SELinux Mailing List - NSA/CSS

Skip All Menus Skip Top Menu

Top Navigation Menus

Skip Research Menus

Research Menu

Research Security Enhanced Linux What's New Frequently Asked Questions Background Documents License Download Participating Mail List Archives Remaining Work Contributors Related Work Press Releases Information Assurance Research NIARL In-house Research Areas Mathematical Sciences Program Sabbaticals Computer & Information Sciences Research Technology Transfer Advanced Computing Advanced Mathematics Communications & Networking Information Processing Microelectronics Other Technologies Technology Fact Sheets Publications Related Links	Skip Search Box Searchbox SELinux Mailing List 28371 messages: Starting Fri 22 Dec 2000 - 09:05:15 EST, Ending Tue 2 Dec 2008 - 14:31:30 EST sort by: [ thread ] [ author ] [ date ] [ subject ] Nearby: [ About this archive ] Tuesday, 2 December Re: [refpolicy] the new way of newrole Christopher J. PeBenito Re: Context transition error Stephen Smalley Re: Context transition error Vince Le Port Re: Use of optional_policy in templates (compiler bug or feature?) Stephen Smalley Re: Use of optional_policy in templates (compiler bug or feature?) Joe Nall Monday, 1 December ERROR 'syntax error' at token 'typeattribute' Justin P. Mattock Re: [PATCH] selinux: deprecate and schedule the removal of the the compat_net functionality Paul Moore Re: [PATCH] selinux: deprecate and schedule the removal of the the compat_net functionality James Morris the new way of newrole Justin P. Mattock Re: [PATCH] selinux: deprecate and schedule the removal of the the compat_net functionality Paul Moore Re: [PATCH] selinux: deprecate and schedule the removal of the the compat_net functionality Stephen Smalley [PATCH] selinux: deprecate and schedule the removal of the the compat_net functionality Paul Moore Small fixes for audit2allow Daniel J Walsh Problem in sepolgen Daniel J Walsh Wednesday, 26 November [PATCH 10/14] NFS: Introduce lifecycle management for label attribute. David P. Quigley [PATCH 12/14] NFS: Client implementation of Labeled-NFS David P. Quigley [PATCH 14/14] NFSD: Server implementation of MAC Labeling David P. Quigley [PATCH 06/14] SELinux: Add new labeling type native labels David P. Quigley [PATCH 03/14] LSM/SELinux: inode_{get,set,notify}secctx hooks to access LSM security context information. David P. Quigley [PATCH 05/14] Security: Add Hook to test if the particular xattr is part of a MAC model. David P. Quigley [PATCH 04/14] Security: Add hook to calculate context based on a negative dentry. David P. Quigley [PATCH 13/14] NFS: Extend NFS xattr handlers to accept the security namespace David P. Quigley [PATCH 08/14] NFSv4: Add label recommended attribute and NFSv4 flags David P. Quigley [PATCH 11/14] NFSv4: Introduce new label structure David P. Quigley [PATCH 02/14] VFS: Factor out part of vfs_setxattr so it can be called from the SELinux hook for inode_setsecctx. David P. Quigley [PATCH 09/14] NFS: Add security_label text mount option and handling code to NFS David P. Quigley [PATCH 01/14] patch fix_use_before_init_in_nfsd4_list_rec_dir David P. Quigley [Labeled-nfs] [RFC v4] Security Label Support for NFSv4 David P. Quigley [PATCH 07/14] KConfig: Add KConfig entries for Labeled NFS David P. Quigley Monday, 1 December Re: Policy for Konqueror Dave Feustel Re: Policy for Konqueror Daniel J Walsh Re: Extracting constraints and MLS constraints from policy Christopher J. PeBenito Sunday, 30 November Re: PAM _pam_load_conf_file: unable to open /etc/pam.d/system-auth Justin P. Mattock Re: PAM _pam_load_conf_file: unable to open /etc/pam.d/system-auth Justin P. Mattock Re: PAM _pam_load_conf_file: unable to open /etc/pam.d/system-auth Xavier Toth Saturday, 29 November PAM _pam_load_conf_file: unable to open /etc/pam.d/system-auth Justin P. Mattock Re: SELinux User Guide: weekly report 20081128 Murray McAllister Re: SELinux User Guide: weekly report 20081128 Stephen John Smoogen AttributeError: RoleTypeSet instance has no attribute 'roles Justin P. Mattock Friday, 28 November SELinux Group on LinkedIn Joshua Kramer Policy for Konqueror Dave Feustel SELinux User Guide: weekly report 20081128 Murray McAllister Re: [refpolicy] [RE:] pull request: wireless-2.6 2008-11-25 Daniel J Walsh Re: user guide draft: "Booleans for Users Executing Applications" Daniel J Walsh Re: [RFC] Testing Support for deferred mapping of contexts & enable processes with mac_admin to get the raw inode contexts James Morris [RFC] Testing Support for deferred mapping of contexts & enable processes with mac_admin to get the raw inode contexts Subrata Modak Thursday, 27 November user guide draft: "Booleans for Users Executing Applications" Murray McAllister Wednesday, 26 November Extracting constraints and MLS constraints from policy Sanjai Narain Re: SELinux on NFS. David P. Quigley [RE:] pull request: wireless-2.6 2008-11-25 Justin P. Mattock Tuesday, 25 November Re: Polyinstantiation in cron Joe Nall Re: Polyinstantiation in cron Stephen Smalley Monday, 24 November Polyinstantiation in cron Joe Nall Re: [RFC] Add color translation support to mcstransd Eamon Walsh Re: externally usable interfaces from 3rd party policy modules Joe Nall Re: Problem Setting Policy To Enforcing Mode Justin P. Mattock Problem Setting Policy To Enforcing Mode Rahul Jain externally usable interfaces from 3rd party policy modules Andy Warner Re: Problem Setting Policy To Enforcing Mode Stephen Smalley Sunday, 23 November Re: Use of optional_policy in templates (compiler bug or feature?) Joe Nall Saturday, 22 November Re: Context transition error Vince Le Port SE Linux on iPaQ Russell Coker Re: Problem Setting Policy To Enforcing Mode Justin P. Mattock Problem Setting Policy To Enforcing Mode Rahul Jain Friday, 21 November Re: [RFC] Add color translation support to mcstransd Joe Nall [RFC] Add color translation support to mcstransd Eamon Walsh Re: Context transition error Stephen Smalley Re: Problem Setting Policy To Enforcing Mode Daniel J Walsh Context transition error Vince Le Port Re: Problem Setting Policy To Enforcing Mode Stephen Smalley Re: Problem Setting Policy To Enforcing Mode Justin P. Mattock Problem Setting Policy To Enforcing Mode Rahul Jain Re: python execv 'self:fd use' AVC for fd to /lib64/ld-2.8.so Stephen Smalley SELinux User Guide: weekly report 20081121 Murray McAllister Thursday, 20 November python execv 'self:fd use' AVC for fd to /lib64/ld-2.8.so Xavier Toth Monday, 17 November Re: Handling labeling on filesystems that don't support SELinux Stephen Smalley Add restorecon and install methods for libselinux python bindings. Daniel J Walsh Re: Handling labeling on filesystems that don't support SELinux Stephen Smalley Re: Handling labeling on filesystems that don't support SELinux Daniel J Walsh Re: [PATCH] semanage: Use semanage_mls_enabled Stephen Smalley Re: Introducing mod_privileges for Apache HTTPD KaiGai Kohei Re: This policy causes checkmodule to segfault. KaiGai Kohei Sunday, 16 November Re: This policy causes checkmodule to segfault. Joshua Brindle Friday, 14 November Re: 2.6.26 Debian kernel panic Russell Coker Re: [PATCH] libselinux: allow shell-style wildcarding in X names Joe Nall [PATCH] libselinux: allow shell-style wildcarding in X names Eamon Walsh Re: [PATCH] semanage: Use semanage_mls_enabled Daniel J Walsh This policy causes checkmodule to segfault. Daniel J Walsh SELinux User Guide: 20081114 Murray McAllister user guide draft: "Allowing Access: audit2allow" Murray McAllister Thursday, 13 November Re: user guide drafts: "Linux Permissions" and "Manual Pages for Services" Stephen Smalley Re: user guide drafts: "Linux Permissions" and "Manual Pages for Services" Murray McAllister Wednesday, 12 November Re: [PATCH] semanage: Use semanage_mls_enabled Joshua Brindle Re: user guide drafts: "Linux Permissions" and "Manual Pages for Services" Stephen Smalley [PATCH] semanage: Use semanage_mls_enabled Stephen Smalley Re: Label Translation on Fedora 9 Joe Nall Re: Label Translation on Fedora 9 Russell Coker Tuesday, 11 November user guide drafts: "Linux Permissions" and "Manual Pages for Services" Murray McAllister Re: [PATCH] homedir_template generation skips USER lines Joshua Brindle Re: Latest policycoreutils package has a minor problem Joshua Brindle Re: [PATCH] libsemanage: Add semanage_mls_enabled interface Joshua Brindle Re: [refpolicy] latest svn refpolicy confusion Christopher J. PeBenito latest svn refpolicy confusion Justin Mattock [PATCH] homedir_template generation skips USER lines Christopher J. PeBenito Monday, 10 November Re: [refpolicy] SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 Justin P. Mattock Re: [refpolicy] SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 Christopher J. PeBenito SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 Justin Mattock [PATCH] libsemanage: Add semanage_mls_enabled interface Stephen Smalley Re: Label Translation on Fedora 9 Paul Moore Re: Label Translation on Fedora 9 Xavier Toth Re: Label Translation on Fedora 9 Paul Moore Re: Label Translation on Fedora 9 Joe Nall Re: Label Translation on Fedora 9 Xavier Toth Re: Label Translation on Fedora 9 Paul Moore Re: seobject_fcontext patch allows you to modify a preexisting file context. Joshua Brindle Re: newrole error message corrections. Joshua Brindle Re: policycoreutils audit2allow patch Joshua Brindle Re: policycoreutils patch Joshua Brindle Latest policycoreutils package has a minor problem Daniel J Walsh Sunday, 9 November Re: Label Translation on Fedora 9 Joe Nall Saturday, 8 November Re: [PATCH] SELinux: Use unknown perm handling to handle unknown netlink msg types James Morris Friday, 7 November Re: [PATCH] SELinux: Use unknown perm handling to handle unknown netlink msg types Paul Moore Re: [PATCH] SELinux: Use unknown perm handling to handle unknown netlink msg types Stephen Smalley Re: [PATCH] SELinux: Use unknown perm handling to handle unknown netlink msg types Eric Paris Re: seobject_mls.patch Stephen Smalley Re: [PATCH -v3 2/4] vm: use new has_capability_noaudit Stephen Smalley Re: [PATCH -v3 4/4] SELinux: use new cap_noaudit interface Stephen Smalley Re: seobject_mls.patch Stephen Smalley [PATCH -v3 1/4] SECURITY: new capable_noaudit interface Eric Paris [PATCH -v3 3/4] filesystems: use has_capability_noaudit interface for reserved blocks checks Eric Paris [PATCH -v3 4/4] SELinux: use new cap_noaudit interface Eric Paris [PATCH -v3 2/4] vm: use new has_capability_noaudit Eric Paris seobject_fcontext patch allows you to modify a preexisting file context. Daniel J Walsh seobject_mls.patch Daniel J Walsh semodule patch to use new semanage interfaces Daniel J Walsh chcat patch. Daniel J Walsh newrole error message corrections. Daniel J Walsh policycoreutils audit2allow patch Daniel J Walsh Now that F11 has started, I am putting in the compression support. Daniel J Walsh Re: [RFC] Kernel .config options for building LTP SECURITY TESTS Subrata Modak Re: user guide draft: "Port Numbers" Jan-Frode Myklebust SELinux User Guide: weekly report 20081107 Murray McAllister Thursday, 6 November Re: Restorecond.conf Justin P. Mattock Re: Restorecond.conf Stephen Smalley Restorecond.conf Justin P. Mattock Re: restorecon / matchpathcon LC Bruzenak Re: restorecon / matchpathcon Daniel J Walsh Re: restorecon / matchpathcon LC Bruzenak Re: restorecon / matchpathcon Daniel J Walsh restorecon / matchpathcon LC Bruzenak Re: user guide drafts: "Searching for and Viewing Denials" and "Analyzing Denials" Daniel J Walsh SE-PostgreSQL documentation KaiGai Kohei user guide draft: "Port Numbers" Murray McAllister Wednesday, 5 November Re: user guide drafts: "Searching for and Viewing Denials" and "Analyzing Denials" Murray McAllister Re: using roles with mls policy Justin Mattock Re: using roles with mls policy Daniel J Walsh Re: user guide drafts: "Searching for and Viewing Denials" and "Analyzing Denials" Daniel J Walsh Re: using roles with mls policy Justin P. Mattock Re: using roles with mls policy Andy Warner Re: using roles with mls policy Andy Warner Re: [PATCH] SELinux: Use unknown perm handling to handle unknown netlink msg types Paul Moore Re: using roles with mls policy Justin Mattock using roles with mls policy Andy Warner Re: user guide drafts: "Searching for and Viewing Denials" and "Analyzing Denials" Eric Paris [PATCH] SELinux: Use unknown perm handling to handle unknown netlink msg types Eric Paris Re: setroubleshoot var types Stephen Smalley setroubleshoot var types warner_at_rubix.com user guide drafts: "Searching for and Viewing Denials" and "Analyzing Denials" Murray McAllister Tuesday, 4 November Re: [PATCH] SELinux: hold tasklist_lock and siglock while waking wait_chldexit Eric Paris Re: [PATCH] SELinux: hold tasklist_lock and siglock while waking wait_chldexit James Morris Re: SELinux on NFS. David P. Quigley [PATCH] SELinux: hold tasklist_lock and siglock while waking wait_chldexit Eric Paris Re: SELinux on NFS. David P. Quigley Re: [PATCH -v2 1/3] SECURITY: new capable_noaudit interface Stephen Smalley Re: [RFC] Kernel .config options for building LTP SECURITY TESTS Stephen Smalley [RFC] Kernel .config options for building LTP SECURITY TESTS Subrata Modak Re: user guide drafts: "What Happens when Access is Denied" and "Top Three Causes of Problems" Murray McAllister Monday, 3 November user guide drafts: "What Happens when Access is Denied" and "Top Three Causes of Problems" Murray McAllister SELinux on NFS. Daniel J Walsh [PATCH -v2 3/3] filesystems: use has_capability_noaudit interface for reserved blocks checks Eric Paris [PATCH -v2 1/3] SECURITY: new capable_noaudit interface Eric Paris [PATCH -v2 2/3] vm: use new has_capability_noaudit Eric Paris Re: Label Translation on Fedora 9 Daniel J Walsh Re: Label Translation on Fedora 9 Paul Moore Re: Label Translation on Fedora 9 Stephen Smalley Re: Label Translation on Fedora 9 Andy Warner Re: Label Translation on Fedora 9 Stephen Smalley Label Translation on Fedora 9 Andy Warner Friday, 31 October [PATCH]SELinux: properly handle empty tty_files list Eric Paris Re: user guide: troubleshooting chapter Daniel J Walsh Re: RFC: changing the "+" in ls -l output to be "." or "+" Daniel J Walsh Re: README in libselinux KaiGai Kohei SELinux User Guide: weekly report 20081031 Murray McAllister Thursday, 30 October Re: semanage help LC Bruzenak Re: SELinux policy parser Sanjai Narain Re: SELinux policy parser Daniel J Walsh Re: semanage help Daniel J Walsh Re: [libvirt] [RFC] sVirt v0.10 - initial prototype Daniel J Walsh SELinux policy parser Sanjai Narain Re: README in libselinux Eamon Walsh Re: README in libselinux Eamon Walsh Re: semanage help Joshua Brindle Re: semanage help Daniel J Walsh [PATCH] libselinux: use message types when logging messages Eamon Walsh Re: [PATCH -v1 1/3] SECURITY: new capable_noaudit interface Paul Moore Re: [PATCH -v1 1/3] SECURITY: new capable_noaudit interface Eric Paris Re: [PATCH -v1 1/3] SECURITY: new capable_noaudit interface Paul Moore Re: [PATCH -v1 1/3] SECURITY: new capable_noaudit interface Serge E. Hallyn Re: [PATCH] SELinux: check open perms in dentry_open not inode_permission James Morris Re: README in libselinux Stephen Smalley Re: [PATCH] SELinux: check open perms in dentry_open not inode_permission Stephen Smalley Tuesday, 21 October Re: [RFC] sVirt v0.10 - initial prototype Daniel P. Berrange Wednesday, 22 October Re: [RFC] sVirt v0.10 - initial prototype Daniel P. Berrange Re: [RFC] sVirt v0.10 - initial prototype Daniel P. Berrange Thursday, 30 October Re: [libvirt] [RFC] sVirt v0.10 - initial prototype Atsushi SAKAI Re: user guide draft: "Examples: Booleans for NFS" Murray McAllister Re: user guide draft: "Examples: Booleans for NFS" Russell Coker README in libselinux KaiGai Kohei Wednesday, 29 October Re: user guide draft: "Examples: Booleans for NFS" Murray McAllister Re: [RFC] sVirt v0.10 - initial prototype James Morris [PATCH] SELinux: check open perms in dentry_open not inode_permission Eric Paris Re: [PATCH -v1 2/3] vm: use new has_capability_noaudit Eric Paris Re: [PATCH -v1 2/3] vm: use new has_capability_noaudit Stephen Smalley [PATCH -v1 3/3] filesystems: use has_capability_noaudit interface for reserved blocks checks Eric Paris [PATCH -v1 1/3] SECURITY: new capable_noaudit interface Eric Paris [PATCH -v1 2/3] vm: use new has_capability_noaudit Eric Paris Tuesday, 21 October Re: [RFC] sVirt v0.10 - initial prototype Daniel P. Berrange Wednesday, 29 October Re: [PATCH 1/2] SELinux: do not check open on dir path walk Stephen Smalley Re: [PATCH 1/2] SELinux: do not check open on dir path walk Eric Paris Re: [RFC] sVirt v0.10 - initial prototype David P. Quigley Re: [PATCH 1/2] SELinux: do not check open on dir path walk Stephen Smalley [PATCH 2/2] SELinux: do not spam dmesg about unix domain sockets Eric Paris [PATCH 1/2] SELinux: do not check open on dir path walk Eric Paris Re: user guide draft: "Examples: Booleans for NFS" Daniel J Walsh Re: 2.6.26 Debian kernel panic Russell Coker Re: user guide: troubleshooting chapter Dominick Grift Tuesday, 28 October user guide: troubleshooting chapter Murray McAllister Re: user guide drafts: "Mounting File Systems" Daniel J Walsh Re: [RFC] sVirt v0.10 - initial prototype Paul Moore Re: [RFC] sVirt v0.10 - initial prototype James Morris Re: 2.6.26 Debian kernel panic Stephen Smalley Re: 2.6.26 Debian kernel panic Stephen Smalley user guide drafts: "Changing the Default Mapping" and "xguest: Kiosk Mode" Murray McAllister Monday, 27 October 2.6.26 Debian kernel panic Russell Coker Sunday, 26 October user guide draft: "Examples: Booleans for NFS" Murray McAllister Re: user guide drafts: "Mounting File Systems" Murray McAllister Re: RFC: changing the "+" in ls -l output to be "." or "+" Jim Meyering Re: RFC: changing the "+" in ls -l output to be "." or "+" Russell Coker Friday, 24 October Re: ext4_has_free_blocks always checks cap_sys_resource and makes SELinux unhappy Stephen Smalley Re: ext4_has_free_blocks always checks cap_sys_resource and makes SELinux unhappy Eric Paris Re: ext4_has_free_blocks always checks cap_sys_resource and makes SELinux unhappy Stephen Smalley ext4_has_free_blocks always checks cap_sys_resource and makes SELinux unhappy Eric Paris Re: RFC: changing the "+" in ls -l output to be "." or "+" Mike Edenfield SELinux User Guide: weekly report 20081024 Murray McAllister Re: RFC: changing the "+" in ls -l output to be "." or "+" Jim Meyering Thursday, 23 October Re: RFC: changing the "+" in ls -l output to be "." or "+" Vikram Noel Ambrose Re: semanage help Stephen Smalley Re: semanage help LC Bruzenak Re: semanage help Stephen Smalley Re: semanage help Daniel J Walsh Re: semanage help Daniel J Walsh Re: semanage help LC Bruzenak policycoreutils patch Daniel J Walsh Re: semanage help Daniel J Walsh Re: semanage help Stephen Smalley Re: semanage help Daniel J Walsh Re: Use of optional_policy in templates (compiler bug or feature?) Stephen Smalley Re: Use of optional_policy in templates (compiler bug or feature?) Joshua Brindle Re: Use of optional_policy in templates (compiler bug or feature?) Stephen Smalley Re: semanage help Stephen Smalley Re: RFC: changing the "+" in ls -l output to be "." or "+" Jim Meyering Re: [RFC] sVirt v0.10 - initial prototype Paul Moore Re: [LTP][PATCH 1/2] Replacement of deprecated interfaces Subrata Modak Re: [LTP][PATCH 2/2] Add a new test case for bounds types Subrata Modak Re: [LTP][PATCH 2/2] Add a new test case for bounds types KaiGai Kohei Re: user guide drafts: "Mounting File Systems" Murray McAllister Re: user guide drafts: "Mounting File Systems" Murray McAllister Wednesday, 22 October semanage help LC Bruzenak Re: user guide drafts: "Mounting File Systems" Daniel J Walsh Re: Use of optional_policy in templates (compiler bug or feature?) Joshua Brindle Re: user guide drafts: "Mounting File Systems" Stephen Smalley Re: Use of optional_policy in templates (compiler bug or feature?) Stephen Smalley Re: Use of optional_policy in templates (compiler bug or feature?) Stephen Smalley Re: Use of optional_policy in templates (compiler bug or feature?) Joe Nall Re: Use of optional_policy in templates (compiler bug or feature?) Stephen Smalley Re: [LTP][PATCH 2/2] Add a new test case for bounds types Subrata Modak Re: [RFC] sVirt v0.10 - initial prototype James Morris Re: [RFC] sVirt v0.10 - initial prototype James Morris Re: [RFC] sVirt v0.10 - initial prototype James Morris Re: [RFC] sVirt v0.10 - initial prototype James Morris Re: user guide drafts: "Mounting File Systems" Murray McAllister Tuesday, 21 October Re: [RFC] sVirt v0.10 - initial prototype Daniel J Walsh Re: Conditional Access to Network Resources Paul Moore Re: [RFC] sVirt v0.10 - initial prototype Daniel J Walsh Re: Conditional Access to Network Resources Stephen Smalley Re: Conditional Access to Network Resources Dominick Grift Conditional Access to Network Resources Chris Kuester Monday, 20 October [RFC] sVirt v0.10 - initial prototype James Morris Re: Use of optional_policy in templates (compiler bug or feature?) Eamon Walsh Re: [PATCH] selinux: new permission for chmod on suid or sgid files James Morris Re: xend and noatsecure Stephen Smalley xend and noatsecure Russell Coker Re: [PATCH] selinux: new permission for chmod on suid or sgid files Stephen Smalley Re: [PATCH] selinux: new permission for chmod on suid or sgid files Stephen Smalley Re: [PATCH] selinux: new permission for chmod on suid or sgid files Eric Paris Re: [PATCH] selinux: new permission for chmod on suid or sgid files Stephen Smalley Re: Trying to figure out the signature of a screen capture. Daniel J Walsh Re: [PATCH] selinux: new permission for chmod on suid or sgid files Daniel J Walsh Re: [PATCH] selinux: new permission for chmod on suid or sgid files Daniel J Walsh Re: Use of optional_policy in templates (compiler bug or feature?) Joe Nall Re: Use of optional_policy in templates (compiler bug or feature?) Daniel J Walsh RE: Re: SELinux blocking disclaimer - help diagnosing Stephen Smalley RE: [SPAM?] Re: SELinux blocking disclaimer - help diagnosing Paul Cocker Re: user guide drafts: "Managing Users" Stephen Smalley Re: user guide drafts: "Managing Users" Stephen Smalley Re: user guide drafts: "Mounting File Systems" Stephen Smalley RE: SELinux blocking disclaimer - help diagnosing Paul Cocker Re: SELinux blocking disclaimer - help diagnosing Stephen Smalley Re: [PATCH] selinux: new permission for chmod on suid or sgid files Stephen Smalley Re: [PATCH] selinux: new permission for chmod on suid or sgid files Stephen Smalley Re: [PATCH] selinux: new permission for chmod on suid or sgid files Stephen Smalley Re: SELinux blocking disclaimer - help diagnosing Russell Coker SELinux blocking disclaimer - help diagnosing Paul Cocker user guide drafts: "Managing Users" Murray McAllister Sunday, 19 October Re: user guide drafts: "Mounting File Systems" Murray McAllister Re: user guide drafts: "Mounting File Systems" Murray McAllister Friday, 17 October Re: [PATCH] selinux: new permission for chmod on suid or sgid files Daniel J Walsh Re: [PATCH] selinux: new permission for chmod on suid or sgid files Daniel J Walsh Re: [PATCH] selinux: new permission for chmod on suid or sgid files Eric Paris Re: [PATCH] selinux: new permission for chmod on suid or sgid files Eric Paris Re: [PATCH] selinux: new permission for chmod on suid or sgid files Stephen Smalley Re: [PATCH] selinux: new permission for chmod on suid or sgid files Eric Paris Re: [PATCH] selinux: new permission for chmod on suid or sgid files Stephen Smalley Re: Protecting against inadvertent file copy Sanjai Narain Re: [PATCH] selinux: new permission for chmod on suid or sgid files Daniel J Walsh Re: [PATCH] selinux: new permission for chmod on suid or sgid files Stephen Smalley Re: [PATCH] selinux: new permission for chmod on suid or sgid files Daniel J Walsh Re: [PATCH] selinux: new permission for chmod on suid or sgid files Stephen Smalley Re: Protecting against inadvertent file copy Stephen Smalley Re: [PATCH] selinux: new permission for chmod on suid or sgid files Stephen Smalley Protecting against inadvertent file copy Sanjai Narain [PATCH] libsepol: add new file setsuid_perms policy capability Eric Paris [patch] policy: add new permission setsuid to file class Eric Paris [PATCH] selinux: new permission for chmod on suid or sgid files Eric Paris Re: Creating new types Stephen Smalley Re: adding objects classes and permissions to policy Stephen Smalley Re: adding objects classes and permissions to policy Andy Warner Creating new types Paul Cocker Re: adding objects classes and permissions to policy Stephen Smalley Re: adding objects classes and permissions to policy Andy Warner Re: adding objects classes and permissions to policy Stephen Smalley Re: adding objects classes and permissions to policy Andy Warner Re: [refpolicy] keep getting the same avc denial: tmpfs_t:dir search; Justin Mattock SELinux User Guide: weekly report 20081017 Murray McAllister Thursday, 16 October Re: (u\|r)bacsep: initial testing Russell Coker Re: adding objects classes and permissions to policy Stephen Smalley Re: adding objects classes and permissions to policy Xavier Toth Re: adding objects classes and permissions to policy Stephen Smalley Re: adding objects classes and permissions to policy Stephen Smalley adding objects classes and permissions to policy Andy Warner Re: (u\|r)bacsep: initial testing Christopher J. PeBenito Re: Re: Genfscon and cramfs issue Stephen Smalley Re: Use of optional_policy in templates (compiler bug or feature?) Joe Nall Re: Use of optional_policy in templates (compiler bug or feature?) Joshua Brindle Re: user guide drafts: "Mounting File Systems" Stephen Smalley Re: Use of optional_policy in templates (compiler bug or feature?) Joe Nall Re: Use of optional_policy in templates (compiler bug or feature?) Christopher J. PeBenito Re: Re: Genfscon and cramfs issue Stephen Smalley Wednesday, 15 October Re: user guide drafts: "Mounting File Systems" Murray McAllister Re: user guide drafts: "Mounting File Systems" Murray McAllister Re: Re: Genfscon and cramfs issue korkishko Tymur Re: Re: Genfscon and cramfs issue korkishko Tymur Re: Trying to figure out the signature of a screen capture. Eamon Walsh Re: Use of optional_policy in templates (compiler bug or feature?) Joe Nall Re: Trying to figure out the signature of a screen capture. Daniel J Walsh Re: Use of optional_policy in templates (compiler bug or feature?) Christopher J. PeBenito Re: [refpolicy] keep getting the same avc denial: tmpfs_t:dir search; Justin Mattock Re: Trying to figure out the signature of a screen capture. Eamon Walsh Trying to figure out the signature of a screen capture. Daniel J Walsh Use of optional_policy in templates (compiler bug or feature?) Joe Nall Re: Genfscon 'dash' issue Joshua Brindle Re: Genfscon and cramfs issue Stephen Smalley Re: Genfscon and cramfs issue Stephen Smalley Re: user guide drafts: Maintaining SELinux Labels Stephen Smalley Tuesday, 14 October keep getting the same avc denial: tmpfs_t:dir search; Justin Mattock Genfscon and cramfs issue korkishko Tymur Re: user guide drafts: Maintaining SELinux Labels Murray McAllister Re: Re: Genfscon 'dash' issue korkishko Tymur Re: user guide drafts: Maintaining SELinux Labels Stephen Smalley Re: user guide drafts: Maintaining SELinux Labels Russell Coker Re: Genfscon 'dash' issue Joshua Brindle Re: matchpathcon -V does not always work as expected. Joshua Brindle Re: Yet another man page patch Joshua Brindle ANN: Reference Policy Release Christopher J. PeBenito Re: [refpolicy] newrole without even knowing Justin Mattock Re: Re: Genfscon 'dash' issue Stephen Smalley Re: [Labeled-nfs] [RFC v3] Security Label Support for NFSv4 David P. Quigley Re: user guide drafts: Maintaining SELinux Labels Stephen Smalley Re: user guide drafts: Maintaining SELinux Labels Stephen Smalley Re: Capabilities audit field Stephen Smalley Re: [refpolicy] newrole without even knowing Daniel J Walsh Re: Capabilities audit field James Morris Re: gdm ubuntu 8.10 Justin Mattock Monday, 13 October Re: gdm ubuntu 8.10 Russell Coker Re: gdm ubuntu 8.10 Justin Mattock Re: Re: Genfscon 'dash' issue korkishko Tymur Re: [RFC v3] Security Label Support for NFSv4 James Morris Re: Capabilities audit field Steve Grubb Re: Capabilities audit field James Morris newrole without even knowing Justin Mattock New libsemanage space saving patch. Daniel J Walsh Re: user guide drafts: Archiving Files with tar/star Daniel J Walsh Re: Capabilities audit field Steve Grubb Re: Capabilities audit field James Morris Sunday, 12 October Re: Capabilities audit field Joshua Brindle Re: Capabilities audit field James Morris Re: gdm ubuntu 8.10 Justin Mattock Re: gdm ubuntu 8.10 Justin Mattock Capabilities audit field Steve Grubb Re: gdm ubuntu 8.10 Russell Coker Re: user guide drafts: Maintaining SELinux Labels Murray McAllister Saturday, 11 October gdm ubuntu 8.10 Justin Mattock Re: user guide drafts: Maintaining SELinux Labels Russell Coker Re: user guide drafts: Maintaining SELinux Labels Murray McAllister Re: user guide drafts: "Mounting File Systems" Russell Coker Re: user guide drafts: Maintaining SELinux Labels Russell Coker Re: user guide drafts: Archiving Files with tar/star Murray McAllister Re: user guide drafts: Maintaining SELinux Labels Murray McAllister Friday, 10 October Re: [PATCH v7 01/17] netlabel: Fix some sparse warnings James Morris Re: per role template confusion Daniel J Walsh Re: [PATCH 03/14] Security: Add hook to calculate context based on a negative dentry. Serge E. Hallyn Re: [PATCH 03/14] Security: Add hook to calculate context based on a negative dentry. David P. Quigley Re: per role template confusion Joe Nall Re: per role template confusion Christopher J. PeBenito Re: per role template confusion Joe Nall Re: user guide drafts: "Mounting File Systems" Stephen Smalley Re: user guide drafts: "Mounting File Systems" Eric Paris Re: user guide drafts: "Mounting File Systems" Stephen Smalley Re: user guide drafts: "Mounting File Systems" Stephen Smalley Re: per role template confusion Christopher J. PeBenito Re: user guide drafts: Archiving Files with tar/star Stephen Smalley Re: user guide drafts: Maintaining SELinux Labels Stephen Smalley Re: Genfscon 'dash' issue Stephen Smalley Re: user guide drafts: "Mounting File Systems" Russell Coker Re: user guide drafts: "Mounting File Systems" Murray McAllister SELinux User Guide: weekly report 20081010 Murray McAllister Re: user guide drafts: "Mounting File Systems" Murray McAllister user guide drafts: "Mounting File Systems" Murray McAllister Re: Call for representation at the LCA2009 Security Mini-Conf Russell Coker Genfscon 'dash' issue korkishko Tymur Call for representation at the LCA2009 Security Mini-Conf Casey Schaufler Thursday, 9 October Re: user guide drafts: Archiving Files with tar/star Russell Coker Re: user guide drafts: Archiving Files with tar/star Murray McAllister Re: user guide drafts: Archiving Files with tar/star Russell Coker Re: [PATCH 2/3] Thread/Child-Domain Assignment (rev.2) Joshua Brindle Re: [PATCH 2/3] Thread/Child-Domain Assignment (rev.2) KaiGai Kohei Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) KaiGai Kohei Re: user guide drafts: Archiving Files with tar/star Murray McAllister Re: per role template confusion Joe Nall Re: building base policy on RHEL5 Dominick Grift building base policy on RHEL5 Andy Warner Re: per role template confusion Joshua Brindle per role template confusion Joe Nall Re: BUGREPORT: A type alias of invisible primary one Joshua Brindle Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) Joshua Brindle Re: [PATCH 2/3] Thread/Child-Domain Assignment (rev.2) Joshua Brindle Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) Joshua Brindle Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) Joshua Brindle Re: user guide drafts: Archiving Files with tar/star Daniel J Walsh user guide drafts: Archiving Files with tar/star Murray McAllister Wednesday, 8 October Re: user guide drafts: Maintaining SELinux Labels Murray McAllister RE: user guide drafts: Maintaining SELinux Labels Clarkson, Mike R \(US SSA\) Re: user guide drafts: Maintaining SELinux Labels Glenn Faden Re: user guide drafts: Maintaining SELinux Labels Daniel J Walsh Re: Customizing SELinux Policy Daniel J Walsh Re: [refpolicy] Milter Mail Filters Paul Howarth Tuesday, 7 October user guide drafts: Maintaining SELinux Labels Murray McAllister Re: typebounds lookup from userspace KaiGai Kohei Re: typebounds lookup from userspace Eamon Walsh Re: typebounds lookup from userspace Stephen Smalley Re: typebounds lookup from userspace Eamon Walsh permissive domain interface (Re: typebounds lookup from userspace) KaiGai Kohei Re: typebounds lookup from userspace KaiGai Kohei Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) KaiGai Kohei Monday, 6 October Re: [PATCH 02/14] LSM/SELinux: inode_{get,set,notify}secctx hooks to access LSM security context information. David P. Quigley Re: [PATCH 02/14] LSM/SELinux: inode_{get,set,notify}secctx hooks to access LSM security context information. David P. Quigley [PATCH v7 17/17] netlabel: Add configuration support for local labeling Paul Moore [PATCH v7 16/17] cipso: Add support for native local labeling and fixup mapping names Paul Moore [PATCH v7 15/17] netlabel: Changes to the NetLabel security attributes to allow LSMs to pass full contexts Paul Moore [PATCH v7 14/17] selinux: Cache NetLabel secattrs in the socket's security struct Paul Moore [PATCH v7 13/17] selinux: Set socket NetLabel based on connection endpoint Paul Moore [PATCH v7 11/17] netlabel: Add network address selectors to the NetLabel/LSM domain mapping Paul Moore [PATCH v7 12/17] netlabel: Add functionality to set the security attributes of a packet Paul Moore [PATCH v7 10/17] netlabel: Add a generic way to create ordered linked lists of network addrs Paul Moore [PATCH v7 09/17] netlabel: Replace protocol/NetLabel linking with refrerence counts Paul Moore [PATCH v7 08/17] smack: Fix missing calls to netlbl_skbuff_err() Paul Moore [PATCH v7 07/17] selinux: Fix missing calls to netlbl_skbuff_err() Paul Moore [PATCH v7 06/17] selinux: Fix a problem in security_netlbl_sid_to_secattr() Paul Moore [PATCH v7 05/17] selinux: Better local/forward check in selinux_ip_postroute() Paul Moore [PATCH v7 04/17] netlabel: Remove unneeded in-kernel API functions Paul Moore [PATCH v7 03/17] selinux: Correctly handle IPv4 packets on IPv6 sockets in all cases Paul Moore [PATCH v7 02/17] selinux: Cleanup the NetLabel glue code Paul Moore [PATCH v7 01/17] netlabel: Fix some sparse warnings Paul Moore [PATCH v7 00/17] Labeled networking patches for 2.6.28 Paul Moore Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) Joshua Brindle Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) Joshua Brindle RE: user guide drafts: "Working with SELinux" sections Clarkson, Mike R \(US SSA\) Re: [refpolicy] Milter Mail Filters Christopher J. PeBenito Customizing SELinux Policy Alain Reguera Delgado Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) Stephen Smalley Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) KaiGai Kohei Saturday, 4 October Re: [PATCH] capability: WARN when invalid capability is requested rather than BUG/panic Andrew G. Morgan Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) Joshua Brindle Friday, 3 October Re: [autotools][patch] AC_INIT VERSION info fix + checkpolicy test Vikram Noel Ambrose Re: [PATCH] selinux: Fix an uninitialized variable BUG/panic in selinux_secattr_to_sid() James Morris RE: [autotools][patch] AC_INIT VERSION info fix + checkpolicy test Jason Tang [PATCH] selinux: Fix an uninitialized variable BUG/panic in selinux_secattr_to_sid() Paul Moore SELinux User Guide: weekly report 20081003 Murray McAllister Thursday, 2 October Re: user guide drafts: "Working with SELinux" sections Murray McAllister Wednesday, 1 October Re: [RFC PATCH v6 15/16] cipso: Add support for native local labeling and fixup mapping names Paul Moore Re: [RFC PATCH v6 00/16] Labeled networking patches for 2.6.28 James Morris Re: [RFC PATCH v6 15/16] cipso: Add support for native local labeling and fixup mapping names James Morris Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) Joshua Brindle Re: [RFC PATCH v6 15/16] cipso: Add support for native local labeling and fixup mapping names Paul Moore Re: [RFC PATCH v6 16/16] netlabel: Add configuration support for local labeling Paul Moore Re: [RFC PATCH v6 11/16] netlabel: Add functionality to set the security attributes of a packet Paul Moore Re: [RFC PATCH v6 04/16] selinux: Better local/forward check in selinux_ip_postroute() Paul Moore Re: [RFC PATCH v6 02/16] selinux: Correctly handle IPv4 packets on IPv6 sockets in all cases Paul Moore Re: [RFC PATCH v6 01/16] selinux: Cleanup the NetLabel glue code Paul Moore Re: [RFC PATCH v6 00/16] Labeled networking patches for 2.6.28 Paul Moore Re: [PATCH] capability: WARN when invalid capability is requested rather than BUG/panic Serge E. Hallyn Re: [PATCH] capability: WARN when invalid capability is requested rather than BUG/panic Eric Paris Re: [RFC PATCH v6 12/16] selinux: Set socket NetLabel based on connection endpoint Paul Moore Re: [RFC PATCH v6 12/16] selinux: Set socket NetLabel based on connection endpoint Joe Nall RE: genhomedircon problems Johnson, Richard genhomedircon problems Daniel J Walsh Re: [RFC PATCH v6 16/16] netlabel: Add configuration support for local labeling James Morris Re: [RFC PATCH v6 15/16] cipso: Add support for native local labeling and fixup mapping names James Morris Re: [RFC PATCH v6 12/16] selinux: Set socket NetLabel based on connection endpoint James Morris Re: [RFC PATCH v6 11/16] netlabel: Add functionality to set the security attributes of a packet James Morris Re: [RFC PATCH v6 10/16] netlabel: Add network address selectors to the NetLabel/LSM domain mapping James Morris Re: [RFC PATCH v6 09/16] netlabel: Add a generic way to create ordered linked lists of network addrs James Morris Re: [RFC PATCH v6 08/16] netlabel: Replace protocol/NetLabel linking with refrerence counts James Morris Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) KaiGai Kohei user guide drafts: SELinux Modes, Booleans, SELinux Contexts - Labeling Files Murray McAllister Re: user guide drafts: "Working with SELinux" sections Valdis.Kletnieks_at_vt.edu Tuesday, 30 September Re: [RFC PATCH v6 04/16] selinux: Better local/forward check in selinux_ip_postroute() James Morris Re: [RFC PATCH v6 03/16] netlabel: Remove unneeded in-kernel API functions James Morris Re: [RFC PATCH v6 02/16] selinux: Correctly handle IPv4 packets on IPv6 sockets in all cases James Morris Re: [RFC PATCH v6 01/16] selinux: Cleanup the NetLabel glue code James Morris Re: [RFC PATCH v6 00/16] Labeled networking patches for 2.6.28 James Morris Re: user guide drafts: "Working with SELinux" sections Murray McAllister Re: [PATCH 06/14] KConfig: Add KConfig entries for Labeled NFS Serge E. Hallyn Re: [PATCH 02/14] LSM/SELinux: inode_{get,set,notify}secctx hooks to access LSM security context information. Serge E. Hallyn Re: [PATCH 03/14] Security: Add hook to calculate context based on a negative dentry. Serge E. Hallyn Re: [PATCH 02/14] LSM/SELinux: inode_{get,set,notify}secctx hooks to access LSM security context information. Serge E. Hallyn Re: [PATCH 01/14] VFS: Factor out part of vfs_setxattr so it can be called from the SELinux hook for inode_setsecctx. Serge E. Hallyn Re: [PATCH] capability: WARN when invalid capability is requested rather than BUG/panic Eric Paris Re: [PATCH] capability: WARN when invalid capability is requested rather than BUG/panic Serge E. Hallyn Re: [PATCH] capability: WARN when invalid capability is requested rather than BUG/panic Eric Paris Re: [PATCH] capability: WARN when invalid capability is requested rather than BUG/panic Serge E. Hallyn Re: [PATCH] capability: WARN when invalid capability is requested rather than BUG/panic Eric Paris Re: [PATCH] capability: WARN when invalid capability is requested rather than BUG/panic James Morris Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) Joshua Brindle [PATCH] capability: WARN when invalid capability is requested rather than BUG/panic Eric Paris matchpathcon -V does not always work as expected. Daniel J Walsh Yet another man page patch Daniel J Walsh Re: sepostgresql.pp conflicts on F9 (Re: How to find SELinux policy type?) Paul Howarth Re: sepostgresql.pp conflicts on F9 (Re: How to find SELinux policy type?) KaiGai Kohei Re: sepostgresql.pp conflicts on F9 (Re: How to find SELinux policy type?) Dominick Grift sepostgresql.pp conflicts on F9 (Re: How to find SELinux policy type?) KaiGai Kohei Monday, 29 September Re: Some missing man pages from libselinux Joshua Brindle Re: [autotools] libselinux build system comments Vikram Noel Ambrose Re: Patch to make libsemanage/selinux policy require less space. Joshua Brindle Re: user guide drafts: "Working with SELinux" sections Stephen Smalley [PATCH 12/14] NFS: Client implementation of Labeled-NFS David P. Quigley [PATCH 09/14] NFS: Introduce lifecycle management for label attribute. David P. Quigley [PATCH 11/14] NFS/RPC: Add the auth_seclabel security flavor to allow the process label to be sent to the server. David P. Quigley [PATCH 05/14] SELinux: Add new labeling type native labels David P. Quigley [PATCH 08/14] NFS: Add security_label text mount option and handling code to NFS David P. Quigley [RFC v3] Security Label Support for NFSv4 David P. Quigley [PATCH 06/14] KConfig: Add KConfig entries for Labeled NFS David P. Quigley [PATCH 01/14] VFS: Factor out part of vfs_setxattr so it can be called from the SELinux hook for inode_setsecctx. David P. Quigley [PATCH 03/14] Security: Add hook to calculate context based on a negative dentry. David P. Quigley [PATCH 10/14] NFSv4: Introduce new label structure David P. Quigley [PATCH 02/14] LSM/SELinux: inode_{get,set,notify}secctx hooks to access LSM security context information. David P. Quigley [PATCH 04/14] Security: Add Hook to test if the particular xattr is part of a MAC model. David P. Quigley [PATCH 07/14] NFSv4: Add label recommended attribute and NFSv4 flags David P. Quigley [PATCH 14/14] NFSD: Server implementation of MAC Labeling David P. Quigley [PATCH 13/14] NFS: Extend NFS xattr handlers to accept the security namespace David P. Quigley Re: Patch to make libsemanage/selinux policy require less space. Daniel J Walsh Re: Patch to make libsemanage/selinux policy require less space. Joshua Brindle Re: [autotools] libselinux build system comments Joshua Brindle RE: [autotools] libselinux build system comments Jason Tang Re: [RFC][PATCH] selinux: use default proc sid on symlinks James Morris Re: [RFC][PATCH] selinux: use default proc sid on symlinks Stephen Smalley Sunday, 28 September ipcs Russell Coker [autotools][patch] AC_INIT macro fixes Vikram Noel Ambrose Saturday, 27 September Re: [autotools] libselinux build system comments Vikram Noel Ambrose RE: [autotools] libselinux build system comments Jason Tang Re: [autotools] libselinux build system comments Vikram Noel Ambrose Re: How to find SELinux policy type? KaiGai Kohei Friday, 26 September [autotools] libselinux build system comments Jason Tang [autotools][patch] libsepol build system comments Jason Tang Patch to make libsemanage/selinux policy require less space. Daniel J Walsh Re: How to find SELinux policy type? KaiGai Kohei Re: How to find SELinux policy type? Dominick Grift Re: How to find SELinux policy type? KaiGai Kohei Re: How to find SELinux policy type? Dominick Grift SELinux User Guide: weekly report 20080926 Murray McAllister Thursday, 25 September Re: How to find SELinux policy type? KaiGai Kohei Re: How to find SELinux policy type? Valdis.Kletnieks_at_vt.edu Re: user guide drafts: "Working with SELinux" sections Valdis.Kletnieks_at_vt.edu Re: [PATCH][autotools] libselinux/load_policy.o compile error Vikram Noel Ambrose Re: Fwd: checkmodule: duplicate declaration of type/attribute problem Joshua Brindle Fwd: checkmodule: duplicate declaration of type/attribute problem Xavier Toth Re: checkmodule: duplicate declaration of type/attribute problem Joshua Brindle checkmodule: duplicate declaration of type/attribute problem Xavier Toth Re: BUGREPORT: A type alias of invisible primary one KaiGai Kohei Wednesday, 24 September Re: How to find SELinux policy type? Justin P. Mattock Re: How to find SELinux policy type? Daniel J Walsh Some missing man pages from libselinux Daniel J Walsh Re: How to find SELinux policy type? Daniel J Walsh Tuesday, 23 September apol bugs Russell Coker Re: How to find SELinux policy type? James Morris Re: How to find SELinux policy type? KaiGai Kohei Re: How to find SELinux policy type? Paul Howarth Re: How to find SELinux policy type? KaiGai Kohei RE: How to find SELinux policy type? Mike Sweetser - Adhost How to find SELinux policy type? James Morris Re: [RFC][PATCH] selinux: use default proc sid on symlinks James Morris Re: [RFC][PATCH] selinux: use default proc sid on symlinks Stephen Smalley Re: [RFC][PATCH] selinux: use default proc sid on symlinks James Morris user guide drafts: "Working with SELinux" sections Murray McAllister Monday, 22 September Re: BUGREPORT: A type alias of invisible primary one Joshua Brindle [RFC][PATCH] selinux: use default proc