SELinux Archive mirror
 help / color / mirror / Atom feed
[PATCH] sandbox/seunshare: check owner in seunshare_mount_file()
 2026-05-15 15:14 UTC 

[PATCH] gui: do not load from cwd and properly quote inputs
 2026-05-15 14:45 UTC 

[PATCH] dbus/selinux_server.py: validate policy config value
 2026-05-15 14:34 UTC 

[PATCH] sandbox/seunshare: remount /tmp and /var/tmp with the proper flags
 2026-05-15 14:11 UTC  (3+ messages)

[PATCH] sandbox/seunshare: fix error checking for setfsuid()
 2026-05-15 14:08 UTC  (3+ messages)

[PATCH] sandbox/seunshare: switch seunshare_mount_file() to use open()
 2026-05-15 14:08 UTC  (4+ messages)

[PATCH v2] restorecon: Only log error on readonly fs (bsc#1232226)
 2026-05-15 14:07 UTC  (3+ messages)

[PATCH] checkpolicy/test: Show all options for dispol and dismod in -h
 2026-05-15 14:06 UTC  (3+ messages)

[PATCH] cil_reference_guide: update specification for valid symbols
 2026-05-15 14:04 UTC  (3+ messages)

[PATCH] python/sepolicy: Maybe fix CI build failures
 2026-05-15 14:01 UTC  (2+ messages)

[PATCH RFC 0/5] memcg: dma-buf per-cgroup accounting via pid_fd
 2026-05-15 13:53 UTC  (15+ messages)
` [PATCH RFC 1/5] memcg: Track exported dma-buffers
` [PATCH RFC 2/5] dma-heap: charge dma-buf memory via explicit memcg
` [PATCH RFC 3/5] security: dma-heap: Add dma_heap_alloc LSM hook
` [PATCH RFC 4/5] selinux: Restrict cross-cgroup dma-heap charging
` [PATCH RFC 5/5] selftests/dmabuf-heaps: Add dma-buf memcg accounting tests

[PATCH] libsemanage/tests: fix const correctness for test_utilities
 2026-05-15 12:09 UTC 

selinux_inode_init_security() weirdness
 2026-05-15  5:56 UTC  (3+ messages)

[PATCH v3] libsemanage: make expand-check a proper boolean option
 2026-05-14 20:56 UTC 

[PATCH v2] libsemanage: make expand-check a proper boolean option
 2026-05-14 20:53 UTC  (3+ messages)

[PATCH] lsm: hold cred_guard_mutex for lsm_set_self_attr()
 2026-05-14 20:47 UTC  (2+ messages)

[PATCH v3] libsemanage: use 'bool' for boolean options
 2026-05-14 20:42 UTC 

[PATCH v2] libsemanage: use 'bool' for boolean options
 2026-05-14 20:41 UTC  (3+ messages)

[PATCH v2 0/3] security, sched: Expand task_setscheduler LSM hook and related fixes
 2026-05-14 20:15 UTC  (8+ messages)
` [PATCH v2 1/3] cgroup/cpuset: Fix deadline bandwidth leak in cpuset_can_attach()
` [PATCH v2 2/3] security: Expand task_setscheduler LSM hook to include CPU affinity mask
` [PATCH v2 3/3] mips: sched: Fix CPUMASK_OFFSTACK memory corruption

[PATCH v1] Improve sepolicy audit log parsing
 2026-05-14 16:19 UTC 

[PATCH v2] semodule_package: fix wrong variable in error message
 2026-05-14 16:09 UTC 

[PATCH v3] checkpolicy: use calloc() so no need to do memset()
 2026-05-14 15:11 UTC  (2+ messages)

[PATCH] sandbox/seunshare: fully check setfsuid() calls
 2026-05-14 15:05 UTC 

[PATCH] sandbox/seunshare: rewrite to pin directories before use
 2026-05-14 14:37 UTC 

[PATCH v2] sandbox/seunshare: fix killall() realloc and missing type comparison
 2026-05-14 12:14 UTC 

[PATCH] sandbox/seunshare: pass O_NOFOLLOW to openat()
 2026-05-14 12:04 UTC  (3+ messages)

[PATCH v2] checkpolicy: use calloc() so no need to do memset()
 2026-05-13 19:12 UTC  (3+ messages)

[PATCH] sandbox/seunshare: fix killall() realloc and missing type comparison
 2026-05-13 16:21 UTC 

