Show patches with: Submitter = Ondrej Mosnacek       |    Archived = No       |   523 patches
« 1 2 3 4 … 5 6 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
selinux: clarify return code in filename_trans_read_helper_compat() selinux: clarify return code in filename_trans_read_helper_compat() - - - --- 2024-04-04 Ondrej Mosnacek pcmoore Accepted
[testsuite] tests/inet_socket: test CALIPSO also with datagram protocols [testsuite] tests/inet_socket: test CALIPSO also with datagram protocols - - - --- 2024-02-12 Ondrej Mosnacek omos Accepted
[testsuite] policy: fix testsuite_domain_type_minimal() to work with rpm-ostree [testsuite] policy: fix testsuite_domain_type_minimal() to work with rpm-ostree - - - --- 2024-02-08 Ondrej Mosnacek omos Accepted
[v3] selinux: introduce an initial SID for early boot processes [v3] selinux: introduce an initial SID for early boot processes - 1 1 --- 2023-11-14 Ondrej Mosnacek pcmoore Accepted
selinux: fix handling of empty opts in selinux_fs_context_submount() selinux: fix handling of empty opts in selinux_fs_context_submount() - 2 - --- 2023-09-11 Ondrej Mosnacek pcmoore Accepted
[testsuite] policy: allow all test domains to search user/admin home directories [testsuite] policy: allow all test domains to search user/admin home directories - - 1 --- 2023-07-17 Ondrej Mosnacek omos Accepted
[v2] selinux: introduce an initial SID for early boot processes [v2] selinux: introduce an initial SID for early boot processes - - - --- 2023-06-20 Ondrej Mosnacek pcmoore Accepted
[testsuite] tests/inet_socket: cover the MPTCP protocol [testsuite] tests/inet_socket: cover the MPTCP protocol - - - --- 2023-06-19 Ondrej Mosnacek omos Accepted
[userspace,2/2] libsepol: add support for the new "init" initial SID Introduce an initial SID for early boot processes - - - --- 2023-06-12 Ondrej Mosnacek bachradsusi Accepted
[userspace,1/2] libsepol: stop translating deprecated intial SIDs to strings Introduce an initial SID for early boot processes 1 - - --- 2023-06-12 Ondrej Mosnacek bachradsusi Accepted
selinux: make labeled NFS work when mounted before policy load selinux: make labeled NFS work when mounted before policy load - - 1 --- 2023-05-29 Ondrej Mosnacek pcmoore Accepted
selinux: fix Makefile dependencies of flask.h selinux: fix Makefile dependencies of flask.h 1 - - --- 2023-04-12 Ondrej Mosnacek pcmoore Accepted
[userspace] scripts/ci: install rdma-core-devel for selinux-testsuite [userspace] scripts/ci: install rdma-core-devel for selinux-testsuite 1 - - --- 2023-03-20 Ondrej Mosnacek omos Accepted
[testsuite] tests/atsecure: avoid running bash under test domains [testsuite] tests/atsecure: avoid running bash under test domains - - - --- 2023-03-14 Ondrej Mosnacek omos Accepted
[userspace] libsemanage: include more parameters in the module checksum [userspace] libsemanage: include more parameters in the module checksum 1 - - --- 2023-03-09 Ondrej Mosnacek bachradsusi Accepted
[testsuite,3/3] tests/infiniband*: simplify test activation Infiniband test fixes/improvements - - - --- 2023-03-03 Ondrej Mosnacek omos Accepted
[testsuite,2/3] policy: allow test_ibpkey_access_t to use RDMA netlink sockets Infiniband test fixes/improvements - - - --- 2023-03-03 Ondrej Mosnacek omos Accepted
[testsuite,1/3] policy: make sure test_ibpkey_access_t can lock enough memory Infiniband test fixes/improvements - - - --- 2023-03-03 Ondrej Mosnacek omos Accepted
