Show patches with: Submitter = Ondrej Mosnacek       |    Archived = No       |   359 patches
« 1 2 3 4 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[2/2] selinux: fix SECURITY_LSM_NATIVE_LABELS flag handling on double mount vfs/security/NFS/btrfs: clean up and fix LSM option handling - - - --- 2021-04-09 Ondrej Mosnacek pcmoore New
[1/2] vfs,LSM: introduce the FS_HANDLES_LSM_OPTS flag vfs/security/NFS/btrfs: clean up and fix LSM option handling - - - --- 2021-04-09 Ondrej Mosnacek pcmoore New
[v3] selinux: fix race between old and new sidtab [v3] selinux: fix race between old and new sidtab - - - --- 2021-04-07 Ondrej Mosnacek pcmoore Accepted
[testsuite] Deactivate userfaultfd test policy if no xperm support [testsuite] Deactivate userfaultfd test policy if no xperm support - - - --- 2021-04-06 Ondrej Mosnacek omos Accepted
[v2] selinux: fix race between old and new sidtab [v2] selinux: fix race between old and new sidtab - - - --- 2021-04-06 Ondrej Mosnacek pcmoore Changes Requested
selinux: fix race between old and new sidtab selinux: fix race between old and new sidtab - - - --- 2021-04-05 Ondrej Mosnacek pcmoore Changes Requested
[v3,2/2] selinux: fix cond_list corruption when changing booleans selinux: fix changing booleans - - - --- 2021-04-02 Ondrej Mosnacek pcmoore Accepted
[v3,1/2] selinux: make nslot handling in avtab more robust selinux: fix changing booleans - - - --- 2021-04-02 Ondrej Mosnacek pcmoore Accepted
[v2,2/2] selinux: fix cond_list corruption when changing booleans selinux: fix changing booleans - - - --- 2021-04-01 Ondrej Mosnacek pcmoore Changes Requested
[v2,1/2] selinux: make nslot handling in avtab more robust selinux: fix changing booleans - - - --- 2021-04-01 Ondrej Mosnacek pcmoore Changes Requested
[3/3] selinux: constify some avtab function arguments selinux: fix changing booleans - - - --- 2021-03-30 Ondrej Mosnacek pcmoore New
[2/3] selinux: simplify duplicate_policydb_cond_list() by using kmemdup() selinux: fix changing booleans - - - --- 2021-03-30 Ondrej Mosnacek pcmoore New
[1/3] selinux: fix cond_list corruption when changing booleans selinux: fix changing booleans - - - --- 2021-03-30 Ondrej Mosnacek pcmoore Changes Requested
[testsuite] tests/userfaultfd: handle __NR_userfaultfd not being defined [testsuite] tests/userfaultfd: handle __NR_userfaultfd not being defined - - - --- 2021-03-24 Ondrej Mosnacek omos Accepted
[RFC,userspace,6/6] setfiles/restorecon: support parallel relabeling Parallel setfiles/restorecon - - - --- 2021-03-23 Ondrej Mosnacek New
[RFC,userspace,5/6] selinux_restorecon: introduce selinux_restorecon_parallel(3) Parallel setfiles/restorecon - - - --- 2021-03-23 Ondrej Mosnacek New
[RFC,userspace,4/6] selinux_restorecon: add a global mutex to synchronize progress output Parallel setfiles/restorecon - - - --- 2021-03-23 Ondrej Mosnacek New
[RFC,userspace,3/6] selinux_restorecon: introduce selinux_log_sync() Parallel setfiles/restorecon - - - --- 2021-03-23 Ondrej Mosnacek New
[RFC,userspace,2/6] selinux_restorecon: protect file_spec list with a mutex Parallel setfiles/restorecon - - - --- 2021-03-23 Ondrej Mosnacek New
[RFC,userspace,1/6] selinux_restorecon: simplify fl_head allocation by using calloc() Parallel setfiles/restorecon - - - --- 2021-03-23 Ondrej Mosnacek New
