| Subject | Author | Date |
| Re: [PATCH 0/9] Open loaders and interpreters with new creds during exec | David Howells | |
| Re: xattr support in cgroupfs | Casey Schaufler | |
| xattr support in cgroupfs | Matthew Ife | |
| Re: [RFC][PATCH 0/7] File descriptor labeling | Guido Trentalancia | |
| Re: [PATCH] policy module for atop | Daniel J Walsh | |
| Re: [RFC][PATCH 0/7] File descriptor labeling | Casey Schaufler | |
| Re: Is there difference betweek sefiles and restorecon in terms of labels | Christopher J. PeBenito | |
| [RFC][PATCH 2/4] eCryptfs: introduce per-filesystem credentials | Roberto Sassu | |
| [RFC][PATCH 4/4] eCryptfs: added ima_file_check() call to ecryptfs_init_lower_file() | Roberto Sassu | |
| [RFC][PATCH 0/4] eCryptfs credentials patches | Roberto Sassu | |
| [RFC][PATCH 3/4] eCryptfs: override prepared credentials | Roberto Sassu | |
| [RFC][PATCH 1/4] fs: preserve S_IMA inode flag in fsstack_copy_attr_all() | Roberto Sassu | |
| Re: [RFC][PATCH 0/7] File descriptor labeling | Roberto Sassu | |
| Re: [RFC][PATCH 0/7] File descriptor labeling | Roberto Sassu | |
| [PATCH] SELinux: introduce path_has_perm | Eric Paris | |
| [PATCH -v2] flex_arrays: allow zero length flex arrays | Eric Paris | |
| [PATCH] SELinux: pass last path component in may_create | Eric Paris | |
| Re: [RFC][PATCH 0/7] File descriptor labeling | Eric Paris | |
| Re: [RFC][PATCH 0/7] File descriptor labeling | Casey Schaufler | |
| Re: [PATCH 8/9] LSM: Pass linux_binprm pointer to open_exec() so creds are available | David Howells | |
| Re: [PATCH] policy module for atop | Dominick Grift | |
| [PATCH] policy module for atop | Elia Pinto | |
| Re: [RFC][PATCH 7/7] ima: added new LSM conditions in the policy | Roberto Sassu | |
| Re: [RFC][PATCH 7/7] ima: added new LSM conditions in the policy | Mimi Zohar | |
| [PATCH] policy module for atop | Elia Pinto | |
| Re: Public Apology to Minister Mentor Lee Kuan Yew and Prime Minister Lee Hsien Loong, Singapore | Patrick K., ITF | |
| Public Apology to Minister Mentor Lee Kuan Yew and Prime Minister Lee Hsien Loong, Singapore | Singapore Citizen Mr. Teo En Ming (Zhang Enming) 张恩鸣 | |
| [PATCH] Delete redundant role system_r assignments after init_daemon_domain | Elia Pinto | |
| Re: [RFC][PATCH 0/7] File descriptor labeling | Roberto Sassu | |
| Re: [RFC][PATCH 6/7] security: new LSM hook security_file_getsecid() | Roberto Sassu | |
| Re: [RFC][PATCH 4/7] smack: fix label check in smack_kernel_act_as() | Roberto Sassu | |
| Re: [RFC][PATCH 3/7] smack: assign the label set in file->f_cred to new file descriptors | Roberto Sassu | |
| Re: [PATCH 3/6] SELinux: skip filename trans rules if ttype does not match parent dir | James Morris | |
| Re: [RFC][PATCH 0/7] File descriptor labeling | Tyler Hicks | |
| Re: [PATCH 3/6] SELinux: skip filename trans rules if ttype does not match parent dir | James Morris | |
| Re: [RFC][PATCH 0/7] File descriptor labeling | Casey Schaufler | |
| Re: [PATCH 5/6] SELinux: generic hashtab entry counter | James Morris | |
| Re: [PATCH 4/6] SELinux: calculate and print hashtab stats with a generic function | James Morris | |
| Re: [PATCH 3/6] SELinux: skip filename trans rules if ttype does not match parent dir | James Morris | |
| Re: [RFC][PATCH 6/7] security: new LSM hook security_file_getsecid() | Casey Schaufler | |