sid on symlinks Stephen Smalley Re: Latest flask definitions for libselinux. Stephen Smalley Re: Latest flask definitions for libselinux. Joshua Brindle Re: Latest flask definitions for libselinux. Daniel J Walsh Re: Latest flask definitions for libselinux. Joshua Brindle Man page fixes for libselinux. Daniel J Walsh Latest flask definitions for libselinux. Daniel J Walsh Re: [refpolicy] Milter Mail Filters Paul Howarth Friday, 19 September Re: typebounds lookup from userspace Joshua Brindle Re: typebounds lookup from userspace Joshua Brindle Re: typebounds lookup from userspace Stephen Smalley Re: typebounds lookup from userspace Joshua Brindle Re: typebounds lookup from userspace Valdis.Kletnieks_at_vt.edu Re: typebounds lookup from userspace Stephen Smalley Re: typebounds lookup from userspace Joshua Brindle Re: typebounds lookup from userspace Stephen Smalley typebounds lookup from userspace Joshua Brindle Re: apol and linking Joshua Brindle Re: apol and linking Stephen Smalley apol and linking Russell Coker SELinux User Guide: weekly report 20080919 Murray McAllister Thursday, 18 September Re: Latest translations of SELinux policoreutils patch Joshua Brindle Wednesday, 17 September Re: PHP/SELinux: libselinux wrappers KaiGai Kohei Re: Latest translations of SELinux policoreutils patch Daniel J Walsh Re: Latest translations of SELinux policoreutils patch Joshua Brindle Re: user guide draft: "Confined and Unconfined User Domains" review Murray McAllister Re: user guide draft: "Confined and Unconfined User Domains" review Murray McAllister Re: [RFC PATCH v6 00/16] Labeled networking patches for 2.6.28 Casey Schaufler Tuesday, 16 September Re: [refpolicy] ssh issue with latest policy Justin Mattock Re: [refpolicy] ssh issue with latest policy Hong Re: [refpolicy] ssh issue with latest policy Justin Mattock Re: [refpolicy] ssh issue with latest policy Hong Re: [RFC PATCH v6 00/16] Labeled networking patches for 2.6.28 Paul Moore [RFC PATCH v6 09/16] netlabel: Add a generic way to create ordered linked lists of network addrs Paul Moore [RFC PATCH v6 12/16] selinux: Set socket NetLabel based on connection endpoint Paul Moore [RFC PATCH v6 16/16] netlabel: Add configuration support for local labeling Paul Moore [RFC PATCH v6 15/16] cipso: Add support for native local labeling and fixup mapping names Paul Moore [RFC PATCH v6 13/16] selinux: Cache NetLabel secattrs in the socket's security struct Paul Moore [RFC PATCH v6 10/16] netlabel: Add network address selectors to the NetLabel/LSM domain mapping Paul Moore [RFC PATCH v6 14/16] netlabel: Changes to the NetLabel security attributes to allow LSMs to pass full contexts Paul Moore [RFC PATCH v6 11/16] netlabel: Add functionality to set the security attributes of a packet Paul Moore [RFC PATCH v6 08/16] netlabel: Replace protocol/NetLabel linking with refrerence counts Paul Moore [RFC PATCH v6 07/16] smack: Fix missing calls to netlbl_skbuff_err() Paul Moore [RFC PATCH v6 06/16] selinux: Fix missing calls to netlbl_skbuff_err() Paul Moore [RFC PATCH v6 05/16] selinux: Fix a problem in security_netlbl_sid_to_secattr() Paul Moore [RFC PATCH v6 03/16] netlabel: Remove unneeded in-kernel API functions Paul Moore [RFC PATCH v6 04/16] selinux: Better local/forward check in selinux_ip_postroute() Paul Moore [RFC PATCH v6 00/16] Labeled networking patches for 2.6.28 Paul Moore [RFC PATCH v6 01/16] selinux: Cleanup the NetLabel glue code Paul Moore [RFC PATCH v6 02/16] selinux: Correctly handle IPv4 packets on IPv6 sockets in all cases Paul Moore [RFC] Apache/SELinux : Enables to prevent web application flaws. KaiGai Kohei Monday, 15 September Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) KaiGai Kohei Re: [PATCH][autotools] libselinux/load_policy.o compile error Joshua Brindle Re: libsemage patch to not compile modules for seusers and fcontext Joshua Brindle Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) Joshua Brindle Re: user guide draft: "Confined and Unconfined User Domains" review Daniel J Walsh Re: user guide draft: "Confined and Unconfined User Domains" review Daniel J Walsh Re: libsemage patch to not compile modules for seusers and fcontext Daniel J Walsh Re: user guide draft: "Confined and Unconfined User Domains" review Dominick Grift Re: user guide draft: "Confined and Unconfined User Domains" review Dominick Grift Sunday, 14 September Re: user guide draft: "Confined and Unconfined User Domains" review Murray McAllister Re: user guide draft: "Confined and Unconfined User Domains" review Murray McAllister [OT] voice at SecureOS BoF : Japan Linux Conference 2008 KaiGai Kohei Friday, 12 September SELinux User Guide: weekly report 20080913 Murray McAllister Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) KaiGai Kohei Re: libsemage patch to not compile modules for seusers and fcontext Joshua Brindle Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) Joshua Brindle Re: Changes to semanage to allow it to handle transactions. Joshua Brindle Latest translations of SELinux policoreutils patch Daniel J Walsh Re: Changes to semanage to allow it to handle transactions. Daniel J Walsh Re: Changes to semanage to allow it to handle transactions. Joshua Brindle Re: Only call gen_requires once. Joshua Brindle Re: Changes to semanage to allow it to handle transactions. Joshua Brindle Re: Add glob support for restorecond Joshua Brindle Re: fixfiles fixes Joshua Brindle Re: setkey ipsec no avc's message Justin Mattock Re: [refpolicy] ssh issue with latest policy Justin Mattock Re: [refpolicy] ssh issue with latest policy Václav Ovsík Re: setkey ipsec no avc's message Tomas Mraz Thursday, 11 September setkey ipsec no avc's message Justin Mattock Re: [refpolicy] ssh issue with latest policy Justin Mattock Re: xpyb Fedora package? Eamon Walsh Re: [patch] Update selinux info in MAINTAINERS and Kconfig help text James Morris Only call gen_requires once. Daniel J Walsh [patch] Update selinux info in MAINTAINERS and Kconfig help text Stephen Smalley Re: [refpolicy] ssh issue with latest policy Václav Ovsík Re: strange memory use of mcstransd Stephen Smalley Re: user guide draft: "Confined and Unconfined User Domains" review Murray McAllister Wednesday, 10 September strange memory use of mcstransd Russell Coker Re: libsemage patch to not compile modules for seusers and fcontext Ivan Gyurdiev xpyb Fedora package? Xavier Toth Re: Userspace versioning and releases Daniel J Walsh Userspace versioning and releases Joshua Brindle ssh issue with latest policy Justin Mattock [ANN] Updated SELinux userspace release and URL change Joshua Brindle Re: libsemage patch to not compile modules for seusers and fcontext Daniel J Walsh Re: semodule memory use Joshua Brindle Re: semanage fcontext - policy loading Stephen Smalley Re: semodule memory use Stephen Smalley semanage fcontext - policy loading Russell Coker Re: semodule memory use Russell Coker Tuesday, 9 September Re: semodule memory use Joshua Brindle dpkg bug related to SE Linux Russell Coker semodule memory use Russell Coker Re: BUGREPORT: A type alias of invisible primary one KaiGai Kohei Re: BUGREPORT: A type alias of invisible primary one Joshua Brindle Re: [refpolicy] Milter Mail Filters Paul Howarth Re: user guide draft: "Confined and Unconfined User Domains" review Daniel J Walsh BUGREPORT: A type alias of invisible primary one KaiGai Kohei Re: user guide draft: "Confined and Unconfined User Domains" review James Morris user guide draft: "Confined and Unconfined User Domains" review Murray McAllister PHP/SELinux: libselinux wrappers KaiGai Kohei Monday, 8 September Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) KaiGai Kohei Re: X11 abstract unix domain socket context question Stephen Smalley X11 abstract unix domain socket context question Joe Nall Changes to semanage to allow it to handle transactions. Daniel J Walsh Add glob support for restorecond Daniel J Walsh fixfiles fixes Daniel J Walsh Re: Why are the socket mls constraints are different between ipsec and netlabel? Paul Moore rsync issues with 'security.selinux': copying unlabelled files to a 'labelled' file system ... ? Tom London Why are the socket mls constraints are different between ipsec and netlabel? Joe Nall Re: I hope the user guide will explain what to do with a message such as this one Dominick Grift Re: user guide draft: "Targeted Policy" review Daniel J Walsh Re: user guide draft: "Targeted Policy" review Daniel J Walsh Sunday, 7 September Re: user guide draft: "SELinux Contexts and Attributes" review Murray McAllister I hope the user guide will explain what to do with a message such as this one Stanley A. Klein Saturday, 6 September Re: user guide draft: "Targeted Policy" review Murray McAllister Re: user guide draft: "Targeted Policy" review Murray McAllister Re: user guide draft: "Targeted Policy" review Murray McAllister Re: user guide draft: "SELinux Contexts and Attributes" review Murray McAllister Friday, 5 September Re: [RFC PATCH v5 05/14] smack: Fix missing calls to netlbl_skbuff_err() Casey Schaufler [RFC PATCH v5 13/14] cipso: Add support for native local labeling and fixup mapping names Paul Moore [RFC PATCH v5 09/14] netlabel: Add functionality to set the security attributes of a packet Paul Moore [RFC PATCH v5 10/14] selinux: Set socket NetLabel based on connection endpoint Paul Moore [RFC PATCH v5 14/14] netlabel: Add configuration support for local labeling Paul Moore [RFC PATCH v5 11/14] selinux: Cache NetLabel secattrs in the socket's security struct Paul Moore [RFC PATCH v5 12/14] netlabel: Changes to the NetLabel security attributes to allow LSMs to pass full contexts Paul Moore [RFC PATCH v5 08/14] netlabel: Add network address selectors to the NetLabel/LSM domain mapping Paul Moore [RFC PATCH v5 07/14] netlabel: Add a generic way to create ordered linked lists of network addrs Paul Moore [RFC PATCH v5 06/14] netlabel: Replace protocol/NetLabel linking with refrerence counts Paul Moore [RFC PATCH v5 05/14] smack: Fix missing calls to netlbl_skbuff_err() Paul Moore [RFC PATCH v5 04/14] selinux: Fix missing calls to netlbl_skbuff_err() Paul Moore [RFC PATCH v5 03/14] selinux: Fix a problem in security_netlbl_sid_to_secattr() Paul Moore [RFC PATCH v5 02/14] selinux: Better local/forward check in selinux_ip_postroute() Paul Moore [RFC PATCH v5 01/14] netlabel: Remove unneeded in-kernel API functions Paul Moore [RFC PATCH v5 00/14] Labeled networking patches for 2.6.28 Paul Moore Re: [RFC PATCH v4 02/14] selinux: Better local/forward check in selinux_ip_postroute() Paul Moore Re: user guide draft: "Targeted Policy" review Dominick Grift Re: user guide draft: "Targeted Policy" review Daniel J Walsh Re: user guide draft: "Targeted Policy" review Daniel J Walsh Re: [refpolicy] Milter Mail Filters Christopher J. PeBenito Re: user guide draft: "Targeted Policy" review Stephen Smalley Re: user guide draft: "SELinux Contexts and Attributes" review Stephen Smalley Re: [RFC PATCH v4 12/14] netlabel: Changes to the NetLabel security attributes to allow LSMs to pass full contexts James Morris Re: [RFC PATCH v4 11/14] selinux: Cache NetLabel secattrs in the socket's security struct James Morris Re: [RFC PATCH v4 10/14] selinux: Set socket NetLabel based on connection endpoint James Morris Re: [RFC PATCH v4 09/14] netlabel: Add functionality to set the security attributes of a packet James Morris Re: [RFC PATCH v4 04/14] selinux: Fix missing calls to netlbl_skbuff_err() James Morris Re: [RFC PATCH v4 03/14] selinux: Fix a problem in security_netlbl_sid_to_secattr() James Morris Re: [RFC PATCH v4 02/14] selinux: Better local/forward check in selinux_ip_postroute() James Morris SELinux User Guide: weekly report 20080905 Murray McAllister Re: user guide draft: "Targeted Policy" review Murray McAllister Re: user guide draft: "Targeted Policy" review Murray McAllister Re: user guide draft: "Targeted Policy" review Murray McAllister Re: user guide draft: "SELinux Contexts and Attributes" review Murray McAllister Thursday, 4 September Re: libsemage patch to not compile modules for seusers and fcontext Ivan Gyurdiev root plug confusion Justin Mattock Re: libsemage patch to not compile modules for seusers and fcontext Daniel J Walsh Re: [PATCH][gnome.if]: bad gen_require type Daniel J Walsh Re: [PATCH][gnome.if]: bad gen_require type Xavier Toth Re: [PATCH][autotools] libselinux/load_policy.o compile error Joshua Brindle Re: [PATCH][gnome.if]: bad gen_require type Daniel J Walsh Re: [PATCH][autotools] libselinux/load_policy.o compile error Vikram Noel Ambrose Re: [PATCH][gnome.if]: bad gen_require type Christopher J. PeBenito Re: [PATCH][autotools] libselinux/load_policy.o compile error Joshua Brindle Re: libsemage patch to not compile modules for seusers and fcontext Joshua Brindle [PATCH][gnome.if]: bad gen_require type Xavier Toth Re: [PATCH][origin/autotools] fix libtool_compat header error Stephen Smalley Re: [PATCH][origin/autotools] fix libtool_compat header error Joshua Brindle Re: [LTP] [RFC] LTP IMA patch Subrata Modak Re: setroubleshoot problems with MLS policy in enforcing mode Daniel J Walsh Re: [RFC PATCH v4 00/14] Labeled networking patches for 2.6.28 Paul Moore Wednesday, 3 September [PATCH][autotools] libselinux/load_policy.o compile error Vikram Noel Ambrose Re: [PATCH][origin/autotools] fix libtool_compat header error Vikram Noel Ambrose Re: [PATCH][origin/autotools] fix libtool_compat header error Joshua Brindle Re: [refpolicy] checkpolicy: error(s) encountered while parsing configuration Justin Mattock RE: user guide draft: "Targeted Policy" review Clarkson, Mike R \(US SSA\) Re: [PATCH -v3] SELinux: memory leak in security_context_to_sid_core Stephen Smalley [PATCH -v3] SELinux: memory leak in security_context_to_sid_core Eric Paris Re: [PATCH -v2] SELinux: memory leak in security_context_to_sid_core Stephen Smalley Re: [refpolicy] checkpolicy: error(s) encountered while parsing configuration Hong Re: [PATCH -v2] SELinux: memory leak in security_context_to_sid_core Eric Paris Hey we made it big time, we are being made fun of in a cartoon! Daniel J Walsh Re: [PATCH -v2] SELinux: memory leak in security_context_to_sid_core Stephen Smalley Re: [RFC PATCH v4 00/14] Labeled networking patches for 2.6.28 Paul Moore [PATCH -v2] SELinux: memory leak in security_context_to_sid_core Eric Paris Re: user guide draft: "Targeted Policy" review Daniel J Walsh Re: user guide draft: "Targeted Policy" review Stephen Smalley Re: [PATCH] SELinux: memory leak in security_context_to_sid_core Stephen Smalley Re: user guide draft: "SELinux Contexts and Attributes" review Stephen Smalley Re: [PATCH] SELinux: memory leak in security_context_to_sid_core James Morris Re: [refpolicy] checkpolicy: error(s) encountered while parsing configuration Christopher J. PeBenito Re: [PATCH] SELinux: memory leak in security_context_to_sid_core Stephen Smalley Re: user guide draft: "Targeted Policy" review James Morris Re: user guide draft: "Targeted Policy" review Dominick Grift user guide draft: "Targeted Policy" review Murray McAllister Re: user guide draft: "SELinux Contexts and Attributes" review Murray McAllister Re: user guide draft: "SELinux Contexts and Attributes" review Murray McAllister Tuesday, 2 September Re: [RFC PATCH v4 00/14] Labeled networking patches for 2.6.28 Casey Schaufler [RFC PATCH v4 13/14] cipso: Add support for native local labeling and fixup mapping names Paul Moore [RFC PATCH v4 14/14] netlabel: Add configuration support for local labeling Paul Moore [RFC PATCH v4 12/14] netlabel: Changes to the NetLabel security attributes to allow LSMs to pass full contexts Paul Moore [RFC PATCH v4 11/14] selinux: Cache NetLabel secattrs in the socket's security struct Paul Moore [RFC PATCH v4 10/14] selinux: Set socket NetLabel based on connection endpoint Paul Moore [RFC PATCH v4 09/14] netlabel: Add functionality to set the security attributes of a packet Paul Moore [RFC PATCH v4 08/14] netlabel: Add network address selectors to the NetLabel/LSM domain mapping Paul Moore [RFC PATCH v4 07/14] netlabel: Add a generic way to create ordered linked lists of network addrs Paul Moore [RFC PATCH v4 06/14] netlabel: Replace protocol/NetLabel linking with refrerence counts Paul Moore [RFC PATCH v4 05/14] smack: Fix missing calls to netlbl_skbuff_err() Paul Moore [RFC PATCH v4 04/14] selinux: Fix missing calls to netlbl_skbuff_err() Paul Moore [RFC PATCH v4 03/14] selinux: Fix a problem in security_netlbl_sid_to_secattr() Paul Moore [RFC PATCH v4 02/14] selinux: Better local/forward check in selinux_ip_postroute() Paul Moore [RFC PATCH v4 01/14] netlabel: Remove unneeded in-kernel API functions Paul Moore [RFC PATCH v4 00/14] Labeled networking patches for 2.6.28 Paul Moore [PATCH] SELinux: memory leak in security_context_to_sid_core Eric Paris Re: [refpolicy] checkpolicy: error(s) encountered while parsing configuration Justin Mattock Re: How can I know violations in denied timing ? Shintaro Fujiwara Re: user guide draft: "SELinux Contexts and Attributes" review Stephen Smalley Re: user guide draft: "SELinux Contexts and Attributes" review Stephen Smalley Re: How can I know violations in denied timing ? Stephen Smalley Re: user guide draft: "SELinux Contexts and Attributes" review Stephen Smalley Re: [refpolicy] checkpolicy: error(s) encountered while parsing configuration Christopher J. PeBenito Re: user guide draft: "Introduction" review Stephen Smalley Re: user guide draft: "Introduction" review Stephen Smalley Re: user guide draft: "SELinux Contexts and Attributes" review Murray McAllister Monday, 1 September Re: user guide draft: "SELinux Contexts and Attributes" review Murray McAllister Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.4) KaiGai Kohei RE: [PATCH 3/3] Thread/Child-Domain Assignment (rev.4) Joshua Brindle [PATCH] libsepol : Add support for a new policy version (POLICYDB_VERSION_BOUNDARY) KaiGai Kohei How can I know violations in denied timing ? Shintaro Fujiwara Re: user guide draft: "SELinux Contexts and Attributes" review Murray McAllister Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.4) KaiGai Kohei Re: user guide draft: "Introduction" review James Morris Sunday, 31 August Re: user guide draft: "Introduction" review Murray McAllister Re: checkpolicy: error(s) encountered while parsing configuration Justin P. Mattock Re: checkpolicy: error(s) encountered while parsing configuration Hong checkpolicy: error(s) encountered while parsing configuration Justin Mattock Re: user guide draft: "Introduction" review James Morris Re: user guide draft: "Introduction" review Murray McAllister Saturday, 30 August Re: semodule -i error shaunak saha Friday, 29 August Re: About SELinux in Ubuntu Russell Coker Re: About SELinux in Ubuntu Hong Re: Socket and inode label consistency Trent Jaeger Re: semodule -i error Stephen Smalley Re: semodule -i error Stephen Smalley Re: semodule -i error shaunak saha Re: semodule -i error Stephen Smalley Re: semodule -i error shaunak saha Re: semodule -i error Stephen Smalley Re: About Domain Transition Stephen Smalley Re: About SELinux in Ubuntu Stephen Smalley Re: Socket and inode label consistency Stephen Smalley semodule -i error shaunak saha Re: About Domain Transition Dominick Grift SELinux User Guide: weekly report 20080829 Murray McAllister Re: Socket and inode label consistency Casey Schaufler Thursday, 28 August Re: About Domain Transition Hong RE: [PATCH 3/3] Thread/Child-Domain Assignment (rev.4) Joshua Brindle Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.4) KaiGai Kohei Re: About Domain Transition Dominick Grift About Domain Transition Hong About SELinux in Ubuntu Hong Re: [RFC 1/2] labeled ipsec internet drafts Paul Moore Re: [RFC 1/2] labeled ipsec internet drafts Paul Moore Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.4) Joshua Brindle Re: [RFC 1/2] labeled ipsec internet drafts Paul Moore Re: [RFC 1/2] labeled ipsec internet drafts Paul Moore Re: Socket and inode label consistency Trent Jaeger Re: [PATCH] SELinux: add boundary support and thread context assignment James Morris Re: [LTP][PATCH 1/2] Replacement of deprecated interfaces Subrata Modak Re: [LTP][PATCH 1/2] Replacement of deprecated interfaces KaiGai Kohei Re: [PATCH] SELinux: add boundary support and thread context assignment Stephen Smalley Re: Socket and inode label consistency Stephen Smalley Re: [LTP][PATCH 1/2] Replacement of deprecated interfaces Subrata Modak Re: user guide draft: "Introduction" review James Morris [PATCH] SELinux: add boundary support and thread context assignment KaiGai Kohei Re: [LTP][PATCH 1/2] Replacement of deprecated interfaces KaiGai Kohei Re: user guide draft: "Introduction" review Murray McAllister Wednesday, 27 August Re: [RFC 1/2] labeled ipsec internet drafts Casey Schaufler Re: [PATCH 1/1] selinux: add support for installing a dummy policy (v2) James Morris Re: [RFC 1/2] labeled ipsec internet drafts Joy Latten Re: user guide draft: "Introduction" review Murray McAllister Re: [RFC 1/2] labeled ipsec internet drafts Joy Latten Re: [RFC 1/2] labeled ipsec internet drafts Joy Latten Re: libsemage patch to not compile modules for seusers and fcontext Joshua Brindle Re: Socket and inode label consistency Casey Schaufler Re: libsemage patch to not compile modules for seusers and fcontext Joshua Brindle Re: [RFC 1/2] labeled ipsec internet drafts David P. Quigley Re: [RFC 1/2] labeled ipsec internet drafts Paul Moore Re: [RFC 1/2] labeled ipsec internet drafts David P. Quigley Re: [RFC 1/2] labeled ipsec internet drafts David P. Quigley Re: Socket and inode label consistency Trent Jaeger Re: [RFC 1/2] labeled ipsec internet drafts Paul Moore Re: Socket and inode label consistency Paul Moore Re: Socket and inode label consistency Casey Schaufler Re: Socket and inode label consistency Trent Jaeger setroubleshoot problems with MLS policy in enforcing mode Robert Story Re: [RFC 1/2] labeled ipsec internet drafts Joy Latten Re: Socket and inode label consistency Paul Moore Re: Socket and inode label consistency Trent Jaeger Re: Socket and inode label consistency Stephen Smalley Re: Socket and inode label consistency Trent Jaeger Re: Socket and inode label consistency Eric Paris Re: New SELinux toolchain build system Vikram Ambrose Re: Socket and inode label consistency Trent Jaeger Re: [RFC 1/2] labeled ipsec internet drafts David P. Quigley Re: [RFC 1/2] labeled ipsec internet drafts Joy Latten Re: user guide draft: "Introduction" review Stephen John Smoogen Re: Socket and inode label consistency Paul Moore Re: user guide draft: "SELinux Contexts and Attributes" review Stephen Smalley Re: semodule -i not working Stephen Smalley Re: user guide draft: "Introduction" review Stephen Smalley Re: [LTP][PATCH 1/2] Replacement of deprecated interfaces Stephen Smalley Re: libsemage patch to not compile modules for seusers and fcontext Stephen Smalley Re: Socket and inode label consistency Stephen Smalley [LTP][PATCH 2/2] Add a new test case for bounds types KaiGai Kohei [LTP][PATCH 1/2] Replacement of deprecated interfaces KaiGai Kohei user guide draft: "SELinux Contexts and Attributes" review Murray McAllister user guide draft: "Introduction" review Murray McAllister Re: semodule -i not working Shaz Tuesday, 26 August Re: libsemage patch to not compile modules for seusers and fcontext Ivan Gyurdiev Re: [PATCH 1/3] Thread/Child-Domain Assignment (rev.6) KaiGai Kohei Re: [PATCH 1/3] Thread/Child-Domain Assignment (rev.6) KaiGai Kohei Socket and inode label consistency Trent Jaeger Re: [patch] selinux: simplify ioctl checking, SELinux enhancements in 2.6.26 James Morris Re: [RFC 1/2] labeled ipsec internet drafts David P. Quigley [PATCH 1/1] selinux: add support for installing a dummy policy (v2) Serge E. Hallyn Re: [PATCH 1/1] selinux: add support for installing a dummy policy Serge E. Hallyn Re: libsemage patch to not compile modules for seusers and fcontext Joshua Brindle Re: [RFC 1/2] labeled ipsec internet drafts Joy Latten Re: libsemage patch to not compile modules for seusers and fcontext Daniel J Walsh Re: [PATCH 1/1] selinux: add support for installing a dummy policy David P. Quigley Re: [RFC PATCH v3 00/13] Labeled networking patches for 2.6.28 Joe Nall Re: libsemage patch to not compile modules for seusers and fcontext Joshua Brindle Re: libsemage patch to not compile modules for seusers and fcontext Daniel J Walsh Re: PAM security transitions Daniel J Walsh Re: [PATCH 1/1] selinux: add support for installing a dummy policy Daniel J Walsh Re: [PATCH] Revised Patch for local nodecon support in semanage (was: Adding local nodecon's through semanage) Stephen Smalley Re: semodule -i not working Stephen Smalley Re: [PATCH 1/3] Thread/Child-Domain Assignment (rev.6) James Morris Re: [PATCH 1/3] Thread/Child-Domain Assignment (rev.6) James Morris semodule -i not working Shaz Re: [PATCH 1/3] Thread/Child-Domain Assignment (rev.6) James Morris Re: [PATCH 1/3] Thread/Child-Domain Assignment (rev.6) KaiGai Kohei Monday, 25 August Re: New SELinux toolchain build system Joshua Brindle Re: [RFC 1/2] labeled ipsec internet drafts David P. Quigley Re: [RFC 2/2] labeled ipsec internet drafts Joy Latten Re: [RFC 1/2] labeled ipsec internet drafts Joy Latten Re: [PATCH 1/1] selinux: add support for installing a dummy policy David P. Quigley Re: New SELinux toolchain build system Vikram Ambrose Re: [patch] libselinux: fix EMBEDDED=y build Joshua Brindle Re: [PATCH 1/3] Thread/Child-Domain Assignment (rev.6) KaiGai Kohei [patch] libselinux: fix EMBEDDED=y build Stephen Smalley Re: PAM security transitions Vikram Ambrose Re: [PATCH 1/3] Thread/Child-Domain Assignment (rev.6) Stephen Smalley [PATCH 3/3] Thread/Child-Domain Assignment (rev.4) KaiGai Kohei [PATCH 1/3] Thread/Child-Domain Assignment (rev.6) KaiGai Kohei Re: [PATCH 1/1] selinux: add support for installing a dummy policy Stephen Smalley Re: [PATCH 1/1] selinux: add support for installing a dummy policy Stephen Smalley Re: PAM security transitions Stephen Smalley Re: [PATCH 1/1] selinux: add support for installing a dummy policy James Morris Sunday, 24 August Re: New SELinux toolchain build system Joshua Brindle Friday, 22 August Re: [PATCH 1/1] selinux: add support for installing a dummy policy Serge E. Hallyn Re: PAM security transitions Russell Coker Re: [PATCH 1/1] selinux: add support for installing a dummy policy James Morris PAM security transitions Vikram Ambrose [PATCH 1/1] selinux: add support for installing a dummy policy Serge E. Hallyn Re: libsemage patch to not compile modules for seusers and fcontext Stephen Smalley SELinux User Guide: weekly report 20080822 Murray McAllister Thursday, 21 August [RFC PATCH v3 13/13] netlabel: Add configuration support for local labeling Paul Moore [RFC PATCH v3 12/13] cipso: Add support for native local labeling and fixup mapping names Paul Moore [RFC PATCH v3 09/13] selinux: Set socket NetLabel based on connection endpoint Paul Moore [RFC PATCH v3 11/13] netlabel: Changes to the NetLabel security attributes to allow LSMs to pass full contexts Paul Moore [RFC PATCH v3 10/13] selinux: Cache NetLabel secattrs in the socket's security struct Paul Moore [RFC PATCH v3 08/13] netlabel: Add functionality to set the security attributes of a packet Paul Moore [RFC PATCH v3 07/13] netlabel: Add network address selectors to the NetLabel/LSM domain mapping Paul Moore [RFC PATCH v3 06/13] netlabel: Add a generic way to create ordered linked lists of network addrs Paul Moore [RFC PATCH v3 05/13] netlabel: Replace protocol/NetLabel linking with refrerence counts Paul Moore [RFC PATCH v3 04/13] smack: Fix missing calls to netlbl_skbuff_err() Paul Moore [RFC PATCH v3 03/13] selinux: Fix missing calls to netlbl_skbuff_err() Paul Moore [RFC PATCH v3 02/13] selinux: Fix a problem in security_netlbl_sid_to_secattr() Paul Moore [RFC PATCH v3 01/13] netlabel: Remove unneeded in-kernel API functions Paul Moore [RFC PATCH v3 00/13] Labeled networking patches for 2.6.28 Paul Moore Re: [PATCH] Revised Patch for local nodecon support in semanage (was: Adding local nodecon's through semanage) Stephen Smalley Re: Make Dummy Policy David P. Quigley Re: [patch 04/35] corenetwork policy update Christopher J. PeBenito Re: Make Dummy Policy David P. Quigley Wednesday, 20 August Re: [ANN] SELinux userland repository, wiki and bug tracking on oss.tresys.com Joshua Brindle Re: Make Dummy Policy David P. Quigley Re: Make Dummy Policy David P. Quigley Re: Make Dummy Policy Casey Schaufler Make Dummy Policy David P. Quigley Re: [PATCH 1/3] Thread/Child-Domain Assignment (rev.4) KaiGai Kohei Monday, 18 August Re: [LTP] [RFC] LTP IMA patch Subrata Modak Friday, 15 August [ANN] Reference Policy mail list Christopher J. PeBenito Re: [PATCH 1/3] Thread/Child-Domain Assignment (rev.4) Stephen Smalley [ANN] SELinux userland repository, wiki and bug tracking on oss.tresys.com Joshua Brindle Re: file_contexts duplicates Stephen Smalley Re: file_contexts duplicates Vikram Ambrose Re: file_contexts duplicates Stephen Smalley file_contexts duplicates Vikram Ambrose Re: [ANNOUNCE][RFC] sVirt: Integrating SELinux and Linux-basedvirtualization James Morris Re: [PATCH] Communication between domains under labeled networks KaiGai Kohei Re: [ANNOUNCE][RFC] sVirt: Integrating SELinux and Linux-basedvirtualization Atsushi SAKAI SELinux User Guide: weekly report 20080815 Murray McAllister Re: Request for multiple mailing lists Russell Coker Thursday, 14 August Re: libsemage patch to not compile modules for seusers and fcontext Ivan Gyurdiev Re: [PATCH] selinux: Unify for- and while-loop style James Morris Re: Help: SELinux causing(?) boot failures... Stephen Smalley Fixes to services_ppp Daniel J Walsh libsemage patch to not compile modules for seusers and fcontext Daniel J Walsh Re: Help: SELinux causing(?) boot failures... Mike Edenfield Updated man pages Daniel J Walsh services apcupsd.patch Daniel J Walsh Updated fail2ban patch Daniel J Walsh Re: [PATCH] Subject: remove expand_rule function Joshua Brindle Missing interface for courier Daniel J Walsh Missing interfaces for kudzu Daniel J Walsh Minor fixes to first boot policy Daniel J Walsh Re: New SELinux toolchain build system Vikram Ambrose Re: [PATCH] Subject: remove expand_rule function Stephen Smalley Re: Help: SELinux causing(?) boot failures... Stephen Smalley Re: [PATCH] selinux: Unify for- and while-loop style Stephen Smalley Re: [PATCH] selinux: Unify for- and while-loop style Stephen Smalley Re: SELinux policy and performance impacts Stephen Smalley Re: Request for multiple mailing lists Stephen Smalley Re: postgresql patch Christopher J. PeBenito Re: [patch 02/35] kudzu policy update Christopher J. PeBenito Re: [patch 05/35] courier policy update Christopher J. PeBenito Re: [patch 12/35] getty policy update Christopher J. PeBenito Re: [patch 20/35] rpc policy update Christopher J. PeBenito Re: [patch 24/35] bootloader policy updates Christopher J. PeBenito Re: [patch 25/35] rdisc policy update Christopher J. PeBenito Re: [patch 14/35] remotelogin policy update Christopher J. PeBenito Re: [REFPOLICY PATCH] Added policy module for the oident daemon. Dominick Grift Re: [patch 03/35] logrotate policy update Christopher J. PeBenito Re: Made it dontaudit like you asked. Christopher J. PeBenito Re: Amanda signals fstools Christopher J. PeBenito postgresql patch Daniel J Walsh Re: [REFPOLICY PATCH] Added policy module for the oident daemon. Dominick Grift Re: [REFPOLICY PATCH] Added policy module for the oident daemon. Dominick Grift A toy of SQL injection (Re: [PATCH 0/3] Thread/Child-Domain Assignment) KaiGai Kohei [PATCH 1/3] Thread/Child-Domain Assignment (rev.4) KaiGai Kohei [PATCH] Revised Patch for local nodecon support in semanage (was: Adding local nodecon's through semanage) Christian Kuester Wednesday, 13 August Re: Using su with pam_selinux Tomas Mraz Using su with pam_selinux Daniel J Walsh system_libraries.patch Daniel J Walsh Re: [REFPOLICY PATCH] Added policy module for the oident daemon. Dominick Grift Re: [REFPOLICY PATCH] Added policy module for the oident daemon. Dominick Grift Re: [REFPOLICY PATCH] Added policy module for the oident daemon. Dominick Grift Re: [REFPOLICY PATCH] Added policy module for the oident daemon. Dominick Grift Re: [REFPOLICY PATCH] Added policy module for the oident daemon. Dominick Grift Re: [ANNOUNCE][RFC] sVirt: Integrating SELinux and Linux-based virtualization Paul Moore Re: [REFPOLICY PATCH] Added policy module for the oident daemon. Paul Howarth Re: [REFPOLICY PATCH] Added policy module for the oident daemon. Chris PeBenito Re: Nagios and RHEL 5 David Härdeman Re: [PATCH 0/3] Thread/Child-Domain Assignment (rev.2) KaiGai Kohei Tuesday, 12 August graphical login Justin Mattock Re: New SELinux toolchain build system Joshua Brindle Re: [patch 23/35] iptables policy update Christopher J. PeBenito Re: refpolicy: patch for ldconfig from glibc 2.7 Christopher J. PeBenito Re: New SELinux toolchain build system Daniel J Walsh Re: Nagios and RHEL 5 Gunnar Hellekson [PATCH] Subject: remove expand_rule function Joshua Brindle Re: refpolicy: patch for ldconfig from glibc 2.7 Václav Ovsík Saturday, 26 July [PATCH] Subject: remove expand_rule function Joshua Brindle Tuesday, 12 August Re: [libvirt] [ANNOUNCE][RFC] sVirt: Integrating SELinux and Linux-based virtualization Daniel J Walsh Re: [libvirt] [ANNOUNCE][RFC] sVirt: Integrating SELinux and Linux-based virtualization Daniel J Walsh Re: [libvirt] [ANNOUNCE][RFC] sVirt: Integrating SELinux and Linux-based virtualization Daniel J Walsh Re: [libvirt] [ANNOUNCE][RFC] sVirt: Integrating SELinux and Linux-based virtualization James Morris Re: [ANNOUNCE][RFC] sVirt: Integrating SELinux and Linux-based virtualization James Morris Re: [ANNOUNCE][RFC] sVirt: Integrating SELinux and Linux-based virtualization Russell Coker Re: [ANNOUNCE][RFC] sVirt: Integrating SELinux and Linux-based virtualization Casey Schaufler Monday, 11 August Re: [RFC PATCH v2 0/7] Labeled networking patches for 2.6.28 Paul Moore [RFC PATCH v2 6/7] selinux: Set socket NetLabel based on connection endpoint Paul Moore [RFC PATCH v2 5/7] netlabel: Add functionality to set the security attributes of a packet Paul Moore [RFC PATCH v2 7/7] selinux: Cache NetLabel secattrs in the socket's security struct Paul Moore [RFC PATCH v2 4/7] netlabel: Add network address selectors to the NetLabel/LSM domain mapping Paul Moore [RFC PATCH v2 3/7] netlabel: Add a generic way to create ordered linked lists of network addrs Paul Moore [RFC PATCH v2 2/7] netlabel: Replace protocol/NetLabel linking with refrerence counts Paul Moore [RFC PATCH v2 0/7] Labeled networking patches for 2.6.28 Paul Moore [RFC PATCH v2 1/7] selinux: Fix a problem in security_netlbl_sid_to_secattr() Paul Moore Kerberos Patch Daniel J Walsh Made it dontaudit like you asked. Daniel J Walsh Amanda signals fstools Daniel J Walsh RE: [PATCH 0/3] Thread/Child-Domain Assignment (rev.2) Joshua Brindle Re: Request for multiple mailing lists Justin Mattock Re: long contexts Eric Paris Cleaned up patch Daniel J Walsh Re: Request for multiple mailing lists Eric Paris New SELinux toolchain build system Vikram Ambrose Re: [LTP] [RFC] LTP IMA patch Subrata Modak Re: Request for multiple mailing lists Vikram Ambrose Re: [patch 06/35] soundserver policy update Daniel J Walsh Re: [patch 06/35] soundserver policy update Daniel J Walsh Re: [patch 06/35] soundserver policy update Daniel J Walsh Re: [patch 29/35] ipsec policy update Christopher J. PeBenito Re: [patch 34/35] qmail policy update Christopher J. PeBenito Re: [patch 28/35] iscsi policy update Christopher J. PeBenito Re: [patch 27/35] inetd policy update Christopher J. PeBenito Re: [patch 17/35] brctl policy update Christopher J. PeBenito Re: [patch 06/35] soundserver policy update Christopher J. PeBenito long contexts Russell Coker Re: [ANNOUNCE][RFC] sVirt: Integrating SELinux and Linux-based virtualization James Morris Re: [ANNOUNCE][RFC] sVirt: Integrating SELinux and Linux-based virtualization Casey Schaufler Sunday, 10 August [ANNOUNCE][RFC] sVirt: Integrating SELinux and Linux-based virtualization James Morris Saturday, 9 August Re: [PATCH] selinux: conditional expression type validation was off-by-one Joshua Brindle Re: [PATCH] selinux: conditional expression type validation was off-by-one Vesa-Matti J Kari Re: [RFC PATCH] netlabel: Replace protocol/NetLabel linking with refrerence counts Paul Moore [RFC PATCH] netlabel: Replace protocol/NetLabel linking with refrerence counts Paul Moore Re: [RFC PATCH v1 2/6] netlabel: Replace protocol/NetLabel linking with refrerence counts Paul Moore Re: Problem with MLS because /dev is labeled tmpfs_t Dennis Wronka Friday, 8 August Re: Request for multiple mailing lists Russell Coker Re: Request for multiple mailing lists Casey Schaufler Re: Request for multiple mailing lists max bianco Re: [RFC PATCH v1 0/6] Labeled networking patches for 2.6.28 Paul Moore Re: [RFC PATCH v1 2/6] netlabel: Replace protocol/NetLabel linking with refrerence counts Paul Moore Re: Help: SELinux causing(?) boot failures... Russell Coker [RFC PATCH v1 4/6] netlabel: Add network address selectors to the NetLabel/LSM domain mapping Paul Moore [RFC PATCH v1 6/6] selinux: Set socket NetLabel based on connection endpoint Paul Moore [RFC PATCH v1 5/6] netlabel: Add functionality to set the security attributes of a packet Paul Moore [RFC PATCH v1 3/6] netlabel: Add a generic way to create ordered linked lists of network addrs Paul Moore [RFC PATCH v1 2/6] netlabel: Replace protocol/NetLabel linking with refrerence counts Paul Moore [RFC PATCH v1 1/6] selinux: Fix a problem in security_netlbl_sid_to_secattr() Paul Moore [RFC PATCH v1 0/6] Labeled networking patches for 2.6.28 Paul Moore Re: Why is customizing labeling and seusers so SLOOOOOOOWWWWW. Daniel J Walsh Re: Gconf application James Carter Re: Help: SELinux causing(?) boot failures... Justin Mattock Re: Help: SELinux causing(?) boot failures... Paul Moore Re: Can we make libsemanage default to expand-check=0 Daniel J Walsh Nagios and RHEL 5 Cooper David Ctr 14WS/P3I Re: SELinux policy and performance impacts Joshua Brindle Re: Help: SELinux causing(?) boot failures... Mike Edenfield Re: Request for multiple mailing lists Joshua Brindle Re: Help: SELinux causing(?) boot failures... Paul Moore Re: Why is customizing labeling and seusers so SLOOOOOOOWWWWW. Joshua Brindle Re: Can we make libsemanage default to expand-check=0 Joshua Brindle Help: SELinux causing(?) boot failures... Mike Edenfield Why is customizing labeling and seusers so SLOOOOOOOWWWWW. Daniel J Walsh Re: SELinux policy and performance impacts Paul Moore Gconf application shaunak saha Re: [PATCH] selinux: Unify for- and while-loop style Paul Moore Re: Request for multiple mailing lists Russell Coker Re: [PATCH] selinux: Unify for- and while-loop style Vesa-Matti J Kari Re: Request for multiple mailing lists Vesa-Matti J Kari Re: Request for multiple mailing lists Andy Warner Re: [PATCH] selinux: conditional expression type validation was off-by-one Vesa-Matti J Kari Re: Request for multiple mailing lists Vesa-Matti J Kari Re: Request for multiple mailing lists Andy Warner SELinux User Guide: weekly report 2008-08-08 Murray McAllister Thursday, 7 August Re: Request for multiple mailing lists Casey Schaufler Re: Request for multiple mailing lists Russell Coker Re: Problem with MLS because /dev is labeled tmpfs_t Russell Coker Re: SELinux policy and performance impacts James Morris SELinux policy and performance impacts Matt Anderson logging to FIFOs Johnson, Richard Re: Request for multiple mailing lists Stanley A. Klein Re: Request for multiple mailing lists Casey Schaufler Re: [refpolicy] Let dhcp use init fds Martin Orr Request for multiple mailing lists Vikram Ambrose ipsec patch Daniel J Walsh Re: [patch 17/35] brctl policy update Daniel J Walsh Re: [patch 06/35] soundserver policy update Daniel J Walsh Re: [refpolicy] Let dpkg scripts ptrace Martin Orr Re: [patch 26/35] stunnel policy update Christopher J. PeBenito Re: [patch 21/35] kismet policy update Christopher J. PeBenito Re: [patch 11/35] hotplug policy update Christopher J. PeBenito Re: [patch 22/35] oav policy updates Christopher J. PeBenito Re: [patch 19/35] kernel storage module policy updates Christopher J. PeBenito Re: [patch 13/35] ricci policy update Christopher J. PeBenito Re: [patch 16/35] usernet policy updates Christopher J. PeBenito Re: [patch 30/35] fetchmail policy update Christopher J. PeBenito Re: [patch 31/35] amanda policy update Christopher J. PeBenito Re: [patch 32/35] rsync policy update Christopher J. PeBenito Re: [patch 01/35] anaconda policy update Christopher J. PeBenito Problem with MLS because /dev is labeled tmpfs_t Dennis Wronka Re: [patch 18/35] fsadm policy update Christopher J. PeBenito Re: [patch 17/35] brctl policy update Christopher J. PeBenito Re: [patch 15/35] kernel terminal policy update Christopher J. PeBenito Re: [patch 06/35] soundserver policy update Christopher J. PeBenito Re: [PATCH] selinux: Unify for- and while-loop style Paul Moore Wednesday, 6 August [PATCH] selinux: Unify for- and while-loop style Vesa-Matti Kari Re: [PATCH] selinux: conditional expression type validation was off-by-one James Morris Re: selinux freaking out about samba share Lucas Emery Re: selinux freaking out about cifs share max Re: selinux freaking out about cifs share Justin Mattock selinux freaking out about cifs share Lucas Emery [PATCH] selinux: conditional expression type validation was off-by-one Vesa-Matti Kari Re: Can we make libsemanage default to expand-check=0 Daniel J Walsh [PATCH 2/3] Thread/Child-Domain Assignment (rev.3) KaiGai Kohei [PATCH 1/3] Thread/Child-Domain Assignment (rev.3) KaiGai Kohei [PATCH 3/3] Thread/Child-Domain Assignment (rev.3) KaiGai Kohei Re: [PATCH 1/3] Thread/Child-Domain Assignment (rev.2) KaiGai Kohei Tuesday, 5 August Re: Question about newrole Justin Mattock [refpolicy patch] Updated Git daemon domain. Dominick Grift [refpolicy patchJ updated Git daemon domain. Dominick Grift Re: Question about newrole Dennis Wronka Re: Question about newrole Stephen Smalley Re: Question about newrole Dennis Wronka Re: Question about newrole Justin Mattock Re: [RFC 2/2] labeled ipsec internet drafts Paul Moore Re: Question about newrole Justin Mattock Re: Question about newrole Dennis Wronka Re: Question about newrole Dennis Wronka Re: Question about newrole Justin Mattock Re: [RFC 2/2] labeled ipsec internet drafts Joy Latten Re: Can we make libsemanage default to expand-check=0 Stephen Smalley Re: Question about newrole Stephen Smalley Add /etc/services to restorecond file. Daniel J Walsh Re: (u\|r)bacsep: initial testing Christopher J. PeBenito Can we make libsemanage default to expand-check=0 Daniel J Walsh Re: Question about newrole Dennis Wronka Re: Question about newrole Dennis Wronka Re: policycoreutils patch Daniel J Walsh Re: Question about newrole Xavier Toth Re: Question about newrole Stephen Smalley Re: policycoreutils patch Stephen Smalley Question about newrole Dennis Wronka Re: Patch to make libselinux shut up when SELinux is disabled. Paul Howarth Re: policycoreutils patch Stephen Smalley Re: I have added group support to libselinux Stephen Smalley Re: [refpolicy] corrected/rebased samba patch Christopher J. PeBenito Re: [PATCH 1/3] Thread/Child-Domain Assignment (rev.2) Stephen Smalley Re: [refpolicy] Milter Mail Filters Paul Howarth [PATCH 3/3] Thread/Child-Domain Assignment (rev.2) KaiGai Kohei [PATCH 2/3] Thread/Child-Domain Assignment (rev.2) KaiGai Kohei [PATCH 1/3] Thread/Child-Domain Assignment (rev.2) KaiGai Kohei [PATCH 0/3] Thread/Child-Domain Assignment (rev.2) KaiGai Kohei Monday, 4 August xdm_tmp_t Russell Coker White space consistency patch Daniel J Walsh [refpolicy] corrected/rebased samba patch Mike Edenfield Re: Patch to make libselinux shut up when SELinux is disabled. Stephen Smalley Re: Patch to make libselinux shut up when SELinux is disabled. Daniel J Walsh Re: Some questions regarding RedHat refpolicy patches Daniel J Walsh [patch] libselinux: make setrans socket descriptor close-on-exec Stephen Smalley Re: Patch to make libselinux shut up when SELinux is disabled. Paul Howarth Re: Some questions regarding RedHat refpolicy patches Christopher J. PeBenito [patch 22/35] oav policy updates david_at_hardeman.nu [patch 28/35] iscsi policy update david_at_hardeman.nu [patch 15/35] kernel terminal policy update david_at_hardeman.nu [patch 31/35] amanda policy update david_at_hardeman.nu [patch 14/35] remotelogin policy update david_at_hardeman.nu [patch 09/35] xen policy update david_at_hardeman.nu [patch 21/35] kismet policy update david_at_hardeman.nu [patch 33/35] mailscanner policy addition david_at_hardeman.nu [patch 25/35] rdisc policy update david_at_hardeman.nu [patch 13/35] ricci policy update david_at_hardeman.nu [patch 24/35] bootloader policy updates david_at_hardeman.nu [patch 19/35] kernel storage module policy updates david_at_hardeman.nu [patch 32/35] rsync policy update david_at_hardeman.nu [patch 12/35] getty policy update david_at_hardeman.nu [patch 18/35] fsadm policy update david_at_hardeman.nu [patch 11/35] hotplug policy update david_at_hardeman.nu [patch 23/35] iptables policy update david_at_hardeman.nu [patch 17/35] brctl policy update david_at_hardeman.nu [patch 35/35] livecd policy addition david_at_hardeman.nu [patch 34/35] qmail