selinux
Thread
Date
Earlier messages
Messages by Thread
Why is bash calling ioctl?
Ian Pilcher
Re: Why is bash calling ioctl?
Kevin W. Wall
selinux list move final notice
Stephen Smalley
selinux list move reminder
Stephen Smalley
Security modules and sending signals within the same process
Florian Weimer
[PATCH v5 00/38] LSM: Module stacking for SARA and Landlock
Casey Schaufler
[PATCH v5 04/38] LSM: Lift LSM selection out of individual LSMs
Casey Schaufler
[PATCH v5 06/38] LSM: Introduce CONFIG_LSM
Casey Schaufler
[PATCH v5 05/38] LSM: Build ordered list of LSMs to initialize
Casey Schaufler
[PATCH v5 10/38] LSM: Refactor "security=" in terms of enable/disable
Casey Schaufler
[PATCH v5 02/38] LSM: Provide separate ordered initialization
Casey Schaufler
[PATCH v5 08/38] LSM: Tie enabling logic to presence in ordered list
Casey Schaufler
[PATCH v5 13/38] selinux: Remove SECURITY_SELINUX_BOOTPARAM_VALUE
Casey Schaufler
[PATCH v5 14/38] LSM: Add all exclusive LSMs to ordered initialization
Casey Schaufler
[PATCH v5 18/38] LSM: Introduce enum lsm_order
Casey Schaufler
[PATCH v5 20/38] procfs: add smack subdir to attrs
Casey Schaufler
[PATCH v5 19/38] capability: Initialize as LSM_ORDER_FIRST
Casey Schaufler
[PATCH v5 23/38] SELinux: Remove cred security blob poisoning
Casey Schaufler
[PATCH v5 34/38] LSM: Infrastructure management of the task security
Casey Schaufler
[PATCH v5 31/38] SELinux: Abstract use of inode security blob
Casey Schaufler
[PATCH v5 30/38] LSM: Infrastructure management of the file security
Casey Schaufler
[PATCH v5 27/38] Infrastructure management of the cred security blob
Casey Schaufler
[PATCH v5 15/38] LSM: Split LSM preparation from initialization
Casey Schaufler
[PATCH v5 35/38] SELinux: Abstract use of ipc security blobs
Casey Schaufler
[PATCH v5 33/38] LSM: Infrastructure management of the inode security
Casey Schaufler
[PATCH v5 32/38] Smack: Abstract use of inode security blob
Casey Schaufler
[PATCH v5 16/38] LoadPin: Initialize as ordered LSM
Casey Schaufler
[PATCH v5 25/38] AppArmor: Abstract use of cred security blob
Casey Schaufler
[PATCH v5 22/38] SELinux: Abstract use of cred security blob
Casey Schaufler
[PATCH v5 21/38] Smack: Abstract use of cred security blob
Casey Schaufler
[PATCH v5 24/38] SELinux: Remove unused selinux_is_enabled
Casey Schaufler
[PATCH v5 01/38] LSM: Introduce LSM_FLAG_LEGACY_MAJOR
Casey Schaufler
Re: [PATCH v5 01/38] LSM: Introduce LSM_FLAG_LEGACY_MAJOR
Kees Cook
Re: [PATCH v5 01/38] LSM: Introduce LSM_FLAG_LEGACY_MAJOR
Ondrej Mosnacek
Re: [PATCH v5 01/38] LSM: Introduce LSM_FLAG_LEGACY_MAJOR
Casey Schaufler
[PATCH v5 38/38] TOMOYO: Update LSM flags to no longer be exclusive
Casey Schaufler
[PATCH v5 03/38] LSM: Plumb visibility into optional "enabled" state
Casey Schaufler
[PATCH v5 26/38] TOMOYO: Abstract use of cred security blob
Casey Schaufler
[PATCH v5 37/38] LSM: Infrastructure management of the ipc security blob
Casey Schaufler
[PATCH v5 09/38] LSM: Prepare for reorganizing "security=" logic
Casey Schaufler
[PATCH v5 28/38] SELinux: Abstract use of file security blob
Casey Schaufler
[PATCH v5 29/38] Smack: Abstract use of file security blob
Casey Schaufler
[PATCH v5 36/38] Smack: Abstract use of ipc security blobs
Casey Schaufler
[PATCH v5 17/38] Yama: Initialize as ordered LSM
Casey Schaufler
[PATCH v5 12/38] apparmor: Remove SECURITY_APPARMOR_BOOTPARAM_VALUE
Casey Schaufler
[PATCH v5 07/38] LSM: Introduce "lsm=" for boottime LSM selection
Casey Schaufler
[PATCH v5 11/38] LSM: Separate idea of "major" LSM from "exclusive" LSM
Casey Schaufler
Re: [PATCH v5 00/38] LSM: Module stacking for SARA and Landlock
James Morris
Re: [PATCH v5 00/38] LSM: Module stacking for SARA and Landlock