[testsuite] tests/file: make the SIGIO tests work with CONFIG_LEGACY_TIOCSTI=n [testsuite] tests/file: make the SIGIO tests work with CONFIG_LEGACY_TIOCSTI=n - 1 - --- 2023-03-01 Ondrej Mosnacek omos Accepted
[testsuite] tests/filesystem: use native quota support for ext4 [testsuite] tests/filesystem: use native quota support for ext4 - - - --- 2023-01-10 Ondrej Mosnacek omos Accepted
[testsuite] tests/keys: remove extraneous zero byte from the DH prime [testsuite] tests/keys: remove extraneous zero byte from the DH prime - - - --- 2023-01-09 Ondrej Mosnacek omos Accepted
[testsuite] policy: allow user_namespace::create where appropriate [testsuite] policy: allow user_namespace::create where appropriate - - - --- 2022-12-09 Ondrej Mosnacek omos Accepted
[testsuite,4/4] ci: bump Fedora versions Bump Fedora versions in CI - - - --- 2022-12-08 Ondrej Mosnacek omos Accepted
[testsuite,3/4] tests/execshare: remove special cases for arcane architectures Bump Fedora versions in CI - - - --- 2022-12-08 Ondrej Mosnacek omos Accepted
[testsuite,2/4] tests: use correct type for context string variables Bump Fedora versions in CI - - - --- 2022-12-08 Ondrej Mosnacek omos Accepted
[testsuite,1/4] tests: adapt style to new perltidy Bump Fedora versions in CI - - - --- 2022-12-08 Ondrej Mosnacek omos Accepted
[testsuite] tests/Makefile: add missing condition for userfaultfd test [testsuite] tests/Makefile: add missing condition for userfaultfd test - - - --- 2022-09-02 Ondrej Mosnacek omos Accepted
[testsuite] tests: remove more stray flag/temporary files with 'make clean' [testsuite] tests: remove more stray flag/temporary files with 'make clean' - - - --- 2022-08-26 Ondrej Mosnacek omos Accepted
[testsuite,2/2] test_userfaultfd.te: adapt to upcoming Fedora policy changes Prepare userfaultfd policy for Fedora policy changes - 1 - --- 2022-08-24 Ondrej Mosnacek omos Accepted
[testsuite,1/2] policy: remove CIL workarounds for missing anon_inode class Prepare userfaultfd policy for Fedora policy changes - - - --- 2022-08-24 Ondrej Mosnacek omos Accepted
[testsuite] tests/module_load: detect the linker to use for module build [testsuite] tests/module_load: detect the linker to use for module build - - - --- 2022-07-18 Ondrej Mosnacek omos Accepted
[testsuite,2/2] tests/keys: fix Makefile dependencies Make the keys test pass in FIPS mode - - - --- 2022-06-28 Ondrej Mosnacek omos Accepted
[testsuite,1/2] tests/keys: use a longer prime in DH params Make the keys test pass in FIPS mode - - - --- 2022-06-28 Ondrej Mosnacek omos Accepted
[userspace,2/2] semodule: rename --rebuild-if-modules-changed to --refresh Refine semantics of libsemanage's check_ext_changes - - - --- 2022-06-08 Ondrej Mosnacek Accepted
[userspace,1/2] libsemanage: always write kernel policy when check_ext_changes is specified Refine semantics of libsemanage's check_ext_changes 1 - - --- 2022-06-08 Ondrej Mosnacek Accepted
[testsuite] tests/sctp: temporarily disable ASCONF tests [testsuite] tests/sctp: temporarily disable ASCONF tests - - - --- 2022-06-02 Ondrej Mosnacek omos Accepted
selinux: fix bad cleanup on error in hashtab_duplicate() selinux: fix bad cleanup on error in hashtab_duplicate() - - - --- 2022-05-17 Ondrej Mosnacek pcmoore Accepted
[userspace,v4,2/2] libsepol,checkpolicy: add support for self keyword in type transitions Support the 'self' keyword in type transitions - - - --- 2022-05-13 Ondrej Mosnacek Accepted