policy update david_at_hardeman.nu [patch 29/35] ipsec policy update david_at_hardeman.nu [patch 27/35] inetd policy update david_at_hardeman.nu [patch 10/35] qemu policy update david_at_hardeman.nu [patch 16/35] usernet policy updates david_at_hardeman.nu [patch 26/35] stunnel policy update david_at_hardeman.nu [patch 20/35] rpc policy update david_at_hardeman.nu [patch 30/35] fetchmail policy update david_at_hardeman.nu [patch 08/35] logging policy update david_at_hardeman.nu [patch 07/35] w3c policy addition david_at_hardeman.nu [patch 06/35] soundserver policy update david_at_hardeman.nu [patch 05/35] courier policy update david_at_hardeman.nu [patch 04/35] corenetwork policy update david_at_hardeman.nu [patch 03/35] logrotate policy update david_at_hardeman.nu [patch 02/35] kudzu policy update david_at_hardeman.nu [patch 01/35] anaconda policy update david_at_hardeman.nu [patch 00/35] Second round of Fedora/RedHat SELinux changes david_at_hardeman.nu Sunday, 3 August Some questions regarding RedHat refpolicy patches David Härdeman Friday, 1 August [refpolicy patch] Add Git daemon domain. Dominick Grift policycoreutils patch Daniel J Walsh [refpolicy patch] Add Git daemon domain. Dominick Grift I have added group support to libselinux Daniel J Walsh SELinux User Guide: weekly report 2008-08-01 Murray McAllister Re: [PATCH 1/3] Thread/Child-Domain Assignment KaiGai Kohei Thursday, 31 July selinux-activate Russell Coker setfiles patch Russell Coker [refpolicy, take 3] samba policy updates Mike Edenfield Re: [refpolicy patch, second try] samba policy updates Mike Edenfield Re: [refpolicy patch, second try] samba policy updates Christopher J. PeBenito Re: [refpolicy patch, second try] samba policy updates Mike Edenfield Re: [refpolicy] Patch: Create non_security_file_type attribute (v2) Christopher J. PeBenito Re: unconfined_t and user_home_dir_type Christopher J. PeBenito Re: [refpolicy patch, second try] samba policy updates Christopher J. PeBenito Wednesday, 30 July ANN: CDS Framework version 3.0 Dave Sugar Re: [patch] SELinux: trivial, unify iterator variable naming Vesa-Matti J Kari Re: [patch] SELinux: trivial, unify iterator variable naming Paul Moore Re: [PATCH 1/3] Thread/Child-Domain Assignment Stephen Smalley Re: Should /dev/mem be SystemHigh? Joe Nall Re: [PATCH 1/3] Thread/Child-Domain Assignment Joshua Brindle Re: Should /dev/mem be SystemHigh? Stephen Smalley Re: Should /dev/mem be SystemHigh? Christopher J. PeBenito Re: Should /dev/mem be SystemHigh? Stephen Smalley Re: [PATCH -v3] SELinux: /proc/mounts should show what it can Stephen Smalley Re: unconfined_t and user_home_dir_type Russell Coker Tuesday, 29 July Re: [patch] SELinux: trivial, unify iterator variable naming Russell Coker Re: Should /dev/mem be SystemHigh? Eamon Walsh Re: [refpolicy patch, second try] samba policy updates Mike Edenfield [PATCH -v3] SELinux: /proc/mounts should show what it can Eric Paris Re: [refpolicy patch, second try] samba policy updates Chris PeBenito [refpolicy] Patch: Create non_security_file_type attribute (v2) James Carter Re: Ruby bindings patch for libselinux Daniel J Walsh Re: [refpolicy patch, second try] samba policy updates Mike Edenfield Re: Ruby bindings patch for libselinux Stephen Smalley Re: [refpolicy patch, second try] samba policy updates Chris PeBenito Re: Ruby bindings patch for libselinux Daniel J Walsh Should /dev/mem be SystemHigh? Joe Nall Re: unconfined_t and user_home_dir_type Chris PeBenito Re: policycoreutils packages were updated without a bump in the version number??? Stephen Smalley Re: Mapping Linux GROUP to an SELinux user ?... Daniel J Walsh Re: Setting login context for multiple Linux users using single semanage command... Daniel J Walsh policycoreutils packages were updated without a bump in the version number??? Daniel J Walsh Re: [PATCH 2/3] Thread/Child-Domain Assignment Stephen Smalley Re: Ruby bindings patch for libselinux Stephen Smalley Re: [PATCH 2/3] Thread/Child-Domain Assignment Scott Schmit Re: unconfined_t and user_home_dir_type Russell Coker Re: Adding local nodecon's through semanage Stephen Smalley Re: [PATCH 1/3] Thread/Child-Domain Assignment Stephen Smalley Re: unconfined_t and user_home_dir_type Stephen Smalley unconfined_t and user_home_dir_type Russell Coker Re: [PATCH 2/3] Thread/Child-Domain Assignment KaiGai Kohei Re: [PATCH 1/3] Thread/Child-Domain Assignment KaiGai Kohei Monday, 28 July Re: Mapping Linux GROUP to an SELinux user ?... Karl MacMillan Re: libsepol.context_from_record: MLS is disabled, but MLS context"s0" found Vikram Ambrose Re: [patch] SELinux: trivial, unify iterator variable naming, part 3 Stephen Smalley Re: libsepol.context_from_record: MLS is disabled, but MLS context"s0" found Vikram Ambrose Re: [PATCH 1/3] Thread/Child-Domain Assignment Stephen Smalley Re: libsepol.context_from_record: MLS is disabled, but MLS context"s0" found Stephen Smalley Re: [refpolicy-patch 06/23] logrotate policy update Daniel J Walsh Re: libsepol.context_from_record: MLS is disabled, but MLS context"s0" found Vikram Ambrose [refpolicy patch, second try] samba policy updates Mike Edenfield Re: [refpolicy-patch 06/23] logrotate policy update Chris PeBenito Re: [refpolicy-patch 15/23] soundserver policy update Chris PeBenito Sunday, 27 July Re: [PATCH 1/3] Thread/Child-Domain Assignment KaiGai Kohei Saturday, 26 July Re: [PATCH 1/3] Thread/Child-Domain Assignment Joshua Brindle Re: [PATCH 1/3] Thread/Child-Domain Assignment Stephen Smalley Re: [RFC 2/2] labeled ipsec internet drafts Paul Moore Re: [RFC 1/2] labeled ipsec internet drafts Paul Moore Re: [patch] SELinux: trivial, unify iterator variable naming, part 3 Paul Moore [REFPOLICY PATCH] Added policy module for the oident daemon. Dominick Grift Re: [PATCH 1/3] Thread/Child-Domain Assignment KaiGai Kohei Re: [PATCH 1/3] Thread/Child-Domain Assignment KaiGai Kohei Friday, 25 July Re: [patch] SELinux: trivial, unify iterator variable naming, part 3 Stephen Smalley RE: user_identify for httpd (warning: newbie question) Stephen Smalley RE: libsepol.context_from_record: MLS is disabled, but MLS context"s0" found Stephen Smalley Re: Policy loading: initramfs vs. patched /sbin/init Russell Coker Re: libsepol.context_from_record: MLS is disabled, but MLS context"s0" found Vikram Ambrose [RFC 2/2] labeled ipsec internet drafts Joy Latten [RFC 1/2] labeled ipsec internet drafts Joy Latten RE: [PATCH 1/3] Thread/Child-Domain Assignment Joshua Brindle RE: [PATCH 1/3] Thread/Child-Domain Assignment Joshua Brindle RE: user_identify for httpd (warning: newbie question) Joshua Brindle RE: libsepol.context_from_record: MLS is disabled, but MLS context"s0" found Chris PeBenito RE: libsepol.context_from_record: MLS is disabled, but MLS context"s0" found Chris PeBenito Re: [patch] SELinux: trivial, unify iterator variable naming, part 3 James Morris Re: [PATCH 1/3] Thread/Child-Domain Assignment Stephen Smalley Re: Policy loading: initramfs vs. patched /sbin/init Stephen Smalley Re: user_identify for httpd (warning: newbie question) Stephen Smalley Re: [patch] SELinux: trivial, unify iterator variable naming, part 3 Stephen Smalley [PATCH 4/3] Thread/Child-Domain Assignment KaiGai Kohei Re: [patch] SELinux: trivial, unify iterator variable naming, part 3 James Morris [PATCH 3/3] Thread/Child-Domain Assignment KaiGai Kohei [PATCH 2/3] Thread/Child-Domain Assignment KaiGai Kohei [PATCH 1/3] Thread/Child-Domain Assignment KaiGai Kohei [PATCH 0/3] Thread/Child-Domain Assignment KaiGai Kohei Re: [refpolicy-patch 19/23] netlabel policy update Chris PeBenito Re: [refpolicy-patch 18/23] miscfiles policy update Chris PeBenito Re: [refpolicy-patch 21/23] raid policy update Chris PeBenito [refpolicy patch] latest try: merge irssi policy with irc module. Dominick Grift SELinux User Guide: weekly report 2008-07-25 Murray McAllister Re: user_identify for httpd (warning: newbie question) Murray McAllister user_identify for httpd (warning: newbie question) Murray McAllister Re: [PATCH] Communication between domains under labeled networks Chris PeBenito Thursday, 24 July Re: Policy loading: initramfs vs. patched /sbin/init Russell Coker Re: hierarchy_check_constraints() needs reworks? KaiGai Kohei Policy loading: initramfs vs. patched /sbin/init Stephen Smalley Re: [refpolicy-patch 14/23] rhgb policy update Daniel J Walsh Re: [patch] SELinux: trivial, unify iterator variable naming, part 3 Stephen Smalley Re: Mapping Linux GROUP to an SELinux user ?... Stephen Smalley Re: hierarchy_check_constraints() needs reworks? KaiGai Kohei Re: [refpolicy patch] mozilla replace local policy by interface calls. Chris PeBenito Re: libsepol.context_from_record: MLS is disabled, but MLS context "s0" found Chris PeBenito Re: [refpolicy-patch 13/23] portslave policy update Chris PeBenito Re: [refpolicy-patch 14/23] rhgb policy update Chris PeBenito libsepol.context_from_record: MLS is disabled, but MLS context "s0" found Vikram Ambrose Mapping Linux GROUP to an SELinux user ?... Hasan Rezaul-CHR010 Re: [patch] SELinux: trivial, unify iterator variable naming, part 3 Vesa-Matti J Kari RE: hierarchy_check_constraints() needs reworks? Joshua Brindle [refpolicy patch] retry: merge irssi module with irc module. Dominick Grift Re: [patch] SELinux: trivial, unify iterator variable naming, part 3 James Morris Re: [patch] SELinux: trivial, remove unneeded local variable James Morris Re: [patch] SELinux: Trivial minor fixes that change C null character style James Morris Re: [refpolicy-patch 11/23] cpucontrol policy update Daniel J Walsh [refpolicy patch] merge irssi module with irc module. Dominick Grift Re: hierarchy_check_constraints() needs reworks? Stephen Smalley [refpolicy patch] Round 2: Clean up white spaces. Dominick Grift hierarchy_check_constraints() needs reworks? KaiGai Kohei Wednesday, 23 July Re: [refpolicy-patch 14/23] rhgb policy update Daniel J Walsh Re: [refpolicy patch] retry add irssi module. Chris PeBenito Re: [refpolicy patch] services: add a duplicate delimiter. Chris PeBenito [refpolicy patch 2/2] revisit and apply trivial modifications to fstools module. Dominick Grift [refpolicy patch 1/2] revisit and apply trivial redhat modifications to amanda module Dominick Grift openssh and roles Russell Coker [refpolicy patch] add frozen-bubble-server module. Dominick Grift Tuesday, 22 July Re: [RFC] An idea of thread/child-domain assignment KaiGai Kohei Re: [patch] SELinux: trivial, unify iterator variable naming Paul Moore Re: what is the point of semodule -u? Russell Coker Re: what is the point of semodule -u? Stephen Smalley what is the point of semodule -u? Russell Coker [refpolicy patch] retry add irssi module. Dominick Grift [refpolicy patch] mozilla replace local policy by interface calls. Dominick Grift Re: [refpolicy-patch 02/23] anaconda policy update Chris PeBenito Re: [refpolicy-patch 20/23] pcmcia policy update Chris PeBenito Re: [refpolicy-patch 14/23] rhgb policy update Chris PeBenito [refpolicy patch] adds irssi module. Dominick Grift Re: [refpolicy-patch 11/23] cpucontrol policy update Chris PeBenito Re: [patch] SELinux: trivial, unify iterator variable naming Vesa-Matti J Kari Re: questions about persistent storage of security contexts Stephen Smalley Re: questions about persistent storage of security contexts Andy Warner Re: questions about persistent storage of security contexts Stephen Smalley Re: questions about persistent storage of security contexts Andy Warner Re: questions about persistent storage of security contexts Andy Warner Re: questions about persistent storage of security contexts KaiGai Kohei Re: [PATCH] Communication between domains under labeled networks KaiGai Kohei Re: questions about persistent storage of security contexts Andrew Warner Re: [refpolicy-patch 07/23] corenetwork policy update Daniel J Walsh Re: [refpolicy-patch 02/23] anaconda policy update Daniel J Walsh Monday, 21 July Re: Setting login context for multiple Linux users using single semanage command... Stephen Smalley Re: About unifying the coding style Stephen Smalley Re: questions about persistent storage of security contexts Stephen Smalley Re: questions about persistent storage of security contexts KaiGai Kohei Re: questions about persistent storage of security contexts Eric Paris [refpolicy patch] admin: add a duplicate delimiter. Dominick Grift questions about persistent storage of security contexts Andrew Warner [refpolicy patch] apps: add a duplicate delimiter. Dominick Grift [refpolicy patch] kernel: add a duplicate delimiter. Dominick Grift [refpolicy patch] roles: add a duplicate delimiter. Dominick Grift [refpolicy patch] system: add a duplicate delimiter. Dominick Grift [refpolicy patch] services: add a duplicate delimiter. Dominick Grift Setting login context for multiple Linux users using single semanage command... Hasan Rezaul-CHR010 Re: [patch] SELinux: trivial, unify iterator variable naming Paul Moore Re: [patch] SELinux: trivial, unify iterator variable naming Vesa-Matti J Kari RE: SELinux User Guide Joe_Wulf Re: Patch: 1/6: selinux-policy: remove dupe delimiter. Chris PeBenito Re: [patch] SELinux: trivial, unify iterator variable naming Paul Moore Re: About unifying the coding style Vesa-Matti J Kari About unifying the coding style Vesa-Matti J Kari Re: [patch] SELinux: trivial, unify iterator variable naming Vesa-Matti J Kari Sunday, 20 July Re: [patch] SELinux: trivial, unify iterator variable naming Paul Moore [patch] SELinux: trivial, remove unneeded local variable Vesa-Matti J Kari [patch] SELinux: trivial, unify iterator variable naming, part 3 Vesa-Matti J Kari [patch] SELinux: trivial, unify iterator variable naming, part 2 Vesa-Matti J Kari Re: SELinux User Guide max [patch] SELinux: trivial, unify iterator variable naming Vesa-Matti J Kari [patch] SELinux: Trivial minor fixes, pt. 2 Vesa-Matti J Kari [patch] SELinux: Trivial minor fixes that change C null character style Vesa-Matti J Kari Re: [patch]: ss/services.c null character style fix James Morris Re: [patch]: ss/services.c null character style fix Eric Paris [patch]: ss/services.c remove unneeded assignment Vesa-Matti J Kari [patch] ss/services.c services-remove-unneeded-cast.patch Vesa-Matti J Kari [patch]: ss/services.c null character style fix Vesa-Matti J Kari [patch]: ss/services.c: trivial typo fix Vesa-Matti J Kari Re: [refpolicy-patch 02/23] anaconda policy update Russell Coker Saturday, 19 July [refpolicy-patch 17/23] logging policy update david_at_hardeman.nu [refpolicy-patch 20/23] pcmcia policy update david_at_hardeman.nu [refpolicy-patch 10/23] courier policy update david_at_hardeman.nu [refpolicy-patch 11/23] cpucontrol policy update david_at_hardeman.nu [refpolicy-patch 23/23] qemu policy update david_at_hardeman.nu [refpolicy-patch 19/23] netlabel policy update david_at_hardeman.nu [refpolicy-patch 06/23] logrotate policy update david_at_hardeman.nu [refpolicy-patch 16/23] w3c policy addition david_at_hardeman.nu [refpolicy-patch 21/23] raid policy update david_at_hardeman.nu [refpolicy-patch 14/23] rhgb policy update david_at_hardeman.nu [refpolicy-patch 08/23] secadm policy update david_at_hardeman.nu [refpolicy-patch 22/23] xen policy update david_at_hardeman.nu [refpolicy-patch 15/23] soundserver policy update david_at_hardeman.nu [refpolicy-patch 18/23] miscfiles policy update david_at_hardeman.nu [refpolicy-patch 13/23] portslave policy update david_at_hardeman.nu [refpolicy-patch 12/23] openca policy update david_at_hardeman.nu [refpolicy-patch 05/23] kudzu policy update david_at_hardeman.nu [refpolicy-patch 07/23] corenetwork policy update david_at_hardeman.nu [refpolicy-patch 03/23] unconfined_u policy updates david_at_hardeman.nu [refpolicy-patch 02/23] anaconda policy update david_at_hardeman.nu [refpolicy-patch 09/23] apm policy update david_at_hardeman.nu [refpolicy-patch 00/23] Cherry-picks from Fedora SELinux patch david_at_hardeman.nu [refpolicy-patch 01/23] slocate policy update david_at_hardeman.nu [refpolicy-patch 04/23] kismet policy update david_at_hardeman.nu Patch: 6/6: selinux-policy: remove dupe delimiter. Dominick Grift Patch: 5/6: selinux-policy: remove dupe delimiter. Dominick Grift Patch: 4/6: selinux-policy: remove dupe delimiter. Dominick Grift Patch: 3/6: selinux-policy: remove dupe delimiter. Dominick Grift Patch: 2/6: selinux-policy: remove dupe delimiter. Dominick Grift Patch: 1/6: selinux-policy: remove dupe delimiter. Dominick Grift Re: SELinux User Guide: weekly report 20080708 Murray McAllister SELinux User Guide: weekly report 20080708 Murray McAllister Re: SELinux User Guide James Morris Friday, 18 July RE: [rfc][patch] setfiles: validate all file_contextsfileswhenusing -c Stephen Smalley RE: [rfc][patch] setfiles: validate all file_contextsfileswhenusing -c Joshua Brindle RE: [rfc][patch] setfiles: validate all file_contexts fileswhenusing -c Stephen Smalley RE: [rfc][patch] setfiles: validate all file_contexts fileswhenusing -c Joshua Brindle [patch v2] libselinux: handle duplicate file context entries as a fatal error Stephen Smalley Re: refpolicy patch: samba enhancements Daniel J Walsh Re: [patch] libselinux: handle conflicting file contexts as a fatal error Daniel J Walsh [patch] libselinux: handle conflicting file contexts as a fatal error Stephen Smalley Re: refpolicy patch: samba enhancements Daniel J Walsh Re: Patch to make libselinux shut up when SELinux is disabled. Daniel J Walsh RE: [rfc][patch] setfiles: validate all file_contexts files whenusing -c Stephen Smalley RE: [rfc][patch] setfiles: validate all file_contexts files whenusing -c Joshua Brindle [rfc][patch] setfiles: validate all file_contexts files when using -c Stephen Smalley Re: refpolicy patch: samba enhancements Mike Edenfield Re: refpolicy patch: samba enhancements Mike Edenfield Re: refpolicy patch: samba enhancements Mike Edenfield Re: refpolicy patch: samba enhancements Christopher J. PeBenito Re: refpolicy patch: samba enhancements Christopher J. PeBenito Re: firefox3 Justin Mattock Re: [refpolicy] Patch: Create non_security_file_type attribute Christopher J. PeBenito Re: Patch to make libselinux shut up when SELinux is disabled. Stephen Smalley Re: [refpolicy] Patch: Create non_security_file_type attribute Daniel J Walsh Re: firefox3 Daniel J Walsh Re: refpolicy patch: samba enhancements Daniel J Walsh Re: Patch to make libselinux shut up when SELinux is disabled. Daniel J Walsh Re: Critical bug in semanage Daniel J Walsh Re: [refpolicy] Patch: Create non_security_file_type attribute Stephen Smalley Re: Critical bug in semanage Stephen Smalley Re: refpolicy patch: samba enhancements Mike Edenfield Re: Patch to make libselinux shut up when SELinux is disabled. Stephen Smalley Re: [refpolicy] Patch: Create non_security_file_type attribute Daniel J Walsh SELinux developer summit Stephen Smalley Patch to make libselinux shut up when SELinux is disabled. Daniel J Walsh Re: Fedora refpolicy patches Brett Lentz Re: firefox3 Justin Mattock Re: [refpolicy] Patch: Create non_security_file_type attribute James Carter Re: [refpolicy] Patch: Create non_security_file_type attribute Christopher J. PeBenito Re: [refpolicy] Patch: Create non_security_file_type attribute James Carter Re: Critical bug in semanage Joshua Brindle Re: refpolicy patch: samba enhancements Christopher J. PeBenito Re: [refpolicy] Let dhcp use init fds Christopher J. PeBenito Re: [refpolicy] Patch: Create non_security_file_type attribute Christopher J. PeBenito Re: [refpolicy] Let dpkg scripts ptrace Christopher J. PeBenito Re: [PATCH] Communication between domains under labeled networks Christopher J. PeBenito Re: [PATCH] Labeled IPsec for PostgreSQL/MySQL/SSHd (Re: [PATCH] IPsec SPD default security context) Christopher J. PeBenito Re: pam_mount Christopher J. PeBenito Re: [PATCH -v2] SELinux: /proc/mounts should show what it can Stephen Smalley Re: [refpolicy] Milter Mail Filters Christopher J. PeBenito Re: Fedora refpolicy patches Christopher J. PeBenito RE: Attaching multiple user accounts to same home directory... Stephen Smalley Re: firefox3 Dominick Grift SELinux User Guide Justin Mattock SELinux User Guide Murray McAllister Re: [RFC] An idea of thread/child-domain assignment KaiGai Kohei Thursday, 17 July Re: OpenMoko/JFFS2 sestatus difficulties Mohamed Hassan firefox3 Justin Mattock Patch: selinux-policy: concept: let users relabel their user_home_t files to user_tmp_t and vice versa. Dominick Grift RE: Attaching multiple user accounts to same home directory... Hasan Rezaul-CHR010 Re: Attaching multiple user accounts to same home directory... Daniel J Walsh Re: Attaching multiple user accounts to same home directory... Daniel J Walsh RE: Attaching multiple user accounts to same home directory... Hasan Rezaul-CHR010 Re: Attaching multiple user accounts to same home directory... Daniel J Walsh Critical bug in semanage Daniel J Walsh Patch: selinux-policy: style: lo under li before m. Dominick Grift Re: Fedora refpolicy patches Christopher J. PeBenito Attaching multiple user accounts to same home directory... Hasan Rezaul-CHR010 Re: Patch: selinux-policy: inconsistency: logging_send_syslog_msg is not optional policy. Dominick Grift Re: Proposed patch for policycoreutils/sestatus Vesa-Matti J Kari Re: Patch: selinux-policy: inconsistency: logging_send_syslog_msg is not optional policy. Daniel J Walsh Patch: selinux-policy: inconsistency: logging_send_syslog_msg is not optional policy. Dominick Grift Re: [PATCH -v2] SELinux: /proc/mounts should show what it can James Morris Re: Proposed patch for policycoreutils/sestatus Joshua Brindle Wednesday, 16 July [PATCH] SELinux: /proc/mounts shoudl show what it can Eric Paris [PATCH -v2] SELinux: /proc/mounts should show what it can Eric Paris Re: Fedora refpolicy patches Eric Paris Re: Fedora refpolicy patches David Härdeman Re: Fedora refpolicy patches Mike Edenfield Re: Fedora refpolicy patches Brett Lentz Re: Fedora refpolicy patches Daniel J Walsh Re: Fedora refpolicy patches David Härdeman Re: Fedora refpolicy patches Daniel J Walsh Re: OpenMoko/JFFS2 sestatus difficulties Justin Mattock Re: Fedora refpolicy patches Christopher J. PeBenito Re: Fedora refpolicy patches David Härdeman I think the compiler is still broken. Daniel J Walsh Re: Fedora refpolicy patches Daniel J Walsh Re: OpenMoko/JFFS2 sestatus difficulties Stephen Smalley Fedora refpolicy patches David Härdeman Re: OpenMoko/JFFS2 sestatus difficulties Justin Mattock (u\|r)bacsep: initial testing Christopher J. PeBenito Re: python gui gconf policy problem Xavier Toth Buggy patch (Re: Proposed patch for policycoreutils/sestatus) Vesa-Matti J Kari Re: OpenMoko/JFFS2 sestatus difficulties Stephen Smalley Re: 32bit -> 64bit x-compile fail (audit2why) Vikram Ambrose I have just uploaded 166 patch files for each domain that has a difference between refpolicy and fedora policy. Daniel J Walsh Re: OpenMoko/JFFS2 sestatus difficulties Justin Mattock corecommands file contexts and small change to chroot interface Daniel J Walsh Proposed patch for policycoreutils/sestatus Vesa-Matti J Kari Latest init diffs Daniel J Walsh Re: /etc/selinux/mls/contexts files labeled default_context_t Xavier Toth Re: [RFC] An idea of thread/child-domain assignment Stephen Smalley Re: [RFC] An idea of thread/child-domain assignment Stephen Smalley Re: OpenMoko/JFFS2 sestatus difficulties Russell Coker Re: OpenMoko/JFFS2 sestatus difficulties Stephen Smalley Re: rawhide policy on FC9 build fails Daniel J Walsh Re: python gui gconf policy problem Stephen Smalley Re: python gui gconf policy problem Stephen Smalley Re: 32bit -> 64bit x-compile fail (audit2why) Stephen Smalley Re: /etc/selinux/mls/contexts files labeled default_context_t Stephen Smalley Re: rawhide policy on FC9 build fails Stephen Smalley Re: OpenMoko/JFFS2 sestatus difficulties Justin Mattock Re: OpenMoko/JFFS2 sestatus difficulties Russell Coker Re: [RFC] An idea of thread/child-domain assignment KaiGai Kohei Re: SELinux for embedded Yuichi Nakamura Re: OpenMoko/JFFS2 sestatus difficulties Yuichi Nakamura Re: OpenMoko/JFFS2 sestatus difficulties Willis Vandevanter Tuesday, 15 July Re: OpenMoko/JFFS2 sestatus difficulties Justin Mattock Re: [RFC] An idea of thread/child-domain assignment KaiGai Kohei Re: OpenMoko/JFFS2 sestatus difficulties KaiGai Kohei Re: SELinux for embedded James Morris OpenMoko/JFFS2 sestatus difficulties Willis Vandevanter /etc/selinux/mls/contexts files labeled default_context_t Xavier Toth Re: python gui gconf policy problem Xavier Toth 32bit -> 64bit x-compile fail (audit2why) Vikram Ambrose Re: python gui gconf policy problem Daniel J Walsh Re: python gui gconf policy problem Xavier Toth rawhide policy on FC9 build fails Xavier Toth Re: python gui gconf policy problem Stephen Smalley python gui gconf policy problem Xavier Toth SELinux for embedded Yuichi Nakamura Re: [RFC] An idea of thread/child-domain assignment Stephen Smalley [RFC] An idea of thread/child-domain assignment KaiGai Kohei Monday, 14 July refpolicy patch: samba enhancements Mike Edenfield Re: ping and the /tmp directory Daniel J Walsh Re: ping and the /tmp directory Tom London RE: ping and the /tmp directory Clarkson, Mike R \(US SSA\) Re: ping and the /tmp directory Joe Nall ping and the /tmp directory Clarkson, Mike R \(US SSA\) Friday, 11 July Re: [PATCH-v3] SELinux: allow fstype unknown to policy to use xattrs if present Eric Paris Re: checkmodule error Russell Coker Re: checkmodule error Stephen Smalley Re: checkmodule error Daniel J Walsh Re: checkmodule error Stephen Smalley checkmodule error Russell Coker Thursday, 10 July Re: policycoreutils in SID Justin Mattock Re: policycoreutils in SID Stephen Smalley Re: new domain for libvirt Daniel J Walsh policycoreutils in SID Justin Mattock Re: newrole assertion - should be gnome-terminal assertion Xavier Toth Ruby bindings patch for libselinux Daniel J Walsh Fwd: newrole assertion - should be gnome-terminal assertion Xavier Toth Re: newrole assertion - should be gnome-terminal assertion Stephen Smalley Re: newrole assertion - should be gnome-terminal assertion Xavier Toth Re: newrole assertion - should be gnome-terminal assertion Stephen Smalley Re: [patch] libselinux: eliminate shadowed variables from audit2why Joshua Brindle Wednesday, 9 July Re: [PATCH] Fix a potentially uninitialised variable in SELinux hooks Paul Moore Re: [PATCH] Fix a potentially uninitialised variable in SELinux hooks David Howells Re: [PATCH] Fix a potentially uninitialised variable in SELinux hooks Paul Moore Re: [PATCH] Fix a potentially uninitialised variable in SELinux hooks David Howells Re: [PATCH] Fix a potentially uninitialised variable in SELinux hooks Paul Moore Re: newrole assertion - should be gnome-terminal assertion Ted X Toth [PATCH] Fix a potentially uninitialised variable in SELinux hooks David Howells Re: newrole assertion Stephen Smalley [patch] libselinux: eliminate shadowed variables from audit2why Stephen Smalley Tuesday, 8 July Re: semanage patch to allow boolean files to be imported. Karl MacMillan Wednesday, 9 July Re: semanage patch to allow boolean files to be imported. Daniel J Walsh Tuesday, 8 July semanage patch to allow boolean files to be imported. Daniel J Walsh newrole assertion Xavier Toth Re: Developer summit Justin Mattock Re: releasibility in mcstransd Joshua Brindle Re: releasibility in mcstransd Stephen Smalley Re: Developer summit Stephen Smalley Re: releasibility in mcstransd Joe Nall Developer summit Justin Mattock Re: Adding local nodecon's through semanage Joshua Brindle [ANN] Developer Summit Mailing List James Morris Re: running filecaps ltp test Stephen Smalley Re: Adding local nodecon's through semanage Stephen Smalley Re: Adding local nodecon's through semanage Christian Kuester Re: running filecaps ltp test David Howells Monday, 7 July Re: running filecaps ltp test Serge E. Hallyn Re: running filecaps ltp test Stephen Smalley Re: running filecaps ltp test David L Durant (Mags) Re: running filecaps ltp test Stephen Smalley running filecaps ltp test Serge E. Hallyn Re: Adding local nodecon's through semanage Stephen Smalley Friday, 4 July Re: Adding local nodecon's through semanage Christian Kuester Thursday, 3 July Re: gnome-screensav AVCs Daniel J Walsh Re: gnome-screensav AVCs Daniel J Walsh Re: window manager policy Eamon Walsh Re: Adding local nodecon's through semanage Stephen Smalley Re: Adding local nodecon's through semanage Paul Moore Re: Adding local nodecon's through semanage Stephen Smalley Re: Trying to get XAce policy straightened out but our tool chain is too broken to handle it. Stephen Smalley Re: Trying to get XAce policy straightened out but our tool chain is too broken to handle it. Joshua Brindle Re: Adding local nodecon's through semanage Paul Moore Adding local nodecon's through semanage Christian Kuester Re: Fedora 9 with SEL enabled by default! But one weakness is immediately obvious.... Stephen Smalley Wednesday, 2 July Fedora 9 with SEL enabled by default! But one weakness is immediately obvious.... green bean newrole error relabeling tty Ted X Toth Re: This patch adds permissive to semanage Joshua Brindle Re: This patch adds permissive to semanage Stephen Smalley Re: This patch adds permissive to semanage Joshua Brindle Re: This patch adds permissive to semanage Stephen Smalley Re: This patch adds permissive to semanage Joshua Brindle new refpolicy Justin Mattock Re: This patch adds permissive to semanage Daniel J Walsh Re: This patch adds permissive to semanage Daniel J Walsh ANN: Reference Policy Release Christopher J. PeBenito Re: This patch adds permissive to semanage Stephen Smalley Re: This patch adds permissive to semanage Joshua Brindle Re: This patch adds permissive to semanage Stephen Smalley Re: This patch adds permissive to semanage Joshua Brindle Re: This patch adds permissive to semanage Stephen Smalley Tuesday, 1 July Re: This patch adds permissive to semanage Daniel J Walsh Monday, 30 June Re: Trying to get XAce policy straightened out but our tool chain is too broken to handle it. Joshua Brindle cvs patch Daniel J Walsh Re: X avcs Eamon Walsh Re: X in enforcing mode Eamon Walsh Re: restorecond should not be started by default Joshua Brindle Re: fixfiles patch Joshua Brindle Re: This patch adds permissive to semanage Joshua Brindle Re: mls support for xserver Justin Mattock fixfiles patch Daniel J Walsh This patch adds permissive to semanage Daniel J Walsh restorecond should not be started by default Daniel J Walsh Re: rbacsep: type transition conflicts uncovered Stephen Smalley Re: Trying to get XAce policy straightened out but our tool chain is too broken to handle it. Stephen Smalley Re: rbacsep: type transition conflicts uncovered Christopher J. PeBenito Re: rbacsep: type transition conflicts uncovered Stephen Smalley Re: rbacsep: type transition conflicts uncovered Christopher J. PeBenito Re: rawhide audit2allow problem Stephen Smalley Re: mls support for xserver Christopher J. PeBenito Re: rbacsep: type transition conflicts uncovered Stephen Smalley range_transition question Joe Nall Sunday, 29 June X in enforcing mode Joe Nall segatex-6.50 released Shintaro Fujiwara Patch for libselinux man page submitted by Karel Zack Daniel J Walsh Saturday, 28 June mls support for xserver Justin Mattock Re: window manager policy Ted X Toth Friday, 27 June Re: window manager policy Joe Nall Re: window manager policy Eamon Walsh Re: SELinux backups Nick Gray Re: releasibility in mcstransd Joshua Brindle [refpolicy] Patch: Create non_security_file_type attribute James Carter Re: releasibility in mcstransd Paul Moore refpolicy Justin Mattock Re: first cut of window manager/metacity policy Xavier Toth Re: releasibility in mcstransd Joshua Brindle Re: releasibility in mcstransd Daniel J Walsh Re: rawhide audit2allow problem Daniel J Walsh Thursday, 26 June Re: SELinux backups Vikram Ambrose SELinux backups Nick Gray Wednesday, 25 June ANN: netlabel_tools version 0.18 Paul Moore Re: rawhide audit2allow problem Tom London Re: window manager policy Xavier Toth Re: rawhide audit2allow problem Vikram Ambrose Re: rawhide audit2allow problem Karl MacMillan Re: Trying to get XAce policy straightened out but our tool chain is too broken to handle it. Eamon Walsh rawhide audit2allow problem Xavier Toth [refpolicy] Let dhcp use init fds Martin Orr [refpolicy] Let dpkg scripts ptrace Martin Orr Re: rbacsep: type transition conflicts uncovered Christopher J. PeBenito Re: [PATCH] CGI scripts/PostgreSQL stream connect Christopher J. PeBenito [PATCH] Communication between domains under labeled networks KaiGai Kohei Tuesday, 24 June Re: first cut of window manager/metacity policy Xavier Toth first cut of window manager/metacity policy Xavier Toth Re: [refpolicy] postfix 2.5.2 - data dir /var/lib/postfix Christopher J. PeBenito Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts Christopher J. PeBenito Re: rbacsep: type transition conflicts uncovered Christopher J. PeBenito Re: [PATCH] Labeled IPsec for PostgreSQL/MySQL/SSHd (Re: [PATCH] IPsec SPD default security context) KaiGai Kohei Monday, 23 June Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts KaiGai Kohei Reminder: SELiunx Developer Symposium James Morris Re: pam_mount Stefan Schulze Frielinghaus Re: window manager policy Eamon Walsh Re: [patch] sepolgen: fix role-type associations and role allow rules Karl MacMillan Re: window manager policy Xavier Toth Re: window manager policy Eamon Walsh Re: How to disable/remove MLS Ioannis Aslanidis Re: rbacsep: type transition conflicts uncovered Stephen Smalley Re: How to disable/remove MLS Stephen Smalley Re: How to disable/remove MLS Ioannis Aslanidis Re: How to disable/remove MLS Stephen Smalley Re: rbacsep: type transition conflicts uncovered Stephen Smalley How to disable/remove MLS Ioannis Aslanidis rbacsep: type transition conflicts uncovered Christopher J. PeBenito Re: Trying to get XAce policy straightened out but our tool chain is too broken to handle it. Christopher J. PeBenito Re: pam_mount Christopher J. PeBenito Re: x_extension use Christopher J. PeBenito Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts Christopher J. PeBenito Re: x client policy interfaces Christopher J. PeBenito Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts KaiGai Kohei Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts Christopher J. PeBenito Re: Trying to get XAce policy straightened out but our tool chain is too broken to handle it. Daniel J Walsh [PATCH] CGI scripts/PostgreSQL stream connect KaiGai Kohei Sunday, 22 June Re: su command not found Shintaro Fujiwara Re: su command not found Stefan Schulze Frielinghaus su command not found Shintaro Fujiwara Saturday, 21 June pam_mount Stefan Schulze Frielinghaus Friday, 20 June Re: x_extension use Eamon Walsh Re: releasibility in mcstransd Joe Nall Re: releasibility in mcstransd Joe Nall Re: releasibility in mcstransd Joshua Brindle Re: releasibility in mcstransd Joe Nall allow sysadm_t usb_device_t:chr_file ioctl; Justin Mattock x client policy interfaces Xavier Toth Re: releasibility in mcstransd Joshua Brindle Re: window manager policy Russell Coker Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts KaiGai Kohei Thursday, 19 June Re: window manager policy Joe Nall Re: window manager policy Joe Nall x_extension use Xavier Toth Re: [patch] sepolgen: fix role-type associations and role allow rules Stephen Smalley [patch] sepolgen: fix role-type associations and role allow rules Joshua Brindle Wednesday, 18 June Re: window manager policy Eamon Walsh Re: [PATCH-v3] SELinux: allow fstype unknown to policy to use xattrs if present James Morris window manager policy Xavier Toth [refpolicy] postfix 2.5.2 - data dir /var/lib/postfix Václav Ovsík Re: Question about XACE/X-SELinux T S Re: [PATCH-v3] SELinux: allow fstype unknown to policy to use xattrs if present Stephen Smalley [PATCH-v3] SELinux: allow fstype unknown to policy to use xattrs if present Eric Paris Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts Christopher J. PeBenito Re: kernel/kernel.* diffs Christopher J. PeBenito Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts KaiGai Kohei Tuesday, 17 June Re: SELinux Bootstrap - without chroot Stephen Smalley Re: [rfc] refpolicy user based separation James Carter Re: SELinux Bootstrap - without chroot Vikram Ambrose [RFC] rbacsep: eliminate untrusted content types Christopher J. PeBenito Re: [rfc] refpolicy user based separation Stephen Smalley Re: gnome-screensav AVCs Christopher J. PeBenito Re: gnome-screensav AVCs Ted X Toth Re: [rfc] refpolicy user based separation James Carter Re: [rfc] refpolicy user based separation Stephen Smalley Re: [rfc] refpolicy user based separation James Carter Re: [rfc] refpolicy user based separation James Carter Re: gnome-screensav AVCs Christopher J. PeBenito Re: [rfc] refpolicy user based separation Joshua Brindle Re: [rfc] refpolicy user based separation James Carter Re: SELinux Bootstrap - without chroot Stephen Smalley Re: [rfc] refpolicy user based separation Stephen Smalley Re: gnome-screensav AVCs Xavier Toth Re: gnome-screensav AVCs Christopher J. PeBenito Re: [rfc] refpolicy user based separation Joshua Brindle Re: [rfc] refpolicy user based separation James Carter Re: SELinux Bootstrap - without chroot Vikram Ambrose gnome-screensav AVCs Xavier Toth Re: SELinux Bootstrap - without chroot Stephen Smalley Re: Question about XACE/X-SELinux Xavier Toth Re: SELinux Bootstrap - without chroot Vikram Ambrose Question about XACE/X-SELinux T S Re: SELinux Bootstrap - without chroot Stephen Smalley Re: [PATCH-v2] SELinux: allow fstype unknown to policy to use xattrs if present Stephen Smalley Monday, 16 June Re: [PATCH-v2] SELinux: allow fstype unknown to policy to use xattrs if present Casey Schaufler Re: SELinux Bootstrap - without chroot Vikram Ambrose [PATCH-v2] SELinux: allow fstype unknown to policy to use xattrs if present Eric Paris Re: New domain for qemu Christopher J. PeBenito Re: new domain for libvirt Christopher J. PeBenito Re: SELinux Bootstrap - without chroot Stephen Smalley Re: SELinux Bootstrap - without chroot Vikram Ambrose Re: SELinux Bootstrap - without chroot Stephen Smalley SELinux Bootstrap - without chroot Vikram Ambrose Re: [PATCH-v3] libsepol: allow genfscon statements in modules Eric Paris Re: libsemanage.semanage_install_active: error during semodule -n -v -b base.pp -s refpolicy Stephen Smalley Re: Trying to get XAce policy straightened out but our tool chain is too broken to handle it. Stephen Smalley Re: libsemanage.semanage_install_active: error during semodule -n -v -b base.pp -s refpolicy Vikram Ambrose Re: defining a new class in a policy module Joshua Brindle Re: libsemanage.semanage_install_active: error during semodule -n -v -b base.pp -s refpolicy Stephen Smalley Re: defining a new class in a policy module Mohamed Hassan Sunday, 15 June Re: defining a new class in a policy module Joshua Brindle defining a new class in a policy module Mohamed Hassan Friday, 13 June Re: libsemanage.semanage_install_active: error during semodule -n -v -b base.pp -s refpolicy Vikram Ambrose Re: libsemanage.semanage_install_active: error during semodule -n -v -b base.pp -s refpolicy Stephen Smalley Re: libsemanage.semanage_install_active: error during semodule -n -v -b base.pp -s refpolicy Vikram Ambrose Re: libsemanage.semanage_install_active: error during semodule -n -v -b base.pp -s refpolicy Stephen Smalley Re: libsemanage.semanage_install_active: error during semodule -n -v -b base.pp -s refpolicy Vikram Ambrose Re: [PATCH] libselinux: new and updated man pages for AVC, mapping, label Stephen Smalley Re: [PATCH] libselinux: new and updated man pages for AVC, mapping, label Eamon Walsh Re: [PATCH] libselinux: new and updated man pages for AVC, mapping, label - try 2 Stephen Smalley [PATCH] libselinux: new and updated man pages for AVC, mapping, label - try 2 Eamon Walsh Re: checkpolicy misrepresents the line an error is on Stephen Smalley checkpolicy misrepresents the line an error is on Eric Paris Re: [patch] libsepol write.c has shadowed var Stephen Smalley Re: [patch] libsepol write.c has shadowed var Joshua Brindle Re: [refpolicy] Milter Mail Filters Paul Howarth Re: [patch] libsepol write.c has shadowed var Stephen Smalley [patch] libsepol write.c has shadowed var Joshua Brindle Re: libsemanage.semanage_install_active: error during semodule -n -v -b base.pp -s refpolicy Joshua Brindle Re: libsemanage.semanage_install_active: error during semodule -n -v -b base.pp -s refpolicy Stephen Smalley [rfc] refpolicy user based separation Joshua Brindle Re: libsemanage.semanage_install_active: error during semodule -n -v -b base.pp -s refpolicy Vikram Ambrose Re: libsepol segfault when module requires a user not in base Stephen Smalley Re: libsepol segfault when module requires a user not in base Joshua Brindle Re: [PATCH] libselinux: new and updated man pages for AVC, mapping, label Stephen Smalley Re: [refpolicy] Milter Mail Filters Christopher J. PeBenito Re: SELinux References/Books max Re: libsepol segfault when module requires a user not in base Stephen Smalley Re: [refpolicy] /usr/lib32 type Christopher J. PeBenito Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts Christopher J. PeBenito Re: [refpolicy] Milter Mail Filters Paul Howarth Re: SELinux References/Books Russell Coker Re: [PATCH] libselinux: new and updated man pages for AVC, mapping, label Stephen Smalley Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts KaiGai Kohei Thursday, 12 June libsepol segfault when module requires a user not in base Eric Paris [PATCH] libselinux: new and updated man pages for AVC, mapping, label Eamon Walsh Re: dynamic security class and access vector lookup Stephen Smalley Re: dynamic security class and access vector lookup Stephen Smalley Re: libsemanage.semanage_install_active: error during semodule -n -v -b base.pp -s refpolicy Stephen Smalley Re: dynamic security class and access vector lookup Xavier Toth Re: libsemanage.semanage_install_active: error during semodule -n -v -b base.pp -s refpolicy Vikram Ambrose Re: dynamic security class and access vector lookup Stephen Smalley dynamic security class and access vector lookup Xavier Toth Re: X in MLS enforcing problem Xavier Toth Re: libsemanage.semanage_install_active: error during semodule -n -v -b base.pp -s refpolicy Stephen Smalley Re: [PATCH] SELinux: allow fstype unknown to policy to use xattrs if present Eric Paris Re: [PATCH] SELinux: allow fstype unknown to policy to use xattrs if present Stephen Smalley Re: libsemanage.semanage_install_active: error during semodule -n -v -b base.pp -s refpolicy Vikram Ambrose Re: SELinux References/Books max bianco Re: [PATCH] SELinux: allow fstype unknown to policy to use xattrs if present Christopher J. PeBenito Re: libsemanage.semanage_install_active: error during semodule -n -v -b base.pp -s refpolicy Stephen Smalley Re: libsemanage.semanage_install_active: error during semodule -n -v -b base.pp -s refpolicy Vikram Ambrose Re: [PATCH] SELinux: allow fstype unknown to policy to use xattrs if present Stephen Smalley [PATCH] SELinux: allow fstype unknown to policy to use xattrs if present Eric Paris Re: libsemanage.semanage_install_active: error during semodule -n -v -b base.pp -s refpolicy Stephen Smalley libsemanage.semanage_install_active: error during semodule -n -v -b base.pp -s refpolicy Vikram Ambrose Re: SELinux References/Books Stephen Smalley Wednesday, 11 June Re: how do I use selabel to get an x selection object context Eamon Walsh Re: SELinux References/Books max Re: X in MLS enforcing problem Eamon Walsh Re: X in MLS enforcing problem Eamon Walsh Re: X in MLS enforcing problem Eamon Walsh Re: X in MLS enforcing problem Xavier Toth Re: SELinux References/Books Stephen Smalley how do I use selabel to get an x selection object context Xavier Toth SELinux References/Books max Re: libselinux patch to add interfaces in avc.h to python bindings Stephen Smalley Re: [PATCH] SELinux: remove unused and shadowed addrlen variable Paul Moore ANN: Updated SELinux core userland release Stephen Smalley Current Fedora Prelude patch Daniel J Walsh postgresql fedora differences Daniel J Walsh Fedora diffs for vmware policy Daniel J Walsh RE: MLS constraint interfaces Chad Hanson Re: [RFC] SELinux: allow fstype unknown to policy to use xattrs if present Stephen Smalley Re: kernel/kernel.