| Re: [PATCH 2/6] SELinux: rename filename_compute_type argument to *type instead of *con | James Morris | |
| Re: [RFC][PATCH 5/7] smack: import the security label in smack_secctx_to_secid() | Casey Schaufler | |
| Re: Is there difference betweek sefiles and restorecon in terms of labels | Guido Trentalancia | |
| Re: Is there difference betweek sefiles and restorecon in terms of labels | Guido Trentalancia | |
| Re: [RFC][PATCH 0/7] File descriptor labeling | Tyler Hicks | |
| Re: [RFC][PATCH 3/7] smack: assign the label set in file->f_cred to new file descriptors | Casey Schaufler | |
| Re: [RFC][PATCH 4/7] smack: fix label check in smack_kernel_act_as() | Casey Schaufler | |
| Is there difference betweek sefiles and restorecon in terms of labels | Sam Gandhi | |
| Re: [RFC][PATCH 0/7] File descriptor labeling | Casey Schaufler | |
| Re: [RFC][PATCH 0/7] File descriptor labeling | Casey Schaufler | |
| Re: [PATCH] fix description of init_system_domain in init.if | Christopher J. PeBenito | |
| [PATCH] fix description of init_system_domain in init.if | Elia Pinto | |
| [RFC][PATCH 4/7] smack: fix label check in smack_kernel_act_as() | Roberto Sassu | |
| [RFC][PATCH 3/7] smack: assign the label set in file->f_cred to new file descriptors | Roberto Sassu | |
| [RFC][PATCH 1/7] fs: initialize file->f_cred with credentials provided | Roberto Sassu | |
| [RFC][PATCH 2/7] selinux: label new file descriptors using file->f_cred | Roberto Sassu | |
| [RFC][PATCH 7/7] ima: added new LSM conditions in the policy | Roberto Sassu | |
| [RFC][PATCH 6/7] security: new LSM hook security_file_getsecid() | Roberto Sassu | |
| [RFC][PATCH 0/7] File descriptor labeling | Roberto Sassu | |
| [RFC][PATCH 5/7] smack: import the security label in smack_secctx_to_secid() | Roberto Sassu | |
| Re: [PATCH 2/3] flex_arrays: allow zero length flex arrays | Eric Paris | |
| Re: [PATCH 1/3] flex_array: flex_array_prealloc takes a number of elements, not an end | Eric Paris | |
| [PATCH 4/6] SELinux: calculate and print hashtab stats with a generic function | Eric Paris | |
| [PATCH 6/6] SELinux: put name based create rules in a hashtable | Eric Paris | |
| [PATCH 2/6] SELinux: rename filename_compute_type argument to *type instead of *con | Eric Paris | |
| [PATCH 1/6] SELinux: fix comment to state filename_compute_type takes an objname not a qstr | Eric Paris | |
| [PATCH 5/6] SELinux: generic hashtab entry counter | Eric Paris | |
| [PATCH 3/6] SELinux: skip filename trans rules if ttype does not match parent dir | Eric Paris | |
| [PATCH 2/3] flex_arrays: allow zero length flex arrays | Eric Paris | |
| [PATCH 1/3] flex_array: flex_array_prealloc takes a number of elements, not an end | Eric Paris | |
| [PATCH 3/3] flex_array: allow 0 length elements | Eric Paris | |
| [PATCH] SELINUX: Make selinux cache VFS RCU walks safe | Eric Paris | |
| Re: Help with toolchain | Joshua Brindle | |
| Re: suspicious rcu_dereference_check in security/selinux/netnode.c | Paul E. McKenney | |
| Re: [PATCH 0/9] Open loaders and interpreters with new creds during exec | David Howells | |
| Re: [PATCH 0/9] Open loaders and interpreters with new creds during exec | David Howells | |
| Re: [PATCH 0/9] Open loaders and interpreters with new creds during exec | Daniel J Walsh | |
| Re: [PATCH 0/9] Open loaders and interpreters with new creds during exec | Casey Schaufler | |