[userspace] policycoreutils/setfiles: do not create useless setfiles.8.man file [userspace] policycoreutils/setfiles: do not create useless setfiles.8.man file - - - --- 2021-03-19 Ondrej Mosnacek New
[v3,3/3] selinuxfs: unify policy load error reporting selinux: policy load fixes - - - --- 2021-03-18 Ondrej Mosnacek Accepted
[v3,2/3] selinux: fix variable scope issue in live sidtab conversion selinux: policy load fixes - 1 1 --- 2021-03-18 Ondrej Mosnacek Accepted
[v3,1/3] selinux: don't log MAC_POLICY_LOAD record on failed policy load selinux: policy load fixes - - - --- 2021-03-18 Ondrej Mosnacek Accepted
xfs: use has_capability_noaudit() instead of capable() where appropriate xfs: use has_capability_noaudit() instead of capable() where appropriate - - - --- 2021-03-16 Ondrej Mosnacek pcmoore Changes Requested
[v2] vfs: fix fsconfig(2) LSM mount option handling for btrfs [v2] vfs: fix fsconfig(2) LSM mount option handling for btrfs - - 1 --- 2021-03-16 Ondrej Mosnacek pcmoore Changes Requested
[testsuite,3/3] perf_event: fix CAP_SYS_ADMIN references perf_event: fixes and cleanups - - - --- 2021-03-02 Ondrej Mosnacek omos Accepted
[testsuite,2/3] perf_event: fix wrong use of perf_event_open(2) API perf_event: fixes and cleanups - - - --- 2021-03-02 Ondrej Mosnacek omos Accepted
[testsuite,1/3] perf_event: measure CPU 0 rather than CPU 1 perf_event: fixes and cleanups - - - --- 2021-03-02 Ondrej Mosnacek omos Accepted
[testsuite] lockdown: use debugfs/tracefs to test lockdown permissions [testsuite] lockdown: use debugfs/tracefs to test lockdown permissions - - - --- 2021-03-02 Ondrej Mosnacek omos Accepted
[userspace] fixfiles: do not exclude /dev and /run in -C mode [userspace] fixfiles: do not exclude /dev and /run in -C mode - - - --- 2021-03-01 Ondrej Mosnacek New
perf/core: fix unconditional security_locked_down() call perf/core: fix unconditional security_locked_down() call - 1 - --- 2021-02-24 Ondrej Mosnacek pcmoore Accepted
[v2,2/2] selinux: fix variable scope issue in live sidtab conversion selinux: policy load fixes - 1 1 --- 2021-02-12 Ondrej Mosnacek pcmoore Changes Requested
[v2,1/2] selinux: don't log MAC_POLICY_LOAD record on failed policy load selinux: policy load fixes - - - --- 2021-02-12 Ondrej Mosnacek pcmoore Changes Requested
selinux: fix variable scope issue in live sidtab conversion selinux: fix variable scope issue in live sidtab conversion - - - --- 2021-02-08 Ondrej Mosnacek pcmoore Changes Requested
[testsuite] ci: run testsuite also against the secnext kernel [testsuite] ci: run testsuite also against the secnext kernel - - - --- 2021-01-25 Ondrej Mosnacek omos Accepted
[testsuite] test_userfaultfd.te: grant test_uffd_domain CAP_SYS_PTRACE [testsuite] test_userfaultfd.te: grant test_uffd_domain CAP_SYS_PTRACE - 1 - --- 2021-01-25 Ondrej Mosnacek omos Accepted
[testsuite,2/2] Migrate CI to GH Actions Migrate CI to GH Actions - - - --- 2021-01-22 Ondrej Mosnacek omos Accepted
[testsuite,1/2] check-syntax: use 'command -v' instead of 'which' Migrate CI to GH Actions 1 - - --- 2021-01-22 Ondrej Mosnacek omos Accepted
[testsuite] Makefile: unload policy when testsuite fails [testsuite] Makefile: unload policy when testsuite fails - - - --- 2021-01-19 Ondrej Mosnacek omos Rejected