* diffs Daniel J Walsh [RFC] SELinux: allow fstype unknown to policy to use xattrs if present Eric Paris libselinux patch to add interfaces in avc.h to python bindings Daniel J Walsh Corecommand.patch based off todays policy Daniel J Walsh Re: [RFC] Context ordering based on MLS dominance. Dave Quigley Re: [PATCH] SELinux: use do_each_thread as a proper do/while block Stephen Smalley Re: [PATCH] SELinux: remove unused and shadowed addrlen variable Stephen Smalley [PATCH] SELinux: use do_each_thread as a proper do/while block James Morris [PATCH] SELinux: remove unused and shadowed addrlen variable James Morris Re: [RFC] Context ordering based on MLS dominance. Casey Schaufler Re: [RFC] Context ordering based on MLS dominance. Stephen Smalley Re: [RFC] Context ordering based on MLS dominance. Joshua Brindle libselinux: Introduce interfaces to use context_dom selinuxfs entry Dave Quigley SELINUX: Add interface to compute MLS dominance relationship. Dave Quigley [RFC] Context ordering based on MLS dominance. Dave Quigley Re: To domain transition or not? Daniel J Walsh Re: releasibility in mcstransd Daniel J Walsh libxcb xselinux Ted X Toth Re: X in MLS enforcing problem Ted X Toth MLS constraint interfaces Ted X Toth Tuesday, 10 June Re: releasibility in mcstransd Joe Nall rbacsep: home/tmp polyinstantiation Christopher J. PeBenito Re: Questions regarding labeled ipsec/MAC networking Joy Latten Re: X in MLS enforcing problem Ted X Toth Re: tracking down execstack & execmem violations Stephen Smalley Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts Christopher J. PeBenito Re: tracking down execstack & execmem violations Daniel J Walsh Re: tracking down execstack & execmem violations Eric Paris Re: Questions regarding labeled ipsec/MAC networking Joy Latten RE: tracking down execstack & execmem violations Stephen Smalley RE: tracking down execstack & execmem violations Clarkson, Mike R \(US SSA\) Re: tracking down execstack & execmem violations Stephen Smalley tracking down execstack & execmem violations Clarkson, Mike R \(US SSA\) Re: Questions regarding labeled ipsec/MAC networking Joy Latten Re: Questions regarding labeled ipsec/MAC networking Paul Moore Re: avc_* functions not in libselinux-python Stephen Smalley Re: avc_* functions not in libselinux-python Ted X Toth Re: X in MLS enforcing problem Ted X Toth Re: avc_* functions not in libselinux-python Stephen Smalley Re: Questions regarding labeled ipsec/MAC networking Stephen Smalley Re: X in MLS enforcing problem Stephen Smalley Re: [PATCH] SELinux: more user friendly unknown handling printk Stephen Smalley Monday, 9 June Re: X in MLS enforcing problem Eamon Walsh Re: Questions regarding labeled ipsec/MAC networking James Morris Re: [PATCH] SELinux: fix off by 1 reference of class_to_string in context_struct_compute_av James Morris Re: [PATCH] SELinux: more user friendly unknown handling printk James Morris Re: [patch] selinux: change handling of invalid classes (Was: Re: 2.6.26-rc5-mm1 selinux whine) James Morris Re: [PATCH] SELinux: drop load_mutex in security_load_policy James Morris Questions regarding labeled ipsec/MAC networking Joy Latten Re: X in MLS enforcing problem Xavier Toth RE: X in MLS enforcing problem Chad Hanson X in MLS enforcing problem Xavier Toth RE: releasibility in mcstransd Chad Hanson [PATCH] SELinux: more user friendly unknown handling printk Eric Paris Re: releasibility in mcstransd Paul Moore releasibility in mcstransd Joshua Brindle Re: [PATCH] SELinux: drop load_mutex in security_load_policy Stephen Smalley Re: [patch] selinux: change handling of invalid classes (Was: Re: 2.6.26-rc5-mm1 selinux whine) Eric Paris Re: [PATCH] SELinux: fix off by 1 reference of class_to_string in context_struct_compute_av Stephen Smalley RE: To domain transition or not? Stephen Smalley [patch] selinux: change handling of invalid classes (Was: Re: 2.6.26-rc5-mm1 selinux whine) Stephen Smalley [PATCH] SELinux: drop load_mutex in security_load_policy Eric Paris Re: [PATCH] SELinux: fix off by 1 reference of class_to_string in context_struct_compute_av Eric Paris RE: To domain transition or not? Clarkson, Mike R \(US SSA\) [PATCH] SELinux: fix off by 1 reference of class_to_string in context_struct_compute_av Eric Paris Re: No AVC messages found Justin Mattock Re: To domain transition or not? Stephen Smalley To domain transition or not? Clarkson, Mike R \(US SSA\) Re: [refpolicy] /usr/lib32 type Martin Orr Re: No AVC messages found Stephen Smalley Re: No AVC messages found Justin Mattock [refpolicy] Milter Mail Filters Paul Howarth Re: kernel/kernel.* diffs Christopher J. PeBenito Re: [refpolicy] Let xserver chat to hal Christopher J. PeBenito Re: [refpolicy] /usr/lib32 type Christopher J. PeBenito Re: No AVC messages found Stephen Smalley Re: RFC: Per-object manager controls in /selinux/config KaiGai Kohei Sunday, 8 June Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts KaiGai Kohei Re: Trying to get XAce policy straightened out but our tool chain is too broken to handle it. Ted X Toth No AVC messages found Justin Mattock Saturday, 7 June [refpolicy] Let xserver chat to hal Martin Orr [refpolicy] /usr/lib32 type Martin Orr Friday, 6 June Re: Trying to get XAce policy straightened out but our tool chain is too broken to handle it. Eamon Walsh Re: [PATCH RFC 0/3] Open code kernel locks Paul Moore RE: modules.conf problem Christopher J. PeBenito RE: modules.conf problem Clarkson, Mike R \(US SSA\) Re: [patch] libsepol: fix endianness bug in network node address handling Stephen Smalley Re: [PATCH 2/3] SELinux: open code load_mutex Stephen Smalley Re: RFC: Per-object manager controls in /selinux/config Stephen Smalley Re: [PATCH 2/3] SELinux: open code load_mutex James Morris Re: modules.conf problem Christopher J. PeBenito Re: [PATCH 3/3] SELinux: open code sidtab lock Stephen Smalley Re: [PATCH 2/3] SELinux: open code load_mutex Stephen Smalley Re: [PATCH 1/3] SELinux: open code policy_rwlock Stephen Smalley SE Linux and GPG Russell Coker [PATCH 3/3] SELinux: open code sidtab lock James Morris [PATCH 2/3] SELinux: open code load_mutex James Morris [PATCH 1/3] SELinux: open code policy_rwlock James Morris [PATCH RFC 0/3] Open code kernel locks James Morris Re: RFC: Per-object manager controls in /selinux/config KaiGai Kohei Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts KaiGai Kohei Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts KaiGai Kohei Thursday, 5 June modules.conf problem Clarkson, Mike R \(US SSA\) Re: RFC: Per-object manager controls in /selinux/config Stephen Smalley Re: RFC: Per-object manager controls in /selinux/config Eamon Walsh Re: [patch][stable] policycoreutils user_u seuser vs. genhomedircon Stephen Smalley Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts Eamon Walsh Trying to get XAce policy straightened out but our tool chain is too broken to handle it. Daniel J Walsh Re: [patch] selinux: fix endianness bug in network node address handling James Morris Re: [patch] selinux: simplify ioctl checking James Morris [patch] selinux: fix endianness bug in network node address handling Stephen Smalley [patch] libsepol: fix endianness bug in network node address handling Stephen Smalley Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts Chris PeBenito [patch] selinux: simplify ioctl checking Stephen Smalley Wednesday, 4 June Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts KaiGai Kohei Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts KaiGai Kohei Re: NetLabel Justin Mattock Re: NetLabel Paul Moore Re: NetLabel Justin Mattock Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts Christopher J. PeBenito Re: NetLabel Paul Moore Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts Joshua Brindle NetLabel Justin Mattock Re: RFC: Per-object manager controls in /selinux/config KaiGai Kohei Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts KaiGai Kohei Tuesday, 3 June Re: [RFC][PATCH] selinux: simplify ioctl checking James Morris Re: [RFC][PATCH] selinux: simplify ioctl checking Eric Paris Re: [RFC][PATCH] selinux: simplify ioctl checking Stephen Smalley Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts Christopher J. PeBenito Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts KaiGai Kohei Monday, 2 June Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts Christopher J. PeBenito Re: rbacsep: collapsing xserver Christopher J. PeBenito Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts Eamon Walsh Re: changing role to user_r Justin Mattock RE: changing role to user_r Clarkson, Mike R \(US SSA\) Re: changing role to user_r Justin Mattock Re: changing role to user_r Justin Mattock Sunday, 1 June Recent problems recompiling libsemanage with new libustr (1.0.4) Manoj Srivastava Monday, 2 June Re: changing role to user_r Christopher J. PeBenito Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts KaiGai Kohei Sunday, 1 June Re: Recent problems recompiling libsemanage with new libustr (1.0.4) Manoj Srivastava Saturday, 31 May Re: question about security Justin Mattock Re: question about security Russell Coker changing role to user_r Justin Mattock Friday, 30 May Re: Here is my current diff on xserver policy. Eamon Walsh Re: question about security Justin Mattock Re: rbacsep: collapsing xserver Eamon Walsh Re: rbacsep: collapsing xserver Casey Schaufler Here is my current diff on xserver policy. Daniel J Walsh Re: question about security Justin Mattock Re: question about security Daniel J Walsh Re: question about security Justin Mattock Re: question about security Matthew Hammer question about security Justin Mattock Re: rbacsep: collapsing xserver Joe Nall Re: rbacsep: collapsing xserver Joe Nall Re: rbacsep: collapsing xserver Xavier Toth Re: Writing SELinux Policy...(Allow ALL, Deny Few) Stephen Smalley Re: rbacsep: collapsing xserver Christopher J. PeBenito Re: rbacsep: collapsing xserver Xavier Toth Re: rbacsep: collapsing xserver Xavier Toth Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts Christopher J. PeBenito Thursday, 29 May Re: rbacsep: collapsing xserver Eamon Walsh Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts Eamon Walsh Fwd: rbacsep: collapsing xserver Xavier Toth Re: rbacsep: collapsing xserver Daniel J Walsh Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts Christopher J. PeBenito Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts Eamon Walsh Re: rbacsep: collapsing xserver Xavier Toth Re: rbacsep: collapsing xserver Christopher J. PeBenito Wednesday, 28 May [patch][stable] policycoreutils user_u seuser vs. genhomedircon Chris PeBenito Re: rbacsep: collapsing xserver Eamon Walsh Re: rbacsep: collapsing xserver Daniel J Walsh Re: rbacsep: collapsing xserver Joe Nall Re: copy/paste policy patch Christopher J. PeBenito Re: rbacsep: collapsing xserver Christopher J. PeBenito Writing SELinux Policy...(Allow ALL, Deny Few) Hasan Rezaul-CHR010 Re: copy/paste policy patch Xavier Toth Re: rbacsep: collapsing xserver Joe Nall Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts KaiGai Kohei Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts KaiGai Kohei Re: rbacsep: collapsing xserver Joe Nall Re: rbacsep: collapsing xserver Christopher J. PeBenito Re: rbacsep: collapsing xserver Xavier Toth Re: rbacsep: collapsing xserver Joe Nall Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts Stephen Smalley rbacsep: collapsing xserver Christopher J. PeBenito Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts Christopher J. PeBenito Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts Christopher J. PeBenito Tuesday, 27 May Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts KaiGai Kohei Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts KaiGai Kohei Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts KaiGai Kohei Re: Problem with multisame specification warning messages RHEL 5 Ali Nebi Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts Eamon Walsh Re: Is there a command line tool that returns 1 if a file is in the wrong context? Stephen Smalley Re: [PATCH Take 3] user and role remapping in expander (was Re: roles in base module) Stephen Smalley Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts Stephen Smalley Re: Is there a command line tool that returns 1 if a file is in the wrong context? Eamon Walsh Re: Quick question Stephen Smalley Re: 7 simple noobie questions = 1-line answers ok :) Stephen Smalley Re: 7 simple noobie questions = 1-line answers ok :) Danny Howerton Re: Quick question Ioannis Aslanidis 7 simple noobie questions = 1-line answers ok :) green bean Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts Christopher J. PeBenito Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts Stephen Smalley Re: Quick question Stephen Smalley Re: Quick question Ioannis Aslanidis Re: Quick question Stephen Smalley Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts Christopher J. PeBenito Re: [PATCH Take 3] user and role remapping in expander (was Re: roles in base module) Joshua Brindle Quick question Ioannis Aslanidis Re: [PATCH] libselinux: add support for /contexts/postgresql_contexts Stephen Smalley Re: [PATCH Take 3] user and role remapping in expander (was Re: roles in base module) Stephen Smalley Re: Is there a command line tool that returns 1 if a file is in the wrong context? Stephen Smalley Re: Problem with multisame specification warning messages RHEL 5 Daniel J Walsh Re: New domain for podsleuth Daniel J Walsh Re: New domain for nsplugin Daniel J Walsh Monday, 26 May Re: Updated kernel/filesystem.* patch Christopher J. PeBenito Re: [PATCH 1/1] REFPOL: Add new labeled networking permissions Christopher J. PeBenito Re: New policy for kerneloops Christopher J. PeBenito Re: New domain for nsplugin Christopher J. PeBenito Re: New domain for podsleuth Christopher J. PeBenito Re: New Domain for kismet Christopher J. PeBenito [PATCH] libselinux: add support for /contexts/postgresql_contexts KaiGai Kohei Problem with multisame specification warning messages RHEL 5 Ali Nebi Sunday, 25 May Re: netif and node check in RHEL5 Takesi satoh Saturday, 24 May [PATCH Take 3] user and role remapping in expander (was Re: roles in base module) Joshua Brindle Is there a command line tool that returns 1 if a file is in the wrong context? Joe Nall Friday, 23 May Re: overriding home directory file contexts Daniel J Walsh Re: netif and node check in RHEL5 Paul Moore Re: netif and node check in RHEL5 Takesi satoh We need to do a better job of merging policy into Refpolicy Daniel J Walsh I have copied a bunch of patches for most of kernel/system directory Daniel J Walsh kernel/kernel.* diffs Daniel J Walsh Fedora 10 modules config for MLS and Targeted policy Daniel J Walsh Updated kernel/filesystem.* patch Daniel J Walsh RE: overriding home directory file contexts Stephen Smalley Thursday, 22 May [PATCH 1/1] REFPOL: Add new labeled networking permissions Paul Moore [PATCH 0/1] Latest network peer labeling patch Paul Moore RE: overriding home directory file contexts Clarkson, Mike R \(US SSA\) Re: overriding home directory file contexts Stephen Smalley overriding home directory file contexts Clarkson, Mike R \(US SSA\) Re: refpolicy: syscall init_module needs sys_nice & setsched Christopher J. PeBenito refpolicy: syscall init_module needs sys_nice & setsched Václav Ovsík Re: Suggested global change to policy Daniel J Walsh Re: Suggested global change to policy Christopher J. PeBenito Re: [PATCH] selinux: enable processes with mac_admin to get the raw inode contexts James Morris Wednesday, 21 May [PATCH] selinux: enable processes with mac_admin to get the raw inode contexts Stephen Smalley Re: netif and node check in RHEL5 Paul Moore Suggested global change to policy Daniel J Walsh Re: should GNU install call matchpathcon by default? Stephen Smalley Re: should GNU install call matchpathcon by default? Jim Meyering Re: SELINUX admin with LDAP Daniel J Walsh netif and node check in RHEL5 Takesi satoh Tuesday, 20 May Re: should GNU install call matchpathcon by default? Jim Meyering Re: should GNU install call matchpathcon by default? Eric Paris Re: roles in base module Stephen Smalley Re: should GNU install call matchpathcon by default? Jim Meyering Re: should GNU install call matchpathcon by default? Stephen Smalley Re: Potential Memory leak in libselinux Stephen Smalley Monday, 19 May Potential Memory leak in libselinux Daniel J Walsh Patch to add auth_switch to lots of domains. Daniel J Walsh New Domain for kismet Daniel J Walsh New domain for podsleuth Daniel J Walsh new domain for libvirt Daniel J Walsh New domain for nsplugin Daniel J Walsh new domain for policy kit Daniel J Walsh new domain for gnomeclock Daniel J Walsh New domain for prelude Daniel J Walsh New domain for qemu Daniel J Walsh New policy for kerneloops Daniel J Walsh Re: roles in base module Joshua Brindle Re: roles in base module Martin Orr Re: File_contexts file and semanage... Stephen Smalley File_contexts file and semanage... Hasan Rezaul-CHR010 RE: roles in base module Joshua Brindle Re: [RFC][PATCH] selinux: simplify ioctl checking Eric Paris Re: [RFC][PATCH] selinux: simplify ioctl checking Stephen Smalley Re: roles in base module Stephen Smalley Sunday, 18 May [ANN] Community developer server accounts available James Morris Friday, 16 May Re: roles in base module Joshua Brindle Re: Differences between openssh and pam_selinux Stephen Smalley Re: rbacsep: RFC cron jobs execute under user domain Daniel J Walsh Re: Differences between openssh and pam_selinux Stephen Smalley Re: rbacsep: RFC cron jobs execute under user domain Stephen Smalley rbacsep: RFC cron jobs execute under user domain Christopher J. PeBenito Wednesday, 14 May Re: [PATCH] SELinux: keep the code clean formating and syntax James Morris Re: [PATCH] selinux: fix sleeping allocation in security_context_to_sid (Was: + selinux-dopey-hack.patch added to -mm tree) James Morris Re: RHEL5 initrc_t vs. unconfined_t Daniel J Walsh Re: RHEL5 initrc_t vs. unconfined_t Jan-Frode Myklebust Re: RHEL5 initrc_t vs. unconfined_t Daniel J Walsh Re: RHEL5 initrc_t vs. unconfined_t Jan-Frode Myklebust Re: [PATCH] selinux: fix sleeping allocation in security_context_to_sid (Was: + selinux-dopey-hack.patch added to -mm tree) Stephen Smalley [PATCH] SELinux: keep the code clean formating and syntax Eric Paris Re: RHEL5 initrc_t vs. unconfined_t Daniel J Walsh Re: RHEL5 initrc_t vs. unconfined_t Jan-Frode Myklebust Re: [PATCH] selinux: fix sleeping allocation in security_context_to_sid (Was: + selinux-dopey-hack.patch added to -mm tree) Stephen Smalley Re: [PATCH] selinux: fix sleeping allocation in security_context_to_sid (Was: + selinux-dopey-hack.patch added to -mm tree) Stephen Smalley Re: RHEL5 initrc_t vs. unconfined_t Daniel J Walsh Tuesday, 13 May Re: [PATCH-v3] libsepol: allow genfscon statements in modules Joshua Brindle RHEL5 initrc_t vs. unconfined_t Jan-Frode Myklebust Re: [PATCH-v3] libsepol: allow genfscon statements in modules Eric Paris Re: [PATCH-v3] libsepol: allow genfscon statements in modules Joshua Brindle Re: [PATCH] selinux: fix sleeping allocation in security_context_to_sid (Was: + selinux-dopey-hack.patch added to -mm tree) Stephen Smalley ANN: SELinux Project Wiki migration James Morris [PATCH] selinux: fix sleeping allocation in security_context_to_sid (Was: + selinux-dopey-hack.patch added to -mm tree) Stephen Smalley Monday, 12 May Re: SELinux Policy test cases updates Paul Moore Re: [PATCH] SE-PostgreSQL Security Policy (try #3) KaiGai Kohei SELinux Policy test cases updates Subrata Modak Re: [PATCH] SE-PostgreSQL Security Policy (try #3) KaiGai Kohei Re: refpolicy: patch for gpg-agent Václav Ovsík Re: I think this is a bug in the kernel Stephen Smalley Re: [RFC][PATCH] security: split ptrace checking in proc Stephen Smalley Re: I think this is a bug in the kernel Daniel J Walsh Re: [RFC][PATCH] selinux: simplify ioctl checking Stephen Smalley Sunday, 11 May Re: [PATCH] SE-PostgreSQL Security Policy (try #3) KaiGai Kohei Re: [RFC][PATCH] security: split ptrace checking in proc James Morris Re: [RFC][PATCH] selinux: simplify ioctl checking James Morris Friday, 9 May [RFC][PATCH] security: split ptrace checking in proc Stephen Smalley Re: Compat_net an pam login problem. Stephen Smalley Compat_net an pam login problem. Scally, Katrina-P54861 Re: I think this is a bug in the kernel Daniel J Walsh Re: I think this is a bug in the kernel Stephen Smalley Re: I think this is a bug in the kernel Daniel J Walsh Re: I think this is a bug in the kernel Stephen Smalley Re: I think this is a bug in the kernel Daniel J Walsh Re: I think this is a bug in the kernel Stephen Smalley Re: I think this is a bug in the kernel Daniel J Walsh Re: I think this is a bug in the kernel Stephen Smalley I think this is a bug in the kernel Daniel J Walsh [RFC][PATCH] selinux: simplify ioctl checking Stephen Smalley Thursday, 8 May Re: [PATCH v4] selinux: support deferred mapping of contexts Stephen Smalley Re: roles in base module Stephen Smalley Wednesday, 7 May Re: [PATCH v5] selinux: support deferred mapping of contexts James Morris Re: [PATCH v4] selinux: support deferred mapping of contexts Steve Grubb Re: refpolicy roles / RBAC separation RFC Stephen Smalley Re: refpolicy roles / RBAC separation RFC Christopher J. PeBenito Re: [PATCH v4] selinux: support deferred mapping of contexts Stephen Smalley Re: [PATCH v5] selinux: support deferred mapping of contexts Stephen Smalley Re: [PATCH v4] selinux: support deferred mapping of contexts Daniel J Walsh [PATCH v5] selinux: support deferred mapping of contexts Stephen Smalley Re: [PATCH v4] selinux: support deferred mapping of contexts Steve Grubb Re: [PATCH v4] selinux: support deferred mapping of contexts Eric Paris Re: [PATCH v4] selinux: support deferred mapping of contexts Stephen Smalley Re: [PATCH v4] selinux: support deferred mapping of contexts Eric Paris [PATCH-v3] checkpolicy: allow genfscon statements in modules Eric Paris [PATCH-v3] libsepol: allow genfscon statements in modules Eric Paris Re: [PATCH v4] selinux: support deferred mapping of contexts Stephen Smalley Re: [PATCH v4] selinux: support deferred mapping of contexts James Morris Re: [PATCH v4] selinux: support deferred mapping of contexts Stephen Smalley Tuesday, 6 May Re: [PATCH v4] selinux: support deferred mapping of contexts James Morris roles in base module Martin Orr Re: rbacsep: transition/inherit perms Stephen Smalley rbacsep: transition/inherit perms Christopher J. PeBenito Re: [PATCH v4] selinux: support deferred mapping of contexts Stephen Smalley Re: refpolicy: patch for gpg-agent Christopher J. PeBenito [PATCH v4] selinux: support deferred mapping of contexts Stephen Smalley Re: [RFC] libsepol: allow genfscon statements in modules Stephen Smalley [RFC-v2] libsepol and checkpolicy: make genfs statements valid in modules Eric Paris Re: copy/paste policy patch Christopher J. PeBenito Re: [refpolicy] initrc_t access to sshd /proc to adjust OOM killer Václav Ovsík Monday, 5 May Re: [PATCH v3] selinux: support deferred mapping of contexts James Morris [RFC] checkpolicy: allow genfscon statements in modules Eric Paris [RFC] libsepol: allow genfscon statements in modules Eric Paris Re: [PATCH v3] selinux: support deferred mapping of contexts Stephen Smalley Re: [refpolicy] initrc_t access to sshd /proc to adjust OOM killer Daniel J Walsh [PATCH v3] selinux: support deferred mapping of contexts Stephen Smalley Re: [PATCH] SE-PostgreSQL Security Policy (try #3) Christopher J. PeBenito Re: [refpolicy] initrc_t access to sshd /proc to adjust OOM killer Václav Ovsík Friday, 2 May Re: segfault using dismod when linking modules Eric Paris Re: [RFC][PATCH v2] selinux: support deferred mapping of contexts Stephen Smalley Re: [RFC][PATCH v2] selinux: support deferred mapping of contexts Stephen Smalley Re: [RFC][PATCH v2] selinux: support deferred mapping of contexts Stephen Smalley Re: [RFC][PATCH v2] selinux: support deferred mapping of contexts Daniel J Walsh Re: [refpolicy] initrc_t access to sshd /proc to adjust OOM killer Daniel J Walsh [refpolicy] initrc_t access to sshd /proc to adjust OOM killer Václav Ovsík Re: segfault using dismod when linking modules Stephen Smalley Thursday, 1 May segfault using dismod when linking modules Eric Paris Re: [RFC][PATCH v2] selinux: support deferred mapping of contexts Stephen Smalley Re: [RFC][PATCH v2] selinux: support deferred mapping of contexts Eric Paris Re: [RFC][PATCH v2] selinux: support deferred mapping of contexts Stephen Smalley Re: [RFC][PATCH v2] selinux: support deferred mapping of contexts James Morris Re: [RFC][PATCH v2] selinux: support deferred mapping of contexts Stephen Smalley Re: [RFC][PATCH v2] selinux: support deferred mapping of contexts James Morris Re: [RFC][PATCH v2] selinux: support deferred mapping of contexts Stephen Smalley Re: [RFC][PATCH v2] selinux: support deferred mapping of contexts Stephen Smalley Re: [RFC][PATCH v2] selinux: support deferred mapping of contexts Stephen Smalley Wednesday, 30 April Re: copy/paste policy patch Eamon Walsh Re: [RFC][PATCH v2] selinux: support deferred mapping of contexts James Morris Re: [RFC][PATCH v2] selinux: support deferred mapping of contexts Casey Schaufler [RFC][PATCH v2] selinux: support deferred mapping of contexts Stephen Smalley Re: refpolicy roles / RBAC separation RFC Daniel J Walsh Re: refpolicy roles / RBAC separation RFC Stephen Smalley Re: refpolicy roles / RBAC separation RFC Daniel J Walsh Re: refpolicy roles / RBAC separation RFC Stephen Smalley Re: [PATCH] NFS/LSM: Make NFSv4 set LSM mount options Eric Paris Re: refpolicy roles / RBAC separation RFC Daniel J Walsh Re: refpolicy roles / RBAC separation RFC Christopher J. PeBenito Re: refpolicy roles / RBAC separation RFC Christopher J. PeBenito Re: refpolicy roles / RBAC separation RFC Stephen Smalley Re: refpolicy roles / RBAC separation RFC Christopher J. PeBenito Re: refpolicy roles / RBAC separation RFC Stephen Smalley Re: refpolicy roles / RBAC separation RFC Stephen Smalley Re: refpolicy roles / RBAC separation RFC Daniel J Walsh Tuesday, 29 April Re: [PATCH] Security: Make secctx_to_secid() take const secdata Casey Schaufler [PATCH] Security: Make secctx_to_secid() take const secdata David Howells Re: refpolicy roles / RBAC separation RFC Stephen Smalley Re: refpolicy roles / RBAC separation RFC Christopher J. PeBenito Re: refpolicy roles / RBAC separation RFC Stephen Smalley Re: refpolicy roles / RBAC separation RFC Stephen Smalley [20/37] SELinux: no BUG_ON(!ss_initialized) in selinux_clone_mnt_opts Greg KH Re: refpolicy roles / RBAC separation RFC Daniel J Walsh refpolicy roles / RBAC separation RFC Christopher J. PeBenito Monday, 28 April [ANN] 2008 SELinux Developer Summit Schedule Published James Morris Re: copy/paste policy patch Xavier Toth Re: copy/paste policy patch Eamon Walsh Re: copy/paste policy patch Eamon Walsh Re: copy/paste policy patch Eamon Walsh Re: [PATCH]Introduce generalized hooks for getting and setting inode secctx. Dave Quigley Re: [PATCH]Introduce generalized hooks for getting and setting inode secctx. James Morris Re: [PATCH]Introduce generalized hooks for getting and setting inode secctx. Casey Schaufler Re: copy/paste policy patch Christopher J. PeBenito Sunday, 27 April Re: [PATCH -v3] LSM/SELinux: show LSM mount options in /proc/mounts James Morris Re: [PATCH]Introduce generalized hooks for getting and setting inode secctx. James Morris Re: [PATCH -v3] LSM/SELinux: show LSM mount options in /proc/mounts James Morris Friday, 25 April Shintaro sent you a friend request on Tagged :) Shintaro Fujiwara Re: audit2allow -R Stephen Smalley Re: audit2allow -R Stephen Smalley Re: audit2allow -R Daniel J Walsh [PATCH 0/2] Fixes for 2.6.26 Paul Moore [PATCH 1/2] SELinux: Made netnode cache adds faster Paul Moore [PATCH 2/2] SELinux: Fix a RCU free problem with the netport cache Paul Moore RE: sepolgen-ifgen Kim Lawson-Jenkins audit2allow -R Stephen Smalley Re: sepolgen-ifgen Stephen Smalley Re: labelling with genfscon run zhang sepolgen-ifgen Kim Lawson-Jenkins copy/paste policy patch Xavier Toth Re: labelling with genfscon Stephen Smalley Thursday, 24 April Re: labelling with genfscon run zhang Re: How to handle USB devices.... Stephen Smalley How to handle USB devices.... Tom London Re: refpolicy: patch for gpg-agent Daniel J Walsh Re: refpolicy: domains need access to the apt's pty and fifos Christopher J. PeBenito Re: [refpolicy] potential rsync patch Christopher J. PeBenito Re: labelling with genfscon Stephen Smalley Re: refpolicy: domains need access to the apt's pty and fifos Václav Ovsík Re: refpolicy: patch for gpg-agent Václav Ovsík Wednesday, 23 April Re: [PATCH -v3] LSM/SELinux: show LSM mount options in /proc/mounts James Morris [PATCH -v3] LSM/SELinux: show LSM mount options in /proc/mounts Eric Paris labelling with genfscon run zhang [PATCH 1/2] VFS: Factor out part of vfs_setxattr so it can be called from the SELinux hook for inode_setsecctx. David P. Quigley [PATCH]Introduce generalized hooks for getting and setting inode secctx. David P. Quigley [PATCH 2/2] LSM/SELinux: inode_{get,set,notify}secctx hooks to access LSM security context information. David P. Quigley Re: open_init_pty: eats much of the CPU time Manoj Srivastava Re: [DSE-Dev] refpolicy: domains need access to the apt's pty and fifos Václav Ovsík Re: [PATCH] SELinux: include/security.h whitespace, syntax, and other cleanups James Morris Tuesday, 22 April [PATCH] SELinux: mls.h whitespace, syntax, and other cleanups eparis_at_redhat.com [PATCH] SELinux: objsec.h whitespace, syntax, and other cleanups eparis_at_redhat.com [PATCH] SELinux: ss/conditional.h whitespace, syntax, and other cleanups eparis_at_redhat.com [PATCH] SELinux: netlabel.h whitespace, syntax, and other cleanups eparis_at_redhat.com [PATCH] SELinux: avc_ss.h whitespace, syntax, and other cleanups eparis_at_redhat.com [PATCH] SELinux: policydb.h whitespace, syntax, and other cleanups eparis_at_redhat.com [PATCH] SELinux: selinux/include/security.h whitespace, syntax, and other cleanups eparis_at_redhat.com [PATCH] SELinux: include/security.h whitespace, syntax, and other cleanups eparis_at_redhat.com [PATCH] SELinux: mls_types.h whitespace, syntax, and other cleanups eparis_at_redhat.com [PATCH] SELinux: context.h whitespace, syntax, and other cleanups eparis_at_redhat.com [PATCH] SELinux: hashtab.h whitespace, syntax, and other cleanups eparis_at_redhat.com Re: port numbers for sctp support? Stephen Smalley Re: port numbers for sctp support? Daniel J Walsh Re: SELinux with NFSv4 Daniel J Walsh Re: [PATCH] SELinux: no BUG_ON(!ss_initialized) in selinux_clone_mnt_opts Stephen Smalley Monday, 21 April [PATCH] SELinux: no BUG_ON(!ss_initialized) in selinux_clone_mnt_opts Eric Paris Re: SELinux with NFSv4 Daniel J Walsh Re: [PATCH 01/13] SELinux: netif.c whitespace, syntax, and static declaraction cleanups Paul Moore Re: avc_init & avc_open Stephen Smalley Re: avc_init & avc_open Joe Nall Re: avc_init & avc_open Stephen Smalley Re: avc_init & avc_open Stephen Smalley Re: avc_init & avc_open Joe Nall Re: [patch] libsemanage: don't call genhomedircon if policy was not rebuilt Joshua Brindle [patch] libsemanage: don't call genhomedircon if policy was not rebuilt Stephen Smalley Re: avc_init & avc_open Stephen Smalley avc_init & avc_open Joe Nall Re: [PATCH 01/13] SELinux: netif.c whitespace, syntax, and static declaraction cleanups Eric Paris Re: [PATCH 01/13] SELinux: netif.c whitespace, syntax, and static declaraction cleanups Paul Moore Friday, 18 April Re: [refpolicy] RFC: hal_read_log interface rob myers [PATCH 12/13] SELinux: services.c whitespace, syntax, and static declaraction cleanups eparis_at_redhat.com [PATCH 07/13] SELinux: avtab.c whitespace, syntax, and static declaraction cleanups eparis_at_redhat.com [PATCH 13/13] SELinux: sidtab.c whitespace, syntax, and static declaraction cleanups eparis_at_redhat.com [PATCH 08/13] SELinux: conditional.c whitespace, syntax, and static declaraction cleanups eparis_at_redhat.com [PATCH 05/13] SELinux: nlmsgtab.c whitespace, syntax, and static declaraction cleanups eparis_at_redhat.com [PATCH 04/13] SELinux: netnode.c whitespace, syntax, and static declaraction cleanups eparis_at_redhat.com [PATCH 10/13] SELinux: hashtab.c whitespace, syntax, and static declaraction cleanups eparis_at_redhat.com [PATCH 01/13] SELinux: netif.c whitespace, syntax, and static declaraction cleanups eparis_at_redhat.com [PATCH 02/13] SELinux: netlabel.c whitespace, syntax, and static declaraction cleanups eparis_at_redhat.com [PATCH 11/13] SELinux: mls.c whitespace, syntax, and static declaraction cleanups eparis_at_redhat.com [PATCH 09/13] SELinux: ebitmap.c whitespace, syntax, and static declaraction cleanups eparis_at_redhat.com [PATCH 06/13] SELinux: xfrm.c whitespace, syntax, and static declaraction cleanups eparis_at_redhat.com [PATCH 03/13] SELinux: netlink.c whitespace, syntax, and static declaraction cleanups eparis_at_redhat.com Re: semanage man page updated for booleans Daniel J Walsh Re: semanage man page updated for booleans Daniel J Walsh Re: [refpolicy] RFC: hal_read_log interface Christopher J. PeBenito Re: [refpolicy] trivial HAL doc patch Christopher J. PeBenito Re: Enabling policy capabilities Christopher J. PeBenito Re: [refpolicy] lvm runs shell scripts Christopher J. PeBenito Re: semanage man page updated for booleans Stephen Smalley Re: semanage man page updated for booleans Stephen Smalley Re: libselinux/matchpathcon has a memory leak Stephen Smalley Re: upstart/SELinux problem loading the wrong policy with kernel version change Stephen Smalley Re: refpolicy: loadable_module.spt improvement? Christopher J. PeBenito refpolicy: loadable_module.spt improvement? Václav Ovsík Thursday, 17 April Re: [PATCH] NFS/LSM: Make NFSv4 set LSM mount options James Morris Re: Fwd: adding a new security class Christopher J. PeBenito selinux mini-summit sub-policy topic Serge E. Hallyn Re: Fwd: adding a new security class Xavier Toth [PATCH] changing whitespace for fun and profit: policydb.c Eric Paris Re: memory_device_t Justin Mattock Re: memory_device_t Justin Mattock [PATCH] SELinux: one little, two little, three little whitespaces, the avc.c saga. Eric Paris [PATCH] SELinux: cleanup on isle selinuxfs.c Eric Paris Re: memory_device_t Stephen Smalley Re: memory_device_t Stephen Smalley memory_device_t Justin Mattock Re: Fwd: adding a new security class Xavier Toth Re: Fwd: adding a new security class Xavier Toth [PATCH] SELinux: whitespace and formating fixes for hooks.c Eric Paris Re: Fwd: adding a new security class Stephen Smalley [PATCH] SELinux: clean up printks Eric Paris Re: Fwd: adding a new security class Stephen Smalley Re: Fwd: adding a new security class Xavier Toth Re: Fwd: adding a new security class Stephen Smalley Re: Fwd: adding a new security class Stephen Smalley [PATCH] NFS/LSM: Make NFSv4 set LSM mount options Eric Paris Re: Fwd: adding a new security class Stephen Smalley Fwd: adding a new security class Xavier Toth Wednesday, 16 April [PATCH] Setools: Fix missing command name in logwatch script Manoj Srivastava Tuesday, 15 April Re: open_init_pty: eats much of the CPU time Manoj Srivastava Re: open_init_pty: eats much of the CPU time Joshua Brindle open_init_pty: eats much of the CPU time Václav Ovsík Re: refpolicy: patch for gpg-agent Václav Ovsík [refpolicy] potential rsync patch Patrick Neely Monday, 14 April Reminder: 2008 SELinux Developer Summit CFP Paul Moore [refpolicy] trivial HAL doc patch rob myers [refpolicy] RFC: hal_read_log interface rob myers polyinstantiated home subdirectories show up on Desktop Xavier Toth Re: setfscreatecon-w/invalid-context can mistakenly succeed Jim Meyering Re: setfscreatecon-w/invalid-context can mistakenly succeed Stephen Smalley Re: setfscreatecon-w/invalid-context can mistakenly succeed Jim Meyering Re: setfscreatecon-w/invalid-context can mistakenly succeed Stephen Smalley Sunday, 13 April Re: [PATCH v3 1/2] SELinux: Made netnode cache adds faster James Morris Re: [PATCH v3 2/2] SELinux: Add network port SID cache James Morris setfscreatecon-w/invalid-context can mistakenly succeed Jim Meyering Friday, 11 April Re: [PATCH v3 2/2] SELinux: Add network port SID cache Paul Moore Re: [PATCH v3 2/2] SELinux: Add network port SID cache Stephen Smalley Re: [PATCH v3 1/2] SELinux: Made netnode cache adds faster Stephen Smalley Testing Apache Policy kihamba nengo Thursday, 10 April Re: [RFC PATCH v2 0/2] Labeled networking patches for 2.6.26 Paul Moore Re: [RFC PATCH v2 0/2] Labeled networking patches for 2.6.26 James Morris Re: [RFC PATCH v2 2/2] LSM: Make the Labeled IPsec hooks more stack friendly James Morris Re: [RFC PATCH v2 1/2] NetLabel: Allow passing the LSM domain as a shared pointer James Morris Re: Enabling policy capabilities Daniel J Walsh Re: [RFC PATCH v2 0/2] Labeled networking patches for 2.6.26 Paul Moore Re: copy&paste security_compute_av from python Xavier Toth Re: copy&paste security_compute_av from python Daniel J Walsh [PATCH v3 2/2] SELinux: Add network port SID cache Paul Moore [PATCH v3 0/2] Series short description Paul Moore [PATCH v3 1/2] SELinux: Made netnode cache adds faster Paul Moore Re: [PATCH 2/3] SELinux: Made netnode cache adds faster Paul Moore Re: Enabling policy capabilities Paul Moore Enabling policy capabilities Stephen Smalley Re: [PATCH 2/3] SELinux: Made netnode cache adds faster Stephen Smalley Re: A Question about MLS in SELinux Stephen Smalley [PATCH] setools 3.3.4: Fix build failure with gcc-4.3.X Manoj Srivastava [PATCH] setools 3.3.4: Fix configure.ac to allow generation of configuration files Manoj Srivastava Wednesday, 9 April Re: [RFC PATCH 1/2] NetLabel: Allow passing the LSM domain as a shared pointer Casey Schaufler Re: [PATCH 2/3] SELinux: Made netnode cache adds faster Paul Moore A Question about MLS in SELinux zhao hui Re: [PATCH] SELinux: don't BUG if fs reuses a superblock James Morris [PATCH v2 2/2] SELinux: Add network port SID cache Paul Moore [PATCH v2 1/2] SELinux: Made netnode cache adds faster Paul Moore [PATCH v2 0/2] SELinux networking patches for 2.6.26 Paul Moore [RFC PATCH v2 2/2] LSM: Make the Labeled IPsec hooks more stack friendly Paul Moore [RFC PATCH v2 0/2] Labeled networking patches for 2.6.26 Paul Moore [RFC PATCH v2 1/2] NetLabel: Allow passing the LSM domain as a shared pointer Paul Moore Re: avc_* functions not in libselinux-python Xavier Toth Re: [PATCH] SELinux: don't BUG if fs reuses a superblock Stephen Smalley [PATCH] SELinux: don't BUG if fs reuses a superblock Eric Paris Re: copy&paste security_compute_av from python Xavier Toth Re: [PATCH 3/3] SELinux: Add network port SID cache Stephen Smalley Re: [PATCH 3/3] SELinux: Add network port SID cache Paul Moore Re: avc_* functions not in libselinux-python Stephen Smalley Re: [PATCH 1/3] SELinux: Cleanup the secid/secctx conversion functions Stephen Smalley Re: [PATCH 3/3] SELinux: Add network port SID cache Stephen Smalley Re: [PATCH 2/3] SELinux: Made netnode cache adds faster Stephen Smalley Re: nfs_xdev_get_sb appears to sometimes reuse a sb and makes SELinux angry Stephen Smalley Re: nfs_xdev_get_sb appears to sometimes reuse a sb and makes SELinux angry Eric Paris Re: nfs_xdev_get_sb appears to sometimes reuse a sb and makes SELinux angry Stephen Smalley nfs_xdev_get_sb appears to sometimes reuse a sb and makes SELinux angry Eric Paris Re: dpkg bug related to SE Linux Russell Coker Tuesday, 8 April Re: [PATCH 1/3] SELinux: Cleanup the secid/secctx conversion functions Paul Moore avc_* functions not in libselinux-python Xavier Toth Re: [RFC PATCH 2/2] LSM: Make the Labeled IPsec hooks more stack friendly Paul Moore Re: gdm login problem when polyinstantiating /tmp Daniel J Walsh Re: gdm login problem when polyinstantiating /tmp Xavier Toth Re: [PATCH 1/3] SELinux: Cleanup the secid/secctx conversion functions Stephen Smalley Re: [PATCH 1/3] SELinux: Cleanup the secid/secctx conversion functions Stephen Smalley semanage man page updated for booleans Daniel J Walsh Re: selinux support in cron withou system_u Stephen Smalley selinux support in cron withou system_u Marcela Maslanova Re: upstart/SELinux problem loading the wrong policy with kernel version change Stephen Smalley Re: upstart/SELinux problem loading the wrong policy with kernel version change Stephen Smalley Re: dpkg bug related to SE Linux Stephen Smalley Monday, 7 April upstart/SELinux problem loading the wrong policy with kernel version change Daniel J Walsh [PATCH 1/3] SELinux: Cleanup the secid/secctx conversion functions Paul Moore Re: dpkg bug related to SE Linux Russell Coker [RFC PATCH 2/2] LSM: Make the Labeled IPsec hooks more stack friendly Paul Moore [RFC PATCH 1/2] NetLabel: Allow passing the LSM domain as a shared pointer Paul Moore [RFC PATCH 0/2] Labeled networking tweaks for 2.6.26 Paul Moore [PATCH 0/3] Some SELinux patches for 2.6.26 Paul Moore [PATCH 3/3] SELinux: Add network port SID cache Paul Moore [PATCH 2/3] SELinux: Made netnode cache adds faster Paul Moore Re: mcstransd Casey Schaufler RE: Audit2allow + allow rule for 'granted' access Karrels, Jeffrey J \(US SSA\) RE: Audit2allow + allow rule for 'granted' access Stephen Smalley RE: Audit2allow + allow rule for 'granted' access Karrels, Jeffrey J \(US SSA\) Re: dpkg bug related to SE Linux Stephen Smalley Re: dpkg bug related to SE Linux Stephen Smalley Re: mcstransd Stephen Smalley gdm login problem when polyinstantiating /tmp Xavier Toth mcstransd Russell Coker Sunday, 6 April Re: semanage library problem on RHEL5 Daniel J Walsh Friday, 4 April dpkg bug related to SE Linux Russell Coker Re: Audit2allow + allow rule for 'granted' access Stephen Smalley ANN: 2008 SELinux Developer Summit CFP James Morris Thursday, 3 April Audit2allow + allow rule for 'granted' access Karrels, Jeffrey J \(US SSA\) RE: Removing 2 modules that depend on eachother Karrels, Jeffrey J \(US SSA\) Re: Removing 2 modules that depend on eachother Joshua Brindle Removing 2 modules that depend on eachother Karrels, Jeffrey J \(US SSA\) Re: Error running semanage from trunk Caleb Case Re: Error running semanage from trunk Stephen Smalley Error running semanage from trunk Brian M. Williams Re: Need to break or reduce the dependency on a static libsepol Joshua Brindle RE: Need to break or reduce the dependency on a static libsepol Stephen Smalley RE: Need to break or reduce the dependency on a static libsepol Stephen Smalley RE: Need to break or reduce the dependency on a static libsepol Joshua Brindle Re: Need to break or reduce the dependency on a static libsepol Stephen Smalley Re: RFC: fcglob prototype Christopher J. PeBenito Wednesday, 2 April RFC: changing the "+" in ls -l output to be "." or "+" Jim Meyering Re: Need to break or reduce the dependency on a static libsepol Dave Sugar Re: Need to break or reduce the dependency on a static libsepol Joshua Brindle ANN: Reference Policy Release Christopher J. PeBenito Re: semanage library problem on RHEL5 Stephen Smalley semanage library problem on RHEL5 Josef Kubin Re: file(1) Stephen Smalley Re: file(1) Russell Coker Re: [PATCH 1/2] SELinux: turn mount options strings into defines James Morris Tuesday, 1 April ANN: SELinux Developer Summit 2008, Ottawa James Morris Re: Need to break or reduce the dependency on a static libsepol Stephen Smalley Re: Need to break or reduce the dependency on a static libsepol David Sugar Re: copy&paste security_compute_av from python Eamon Walsh Re: [PATCH 1/2] SELinux: turn mount options strings into defines Stephen Smalley [PATCH 2/2] SELinux: display SELinux mount options in /proc/mounts Eric Paris [PATCH 1/2] SELinux: turn mount options strings into defines Eric Paris RE: Need to break or reduce the dependency on a static libsepol Joshua Brindle Re: SSH + file_contexts + kerberos Stephen Smalley Re: [RFC] SELinux: display mount options in /proc/mounts Stephen Smalley Need to break or reduce the dependency on a static libsepol Stephen Smalley Re: copy&paste security_compute_av from python Stephen Smalley Re: [RFC] SELinux: display mount options in /proc/mounts James Morris Monday, 31 March Re: copy&paste security_compute_av from python Eamon Walsh SSH + file_contexts + kerberos Karrels, Jeffrey J \(US SSA\) Re: [RFC] SELinux: display mount options in /proc/mounts Eric Paris Re: [RFC] SELinux: display mount options in /proc/mounts Stephen Smalley [RFC] SELinux: display mount options in /proc/mounts Eric Paris Re: RBAC in RHEL5 Takesi satoh Re: doc typo fix: s/behaviors/behavior/ Stephen Smalley Re: Things were going great until... Stephen Smalley Re: file(1) Stephen Smalley Re: RBAC in RHEL5 Christopher J. PeBenito Re: file(1) Stephen Smalley Re: Bug#472590: ls in Debian/Unstable Jim Meyering Re: Bug#472590: ls in Debian/Unstable Russell Coker Re: Bug#472590: ls in Debian/Unstable Jim Meyering Sunday, 30 March Re: [PATCH-v4] SELinux: introduce permissive types James Morris RBAC in RHEL5 Takesi satoh Re: Login Identities not applied when logging in... Martin Orr Re: Login Identities not applied when logging in... Daniel J Walsh Saturday, 29 March Login Identities not applied when logging in... Lisa R. doc typo fix: s/behaviors/behavior/ Jim Meyering RE: file(1) Joshua Brindle Things were going great until... Lisa R. Friday, 28 March Re: file(1) Russell Coker RE: file(1) Joshua Brindle Re: file(1) Russell Coker Re: Debian SE Linux status Russell Coker RE: file(1) Joshua Brindle Re: file(1) Russell Coker Re: Debian SE Linux status Joshua Brindle Re: Debian SE Linux status Russell Coker [PATCH 09/45] Security: Change current->fs[ug]id to current_fs[ug]id() [ver #35] David Howells Re: policy package names for Debian Russell Coker RE: file(1) Joshua Brindle Re: policy package names for Debian Stephen Smalley Re: Debian SE Linux status Stephen Smalley [PATCH 11/45] Security: De-embed task security record from task and use refcounting [ver #35] David Howells [PATCH 05/45] KEYS: Don't generate user and user session keyrings unless they're accessed [ver #35] David Howells [PATCH 00/45] Permit filesystem local caching [ver #35] David Howells [PATCH 08/45] KEYS: Add keyctl function to get a security label [ver #35] David Howells [PATCH 06/45] KEYS: Make the keyring quotas controllable through /proc/sys [ver #35] David Howells [PATCH 28/45] FS-Cache: Make kAFS use FS-Cache [ver #35] David Howells [PATCH 04/45] KEYS: Allow clients to set key perms in key_create_or_update() [ver #35] David Howells [PATCH 19/45] Add missing consts to xattr function arguments [ver #35] David Howells [PATCH 13/45] Security: Allow kernel services to override LSM settings for task actions [ver #35] David Howells [PATCH 36/45] NFS: Use local disk inode cache [ver #35] David Howells [PATCH 16/45] FS-Cache: Recruit a couple of page flags for cache management [ver #35] David Howells [PATCH 34/45] NFS: Define and create superblock-level objects [ver #35] David Howells [PATCH 14/45] Security: Make NFSD work with detached security [ver #35] David Howells [PATCH 42/45] NFS: Read pages from FS-Cache into an NFS inode [ver #35] David Howells [PATCH 39/45] NFS: FS-Cache page management [ver #35] David Howells [PATCH 22/45] CacheFiles: Add a hook to write a single page of data to an inode [ver #35] David Howells [PATCH 35/45] NFS: Define and create inode-level cache objects [ver #35] David Howells [PATCH 32/45] NFS: Register NFS for caching and retrieve the top-level index [ver #35] David Howells [PATCH 12/45] Security: Add a kernel_service object class to SELinux [ver #35] David Howells [PATCH 29/45] NFS: Add comment banners to some NFS functions [ver #35] David Howells [PATCH 37/45] NFS: Invalidate FsCache page flags when cache removed [ver #35] David Howells [PATCH 23/45] CacheFiles: Permit the page lock state to be monitored [ver #35] David Howells [PATCH 27/45] AFS: prevent double cell registration [ver #35] David Howells [PATCH 24/45] CacheFiles: Export things for CacheFiles [ver #35] David Howells [PATCH 30/45] NFS: Add FS-Cache option bit and debug bit [ver #35] David Howells [PATCH 20/45] CacheFiles: Add missing copy_page export for ia64 [ver #35] David Howells [PATCH 31/45] NFS: Permit local filesystem caching to be enabled for NFS [ver #35] David Howells [PATCH 26/45] AFS: Add a MAINTAINERS record for AFS [ver #35] David Howells Re: policy package names for Debian Christopher J. PeBenito [PATCH 41/45] NFS: nfs_readpage_async() needs to be accessible as a fallback for local caching [ver #35] David Howells Re: Debian SE Linux status James Carter [PATCH 45/45] NFS: Add mount options to enable local caching on NFS [ver #35] David Howells [PATCH 33/45] NFS: Define and create server-level objects [ver #35] David Howells [PATCH 44/45] NFS: Display local caching state [ver #35] David Howells [PATCH 40/45] NFS: Add read context retention for FS-Cache to call back with [ver #35] David Howells [PATCH 43/45] NFS: Store pages from an NFS inode into a local cache [ver #35] David Howells [PATCH 02/45] KEYS: Check starting keyring as part of search [ver #35] David Howells [PATCH 07/45] KEYS: Make key_serial() a function if CONFIG_KEYS=y [ver #35] David Howells [PATCH 38/45] NFS: Add some new I/O counters for FS-Cache doing things for NFS [ver #35] David Howells [PATCH 03/45] KEYS: Allow the callout data to be passed as a blob rather than a string [ver #35] David Howells [PATCH 15/45] FS-Cache: Release page->private after failed readahead [ver #35] David Howells [PATCH 21/45] CacheFiles: Be consistent about the use of mapping vs file->f_mapping in Ext3 [ver #35] David Howells [PATCH 17/45] FS-Cache: Provide an add_wait_queue_tail() function [ver #35] David Howells [PATCH 01/45] KEYS: Increase the payload size when instantiating a key [ver #35] David Howells Re: policy package names for Debian Stephen Smalley Re: Debian SE Linux status Stephen Smalley Re: policy package names for Debian Christopher J. PeBenito Re: [PATCH-v4] SELinux: introduce permissive types Stephen Smalley Re: Debian SE Linux status James Carter Re: file(1) Stephen Smalley Re: Debian SE Linux status Stephen Smalley Re: Debian SE Linux status Joshua Brindle Re: Debian SE Linux status Stephen Smalley Re: policy package names for Debian Stephen Smalley Re: [PATCH] SE-PostgreSQL Security Policy (try #3) KaiGai Kohei Thursday, 27 March policy package names for Debian Russell Coker Debian SE Linux status Russell Coker Re: [RFC][PATCH] user_transition support for libsepol/checkpolicy Daniel J Walsh Re: [RFC][PATCH] user_transition support for libsepol/checkpolicy Daniel J Walsh Re: Permissive mode for xace is broken. Eamon Walsh Re: [PATCH] SE-PostgreSQL Security Policy (try #3) KaiGai Kohei Re: [PATCH] SE-PostgreSQL Security Policy (try #3) Christopher J. PeBenito file(1) Russell Coker [refpolicy] lvm runs shell scripts Martin Orr Re: [RFC][PATCH] user_transition support for libsepol/checkpolicy Russell Coker Wednesday, 26 March Re: [DSE-Dev] refpolicy: domains need access to the apt's pty and fifos Martin Orr Re: SELinux policy for Fedora Directory Server 1.1.0 Pär Aronsson Testing SELinux in Ubuntu (Hardy Heron) Caleb Case Re: refpolicy: patch for gpg-agent Christopher J. PeBenito Re: [RFC][PATCH] user_transition support for libsepol/checkpolicy Joshua Brindle Re: [DSE-Dev] refpolicy: domains need access to the apt's pty and fifos Christopher J. PeBenito Re: USER_AVC vs USER_MAC_POLICY_LOAD ? Steve Grubb Re: [RFC][PATCH] user_transition support for libsepol/checkpolicy Stephen Smalley Re: [RFC][PATCH] user_transition support for libsepol/checkpolicy Stephen Smalley Re: [RFC][PATCH] user_transition support for libsepol/checkpolicy Stephen Smalley Re: [RFC][PATCH] user_transition support for libsepol/checkpolicy Stephen Smalley Re: [RFC][PATCH] user_transition support for libsepol/checkpolicy Joshua Brindle Re: USER_AVC vs USER_MAC_POLICY_LOAD ? Stephen Smalley Re: [RFC][PATCH] user_transition support for libsepol/checkpolicy Stephen Smalley USER_AVC vs USER_MAC_POLICY_LOAD ? Steve Grubb Re: [RFC][PATCH] user_transition support for libsepol/checkpolicy Daniel J Walsh Re: [RFC][PATCH] user_transition support for libsepol/checkpolicy Daniel J Walsh Re: Bug#472590: ls in Debian/Unstable Russell Coker Tuesday, 25 March Re: Bug#472590: ls in Debian/Unstable Russell Coker Re: ls in Debian/Unstable Russell Coker Re: Bug#472590: ls in Debian/Unstable Jim Meyering Re: [RFC][PATCH] user_transition support for libsepol/checkpolicy Joshua Brindle Add missing consts to xattr function arguments David Howells avc's Justin Mattock Re: ls in Debian/Unstable Jim Meyering Re: [RFC][PATCH] user_transition support for libsepol/checkpolicy Stephen Smalley Re: avc's Stephen Smalley Re: [RFC][PATCH] user_transition support for libsepol/checkpolicy Stephen Smalley avc's Justin Mattock Re: [RFC][PATCH] user_transition support for libsepol/checkpolicy Joshua Brindle Re: [PATCH] SE-PostgreSQL Security Policy (try #3) Christopher J. PeBenito Re: ls in Debian/Unstable Casey Schaufler Re: [RFC][PATCH] user_transition support for libsepol/checkpolicy Christopher J. PeBenito ls in Debian/Unstable Russell Coker Re: [RFC][PATCH] user_transition support for libsepol/checkpolicy Stephen Smalley Re: [RFC][PATCH] user_transition support for libsepol/checkpolicy Stephen Smalley Re: [RFC][PATCH] user_transition support for libsepol/checkpolicy Joshua Brindle Re: [RFC][PATCH] user_transition support for libsepol/checkpolicy Joshua Brindle Re: [PATCH] SE-PostgreSQL Security Policy (try #3) KaiGai Kohei Re: Removing DAC. Russell Coker Re: [RFC][PATCH] user_transition support for libsepol/checkpolicy Russell Coker Monday, 24 March Re: [Fwd: Re: Removing DAC.] Casey Schaufler Re: Removing DAC. Russell Coker Re: Permissive mode for xace is broken. Steve Grubb Re: [RFC][PATCH] user_transition support for libsepol/checkpolicy Stephen Smalley Re: [RFC][PATCH] user_transition support for libsepol/checkpolicy Joshua Brindle Re: [RFC][PATCH] user_transition support for libsepol/checkpolicy Joshua Brindle Re: [RFC][PATCH] user_transition support for libsepol/checkpolicy Stephen Smalley Re: [PATCH] libsepol: add permissive domain support Stephen Smalley Re: [PATCH] checkpolicy: support for permissive types Stephen Smalley Re: Permissive mode for xace is broken. Stephen Smalley [RFC][PATCH] user_transition support for libsepol/checkpolicy Joshua Brindle Re: [PATCH] SE-PostgreSQL Security Policy (try #3) Christopher J. PeBenito Re: Removing DAC. Casey Schaufler Re: Removing DAC. Casey Schaufler Re: Removing DAC. cinthya aranguren Re: Removing DAC. Stephen Smalley Re: Permissive mode for xace is broken. Steve G Re: Removing DAC. cinthya aranguren Re: Removing DAC. cinthya aranguren [PATCH] checkpolicy: support for permissive types Eric Paris [PATCH] libsepol: add permissive domain support Eric Paris Re: Removing DAC. Stephen Smalley Re: Removing DAC. Joshua Brindle Re: problem when running checkmodule Stephen Smalley Re: /bin/passwd and a basic MLS install of Fedora 8 Stephen Smalley Re: /bin/passwd and a basic MLS install of Fedora 8 Russell Coker Sunday, 23 March Re: Removing DAC. Russell Coker Re: Removing DAC. Casey Schaufler Re: Removing DAC. Casey Schaufler Removing DAC. cinthya aranguren /bin/passwd and a basic MLS install of Fedora 8 Russell Coker Re: Performance degradation measurement [was Re: [PATCH 06/37] Security: Separate task security context from task_struct [ver #34]] David Howells Re: Performance degradation measurement [was Re: [PATCH 06/37] Security: Separate task security context from task_struct [ver #34]] Valdis.Kletnieks_at_vt.edu Friday, 21 March problem when running checkmodule kihamba nengo Re: refpolicy: patch for gpg-agent Václav Ovsík Re: [DSE-Dev] refpolicy: domains need access to the apt's pty and fifos Václav Ovsík Re: [PATCH] SE-PostgreSQL Security Policy (try #3) KaiGai Kohei Re: [PATCH] SE-PostgreSQL Security Policy (try #3) KaiGai Kohei Thursday, 20 March Re: [PATCH-v4] SELinux: introduce permissive types Eric Paris Re: [PATCH-v4] SELinux: introduce permissive types Stephen Smalley Re: [PATCH-v4] SELinux: introduce permissive types Eric Paris Re: [PATCH 1/5] REFPOL: Add new labeled networking permissions Paul Moore Re: [PATCH 1/5] REFPOL: Add new labeled networking permissions Christopher J. PeBenito Wednesday, 19 March Re: Permissive mode for xace is broken. Eamon Walsh Re: selection labeling Eamon Walsh Re: [PATCH 1/5] REFPOL: Add new labeled networking permissions Paul Moore Performance degradation measurement [was Re: [PATCH 06/37] Security: Separate task security context from task_struct [ver #34]] David Howells Re: [RFC]Introduce generalized hooks for getting and setting inode secctx v3 James Morris Re: unix_domain_sockets in mls Stephen Smalley Re: [RFC]Introduce generalized hooks for getting and setting inode secctx v3 Stephen Smalley Re: [RFC]Introduce generalized hooks for getting and setting inode secctx v3 Casey Schaufler Re: unix_domain_sockets in mls B Topscher Re: [PATCH] SE-PostgreSQL Security Policy (try #3) Christopher J. PeBenito Re: unix_domain_sockets in mls Stephen Smalley Re: [RFC]Introduce generalized hooks for getting and setting inode secctx v3 Stephen Smalley Re: [RFC]Introduce generalized hooks for getting and setting inode secctx v3 James Morris Re: [RFC]Introduce generalized hooks for getting and setting inode secctx v3 Casey Schaufler unix_domain_sockets in mls B Topscher Re: [PATCH 1/5] REFPOL: Add new labeled networking permissions Christopher J. PeBenito [patch] libselinux: don't warn about failed selinuxfs mount if selinux disabled Stephen Smalley Re: selection labeling Christopher J. PeBenito Tuesday, 18 March Re: Audit2allow/audit2why patch for policycoreutils. Stephen Smalley Re: policycoreutils semanage --proto --protocol inconsistent flags Stephen Smalley Re: selection labeling James Carter [RFC]Introduce generalized hooks for getting and setting inode secctx v3 David P. Quigley [PATCH 1/2] VFS: Factor out part of vfs_setxattr so it can be called from the SELinux hook for inode_setsecctx. David P. Quigley [PATCH 2/2] LSM/SELinux: inode_{get,set}secctx hooks to access LSM security context information. David P. Quigley Re: selection labeling Eamon Walsh Re: unconfined_t Domain with MLS Policy Stephen Smalley Re: unconfined_t Domain with MLS Policy Daniel J Walsh unconfined_t Domain with MLS Policy Henley, Tim-P64420 Audit2allow/audit2why patch for policycoreutils. Daniel J Walsh semanage patch from Caleb with man page fix Daniel J Walsh policycoreutils semanage --proto --protocol inconsistent flags Caleb Case Re: SELinux policy for Fedora Directory Server 1.1.0 Daniel J Walsh Re: myjboss and jbossjava selinux-modules Daniel J Walsh RE: First Attempt at root login on console always FAILS ?? Stephen Smalley Re: [patch] selinux: handle files opened with flags 3 by checking ioctl permission Stephen Smalley Re: [patch] selinux: handle files opened with flags 3 by checking ioctl permission Stephen Smalley Re: First Attempt at root login on console always FAILS ?? Daniel J Walsh Monday, 17 March Re: pam.d Justin Mattock Re: [patch] selinux: handle files opened with flags 3 by checking ioctl permission James Morris Re: [patch] selinux: handle files opened with flags 3 by checking ioctl permission Eric Paris RE: First Attempt at root login on console always FAILS ?? Hasan Rezaul-CHR010 Re: [patch] selinux: handle files opened with flags 3 by checking ioctl permission James Morris Re: Permissive mode for xace is broken. Steve Grubb 2.6.25 Justin Mattock Re: prelink, cron-job and SELinux compliance Daniel J Walsh Re: 2.6.25-rc5 Stephen Smalley Re: policy module for httpd Stephen Smalley Re: First Attempt at root login on console always FAILS ?? Daniel J Walsh Re: [patch] selinux: handle files opened with flags 3 by checking ioctl permission Eric Paris Re: [patch] selinux: handle files opened with flags 3 by checking ioctl permission Stephen Smalley Re: [patch] selinux: handle files opened with flags 3 by checking ioctl permission Eric Paris [patch] selinux: handle files opened with flags 3 by checking ioctl permission Stephen Smalley Re: First Attempt at root login on console always FAILS ?? Stephen Smalley [PATCH] SE-PostgreSQL Security Policy (try #3) Kohei KaiGai Sunday, 16 March Re: How to handle security_dentry_open when the open flags are 'special' James Morris Re: policy module for httpd Joe Nall policy module for httpd kihamba nengo Re: prelink, cron-job and SELinux compliance Stefan Schulze Frielinghaus Friday, 14 March pam.d Justin Mattock First Attempt at root login on console always FAILS ?? Hasan Rezaul-CHR010 Re: libselinux/matchpathcon has a memory leak Stephen Smalley Re: libselinux/matchpathcon has a memory leak Eamon Walsh Re: libselinux/matchpathcon has a memory leak Daniel J Walsh 2.6.25-rc5 Justin Mattock Re: How to handle security_dentry_open when the open flags are 'special' Stephen Smalley Re: libselinux/matchpathcon has a memory leak Stephen Smalley Re: libselinux/matchpathcon has a memory leak Stephen Smalley Re: 2.6.25-rc5 Stephen Smalley Re: Installing and building policy modules Stephen Smalley Thursday, 13 March Re: libselinux/matchpathcon has a memory leak Joshua Brindle Re: libselinux/matchpathcon has a memory leak Daniel J Walsh Re: libselinux/matchpathcon has a memory leak Daniel J Walsh Re: libselinux/matchpathcon has a memory leak Daniel J Walsh Re: libselinux/matchpathcon has a memory leak Eamon Walsh libselinux/matchpathcon has a memory leak Daniel J Walsh Re: How to handle security_dentry_open when the open flags are 'special' Stephen Smalley 2.6.25-rc5 Justin Mattock Installing and building policy modules kihamba nengo Wednesday, 12 March How to handle security_dentry_open when the open flags are 'special' Eric Paris Re: How to handle security_dentry_open when the open flags are 'special' Eric Paris Re: [PATCH] SELinux: requesting no permissions in avc_has_perm_noaudit is a BUG() Eric Paris Re: [PATCH] SELinux: requesting no permissions in avc_has_perm_noaudit is a BUG() Eric Paris Re: [PATCH] SELinux: requesting no permissions in avc_has_perm_noaudit is a BUG() Stephen Smalley Re: [PATCH] libsepol: support for permissive types Stephen Smalley Re: [PATCH] SELinux: requesting no permissions in avc_has_perm_noaudit is a BUG() Eric Paris Re: [PATCH] libsepol: support for permissive types Eric Paris Re: [PATCH] SELinux: requesting no permissions in avc_has_perm_noaudit is a BUG() Stephen Smalley Re: [PATCH] libsepol: support for permissive types Stephen Smalley RE: Getting started with SELinux and Slackware Stephen Smalley Re: [PATCH] SE-PostgreSQL Security Policy Kohei KaiGai Tuesday, 11 March Re: [PATCH-v3] SELinux: introduce permissive types Daniel J Walsh Re: [PATCH] SELinux: requesting no permissions in avc_has_perm_noaudit is a BUG() Eric Paris Re: Getting started with SELinux and Slackware Russell Coker Re: [PATCH] SELinux: requesting no permissions in avc_has_perm_noaudit is a BUG() James Morris 2.6.25-rc5 Justin Mattock Re: [PATCH] SELinux: requesting no permissions in avc_has_perm_noaudit is a BUG() James Morris Re: 2.6.25-rc5 James Morris Re: [PATCH] SELinux: printk normalization James Morris Re: [PATCH] libsepol: support for permissive types Eric Paris 2.6.25-rc5 Justin Mattock RE: Getting started with SELinux and Slackware Martin J. Green [PATCH] SELinux: printk normalization Eric Paris Re: 2.6.25-rc5 Stephen Smalley Re: [PATCH] libsepol: support for permissive types Stephen Smalley Re: [PATCH-v4] SELinux: introduce permissive types Stephen Smalley Re: [PATCH] libsepol: support for permissive types Eric Paris Re: [PATCH] SELinux: requesting no permissions in avc_has_perm_noaudit is a BUG() Stephen Smalley Re: [PATCH] checkpolicy: support for permissive types Stephen Smalley Re: [PATCH] libsepol: support for permissive types Stephen Smalley [PATCH-v4] SELinux: introduce permissive types Eric Paris [PATCH] SELinux: requesting no permissions in avc_has_perm_noaudit is a BUG() Eric Paris Re: Semanage return codes... Stephen Smalley Semanage return codes... Hasan Rezaul-CHR010 Re: [PATCH] SE-PostgreSQL Security Policy KaiGai Kohei SELinux policy for Fedora Directory Server 1.1.0 PÃ¤r Aronsson RE: Re: Getting started with SELinux and Slackware Stephen Smalley Re: Getting started with SELinux and Slackware Stephen Smalley RE: [PATCH-v2] checkpolicy: support for permissive types Joshua Brindle Re: [PATCH-v3] SELinux: introduce permissive types Stephen Smalley [PATCH-v2] checkpolicy: support for permissive types Eric Paris RE: [PATCH] checkpolicy: support for permissive types Eric Paris Re: [PATCH] SELinux: introduce permissive types Stephen Smalley 2.6.25-rc5 Justin Mattock RE: [PATCH] checkpolicy: support for permissive types Joshua Brindle [PATCH] checkpolicy: support for permissive types Eric Paris [PATCH] libsepol: support for permissive types Eric Paris Re: [PATCH] SE-PostgreSQL Security Policy KaiGai Kohei [ANN] Now v8.3 based SE-PostgreSQL is available KaiGai Kohei Re: [PATCH] SE-PostgreSQL Security Policy Christopher J. PeBenito Re: [PATCH] SE-PostgreSQL Security Policy Christopher J. PeBenito Re: [PATCH 1/1] refpolicy: Do not want to transition to sysadm_t when upstart runs a shell Christopher J. PeBenito Re: Getting started with SELinux and Slackware Martin J. Green Re: 2.6.25-rc5 James Morris 2.6.25-rc5 Justin Mattock Monday, 10 March RE: Re: Getting started with SELinux and Slackware Martin J. Green [PATCH-v3] SELinux: introduce permissive types Eric Paris Re: x fails to start on fc9 Joe Nall Re: [PATCH] SELinux: introduce permissive types Eric Paris Re: x fails to start on fc9 Daniel J Walsh Re: x fails to start on fc9 Joe Nall Refpolicy quilt series for Debian Martin Orr Re: [DSE-Dev] Refpolicy quilt series for Debian Erich Schubert Re: refpolicy: domains need access to the apt's pty and fifos Christopher J. PeBenito Re: [PATCH] SELinux: introduce permissive types Stephen Smalley Re: [PATCH] SELinux: introduce permissive types Eric Paris Re: [PATCH] SELinux: introduce permissive types Stephen Smalley Re: [PATCH] SELinux: introduce permissive types Stephen Smalley [PATCH] SELinux: introduce permissive types Eric Paris Re: prelink, cron-job and SELinux compliance Daniel J Walsh Re: [PATCH 1/2] VFS: Factor out part of vfs_setxattr so it can be called from the SELinux hook for inode_setsecctx. Stephen Smalley Re: Problem compiling policy on Fedora 5. Stephen Smalley Problem compiling policy on Fedora 5. kihamba nengo Re: [PATCH] SE-PostgreSQL Security Policy Kohei KaiGai Sunday, 9 March x fails to start on fc9 Xavier Toth Re: [PATCH] SE-PostgreSQL Security Policy KaiGai Kohei Saturday, 8 March Re: [PATCH 1/1] refpolicy: Do not want to transition to sysadm_t when upstart runs a shell Joe Nall prelink, cron-job and SELinux compliance Stefan Schulze Frielinghaus Friday, 7 March Re: [PATCH] SE-PostgreSQL Security Policy KaiGai Kohei Re: [PATCH 1/1] refpolicy: Do not want to transition to sysadm_t when upstart runs a shell Eamon Walsh Re: [PATCH 2/2] LSM/SELinux: inode_{get,set}secctx hooks to access LSM security context information. Dave Quigley Re: refpolicy: domains need access to the apt's pty and fifos Stefan Schulze Frielinghaus Re: [PATCH 1/2] VFS: Factor out part of vfs_setxattr so it can be called from the SELinux hook for inode_setsecctx. Casey Schaufler Re: [PATCH 1/1] refpolicy: Do not want to transition to sysadm_t when upstart runs a shell Daniel J Walsh Re: [PATCH 2/2] LSM/SELinux: inode_{get,set}secctx hooks to access LSM security context information. Dave Quigley Re: [PATCH] SELinux: introduce permissive types Stephen Smalley PATCH: add downgrade test to libsepol test harness Todd C. Miller Re: [PATCH] SE-PostgreSQL Security Policy Christopher J. PeBenito Re: [PATCH 1/1] refpolicy: Do not want to transition to sysadm_t when upstart runs a shell James Carter Re: [PATCH] SELinux: introduce permissive types Eric Paris Re: [PATCH 1/2] VFS: Factor out part of vfs_setxattr so it can be called from the SELinux hook for inode_setsecctx. Casey Schaufler Re: [PATCH 1/2] VFS: Factor out part of vfs_setxattr so it can be called from the SELinux hook for inode_setsecctx. Chris Wright Re: [PATCH] SELinux: introduce permissive types Paul Moore Re: [PATCH] SELinux: introduce permissive types Stephen Smalley Re: [PATCH 1/2] VFS: Factor out part of vfs_setxattr so it can be called from the SELinux hook for inode_setsecctx. Stephen Smalley Re: [PATCH 1/2] VFS: Factor out part of vfs_setxattr so it can be called from the SELinux hook for inode_setsecctx. Casey Schaufler Re: [PATCH 1/2] VFS: Factor out part of vfs_setxattr so it can be called from the SELinux hook for inode_setsecctx. Casey Schaufler [PATCH] SELinux: introduce permissive types Eric Paris Re: [PATCH 1/1] refpolicy: Do not want to transition to sysadm_t when upstart runs a shell Joe Nall Re: [PATCH 1/2] VFS: Factor out part of vfs_setxattr so it can be called from the SELinux hook for inode_setsecctx. Stephen Smalley Re: [PATCH 1/1] refpolicy: Do not want to transition to sysadm_t when upstart runs a shell Christopher J. PeBenito Re: [PATCH 1/1] refpolicy: Do not want to transition to sysadm_t when upstart runs a shell Christopher J. PeBenito Re: [PATCH] audit tty selinux permission Stephen Smalley Re: [PATCH] audit tty selinux permission Stephen Smalley Re: [PATCH 1/2] VFS: Factor out part of vfs_setxattr so it can be called from the SELinux hook for inode_setsecctx. Stephen Smalley Re: [PATCH 1/1] refpolicy: Do not want to transition to sysadm_t when upstart runs a shell Daniel J Walsh Re: [PATCH 1/2] VFS: Factor out part of vfs_setxattr so it can be called from the SELinux hook for inode_setsecctx. Casey Schaufler [PATCH] audit tty selinux permission Steve Grubb Re: [PATCH 1/2] VFS: Factor out part of vfs_setxattr so it can be called from the SELinux hook for inode_setsecctx. Dave Quigley Re: [PATCH 2/2] LSM/SELinux: inode_{get,set}secctx hooks to access LSM security context information. Dave Quigley Re: [PATCH] SE-PostgreSQL Security Policy Joshua Brindle Re: Unreserved portnumbers in corenetwork Christopher J. PeBenito Re: [PATCH 1/2] VFS: Factor out part of vfs_setxattr so it can be called from the SELinux hook for inode_setsecctx. Dave Quigley Re: [PATCH 2/2] LSM/SELinux: inode_{get,set}secctx hooks to access LSM security context information. Dave Quigley Re: [PATCH 1/1] refpolicy: Do not want to transition to sysadm_t when upstart runs a shell Joe Nall Re: [PATCH 1/1] refpolicy: Do not want to transition to sysadm_t when upstart runs a shell Joe Nall Re: Unreserved portnumbers in corenetwork Ronald van den Blink Re: [PATCH 1/1] refpolicy: Do not want to transition to sysadm_t when upstart runs a shell James Carter Re: [PATCH 1/1] refpolicy: Do not want to transition to sysadm_t when upstart runs a shell Daniel J Walsh Re: [PATCH 1/1] refpolicy: Do not want to transition to sysadm_t when upstart runs a shell Stephen Smalley Re: [PATCH 1/1] refpolicy: Do not want to transition to sysadm_t when upstart runs a shell Joe Nall Re: Unreserved portnumbers in corenetwork Daniel J Walsh Re: PATCH: fix libsepol tests build error Stephen Smalley Re: [PATCH] SE-PostgreSQL Security Policy Kohei KaiGai Thursday, 6 March Re: [PATCH] SE-PostgreSQL Security Policy Kohei KaiGai Re: [PATCH] SE-PostgreSQL Security Policy Kohei KaiGai Re: [PATCH 1/1] refpolicy: Do not want to transition to sysadm_t when upstart runs a shell Daniel J Walsh PATCH: fix libsepol tests build error Todd C. Miller Re: [PATCH 1/1] refpolicy: Do not want to transition to sysadm_t when upstart runs a shell Stephen Smalley [PATCH 1/1] refpolicy: Do not want to transition to sysadm_t when upstart runs a shell James Carter Dropping selinux-doc Stephen Smalley Re: [PATCH] SE-PostgreSQL Security Policy Joshua Brindle Re: nfs_t mount label Stephen Smalley nfs_t mount label Clarkson, Mike R \(US SSA\) Re: [PATCH 2/2] LSM/SELinux: inode_{get,set}secctx hooks to access LSM security context information. Dave Quigley Re: [PATCH 1/2] VFS: Factor out part of vfs_setxattr so it can be called from the SELinux hook for inode_setsecctx. Dave Quigley Re: [PATCH] SE-PostgreSQL Security Policy Christopher J. PeBenito Re: Unreserved portnumbers in corenetwork Joe Nall Re: [PATCH 2/2] LSM/SELinux: inode_{get,set}secctx hooks to access LSM security context information. Stephen Smalley Re: [PATCH 2/2] LSM/SELinux: inode_{get,set}secctx hooks to access LSM security context information. James Morris Re: Unreserved portnumbers in corenetwork Daniel J Walsh Re: [PATCH 2/2] LSM/SELinux: inode_{get,set}secctx hooks to access LSM security context information. Stephen Smalley Re: [PATCH 2/2] LSM/SELinux: inode_{get,set}secctx hooks to access LSM security context information. Stephen Smalley Re: Unreserved portnumbers in corenetwork Christopher J. PeBenito Re: [DSE-Dev] refpolicy: domains need access to the apt's pty and fifos Russell Coker Re: [DSE-Dev] refpolicy: domains need access to the apt's pty and fifos Erich Schubert Re: [DSE-Dev] refpolicy: domains need access to the apt's pty and fifos Russell Coker Wednesday, 5 March Re: Unreserved portnumbers in corenetwork Joe Nall Re: [PATCH 2/2] LSM/SELinux: inode_{get,set}secctx hooks to access LSM security context information. Casey Schaufler Re: [PATCH 2/2-v2] NFS: use new LSM interfaces to explicitly set mount options James Morris Re: [PATCH 1/2] LSM/SELinux: Interfaces to allow FS to control mount options James Morris Re: Unreserved portnumbers in corenetwork Daniel J Walsh Re: Unreserved portnumbers in corenetwork Daniel J Walsh Re: Unreserved portnumbers in corenetwork Ronald van den Blink ANN: Updated SELinux core userland release Stephen Smalley Re: [PATCH 2/2] LSM/SELinux: inode_{get,set}secctx hooks to access LSM security context information. Stephen Smalley Re: [PATCH 2/2] LSM/SELinux: inode_{get,set}secctx hooks to access LSM security context information. Paul Moore Re: Unreserved portnumbers in corenetwork Stephen Smalley Re: Unreserved portnumbers in corenetwork Daniel J Walsh Re: Unreserved portnumbers in corenetwork Ronald van den Blink [PATCH 1/2] VFS: Factor out part of vfs_setxattr so it can be called from the SELinux hook for inode_setsecctx. David P. Quigley [RFC]Introduce generalized hooks for getting and setting inode secctx David P. Quigley [PATCH 2/2] LSM/SELinux: inode_{get,set}secctx hooks to access LSM security context information. David P. Quigley [PATCH 2/2-v2] NFS: use new LSM interfaces to explicitly set mount options Eric Paris Re: [PATCH 2/2] NFS: use new LSM interfaces to explicitly set mount options Eric Paris Re: [PATCH 1/1] LSM/SELinux: {get,set}context hooks to access LSM security context information. Casey Schaufler Re: [PATCH 1/2] LSM/SELinux: Interfaces to allow FS to control mount options Casey Schaufler Re: How to handle NFS and conflicting mount options Casey Schaufler Re: Unreserved portnumbers in corenetwork Christopher J. PeBenito Re: [DSE-Dev] refpolicy: domains need access to the apt's pty and fifos Erich Schubert Re: Unreserved portnumbers in corenetwork Ronald van den Blink Re: Unreserved portnumbers in corenetwork Christopher J. PeBenito refpolicy: domains need access to the apt's pty and fifos Václav Ovsík Re: Unreserved portnumbers in corenetwork Stephen Smalley Re: Unreserved portnumbers in corenetwork selinux_at_a61.nl [PATCH 1/2] LSM/SELinux: Interfaces to allow FS to control mount options Eric Paris [PATCH 2/2] NFS: use new LSM interfaces to explicitly set mount options Eric Paris Re: Unreserved portnumbers in corenetwork Christopher J. PeBenito Re: How to handle NFS and conflicting mount options Eric Paris Re: How to handle NFS and conflicting mount options Stephen Smalley How to handle NFS and conflicting mount options Eric Paris Re: [PATCH -v2] NFS/LSM: allow NFS to control all of its own mount options Eric Paris Re: PATCH: avoid -Werror for parser-generated sources Stephen Smalley Re: [PATCH -v2] NFS/LSM: allow NFS to control all of its own mount options Eric Paris Re: [PATCH 1/1] LSM/SELinux: {get,set}context hooks to access LSM security context information. Stephen Smalley Re: [PATCH 1/1] LSM/SELinux: {get,set}context hooks to access LSM security context information. Dave Quigley Unreserved portnumbers in corenetwork selinux_at_a61.nl Re: [patch] refpolicy: exim policy fixes Devin Carraway Re: Problem compiling SELinux poilcy kihamba nengo Tuesday, 4 March Re: [PATCH 1/1] LSM/SELinux: {get,set}context hooks to access LSM security context information. Chris Wright Re: [PATCH 1/1] LSM/SELinux: {get,set}context hooks to access LSM security context information. Casey Schaufler Re: [PATCH 1/1] LSM/SELinux: {get,set}context hooks to access LSM security context information. James Morris Re: [PATCH 1/1] LSM/SELinux: {get,set}context hooks to access LSM security context information. Dave Quigley Re: [PATCH 1/1] LSM/SELinux: {get,set}context hooks to access LSM security context information. Chris Wright Re: [PATCH 1/1] LSM/SELinux: {get,set}context hooks to access LSM security context information. Dave Quigley Re: [PATCH 1/1] LSM/SELinux: {get,set}context hooks to access LSM security context information. Chris Wright Re: [PATCH 1/1] LSM/SELinux: {get,set}context hooks to access LSM security context information. Dave Quigley Re: [PATCH 1/1] LSM/SELinux: {get,set}context hooks to access LSM security context information. James Morris Re: [PATCH 1/1] LSM/SELinux: {get,set}context hooks to access LSM security context information. Dave Quigley Re: [PATCH 1/1] LSM/SELinux: {get,set}context hooks to access LSM security context information. Chris Wright Re: [PATCH 1/1] LSM/SELinux: {get,set}context hooks to access LSM security context information. Dave Quigley Re: [PATCH 1/1] LSM/SELinux: {get,set}context hooks to access LSM security context information. Dave Quigley Re: [PATCH 1/1] LSM/SELinux: {get,set}context hooks to access LSM security context information. Chris Wright Re: [PATCH 1/1] LSM/SELinux: {get,set}context hooks to access LSM security context information. Dave Quigley Re: [PATCH -v2] NFS/LSM: allow NFS to control all of its own mount options James Morris Re: [PATCH 1/1] LSM/SELinux: {get,set}context hooks to access LSM security context information. Casey Schaufler Re: [PATCH 1/1] LSM/SELinux: {get,set}context hooks to access LSM security context information. Dave Quigley [PATCH 1/1] LSM/SELinux: {get,set}context hooks to access LSM security context information. David P. Quigley Re: Ok I am trying to build interfaces using X Controls. Eamon Walsh Re: [PATCH] Refpolicy: Add new permissions for open perms Christopher J. PeBenito Re: refpolicy: patch for gpg-agent Christopher J. PeBenito Re: [DSE-Dev] refpolicy: patch for ldconfig from glibc2.7, new patch Christopher J. PeBenito PATCH: avoid -Werror for parser-generated sources Todd C. Miller Re: refpolicy: patch rpc Christopher J. PeBenito Re: ANN: Flexible Mandatory Access Control (FMAC) for Solaris Casey Schaufler Re: [refpolicy] loadkeys and init fds Christopher J. PeBenito RE: PATCH: fix uninitialized use of handle in struct policy_file Todd Miller Re: PATCH: fix uninitialized use of handle in struct policy_file Stephen Smalley Re: [patch] refpolicy: exim policy fixes Christopher J. PeBenito ANN: Flexible Mandatory Access Control (FMAC) for Solaris Stephen Smalley Re: [patch] libsepol: drop unused buffer field from policy_file Todd Miller Re: PATCH: fix uninitialized use of handle in struct policy_file Stephen Smalley Re: [DSE-Dev] refpolicy: patch for ldconfig from glibc 2.7, new patch Václav Ovsík Re: xguest_u, LDAP and /tmp Daniel J Walsh Re: refpolicy: patch for ldconfig from glibc 2.7, new patch Václav Ovsík Re: [PATCH] SE-PostgreSQL Security Policy KaiGai Kohei [patch] libsepol: drop unused buffer field from policy_file Stephen Smalley Re: PATCH: fix uninitialized use of handle in struct policy_file Stephen Smalley Re: PATCH: fix uninitialized use of handle in struct policy_file Todd C. Miller Re: Problem with corenet_* statements. Daniel J Walsh Re: Problem with corenet_* statements. Christopher J. PeBenito xguest_u, LDAP and /tmp Hal Re: Ok I am trying to build interfaces using X Controls. Daniel J Walsh Monday, 3 March Re: Ok I am trying to build interfaces using X Controls. Eamon Walsh RE: PATCH: fix uninitialized use of handle in struct policy_file Joshua Brindle RE: PATCH: fix uninitialized use of handle in struct policy_file Todd Miller Re: PATCH: fix uninitialized use of handle in struct policy_file Joshua Brindle PATCH: fix uninitialized use of handle in struct policy_file Todd C. Miller Re: Tonights rawhide contains a fix to stop xspy. Eamon Walsh Problem with corenet_* statements. Gienek Nowacki Re: Ok I am trying to build interfaces using X Controls. Daniel J Walsh Re: PATH: minor checkpolicy cleanup Stephen Smalley Ok I am trying to build interfaces using X Controls. Daniel J Walsh Re: [PATCH -v2] NFS/LSM: allow NFS to control all of its own mount options Dave Quigley Re: [PATCH -v2] NFS/LSM: allow NFS to control all of its own mount options Eric Paris Re: [PATCH -v2] NFS/LSM: allow NFS to control all of its own mount options Dave Quigley [PATCH -v2] NFS/LSM: allow NFS to control all of its own mount options Eric Paris Re: mcs translation daemon Stephen Smalley Re: mcs translation daemon Joe Nall PATH: minor checkpolicy cleanup Todd C. Miller sudo Clarkson, Mike R \(US SSA\) mcs translation daemon Clarkson, Mike R \(US SSA\) regarding the last message selinux_at_a61.nl myjboss and jbossjava selinux-modules selinux_at_a61.nl Sunday, 2 March segatex-5.30 released Shintaro Fujiwara Saturday, 1 March Re: [DSE-Dev] refpolicy: patch for ldconfig from glibc 2.7, new patch Martin Orr Friday, 29 February Re: [RFC PATCH] SELinux: Cleanup the secid/secctx conversion functions Paul Moore RE: [RFC PATCH] SELinux: Cleanup the secid/secctx conversion functions Todd Miller Re: [RFC PATCH] SELinux: Cleanup the secid/secctx conversion functions Paul Moore Re: [RFC PATCH] SELinux: Cleanup the secid/secctx conversion functions James Antill Re: [DSE-Dev] refpolicy: patch for ldconfig from glibc 2.7, new patch Christopher J. PeBenito Re: [DSE-Dev] refpolicy: patch for ldconfig from glibc 2.7, new patch Martin Orr Re: Tonights rawhide contains a fix to stop xspy. Tom London [ANNOUNCE] The Linux Test Project has been Released for FEBRUARY 2008 Subrata Modak Re: [RFC PATCH] SELinux: Cleanup the secid/secctx conversion functions Paul Moore Re: Tonights rawhide contains a fix to stop xspy. Daniel J Walsh Re: [RFC PATCH] SELinux: Cleanup the secid/secctx conversion functions Stephen Smalley Re: refpolicy: patch for ldconfig from glibc 2.7, new patch Christopher J. PeBenito Re: [RFC PATCH] SELinux: Cleanup the secid/secctx conversion functions Stephen Smalley Re: [RFC PATCH] SELinux: Cleanup the secid/secctx conversion functions Paul Moore Re: [PATCH -v2] SELinux: create new open permission Stephen Smalley Re: [PATCH -v2] SELinux: create new open permission Russell Coker Re: [RFC PATCH] SELinux: Cleanup the secid/secctx conversion functions James Morris Re: apache_content_template Stefan Schulze Frielinghaus Re: refpolicy: patch for ldconfig from glibc 2.7, new patch Václav Ovsík Thursday, 28 February Re: Tonights rawhide contains a fix to stop xspy. Eamon Walsh Re: Permissive mode for xace is broken. Eamon Walsh Re: Permissive mode for xace is broken. Eamon Walsh [PATCH 36/37] NFS: Display local caching state [ver #34] David Howells [PATCH 28/37] NFS: Use local disk inode cache [ver #34] David Howells [PATCH 34/37] NFS: Read pages from FS-Cache into an NFS inode [ver #34] David Howells [PATCH 30/37] NFS: Add some new I/O event counters for FS-Cache events [ver #34] David Howells [PATCH 24/37] NFS: Register NFS for caching and retrieve the top-level index [ver #34] David Howells [PATCH 18/37] CacheFiles: Permit the page lock state to be monitored [ver #34] David Howells [PATCH 23/37] NFS: Permit local filesystem caching to be enabled for NFS [ver #34] David Howells [PATCH 31/37] NFS: FS-Cache page management [ver #34] David Howells [PATCH 26/37] NFS: Define and create superblock-level objects [ver #34] David Howells [PATCH 21/37] NFS: Add comment banners to some NFS functions [ver #34] David Howells [PATCH 22/37] NFS: Add FS-Cache option bit and debug bit [ver #34] David Howells [PATCH 15/37] CacheFiles: Add missing copy_page export for ia64 [ver #34] David Howells [PATCH 27/37] NFS: Define and create inode-level cache objects [ver #34] David Howells [PATCH 17/37] CacheFiles: Add a hook to write a single page of data to an inode [ver #34] David Howells [PATCH 13/37] FS-Cache: Provide an add_wait_queue_tail() function [ver #34] David Howells [PATCH 37/37] NFS: Add mount options to enable local caching on NFS [ver #34] David Howells [PATCH 29/37] NFS: Invalidate FsCache page flags when cache removed [ver #34] David Howells [PATCH 33/37] NFS: nfs_readpage_async() needs to be accessible as a fallback for local caching [ver #34] David Howells [PATCH 35/37] NFS: Store pages from an NFS inode into a local cache [ver #34] David Howells [PATCH 25/37] NFS: Define and create server-level objects [ver #34] David Howells [PATCH 32/37] NFS: Add read context retention for FS-Cache to call back with [ver #34] David Howells [PATCH 19/37] CacheFiles: Export things for CacheFiles [ver #34] David Howells [PATCH 16/37] CacheFiles: Be consistent about the use of mapping vs file->f_mapping in Ext3 [ver #34] David Howells [PATCH 05/37] Security: Change current->fs[ug]id to current_fs[ug]id() [ver #34] David Howells [PATCH 12/37] FS-Cache: Recruit a couple of page flags for cache management [ver #34] David Howells [PATCH 07/37] Security: De-embed task security record from task and use refcounting [ver #34] David Howells [PATCH 03/37] KEYS: Allow the callout data to be passed as a blob rather than a string [ver #34] David Howells [PATCH 11/37] FS-Cache: Release page->private after failed readahead [ver #34] David Howells [PATCH 09/37] Security: Allow kernel services to override LSM settings for task actions [ver #34] David Howells [PATCH 10/37] Security: Make NFSD work with detached security [ver #34] David Howells [PATCH 08/37] Security: Add a kernel_service object class to SELinux [ver #34] David Howells [PATCH 04/37] KEYS: Add keyctl function to get a security label [ver #34] David Howells [PATCH 02/37] KEYS: Check starting keyring as part of search [ver #34] David Howells [PATCH 01/37] KEYS: Increase the payload size when instantiating a key [ver #34] David Howells [PATCH 00/37] Permit filesystem local caching [ver #34] David Howells Re: [PATCH -v2] SELinux: create new open permission James Morris Re: Permissive mode for xace is broken. Daniel J Walsh [RFC PATCH] SELinux: Cleanup the secid/secctx conversion functions Paul Moore Re: Permissive mode for xace is broken. Steve Grubb Re: [PATCH -v2] SELinux: create new open permission Stephen Smalley Re: [PATCH] libsepol: new capability to support open permissions Stephen Smalley Re: libselinux does not work properly in upstart/initrd Stephen Smalley Re: [PATCH -v2] SELinux: create new open permission James Antill [Fwd: gnome login broken.... "null" avcs...] Daniel J Walsh Re: libselinux does not work properly in upstart/initrd Daniel J Walsh [patch] libsepol: accept Flask as string identifier in policy Stephen Smalley Re: libselinux does not work properly in upstart/initrd Stephen Smalley Re: [PATCH -v2] SELinux: create new open permission Stephen Smalley Re: [PATCH -v2] SELinux: create new open permission Eric Paris Re: Permissive mode for xace is broken. Daniel J Walsh Re: [PATCH -v2] SELinux: create new open permission Christopher J. PeBenito Re: Permissive mode for xace is broken. Stephen Smalley Re: libselinux does not work properly in upstart/initrd Stephen Smalley Re: libselinux does not work properly in upstart/initrd Daniel J Walsh Re: Permissive mode for xace is broken. Eamon Walsh Re: [PATCH] SELinux: create new open permission Stephen Smalley Re: libselinux does not work properly in upstart/initrd Stephen Smalley Re: [PATCH -v2] SELinux: create new open permission Paul Moore Re: libselinux does not work properly in upstart/initrd Stephen Smalley [PATCH -v2] SELinux: create new open permission Eric Paris libselinux does not work properly in upstart/initrd Daniel J Walsh Re: [PATCH] SELinux: create new open permission Eric Paris Re: [PATCH] SELinux: create new open permission Paul Moore Re: [PATCH] libsepol: new capability to support open permissions Stephen Smalley Re: [PATCH] SELinux: create new open permission Stephen Smalley Re: Why does checkpolicy need libsepol-static Stephen Smalley Why does checkpolicy need libsepol-static Eric Paris [PATCH] libsepol: new capability to support open permissions Eric Paris [PATCH] SELinux: create new open permission Eric Paris [PATCH] Refpolicy: Add new permissions for open perms Eric Paris Re: Tonights rawhide contains a fix to stop xspy. Daniel J Walsh Re: PATCH: use yyerror2() in checkpolicy parser Stephen Smalley Re: Tonights rawhide contains a fix to stop xspy. Eamon Walsh Wednesday, 27 February Tonights rawhide contains a fix to stop xspy. Daniel J Walsh Re: Speaking of networking... James Morris Re: Speaking of networking... Joshua Brindle Re: Speaking of networking... James Morris PATCH: use yyerror2() in checkpolicy parser Todd C. Miller Re: apache_content_template Stefan Schulze Frielinghaus Ok latest Xserver is in rawhide, and permissive mode seems to be working. Daniel J Walsh Re: apache_content_template Daniel J Walsh Re: apache_content_template Stefan Schulze Frielinghaus Re: PATCH: avoid -Werror for parser-generated sources Stephen Smalley PATCH: avoid -Werror for parser-generated sources Todd C. Miller RE: policycaps implementation in checkmodule Todd Miller policycaps implementation in checkmodule Eric Paris Re: apache_content_template Daniel J Walsh Re: Speaking of networking... Stephen Smalley Re: Speaking of networking... Paul Moore Re: apache_content_template Stefan Schulze Frielinghaus Re: apache_content_template Daniel J Walsh Re: Speaking of networking... Daniel J Walsh Re: Speaking of networking... Paul Moore Re: [PATCH 0/5] New labeled networking permissions for 2.6.25 Paul Moore Speaking of networking... James Morris Friday, 22 February Re: default user roles Christopher J. PeBenito Wednesday, 27 February Re: [PATCH 0/5] New labeled networking permissions for 2.6.25 Christopher J. PeBenito apache_content_template Stefan Schulze Frielinghaus Re: refpolicy: patch rpc Václav Ovsík Re: [PATCH] SE-PostgreSQL Security Policy Kohei KaiGai Tuesday, 26 February Re: Permissive mode for xace is broken. Eamon Walsh Re: Permissive mode for xace is broken. Eamon Walsh Re: [PATCH][RFC] Unify printk messgaes Russell Coker Re: [PATCH 0/5] New labeled networking permissions for 2.6.25 Paul Moore Re: [PATCH 0/5] New labeled networking permissions for 2.6.25 Eric Paris Re: [PATCH 00/37] Permit filesystem local caching David Howells Re: Global requirements were not met Ronald van den Blink Re: Global requirements were not met Ronald van den Blink Re: Global requirements were not met Christopher J. PeBenito [PATCH 4/5] REFPOL: Allow network service domains to receive unlabeled traffic paul.moore_at_hp.com [PATCH 2/5] REFPOL: Allow network admin domains to receive unlabeled traffic paul.moore_at_hp.com [PATCH 3/5] REFPOL: Allow network apps domains to receive unlabeled traffic paul.moore_at_hp.com [PATCH 5/5] REFPOL: Allow network system domains to receive unlabeled traffic paul.moore_at_hp.com [PATCH 1/5] REFPOL: Add new labeled networking permissions paul.moore_at_hp.com [PATCH 0/5] New labeled networking permissions for 2.6.25 paul.moore_at_hp.com Re: Problem compiling SELinux poilcy Stephen Smalley Re: Installing SELinux on Backtrack Stephen Smalley Re: Global requirements were not met Christopher J. PeBenito