[userspace,v4,1/2] libsepol/cil: add support for self keyword in type transitions Support the 'self' keyword in type transitions - - - --- 2022-05-13 Ondrej Mosnacek Accepted
[userspace,v3,2/2] libsepol,checkpolicy: add support for self keyword in type transitions Support the 'self' keyword in type transitions - - - --- 2022-05-10 Ondrej Mosnacek Accepted
[userspace,v3,1/2] libsepol/cil: add support for self keyword in type transitions Support the 'self' keyword in type transitions - - - --- 2022-05-10 Ondrej Mosnacek Accepted
[userspace,v2,2/2] libsepol,checkpolicy: add support for self keyword in type transitions Support the 'self' keyword in type transitions - - - --- 2022-04-26 Ondrej Mosnacek Accepted
[userspace,v2,1/2] libsepol/cil: add support for self keyword in type transitions Support the 'self' keyword in type transitions - - - --- 2022-04-26 Ondrej Mosnacek Accepted
[testsuite,2/2] tests/ioctl: adjust size of variable passed to ioctl(2) FIOQSIZE followup fixes - - - --- 2022-04-21 Ondrej Mosnacek omos Accepted
[testsuite,1/2] policy/test_ioctl_xperms.te: add ioctl numbers for other arches FIOQSIZE followup fixes - - - --- 2022-04-21 Ondrej Mosnacek omos Accepted
[testsuite,2/2] tests: check more thoroughly for SCTP support Make SCTP and Bluetooth support optional - - - --- 2022-04-13 Ondrej Mosnacek omos Accepted
[testsuite,1/2] tests/extended_socket_class: make Bluetooth support optional Make SCTP and Bluetooth support optional - - - --- 2022-04-13 Ondrej Mosnacek omos Accepted
[testsuite,v4] tests/sctp: add client peeloff tests [testsuite,v4] tests/sctp: add client peeloff tests - - 1 --- 2022-04-13 Ondrej Mosnacek omos Accepted
selinux: fix misuse of mutex_is_locked() selinux: fix misuse of mutex_is_locked() - - - --- 2022-02-21 Ondrej Mosnacek pcmoore Accepted
[testsuite] tests/bpf: use new API if version >= 0.6 [testsuite] tests/bpf: use new API if version >= 0.6 - - - --- 2022-02-18 Ondrej Mosnacek Accepted
[net,v3,2/2] security: implement sctp_assoc_established hook in selinux security: fixups for the security hooks in sctp - - - --- 2022-02-12 Ondrej Mosnacek pcmoore Accepted
[net,v3,1/2] security: add sctp_assoc_established hook security: fixups for the security hooks in sctp - - - --- 2022-02-12 Ondrej Mosnacek pcmoore Accepted
[userspace,v2,6/6] semodule: add command-line option to detect module changes Optionally rebuild policy store only if there were external changes to modules - - - --- 2022-02-03 Ondrej Mosnacek Accepted
[userspace,v2,5/6] libsemanage: optionally rebuild policy when modules are changed externally Optionally rebuild policy store only if there were external changes to modules - - - --- 2022-02-03 Ondrej Mosnacek Accepted
[userspace,v2,4/6] libsemanage: clean up semanage_direct_commit() a bit Optionally rebuild policy store only if there were external changes to modules - - - --- 2022-02-03 Ondrej Mosnacek Accepted
[userspace,v2,3/6] libsemanage: move compressed file handling into a separate object Optionally rebuild policy store only if there were external changes to modules - - - --- 2022-02-03 Ondrej Mosnacek Accepted
[userspace,v2,2/6] semodule,libsemanage: move module hashing into libsemanage Optionally rebuild policy store only if there were external changes to modules - - - --- 2022-02-03 Ondrej Mosnacek Accepted
[userspace,v2,1/6] libsemanage: add missing include to boolean_record.c Optionally rebuild policy store only if there were external changes to modules 1 - - --- 2022-02-03 Ondrej Mosnacek Accepted