NFSv4.2: fix return value of _nfs4_get_security_label() NFSv4.2: fix return value of _nfs4_get_security_label() - 2 - --- 2021-01-15 Ondrej Mosnacek pcmoore Accepted
[v2] selinux: fall back to SECURITY_FS_USE_GENFS if no xattr support [v2] selinux: fall back to SECURITY_FS_USE_GENFS if no xattr support - - - --- 2021-01-13 Ondrej Mosnacek pcmoore Accepted
[testsuite] tests/sysctl: use vm.swappiness instead of kernel.modprobe [testsuite] tests/sysctl: use vm.swappiness instead of kernel.modprobe - - - --- 2021-01-13 Ondrej Mosnacek omos Accepted
[testsuite,v2] perf_event: update perf_event test for the new CAP_PERFMON capability [testsuite,v2] perf_event: update perf_event test for the new CAP_PERFMON capability - - - --- 2021-01-13 Ondrej Mosnacek omos Accepted
[testsuite] perf_event: update perf_event test for the new CAP_PERFMON capability [testsuite] perf_event: update perf_event test for the new CAP_PERFMON capability - - - --- 2021-01-12 Ondrej Mosnacek Superseded
[5/5] selinux: mark selinux_xfrm_refcount as __read_mostly Clean up SELinux global variables - - - --- 2021-01-06 Ondrej Mosnacek pcmoore Accepted
[4/5] selinux: mark some global variables __ro_after_init Clean up SELinux global variables - - - --- 2021-01-06 Ondrej Mosnacek pcmoore Accepted
[3/5] selinux: make selinuxfs_mount static Clean up SELinux global variables - - - --- 2021-01-06 Ondrej Mosnacek pcmoore Accepted
[2/5] selinux: drop the unnecessary aurule_callback variable Clean up SELinux global variables - - - --- 2021-01-06 Ondrej Mosnacek pcmoore Accepted
[1/5] selinux: remove unused global variables Clean up SELinux global variables - - - --- 2021-01-06 Ondrej Mosnacek pcmoore Accepted
selinux: fall back to SECURITY_FS_USE_GENFS if no xattr support selinux: fall back to SECURITY_FS_USE_GENFS if no xattr support - - - --- 2021-01-05 Ondrej Mosnacek pcmoore Changes Requested
[userspace] travis: run only selinux-testsuite [userspace] travis: run only selinux-testsuite - - - --- 2020-11-27 Ondrej Mosnacek omos Accepted
vfs: fix fsconfig(2) LSM mount option handling for btrfs vfs: fix fsconfig(2) LSM mount option handling for btrfs - - 1 --- 2020-11-18 Ondrej Mosnacek pcmoore Superseded
[userspace] ci: add new dependencies needed by selinux-testsuite [userspace] ci: add new dependencies needed by selinux-testsuite - - - --- 2020-11-12 Ondrej Mosnacek Accepted
[userspace,v2,3/3] selinux_config(5): add a note that runtime disable is deprecated Update manpages to reflect that runtime SELinux disable is deprecated 1 - - --- 2020-11-11 Ondrej Mosnacek Accepted
[userspace,v2,2/3] selinux(8): explain that runtime disable is deprecated Update manpages to reflect that runtime SELinux disable is deprecated - - - --- 2020-11-11 Ondrej Mosnacek Accepted
[userspace,v2,1/3] selinux(8): mark up SELINUX values Update manpages to reflect that runtime SELinux disable is deprecated - - - --- 2020-11-11 Ondrej Mosnacek Accepted
[userspace] selinux(8): explain that runtime disable is deprecated [userspace] selinux(8): explain that runtime disable is deprecated - - - --- 2020-11-11 Ondrej Mosnacek Superseded
selinux: drop super_block backpointer from superblock_security_struct selinux: drop super_block backpointer from superblock_security_struct - - - --- 2020-11-04 Ondrej Mosnacek pcmoore Accepted