Re: [PATCH][RFC] Unify printk messgaes Stephen Smalley Global requirements were not met selinux_at_a61.nl Re: [PATCH][RFC] Unify printk messgaes Christopher J. PeBenito Re: Permissive mode for xace is broken. Daniel J Walsh Re: [PATCH 00/37] Permit filesystem local caching David Howells Re: [PATCH][RFC] Unify printk messgaes James Morris Re: I have begun merging XWindows Controls into Rawhide. Christopher J. PeBenito Re: I have begun merging XWindows Controls into Rawhide. Stephen Smalley Re: [PATCH][RFC] Unify printk messgaes Eric Paris Re: I have begun merging XWindows Controls into Rawhide. Christopher J. PeBenito Re: [PATCH][RFC] Unify printk messgaes James Morris Re: Permissive mode for xace is broken. Daniel J Walsh Re: Permissive mode for xace is broken. Stephen Smalley Re: [PATCH][RFC] Unify printk messgaes Stephen Smalley [PATCH][RFC] Unify printk messgaes James Morris Re: I have begun merging XWindows Controls into Rawhide. Russell Coker Problem compiling SELinux poilcy kihamba nengo Installing SELinux on Backtrack kihamba nengo Monday, 25 February Re: [PATCH] SE-PostgreSQL Security Policy Kohei KaiGai Re: [PATCH] Labeled IPsec for PostgreSQL/MySQL/SSHd (Re: [PATCH] IPsec SPD default security context) Kohei KaiGai Re: [PATCH 00/37] Permit filesystem local caching David Howells Re: Permissive mode for xace is broken. Eamon Walsh Re: [PATCH 00/37] Permit filesystem local caching David Howells Re: [PATCH] SELinux: Correct the NetLabel locking for the sk_security_struct James Morris Re: how to implement permissive domains + an old bug Daniel J Walsh Re: Permissive mode for xace is broken. Eamon Walsh RE: how to implement permissive domains + an old bug Todd Miller Re: [PATCH] SELinux: Correct the NetLabel locking for the sk_security_struct Paul Moore Re: how to implement permissive domains + an old bug Daniel J Walsh RE: how to implement permissive domains + an old bug Stephen Smalley RE: how to implement permissive domains + an old bug Christopher J. PeBenito Re: I have begun merging XWindows Controls into Rawhide. Christopher J. PeBenito Re: Implicit conversion to pointer. Stephen Smalley Re: Silly audit2allows Christopher J. PeBenito Implicit conversion to pointer. Manoj Srivastava RE: how to implement permissive domains + an old bug Joshua Brindle Re: Permissive mode for xace is broken. Daniel J Walsh Re: Permissive mode for xace is broken. Eamon Walsh Re: I have begun merging XWindows Controls into Rawhide. Eamon Walsh RE: how to implement permissive domains + an old bug Eric Paris Re: Silly audit2allows Daniel J Walsh RE: how to implement permissive domains + an old bug Stephen Smalley Re: So how would I write policy with xace/XSELinux to stop xspy from working? Eamon Walsh Re: Permissive mode for xace is broken. Daniel J Walsh Re: [refpolicy] dovecot.fc.patch (resend) Christopher J. PeBenito Re: Silly audit2allows Joe Nall Re: Permissive mode for xace is broken. Stephen Smalley Silly audit2allows Bill Chimiak Re: I have begun merging XWindows Controls into Rawhide. Christopher J. PeBenito Re: [PATCH] SE-PostgreSQL Security Policy Christopher J. PeBenito Re: [PATCH] SELinux: Correct the NetLabel locking for the sk_security_struct Paul Moore Re: [PATCH][RFC] remove unused backpointers from security objects Paul Moore [PATCH] SELinux: Correct the NetLabel locking for the sk_security_struct Paul Moore Re: [PATCH] Labeled IPsec for PostgreSQL/MySQL/SSHd (Re: [PATCH] IPsec SPD default security context) Christopher J. PeBenito Re: [PATCH] Labeled IPsec for PostgreSQL/MySQL/SSHd (Re: [PATCH] IPsec SPD default security context) Christopher J. PeBenito Re: So how would I write policy with xace/XSELinux to stop xspy from working? Daniel J Walsh Re: Permissive mode for xace is broken. Daniel J Walsh RE: how to implement permissive domains + an old bug Joshua Brindle Re: [refpolicy] dovecot.fc.patch (resend) Stefan Schulze Frielinghaus Re: how to implement permissive domains + an old bug Daniel J Walsh Re: refpolicy: patch for ldconfig from glibc 2.7 Daniel J Walsh Re: refpolicy: patch rpc Christopher J. PeBenito [refpolicy] loadkeys and init fds Martin Orr Re: Permissive mode for xace is broken. Stephen Smalley Re: [refpolicy] rsyslogd, rklogd and Debian Christopher J. PeBenito Re: Permissive mode for xace is broken. Stephen Smalley Re: [refpolicy] storage.if addition Christopher J. PeBenito Re: [refpolicy] dovecot.fc.patch (resend) Christopher J. PeBenito Permissive mode for xace is broken. Daniel J Walsh I have begun merging XWindows Controls into Rawhide. Daniel J Walsh Re: refpolicy: patch for ldconfig from glibc 2.7 Christopher J. PeBenito Re: [PATCH][RFC] remove unused backpointers from security objects James Morris Re: [PATCH][RFC] remove unused backpointers from security objects James Morris RE: how to implement permissive domains + an old bug Stephen Smalley Re: [PATCH] libselinux: save errno value in avc_has_perm() Stephen Smalley Re: [PATCH][RFC] remove unused backpointers from security objects Stephen Smalley Re: refpolicy: patch for ldconfig from glibc 2.7 Václav Ovsík refpolicy: patch rpc Václav Ovsík Sunday, 24 February [PATCH][RFC] remove unused backpointers from security objects James Morris Re: [RFC PATCH] SELinux: differentiate between open and r/w operations James Morris Saturday, 23 February [refpolicy] dovecot.fc.patch (resend) Stefan Schulze Frielinghaus [refpolicy] storage.if addition Stefan Schulze Frielinghaus getting xselinux into xcb-proto/libxcb Xavier Toth [refpolicy] rsyslogd, rklogd and Debian Stefan Schulze Frielinghaus Friday, 22 February Re: [PATCH 00/37] Permit filesystem local caching David Howells Re: So how would I write policy with xace/XSELinux to stop xspy from working? Daniel J Walsh [PATCH] libselinux: save errno value in avc_has_perm() Eamon Walsh Re: So how would I write policy with xace/XSELinux to stop xspy from working? Eamon Walsh Re: Not that anyone would ever run in permissive mode but... Daniel J Walsh RE: Not that anyone would ever run in permissive mode but... Todd Miller Re: [RFC PATCH] SELinux: differentiate between open and r/w operations Stephen Smalley Re: Gen_require scoping? Daniel J Walsh Re: [RFC PATCH] SELinux: differentiate between open and r/w operations Paul Moore Re: Gen_require scoping? selinux_at_a61.nl Not that anyone would ever run in permissive mode but... Daniel J Walsh Re: default user roles Jeremiah Jahn Re: default user roles Daniel J Walsh Re: default user roles Christopher J. PeBenito [RFC PATCH] SELinux: differentiate between open and r/w operations Eric Paris Re: default user roles Stephen Smalley default user roles Jeremiah Jahn Re: refpolicy: patch for ldconfig from glibc 2.7 Christopher J. PeBenito Re: segfault in semodule Joshua Brindle Re: segfault in semodule Stephen Smalley Re: segfault in semodule Stephen Smalley Re: FC8 enforcing auditd, mcstransd, NFS statd fail to start Xavier Toth Re: Gen_require scoping? Daniel J Walsh Re: segfault in semodule Joshua Brindle Re: [PATCH 00/37] Permit filesystem local caching David Howells Re: [PATCH 00/37] Permit filesystem local caching David Howells Re: [Fwd: excessively verbose policy] Christopher J. PeBenito segfault in semodule Eric Paris Re: [PATCH 00/37] Permit filesystem local caching David Howells Re: ps aux output under sysadm context in refpolicy Stephen Smalley Gen_require scoping? selinux_at_a61.nl refpolicy: patch for ldconfig from glibc 2.7 Václav Ovsík Re: ps aux output under sysadm context in refpolicy Jeremiah Jahn Re: ps aux output under sysadm context in refpolicy Stephen Smalley Re: ps aux output under sysadm context in refpolicy Jeremiah Jahn Re: secadm/sysadm discussion Jeremiah Jahn Re: ps aux output under sysadm context in refpolicy Stephen Smalley [Fwd: excessively verbose policy] Stephen Smalley Re: How would I go about figuring out if two SELinux MLS Levels intersect? Stephen Smalley Re: [PATCH 09/37] Security: Allow kernel services to override LSM settings for task actions David Howells Re: [PATCH 00/37] Permit filesystem local caching David Howells Re: [PATCH 09/37] Security: Allow kernel services to override LSM settings for task actions Casey Schaufler Thursday, 21 February Re: [PATCH 07/37] Security: De-embed task security record from task and use refcounting Casey Schaufler Re: [PATCH 06/37] Security: Separate task security context from task_struct Casey Schaufler Re: How would I go about figuring out if two SELinux MLS Levels intersect? Joshua Brindle Re: [PATCH 00/37] Permit filesystem local caching David Howells Re: [PATCH 00/37] Permit filesystem local caching David Howells ps aux output under sysadm context in refpolicy Jeremiah Jahn Re: How would I go about figuring out if two SELinux MLS Levels intersect? Darrel Goeddel So how would I write policy with xace/XSELinux to stop xspy from working? Daniel J Walsh Re: FC8 enforcing auditd, mcstransd, NFS statd fail to start Xavier Toth Re: [PATCH 00/37] Permit filesystem local caching David Howells Re: [RFS] Application changing remote policy Stephen Smalley Re: [PATCH 00/37] Permit filesystem local caching David Howells [RFS] Application changing remote policy shahbaz khan Wednesday, 20 February Re: FC8 enforcing auditd, mcstransd, NFS statd fail to start Daniel J Walsh Re: [PATCH 00/37] Permit filesystem local caching James Carter Re: [PATCH 00/37] Permit filesystem local caching David Howells Re: [PATCH 00/37] Permit filesystem local caching Serge E. Hallyn FC8 enforcing auditd, mcstransd, NFS statd fail to start Xavier Toth Re: How would I go about figuring out if two SELinux MLS Levels intersect? Stephen Smalley Re: How would I go about figuring out if two SELinux MLS Levels intersect? Joshua Brindle Re: How would I go about figuring out if two SELinux MLS Levels intersect? Stephen Smalley Re: How would I go about figuring out if two SELinux MLS Levels intersect? Stephen Smalley refpolicy: patch for gpg-agent Václav Ovsík [PATCH 12/37] FS-Cache: Recruit a couple of page flags for cache management David Howells [PATCH 04/37] KEYS: Add keyctl function to get a security label David Howells [PATCH 34/37] NFS: Read pages from FS-Cache into an NFS inode David Howells [PATCH 25/37] NFS: Define and create server-level objects David Howells [PATCH 37/37] NFS: Add mount options to enable local caching on NFS David Howells [PATCH 02/37] KEYS: Check starting keyring as part of search David Howells [PATCH 08/37] Security: Add a kernel_service object class to SELinux David Howells [PATCH 01/37] KEYS: Increase the payload size when instantiating a key David Howells [PATCH 36/37] NFS: Display local caching state David Howells [PATCH 18/37] CacheFiles: Permit the page lock state to be monitored David Howells [PATCH 33/37] NFS: nfs_readpage_async() needs to be accessible as a fallback for local caching David Howells [PATCH 32/37] NFS: Add read context retention for FS-Cache to call back with David Howells [PATCH 15/37] CacheFiles: Add missing copy_page export for ia64 David Howells Re: refpolicy: patch for Debian backup cron daily jobs Russell Coker [PATCH 30/37] NFS: Add some new I/O event counters for FS-Cache events David Howells [PATCH 35/37] NFS: Store pages from an NFS inode into a local cache David Howells [PATCH 17/37] CacheFiles: Add a hook to write a single page of data to an inode David Howells [PATCH 31/37] NFS: FS-Cache page management David Howells [PATCH 29/37] NFS: Invalidate FsCache page flags when cache removed David Howells [PATCH 16/37] CacheFiles: Be consistent about the use of mapping vs file->f_mapping in Ext3 David Howells [PATCH 07/37] Security: De-embed task security record from task and use refcounting David Howells [PATCH 22/37] NFS: Add FS-Cache option bit and debug bit David Howells [PATCH 26/37] NFS: Define and create superblock-level objects David Howells [PATCH 28/37] NFS: Use local disk inode cache David Howells [PATCH 11/37] FS-Cache: Release page->private after failed readahead David Howells [PATCH 27/37] NFS: Define and create inode-level cache objects David Howells [PATCH 23/37] NFS: Permit local filesystem caching to be enabled for NFS David Howells [PATCH 19/37] CacheFiles: Export things for CacheFiles David Howells [PATCH 21/37] NFS: Add comment banners to some NFS functions David Howells [PATCH 09/37] Security: Allow kernel services to override LSM settings for task actions David Howells [PATCH 05/37] Security: Change current->fs[ug]id to current_fs[ug]id() David Howells [PATCH 24/37] NFS: Register NFS for caching and retrieve the top-level index David Howells [PATCH 13/37] FS-Cache: Provide an add_wait_queue_tail() function David Howells [PATCH 10/37] Security: Make NFSD work with detached security David Howells [PATCH 03/37] KEYS: Allow the callout data to be passed as a blob rather than a string David Howells [PATCH 00/37] Permit filesystem local caching David Howells Re: refpolicy: patch for Debian backup cron daily jobs Václav Ovsík Re: [PATCH] Labeled IPsec for PostgreSQL/MySQL/SSHd (Re: [PATCH] IPsec SPD default security context) Paul Moore Re: NFS/LSM: allow NFS to control all of its own mount options Eric Paris Re: NFS/LSM: allow NFS to control all of its own mount options Stephen Smalley Re: NFS/LSM: allow NFS to control all of its own mount options Stephen Smalley Re: refpolicy: patch for Debian backup cron daily jobs Russell Coker [patch] refpolicy: exim policy fixes Devin Carraway Re: [PATCH] Labeled IPsec for PostgreSQL/MySQL/SSHd (Re: [PATCH] IPsec SPD default security context) Kohei KaiGai Tuesday, 19 February Re: [PATCH] Labeled IPsec for PostgreSQL/MySQL/SSHd (Re: [PATCH] IPsec SPD default security context) Paul Moore Re: [PATCH] Labeled IPsec for PostgreSQL/MySQL/SSHd (Re: [PATCH] IPsec SPD default security context) Kohei KaiGai Re: NFS/LSM: allow NFS to control all of its own mount options James Morris Re: NFS/LSM: allow NFS to control all of its own mount options Casey Schaufler Re: NFS/LSM: allow NFS to control all of its own mount options Eric Paris NFS/LSM: allow NFS to control all of its own mount options Eric Paris Re: Resend: Sudo Changes for SELinux Daniel J Walsh Re: [PATCH] invalid memory allocation in policydb_index_others() Stephen Smalley Re: [refpolicy] samba Christopher J. PeBenito Re: [refpolicy] pam_mount Christopher J. PeBenito Re: [PATCH 4/4] REFPOL: Add new labeled networking permissions Christopher J. PeBenito Re: [PATCH 4/4] REFPOL: Add new labeled networking permissions Paul Moore [PATCH] invalid memory allocation in policydb_index_others() J. Tang Re: secadm/sysadm discussion Daniel J Walsh Re: refpolicy: patch for Debian backup cron daily jobs Christopher J. PeBenito Re: refpolicy: patch for Debian cracklib-runtime daily cron job Christopher J. PeBenito Re: [PATCH] Labeled IPsec for PostgreSQL/MySQL/SSHd (Re: [PATCH] IPsec SPD default security context) Christopher J. PeBenito refpolicy: patch for Debian backup cron daily jobs Václav Ovsík refpolicy: patch for Debian cracklib-runtime daily cron job Václav Ovsík [PATCH] Labeled IPsec for PostgreSQL/MySQL/SSHd (Re: [PATCH] IPsec SPD default security context) Kohei KaiGai Monday, 18 February RE: secadm/sysadm discussion Chad Hanson Re: xguest LDAP authentication Daniel J Walsh Re: secadm/sysadm discussion Christopher J. PeBenito xguest LDAP authentication Hal Sunday, 17 February SELinux Justin Mattock Re: secadm/sysadm discussion Russell Coker Re: s.m.a.c.k Russell Coker Saturday, 16 February [ANN]segatex-4.90 released Shintaro Fujiwara Friday, 15 February RE: Brindle example of labeled IPSec Clarkson, Mike R \(US SSA\) RE: Brindle example of labeled IPSec Clarkson, Mike R \(US SSA\) RE: Brindle example of labeled IPSec Joy Latten Re: Brindle example of labeled IPSec Joshua Brindle RE: Brindle example of labeled IPSec Clarkson, Mike R \(US SSA\) RE: Brindle example of labeled IPSec Clarkson, Mike R \(US SSA\) Re: Brindle example of labeled IPSec Joshua Brindle RE: Brindle example of labeled IPSec Clarkson, Mike R \(US SSA\) RE: Brindle example of labeled IPSec Joy Latten Re: Brindle example of labeled IPSec Joshua Brindle RE: Brindle example of labeled IPSec Clarkson, Mike R \(US SSA\) RE: Brindle example of labeled IPSec Clarkson, Mike R \(US SSA\) Re: Brindle example of labeled IPSec Paul Moore RE: Brindle example of labeled IPSec Clarkson, Mike R \(US SSA\) Re: Brindle example of labeled IPSec Paul Moore secadm/sysadm discussion Daniel J Walsh secadm/sysadm discussion Daniel J Walsh RE: how to implement permissive domains + an old bug Joshua Brindle RE: how to implement permissive domains + an old bug Stephen Smalley Brindle example of labeled IPSec Clarkson, Mike R \(US SSA\) RE: how to implement permissive domains + an old bug Stephen Smalley RE: how to implement permissive domains + an old bug Eric Paris RE: how to implement permissive domains + an old bug Stephen Smalley Re: secadm question Christopher J. PeBenito RE: how to implement permissive domains + an old bug Joshua Brindle Re: how to implement permissive domains + an old bug Stephen Smalley how to implement permissive domains + an old bug Eric Paris Re: X avcs Eamon Walsh Re: secadm question Jeremiah Jahn Re: secadm question Christopher J. PeBenito Re: secadm question Jeremiah Jahn Re: secadm question Jeremiah Jahn Re: secadm question Christopher J. PeBenito Re: secadm question Christopher J. PeBenito Re: secadm question Stephen Smalley Re: secadm question Paul Moore Re: secadm question Stephen Smalley Re: secadm question Jeremiah Jahn Re: X avcs Xavier Toth RFC: fcglob prototype Christopher J. PeBenito Re: secadm question Paul Moore Thursday, 14 February secadm question Jeremiah Jahn pommed Justin Mattock s.m.a.c.k. Justin Mattock Re: [PATCH 4/4] REFPOL: Add new labeled networking permissions Paul Moore svn refpolicy ppp.if syntax error Xavier Toth RE: Accurately setting Security Context of a user when ssh-ing in Stephen Smalley Re: [PATCH 4/4] REFPOL: Add new labeled networking permissions Christopher J. PeBenito Re: SELinux power consumption (was Re: s.m.a.c.k) Daniel J Walsh Re: s.m.a.c.k Stephen Smalley Wednesday, 13 February SELinux power consumption (was Re: s.m.a.c.k) James Morris Re: CORBA and network labeling capabilities Paul Moore Re: [PATCH 4/4] REFPOL: Add new labeled networking permissions Paul Moore Re: [PATCH 3/4] REFPOL: Remove the unlabeled_t SECMARK policy in kernel_sendrecv_unlabeled_association Paul Moore s.m.a.c.k Justin Mattock RE: CORBA and network labeling capabilities Clarkson, Mike R \(US SSA\) Re: CORBA and network labeling capabilities Paul Moore RE: CORBA and network labeling capabilities Clarkson, Mike R \(US SSA\) RE: Accurately setting Security Context of a user when ssh-ing in Stephen Smalley Re: [PATCH] libselinux: add "poly_property" type to X contexts backend Eamon Walsh RE: Accurately setting Security Context of a user when ssh-ing in Hasan Rezaul-CHR010 Re: s.m.a.c.k Stephen Smalley s.m.a.c.k Justin Mattock Re: CORBA and network labeling capabilities Paul Moore Re: X avcs Xavier Toth Re: Disabling SELinux by kernel vulnerability Stephen Smalley RE: Accurately setting Security Context of a user when ssh-ing in Stephen Smalley RE: Disabling SELinux by kernel vulnerability Stephen Smalley Re: Disabling SELinux by kernel vulnerability Yuichi Nakamura Re: Disabling SELinux by kernel vulnerability Yuichi Nakamura RE: Disabling SELinux by kernel vulnerability Waide, Ronan [PATCH] SE-PostgreSQL Security Policy Kohei KaiGai Tuesday, 12 February CORBA and network labeling capabilities Clarkson, Mike R \(US SSA\) RE: Accurately setting Security Context of a user when ssh-ing in Hasan Rezaul-CHR010 Re: PATCH: libsepol use correct pointer type in sizeof() Stephen Smalley PATCH: libsepol use correct pointer type in sizeof() Todd C. Miller Re: Disabling SELinux by kernel vulnerability Stephen Smalley Re: [PATCH] libselinux: add "poly_property" type to X contexts backend Xavier Toth RE: Disabling SELinux by kernel vulnerability Todd Miller Re: Disabling SELinux by kernel vulnerability Daniel J Walsh Re: [PATCH 4/4] REFPOL: Add new labeled networking permissions Christopher J. PeBenito Disabling SELinux by kernel vulnerability Yuichi Nakamura Re: [PATCH 3/4] REFPOL: Remove the unlabeled_t SECMARK policy in kernel_sendrecv_unlabeled_association Christopher J. PeBenito Re: [PATCH 2/4] REFPOL: Add forwarding permissions to the packet object class Christopher J. PeBenito Re: [PATCH 1/4] REFPOL: Add "rogue" Fedora packet class permissions Christopher J. PeBenito Monday, 11 February Re: if (2.6.24.1 && capset && bind9) bug() serge_at_hallyn.com Re: [PATCH 07/37] Security: De-embed task security record from task and use refcounting Stephen Smalley Re: newrole transition problems w/ local user domain Jeremiah Jahn Re: [PATCH 07/37] Security: De-embed task security record from task and use refcounting David Howells Re: newrole transition problems w/ local user domain Jeremiah Jahn Re: newrole transition problems w/ local user domain Stephen Smalley Re: [PATCH 08/37] Security: Add a kernel_service object class to SELinux James Morris Re: [PATCH 07/37] Security: De-embed task security record from task and use refcounting James Morris Re: [PATCH 06/37] Security: Separate task security context from task_struct James Morris Re: [PATCH 05/37] Security: Change current->fs[ug]id to current_fs[ug]id() James Morris Friday, 8 February Re: [PATCH] libselinux: add "poly_property" type to X contexts backend Ted X Toth Re: [PATCH] selinux: make mls_compute_sid always polyinstantiate Eamon Walsh Re: X avcs Eamon Walsh newrole transition problems w/ local user domain Jeremiah Jahn [PATCH 3/4] REFPOL: Remove the unlabeled_t SECMARK policy in kernel_sendrecv_unlabeled_association paul.moore_at_hp.com [PATCH 4/4] REFPOL: Add new labeled networking permissions paul.moore_at_hp.com [PATCH 1/4] REFPOL: Add "rogue" Fedora packet class permissions paul.moore_at_hp.com [PATCH 0/4] Reference Policy patches for the new labeled networking code in 2.6.25 paul.moore_at_hp.com [PATCH 2/4] REFPOL: Add forwarding permissions to the packet object class paul.moore_at_hp.com Re: [PATCH] selinux: make mls_compute_sid always polyinstantiate Stephen Smalley Re: new user types Jeremiah Jahn Re: new user types Stephen Smalley Re: new user types Jeremiah Jahn [PATCH 37/37] NFS: Add mount options to enable local caching on NFS David Howells [PATCH 36/37] NFS: Display local caching state David Howells [PATCH 33/37] NFS: nfs_readpage_async() needs to be accessible as a fallback for local caching David Howells [PATCH 31/37] NFS: FS-Cache page management David Howells [PATCH 34/37] NFS: Read pages from FS-Cache into an NFS inode David Howells [PATCH 30/37] NFS: Add some new I/O event counters for FS-Cache events David Howells [PATCH 35/37] NFS: Store pages from an NFS inode into a local cache David Howells [PATCH 28/37] NFS: Use local disk inode cache David Howells [PATCH 32/37] NFS: Add read context retention for FS-Cache to call back with David Howells [PATCH 27/37] NFS: Define and create inode-level cache objects David Howells [PATCH 26/37] NFS: Define and create superblock-level objects David Howells [PATCH 21/37] NFS: Add comment banners to some NFS functions David Howells [PATCH 29/37] NFS: Invalidate FsCache page flags when cache removed David Howells [PATCH 23/37] NFS: Permit local filesystem caching to be enabled for NFS David Howells [PATCH 24/37] NFS: Register NFS for caching and retrieve the top-level index David Howells [PATCH 25/37] NFS: Define and create server-level objects David Howells [PATCH 15/37] CacheFiles: Add missing copy_page export for ia64 David Howells [PATCH 22/37] NFS: Add FS-Cache option bit and debug bit David Howells [PATCH 17/37] CacheFiles: Add a hook to write a single page of data to an inode David Howells [PATCH 19/37] CacheFiles: Export things for CacheFiles David Howells [PATCH 18/37] CacheFiles: Permit the page lock state to be monitored David Howells [PATCH 16/37] CacheFiles: Be consistent about the use of mapping vs file->f_mapping in Ext3 David Howells [PATCH 13/37] FS-Cache: Provide an add_wait_queue_tail() function David Howells [PATCH 12/37] FS-Cache: Recruit a couple of page flags for cache management David Howells [PATCH 11/37] FS-Cache: Release page->private after failed readahead David Howells [PATCH 04/37] KEYS: Add keyctl function to get a security label David Howells [PATCH 10/37] Security: Make NFSD work with detached security David Howells [PATCH 09/37] Security: Allow kernel services to override LSM settings for task actions David Howells [PATCH 07/37] Security: De-embed task security record from task and use refcounting David Howells [PATCH 05/37] Security: Change current->fs[ug]id to current_fs[ug]id() David Howells [PATCH 00/37] Permit filesystem local caching David Howells [PATCH 08/37] Security: Add a kernel_service object class to SELinux David Howells [PATCH 03/37] KEYS: Allow the callout data to be passed as a blob rather than a string David Howells [PATCH 02/37] KEYS: Check starting keyring as part of search David Howells [PATCH 01/37] KEYS: Increase the payload size when instantiating a key David Howells Re: [patch] libselinux: provide more error reporting on load policy failures Stephen Smalley Re: [patch] libselinux: provide more error reporting on load policy failures Stephen Smalley Re: fixfiles: broken option processing? Stephen Smalley Re: SELinux and Linux user mapping Václav Ovsík Why do we need to differentiate between open and read/write in policy Daniel J Walsh Re: new user types Stephen Smalley Re: [PATCH] libselinux: avc_compute_member convenience function Stephen Smalley Re: new user types Daniel J Walsh Re: fixfiles: broken option processing? Daniel J Walsh SELinux Support for Ubuntu Hardy Caleb Case Re: fixfiles: broken option processing? Václav Ovsík Re: fixfiles: broken option processing? Václav Ovsík Thursday, 7 February Re: [patch] selinux: support 64-bit capabilities James Morris new user types Jeremiah Jahn ps access Clarkson, Mike R \(US SSA\) [PATCH] libselinux: avc_compute_member convenience function Eamon Walsh Re: [patch] libselinux: provide more error reporting on load policy failures Joshua Brindle Re: fixfiles: broken option processing? Stephen Smalley Re: [patch] libselinux: provide more error reporting on load policy failures Stephen Smalley Re: [patch] libselinux: provide more error reporting on load policy failures Joshua Brindle [patch] libselinux: provide more error reporting on load policy failures Stephen Smalley RE: Resend: Sudo Changes for SELinux Todd Miller Re: [patch] refpolicy: add capability2 class Christopher J. PeBenito Re: [patch] selinux: support 64-bit capabilities Stephen Smalley Re: SELinux and Linux user mapping Stefan Schulze Frielinghaus Re: Resend: Sudo Changes for SELinux Daniel J Walsh Re: [patch] selinux: support 64-bit capabilities Serge E. Hallyn RE: Resend: Sudo Changes for SELinux Todd Miller [patch] refpolicy: add capability2 class Stephen Smalley [patch] selinux: support 64-bit capabilities Stephen Smalley Re: [RFC][PATCH] selinux: support 64-bit capabilities Casey Schaufler Re: [PATCH] libselinux: add "poly_property" type to X contexts backend Stephen Smalley Re: [RFC][PATCH] selinux: support 64-bit capabilities Stephen Smalley Re: java threads Stephen Smalley Re: java threads Stephen Smalley Re: [RFC][PATCH] selinux: support 64-bit capabilities Serge E. Hallyn Re: java threads Jeremiah Jahn Re: [gov-eng] Multithreaded applications, SELinux, and RAM Protection Stephen Smalley RE: Accurately setting Security Context of a user when ssh-ing in Stephen Smalley Re: [RFC][PATCH] selinux: support 64-bit capabilities Stephen Smalley Re: [RFC][PATCH] selinux: support 64-bit capabilities Stephen Smalley Re: java threads Stephen Smalley Re: [PATCH 24/27] NFS: Use local caching [try #2] David Howells Re: [RFC][PATCH] selinux: support 64-bit capabilities James Morris Re: [gov-eng] Multithreaded applications, SELinux, and RAM Protection Shawn Wells Wednesday, 6 February Multithreaded applications, SELinux, and RAM Protection Shawn Wells RE: Accurately setting Security Context of a user when ssh-ing in Hasan Rezaul-CHR010 Re: [RFC][PATCH] selinux: support 64-bit capabilities Joshua Brindle Re: [RFC][PATCH] selinux: support 64-bit capabilities James Morris java threads Jeremiah Jahn Re: Why am I not transitioning correctly? Jeremiah Jahn invalid context Justin Mattock Re: Why am I not transitioning correctly? Stephen Smalley Re: Why am I not transitioning correctly? Jeremiah Jahn Re: Why am I not transitioning correctly? Stephen Smalley Why am I not transitioning correctly? Jeremiah Jahn Re: [PATCH] libselinux: add "poly_property" type to X contexts backend Eamon Walsh Re: [RFC][PATCH] selinux: support 64-bit capabilities Stephen Smalley Re: [RFC][PATCH] selinux: support 64-bit capabilities Serge E. Hallyn [RFC][PATCH] selinux: support 64-bit capabilities Stephen Smalley RE: [patch] libselinux: disable setlocaldefs if no local boolean oruser files exist Todd Miller Re: [PATCH] libselinux: add "poly_property" type to X contexts backend Glenn Faden fixfiles: broken option processing? Václav Ovsík [patch] libselinux: disable setlocaldefs if no local boolean or user files exist Stephen Smalley Re: Resend: Sudo Changes for SELinux Daniel J Walsh RE: Resend: Sudo Changes for SELinux Todd Miller Re: [PATCH] selinux: make mls_compute_sid always polyinstantiate Stephen Smalley Re: SELinux and Linux user mapping Václav Ovsík Tuesday, 5 February Re: [PATCH] libselinux: add "poly_property" type to X contexts backend Eamon Walsh Re: [PATCH] libselinux: add "poly_property" type to X contexts backend Eamon Walsh Re: [PATCH] selinux: make mls_compute_sid always polyinstantiate James Morris Re: [PATCH] libselinux: add "poly_property" type to X contexts backend Xavier Toth [PATCH] libselinux: add "poly_property" type to X contexts backend Eamon Walsh Re: [PATCH] selinux: make mls_compute_sid always polyinstantiate Stephen Smalley Re: matchpathcon flags Stephen Smalley matchpathcon flags Christopher J. PeBenito Re: SELinux and Linux user mapping Christopher J. PeBenito RE: How to contribute: policy? Scott Lowrey SELinux and Linux user mapping Stefan Schulze Frielinghaus Re: segfault in checkpolicy stable Stephen Smalley Re: segfault in checkpolicy stable Stephen Smalley segfault in checkpolicy stable Christopher J. PeBenito RE: How to contribute: policy? Stephen Smalley Re: [PATCH] selinux: make mls_compute_sid always polyinstantiate Xavier Toth RE: How to contribute: policy? Scott Lowrey Re: [patch] libselinux: don't preservebools for Linux >= 2.6.22 Chad Sellers [patch] libselinux: don't preservebools for Linux >= 2.6.22 Stephen Smalley Re: su problems again Stephen Smalley Re: su problems again Jeremiah Jahn Re: setools is still broken in rawhide. Daniel J Walsh Re: How to contribute: policy? Christopher J. PeBenito Re: setools is still broken in rawhide. Christopher J. PeBenito RE: Accurately setting Security Context of a user when ssh-ing in Stephen Smalley Monday, 4 February RE: Accurately setting Security Context of a user when ssh-ing in Hasan Rezaul-CHR010 Re: [PATCH] SELinux: Remove security_get_policycaps() James Morris Re: su problems again Jeremiah Jahn Re: su problems again Jeremiah Jahn Re: su problems again Stephen Smalley Re: su problems again Jeremiah Jahn Re: setools is still broken in rawhide. Stephen Smalley Re: checkpolicy patch: avoid warning in rawhide Stephen Smalley Re: su problems again Stephen Smalley Re: su problems again Jeremiah Jahn [PATCH] SELinux: Remove security_get_policycaps() Paul Moore Re: su problems again Stephen Smalley How to contribute: policy? Eoin Ryan Re: su problems again Jeremiah Jahn Re: reindexing time for SELinux? Russell Coker Re: checkpolicy patch: avoid warning in rawhide Todd C. Miller Re: su problems again Stephen Smalley Re: reindexing time for SELinux? Seth D. Guikema su problems again Jeremiah Jahn Re: setools is still broken in rawhide. Daniel J Walsh Re: Service control via /etc/init.d/ using strict policy Stefan Schulze Frielinghaus Re: Service control via /etc/init.d/ using strict policy Stephen Smalley Re: checkpolicy patch: avoid warning in rawhide Todd C. Miller Re: setools is still broken in rawhide. Jeremy A. Mowery Service control via /etc/init.d/ using strict policy Eoin Ryan RE: [PATCH] libsemanage: free policydb before fork Todd Miller checkpolicy patch: avoid warning in rawhide Todd C. Miller RE: [PATCH] libsemanage: free policydb before fork Stephen Smalley Re: [PATCH] libsemanage: free policydb before fork Stephen Smalley Re: setools is still broken in rawhide. Daniel J Walsh RE: [PATCH] libsemanage: free policydb before fork Todd Miller Re: setools is still broken in rawhide. Stephen Smalley Re: reindexing time for SELinux? Daniel J Walsh RE: [PATCH] libsemanage: free policydb before fork Todd Miller Re: setools is still broken in rawhide. Jeremy A. Mowery RE: [PATCH] libsemanage: free policydb before fork Todd Miller RE: [PATCH] libsemanage: free policydb before fork Stephen Smalley RE: [PATCH] libsemanage: free policydb before fork Todd Miller Re: reindexing time for SELinux? Stephen Smalley Re: [refpolicy] samba Stefan Schulze Frielinghaus Re: [PATCH] libsemanage: free policydb before fork Joshua Brindle reindexing time for SELinux? Seth D. Guikema Re: [refpolicy] samba Daniel J Walsh Re: [PATCH] libsemanage: free policydb before fork Stephen Smalley RE: UNCLASSIFIED - Realtime Scheduling... HAWKER, Dan 2 \(external\) Sunday, 3 February Re: [PATCH] libsemanage: free policydb before fork Joshua Brindle [refpolicy] pam_mount Stefan Schulze Frielinghaus [refpolicy] samba Stefan Schulze Frielinghaus Saturday, 2 February [PATCH] libsemanage: free policydb before fork Joshua Brindle Friday, 1 February setools is still broken in rawhide. Daniel J Walsh Re: I have spit out my current diffs in policy on fedoraproject.org Daniel J Walsh Re: I have spit out my current diffs in policy on fedoraproject.org Christopher J. PeBenito Re: [PATCH] optionally consume input at expand time to save memory Stephen Smalley [ANNOUNCE] The Linux Test Project has been Released for JANUARY 2008 Subrata Modak non-SELinux question Justin Mattock RE: [patch] libsemanage: free base immediately after expand Todd Miller RE: genhomedircon is broken in libsemanage Todd C. Miller Re: [patch] libsepol: tune avtab to reduce memory usage Joshua Brindle Re: I have spit out my current diffs in policy on fedoraproject.org Paul Moore Re: [patch] libsepol: tune avtab to reduce memory usage Joshua Brindle Re: [patch] libsemanage: free base immediately after expand Joshua Brindle RE: UNCLASSIFIED - Realtime Scheduling... Stephen Smalley Re: I have spit out my current diffs in policy on fedoraproject.org Stephen Smalley I have spit out my current diffs in policy on fedoraproject.org Daniel J Walsh Re: genhomedircon is broken in libsemanage James Antill [PATCH] optionally consume input at expand time to save memory Joshua Brindle [patch] libsemanage: free base immediately after expand Stephen Smalley [patch] libsepol: tune avtab to reduce memory usage Stephen Smalley usb_hcd_poll_rh_status (rh_timer_func) Justin Mattock Thursday, 31 January Re: [patch] Tuning avtab to reduce memory usage Yuichi Nakamura Re: [PATCH 24/27] NFS: Use local caching [try #2] David Howells Re: [patch] Tuning avtab to reduce memory usage Stephen Smalley shadow Justin Mattock Re: [patch] Tuning avtab to reduce memory usage Stephen Smalley Re: shadow Stephen Smalley shadow Justin Mattock RE: UNCLASSIFIED - Realtime Scheduling... HAWKER, Dan 2 \(external\) Re: UNCLASSIFIED - Realtime Scheduling... Stephen Smalley UNCLASSIFIED - Realtime Scheduling... HAWKER, Dan 2 \(external\) Re: problems updating /etc/shadow using strict example policy on Fedora Core 3 Stephen Smalley problems updating /etc/shadow using strict example policy on Fedora Core 3 Kim Lawson-Jenkins RE: genhomedircon is broken in libsemanage Joshua Brindle Re: genhomedircon is broken in libsemanage Todd C. Miller Re: [patch] selinux-testsuite: update README Subrata Modak Re: [patch] selinux-testsuite: extend unconfined_runs_test Subrata Modak Wednesday, 30 January Re: X avcs Eamon Walsh Re: Accurately setting Security Context of a user when ssh-ing in Dave Quigley Accurately setting Security Context of a user when ssh-ing in Hasan Rezaul-CHR010 Re: genhomedircon is broken in libsemanage Daniel J Walsh Re: genhomedircon is broken in libsemanage Joshua Brindle Re: genhomedircon is broken in libsemanage Daniel J Walsh Resend: Sudo Changes for SELinux Daniel J Walsh Re: genhomedircon is broken in libsemanage Joshua Brindle Re: genhomedircon is broken in libsemanage Daniel J Walsh Tuesday, 29 January Re: [PATCH 24/27] NFS: Use local caching [try #2] David Howells Re: [RFC] security: add iptables "security" table for MAC rules Paul Moore Re: [RFC] security: add iptables "security" table for MAC rules James Morris Re: genhomedircon is broken in libsemanage Todd C. Miller Re: genhomedircon is broken in libsemanage Joshua Brindle Re: [RFC] security: add iptables "security" table for MAC rules Paul Moore Re: [RFC] security: add iptables "security" table for MAC rules James Morris RE: genhomedircon is broken in libsemanage Todd Miller Re: [RFC] security: add iptables "security" table for MAC rules Paul Moore Re: [PATCH] SELinux: Fix double free in selinux_netlbl_sock_setsid() Paul Moore Re: X avcs Xavier Toth [GIT PULL] pull request for lblnet-2.6_testing Paul Moore genhomedircon is broken in libsemanage Daniel J Walsh Re: Patch to add python audit2why bindings. Stephen Smalley [RFC] security: add iptables "security" table for MAC rules James Morris Re: Patch to add python audit2why bindings. Václav Ovsík Monday, 28 January [PATCH] SELinux: Fix double free in selinux_netlbl_sock_setsid() Paul Moore Re: OLS 2008 SELinux Proposals for review and comments Casey Schaufler OLS 2008 SELinux Proposals for review and comments Dave Quigley Re: racoon got dead due to permission lacking Stephen Smalley Re: racoon got dead due to permission lacking Paul Moore Re: racoon got dead due to permission lacking Stephen Smalley Friday, 25 January mcs Justin Mattock Re: racoon got dead due to permission lacking Stephen Smalley Re: [patch] fixfiles -C: behave as advertised Stephen Smalley RE: UNCLASSIFIED - Clarification of Symlink labelling... HAWKER, Dan 2 \(external\) Re: [patch 1/1] libsemanage: genhomedircon remove error on missing HOME_DIR or HOME_ROOT v2 Stephen Smalley Re: mcs policy Stephen Smalley Re: Is it time we removed the version number from policy.22/policy21? Stephen Smalley Re: Is it time we removed the version number from policy.22/policy21? Stephen Smalley Is it time we removed the version number from policy.22/policy21? Daniel J Walsh Re: UNCLASSIFIED - Clarification of Symlink labelling... Stephen Smalley UNCLASSIFIED - Clarification of Symlink labelling... HAWKER, Dan 2 \(external\) racoon got dead due to permission lacking Kohei KaiGai Thursday, 24 January mcs policy Justin Mattock /var Justin Mattock Re: /var Daniel J Walsh Re: [PATCH] selinux: make mls_compute_sid always polyinstantiate James Morris Re: Deprecating setlocaldefs, preservebools support in libselinux Chad Sellers [patch] fixfiles -C: behave as advertised Marshall Miller Re: Deprecating setlocaldefs, preservebools support in libselinux Stephen Smalley Re: [patch 1/1] libsemanage: genhomedircon remove error on missing HOME_DIR or HOME_ROOT v2 Stephen Smalley Re: [PATCH] selinux: make mls_compute_sid always polyinstantiate Joshua Brindle [patch 1/1] libsemanage: genhomedircon remove error on missing HOME_DIR or HOME_ROOT v2 Caleb Case Re: I am more worried about open then read and write, SELinux needs open access checks. Daniel J Walsh Re: Deprecating setlocaldefs, preservebools support in libselinux Chad Sellers Re: Deprecating setlocaldefs, preservebools support in libselinux Stephen Smalley Re: Deprecating setlocaldefs, preservebools support in libselinux Joshua Brindle Re: [PATCH] selinux: make mls_compute_sid always polyinstantiate Stephen Smalley /var Justin Mattock Re: [PATCH] selinux: make mls_compute_sid always polyinstantiate Joshua Brindle Re: [patch] fixfiles -C: relabel all file contexts that have changed Stephen Smalley Re: [patch 1/1] libsemanage: genhomedircon remove error on missing HOME_DIR or HOME_ROOT Stephen Smalley Re: I am more worried about open then read and write, SELinux needs open access checks. Stephen Smalley Re: [PATCH] selinux: make mls_compute_sid always polyinstantiate Stephen Smalley Re: I am more worried about open then read and write, SELinux needs open access checks. Brett Lentz [PATCH] selinux: make mls_compute_sid always polyinstantiate Eamon Walsh Re: Deprecating setlocaldefs, preservebools support in libselinux Stephen Smalley Deprecating setlocaldefs, preservebools support in libselinux Stephen Smalley [patch] fixfiles -C: relabel all file contexts that have changed Marshall Miller Re: patch to setfiles/fixfiles to handle file names with special characters in them. Stephen Smalley Re: audit2allow patch Stephen Smalley Re: audit2allow patch Stephen Smalley Re: I am more worried about open then read and write, SELinux needs open access checks. Steve G Re: audit2allow patch Stephen Smalley Re: X avcs Xavier Toth Re: I am more worried about open then read and write, SELinux needs open access checks. James Morris Re: I am more worried about open then read and write, SELinux needs open access checks. Stephen Smalley Re: I am more worried about open then read and write, SELinux needs open access checks. Stephen Smalley Wednesday, 23 January Re: X avcs Eamon Walsh patch to setfiles/fixfiles to handle file names with special characters in them. Daniel J Walsh audit2allow patch Daniel J Walsh Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] James Morris I am more worried about open then read and write, SELinux needs open access checks. Daniel J Walsh Re: Swig patch for libselinux to stop warning messages and update to latest swig Stephen Smalley Re: Patch to improve sepopolgen error reporting Stephen Smalley Re: Fixes for policycoreutils scripts Stephen Smalley Re: policycoreutils patch Stephen Smalley Re: Patch to use new audit2why interface in via audit2allow Stephen Smalley Re: Patch to add python audit2why bindings. Stephen Smalley Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] David Howells Re: Patch to install selinux python with correct permissions. Daniel J Walsh [patch] selinux-testsuite: update README Stephen Smalley [patch] selinux-testsuite: extend unconfined_runs_test Stephen Smalley Re: Patch to add python audit2why bindings. Stephen Smalley Re: Patch to add python audit2why bindings. Daniel J Walsh [PATCH 27/27] NFS: Separate caching by superblock, explicitly if necessary [try #2] David Howells [PATCH 26/27] NFS: Display local caching state [try #2] David Howells [PATCH 24/27] NFS: Use local caching [try #2] David Howells [PATCH 25/27] NFS: Configuration and mount option changes to enable local caching on NFS [try #2] David Howells [PATCH 23/27] NFS: Fix memory leak [try #2] David Howells [PATCH 21/27] CacheFiles: Export things for CacheFiles [try #2] David Howells [PATCH 20/27] CacheFiles: Permit the page lock state to be monitored [try #2] David Howells [PATCH 19/27] CacheFiles: Add a hook to write a single page of data to an inode [try #2] David Howells [PATCH 18/27] CacheFiles: Be consistent about the use of mapping vs file->f_mapping in Ext3 [try #2] David Howells [PATCH 17/27] CacheFiles: Add missing copy_page export for ia64 [try #2] David Howells [PATCH 15/27] FS-Cache: Provide an add_wait_queue_tail() function [try #2] David Howells [PATCH 14/27] FS-Cache: Recruit a couple of page flags for cache management [try #2] David Howells [PATCH 13/27] FS-Cache: Release page->private after failed readahead [try #2] David Howells [PATCH 12/27] Security: Make NFSD work with detached security [try #2] David Howells [PATCH 11/27] Security: Allow kernel services to override LSM settings for task actions [try #2] David Howells [PATCH 09/27] Security: Pre-add additional non-caching classes [try #2] David Howells [PATCH 10/27] Security: Add a kernel_service object class to SELinux [try #2] David Howells [PATCH 08/27] Add a secctx_to_secid() LSM hook to go along with the existing [try #2] David Howells [PATCH 07/27] Security: De-embed task security record from task and use refcounting [try #2] David Howells [PATCH 05/27] Security: Change current->fs[ug]id to current_fs[ug]id() [try #2] David Howells [PATCH 04/27] KEYS: Add keyctl function to get a security label [try #2] David Howells Re: [PATCH 14/27] FS-Cache: Recruit a couple of page flags for cache management David Howells [PATCH 03/27] KEYS: Allow the callout data to be passed as a blob rather than a string [try #2] David Howells [PATCH 01/27] KEYS: Increase the payload size when instantiating a key [try #2] David Howells [PATCH 00/27] Permit filesystem local caching [try #2] David Howells [PATCH 02/27] KEYS: Check starting keyring as part of search [try #2] David Howells Re: [patch 1/1] libsemanage: genhomedircon remove error on missing HOME_DIR or HOME_ROOT Stephen Smalley Re: Patch to add python audit2why bindings. Stephen Smalley [patch 1/1] libsemanage: genhomedircon remove error on missing HOME_DIR or HOME_ROOT Caleb Case Re: Patch to install selinux python with correct permissions. Stephen Smalley