Kees Cook
Re: [PATCH v5 00/38] LSM: Module stacking for SARA and Landlock
Kees Cook
Re: [PATCH v5 00/38] LSM: Module stacking for SARA and Landlock
James Morris
Re: [PATCH v5 00/38] LSM: Module stacking for SARA and Landlock
Casey Schaufler
Re: [PATCH v5 00/38] LSM: Module stacking for SARA and Landlock
Kees Cook
Re: [PATCH v5 00/38] LSM: Module stacking for SARA and Landlock
Casey Schaufler
[RFC PATCH 0/3] Fix ENOMEM errors during policy reload
Ondrej Mosnacek
[RFC PATCH 1/3] selinux: refactor sidtab conversion
Ondrej Mosnacek
Re: [RFC PATCH 1/3] selinux: refactor sidtab conversion
Stephen Smalley
Re: [RFC PATCH 1/3] selinux: refactor sidtab conversion
Paul Moore
Re: [RFC PATCH 1/3] selinux: refactor sidtab conversion
Ondrej Mosnacek
[RFC PATCH 2/3] selinux: use separate table for initial SID lookup
Ondrej Mosnacek
Re: [RFC PATCH 2/3] selinux: use separate table for initial SID lookup
Stephen Smalley
Re: [RFC PATCH 2/3] selinux: use separate table for initial SID lookup
Ondrej Mosnacek
Re: [RFC PATCH 2/3] selinux: use separate table for initial SID lookup
Stephen Smalley
Re: [RFC PATCH 2/3] selinux: use separate table for initial SID lookup
Ondrej Mosnacek
[RFC PATCH 3/3] selinux: overhaul sidtab to fix bug and improve performance
Ondrej Mosnacek
[PATCH v3] selinux: simplify mls_context_to_sid()
Ondrej Mosnacek
Re: [PATCH v3] selinux: simplify mls_context_to_sid()
Stephen Smalley
Re: [PATCH v3] selinux: simplify mls_context_to_sid()
Paul Moore
Re: [PATCH v3] selinux: simplify mls_context_to_sid()
Ondrej Mosnacek
Re: [PATCH v3] selinux: simplify mls_context_to_sid()
Stephen Smalley
Re: [PATCH v3] selinux: simplify mls_context_to_sid()
Stephen Smalley
Re: [PATCH v3] selinux: simplify mls_context_to_sid()
Paul Moore
Re: [PATCH v3] selinux: simplify mls_context_to_sid()
Ondrej Mosnacek
[no subject]
Ravi Kumar
Re:
Ondrej Mosnacek
Re: Android kill capability denials
Stephen Smalley
Re: Android kill capability denials
Stephen Smalley
[PATCH v2] selinux: simplify mls_context_to_sid()
Ondrej Mosnacek
[PATCH] selinux: simplify mls_context_to_sid()
Ondrej Mosnacek
SELinux MLS for Apache Process
Ishara Fernando
Re: SELinux MLS for Apache Process
Stephen Smalley
Re: SELinux MLS for Apache Process
Ishara Fernando
Re: SELinux MLS for Apache Process
Stephen Smalley
Re: SELinux MLS for Apache Process
Ishara Fernando
Re: SELinux MLS for Apache Process
Stephen Smalley
Re: SELinux MLS for Apache Process
Ishara Fernando
[PATCH v6 0/5] LSM: Support ptrace sidechannel access checks
Casey Schaufler
[PATCH v6 2/5] Smack: Prepare for PTRACE_MODE_SCHED
Casey Schaufler
[PATCH v6 1/5] AppArmor: Prepare for PTRACE_MODE_SCHED
Casey Schaufler
[PATCH v6 3/5] SELinux: Prepare for PTRACE_MODE_SCHED
Casey Schaufler
[PATCH v6 5/5] sidechannel: Linux Security Module for sidechannel
Casey Schaufler
Re: [PATCH v6 5/5] sidechannel: Linux Security Module for sidechannel
Randy Dunlap
[PATCH v6 4/5] Capability: Complete PTRACE_MODE_SCHED
Casey Schaufler
[PATCH 0/2] Fix ENOMEM errors during policy reload
Ondrej Mosnacek
[PATCH 2/2] selinux: fix ENOMEM errors during policy reload
Ondrej Mosnacek
Re: [PATCH 2/2] selinux: fix ENOMEM errors during policy reload
Ondrej Mosnacek
Re: [PATCH 2/2] selinux: fix ENOMEM errors during policy reload
Ondrej Mosnacek
Re: [PATCH 2/2] selinux: fix ENOMEM errors during policy reload
Stephen Smalley
Re: [PATCH 2/2] selinux: fix ENOMEM errors during policy reload
Stephen Smalley
Re: [PATCH 2/2] selinux: fix ENOMEM errors during policy reload
Ondrej Mosnacek
Re: [PATCH 2/2] selinux: fix ENOMEM errors during policy reload
Ondrej Mosnacek
[PATCH 1/2] selinux: use separate table for initial SID lookup
Ondrej Mosnacek
Re: [PATCH 1/2] selinux: use separate table for initial SID lookup