[testsuite] tests/overlay: replace Python script with a C program [testsuite] tests/overlay: replace Python script with a C program - - - --- 2020-11-04 Ondrej Mosnacek omos Accepted
[testsuite] tests/Makefile: silence modprobe output [testsuite] tests/Makefile: silence modprobe output - - - --- 2020-11-04 Ondrej Mosnacek omos Accepted
[testsuite] travis: handle the case of multiple rawhide images [testsuite] travis: handle the case of multiple rawhide images - - - --- 2020-11-02 Ondrej Mosnacek omos Accepted
[testsuite] travis: fix kernel update check [testsuite] travis: fix kernel update check - - - --- 2020-11-02 Ondrej Mosnacek omos Accepted
[userspace] ci: bump Fedora image version to 33 [userspace] ci: bump Fedora image version to 33 - - - --- 2020-11-02 Ondrej Mosnacek Superseded
[testsuite,v2,4/4] tests/[fs_]filesystem: test all filesystems Test all filesystems by default - - - --- 2020-11-02 Ondrej Mosnacek omos Accepted
[testsuite,v2,3/4] tests/[fs_]filesystem: fix unwanted error output when testing vfat Test all filesystems by default - - - --- 2020-11-02 Ondrej Mosnacek omos Accepted
[testsuite,v2,2/4] tests/filesystem: pipe "yes" to mkfs.* to fix jfs test Test all filesystems by default - - - --- 2020-11-02 Ondrej Mosnacek omos Accepted
[testsuite,v2,1/4] README,travis: add e2fsprogs, jfsutils, and dosfstools to deps Test all filesystems by default - - - --- 2020-11-02 Ondrej Mosnacek omos Accepted
[testsuite] travis: bump stable fedora version to 33 [testsuite] travis: bump stable fedora version to 33 - - - --- 2020-10-31 Ondrej Mosnacek omos Accepted
[testsuite,3/3] tests/[fs_]filesystem: test all filesystems Test all filesystems by default - - - --- 2020-10-31 Ondrej Mosnacek Superseded
[testsuite,2/3] tests/filesystem: pipe "yes" to mkfs.* to fix jfs test Test all filesystems by default - - - --- 2020-10-31 Ondrej Mosnacek Superseded
[testsuite,1/3] README,travis: add e2fsprogs, jfsutils, and dosfstools to deps Test all filesystems by default - - - --- 2020-10-31 Ondrej Mosnacek Superseded
[testsuite] travis: skip kernel update+reboot if it's not necessary [testsuite] travis: skip kernel update+reboot if it's not necessary - - - --- 2020-10-30 Ondrej Mosnacek omos Accepted
[userspace,v2] ci: use parallel build [userspace,v2] ci: use parallel build - - - --- 2020-10-30 Ondrej Mosnacek omos Accepted
[userspace] ci: use parallel build [userspace] ci: use parallel build - - - --- 2020-10-30 Ondrej Mosnacek Superseded
test_sctp.te: avoid use of corenet_sctp_bind_generic_node() test_sctp.te: avoid use of corenet_sctp_bind_generic_node() - - - --- 2020-10-29 Ondrej Mosnacek omos Accepted
[2/2] tests/sctp: set up a GRE tunnel to activate ASCONF tests Fix ASCONF test and ensure it can be always run 1 - - --- 2020-10-21 Ondrej Mosnacek omos Accepted
[1/2] tests/sctp: fix a race condition in the new ASCONF test Fix ASCONF test and ensure it can be always run 1 - - --- 2020-10-21 Ondrej Mosnacek omos Accepted
[testsuite] travis: update the kernel and reboot before running the suite [testsuite] travis: update the kernel and reboot before running the suite - - - --- 2020-10-21 Ondrej Mosnacek omos Accepted