selinux: parse contexts for mount options early selinux: parse contexts for mount options early - - - --- 2022-02-02 Ondrej Mosnacek pcmoore Accepted
security,selinux: remove security_add_mnt_opt() security,selinux: remove security_add_mnt_opt() 1 1 - --- 2021-12-06 Ondrej Mosnacek pcmoore Accepted
selinux: fix NULL-pointer dereference when hashtab allocation fails selinux: fix NULL-pointer dereference when hashtab allocation fails - - - --- 2021-11-19 Ondrej Mosnacek pcmoore Accepted
[userspace,v4,8/8] setfiles/restorecon: support parallel relabeling Parallel setfiles/restorecon - - - --- 2021-10-26 Ondrej Mosnacek Accepted
[userspace,v4,7/8] selinux_restorecon: introduce selinux_restorecon_parallel(3) Parallel setfiles/restorecon - - - --- 2021-10-26 Ondrej Mosnacek Accepted
[userspace,v4,6/8] selinux_restorecon: add a global mutex to synchronize progress output Parallel setfiles/restorecon - - - --- 2021-10-26 Ondrej Mosnacek Accepted
[userspace,v4,5/8] libselinux: make is_context_customizable() thread-safe Parallel setfiles/restorecon - - 1 --- 2021-10-26 Ondrej Mosnacek Accepted
[userspace,v4,4/8] libselinux: make selinux_log() thread-safe Parallel setfiles/restorecon - - - --- 2021-10-26 Ondrej Mosnacek Accepted
[userspace,v4,3/8] selinux_restorecon: protect file_spec list with a mutex Parallel setfiles/restorecon - - - --- 2021-10-26 Ondrej Mosnacek Accepted
[userspace,v4,2/8] selinux_restorecon: simplify fl_head allocation by using calloc() Parallel setfiles/restorecon - - - --- 2021-10-26 Ondrej Mosnacek Accepted
[userspace,v4,1/8] label_file: fix a data race Parallel setfiles/restorecon - - - --- 2021-10-26 Ondrej Mosnacek Accepted
[testsuite,v2] tests: make kernel iptables support optional [testsuite,v2] tests: make kernel iptables support optional - - - --- 2021-10-25 Ondrej Mosnacek omos Accepted
[testsuite] Remove the lockdown test [testsuite] Remove the lockdown test - - - --- 2021-09-30 Ondrej Mosnacek omos Accepted
[testsuite] tests/perf_event: don't assume CPU#0 is online [testsuite] tests/perf_event: don't assume CPU#0 is online - - - --- 2021-09-23 Ondrej Mosnacek omos Accepted
[v4] lockdown,selinux: fix wrong subject in some SELinux lockdown checks [v4] lockdown,selinux: fix wrong subject in some SELinux lockdown checks 3 - - --- 2021-09-13 Ondrej Mosnacek pcmoore Accepted
[testsuite,v2] tests: exclude vsock_socket test where it wouldn't build [testsuite,v2] tests: exclude vsock_socket test where it wouldn't build - - - --- 2021-09-08 Ondrej Mosnacek omos Accepted
[testsuite,2/2] tests/module_load: use the right compiler to build kernel modules [testsuite,1/2] tests/module_load: simplify the clean target - - - --- 2021-09-06 Ondrej Mosnacek omos Accepted
[testsuite,1/2] tests/module_load: simplify the clean target [testsuite,1/2] tests/module_load: simplify the clean target - - - --- 2021-09-06 Ondrej Mosnacek omos Accepted
[userspace] libsepol/cil: remove obsolete comment [userspace] libsepol/cil: remove obsolete comment 1 - - --- 2021-08-05 Ondrej Mosnacek Accepted
[testsuite] tests/capable_sys: skip test_rawio on BTRFS [testsuite] tests/capable_sys: skip test_rawio on BTRFS - - - --- 2021-08-04 Ondrej Mosnacek omos Accepted
selinux: fix race condition when computing ocontext SIDs selinux: fix race condition when computing ocontext SIDs - - - --- 2021-07-28 Ondrej Mosnacek pcmoore Accepted