[PATCH] sandbox/seunshare: drop unused runuserdir_r
 2026-05-13 14:37 UTC 

[PATCH] sandbox/seunshare: verify RUNTIME_DIR before use
 2026-05-13 14:30 UTC 

[PATCH] sandbox/seunshare: prevent path traversal via -W/-P
 2026-05-13 14:13 UTC 

[PATCH] libsepol: Change log level of "Failed to resolve" message
 2026-05-13 14:00 UTC  (2+ messages)

[PATCH] seunshare: guard fallible function calls by checking retval
 2026-05-13 13:59 UTC  (3+ messages)

[PATCH] sandbox/seunshare: fix getopt flags
 2026-05-13 13:59 UTC 

[PATCH 1/3] libselinux: do not discard const qualifier
 2026-05-13 13:59 UTC  (7+ messages)
` [PATCH 2/3] libsemanage: Do not discard ‘const’ qualifier
` [PATCH 3/3] libsemanage: Do not use vfork()

[PATCH 1/2] restorecond: Add -F for run in foreground
 2026-05-13 13:58 UTC  (5+ messages)
` [PATCH 2/2] restorecond.service: Use Type=simple

[PATCH v2] libsepol: policydb_read(): use a static string for policydb_str
 2026-05-13 13:57 UTC  (4+ messages)
` [PATCH v3] "

[PATCH] sandbox/seunshare: prevent rsync from interpreting paths as options
 2026-05-13 13:47 UTC 

[PATCH testsuite v3] rename: explicitly test directory write checks
 2026-05-13  8:07 UTC  (2+ messages)

[PATCH testsuite] tmt: add setup for BPF token tests
 2026-05-13  7:25 UTC  (3+ messages)

[PATCH 0/3] security, sched: Expand task_setscheduler LSM hook and related fixes
 2026-05-12 19:37 UTC  (10+ messages)
` [PATCH 1/3] cgroup/cpuset: Fix deadline bandwidth leak in cpuset_can_attach()
` [PATCH 2/3] security: Expand task_setscheduler LSM hook to include CPU affinity mask
` [PATCH 3/3] mips: sched: Fix CPUMASK_OFFSTACK memory corruption

[BUG] lsm= with bpf before selinux breaks fscreate with EINVAL
 2026-05-12 19:17 UTC  (7+ messages)

[PATCH v3 0/7] lsm: Replace security_sb_mount with granular mount hooks
 2026-05-12 18:07 UTC  (17+ messages)
` [PATCH v3 1/7] lsm: Add granular mount hooks to replace security_sb_mount
` [PATCH v3 2/7] apparmor: Remove redundant MS_MGC_MSK stripping in apparmor_sb_mount
` [PATCH v3 3/7] apparmor: Convert from sb_mount to granular mount hooks
` [PATCH v3 4/7] selinux: "
` [PATCH v3 5/7] landlock: "
` [PATCH v3 6/7] tomoyo: "
` [PATCH v3 7/7] lsm: Remove security_sb_mount and security_move_mount

[PATCH] libsepol: Fix off-by-one error in cats_ebitmap_len
 2026-05-12 18:06 UTC  (5+ messages)

[PATCH v2] semanage-fcontext(8): improve -e documentation
 2026-05-12 18:06 UTC  (3+ messages)

[PATCH] libsepol: Fix memory leak in role_dominates_copy_callback
 2026-05-12 18:05 UTC  (4+ messages)
` [PATCH v2] "

[PATCH] policycoreutils/secon: fix discarded-qualifiers warning with glibc 2.43
 2026-05-12 18:05 UTC  (4+ messages)

[PATCH v2] selinux: allow multiple opens of /sys/fs/selinux/policy
 2026-05-12 18:04 UTC  (3+ messages)

[PATCH] restorecond: NUL-terminate ut_user before use
 2026-05-12 16:13 UTC 

[PATCH] restorecond: do not follow symlinks and do not relabel hard links
 2026-05-12 13:58 UTC 

[PATCH v2] libselinux: correctly find partial matches
 2026-05-11 17:34 UTC  (3+ messages)

[PATCH] libselinux: Do not fall back to /selinux on a sysfs mount failure
 2026-05-11 16:44 UTC  (3+ messages)

[PATCH v4] libselinux: restorecon: revisit pinning files to avoid TOCTOU issues
 2026-05-11 16:30 UTC 