| Re: [PATCH 0/9] Open loaders and interpreters with new creds during exec | Stephen Smalley | |
| [PATCH 9/9] LSM: Use derived creds for accessing an executable's interpreter and binary loader | David Howells | |
| [PATCH 1/9] TOMOYO: Fix tomoyo_dentry_open() to use the right creds | David Howells | |
| [PATCH 4/9] LSM: Make the linux_binfmt creds pointer const and pass creds to bprm_set_creds | David Howells | |
| [PATCH 0/9] Open loaders and interpreters with new creds during exec | David Howells | |
| [PATCH 6/9] LSM: Pass linux_binprm pointer to kernel_read() so creds are available | David Howells | |
| [PATCH 7/9] LSM: Allow an LSM to indicate that it wants bprm->file reopening with new creds | David Howells | |
| [PATCH 8/9] LSM: Pass linux_binprm pointer to open_exec() so creds are available | David Howells | |
| [PATCH 2/9] TOMOYO: Derive the new domain for an exec'd process in tomoyo_bprm_set_creds() | David Howells | |
| [PATCH 5/9] LSM: Install the new credentials earlier in the exec procedure | David Howells | |
| [PATCH 3/9] LSM: Permit commit_creds() to take a const pointer | David Howells | |
| Re: [PATCH 2/2] SELinux: security_read_policy should take a size_t not ssize_t | James Morris | |
| Re: [PATCH 1/2] SELinux: silence build warning when !CONFIG_BUG | James Morris | |
| Re: [PATCH] selinux: revise /selinux/create to handle whitespace/multibytes correctly | Kohei KaiGai | |
| Re: [PATCH] selinux: revise /selinux/create to handle whitespace/multibytes correctly | Eric Paris | |
| Re: suspicious rcu_dereference_check in security/selinux/netnode.c | Paul Moore | |
| Re: suspicious rcu_dereference_check in security/selinux/netnode.c | Eric Paris | |
| [PATCH 2/2] SELinux: security_read_policy should take a size_t not ssize_t | Eric Paris | |
| [PATCH 1/2] SELinux: silence build warning when !CONFIG_BUG | Eric Paris | |
| [PATCH 1/1] selabel_open fix processing of substitution files (update) | Richard Haines | |
| Re: This patch adds a new subs_dist file. | Daniel J Walsh | |
| Re: This patch adds a new subs_dist file. | Richard Haines | |
| Re: Writing SEPostGreSQL Database Policies | Kohei KaiGai | |
| Re: [PATCH] selinux: revise /selinux/create to handle whitespace/multibytes correctly | Kohei KaiGai | |
| Re: [PATCH] selinux: revise /selinux/create to handle whitespace/multibytes correctly | Joshua Brindle | |
| Re: [PATCH] selinux: revise /selinux/create to handle whitespace/multibytes correctly | Kohei KaiGai | |
| Re: [PATCH] selinux: revise /selinux/create to handle whitespace/multibytes correctly | Joshua Brindle | |
| [PATCH] selinux: revise /selinux/create to handle whitespace/multibytes correctly | Kohei KaiGai | |
| Writing SEPostGreSQL Database Policies | David Quigley | |
| Re: Now that we have an updated libsepol lets get the checkpolicy patch to match in. | Steve Lawrence | |
| Re: Generating policy for embedded platforms. | Stephen Smalley | |
| Re: Generating policy for embedded platforms. | Sam Gandhi | |
| Re: Generating policy for embedded platforms. | Stephen Smalley | |
| Generating policy for embedded platforms. | Sam Gandhi | |
| Re: [PATCH] libsepol: support policy modules when roletrans rules not supported | Joshua Brindle | |
| Re: [PATCH] libsepol: support policy modules when roletrans rules not supported | Eric Paris | |