Stephen Smalley
Re: [PATCH 1/2] selinux: use separate table for initial SID lookup
Ondrej Mosnacek
Re: [PATCH 1/2] selinux: use separate table for initial SID lookup
Paul Moore
cil mlsconstrain
Ted Toth
Re: cil mlsconstrain
Stephen Smalley
Re: cil mlsconstrain
Ted Toth
Re: cil mlsconstrain
Stephen Smalley
Re: cil mlsconstrain
Ted Toth
[PATCH v6] selinux: policydb - fix byte order and alignment issues
Ondrej Mosnacek
Re: [PATCH v6] selinux: policydb - fix byte order and alignment issues
Stephen Smalley
Re: [PATCH v6] selinux: policydb - fix byte order and alignment issues
Paul Moore
[PATCH v2] libsepol: add missing ibendport port validity check
Ondrej Mosnacek
Re: [PATCH v2] libsepol: add missing ibendport port validity check
William Roberts
Re: [PATCH v2] libsepol: add missing ibendport port validity check
William Roberts
[PATCH v5] selinux: policydb - fix byte order and alignment issues
Ondrej Mosnacek
[PATCH] libsepol: add missing ibendport port validity check
Ondrej Mosnacek
Re: [PATCH] libsepol: add missing ibendport port validity check
William Roberts
Re: [PATCH] libsepol: add missing ibendport port validity check
Ondrej Mosnacek
[PATCH v4] selinux: policydb - fix byte order and alignment issues
Ondrej Mosnacek
Re: [PATCH v4] selinux: policydb - fix byte order and alignment issues
William Roberts
Re: [PATCH v4] selinux: policydb - fix byte order and alignment issues
Stephen Smalley
Re: [PATCH v4] selinux: policydb - fix byte order and alignment issues
William Roberts
Re: [PATCH v4] selinux: policydb - fix byte order and alignment issues
Ondrej Mosnacek
Re: [PATCH v4] selinux: policydb - fix byte order and alignment issues
Ondrej Mosnacek
[PATCH v2] libsepol: fix endianity in ibpkey range checks
Ondrej Mosnacek
Re: [PATCH v2] libsepol: fix endianity in ibpkey range checks
William Roberts
[PATCH] libsepol: fix endianity in ibpkey range checks
Ondrej Mosnacek
Re: [PATCH] libsepol: fix endianity in ibpkey range checks
William Roberts
Re: [PATCH] libsepol: fix endianity in ibpkey range checks
Stephen Smalley
Re: [PATCH] libsepol: fix endianity in ibpkey range checks
William Roberts
Re: [PATCH] libsepol: fix endianity in ibpkey range checks
William Roberts
Re: [PATCH] libsepol: fix endianity in ibpkey range checks
Paul Moore
Re: [PATCH] libsepol: fix endianity in ibpkey range checks
Stephen Smalley
Re: [PATCH] libsepol: fix endianity in ibpkey range checks
William Roberts
Re: [PATCH] libsepol: fix endianity in ibpkey range checks
Ondrej Mosnacek
[PATCH v3] selinux: policydb - fix byte order and alignment issues
Ondrej Mosnacek
Re: [PATCH v3] selinux: policydb - fix byte order and alignment issues
Stephen Smalley
Re: [PATCH v3] selinux: policydb - fix byte order and alignment issues
William Roberts
Fix alias handling in sepolicy and semaange
Vit Mojzis
[PATCH 2/3] python/sepolicy: Stop rejecting aliases in sepolicy commands
Vit Mojzis
[PATCH 3/3] python/semanage: Stop rejecting aliases in semanage commands
Vit Mojzis
[PATCH 1/3] python/sepolicy: Fix "info" to search aliases as well
Vit Mojzis
Re: Fix alias handling in sepolicy and semaange
William Roberts
Re: Fix alias handling in sepolicy and semaange
Vit Mojzis
[PATCH v2] selinux: fix byte order and alignment issues in policydb.c
Ondrej Mosnacek
Re: [PATCH v2] selinux: fix byte order and alignment issues in policydb.c
Stephen Smalley
Re: [PATCH v2] selinux: fix byte order and alignment issues in policydb.c
Ondrej Mosnacek
Re: [PATCH v2] selinux: fix byte order and alignment issues in policydb.c
Ondrej Mosnacek
[GIT PULL] SELinux fixes for v4.19 (#1)
Paul Moore
Re: [GIT PULL] SELinux fixes for v4.19 (#1)
Greg KH
[RFC] proposal for resolving the cred_guard_mutex deadlock
