Skip to content

SELinux security module

Supported 17,860 threads 81,235 messages Latest

About Lists, Files, Maintainers, Reviewers
Lists
selinux
Files
Documentation/ABI/removed/sysfs-selinux-checkreqprot, Documentation/ABI/removed/sysfs-selinux-disable, Documentation/admin-guide/LSM/SELinux.rst, include/trace/events/avc.h, include/uapi/linux/selinux_netlink.h, scripts/selinux/, security/selinux/
Maintainers
Paul Moore, Stephen Smalley
Reviewers
Ondrej Mosnáček
Show bot threadsBotsLatest activityActivityNewest threadsNewMost repliesRepliesMost participantsPeople
  1. fs: don't use pseudo filesystem files as storage RFC PATCH 41 patches Christian Brauner bpf driver-core fuse-devel +20 fs/ (18), drivers/ (9), security/ (4), tools/ (4), +5 In review 19 replies
  2. Fix LSM mediation of PR_SET_SECUREBITS PATCH 2 patches Mickaël Salaün bpf linux-security-module lkml +2 security/, tools/testing/selftests/landlock/ New 0 replies
  3. cipso: stop modifying live ip_options_rcu PATCH net 1 patch Jann Horn linux-security-module lkml netdev +2 include/ (2), net/ (2), security/ (2) Applied 6 replies
  4. Fix Landlock mediation of capabilities guarding LSM policies PATCH 6 patches Mickaël Salaün bpf linux-security-module lkml +1 security/ (6), include/ (2), tools/ (2) New 0 replies
  5. tests/binder: fix binder tests to work with the Rust binder driver PATCH 1 patch Stephen Smalley selinux tests/binder/ (5), policy/ (2), tests/bpf/ Superseded 1 reply
  6. tests/bpf: reformat to match CI astyle defaults PATCH 1 patch Stephen Smalley selinux tests/bpf/token_test_common.c New 0 replies
  7. libsepol: avoid quadratic removal of redundant conditional rules PATCH 1 patch Christian Göttsche selinux libselinux/src/ (5), libsepol/src/, policycoreutils/newrole/ In review 5 replies
  8. landlock: Add READ_METADATA and WRITE_METADATA access rights PATCH -next v3 18 patches Cai Xinchen bpf driver-core ecryptfs +19 fs/ (33), security/ (13), tools/ (13), include/ (8), +5 In review 3 replies
  9. tests/binder: fix binder tests to work with the Rust binder driver PATCH v2 1 patch Stephen Smalley selinux tests/binder/ (5), policy/ (2), tests/bpf/ New 0 replies
  10. BUG: selinux-testsuite binder tests fail with CONFIG_ANDROID_BINDER_IPC_RUST=y DISCUSSION Ondrej Mosnáček lkml selinux 5 replies
  11. libsepol: check all declaring blocks when enabling types PATCH v2 1 patch Stephen Smalley selinux checkpolicy/ (2), checkpolicy/tests/ (2), libsepol/src/ New 0 replies
  12. libsemanage: canonicalize NSS homes before deriving their parent PATCH 1 patch Stephen Smalley selinux libsemanage/tests/ (2), libsemanage/src/, libsemanage/tests/regression/ In review 1 reply
  13. libselinux/man: make set_selinuxmnt(3) the canonical mountpoint page RFC PATCH 8 patches Christian Göttsche selinux libselinux/man/man3/ (67), libselinux/man/man8/ (6), libselinux/man/man5/ (5) New 0 replies
  14. libsepol: skip the conditional lists without matching rules for neverallowx RFC PATCH 6 patches Christian Göttsche selinux libsepol/cil/src/ (5), libsepol/tests/ (3), libsepol/src/ (2), libsepol/include/sepol/policydb/ New 0 replies
  15. selinux: don't label bridged packets in selinux_ip_forward() PATCH 1 patch Joas Antonio dos Santos linux-security-module lkml netdev +2 include/linux/, security/selinux/ Applied 2 replies
  16. selinux: check MAP_SHARED_VALIDATE mappings as shared PATCH 1 patch Stephen Smalley selinux security/selinux/hooks.c In review 1 reply
  17. Revert "tests/nfs_filesystem: comment out failing mount" PATCH testsuite 1 patch Stephen Smalley selinux tests/nfs_filesystem/test In review 3 replies
  18. libsepol: check all declaring blocks when enabling types PATCH 1 patch Stephen Smalley selinux checkpolicy/ (2), checkpolicy/tests/ (2), libsepol/src/ Superseded 0 replies
  19. Question about libselinux *_with_level functions DISCUSSION Filippo Bonazzi selinux 8 replies
  20. selinux: fix potential use-after-free in sel_netif_flush() PATCH 1 patch [email protected] lkml selinux security/selinux/netif.c In review 1 reply
  21. selinux: restore the context string on -ESTALE retry PATCH v2 5 patches Christian Göttsche selinux security/selinux/ (2), security/selinux/include/, security/selinux/ss/ In review 1 reply
  22. mm: continue vma_flags_t conversion PATCH 13 patches Lorenzo Stoakes (ARM) damon kvm linux-fsdevel +9 mm/ (19), security/ (4), include/ (3), fs/ (2), +3 Applied 50 replies
  23. libselinux: apply requested level to failsafe contexts PATCH 1 patch Stephen Smalley selinux libselinux/tests/ (3), libselinux/src/ In review 2 replies