| Re: [PATCH] libsepol: support policy modules when roletrans rules not supported | Eric Paris | |
| Re: [PATCH] libsepol: support policy modules when roletrans rules not supported | Stephen Smalley | |
| Re: [PATCH] libsepol: support policy modules when roletrans rules not supported | Joshua Brindle | |
| Re: [PATCH] libsepol: support policy modules when roletrans rules not supported | Eric Paris | |
| Now that we have an updated libsepol lets get the checkpolicy patch to match in. | Daniel J Walsh | |
| Re: [PATCH 1/2] libsepol: add support for filenametrans rule | Steve Lawrence | |
| Re: [PATCH] libsepol: support policy modules when roletrans rules not supported | Steve Lawrence | |
| Re: SELinux mixed/virtualisation policy | Daniel J Walsh | |
| Re: SELinux mixed/virtualisation policy | Ramon de Carvalho Valle | |
| Re: SELinux mixed/virtualisation policy | Ramon de Carvalho Valle | |
| Re: [PATCH] libsepol: support policy modules when roletrans rules not supported | Eric Paris | |
| Re: [PATCH] libsepol: support policy modules when roletrans rules not supported | Steve Lawrence | |
| RE: [PATCH] checkpolicy: add support for using last path component in type transition rules | Kohei Kaigai | |
| Re: [PATCH] libsepol: support policy modules when roletrans rules not supported | Steve Lawrence | |
| Re: SELinux mixed/virtualisation policy | Daniel J Walsh | |
| Re: SELinux mixed/virtualisation policy | Stephen Smalley | |
| Re: SELinux mixed/virtualisation policy | Russell Coker | |
| Re: SELinux mixed/virtualisation policy | Ramon de Carvalho Valle | |
| Re: SELinux mixed/virtualisation policy | Stephen Smalley | |
| Re: SELinux mixed/virtualisation policy | Ramon de Carvalho Valle | |
| Re: [PATCH] libsepol: support policy modules when roletrans rules not supported | Harry Ciao | |
| Re: Here is an updated Eric Paris patch for adding named file trans rules. | Harry Ciao | |
| [PATCH] libsepol: support policy modules when roletrans rules not supported | Eric Paris | |
| Re: Here is an updated Eric Paris patch for adding named file trans rules. | Steve Lawrence | |
| Re: [PATCH 2/2] libsepol: Only write role trans classes if policy version supports it | Eric Paris | |
| [PATCH 1/2] libsepol: add support for filenametrans rule | Eric Paris | |
| [PATCH 2/2] libsepol: Only write role trans classes if policy version supports it | Eric Paris | |
| Here is an updated Eric Paris patch for adding named file trans rules. | Daniel J Walsh | |
| Re: [v2 PATCH 5/5] Userspace: display the class in role_transition rule | Eric Paris | |
| Re: [v2 PATCH 5/5] Userspace: display the class in role_transition rule | Daniel J Walsh | |
| Re: This patch adds a new subs_dist file. | Daniel J Walsh | |
| Re: This patch cleans up a couple of crashes caused by libselinux | Steve Lawrence | |
| Re: This patch adds a new subs_dist file. | Steve Lawrence | |
| Re: Resend: This patch causes the mount points created in load_policy to have a proper name | Steve Lawrence | |
| Re: v2 Add class support to the role_transition rule | Steve Lawrence | |
| Re: [PATCH 1/1] Add libselinux man pages for colour functions | Steve Lawrence | |
| Re: [PATCH 1/1] mcstransd select correct colour range. | Steve Lawrence | |
| Re: SELinux mixed/virtualisation policy | Stephen Smalley | |
| Re: SELinux mixed/virtualisation policy | Daniel J Walsh | |