Jann Horn via Selinux
[PATCH v2 0/1] Modify exception handling in semanage_migrate_store
Yuli Khodorkovskiy
[PATCH v2 1/1] libsemanage: improve semanage_migrate_store import failure
Yuli Khodorkovskiy
[PATCH 0/4] libsepol: Cleanup initial sid handling when writing CIL and policy.conf files
James Carter
[PATCH 1/4] libsepol: Rename kernel_to_common.c stack functions
James Carter
[PATCH 3/4] libsepol: Check that initial sid indexes are within the valid range
James Carter
[PATCH 4/4] libsepol: Add two new Xen initial SIDs
James Carter
[PATCH 2/4] libsepol: Eliminate initial sid string definitions in module_to_cil.c
James Carter
Re: [PATCH 0/4] libsepol: Cleanup initial sid handling when writing CIL and policy.conf files
William Roberts
[PATCH 0/2] libsepol: Add ability to sort ocontexts in libsepol and add option to use it in checkpolicy
James Carter
[PATCH 2/2] checkpolicy: Add option to sort ocontexts when creating a binary policy
James Carter
[PATCH 1/2] libsepol: Create policydb_sort_ocontexts()
James Carter
[PATCH] README: Update the SELinux mailing list location
Stephen Smalley
Blocking exec on processes based on arguments
Ville Baillie
Re: Blocking exec on processes based on arguments
Stephen Smalley
[PATCH] MAINTAINERS: update the SELinux mailing list location
Paul Moore
Re: [PATCH] MAINTAINERS: update the SELinux mailing list location
Paul Moore
Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace
Jann Horn via Selinux
Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace
Christian Brauner
Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace
Jann Horn via Selinux
Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace
Christian Brauner
Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace
Jann Horn via Selinux
Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace
Christian Brauner
Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace
Jann Horn via Selinux
Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace
Christian Brauner
Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace
Jann Horn via Selinux
Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace
Christian Brauner
Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace
Christian Brauner
Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace
Paul Moore
Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace
Jann Horn via Selinux
Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace
Christian Brauner
Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace
Tycho Andersen
Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace
Christian Brauner
Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace
Tycho Andersen
Re: [PATCH v7 3/6] seccomp: add a way to get a listener fd from ptrace
Christian Brauner
selinux list is moving
Stephen Smalley
selinux list move reminder
Stephen Smalley
[PATCH] libsemanage: improve semanage_migrate_store import failure
Yuli Khodorkovskiy
Re: [PATCH] libsemanage: improve semanage_migrate_store import failure
William Roberts
Re: [PATCH] libsemanage: improve semanage_migrate_store import failure
Jason Zaman
Re: [PATCH] libsemanage: improve semanage_migrate_store import failure
Chris PeBenito
Re: [PATCH] libsemanage: improve semanage_migrate_store import failure
William Roberts
Re: [PATCH] libsemanage: improve semanage_migrate_store import failure
William Roberts
[PATCH] selinux-testsuite: update the dependencies in README.md
Paul Moore
Re: [PATCH] selinux-testsuite: update the dependencies in README.md
Stephen Smalley
[PATCH] restorecond: Do not ignore the -f option
Ondrej Mosnacek
Re: [PATCH] restorecond: Do not ignore the -f option
Jason Zaman
[PATCH] selinux: fix race when removing selinuxfs entries
Ondrej Mosnacek
Earlier messages