Show patches with: Archived = No       |   8771 patches
« 1 2 ... 33 34 35 … 87 88 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
selinux: include a consumer of the new IMA critical data hook selinux: include a consumer of the new IMA critical data hook 1 1 - --- 2021-01-14 Lakshmi Ramasubramanian pcmoore Accepted
[v2] libselinux: Always close status page fd [v2] libselinux: Always close status page fd - - - --- 2021-01-14 Petr Lautrbach Accepted
libselinux: Always close status page fd libselinux: Always close status page fd - - - --- 2021-01-14 Petr Lautrbach Superseded
[v2,2/2] setfiles: drop ABORT_ON_ERRORS and related code [v2,1/2] setfiles: Do not abort on labeling error - - - --- 2021-01-13 Petr Lautrbach Accepted
[v2,1/2] setfiles: Do not abort on labeling error [v2,1/2] setfiles: Do not abort on labeling error - - - --- 2021-01-13 Petr Lautrbach Accepted
[v2] selinux: fall back to SECURITY_FS_USE_GENFS if no xattr support [v2] selinux: fall back to SECURITY_FS_USE_GENFS if no xattr support - - - --- 2021-01-13 Ondrej Mosnacek pcmoore Accepted
[testsuite] tests/sysctl: use vm.swappiness instead of kernel.modprobe [testsuite] tests/sysctl: use vm.swappiness instead of kernel.modprobe - - - --- 2021-01-13 Ondrej Mosnacek omos Accepted
setfiles: Do not abort on labeling error setfiles: Do not abort on labeling error - - - --- 2021-01-13 Petr Lautrbach Superseded
[testsuite,v2] perf_event: update perf_event test for the new CAP_PERFMON capability [testsuite,v2] perf_event: update perf_event test for the new CAP_PERFMON capability - - - --- 2021-01-13 Ondrej Mosnacek omos Accepted
[v5,41/42] tests: extend mount_setattr tests idmapped mounts - - - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,40/42] fs: introduce MOUNT_ATTR_IDMAP idmapped mounts - - - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,39/42] overlayfs: do not mount on top of idmapped mounts idmapped mounts - - - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,38/42] ecryptfs: do not mount on top of idmapped mounts idmapped mounts - - - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,37/42] xfs: support idmapped mounts idmapped mounts - - - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,36/42] ext4: support idmapped mounts idmapped mounts - - - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,35/42] fat: handle idmapped mounts idmapped mounts - - - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,34/42] ima: handle idmapped mounts idmapped mounts - - - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,33/42] apparmor: handle idmapped mounts idmapped mounts - - - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,31/42] exec: handle idmapped mounts idmapped mounts - 1 - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,30/42] would_dump: handle idmapped mounts idmapped mounts - 1 - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,29/42] ioctl: handle idmapped mounts idmapped mounts - 1 - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,28/42] init: handle idmapped mounts idmapped mounts - - - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,27/42] notify: handle idmapped mounts idmapped mounts - - - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,26/42] fcntl: handle idmapped mounts idmapped mounts - 1 - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,25/42] utimes: handle idmapped mounts idmapped mounts - 1 - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,24/42] af_unix: handle idmapped mounts idmapped mounts - 1 - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,23/42] open: handle idmapped mounts idmapped mounts - - - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,22/42] open: handle idmapped mounts in do_truncate() idmapped mounts - - - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,21/42] namei: prepare for idmapped mounts idmapped mounts - 1 - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,20/42] namei: introduce struct renamedata idmapped mounts - 1 - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,19/42] namei: handle idmapped mounts in may_*() helpers idmapped mounts - 1 - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,18/42] stat: handle idmapped mounts idmapped mounts - 1 - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,17/42] commoncap: handle idmapped mounts idmapped mounts - 1 - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,16/42] xattr: handle idmapped mounts idmapped mounts - 1 - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,15/42] fs: add file_user_ns() helper idmapped mounts - 1 - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,14/42] acl: handle idmapped mounts idmapped mounts - 1 - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,13/42] attr: handle idmapped mounts idmapped mounts - 1 - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,12/42] inode: make init and permission helpers idmapped mount aware idmapped mounts - 1 - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,11/42] namei: make permission helpers idmapped mount aware idmapped mounts 1 1 - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,10/42] capability: handle idmapped mounts idmapped mounts 1 1 - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,09/42] mount: attach mappings to mounts idmapped mounts - 1 - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,08/42] fs: add id translation helpers idmapped mounts - 1 - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,07/42] tests: add mount_setattr() selftests idmapped mounts - - - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,06/42] fs: add mount_setattr() idmapped mounts - 1 - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,05/42] fs: add attr_flags_to_mnt_flags helper idmapped mounts - 1 - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,04/42] fs: split out functions to hold writers idmapped mounts - 1 - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,03/42] namespace: only take read lock in do_reconfigure_mnt() idmapped mounts - 1 - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,02/42] mount: make {lock,unlock}_mount_hash() static idmapped mounts - 1 - --- 2021-01-12 Christian Brauner pcmoore Superseded
[v5,01/42] namespace: take lock_mount_hash() directly when changing flags idmapped mounts - 1 - --- 2021-01-12 Christian Brauner pcmoore Superseded
[testsuite] perf_event: update perf_event test for the new CAP_PERFMON capability [testsuite] perf_event: update perf_event test for the new CAP_PERFMON capability - - - --- 2021-01-12 Ondrej Mosnacek Superseded
python/sepolgen: allow any policy statement in ifndef python/sepolgen: allow any policy statement in ifndef - - - --- 2021-01-11 Vit Mojzis Superseded
[v2,1/1] mm/madvise: replace ptrace attach requirement for process_madvise [v2,1/1] mm/madvise: replace ptrace attach requirement for process_madvise 4 2 - --- 2021-01-11 Suren Baghdasaryan pcmoore Not Applicable
[v15,4/4] userfaultfd: use secure anon inodes for userfaultfd SELinux support for anonymous inodes and UFFD - 1 - --- 2021-01-08 Lokesh Gidra pcmoore Accepted
[v15,3/4] selinux: teach SELinux about anonymous inodes SELinux support for anonymous inodes and UFFD - - - --- 2021-01-08 Lokesh Gidra pcmoore Accepted
[v15,2/4] fs: add LSM-supporting anon-inode interface SELinux support for anonymous inodes and UFFD - 1 - --- 2021-01-08 Lokesh Gidra pcmoore Accepted
[v15,1/4] security: add inode_init_security_anon() LSM hook SELinux support for anonymous inodes and UFFD - 1 - --- 2021-01-08 Lokesh Gidra pcmoore Accepted
[1/1] mm/madvise: replace ptrace attach requirement for process_madvise [1/1] mm/madvise: replace ptrace attach requirement for process_madvise 1 - - --- 2021-01-08 Suren Baghdasaryan pcmoore Superseded
[2/2] libselinux: update getseuser [1/2] libselinux: accept const fromcon in get_context API - - - --- 2021-01-08 Christian Göttsche Accepted
[1/2] libselinux: accept const fromcon in get_context API [1/2] libselinux: accept const fromcon in get_context API - - - --- 2021-01-08 Christian Göttsche Accepted
[RFC,v2] selinux: security: Move selinux_state to a separate page [RFC,v2] selinux: security: Move selinux_state to a separate page - - - --- 2021-01-08 Preeti Nagar pcmoore Changes Requested
[RFC] selinux: ARM64: Move selinux_state to a separate page [RFC] selinux: ARM64: Move selinux_state to a separate page - - - --- 2021-01-08 Preeti Nagar Superseded
[v14,4/4] userfaultfd: use secure anon inodes for userfaultfd SELinux support for anonymous inodes and UFFD - 1 - --- 2021-01-08 Lokesh Gidra pcmoore Superseded
[v14,3/4] selinux: teach SELinux about anonymous inodes SELinux support for anonymous inodes and UFFD - - - --- 2021-01-08 Lokesh Gidra pcmoore Superseded
[v14,2/4] fs: add LSM-supporting anon-inode interface SELinux support for anonymous inodes and UFFD - 1 - --- 2021-01-08 Lokesh Gidra pcmoore Superseded
[v14,1/4] security: add inode_init_security_anon() LSM hook SELinux support for anonymous inodes and UFFD - 1 - --- 2021-01-08 Lokesh Gidra pcmoore Superseded
[v10,8/8] selinux: include a consumer of the new IMA critical data hook IMA: support for measuring kernel integrity critical data 1 1 - --- 2021-01-08 Tushar Sugandhi pcmoore Superseded
[v10,7/8] IMA: define a builtin critical data measurement policy IMA: support for measuring kernel integrity critical data - 2 - --- 2021-01-08 Tushar Sugandhi pcmoore Superseded
[v10,6/8] IMA: extend critical data hook to limit the measurement based on a label IMA: support for measuring kernel integrity critical data - 1 - --- 2021-01-08 Tushar Sugandhi pcmoore Superseded
[v10,5/8] IMA: limit critical data measurement based on a label IMA: support for measuring kernel integrity critical data - 1 - --- 2021-01-08 Tushar Sugandhi pcmoore Superseded
[v10,4/8] IMA: add policy rule to measure critical data IMA: support for measuring kernel integrity critical data - 2 - --- 2021-01-08 Tushar Sugandhi pcmoore Superseded