[v2] lsm_audit,selinux: pass IB device name by reference [v2] lsm_audit,selinux: pass IB device name by reference 1 - - --- 2021-05-12 Ondrej Mosnacek pcmoore Accepted
[userspace,2/2] scripts/ci: use F34 image instead of F33 Bump testsuite CI image to F34 1 - - --- 2021-05-12 Ondrej Mosnacek Accepted
[v2] debugfs: fix security_locked_down() call for SELinux [v2] debugfs: fix security_locked_down() call for SELinux - - - --- 2021-05-07 Ondrej Mosnacek pcmoore Accepted
serial: core: fix suspicious security_locked_down() call serial: core: fix suspicious security_locked_down() call 1 - - --- 2021-05-07 Ondrej Mosnacek pcmoore Accepted
[testsuite] ci: test also on F34 images [testsuite] ci: test also on F34 images - - - --- 2021-05-01 Ondrej Mosnacek Accepted
[testsuite] tests/lockdown: use /sys/kernel/debug/fault_around_bytes for integrity test [testsuite] tests/lockdown: use /sys/kernel/debug/fault_around_bytes for integrity test - - - --- 2021-05-01 Ondrej Mosnacek Accepted
[testsuite] policy: only define anon_inode class if not defined in system policy [testsuite] policy: only define anon_inode class if not defined in system policy - - - --- 2021-04-30 Ondrej Mosnacek omos Accepted
[v3] selinux: fix race between old and new sidtab [v3] selinux: fix race between old and new sidtab - - - --- 2021-04-07 Ondrej Mosnacek pcmoore Accepted
[testsuite] Deactivate userfaultfd test policy if no xperm support [testsuite] Deactivate userfaultfd test policy if no xperm support - - - --- 2021-04-06 Ondrej Mosnacek omos Accepted
[v3,2/2] selinux: fix cond_list corruption when changing booleans selinux: fix changing booleans - - - --- 2021-04-02 Ondrej Mosnacek pcmoore Accepted
[v3,1/2] selinux: make nslot handling in avtab more robust selinux: fix changing booleans - - - --- 2021-04-02 Ondrej Mosnacek pcmoore Accepted
[3/3] selinux: constify some avtab function arguments selinux: fix changing booleans - - - --- 2021-03-30 Ondrej Mosnacek pcmoore Accepted
[2/3] selinux: simplify duplicate_policydb_cond_list() by using kmemdup() selinux: fix changing booleans - - - --- 2021-03-30 Ondrej Mosnacek pcmoore Accepted
[testsuite] tests/userfaultfd: handle __NR_userfaultfd not being defined [testsuite] tests/userfaultfd: handle __NR_userfaultfd not being defined - - - --- 2021-03-24 Ondrej Mosnacek omos Accepted
[userspace] policycoreutils/setfiles: do not create useless setfiles.8.man file [userspace] policycoreutils/setfiles: do not create useless setfiles.8.man file 1 - - --- 2021-03-19 Ondrej Mosnacek Accepted
[v3,3/3] selinuxfs: unify policy load error reporting selinux: policy load fixes - - - --- 2021-03-18 Ondrej Mosnacek Accepted
[v3,2/3] selinux: fix variable scope issue in live sidtab conversion selinux: policy load fixes - 1 1 --- 2021-03-18 Ondrej Mosnacek Accepted
[v3,1/3] selinux: don't log MAC_POLICY_LOAD record on failed policy load selinux: policy load fixes - - - --- 2021-03-18 Ondrej Mosnacek Accepted
[testsuite,3/3] perf_event: fix CAP_SYS_ADMIN references perf_event: fixes and cleanups - - - --- 2021-03-02 Ondrej Mosnacek omos Accepted
[testsuite,2/3] perf_event: fix wrong use of perf_event_open(2) API perf_event: fixes and cleanups - - - --- 2021-03-02 Ondrej Mosnacek omos Accepted
[testsuite,1/3] perf_event: measure CPU 0 rather than CPU 1 perf_event: fixes and cleanups - - - --- 2021-03-02 Ondrej Mosnacek omos Accepted
« 1 2 3 4 … 5 6 »