Tuesday, 22 January Re: [PATCH] IPsec SPD default security context Kohei KaiGai [PATCH 27/27] NFS: Separate caching by superblock, explicitly if necessary David Howells [PATCH 26/27] NFS: Display local caching state David Howells [PATCH 25/27] NFS: Configuration and mount option changes to enable local caching on NFS David Howells [PATCH 24/27] NFS: Use local caching David Howells [PATCH 23/27] NFS: Fix memory leak David Howells [PATCH 21/27] CacheFiles: Export things for CacheFiles David Howells [PATCH 20/27] CacheFiles: Permit the page lock state to be monitored David Howells [PATCH 19/27] CacheFiles: Add a hook to write a single page of data to an inode David Howells [PATCH 18/27] CacheFiles: Be consistent about the use of mapping vs file->f_mapping in Ext3 David Howells [PATCH 17/27] CacheFiles: Add missing copy_page export for ia64 David Howells [PATCH 15/27] FS-Cache: Provide an add_wait_queue_tail() function David Howells [PATCH 14/27] FS-Cache: Recruit a couple of page flags for cache management David Howells [PATCH 13/27] FS-Cache: Release page->private after failed readahead David Howells [PATCH 12/27] Security: Make NFSD work with detached security David Howells [PATCH 11/27] Security: Allow kernel services to override LSM settings for task actions David Howells [PATCH 10/27] Security: Add a kernel_service object class to SELinux David Howells [PATCH 09/27] Security: Pre-add additional non-caching classes David Howells [PATCH 04/27] KEYS: Add keyctl function to get a security label David Howells [PATCH 08/27] Add a secctx_to_secid() LSM hook to go along with the existing David Howells [PATCH 07/27] Security: De-embed task security record from task and use refcounting David Howells [PATCH 05/27] Security: Change current->fs[ug]id to current_fs[ug]id() David Howells [PATCH 02/27] KEYS: Check starting keyring as part of search David Howells [PATCH 03/27] KEYS: Allow the callout data to be passed as a blob rather than a string David Howells [PATCH 01/27] KEYS: Increase the payload size when instantiating a key David Howells [PATCH 00/27] Permit filesystem local caching David Howells Re: [POLICYREP] [patch 7/7] remove unused copy/init functions Joshua Brindle [POLICYREP] [patch 5/7] fix operator= calls to return pointer Joshua Brindle [POLICYREP] [patch 7/7] remove unused copy/init functions Joshua Brindle [POLICYREP] [patch 3/7] remove duplicated optional.hpp data Joshua Brindle [POLICYREP] [patch 2/7] remove policy_package Joshua Brindle [POLICYREP] [patch 6/7] add negset to idset Joshua Brindle [POLICYREP] [patch 4/7] symbol base class Joshua Brindle [POLICYREP] [patch 0/7] various cleanups and base symbol class Joshua Brindle [POLICYREP] [patch 1/7] remove makefile targets that dont build Joshua Brindle Monday, 21 January Re: 2.6.24-rc8-mm1 and SELinux MLS - not playing nice.... Paul Moore mcs Justin Mattock segatex-4.40 released Shintaro Fujiwara Re: mcs mls Christopher J. PeBenito mcs mls Justin Mattock New audit plugin for prelude Steve Grubb Re: SystemHigh Christopher J. PeBenito Sunday, 20 January Re: X avcs Glenn Faden Re: 2.6.24-rc8-mm1 and SELinux MLS - not playing nice.... James Morris Re: 2.6.24-rc8-mm1 and SELinux MLS - not playing nice.... Valdis.Kletnieks_at_vt.edu Friday, 18 January Re: [PATCH] REFPOL: Add "rogue" Fedora packet class permissions Paul Moore SystemHigh Justin Mattock Re: selinux_inode_setsecurity and fsetxattr Casey Schaufler Re: selinux_inode_setsecurity and fsetxattr Stephen Smalley Re: selinux_inode_setsecurity and fsetxattr Casey Schaufler Re: selinux_inode_setsecurity and fsetxattr Stephen Smalley Re: [PATCH] REFPOL: Add "rogue" Fedora packet class permissions Joshua Brindle selinux_inode_setsecurity and fsetxattr Casey Schaufler Re: [PATCH] REFPOL: Add "rogue" Fedora packet class permissions Eric Paris Re: [PATCH] REFPOL: Add "rogue" Fedora packet class permissions Christopher J. PeBenito Re: [PATCH] REFPOL: Add "rogue" Fedora packet class permissions Paul Moore Re: [PATCH] REFPOL: Add "rogue" Fedora packet class permissions Christopher J. PeBenito Re: 2.6.24-rc8-mm1 and SELinux MLS - not playing nice.... James Morris 2.6.24-rc8-mm1 and SELinux MLS - not playing nice.... Valdis.Kletnieks_at_vt.edu Thursday, 17 January [RFC Patch v1 7/10] PAM Namespace: different pam users Xavier Toth Re: [PATCH 06b/26] Security: Make NFSD work with detached security David Howells Re: [PATCH 06b/26] Security: Make NFSD work with detached security David Howells Re: X avcs Eamon Walsh [RFC PATCH v12 11/18] SELinux: Add a new peer class and permissions to the Flask definitions Paul Moore [RFC PATCH v12 15/18] NetLabel: Introduce static network labels for unlabeled connections Paul Moore [RFC PATCH v12 18/18] SELinux: Add warning messages on network denial due to error Paul Moore [RFC PATCH v12 16/18] NetLabel: Add auditing to the static labeling mechanism Paul Moore [RFC PATCH v12 17/18] SELinux: Add network ingress and egress control permission checks Paul Moore [RFC PATCH v12 12/18] SELinux: Better integration between peer labeling subsystems Paul Moore [RFC PATCH v12 14/18] SELinux: Allow NetLabel to directly cache SIDs Paul Moore [RFC PATCH v12 09/18] SELinux: Add a network node caching mechanism similar to the sel_netif_() functions Paul Moore* [RFC PATCH v12 13/18] SELinux: Enable dynamic enable/disable of the network access checks Paul Moore [RFC PATCH v12 10/18] SELinux: Add a capabilities bitmap to SELinux policy version 22 Paul Moore [RFC PATCH v12 08/18] SELinux: Only store the network interface's ifindex Paul Moore [RFC PATCH v12 07/18] SELinux: Convert the netif code to use ifindex values Paul Moore [RFC PATCH v12 06/18] NetLabel: Add IP address family information to the netlbl_skbuff_getattr() function Paul Moore [RFC PATCH v12 05/18] LSM: Add secctx_to_secid() LSM hook Paul Moore [RFC PATCH v12 04/18] NetLabel: Add secid token support to the NetLabel secattr struct Paul Moore [RFC PATCH v12 03/18] NetLabel: Consolidate the LSM domain mapping/hashing locks Paul Moore [RFC PATCH v12 02/18] NetLabel: Cleanup the LSM domain hash functions Paul Moore [RFC PATCH v12 01/18] NetLabel: Remove unneeded RCU read locks Paul Moore [RFC PATCH v12 00/18] Labeled networking changes for 2.6.25 Paul Moore Re: [PATCH] REFPOL: Add "rogue" Fedora packet class permissions Stephen Smalley Re: [PATCH] REFPOL: Add "rogue" Fedora packet class permissions Paul Moore Re: [PATCH] REFPOL: Add "rogue" Fedora packet class permissions Joshua Brindle Re: [PATCH] REFPOL: Add "rogue" Fedora packet class permissions Eric Paris [PATCH] REFPOL: Add "rogue" Fedora packet class permissions Paul Moore [PATCH 06b/26] Security: Make NFSD work with detached security David Howells [PATCH 06a/26] Extra task_struct -> task_security separation David Howells Re: newrole -l error Stephen Smalley Re: newrole -l error Matt Anderson Wednesday, 16 January newrole -l error Justin Mattock Re: [PATCH 08/26] Add a secctx_to_secid() LSM hook to go along with the existing Paul Moore Re: [PATCH 08/26] Add a secctx_to_secid() LSM hook to go along with the existing James Morris Re: [PATCH 08/26] Add a secctx_to_secid() LSM hook to go along with the existing Casey Schaufler Re: [PATCH 00/26] Permit filesystem local caching David Howells Re: [PATCH 00/26] Permit filesystem local caching David Howells Re: X avcs Xavier Toth Re: [PATCH 04/26] KEYS: Add keyctl function to get a security label Stephen Smalley Re: X avcs Xavier Toth Re: MCS/MLS Paul Moore MCS/MLS Bill Chimiak Re: [PATCH 08/26] Add a secctx_to_secid() LSM hook to go along with the existing Paul Moore Tuesday, 15 January Re: [PATCH 00/26] Permit filesystem local caching James Morris Re: [PATCH 08/26] Add a secctx_to_secid() LSM hook to go along with the existing James Morris Re: [PATCH 00/26] Permit filesystem local caching James Morris [PATCH 26/26] NFS: Separate caching by superblock, explicitly if necessary David Howells [PATCH 25/26] NFS: Display local caching state David Howells [PATCH 24/26] NFS: Configuration and mount option changes to enable local caching on NFS David Howells [PATCH 23/26] NFS: Use local caching David Howells [PATCH 22/26] NFS: Fix memory leak David Howells [PATCH 19/26] CacheFiles: Permit the page lock state to be monitored David Howells [PATCH 20/26] CacheFiles: Export things for CacheFiles David Howells [PATCH 18/26] CacheFiles: Add a hook to write a single page of data to an inode David Howells [PATCH 08/26] Add a secctx_to_secid() LSM hook to go along with the existing David Howells [PATCH 17/26] CacheFiles: Be consistent about the use of mapping vs file->f_mapping in Ext3 David Howells [PATCH 16/26] CacheFiles: Add missing copy_page export for ia64 David Howells [PATCH 13/26] FS-Cache: Recruit a couple of page flags for cache management David Howells [PATCH 12/26] FS-Cache: Release page->private after failed readahead David Howells [PATCH 14/26] FS-Cache: Provide an add_wait_queue_tail() function David Howells [PATCH 09/26] Security: Pre-add additional non-caching classes David Howells [PATCH 10/26] Security: Add a kernel_service object class to SELinux David Howells [PATCH 11/26] Security: Allow kernel services to override LSM settings for task actions David Howells [PATCH 07/26] Security: De-embed task security record from task and use refcounting David Howells [PATCH 05/26] Security: Change current->fs[ug]id to current_fs[ug]id() David Howells [PATCH 03/26] KEYS: Allow the callout data to be passed as a blob rather than a string David Howells [PATCH 04/26] KEYS: Add keyctl function to get a security label David Howells [PATCH 01/26] KEYS: Increase the payload size when instantiating a key David Howells [PATCH 00/26] Permit filesystem local caching David Howells [PATCH 02/26] KEYS: Check starting keyring as part of search David Howells Re: X avcs Eamon Walsh Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Casey Schaufler Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] David Howells [PATCH] refpolicy: su needs ability to run unix_update Brandon Whalen Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Stephen Smalley Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Casey Schaufler Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Stephen Smalley Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] David Howells Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Stephen Smalley Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Stephen Smalley Monday, 14 January Re: X avcs Xavier Toth Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] David Howells Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Casey Schaufler Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] David Howells Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] David Howells Saturday, 12 January sysadm_devpts_t Justin Mattock Friday, 11 January Re: newrole -l s3 Joe Nall newrole -l s3 Justin Mattock Re: X avcs Eamon Walsh Re: X avcs Ted X Toth Translation patch for polciycoreutils Daniel J Walsh Patch to improve sepopolgen error reporting Daniel J Walsh Fixes for policycoreutils scripts Daniel J Walsh policycoreutils patch Daniel J Walsh Patch to use new audit2why interface in via audit2allow Daniel J Walsh Re: X avcs Glenn Faden Re: Sudo Changes for SELinux Daniel J Walsh Re: Swig patch for libselinux to stop warning messages and update to latest swig Daniel J Walsh RE: Swig patch for libselinux to stop warning messages and update to latest swig Todd Miller Re: Sudo Changes for SELinux Daniel J Walsh Patch to add python audit2why bindings. Daniel J Walsh Swig patch for libselinux to stop warning messages and update to latest swig Daniel J Walsh Re: Sudo Changes for SELinux Stephen Smalley Re: Sudo Changes for SELinux Stephen Smalley Re: X avcs Ted X Toth Re: Sudo Changes for SELinux Daniel J Walsh Re: [refpolicy patch] add setfcap to list of capabilities Christopher J. PeBenito Re: [RFC] Obtaining PATH entry without audit userland Stephen Smalley Thursday, 10 January Re: [RFC] Obtaining PATH entry without audit userland Yuichi Nakamura Re: [RFC] Obtaining PATH entry without audit userland Steve Grubb Re: [RFC] Obtaining PATH entry without audit userland Yuichi Nakamura Re: X avcs Glenn Faden Re: X avcs Glenn Faden Re: X avcs Eamon Walsh Re: X avcs Eamon Walsh Re: Q: SECMARK controls on forwarded packets Paul Moore RE: Q: SECMARK controls on forwarded packets Joshua Brindle Re: Sudo Changes for SELinux Stefan Schulze Frielinghaus Re: Sudo Changes for SELinux Daniel J Walsh RE: UNCLASSIFIED - Developing Policies for SELinux on EmbeddedSystems HAWKER, Dan 2 \(external\) Re: Q: SECMARK controls on forwarded packets Paul Moore Re: Q: SECMARK controls on forwarded packets Joshua Brindle Re: Q: SECMARK controls on forwarded packets Paul Moore Re: [RFC] Obtaining PATH entry without audit userland Stephen Smalley [refpolicy patch] add setfcap to list of capabilities Serge E. Hallyn Re: [RFC] Obtaining PATH entry without audit userland Steve Grubb RE: Q: SECMARK controls on forwarded packets Chad Hanson Re: [RFC] Obtaining PATH entry without audit userland Steve Grubb Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] David Howells [RFC] Obtaining PATH entry without audit userland Yuichi Nakamura Wednesday, 9 January Re: Q: SECMARK controls on forwarded packets Paul Moore RE: Policyrep to policydb Joshua Brindle Re: Q: SECMARK controls on forwarded packets Paul Moore Re: Policyrep to policydb Stephen Smalley Policyrep to policydb Joshua Brindle Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Stephen Smalley Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] David Howells RE: [patch 0/7] quiet gcc warnings Todd Miller RE: Sudo Changes for SELinux Stephen Smalley Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Stephen Smalley Re: In the midst of doing a conversion of audit2why to python Stephen Smalley RE: Sudo Changes for SELinux Todd Miller Re: X avcs Glenn Faden Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] David Howells Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] David Howells Re: In the midst of doing a conversion of audit2why to python Daniel J Walsh Re: UNCLASSIFIED - Developing Policies for SELinux on Embedded Systems Stephen Smalley Sudo Changes for SELinux Daniel J Walsh Re: [PATCH 10/28] FS-Cache: Recruit a couple of page flags for cache management [try #2] David Howells Re: Q: SECMARK controls on forwarded packets Paul Moore RE: [patch 7/7] Use -Werror Todd Miller UNCLASSIFIED - Developing Policies for SELinux on Embedded Systems HAWKER, Dan 2 \(external\) Re: [patch 7/7] Use -Werror Joshua Brindle Re: X avcs Ted X Toth RE: Re: [patch 7/7] Use -Werror Todd Miller Re: Q: SECMARK controls on forwarded packets James Morris Re: Q: SECMARK controls on forwarded packets Stephen Smalley Re: Q: SECMARK controls on forwarded packets Paul Moore Re: pam.d Stephen Smalley Re: Re: [patch 7/7] Use -Werror Stephen Smalley Re: Q: SECMARK controls on forwarded packets Stephen Smalley Re: Man pages translation (Russian) policycoreutils and reference policy Andrey Markelov Tuesday, 8 January Q: SECMARK controls on forwarded packets Paul Moore Re: [PATCH 10/28] FS-Cache: Recruit a couple of page flags for cache management [try #2] David Howells Re: [RFC PATCH v11 18/19] SELinux: Add network ingress and egress control permission checks Paul Moore pam.d Justin Mattock Re: In the midst of doing a conversion of audit2why to python Daniel J Walsh Re: role dominance Joshua Brindle Re: In the midst of doing a conversion of audit2why to python Stephen Smalley In the midst of doing a conversion of audit2why to python Daniel J Walsh Re: [patch 0/2] policy capability support Paul Moore Re: [patch 0/2] policy capability support Stephen Smalley Re: [patch 0/2] policy capability support Paul Moore Re: [RFC PATCH] SELinux: Add network ingress and egress control permission checks Paul Moore Re: Re: [patch 7/7] Use -Werror Stephen Smalley Re: Man pages translation (Russian) policycoreutils and reference policy Stephen Smalley Patch to install selinux python with correct permissions. Daniel J Walsh Re: TypeError: in method 'getpidcon', argument 1 of type 'pid_t' Daniel J Walsh Monday, 7 January Re: Man pages translation (Russian) policycoreutils and reference policy Andrey Markelov Re: Re: [patch 7/7] Use -Werror Todd C. Miller Re: Man pages translation (Russian) policycoreutils and reference policy Stephen Smalley Re: TypeError: in method 'getpidcon', argument 1 of type 'pid_t' Stephen Smalley Re: Rawhide kernel is reporting Stephen Smalley Re: [patch 7/7] Use -Werror Stephen Smalley RE: newrole in the background Stephen Smalley Re: [patch 7/7] Use -Werror Joshua Brindle Re: role dominance Joshua Brindle Re: role dominance Christopher J. PeBenito Re: dhcpc_exec_t Stephen Smalley Re: [patch 7/7] Use -Werror Stephen Smalley [RFC PATCH v11 19/19] SELinux: Add warning messages on network denial due to error Paul Moore [RFC PATCH v11 18/19] SELinux: Add network ingress and egress control permission checks Paul Moore [RFC PATCH v11 17/19] NetLabel: Add auditing to the static labeling mechanism Paul Moore [RFC PATCH v11 16/19] NetLabel: Introduce static network labels for unlabeled connections Paul Moore [RFC PATCH v11 15/19] SELinux: Allow NetLabel to directly cache SIDs Paul Moore [RFC PATCH v11 14/19] SELinux: Enable dynamic enable/disable of the network access checks Paul Moore [RFC PATCH v11 13/19] SELinux: Better integration between peer labeling subsystems Paul Moore [RFC PATCH v11 12/19] SELinux: Add a new peer class and permissions to the Flask definitions Paul Moore [RFC PATCH v11 11/19] SELinux: Add a capabilities bitmap to SELinux policy version 22 Paul Moore [RFC PATCH v11 10/19] SELinux: Add a network node caching mechanism similar to the sel_netif_() functions Paul Moore* [RFC PATCH v11 08/19] SELinux: Convert the netif code to use ifindex values Paul Moore [RFC PATCH v11 09/19] SELinux: Only store the network interface's ifindex Paul Moore [RFC PATCH v11 06/19] NetLabel: Add IP address family information to the netlbl_skbuff_getattr() function Paul Moore [RFC PATCH v11 07/19] NET: Clone the sk_buff 'iif' field in __skb_clone() Paul Moore [RFC PATCH v11 05/19] LSM: Add secctx_to_secid() LSM hook Paul Moore [RFC PATCH v11 04/19] NetLabel: Add secid token support to the NetLabel secattr struct Paul Moore [RFC PATCH v11 01/19] NetLabel: Remove unneeded RCU read locks Paul Moore [RFC PATCH v11 03/19] NetLabel: Consolidate the LSM domain mapping/hashing locks Paul Moore [RFC PATCH v11 02/19] NetLabel: Cleanup the LSM domain hash functions Paul Moore [RFC PATCH v11 00/19] Labeled networking changes for 2.6.25 Paul Moore Re: role dominance Stephen Smalley TypeError: in method 'getpidcon', argument 1 of type 'pid_t' Xavier Toth role dominance Joshua Brindle Re: cant SSH/Console Login and no deny/error messages Stephen Smalley Re: [PATCH 10/28] FS-Cache: Recruit a couple of page flags for cache management [try #2] David Howells Re: [RFC PATCH] SELinux: Add network ingress and egress control permission checks Paul Moore Sunday, 6 January Re: Fwd: Re: [PATCH 1/2] LSM: Add inet_sys_snd_skb() LSM hook James Morris Re: [RFC PATCH] SELinux: Add network ingress and egress control permission checks James Morris Friday, 4 January [RFC PATCH] SELinux: Add network ingress and egress control permission checks Paul Moore [RFC PATCH] New take on the ingress/egress patch Paul Moore Re: Fwd: Re: [PATCH 1/2] LSM: Add inet_sys_snd_skb() LSM hook Paul Moore Fwd: Re: [PATCH 1/2] LSM: Add inet_sys_snd_skb() LSM hook Paul Moore Thursday, 3 January dhcpc_exec_t Justin Mattock Re: mls policy dbus patch Christopher J. PeBenito Re: run_init patch for Fedora 8 Christopher J. PeBenito [patch 7/7] Use -Werror tmiller_at_tresys.com [patch 5/7] quiet libsepol uninitialized variable warnings tmiller_at_tresys.com [patch 4/7] quiet libsemanage scanner warnings tmiller_at_tresys.com [patch 6/7] quiet policycoreutils warnings tmiller_at_tresys.com [patch 3/7] quiet getdefaultcon warning tmiller_at_tresys.com [patch 0/7] quiet gcc warnings tmiller_at_tresys.com [patch 2/7] quiet libsepol qualifier warnings tmiller_at_tresys.com [patch 1/7] quiet checkpolicy warnings tmiller_at_tresys.com Re: locallogin patch for Fedora 8 Christopher J. PeBenito [RFC PATCH v10 18/20] NetLabel: Add auditing to the static labeling mechanism Paul Moore [RFC PATCH v10 20/20] SELinux: Add warning messages on network denial due to error Paul Moore [RFC PATCH v10 19/20] SELinux: Add network ingress and egress control permission checks Paul Moore [RFC PATCH v10 17/20] NetLabel: Introduce static network labels for unlabeled connections Paul Moore [RFC PATCH v10 15/20] SELinux: Enable dynamic enable/disable of the network access checks Paul Moore [RFC PATCH v10 12/20] SELinux: Add a capabilities bitmap to SELinux policy version 22 Paul Moore [RFC PATCH v10 16/20] SELinux: Allow NetLabel to directly cache SIDs Paul Moore [RFC PATCH v10 13/20] SELinux: Add a new peer class and permissions to the Flask definitions Paul Moore [RFC PATCH v10 14/20] SELinux: Better integration between peer labeling subsystems Paul Moore [RFC PATCH v10 11/20] SELinux: Add a network node caching mechanism similar to the sel_netif_() functions Paul Moore* [RFC PATCH v10 10/20] SELinux: Only store the network interface's ifindex Paul Moore [RFC PATCH v10 09/20] SELinux: Convert the netif code to use ifindex values Paul Moore [RFC PATCH v10 07/20] NetLabel: Add IP address family information to the netlbl_skbuff_getattr() function Paul Moore [RFC PATCH v10 08/20] NET: Clone the sk_buff 'iif' field in __skb_clone() Paul Moore [RFC PATCH v10 06/20] LSM: Add inet_sys_snd_skb() LSM hook Paul Moore [RFC PATCH v10 05/20] LSM: Add secctx_to_secid() LSM hook Paul Moore [RFC PATCH v10 04/20] NetLabel: Add secid token support to the NetLabel secattr struct Paul Moore [RFC PATCH v10 03/20] NetLabel: Consolidate the LSM domain mapping/hashing locks Paul Moore [RFC PATCH v10 02/20] NetLabel: Cleanup the LSM domain hash functions Paul Moore [RFC PATCH v10 01/20] NetLabel: Remove unneeded RCU read locks Paul Moore [RFC PATCH v10 00/20] Labeled networking changes for 2.6.25 Paul Moore Re: Xorg modprobe denials Martin Orr Re: [PATCH] REFPOL: Add new object classes and permissions for labeled networking Christopher J. PeBenito Re: cant SSH/Console Login and no deny/error messages Christopher J. PeBenito Re: cant SSH/Console Login and no deny/error messages Christopher J. PeBenito Re: startx Christopher J. PeBenito Re: Xorg modprobe denials Christopher J. PeBenito RE: PATCH: peersid capability support Todd Miller Re: PATCH: peersid capability support Václav Ovsík Re: [LTP] compilation error @ selinux tests Serge E. Hallyn Wednesday, 2 January Re: X avcs Glenn Faden Re: [PATCH 10/28] FS-Cache: Recruit a couple of page flags for cache management [try #2] David Howells Re: X avcs Xavier Toth RE: newrole in the background Reed, Tim \(US SSA\) Re: newrole in the background Xavier Toth Re: [LTP] compilation error @ selinux tests Subrata Modak Tuesday, 1 January Re: Is SELinux support as a kernel module possible ?? Eric Paris Is SELinux support as a kernel module possible ?? Leo Prasath [ANNOUNCE] [LTP] The Linux Test Project has been Released for DECEMBER 2007 Subrata Modak Monday, 31 December Re: Rawhide kernel is reporting Eric Paris Re: Kernel panic when using refpolicy Eric Paris Re: Rawhide kernel is reporting Eric Paris Rawhide kernel is reporting Daniel J Walsh RE: newrole in the background Reed, Tim \(US SSA\) Saturday, 29 December RE: Kernel panic when using refpolicy Jeremiah Jahn Man pages translation (Russian) policycoreutils and reference policy Andrey Markelov Friday, 28 December mls policy dbus patch Xavier Toth Re: X avcs Xavier Toth Re: What happened to source for targeted? James Antill Re: X avcs Eamon Walsh Re: What happened to source for targeted? Dave Quigley Re: What happened to source for targeted? Lance Spitzner Re: What happened to source for targeted? Dave Quigley Re: X avcs Xavier Toth Re: What happened to source for targeted? Lance Spitzner Re: What happened to source for targeted? Dave Quigley What happened to source for targeted? Lance Spitzner Thursday, 27 December Re: MLS sensitivity sensitivity Peter A. Bigot Re: MLS sensitivity sensitivity Ted X Toth run_init patch for Fedora 8 Peter A. Bigot MLS sensitivity sensitivity Peter A. Bigot Wednesday, 26 December Re: cant SSH/Console Login and no deny/error messages Jeremiah Jahn locallogin patch for Fedora 8 Peter A. Bigot cant SSH/Console Login and no deny/error messages Jeremiah Jahn X avcs Xavier Toth Friday, 21 December [PATCH] REFPOL: Add new object classes and permissions for labeled networking Paul Moore Re: [RFC PATCH v9 12/18] SELinux: Add a new peer class and permissions to the Flask definitions Paul Moore Re: [RFC PATCH v9 12/18] SELinux: Add a new peer class and permissions to the Flask definitions Stephen Smalley Re: [patch 2/2] checkpolicy capability support Stephen Smalley [RFC PATCH v9 08/18] SELinux: Convert the netif code to use ifindex values Paul Moore [RFC PATCH v9 09/18] SELinux: Only store the network interface's ifindex Paul Moore [RFC PATCH v9 11/18] SELinux: Add a capabilities bitmap to SELinux policy version 22 Paul Moore [RFC PATCH v9 14/18] SELinux: Enable dynamic enable/disable of the network access checks Paul Moore [RFC PATCH v9 18/18] SELinux: Add network ingress and egress control permission checks Paul Moore [RFC PATCH v9 13/18] SELinux: Better integration between peer labeling subsystems Paul Moore [RFC PATCH v9 15/18] SELinux: Allow NetLabel to directly cache SIDs Paul Moore [RFC PATCH v9 12/18] SELinux: Add a new peer class and permissions to the Flask definitions Paul Moore [RFC PATCH v9 10/18] SELinux: Add a network node caching mechanism similar to the sel_netif_() functions Paul Moore* [RFC PATCH v9 16/18] NetLabel: Introduce static network labels for unlabeled connections Paul Moore [RFC PATCH v9 17/18] NetLabel: Add auditing to the static labeling mechanism Paul Moore Re: PATCH: libsepol should not write policy.18 with mls enabled Stephen Smalley [RFC PATCH v9 07/18] NetLabel: Add IP address family information to the netlbl_skbuff_getattr() function Paul Moore [RFC PATCH v9 01/18] NetLabel: Remove unneeded RCU read locks Paul Moore [RFC PATCH v9 04/18] NetLabel: Add secid token support to the NetLabel secattr struct Paul Moore [RFC PATCH v9 05/18] LSM: Add secctx_to_secid() LSM hook Paul Moore [RFC PATCH v9 02/18] NetLabel: Cleanup the LSM domain hash functions Paul Moore [RFC PATCH v9 06/18] LSM: Add inet_sys_snd_skb() LSM hook Paul Moore [RFC PATCH v9 00/18] Labeled networking patches for 2.6.25 (against 2.6.24-rc6) Paul Moore [RFC PATCH v9 03/18] NetLabel: Consolidate the LSM domain mapping/hashing locks Paul Moore Re: newrole in the background Stephen Smalley Re: newrole in the background Xavier Toth Re: I have been working on a example policy/rpm package to demontrate how to ship SELinux policy in an RPM Stephen Smalley Re: I have been working on a example policy/rpm package to demontrate how to ship SELinux policy in an RPM Daniel J Walsh RE: newrole in the background Stephen Smalley Re: MLS and dbus-daemon related avcs Stephen Smalley Re: MLS and dbus-daemon related avcs Xavier Toth Re: I have been working on a example policy/rpm package to demontrate how to ship SELinux policy in an RPM Stephen Smalley Re: [DSE-Dev] refpolicy HEAD, Debian, ioctl on xconsole by syslogd Erich Schubert I have been working on a example policy/rpm package to demontrate how to ship SELinux policy in an RPM Daniel J Walsh Re: refpolicy HEAD, Debian, ioctl on xconsole by syslogd Václav Ovsík Thursday, 20 December Re: avc: granted null messages Eamon Walsh Re: avc: granted null messages Stephen Smalley Re: avc: granted null messages Eamon Walsh startx Justin Mattock Re: MLS and dbus-daemon related avcs Stephen Smalley MLS and dbus-daemon related avcs Xavier Toth Re: [PATCH 24/28] AFS: Add a function to excise a rejected write from the pagecache [try #2] David Howells Re: [PATCH 10/28] FS-Cache: Recruit a couple of page flags for cache management [try #2] David Howells Re: Getting started with SELinux and Slackware Stephen Smalley Re: Getting started with SELinux and Slackware Martin J. Green Re: Propper labeling of files under /var/www Stefan Schulze Frielinghaus RE: RFC: Per-object manager controls in /selinux/config Joshua Brindle Re: RFC: Per-object manager controls in /selinux/config KaiGai Kohei Wednesday, 19 December Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] David Howells RFC: Per-object manager controls in /selinux/config Eamon Walsh Re: Xorg modprobe denials Martin Orr Re: MLS newrole avcs and polyinstantiation avcs Stephen Smalley Re: Fixes for sepolgen to parse Fedora 9 Policy Karl MacMillan MLS newrole avcs and polyinstantiation avcs Xavier Toth Re: Fixes for sepolgen to parse Fedora 9 Policy Daniel J Walsh Re: avc: granted null messages Stephen Smalley Re: avc: granted null messages Stephen Smalley Re: acpid.socket Stephen Smalley Re: Propper labeling of files under /var/www Stephen Smalley Re: Fixes for sepolgen to parse Fedora 9 Policy Karl MacMillan Re: Propper labeling of files under /var/www Daniel J Walsh Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Stephen Smalley Re: Propper labeling of files under /var/www Stephen Smalley Fixes for sepolgen to parse Fedora 9 Policy Daniel J Walsh Re: Propper labeling of files under /var/www Stefan Schulze Frielinghaus Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Casey Schaufler Tuesday, 18 December Re: avc: granted null messages James Morris acpid.socket Justin Mattock Re: avc: granted null messages Eamon Walsh avc: granted null messages Stephen Smalley Re: Propper labeling of files under /var/www Stephen Smalley Propper labeling of files under /var/www Stefan Schulze Frielinghaus Re: [RFC PATCH v8 18/18] SELinux: Add network ingress and egress control permission checks Paul Moore Re: MLS and default file contexts Stephen Smalley MLS and default file contexts Ted X Toth Re: [RFC PATCH v8 18/18] SELinux: Add network ingress and egress control permission checks Stephen Smalley Re: [RFC PATCH v8 10/18] SELinux: Add a network node caching mechanism similar to the sel_netif_() functions Paul Moore* Re: [RFC PATCH v8 05/18] LSM: Add secctx_to_secid() LSM hook Paul Moore Re: [RFC PATCH v8 18/18] SELinux: Add network ingress and egress control permission checks Paul Moore Re: Xorg modprobe denials Stephen Smalley Re: Xorg modprobe denials Stephen Smalley Re: [RFC PATCH v8 10/18] SELinux: Add a network node caching mechanism similar to the sel_netif_() functions Stephen Smalley* Re: [RFC PATCH v8 05/18] LSM: Add secctx_to_secid() LSM hook James Morris Re: [RFC PATCH v8 10/18] SELinux: Add a network node caching mechanism similar to the sel_netif_() functions James Morris* Monday, 17 December Re: Xorg modprobe denials Chris PeBenito Xorg modprobe denials Eamon Walsh Re: [Fwd: f8 X policy] Xavier Toth Re: [PATCH 24/28] AFS: Add a function to excise a rejected write from the pagecache [try #2] David Howells Re: [PATCH 09/28] FS-Cache: Release page->private after failed readahead [try #2] David Howells Re: [PATCH 10/28] FS-Cache: Recruit a couple of page flags for cache management [try #2] David Howells [Fwd: Re: [Fwd: f8 X policy]] Ted X Toth Re: [RFC PATCH v8 10/18] SELinux: Add a network node caching mechanism similar to the sel_netif_() functions Paul Moore* Re: [RFC PATCH v8 18/18] SELinux: Add network ingress and egress control permission checks Paul Moore Re: [RFC PATCH v8 09/18] SELinux: Only store the network interface's ifindex Paul Moore Re: [RFC PATCH v8 06/18] LSM: Add inet_sys_snd_skb() LSM hook Paul Moore Re: [RFC PATCH v8 05/18] LSM: Add secctx_to_secid() LSM hook Casey Schaufler RE: newrole in the background Reed, Tim \(US SSA\) Re: [RFC PATCH v8 10/18] SELinux: Add a network node caching mechanism similar to the sel_netif_() functions Stephen Smalley* Re: [RFC PATCH v8 18/18] SELinux: Add network ingress and egress control permission checks Stephen Smalley Re: [RFC PATCH v8 09/18] SELinux: Only store the network interface's ifindex Stephen Smalley Re: [RFC PATCH v8 05/18] LSM: Add secctx_to_secid() LSM hook Stephen Smalley Re: [RFC PATCH v8 06/18] LSM: Add inet_sys_snd_skb() LSM hook Stephen Smalley Re: [LTP] Se-Linux Updates for LTP Stephen Smalley Re: load_policy Stephen Smalley Re: [LTP] Se-Linux Updates for LTP Stephen Smalley Re: [LTP] Se-Linux Updates for LTP Stephen Smalley Re: [LTP] Se-Linux Updates for LTP Stephen Smalley load_policy Justin Mattock RE: newrole in the background Stephen Smalley RE: newrole in the background Reed, Tim \(US SSA\) Re: refpolicy HEAD, Debian, ioctl on xconsole by syslogd Christopher J. PeBenito OLS CfP James Morris Sunday, 16 December Re: [RFC PATCH v8 18/18] SELinux: Add network ingress and egress control permission checks Paul Moore Saturday, 15 December Re: [PATCH] IPsec SPD default security context (Re: security context for SPD entries of labeled IPsec) Xavier Toth Friday, 14 December RE: help with an avc denial Clarkson, Mike R \(US SSA\) [RFC PATCH v8 18/18] SELinux: Add network ingress and egress control permission checks Paul Moore [RFC PATCH v8 11/18] SELinux: Add a capabilities bitmap to SELinux policy version 22 Paul Moore [RFC PATCH v8 16/18] NetLabel: Introduce static network labels for unlabeled connections Paul Moore [RFC PATCH v8 10/18] SELinux: Add a network node caching mechanism similar to the sel_netif_() functions Paul Moore* [RFC PATCH v8 13/18] SELinux: Better integration between peer labeling subsystems Paul Moore [RFC PATCH v8 04/18] NetLabel: Add secid token support to the NetLabel secattr struct Paul Moore [RFC PATCH v8 08/18] SELinux: Convert the netif code to use ifindex values Paul Moore [RFC PATCH v8 17/18] NetLabel: Add auditing to the static labeling mechanism Paul Moore [RFC PATCH v8 06/18] LSM: Add inet_sys_snd_skb() LSM hook Paul Moore [RFC PATCH v8 15/18] SELinux: Allow NetLabel to directly cache SIDs Paul Moore [RFC PATCH v8 07/18] NetLabel: Add IP address family information to the netlbl_skbuff_getattr() function Paul Moore [RFC PATCH v8 14/18] SELinux: Enable dynamic enable/disable of the network access checks Paul Moore [RFC PATCH v8 05/18] LSM: Add secctx_to_secid() LSM hook Paul Moore [RFC PATCH v8 03/18] NetLabel: Consolidate the LSM domain mapping/hashing locks Paul Moore [RFC PATCH v8 00/18] Update to the labeled networking patches for 2.6.25 Paul Moore [RFC PATCH v8 01/18] NetLabel: Remove unneeded RCU read locks Paul Moore [RFC PATCH v8 09/18] SELinux: Only store the network interface's ifindex Paul Moore [RFC PATCH v8 12/18] SELinux: Add new peer permissions to the Flask definitions Paul Moore [RFC PATCH v8 02/18] NetLabel: Cleanup the LSM domain hash functions Paul Moore Re: help with an avc denial Stephen Smalley Re: help with an avc denial Stephen Smalley Re: Network flow controls and subj/obj ordering Stephen Smalley help with an avc denial Clarkson, Mike R \(US SSA\) Re: Network flow controls and subj/obj ordering Christopher J. PeBenito Re: Network flow controls and subj/obj ordering Paul Moore Re: Network flow controls and subj/obj ordering Stephen Smalley Re: Network flow controls and subj/obj ordering Christopher J. PeBenito Re: [PATCH] IPsec SPD default security context (Re: security context for SPD entries of labeled IPsec) Christopher J. PeBenito ANN: Reference Policy Release Christopher J. PeBenito Re: [LTP] Se-Linux Updates for LTP Stephen Smalley Re: refpolicy HEAD, Debian, ioctl on xconsole by syslogd Václav Ovsík Thursday, 13 December This patch adds the xgues and guest users Daniel J Walsh RE: newrole in the background Reed, Tim \(US SSA\) Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] David Howells RE: newrole in the background Stephen Smalley Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Stephen Smalley RE: newrole in the background Reed, Tim \(US SSA\) Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] David Howells Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Stephen Smalley Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] David Howells Re: Network flow controls and subj/obj ordering Paul Moore Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] David Howells Re: newrole in the background Stephen Smalley Re: [PATCH] IPsec SPD default security context (Re: security context for SPD entries of labeled IPsec) Xavier Toth Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Stephen Smalley Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Stephen Smalley Addition of policykit polcy along with changes to hal Daniel J Walsh Here is a snapshot of changes to file contexts in my pool Daniel J Walsh Re: newrole in the background Xavier Toth Patches to files in the kernel policy directory Daniel J Walsh RE: newrole in the background Stephen Smalley Re: [PATCH] IPsec SPD default security context (Re: security context for SPD entries of labeled IPsec) Christopher J. PeBenito Re: Network flow controls and subj/obj ordering Christopher J. PeBenito Re: [PATCH] IPsec SPD default security context (Re: security context for SPD entries of labeled IPsec) Ted X Toth ANN: SELinux Policy IDE (SLIDE) version 1.3 Dave Sugar How to set other process quota by setrlimit Ian jonhson RE: newrole in the background Reed, Tim \(US SSA\) Re: [LTP] Se-Linux Updates for LTP Subrata Modak Re: [LTP] Se-Linux Updates for LTP Subrata Modak Re: [LTP] Se-Linux Updates for LTP Subrata Modak Re: [LTP] Se-Linux Updates for LTP Subrata Modak Wednesday, 12 December Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] David Howells Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] David Howells Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] David Howells Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] David Howells Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] David Howells RE: newrole in the background Stephen Smalley Re: newrole in the background Ted X Toth Re: Network flow controls and subj/obj ordering Paul Moore Re: PATCH: libsepol should not write policy.18 with mls enabled Stephen Smalley Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Casey Schaufler Re: Network flow controls and subj/obj ordering Paul Moore Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Stephen Smalley Re: [LTP] Se-Linux Updates for LTP Joy Latten Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] David Howells Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] David Howells Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Casey Schaufler RE: PATCH: libsepol should not write policy.18 with mls enabled Todd Miller Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Casey Schaufler Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Stephen Smalley Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Stephen Smalley Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] David Howells Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Casey Schaufler Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] David Howells RE: PATCH: libsepol should not write policy.18 with mls enabled Todd Miller RE: PATCH: libsepol should not write policy.18 with mls enabled Todd Miller Re: PATCH: libsepol should not write policy.18 with mls enabled Joshua Brindle RE: newrole in the background Reed, Tim \(US SSA\) Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Stephen Smalley Re: [PATCH] [STABLE] Makefile change to disable restorecond Joshua Brindle Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Casey Schaufler Re: [PATCH] [STABLE] Makefile change to disable restorecond Stephen Smalley Re: [PATCH] [STABLE] Makefile change to disable restorecond Joshua Brindle Re: [LTP] Se-Linux Updates for LTP Stephen Smalley Re: refpolicy HEAD, patch for Debian logs of syslog rotation Christopher J. PeBenito Re: [PATCH] [STABLE] Makefile change to disable restorecond Stephen Smalley Re: [PATCH] [STABLE] Makefile change to disable restorecond Joshua Brindle Re: Some file context for kernel and systems directory. Christopher J. PeBenito Re: [PATCH] [STABLE] Makefile change to disable restorecond Stephen Smalley Re: [PATCH] [STABLE] Makefile change to disable restorecond Stephen Smalley Re: [LTP] Se-Linux Updates for LTP Serge E. Hallyn Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Stephen Smalley Re: [PATCH] [STABLE] Makefile change to disable restorecond Joshua Brindle Re: PATCH: libsepol should not write policy.18 with mls enabled Stephen Smalley Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Karl MacMillan Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] David Howells Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Karl MacMillan Re: [LTP] Se-Linux Updates for LTP Subrata Modak Tuesday, 11 December Re: [PATCH] [STABLE] Makefile change to disable restorecond Joshua Brindle Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Casey Schaufler Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] David Howells PATCH: libsepol should not write policy.18 with mls enabled Todd C. Miller Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Stephen Smalley Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Casey Schaufler Re: [PATCH] Debian refpolicy-trunk xen Christopher J. PeBenito Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] David Howells Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Casey Schaufler Re: Network flow controls and subj/obj ordering Christopher J. PeBenito Re: [PATCH] [STABLE] Makefile change to disable restorecond Stephen Smalley Re: [PATCH] [STABLE] Makefile change to disable restorecond Joshua Brindle [PATCH] [STABLE] Makefile change to disable restorecond Joshua Brindle Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Stephen Smalley Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Stephen Smalley Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Stephen Smalley Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Casey Schaufler Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Stephen Smalley Re: newrole in the background Stephen Smalley Re: Network flow controls and subj/obj ordering Casey Schaufler Re: [PATCH v2] XFRM: assorted IPsec fixups Paul Moore Re: [PATCH v2] XFRM: assorted IPsec fixups Paul Moore Network flow controls and subj/obj ordering Paul Moore [PATCH v2] XFRM: assorted IPsec fixups Paul Moore Re: newrole in the background Xavier Toth Re: [LTP] Se-Linux Updates for LTP Serge E. Hallyn newrole in the background Reed, Tim \(US SSA\) refpolicy HEAD, patch for Debian logs of syslog rotation Václav Ovsík Re: [LTP] Se-Linux Updates for LTP Subrata Modak Re: [PATCH] XFRM: assorted IPsec fixups Paul Moore Monday, 10 December Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Casey Schaufler Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Casey Schaufler Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] David Howells Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] David Howells Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Casey Schaufler Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Stephen Smalley Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] David Howells [POLICYREP] Add tunable support Todd C. Miller Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Stephen Smalley Re: [LTP] Se-Linux Updates for LTP Serge E. Hallyn Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] David Howells Re: [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] Stephen Smalley Re: system_u:system_r:system_chkpwd_t:UNCLASSIFIED, how did I get here? Daniel J Walsh Re: system_u:system_r:system_chkpwd_t:UNCLASSIFIED, how did I get here? Xavier Toth Re: system_u:system_r:system_chkpwd_t:UNCLASSIFIED, how did I get here? Stephen Smalley Re: Se-Linux Updates for LTP Stephen Smalley Re: Se-Linux Updates for LTP Subrata Modak Sunday, 9 December Re: MLS Security Levels Ted X Toth Saturday, 8 December system_u:system_r:system_chkpwd_t:UNCLASSIFIED, how did I get here? Ted X Toth [PATCH] Debian refpolicy-trunk xen Litwiniec Robert Re: [patch 0/2] policy capability support Daniel J Walsh Friday, 7 December Re: [PATCH 5/7] Security: Change current->fs[ug]id to current_fs[ug]id() David Howells Re: [patch 0/2] policy capability support Stephen Smalley Re: [patch 0/2] policy capability support Joshua Brindle Re: [patch 0/2] policy capability support Daniel J Walsh Re: [PATCH] XFRM: assorted IPsec fixups Paul Moore Re: [PATCH] XFRM: assorted IPsec fixups Eric Paris Re: policycoreutils patch Stephen Smalley RE: Man page fix for matchpatchcon Stephen Smalley Re: [PATCH 5/7] Security: Change current->fs[ug]id to current_fs[ug]id() Serge E. Hallyn [PATCH] XFRM: assorted IPsec fixups Paul Moore Re: [patch 0/2] policy capability support Stephen Smalley Se-Linux Updates for LTP Subrata Modak Re: Patch to update boolean descriptions to match what I had in policycoreutils. Daniel J Walsh Re: Patch to update boolean descriptions to match what I had inpolicycoreutils. Christopher J. PeBenito [RFC Patch v2 1/10] PAM Namespace: make polyinstantiated directories module Xavier Toth Re: [patch 0/2] policy capability support Joshua Brindle Thursday, 6 December [patch 0/2] policy capability support tmiller_at_tresys.com [patch 2/2] checkpolicy capability support tmiller_at_tresys.com [patch 1/2] library policy capability support tmiller_at_tresys.com Re: [patch 0/2] policy capability support Stephen Smalley RE: [patch 0/2] policy capability