[v10,3/8] IMA: define a hook to measure kernel integrity critical data IMA: support for measuring kernel integrity critical data - 1 - --- 2021-01-08 Tushar Sugandhi pcmoore Superseded
[v10,2/8] IMA: add support to measure buffer data hash IMA: support for measuring kernel integrity critical data - 1 - --- 2021-01-08 Tushar Sugandhi pcmoore Superseded
[v10,1/8] IMA: generalize keyring specific measurement constructs IMA: support for measuring kernel integrity critical data - 1 - --- 2021-01-08 Tushar Sugandhi pcmoore Superseded
[v3,1/1] selinux-testsuite: Add userfaultfd test [v3,1/1] selinux-testsuite: Add userfaultfd test - - - --- 2021-01-08 Lokesh Gidra omos Accepted
[2/2] libsepol/cil: Fix heap-use-after-free in __class_reset_perm_values() [1/2] libsepol/cil: Update symtab nprim field when adding or removing datums - - - --- 2021-01-06 James Carter Accepted
[1/2] libsepol/cil: Update symtab nprim field when adding or removing datums [1/2] libsepol/cil: Update symtab nprim field when adding or removing datums - - - --- 2021-01-06 James Carter Accepted
newrole: preserve environment variable XDG_RUNTIME_DIR newrole: preserve environment variable XDG_RUNTIME_DIR - - - --- 2021-01-06 Christian Göttsche Rejected
[5/5] selinux: mark selinux_xfrm_refcount as __read_mostly Clean up SELinux global variables - - - --- 2021-01-06 Ondrej Mosnacek pcmoore Accepted
[4/5] selinux: mark some global variables __ro_after_init Clean up SELinux global variables - - - --- 2021-01-06 Ondrej Mosnacek pcmoore Accepted
[3/5] selinux: make selinuxfs_mount static Clean up SELinux global variables - - - --- 2021-01-06 Ondrej Mosnacek pcmoore Accepted
[2/5] selinux: drop the unnecessary aurule_callback variable Clean up SELinux global variables - - - --- 2021-01-06 Ondrej Mosnacek pcmoore Accepted
[1/5] selinux: remove unused global variables Clean up SELinux global variables - - - --- 2021-01-06 Ondrej Mosnacek pcmoore Accepted
[2/2] python/semanage: Sort imports in alphabetical order Untitled series #409857 1 - - --- 2021-01-06 Vit Mojzis Accepted
libsepol: destroy filename_trans list properly libsepol: destroy filename_trans list properly 1 - - --- 2021-01-06 Nicolas Iooss Accepted
[v2] libsepol/cil: fix NULL pointer dereference when parsing an improper integer [v2] libsepol/cil: fix NULL pointer dereference when parsing an improper integer 1 - - --- 2021-01-06 Nicolas Iooss Accepted
[v2] libsepol: ensure that decls hold consistent symbols when loading a binary policy [v2] libsepol: ensure that decls hold consistent symbols when loading a binary policy - - - --- 2021-01-06 Nicolas Iooss Superseded
libsepol/cil: Fix heap-use-after-free in __class_reset_perm_values() libsepol/cil: Fix heap-use-after-free in __class_reset_perm_values() - - - --- 2021-01-05 James Carter Superseded
selinux: fall back to SECURITY_FS_USE_GENFS if no xattr support selinux: fall back to SECURITY_FS_USE_GENFS if no xattr support - - - --- 2021-01-05 Ondrej Mosnacek pcmoore Changes Requested
python/semanage: empty stdout before exiting on BrokenPipeError python/semanage: empty stdout before exiting on BrokenPipeError 1 - - --- 2021-01-05 Vit Mojzis Accepted
[v4] proc: Allow pid_revalidate() during LOOKUP_RCU [v4] proc: Allow pid_revalidate() during LOOKUP_RCU - - - --- 2021-01-04 Stephen Brennan pcmoore Superseded
[4/4] libsepol/cil: propagate failure of cil_fill_list() [1/4] libsepol/cil: remove useless print statement - - - --- 2020-12-30 Nicolas Iooss Accepted
[3/4] libsepol/cil: do not add a stack variable to a list [1/4] libsepol/cil: remove useless print statement - - - --- 2020-12-30 Nicolas Iooss Accepted
[2/4] libsepol/cil: fix NULL pointer dereference when using an unused alias [1/4] libsepol/cil: remove useless print statement - - - --- 2020-12-30 Nicolas Iooss Accepted
[1/4] libsepol/cil: remove useless print statement [1/4] libsepol/cil: remove useless print statement - - - --- 2020-12-30 Nicolas Iooss Accepted
[1/1] GitHub Actions: run SELinux testsuite in Fedora virtual machine [1/1] GitHub Actions: run SELinux testsuite in Fedora virtual machine - - - --- 2020-12-30 Nicolas Iooss Accepted
[6/6] libsepol/cil: destroy perm_datums when __cil_resolve_perms fails [1/6] libsepol: do not decode out-of-bound rolebounds 1 - - --- 2020-12-30 Nicolas Iooss Accepted
[5/6] libsepol/cil: fix out-of-bound read in cil_print_recursive_blockinherit [1/6] libsepol: do not decode out-of-bound rolebounds 1 - - --- 2020-12-30 Nicolas Iooss Accepted
[4/6] libsepol/cil: fix NULL pointer dereference when parsing an improper integer [1/6] libsepol: do not decode out-of-bound rolebounds 1 - - --- 2020-12-30 Nicolas Iooss Superseded
[3/6] libsepol/cil: constify some strings [1/6] libsepol: do not decode out-of-bound rolebounds 1 - - --- 2020-12-30 Nicolas Iooss Accepted
[2/6] libsepol: ensure that hashtab_search is not called with a NULL key [1/6] libsepol: do not decode out-of-bound rolebounds - - - --- 2020-12-30 Nicolas Iooss Superseded
« 1 2 ... 33 34 35 … 87 88 »