| RE: SELinux mixed/virtualisation policy | chanson_at_nospam | |
| Re: Named TYPE_TRANSITION and userspace AVC | Eric Paris | |
| Re: [PATCH] Permit fixfiles to skip configurable directory from relabelling | Daniel J Walsh | |
| Re: SELinux mixed/virtualisation policy | Daniel J Walsh | |
| Re: SELinux mixed/virtualisation policy | Ramon de Carvalho Valle | |
| Re: SELinux mixed/virtualisation policy | Ramon de Carvalho Valle | |
| Re: SELinux mixed/virtualisation policy | Stephen Smalley | |
| Re: SELinux mixed/virtualisation policy | Daniel J Walsh | |
| Re: SELinux mixed/virtualisation policy | Russell Coker | |
| Re: SELinux mixed/virtualisation policy | Stephen Smalley | |
| [PATCH 1/1] Add libselinux man pages for colour functions | Richard Haines | |
| SELinux mixed/virtualisation policy | Ramon de Carvalho Valle | |
| [PATCH 1/1] mcstransd select correct colour range. | Richard Haines | |
| Re: [Rhel6-cc-external-list] Processes executing as qemu_t SELinux type are not allowed to access vhost_device_t | Daniel J Walsh | |
| Re: [PATCH] Permit fixfiles to skip configurable directory from relabelling | Elia Pinto | |
| Re: [PATCH 1/1] Initialize policydb.process_class eariler. | Eric Paris | |
| Re: [PATCH] Permit fixfiles to skip configurable directory from relabelling | Elia Pinto | |
| Re: [PATCH] Permit fixfiles to skip configurable directory from relabelling | Daniel J Walsh | |
| [PATCH] Permit fixfiles to skip configurable directory from relabelling | Elia Pinto | |
| Re: [PATCH] Permit fixfiles to skip configurable directory from relabelling | Elia Pinto | |
| [PATCH] Permit fixfiles to skip configurable directory from relabelling | Elia Pinto | |
| [PATCH 1/1] Initialize policydb.process_class eariler. | Harry Ciao | |
| SELinux: Initialize process_class earlier | Harry Ciao | |
| Re: [v2 PATCH 1/3] SELinux: Add class support to the role_trans structure | Harry Ciao | |
| Re: [v2 PATCH 1/3] SELinux: Add class support to the role_trans structure | Eric Paris | |
| Resend: This patch causes the mount points created in load_policy to have a proper name | Daniel J Walsh | |
| This patch causes the mount points created in load_policy to have a proper name | Daniel J Walsh | |
| This patch adds a new subs_dist file. | Daniel J Walsh | |
| This patch cleans up a couple of crashes caused by libselinux | Daniel J Walsh | |
| Minor query on selabel_x(5) man page | Richard Haines | |
| Named TYPE_TRANSITION and userspace AVC | Kohei KaiGai | |
| Re: [PATCH] selinux: add type_transition with name extension support for selinuxfs | Eric Paris | |
| Re: fwknop, fwknopd, fwknop_serv | Daniel J Walsh | |
| Re: fwknop, fwknopd, fwknop_serv | Dominick Grift | |
| fwknop, fwknopd, fwknop_serv | Bill Chimiak | |
| RE: [PATCH] checkpolicy: add support for using last path component in type transition rules | Kohei Kaigai | |
| [PATCH] libselinux: fix a noise in manpage | Kohei Kaigai | |
| [PATCH] libselinux: add security_compute_create_name() API | Kohei Kaigai | |
| [PATCH] selinux: add type_transition with name extension support for selinuxfs | Kohei Kaigai | |
| Re: How to make restorecon/matchpathcon recognize role_transition rule for non-process classes? | Stephen Smalley | |
| How to make restorecon/matchpathcon recognize role_transition rule for non-process classes? | HarryCiao | |
