not automatically upgrade when using "-b" flag 1 - - --- 2021-03-15 James Carter Accepted
[1/2,v2] checkpolicy: Do not automatically upgrade when using "-b" flag [1/2,v2] checkpolicy: Do not automatically upgrade when using "-b" flag 1 - - --- 2021-03-15 James Carter Accepted
[6/6] libsepol/cil: do not leak avrulex_ioctl_table memory when an error occurs [1/6] libsepol/cil: fix out-of-bound read of a file context pattern ending with "\" 1 - - --- 2021-03-14 Nicolas Iooss Accepted
[5/6] libsepol/cil: fix NULL pointer dereference in __cil_insert_name [1/6] libsepol/cil: fix out-of-bound read of a file context pattern ending with "\" 1 - - --- 2021-03-14 Nicolas Iooss Accepted
[4/6] libsepol/cil: replace printf with proper cil_tree_log [1/6] libsepol/cil: fix out-of-bound read of a file context pattern ending with "\" 1 - - --- 2021-03-14 Nicolas Iooss Accepted
[3/6] libsepol/cil: remove stray printf [1/6] libsepol/cil: fix out-of-bound read of a file context pattern ending with "\" 1 - - --- 2021-03-14 Nicolas Iooss Accepted
[2/6] libsepol/cil: make cil_post_fc_fill_data static [1/6] libsepol/cil: fix out-of-bound read of a file context pattern ending with "\" 1 - - --- 2021-03-14 Nicolas Iooss Accepted
[1/6] libsepol/cil: fix out-of-bound read of a file context pattern ending with "\" [1/6] libsepol/cil: fix out-of-bound read of a file context pattern ending with "\" - - - --- 2021-03-14 Nicolas Iooss Superseded
libsepol: Remove unnecessary copying of declarations from link.c libsepol: Remove unnecessary copying of declarations from link.c 1 - - --- 2021-03-11 James Carter Accepted
[2/2] libsepol: Check kernel to CIL and Conf functions for supported versions [1/2] checkpolicy: Do not automatically upgrade when using "-b" flag - - - --- 2021-03-11 James Carter Superseded
[1/2] checkpolicy: Do not automatically upgrade when using "-b" flag [1/2] checkpolicy: Do not automatically upgrade when using "-b" flag - - - --- 2021-03-11 James Carter Superseded
« 1 2 ... 30 31 32 … 87 88 »