[testsuite,1/1] tests/keys: fix the KEYCTL_DH_COMPUTE parameter values [testsuite,1/1] tests/keys: fix the KEYCTL_DH_COMPUTE parameter values - - - --- 2020-10-14 Ondrej Mosnacek omos Accepted
[testsuite] tests/Makefile: add kernel version check for watchkey [testsuite] tests/Makefile: add kernel version check for watchkey 1 - - --- 2020-09-03 Ondrej Mosnacek omos Accepted
[v3] selinux: simplify away security_policydb_len() [v3] selinux: simplify away security_policydb_len() 1 - - --- 2020-08-27 Ondrej Mosnacek Accepted
[testsuite] travis: add nftables to dependencies to run more tests [testsuite] travis: add nftables to dependencies to run more tests 1 - - --- 2020-08-27 Ondrej Mosnacek omos Accepted
[testsuite] tests/sctp: bump connect timeout to 4 seconds [testsuite] tests/sctp: bump connect timeout to 4 seconds 1 - - --- 2020-08-27 Ondrej Mosnacek omos Accepted
[v2,3/3] selinux: remove the 'initialized' flag from selinux_state selinux: RCU conversion follow-ups 1 - - --- 2020-08-26 Ondrej Mosnacek pcmoore Changes Requested
[v2,2/3] selinux: eliminate the redundant policycap array selinux: RCU conversion follow-ups - - - --- 2020-08-26 Ondrej Mosnacek pcmoore Changes Requested
[v2,1/3] selinux: simplify away security_policydb_len() selinux: RCU conversion follow-ups 1 - - --- 2020-08-26 Ondrej Mosnacek pcmoore Changes Requested
[RFC,3/3] selinux: track policy lifetime with refcount selinux: RCU conversion follow-ups - - - --- 2020-08-25 Ondrej Mosnacek Superseded
[RFC,2/3] selinux: remove the 'initialized' flag from selinux_state selinux: RCU conversion follow-ups - - - --- 2020-08-25 Ondrej Mosnacek Superseded
[RFC,1/3] selinux: simplify away security_policydb_len() selinux: RCU conversion follow-ups - - - --- 2020-08-25 Ondrej Mosnacek Superseded
[v2,2/2] selinux: drop the gfp_t argument from str_read() selinux: Clean up GFP flag usage - - - --- 2020-08-25 Ondrej Mosnacek pcmoore Changes Requested
[v2,1/2] selinux: switch unnecessary GFP_ATOMIC allocs to GFP_KERNEL selinux: Clean up GFP flag usage - - - --- 2020-08-25 Ondrej Mosnacek pcmoore Changes Requested
[2/2] selinux: drop the gfp_t argument from str_read() selinux: Clean up GFP flag usage - - - --- 2020-08-24 Ondrej Mosnacek Superseded
[1/2] selinux: switch unnecessary GFP_ATOMIC allocs to GFP_KERNEL selinux: Clean up GFP flag usage - - - --- 2020-08-24 Ondrej Mosnacek Superseded
[2/2] selinux: fix a race condition in sel_open_policy() Fix race conditions when reading out policy data - - - --- 2020-08-24 Ondrej Mosnacek pcmoore Changes Requested
[1/2] selinux: fix a race condition in security_read_policy() Fix race conditions when reading out policy data - - - --- 2020-08-24 Ondrej Mosnacek pcmoore Rejected
selinux: fix a race condition in security_read_policy() selinux: fix a race condition in security_read_policy() - - - --- 2020-08-21 Ondrej Mosnacek Superseded
[testsuite,v3,2/2] travis: run the full testsuite on a Fedora VM Run full testsuite on Fedora in Travis CI 1 - - --- 2020-08-20 Ondrej Mosnacek omos Accepted
[testsuite,v3,1/2] README: add perl-lib as a dependency Run full testsuite on Fedora in Travis CI 1 - - --- 2020-08-20 Ondrej Mosnacek omos Accepted
[testsuite,v2,2/2] travis: run the full testsuite on a Fedora VM Run full testsuite on Fedora in Travis CI - - - --- 2020-08-11 Ondrej Mosnacek sds Superseded
« 1 2 3 4 »