[PATCH ipsec-next v8 00/14] xfrm: XFRM_MSG_MIGRATE_STATE new netlink message
 2026-05-11 12:57 UTC  (24+ messages)
` [PATCH ipsec-next v8 01/14] xfrm: remove redundant assignments
` [PATCH ipsec-next v8 02/14] xfrm: add extack to xfrm_init_state
` [PATCH ipsec-next v8 03/14] xfrm: allow migration from UDP encapsulated to non-encapsulated ESP
` [PATCH ipsec-next v8 04/14] xfrm: fix NAT-related field inheritance in SA migration
` [PATCH ipsec-next v8 06/14] xfrm: split xfrm_state_migrate into create and install functions
` [PATCH ipsec-next v8 07/14] xfrm: check family before comparing addresses in migrate
` [PATCH ipsec-next v8 09/14] xfrm: add error messages to state migration
` [PATCH ipsec-next v8 10/14] xfrm: move encap and xuo into struct xfrm_migrate
` [PATCH ipsec-next v8 12/14] xfrm: add XFRM_MSG_MIGRATE_STATE for single SA migration
` [PATCH ipsec-next v8 14/14] xfrm: add documentation for XFRM_MSG_MIGRATE_STATE

[PATCH testsuite v2] tests/overlay: add tests for mmap(2) and mprotect(2)
 2026-05-11 12:48 UTC  (3+ messages)

[PATCH v2 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling
 2026-05-10 21:22 UTC  (2+ messages)

[PATCH] semodule_package: fix wrong variable in error message
 2026-05-09 18:32 UTC 

[PATCH v2 0/7] lsm: Replace security_sb_mount with granular mount hooks
 2026-05-08 21:25 UTC  (6+ messages)
` [PATCH v2 1/7] lsm: Add granular mount hooks to replace security_sb_mount

[PATCH 0/4] checkpolicy: minor miscellaneous code cleanups
 2026-05-08 12:13 UTC  (5+ messages)
` [PATCH 1/4] checkpolicy: use strcasecmp() instead of two strcmp() calls
` [PATCH 2/4] checkpolicy: remove unneeded tests before free() calls
` [PATCH 3/4] checkpolicy: add missing strdup() failure checks
` [PATCH 4/4] checkpolicy: remove unneeded malloc() casts

[PATCH] checkpolicy: replace malloc()+memset() with calloc()
 2026-05-08 11:19 UTC  (8+ messages)

[GIT PULL] selinux/selinux-pr-20260507
 2026-05-08  0:30 UTC  (2+ messages)

[PATCH v2] checkpolicy: replace malloc()+memset() with calloc()
 2026-05-07 23:56 UTC 

SELinux userspace coding style
 2026-05-07 18:01 UTC  (3+ messages)

[PATCH] libselinux: remove useless assignment and test
 2026-05-07 16:21 UTC 

[PATCH v3] selinux: tighten type validation during policy load
 2026-05-07 16:16 UTC 

[PATCH v2] selinux: tighten type validation during policy load
 2026-05-07 16:06 UTC 

[PATCH] adjust audit2why map for python2 and 3
 2026-05-07  9:52 UTC 

[PATCH] expose alias for stat64 and lstat64 on musl
 2026-05-07  9:52 UTC 

SELinux userspace does not build on Fedora 44
 2026-05-07  9:54 UTC  (3+ messages)

[PATCH] add test for fts_* availability
 2026-05-07  9:53 UTC 

[PATCH] define matchpathcon_filespec_add/add64
 2026-05-07  9:52 UTC 

[PATCH v3 10/14] selinux: validate symbols
 2026-05-06 23:43 UTC  (2+ messages)

[PATCH v3 08/14] selinux: reorder policydb_index()
 2026-05-06 23:43 UTC  (2+ messages)
` [PATCH v3 8/14] "

[PATCH v3 07/14] selinux: check type attr map overflows
 2026-05-06 23:43 UTC  (2+ messages)
` [PATCH v3 7/14] "

[PATCH v3 03/14] selinux: more strict policy parsing
 2026-05-06 23:43 UTC  (2+ messages)
` [PATCH v3 3/14] "

[PATCH v3] libselinux: restorecon: revisit pinning files to avoid TOCTOU issues
 2026-05-06 22:24 UTC  (3+ messages)

libsemanage: why is expand_check integer?
 2026-05-06 19:08 UTC  (5+ messages)

[PATCH] libsemanage: make expand-check a proper boolean option
 2026-05-06 19:03 UTC 

[PATCH] libsemanage: use 'bool' for boolean options
 2026-05-06 18:07 UTC  (2+ messages)

[PATCH] libsemanage: use 'bool' for boolean options
 2026-05-06 18:05 UTC 


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).