  24. python/semanage: fix test-permissive-store.py when run by CI PATCH v2 3 patches Stephen Smalley selinux python/semanage/ (3) In review 1 reply
  25. libsemanage: reject missing scalar configuration arguments PATCH 4 patches Stephen Smalley selinux libselinux/ (8), libsemanage/ (7), libsepol/ (5), checkpolicy/ (2) In review 1 reply
  26. libsepol: avoid quadratic removal of redundant conditional rules PATCH 1 patch Christian Göttsche selinux libsepol/src/optimize.c In review 2 replies
  27. libsemanage: make the migration import diagnostic distribution-neutral PATCH 2 patches Christian Göttsche selinux libselinux/src/, libsemanage/utils/ In review 3 replies
  28. libsepol: keep the uncompressed filename transition format for Xen PATCH 2 patches Christian Göttsche selinux libsepol/src/ (3), python/semanage/ (3), checkpolicy/tests/ (2) In review 5 replies
  29. libsepol: expand every class of a type rule after a duplicate PATCH 16 patches Christian Göttsche selinux libsepol/ (20), checkpolicy/ (7), libselinux/, policycoreutils/, +1 In review 17 replies
  30. libselinux/audit2why: check CPython allocations in analyze() PATCH v2 5 patches Christian Göttsche selinux libselinux/src/audit2why.c In review 6 replies
  31. python/semanage: fix permissive add with bytes module bindings PATCH 2 patches Stephen Smalley selinux python/semanage/ (2) New 0 replies
  32. mm: convert further simple mmap hooks to mmap_prepare PATCH 14 patches Lorenzo Stoakes (ARM) kvm linux-arm-msm linux-aspeed +9 drivers/ (12), arch/ (2), fs/, security/ In review 10 replies
  33. security: Expand task_setscheduler LSM hook PATCH v5 1 patch Aaron Tomlin cgroups linux-fsdevel linux-mips +3 security/ (4), include/ (2), kernel/ (2), arch/, +1 In review 3 replies
  34. libsepol: fix permission value collision when linking an undeclared class PATCH 2 patches Stephen Smalley selinux libsepol/src/, python/semanage/ In review 2 replies
  35. Revert "tools/nfs.sh: comment out the fscontext= tests for now" PATCH testsuite 1 patch Stephen Smalley selinux tests/filesystem/ (2), tests/fs_filesystem/, tools/ In review 3 replies
  36. memcg: dma-buf cgroup accounting and charge transfer PATCH v4 8 patches Albert Esteve cgroups dri-devel linux-doc +8 include/ (7), drivers/ (5), tools/ (5), security/ (3), +2 In review 3 replies
  37. ANN: SELinux userspace 3.12-rc1 release DISCUSSION Petr Lautrbach selinux 0 replies
  38. lsm,nscommon: initialize the security blob for the initial namespaces PATCH v3 1 patch Stephen Smalley linux-security-module selinux include/linux/, kernel/, security/ In review 4 replies
  39. libselinux: wait for relabel completion before writing digests PATCH v3 20 patches Stephen Smalley selinux libselinux/ (40) In review 1 reply
  40. libselinux: wait for relabel completion before writing digests PATCH v2 20 patches Stephen Smalley selinux libselinux/ (40) Superseded 0 replies
  41. libsemanage: add path substitution helpers PATCH v3 2 patches Stephen Smalley selinux libsemanage/src/ (3), libsemanage/tests/ (3) In review 3 replies
  42. af_unix: introduce MSG_CMSG_SEALED RFC PATCH 1 patch Ondrej Mosnáček io-uring linux-fsdevel linux-security-module +3 arch/ (4), net/ (4), include/ (3), io_uring/, +1 In review 4 replies
  43. memcg: dma-buf cgroup accounting and charge transfer PATCH v3 8 patches Albert Esteve cgroups dri-devel linux-doc +9 include/ (7), drivers/ (5), tools/ (5), security/ (3), +2 Superseded 8 replies
  44. tests/unix_socket: add test for MSG_CMSG_SEALED RFC PATCH testsuite v2 1 patch Ondrej Mosnáček selinux tests/unix_socket/ (7), policy/ In review 1 reply
  45. DEBUG RFC PATCH testsuite 2 patches Ondrej Mosnáček selinux tests/unix_socket/ (7), policy/, tests/ In review 1 reply
  46. mm: make VMA flag semantics explicit, eliminate VM_SPECIAL PATCH v6 39 patches Lorenzo Stoakes (ARM) bpf dri-devel fuse-devel +20 mm/ (25), arch/ (9), include/ (8), drivers/ (7), +6 Applied 12 replies
  47. libsemanage/tests: cover user join caches across transactions PATCH 11 patches Stephen Smalley selinux libsemanage/ (34) New 0 replies
  48. libselinux: wait for relabel completion before writing digests PATCH 10 patches Stephen Smalley selinux libselinux/tests/ (13), libselinux/src/ (8), libselinux/, libselinux/man/man5/ Superseded 0 replies
  49. libsemanage: add path substitution helpers PATCH v2 2 patches Stephen Smalley selinux libsemanage/src/ (3), libsemanage/tests/ (3) Superseded 1 reply
  50. mm: call the security_mmap_file() LSM hook in remap_file_pages() PATCH 5.15.y 1 patch yao zhang1 linux-mm linux-security-module selinux +1 mm/mmap.c Applied 1 reply
Page 1 of 358 –