support Stephen Smalley Re: [patch 0/2] policy capability support Joshua Brindle RE: Man page fix for matchpatchcon Todd Miller Some file context for kernel and systems directory. Daniel J Walsh RE: [patch 0/2] policy capability support Todd Miller kismet policy Daniel J Walsh RE: [patch 0/2] policy capability support Stephen Smalley RE: [patch 0/2] policy capability support Stephen Smalley Patch to update boolean descriptions to match what I had in policycoreutils. Daniel J Walsh Re: [patch 0/2] policy capability support Paul Moore Re: More nsswitch changes. Christopher J. PeBenito policycoreutils patch Daniel J Walsh RE: [patch 0/2] policy capability support Christopher J. PeBenito Man page fix for matchpatchcon Daniel J Walsh Re: More nsswitch changes. Daniel J Walsh Re: [patch 0/2] policy capability support Stephen Smalley RE: [patch 0/2] policy capability support Stephen Smalley Re: [patch 0/2] policy capability support Joshua Brindle Re: More nsswitch changes. Christopher J. PeBenito RE: [patch 0/2] policy capability support Christopher J. PeBenito Re: [patch 0/2] policy capability support Stephen Smalley Re: refpolicy HEAD, Debian, syslogd & setrlimit Daniel J Walsh Boolean/RPM data in policy Daniel J Walsh Re: refpolicy HEAD, Debian, syslogd & setrlimit Christopher J. PeBenito Wednesday, 5 December Re: [PATCH 4/7] KEYS: Add keyctl function to get a security label Casey Schaufler Re: [PATCH 4/7] KEYS: Add keyctl function to get a security label David Howells RE: [patch 0/2] policy capability support Todd Miller Re: [patch 0/2] policy capability support Joshua Brindle Re: [patch 0/2] policy capability support Stephen Smalley Re: [PATCH 4/7] KEYS: Add keyctl function to get a security label Stephen Smalley Re: [patch 0/2] policy capability support Joshua Brindle Re: [patch 0/2] policy capability support Stephen Smalley Re: [patch 0/2] policy capability support Joshua Brindle Re: [PATCH 4/7] KEYS: Add keyctl function to get a security label Casey Schaufler RE: [patch 0/2] policy capability support Stephen Smalley [PATCH 28/28] FS-Cache: Make kAFS use FS-Cache [try #2] David Howells [PATCH 25/28] AFS: Improve handling of a rejected writeback [try #2] David Howells [PATCH 27/28] AFS: Implement shared-writable mmap [try #2] David Howells [PATCH 26/28] AF_RXRPC: Save the operation ID for debugging [try #2] David Howells [PATCH 24/28] AFS: Add a function to excise a rejected write from the pagecache [try #2] David Howells [PATCH 23/28] AFS: Add TestSetPageError() [try #2] David Howells [PATCH 22/28] fcrypt endianness misannotations [try #2] David Howells [PATCH 13/28] CacheFiles: Add missing copy_page export for ia64 [try #2] David Howells [PATCH 21/28] NFS: Display local caching state [try #2] David Howells [PATCH 20/28] NFS: Configuration and mount option changes to enable local caching on NFS [try #2] David Howells [PATCH 19/28] NFS: Use local caching [try #2] David Howells [PATCH 15/28] CacheFiles: Add a hook to write a single page of data to an inode [try #2] David Howells [PATCH 17/28] CacheFiles: Export things for CacheFiles [try #2] David Howells [PATCH 14/28] CacheFiles: Be consistent about the use of mapping vs file->f_mapping in Ext3 [try #2] David Howells [PATCH 16/28] CacheFiles: Permit the page lock state to be monitored [try #2] David Howells [PATCH 11/28] FS-Cache: Provide an add_wait_queue_tail() function [try #2] David Howells [PATCH 07/28] SECURITY: De-embed task security record from task and use refcounting [try #2] David Howells [PATCH 10/28] FS-Cache: Recruit a couple of page flags for cache management [try #2] David Howells [PATCH 09/28] FS-Cache: Release page->private after failed readahead [try #2] David Howells [PATCH 08/28] SECURITY: Allow kernel services to override LSM settings for task actions [try #2] David Howells [PATCH 05/28] Security: Change current->fs[ug]id to current_fs[ug]id() [try #2] David Howells [PATCH 03/28] KEYS: Allow the callout data to be passed as a blob rather than a string [try #2] David Howells [PATCH 04/28] KEYS: Add keyctl function to get a security label [try #2] David Howells [PATCH 01/28] KEYS: Increase the payload size when instantiating a key [try #2] David Howells [PATCH 02/28] KEYS: Check starting keyring as part of search [try #2] David Howells [PATCH 00/28] Permit filesystem local caching [try #2] David Howells [PATCH 1/7] KEYS: Increase the payload size when instantiating a key David Howells [PATCH 7/7] SECURITY: De-embed task security record from task and use refcounting David Howells [PATCH 5/7] Security: Change current->fs[ug]id to current_fs[ug]id() David Howells [PATCH 4/7] KEYS: Add keyctl function to get a security label David Howells [PATCH 3/7] KEYS: Allow the callout data to be passed as a blob rather than a string David Howells [PATCH 2/7] KEYS: Check starting keyring as part of search David Howells [PATCH 0/7] Permit filesystem local caching David Howells RE: [patch 0/2] policy capability support Todd Miller Re: [patch 0/2] policy capability support Paul Moore [patch 0/2] policy capability support tmiller_at_tresys.com [patch 2/2] checkpolicy capability support tmiller_at_tresys.com [patch 1/2] library policy capability support tmiller_at_tresys.com RE: PATCH: peersid capability support Todd Miller Re: PATCH: peersid capability support Stephen Smalley RE: Effect of changing SELinux package versions... Stephen Smalley RE: Effect of changing SELinux package versions... Hasan Rezaul-CHR010 Re: [PATCH 1/1] semanage_select_store fun Stephen Smalley Re: libsemanage patch Stephen Smalley refpolicy HEAD, Debian, syslogd & setrlimit Václav Ovsík Re: libsepol.expand_terule_helper: duplicate TE rule Shintaro Fujiwara Tuesday, 4 December Re: libsepol.expand_terule_helper: duplicate TE rule Daniel J Walsh Re: libsepol.expand_terule_helper: duplicate TE rule Shintaro Fujiwara Re: PATCH: peersid capability support Stephen Smalley Re: PATCH: audit format mismatch for inode number Stephen Smalley Re: PATCH: peersid capability support Paul Moore Re: Interface for DOI mapping Casey Schaufler PATCH: audit format mismatch for inode number Todd C. Miller Re: Interface for DOI mapping Paul Moore More nsswitch changes. Daniel J Walsh Re: Interface for DOI mapping Casey Schaufler Re: refpolicy HEAD, Debian, ioctl on xconsole by syslogd Christopher J. PeBenito Re: Many confined domains are calling getpw calls. Christopher J. PeBenito Re: libsepol.expand_terule_helper: duplicate TE rule Daniel J Walsh Re: refpolicy HEAD, Debian, patch for udev.te Daniel J Walsh refpolicy HEAD, Debian, ioctl on xconsole by syslogd Václav Ovsík Re: refpolicy HEAD, Debian, patch for udev.te Martin Orr Monday, 3 December Re: Interface for DOI mapping Paul Moore Re: libsepol.expand_terule_helper: duplicate TE rule Shintaro Fujiwara Re: libsemanage patch Daniel J Walsh Interface for DOI mapping Dave Quigley RE: [patch] libsepol: clarify and reduce neverallow error reporting Brian M. Williams RE: [patch] libsepol: clarify and reduce neverallow error reporting Stephen Smalley RE: [patch] libsepol: clarify and reduce neverallow error reporting Brian M. Williams Re: libsemanage patch Daniel J Walsh RE: libsemanage patch Todd Miller RE: libsemanage patch Stephen Smalley RE: libsemanage patch Todd Miller Re: PATCH: peersid capability support Todd C. Miller Many confined domains are calling getpw calls. Daniel J Walsh libsemanage patch Daniel J Walsh Re: PATCH: peersid capability support Stephen Smalley Re: PATCH: peersid capability support Paul Moore Re: PATCH: peersid capability support Christopher J. PeBenito RE: missing rules in newrole domain (RHEL5.1) Christopher J. PeBenito Re: [PATCH 2/2] hijack: update task_alloc_security Serge E. Hallyn Re: libsepol.expand_terule_helper: duplicate TE rule Christopher J. PeBenito Sunday, 2 December [ANN] segatex-4.00 RPM,SRPM released !! Shintaro Fujiwara Saturday, 1 December Re: refpolicy HEAD, Debian, patch for udev.te Chris PeBenito Re: libsepol.expand_terule_helper: duplicate TE rule Shintaro Fujiwara Re: libsepol.expand_terule_helper: duplicate TE rule Chris PeBenito libsepol.expand_terule_helper: duplicate TE rule Shintaro Fujiwara Friday, 30 November Re: PATCH: peersid capability support Joshua Brindle Re: PATCH: peersid capability support Paul Moore Re: [PATCH 1/2] namespaces: introduce sys_hijack (v10) Eric W. Biederman Re: PATCH: peersid capability support Paul Moore Re: PATCH: peersid capability support Paul Moore Re: PATCH: peersid capability support Todd C. Miller RE: missing rules in newrole domain (RHEL5.1) Clarkson, Mike R \(US SSA\) Re: refpolicy HEAD, Debian, patch for udev.te Martin Orr RE: PATCH: peersid capability support Stephen Smalley RE: PATCH: peersid capability support Todd Miller Re: PATCH: peersid capability support Stephen Smalley Re: PATCH: peersid capability support Paul Moore Re: PATCH: peersid capability support Paul Moore Re: [PATCH 1/2] namespaces: introduce sys_hijack (v10) Serge E. Hallyn Re: [PATCH 1/2] namespaces: introduce sys_hijack (v10) Serge E. Hallyn Re: PATCH: peersid capability support Stephen Smalley Re: PATCH: peersid capability support Joshua Brindle Re: refpolicy HEAD, Debian, patch for udev.te Christopher J. PeBenito Re: PATCH: peersid capability support Joshua Brindle Re: PATCH: peersid capability support Paul Moore Re: refpolicy HEAD, Debian, patch for udev.te Václav Ovsík Re: PATCH: print module magic in hex, not decimal on mismatch Stephen Smalley Re: [patch] libsemanage: clear errno ENOMEM from libsepol Stephen Smalley Re: PATCH: peersid capability support Paul Moore Re: PATCH: peersid capability support Stephen Smalley Re: PATCH: peersid capability support Stephen Smalley Re: PATCH: peersid capability support Joshua Brindle Re: refpolicy HEAD, Debian, patch for udev.te Christopher J. PeBenito Re: PATCH: peersid capability support Joshua Brindle Re: PATCH: peersid capability support Paul Moore Re: missing rules in newrole domain (RHEL5.1) Christopher J. PeBenito Re: refpolicy HEAD, Debian, patch for udev.te Václav Ovsík Re: PATCH: peersid capability support Stephen Smalley Thursday, 29 November Re: [PATCH 1/2] namespaces: introduce sys_hijack (v10) Eric W. Biederman missing rules in newrole domain (RHEL5.1) Clarkson, Mike R \(US SSA\) Re: PATCH: peersid capability support Joshua Brindle PATCH: print module magic in hex, not decimal on mismatch Todd C. Miller RE: Recurring SELinux events for similar violations... Stephen Smalley [patch] libsemanage: clear errno ENOMEM from libsepol Stephen Smalley [RFC] SELinux policies for source installation Shintaro Fujiwara RE: Recurring SELinux events for similar violations... Stephen Smalley Re: PATCH: peersid capability support Stephen Smalley RE: Recurring SELinux events for similar violations... Hasan Rezaul-CHR010 PATCH: peersid capability support tmiller_at_tresys.com RE: Recurring SELinux events for similar violations... Stephen Smalley Re: refpolicy HEAD, Debian, patch for udev.te Martin Orr RE: Recurring SELinux events for similar violations... Hasan Rezaul-CHR010 Re: [PATCH v2] Initial policy load from load_policy Joshua Brindle Re: [patch] libsepol: clarify and reduce neverallow error reporting Joshua Brindle Re: [PATCH 2/2] hijack: update task_alloc_security Serge E. Hallyn [patch] libsepol: clarify and reduce neverallow error reporting Stephen Smalley Re: [PATCH] IPsec SPD default security context KaiGai Kohei Wednesday, 28 November RE: newrole polyinstantiation Reed, Tim \(US SSA\) newrole polyinstantiation Reed, Tim \(US SSA\) Re: [PATCH -v3] SELinux: Add get, set, and cloning of superblock security information Eric Paris Re: [PATCH 1/2] namespaces: introduce sys_hijack (v10) Serge E. Hallyn Re: [PATCH 1/2] namespaces: introduce sys_hijack (v10) Stephen Smalley Re: [PATCH 2/2] hijack: update task_alloc_security Serge E. Hallyn Re: [PATCH 2/2] hijack: update task_alloc_security Serge E. Hallyn Re: [PATCH 1/2] namespaces: introduce sys_hijack (v10) Serge E. Hallyn Tuesday, 27 November Re: [PATCH 1/2] namespaces: introduce sys_hijack (v10) Casey Schaufler Re: [PATCH 1/2] namespaces: introduce sys_hijack (v10) Serge E. Hallyn Re: refpolicy HEAD, Debian, patch for udev.te Christopher J. PeBenito file_contexts question tolliver_at_dal.ca Re: [PATCH 1/2] namespaces: introduce sys_hijack (v10) Stephen Smalley Re: [PATCH 2/2] hijack: update task_alloc_security Serge E. Hallyn Re: [PATCH 1/2] namespaces: introduce sys_hijack (v10) Serge E. Hallyn Re: [PATCH 2/2] hijack: update task_alloc_security Serge E. Hallyn Re: [PATCH 2/2] hijack: update task_alloc_security Serge E. Hallyn Re: [PATCH 2/2] hijack: update task_alloc_security Stephen Smalley Re: [PATCH 2/2] hijack: update task_alloc_security Joshua Brindle Re: [PATCH 2/2] hijack: update task_alloc_security Casey Schaufler Monday, 26 November Re: [PATCH 2/3 -v2] mmap: round mmap hint address above mmap_min_addr James Morris Re: [PATCH 1/3] mmap: protect from stack expantion into low vm addresses James Morris Re: [PATCH 3/3-v2] security: allow capable check to permit mmap or low vm space James Morris [PATCH 3/3-v2] security: allow capable check to permit mmap or low vm space Eric Paris [PATCH 2/3 -v2] mmap: round mmap hint address above mmap_min_addr Eric Paris [PATCH 1/3] mmap: protect from stack expantion into low vm addresses Eric Paris Re: [patch 1/1] selinux: detect dead booleans James Morris Re: refpolicy HEAD, Debian, restorecon from udev startup script Christopher J. PeBenito Re: [PATCH v2] Initial policy load from load_policy Joshua Brindle Re: reference policy: init_system_domain(setfiles_t,setfiles_exec_t) duplicity Christopher J. PeBenito Re: [PATCH] IPsec SPD default security context Christopher J. PeBenito [patch 1/1] selinux: detect dead booleans Stephen Smalley [RFC Patch 9/10] PAM Namespace: no access, no polyinstantiation attempt Xavier Toth [RFC Patch 10/10] PAM Namespace: spec file Xavier Toth [RFC Patch 8/10] PAM Namespace: configurable running on init script Xavier Toth [RFC Patch 7/10] PAM Namespace: different pam users Xavier Toth [RFC Patch 6/10] PAM Namespace: ignore directory if user excluded Xavier Toth [RFC Patch 5/10] PAM Namespace: enable polyinstantiation of directories with spaces in name Xavier Toth [RFC Patch 4/10] PAM Namespace: shared polyinstantiated directories Xavier Toth [RFC Patch 3/10] PAM Namespace: options when setexeccon not called Xavier Toth [RFC Patch 1/10] PAM Namespace: make polyinstantiated directories module Xavier Toth [RFC Patch 2/10] PAM Namespace: expand $HOME Xavier Toth Re: semodule -i postgresql.pp fails on F8 Shintaro Fujiwara refpolicy HEAD, Debian, patch for udev.te Václav Ovsík Re: semodule -i postgresql.pp fails on F8 Christopher J. PeBenito [ANN]segatex-4.00 released ! Shintaro Fujiwara Friday, 23 November semodule -i postgresql.pp fails on F8 Shintaro Fujiwara Thursday, 22 November refpolicy HEAD, Debian, restorecon from udev startup script Václav Ovsík reference policy: init_system_domain(setfiles_t,setfiles_exec_t) duplicity Václav Ovsík Wednesday, 21 November Re: [PATCH 1/1] semanage_select_store fun Stephen Smalley Re: [PATCH 1/1] semanage_select_store fun Stephen Smalley Re: [PATCH 1/1] semanage_select_store fun Joshua Brindle Re: plz Help! SELinux Re-enabled from disabled mode, CentOS 5 won't startup Stephen Smalley Re: [PATCH 1/1] semanage_select_store fun Stephen Smalley plz Help! SELinux Re-enabled from disabled mode, CentOS 5 won't startup joe shoemaker Tuesday, 20 November Re: [PATCH] IPsec SPD default security context KaiGai Kohei Re: Problems with Labeled IPsec, IKE and ECN Paul Moore [PATCH 1/1] semanage_select_store fun Joshua Brindle Re: Problems with Labeled IPsec, IKE and ECN James Morris Re: [PATCH] IPsec SPD default security context Christopher J. PeBenito Re: [PATCH 3/3] security: allow capable check to permit mmap or low vm space Eric Paris [patch] libselinux: dlopen libsepol.so.1 rather than libsepol.so Stephen Smalley Re: files contexts override via policy module Daniel J Walsh Re: [PATCH] IPsec SPD default security context KaiGai Kohei Monday, 19 November Re: [Labeled-nfs] [PATCH 13/13] NFSD: Label change notification for NFSv4 Server James Morris Re: [Labeled-nfs] [PATCH 13/13] NFSD: Label change notification for NFSv4 Server Casey Schaufler Re: [Labeled-nfs] [PATCH 08/13] NFS: Introduce lifecycle managment for label attribute. James Morris Problems with Labeled IPsec, IKE and ECN Paul Moore Re: [PATCH] IPsec SPD default security context (Re: security context for SPD entries of labeled IPsec) Christopher J. PeBenito Re: selinux problem or not??? Stephen Smalley Re: Trouble with mounted /home Stephen Smalley Re: [Labeled-nfs] [PATCH 08/13] NFS: Introduce lifecycle managment for label attribute. Casey Schaufler Re: [DSE-Dev] [martin@martinorr.name: /selinux getattr messages] Václav Ovsík Re: [PATCH 03/13] Security: Add hook to get full security xattr name David P. Quigley Re: [DSE-Dev] [martin@martinorr.name: /selinux getattr messages] Christopher J. PeBenito Re: [Labeled-nfs] [PATCH 09/13] NFS: Client implementation of SELINUX Labeling James Morris Re: [Labeled-nfs] [PATCH 08/13] NFS: Introduce lifecycle managment for label attribute. James Morris Sunday, 18 November ANN: SELinux Policy Editor 2.2.0 Yuichi Nakamura Re: [PATCH] IPsec SPD default security context (Re: security context for SPD entries of labeled IPsec) KaiGai Kohei Re: "semanage login -l" is working on F8? Shintaro Fujiwara Re: "semanage login -l" is working on F8? KaiGai Kohei "semanage login -l" is working on F8? Shintaro Fujiwara Friday, 16 November selinux problem or not??? Clarkson, Mike R \(US SSA\) Re: [PATCH 03/13] Security: Add hook to get full security xattr name Casey Schaufler Re: [PATCH] SELinux: return EOPNOTSUPP not ENOTSUPP James Morris Re: Trouble with mounted /home Hal Re: [PATCH 3/3] security: allow capable check to permit mmap or low vm space James Morris Re: [PATCH 3/3] security: allow capable check to permit mmap or low vm space Eric Paris Re: [PATCH 3/3] security: allow capable check to permit mmap or low vm space James Morris Re: [PATCH 2/3] mmap: round mmap hint address above mmap_min_addr James Morris Re: [PATCH 3/3] security: allow capable check to permit mmap or low vm space Eric Paris Re: [PATCH 2/3] mmap: round mmap hint address above mmap_min_addr Eric Paris Re: [PATCH 3/3] security: allow capable check to permit mmap or low vm space James Morris Re: [PATCH 2/3] mmap: round mmap hint address above mmap_min_addr James Morris [PATCH] SELinux: return EOPNOTSUPP not ENOTSUPP Eric Paris Re: [RFC Labeled NFS] Labeling support for NFSv4 Peter Staubach [PATCH 3/3] security: allow capable check to permit mmap or low vm space Eric Paris [PATCH 1/3] mmap: protect from stack expantion into low vm addresses Eric Paris [PATCH 2/3] mmap: round mmap hint address above mmap_min_addr Eric Paris [PATCH 13/13] NFSD: Label change notification for NFSv4 Server David P. Quigley [PATCH 12/13] NFS: Label change notification for NFSv4 Clients David P. Quigley [PATCH 11/13] NFSD: Server implementation of MAC Labeling David P. Quigley [PATCH 10/13] NFS: Extend nfs xattr handlers to accept the security namespace David P. Quigley [PATCH 09/13] NFS: Client implementation of SELINUX Labeling David P. Quigley [PATCH 08/13] NFS: Introduce lifecycle managment for label attribute. David P. Quigley [PATCH 07/13] NFSv4: Add label recommended attribute and NFSv4 flags David P. Quigley [PATCH 06/13] KConfig: Add KConfig entries for SELinux labeled NFS David P. Quigley [PATCH 05/13] Security: Add hook to calculate context based on a negative dentry. David P. Quigley [PATCH 04/13] VFS: Add label field to the iattr structure David P. Quigley [PATCH 03/13] Security: Add hook to get full security xattr name David P. Quigley [PATCH 02/13] VFS: Reorder vfs_getxattr to avoid unnecessary calls to the LSM David P. Quigley [PATCH 01/13] VFS/Security: Rework inode_getsecurity and callers to return resulting buffer David P. Quigley Re: Trouble with mounted /home Christopher J. PeBenito [RFC Labeled NFS] Labeling support for NFSv4 David P. Quigley Re: [Fwd: type class key] Casey Schaufler Re: Fix fixfiles handling of arguments Eamon Walsh Fix fixfiles handling of arguments Daniel J Walsh Re: [DSE-Dev] [martin@martinorr.name: /selinux getattr messages] Erich Schubert Re: [DSE-Dev] [martin@martinorr.name: /selinux getattr messages] Litwiniec Robert Re: [DSE-Dev] [martin@martinorr.name: /selinux getattr messages] Erich Schubert [martin@martinorr.name: [DSE-Dev] /selinux getattr messages] Václav Ovsík Thursday, 15 November Trouble with mounted /home Hal Re: [Fwd: type class key] James Morris Re: [Fwd: type class key] David Howells Re: [Fwd: type class key] Stephen Smalley Re: [patch] libselinux: lazily compile regexes to reduce overhead of matchpathcon / selabel_lookup Stephen Smalley [patch] libselinux: lazily compile regexes to reduce overhead of matchpathcon / selabel_lookup Stephen Smalley [RFC PATCH v7 02/13] NetLabel: cleanup the LSM domain hash functions Paul Moore Re: [Fwd: type class key] David Howells [RFC PATCH v7 00/13] Labeled networking patches for 2.6.25 Paul Moore [RFC PATCH v7 13/13] NetLabel: add auditing to the static labeling mechanism Paul Moore [RFC PATCH v7 09/13] SELinux: Better integration between peer labeling subsystems Paul Moore [RFC PATCH v7 12/13] NetLabel: introduce static network labels for unlabeled connections Paul Moore [RFC PATCH v7 11/13] SELinux: allow NetLabel to directly cache SIDs Paul Moore [RFC PATCH v7 05/13] SELinux: add secctx_to_secid() LSM hook Paul Moore [RFC PATCH v7 10/13] SELinux: Enable dynamic enable/disable of the network access checks Paul Moore [RFC PATCH v7 07/13] SELinux: Add a capabilities bitmap to SELinux policy version 22 Paul Moore [RFC PATCH v7 06/13] NetLabel: add IP address family information to the netlbl_skbuff_getattr() function Paul Moore [RFC PATCH v7 08/13] SELinux: Add new peer permissions to the Flask definitions Paul Moore [RFC PATCH v7 04/13] NetLabel: Add secid token support to the NetLabel secattr struct Paul Moore [RFC PATCH v7 03/13] NetLabel: consolidate the LSM domain mapping/hashing locks Paul Moore [RFC PATCH v7 01/13] NetLabel: remove unneeded RCU read locks Paul Moore Re: [Fwd: type class key] David Howells Re: [PATCH] IPsec SPD default security context (Re: security context for SPD entries of labeled IPsec) Paul Moore Re: [Fwd: type class key] Stephen Smalley Re: [Fwd: type class key] Stephen Smalley Re: [Fwd: type class key] Stephen Smalley Re: [Fwd: type class key] David Howells Re: [Fwd: type class key] David Howells Re: [Fwd: type class key] David Howells Re: [PATCH] IPsec SPD default security context (Re: security context for SPD entries of labeled IPsec) Christopher J. PeBenito Re: [Fwd: type class key] Stephen Smalley Re: [Fwd: type class key] Daniel J Walsh Re: [Fwd: type class key] David Howells Re: [Fwd: type class key] David Howells Wednesday, 14 November Re: [PATCH] IPsec SPD default security context (Re: security context for SPD entries of labeled IPsec) KaiGai Kohei Re: Kernel oops on fc6 with non-mls policy Eric Paris Re: Kernel oops on fc6 with non-mls policy Brian M. Williams Re: Apache problem with Selinux Daniel J Walsh Re: [Fwd: type class key] Daniel J Walsh Re: allow statement OK? Daniel J Walsh Re: Patch to allow semanage to set boolean values and translate booleans via policy.xml Christopher J. PeBenito Re: duplicit fc on Debian for /lib/usb/devices Christopher J. PeBenito Re: Patch to allow semanage to set boolean values and translate booleans via policy.xml Daniel J Walsh duplicit fc on Debian for /lib/usb/devices Václav Ovsík segatex_suite-2.3-forF7 released!! Shintaro Fujiwara Apache problem with Selinux tolliver_at_dal.ca Tuesday, 13 November Re: Boot Errors Lisa Raykowski [PATCH v2] Initial policy load from load_policy Chad Sellers Re: pcscd and serial readers Steven Harp Re: pcscd and serial readers Christopher J. PeBenito Re: Boot Errors Stephen Smalley Re: [PATCH] Initial policy load from load_policy Stephen Smalley Re: [PATCH] Initial policy load from load_policy Joshua Brindle pcscd and serial readers Steven Harp Re: is the string "<<none>>" in a header anywhere? Jim Meyering Re: is the string "<<none>>" in a header anywhere? Stephen Smalley Monday, 12 November Re: should GNU install call matchpathcon by default? Jim Meyering Re: [RFC PATCH v6 09/13] SELinux: Better integration between peer labeling subsystems Paul Moore Re: [RFC PATCH v6 08/13] SELinux: Add new peer permissions to the Flask definitions Paul Moore Re: Patch to allow semanage to set boolean values and translate booleans via policy.xml Christopher J. PeBenito Re: Debian Etch Documentation Václav Ovsík is the string "<<none>>" in a header anywhere? Jim Meyering Sunday, 11 November Debian Etch Documentation Lisa Raykowski Re: [RFC PATCH v6 09/13] SELinux: Better integration between peer labeling subsystems James Morris Re: [RFC PATCH v6 08/13] SELinux: Add new peer permissions to the Flask definitions James Morris Re: [RFC PATCH v6 05/13] SELinux: add secctx_to_secid() LSM hook Casey Schaufler Re: [PATCH -v3] SELinux: Add get, set, and cloning of superblock security information Casey Schaufler Saturday, 10 November Re: Boot Errors Lisa Raykowski Re: [Fwd: type class key] David Howells Re: [PATCH -v3] SELinux: Add get, set, and cloning of superblock security information Eric Paris Friday, 9 November Re: [PATCH] Initial policy load from load_policy Russell Coker Re: [RFC PATCH v6 05/13] SELinux: add secctx_to_secid() LSM hook Paul Moore Re: [PATCH -v3] SELinux: Add get, set, and cloning of superblock security information Casey Schaufler RE: Effect of changing SELinux package versions... Hasan Rezaul-CHR010 [PATCH -v3] SELinux: Add get, set, and cloning of superblock security information Eric Paris Re: [RFC PATCH v6 05/13] SELinux: add secctx_to_secid() LSM hook Casey Schaufler [RFC PATCH v6 13/13] NetLabel: add auditing to the static labeling mechanism Paul Moore [RFC PATCH v6 12/13] NetLabel: introduce static network labels for unlabeled connections Paul Moore [RFC PATCH v6 11/13] SELinux: allow NetLabel to directly cache SIDs Paul Moore [RFC PATCH v6 10/13] SELinux: Enable dynamic enable/disable of the network access checks Paul Moore [RFC PATCH v6 09/13] SELinux: Better integration between peer labeling subsystems Paul Moore [RFC PATCH v6 08/13] SELinux: Add new peer permissions to the Flask definitions Paul Moore [RFC PATCH v6 07/13] SELinux: Add a capabilities bitmap to SELinux policy version 22 Paul Moore [RFC PATCH v6 06/13] NetLabel: add IP address family information to the netlbl_skbuff_getattr() function Paul Moore [RFC PATCH v6 04/13] NetLabel: Add secid token support to the NetLabel secattr struct Paul Moore [RFC PATCH v6 05/13] SELinux: add secctx_to_secid() LSM hook Paul Moore [RFC PATCH v6 02/13] NetLabel: cleanup the LSM domain hash functions Paul Moore [RFC PATCH v6 03/13] NetLabel: consolidate the LSM domain mapping/hashing locks Paul Moore [RFC PATCH v6 01/13] NetLabel: remove unneeded RCU read locks Paul Moore [RFC PATCH v6 00/13] Labeled networking patches Paul Moore Re: [Fwd: type class key] Casey Schaufler Re: [Fwd: type class key] Stephen Smalley Re: Patch to allow semanage to set boolean values and translate booleans via policy.xml Daniel J Walsh Re: [Fwd: type class key] Stephen Smalley Re: Effect of changing SELinux package versions... Stephen Smalley Effect of changing SELinux package versions... Hasan Rezaul-CHR010 Re: Patch to allow semanage to set boolean values and translate booleans via policy.xml Christopher J. PeBenito allow statement OK? Bill Chimiak Re: type class key Daniel J Walsh Re: Patch to allow semanage to set boolean values and translate booleans via policy.xml Daniel J Walsh Re: type class key Stefan Schulze Frielinghaus Re: [PATCH -v3] SELinux: Add get, set, and cloning of superblock security information Eric Paris Re: Patch to allow semanage to set boolean values and translate booleans via policy.xml Stephen Smalley Re: [PATCH -v3] SELinux: Add get, set, and cloning of superblock security information Casey Schaufler Re: [PATCH -v3] SELinux: Add get, set, and cloning of superblock security information Stephen Smalley Re: should GNU install call matchpathcon by default? Jim Meyering Re: Boot Errors Stephen Smalley Thursday, 8 November Re: Boot Errors Lisa R. [PATCH -v3] SELinux: Add get, set, and cloning of superblock security information Eric Paris Re: [PATCH] libselinux: introduce enforcing mode override option Stephen Smalley Re: should GNU install call matchpathcon by default? Eamon Walsh Wednesday, 7 November Re: should GNU install call matchpathcon by default? Jim Meyering Thursday, 8 November Re: type class key Daniel J Walsh Re: Boot Errors Stephen Smalley Re: [PATCH] restorecon Stephen Smalley Re: security context for SPD entries of labeled IPsec KaiGai Kohei type class key Stefan Schulze Frielinghaus [PATCH] restorecon Litwiniec Robert Wednesday, 7 November Boot Errors Lisa R. Re: [patch] selinux: add more validity checks on policy load James Morris Re: [patch 2/2] Peersid capability support Joshua Brindle Re: [PATCH] Initial policy load from load_policy Chad Sellers Re: [patch 2/2] Peersid capability support Paul Moore Re: [PATCH] Initial policy load from load_policy Stephen Smalley Re: [patch 2/2] Peersid capability support Joshua Brindle RE: [PATCH] Initial policy load from load_policy Joshua Brindle [PATCH] Initial policy load from load_policy Chad Sellers Re: [patch 2/2] Peersid capability support Stephen Smalley [patch 1/2] Version 22/Policy capability support Joshua Brindle [patch 2/2] Peersid capability support Joshua Brindle [patch 0/2] policy capabilities and netpeer support Joshua Brindle Re: policyd module Christopher J. PeBenito should GNU install call matchpathcon by default? Jim Meyering RE: security context for SPD entries of labeled IPsec Venkat Yekkirala [patch] selinux: add more validity checks on policy load Stephen Smalley Tuesday, 6 November Re: security context for SPD entries of labeled IPsec KaiGai Kohei Re: security context for SPD entries of labeled IPsec KaiGai Kohei Re: [PATCH] libselinux: introduce enforcing mode override option Joshua Brindle Re: hkp port Russell Coker Re: hkp port Daniel J Walsh Re: [PATCH] libselinux: introduce enforcing mode override option Eamon Walsh Re: [PATCH] libselinux: introduce enforcing mode override option Eamon Walsh removing default config entries Russell Coker Re: [PATCH] libselinux: introduce enforcing mode override option Joshua Brindle Re: security context for SPD entries of labeled IPsec Joy Latten RE: security context for SPD entries of labeled IPsec Venkat Yekkirala test cipachki00 cipachki00 RE: security context for SPD entries of labeled IPsec Venkat Yekkirala Re: [PATCH] libselinux: introduce enforcing mode override option Stephen Smalley Re: Decoder for log messages??? Stephen Smalley Re: permissions to create directories in the /tmp directory Christopher J. PeBenito hkp port Russell Coker Re: security context for SPD entries of labeled IPsec KaiGai Kohei Monday, 5 November security context for SPD entries of labeled IPsec KaiGai Kohei Re: Decoder for log messages??? Steve Grubb Re: Decoder for log messages??? Steve Grubb Re: [RFC PATCH v5 2/8] SELinux: add secctx_to_secid() LSM hook Paul Moore permissions to create directories in the /tmp directory Clarkson, Mike R \(US SSA\) [RFC PATCH v5 4/8] SELinux: Add a capabilities bitmap to SELinux policy version 22 Paul Moore [RFC PATCH v5 8/8] SELinux: allow NetLabel to directly cache SIDs Paul Moore [RFC PATCH v5 1/8] NetLabel: Add secid token support to the NetLabel secattr struct Paul Moore [RFC PATCH v5 2/8] SELinux: add secctx_to_secid() LSM hook Paul Moore [RFC PATCH v5 3/8] NetLabel: add IP address family information to the netlbl_skbuff_getattr() function Paul Moore [RFC PATCH v5 6/8] SELinux: Better integration between peer labeling subsystems Paul Moore [RFC PATCH v5 7/8] SELinux: Enable dynamic enable/disable of the network access checks Paul Moore [RFC PATCH v5 0/8] Updated labeled networking patches Paul Moore [RFC PATCH v5 5/8] SELinux: Add new peer permissions to the Flask definitions Paul Moore Re: Decoder for log messages??? Dean Anderson [PATCH] libselinux: introduce enforcing mode override option Eamon Walsh Re: policyd module Jan-Frode Myklebust Friday, 2 November Patch to allow semanage to set boolean values and translate booleans via policy.xml Daniel J Walsh Patch to allow semanage to set boolean values and translate booleans via policy.xml Daniel J Walsh Thursday, 1 November Re: [PATCH] checkpolicy: Remove use of REJECT and trailing context in lex rules; make ipv4 address processing like ipv6 Stephen Smalley Re: [PATCH] libselinux: refactor AVC netlink code Stephen Smalley Wednesday, 31 October Re: Decoder for log messages??? Russell Coker [PATCH] checkpolicy: Remove use of REJECT and trailing context in lex rules; make ipv4 address processing like ipv6 James Carter Re: Decoder for log messages??? Stephen Smalley Re: [PATCHv2] selinux: suppress a warning for 64k pages. James Morris Saturday, 27 October Decoder for log messages??? Dean Anderson Monday, 29 October Re: [PATCH] refpolicy: Fix range_transition rules in the init_ranged_system_domain interface in system/init.if Christopher J. PeBenito [PATCH] refpolicy: Fix range_transition rules in the init_ranged_system_domain interface in system/init.if James Carter Re: http://intrajp.no-ip.com/nucleus/index.php?itemid=673 Ted X Toth Re: Fwd: translation of Japanese blog posts Shintaro Fujiwara Re: http://intrajp.no-ip.com/nucleus/index.php?itemid=673 KaiGai Kohei Re: Fwd: translation of Japanese blog posts Ken YANG Saturday, 27 October http://intrajp.no-ip.com/nucleus/index.php?itemid=673 Russell Coker Fwd: translation of Japanese blog posts Shintaro Fujiwara translation of Japanese blog posts Russell Coker Friday, 26 October Re: What domain should the X server run in Casey Schaufler Re: What domain should the X server run in Russell Coker Re: What domain should the X server run in Casey Schaufler Re: What domain should the X server run in Russell Coker Thursday, 25 October Re: trouble with ssh in today's rawhide + refpolicy Eamon Walsh Re: What domain should the X server run in Eamon Walsh Re: What domain should the X server run in Christopher J. PeBenito Re: removing a module Stephen Smalley What domain should the X server run in Eamon Walsh removing a module Steve G Re: HOME_DIR in .fc works? Daniel J Walsh Re: HOME_DIR in .fc works? Xavier Toth Wednesday, 24 October Re: HOME_DIR in .fc works? Xavier Toth [PATCH] libselinux: refactor AVC netlink code Eamon Walsh HOME_DIR in .fc works? Ted X Toth Re: [PATCH -v2] SELinux: Add get, set, and cloning of superblock security information Eric Paris Re: [PATCH -v2] SELinux: Add get, set, and cloning of superblock security information Stephen Smalley Re: policyd module Russell Coker Re: policyd module Christopher J. PeBenito userspace Process Classifier based on SELinux Security Contexts for CPUSET, ELSA and Containers Pravin Tuesday, 23 October Re: SE-DBUS policy Daniel J Walsh Re: trouble with ssh in today's rawhide + refpolicy Daniel J Walsh Re: trouble with ssh in today's rawhide + refpolicy Stephen Smalley Re: SE-DBUS policy Christopher J. PeBenito Re: trouble with ssh in today's rawhide + refpolicy Eamon Walsh Re: policyd module Jan-Frode Myklebust Re: SE-DBUS policy Colin Walters Re: trouble with ssh in today's rawhide + refpolicy Daniel J Walsh Re: trouble with ssh in today's rawhide + refpolicy Christopher J. PeBenito Re: SE-DBUS policy Stephen Smalley Re: trouble with ssh in today's rawhide + refpolicy Stephen Smalley Re: trouble with ssh in today's rawhide + refpolicy Christopher J. PeBenito SE-DBUS policy Christopher J. PeBenito Re: MLS in the DoD rob myers Re: trouble with ssh in today's rawhide + refpolicy Daniel J Walsh Monday, 22 October Re: [PATCH] SELinux: always check SIGCHLD in selinux_task_wait James Morris Re: trouble with ssh in today's rawhide + refpolicy Eamon Walsh trouble with ssh in today's rawhide + refpolicy Eamon Walsh Re: Dealing with 64-bit capabilities James Morris [PATCH] SELinux: always check SIGCHLD in selinux_task_wait Eric Paris Re: [PATCH] SELinux: always check SIGCHLD in selinux_task_wait Eric Paris Re: [PATCH] SELinux: always check SIGCHLD in selinux_task_wait Stephen Smalley [PATCH] SELinux: always check SIGCHLD in selinux_task_wait Eric Paris Re: Dealing with 64-bit capabilities Serge E. Hallyn MLS in the DoD Huntress Gary B NPRI Re: error is expansion behavior Stephen Smalley Sunday, 21 October Re: Dealing with 64-bit capabilities James Morris [ANN] segatex_suite 2.0 released Shintaro Fujiwara Friday, 19 October Re: [PATCH] libselinux: add "event" type to X contexts backend Stephen Smalley Re: [PATCH] libselinux: add "event" type to X contexts backend Eamon Walsh error is expansion behavior J. Tang Re: thread level controls Stephen Smalley thread level controls Clarkson, Mike R \(US SSA\) Thursday, 18 October [PATCH] libselinux: add "event" type to X contexts backend Eamon Walsh Re: [PATCH] refpolicy:locallogin problem still exists? Shintaro Fujiwara Re: [PATCH] refpolicy:locallogin problem still exists? Russell Coker Re: [PATCH] refpolicy:locallogin problem still exists? Shintaro Fujiwara RE: Recurring SELinux events for similar violations... Hasan Rezaul-CHR010 RE: Recurring SELinux events for similar violations... Stephen Smalley Wednesday, 17 October RE: Recurring SELinux events for similar violations... Hasan Rezaul-CHR010 Re: Recurring SELinux events for similar violations... Eric Paris Recurring SELinux events for similar violations... Hasan Rezaul-CHR010 Re: [PATCH] refpolicy:locallogin problem still exists? Russell Coker Re: configured virtual environment with SElinux Russell Coker Re: concept of a permissive domain Stephen Smalley Re: Dealing with 64-bit capabilities Serge E. Hallyn Re: Dealing with 64-bit capabilities Stephen Smalley Tuesday, 16 October Re: Dealing with 64-bit capabilities Serge E. Hallyn Re: kernel flask headers Eric Paris Re: kernel flask headers Christopher J. PeBenito Re: kernel flask headers Stephen Smalley Re: kernel flask headers Christopher J. PeBenito Re: [PATCH] refpolicy:useradd_t needs process transition to nscd_t Shintaro Fujiwara Re: kernel flask headers Christopher J. PeBenito Dealing with 64-bit capabilities Stephen Smalley Re: [PATCH] refpolicy:locallogin problem still exists? Shintaro Fujiwara Re: kernel flask headers Stephen Smalley Re: kernel flask headers Christopher J. PeBenito kernel flask headers Stephen Smalley Re: [PATCH] refpolicy:locallogin problem still exists? Christopher J. PeBenito Re: [PATCH] refpolicy:useradd_t needs process transition to nscd_t Christopher J. PeBenito Re: checkmodule and MLS/MCS support Russell Coker Re: checkmodule and MLS/MCS support Karl MacMillan Re: checkmodule and MLS/MCS support Stephen Smalley Re: checkmodule and MLS/MCS support Karl MacMillan Re: checkmodule and MLS/MCS support Stephen Smalley Re: newrole authentication Stephen Smalley Re: newrole authentication Stephen Smalley Re: newrole authentication Joshua Brindle Monday, 15 October Re: checkmodule and MLS/MCS support Russell Coker newrole authentication Clarkson, Mike R \(US SSA\) Re: checkmodule and MLS/MCS support Joshua Brindle Re: checkmodule and MLS/MCS support Russell Coker Re: Are the reference policy abstractions the right ones? James Morris Re: Are the reference policy abstractions the right ones? Karl MacMillan Re: [PATCH] refpolicy:useradd_t needs process transition to nscd_t Shintaro Fujiwara Re: [PATCH] refpolicy:locallogin problem still exists? Shintaro Fujiwara Re: [PATCH] refpolicy:groupadd_t needs transition to nscd_t Shintaro Fujiwara Re: Are the reference policy abstractions the right ones? Karl MacMillan Re: concept of a permissive domain Karl MacMillan Re: configured virtual environment with SElinux Karl MacMillan Re: checkmodule and MLS/MCS support Christopher J. PeBenito Re: concept of a permissive domain Eric Paris Re: concept of a permissive domain Stephen Smalley Re: concept of a permissive domain Daniel J Walsh Re: [PATCH] refpolicy:locallogin problem still exists? Christopher J. PeBenito Re: [PATCH] refpolicy:groupadd_t needs transition to nscd_t Christopher J. PeBenito Re: [PATCH] refpolicy:useradd_t needs process transition to nscd_t Christopher J. PeBenito Re: [PATCH] refpolicy: gdm file context Christopher J. PeBenito Re: concept of a permissive domain Chad Sellers Re: configured virtual environment with SElinux shahbaz khan Re: concept of a permissive domain Stephen Smalley Re: concept of a permissive domain Brett Lentz Re: checkmodule and MLS/MCS support Russell Coker Re: Are the reference policy abstractions the right ones? David P. Quigley Re: checkmodule and MLS/MCS support Stephen Smalley Re: configured virtual environment with SElinux Karl MacMillan Re: concept of a permissive domain Daniel J Walsh Re: Are the reference policy abstractions the right ones? James Morris Sunday, 14 October Re: Are the reference policy abstractions the right ones? Joe Nall Re: Are the reference policy abstractions the right ones? James Morris Re: checkmodule and MLS/MCS support Joshua Brindle checkmodule and MLS/MCS support Russell Coker Re: [Refpolicy PATCH] (just a m4macro description miss?) Shintaro Fujiwara Re: concept of a permissive domain Stefan Schulze Frielinghaus [PATCH] refpolicy:groupadd_t needs transition to nscd_t shintaro_fujiwara [PATCH] refpolicy:useradd_t needs process transition to nscd_t shintaro_fujiwara [PATCH] refpolicy:locallogin problem still exists? shintaro_fujiwara Saturday, 13 October Re: concept of a permissive domain Daniel J Walsh Friday, 12 October configured virtual environment with SElinux Jax Re: concept of a permissive domain Chad Sellers [PATCH] refpolicy: gdm file context Eamon Walsh Re: Are the reference policy abstractions the right ones? Chad Sellers Re: concept of a permissive domain Karl MacMillan Re: concept of a permissive domain Stephen Smalley Re: concept of a permissive domain Chad Sellers Re: Are the reference policy abstractions the right ones? Karl MacMillan Re: Are the reference policy abstractions the right ones? James Carter Re: concept of a permissive domain Stephen Smalley Monday, 8 October Re: policyd module Jan-Frode Myklebust Friday, 12 October Re: concept of a permissive domain Stephen Smalley Re: concept of a permissive domain Stephen Smalley Re: concept of a permissive domain Karl MacMillan Re: concept of a permissive domain Karl MacMillan Re: concept of a permissive domain Chad Sellers Re: concept of a permissive domain Eric Paris Re: concept of a permissive domain Joshua Brindle Re: Are the reference policy abstractions the right ones? Chad Sellers Re: Are the reference policy abstractions the right ones? Chad Sellers Re: concept of a permissive domain Daniel J Walsh cannot see boolean variable in /selinux/booleans run zhang Thursday, 11 October Re: Fix semodule option handling Joshua Brindle About the Policy Server Sandra Rueda Re: Are the reference policy abstractions the right ones? Daniel J Walsh Re: deleteall added for ports and fcontext in semanage Stephen Smalley Re: [PATCH] libsepol: add user to hierarchy checker Stephen Smalley Fix semodule option handling Daniel J Walsh RE: Are the reference policy abstractions the right ones? James Carter Re: Are the reference policy abstractions the right ones? James Carter Re: Question about domain transition and MLS Stephen Smalley [PATCH] libselinux: stringrep / mapping fix Eamon Walsh Re: Are the reference policy abstractions the right ones? Karl MacMillan Question about domain transition and MLS Rosalie Hiebel Re: Any early information on the 2008 SELinux Symposium? Casey Schaufler Re: Any early information on the 2008 SELinux Symposium? Frank L. Mayer Re: debugging confined domain with gdb Daniel J Walsh Question about domain transition and MLS Rosalie Hiebel RE: Are the reference policy abstractions the right ones? Frank L. Mayer Wednesday, 10 October Re: [RFC PATCH v4 1/3] [SELinux] Add a capabilities bitmap to SELinux policy version 22 Paul Moore Any early information on the 2008 SELinux Symposium? Casey Schaufler Re: [RFC PATCH v4 1/3] [SELinux] Add a capabilities bitmap to SELinux policy version 22 Eric Paris Re: Are the reference policy abstractions the right ones? Karl MacMillan Re: [RFC PATCH v4 1/3] [SELinux] Add a capabilities bitmap to SELinux policy version 22 Paul Moore Re: debugging confined domain with gdb Stephen Smalley Re: debugging confined domain with gdb Eric Paris Re: debugging confined domain with gdb Stephen Smalley debugging confined domain with gdb Eric Paris Re: Are the reference policy abstractions the right ones? Paul Moore Re: [RFC PATCH v4 1/3] [SELinux] Add a capabilities bitmap to SELinux policy version 22 Stephen Smalley Re: Are the reference policy abstractions the right ones? Casey Schaufler Re: Are the reference policy abstractions the right ones? Joshua Brindle Re: Are the reference policy abstractions the right ones? James Carter Re: Shell redirection and denials Stephen Smalley Re: Shell redirection and denials Daniel J Walsh Re: Are the reference policy abstractions the right ones? Karl MacMillan Re: Are the reference policy abstractions the right ones? Karl MacMillan Re: Shell redirection and denials Stephen Smalley Re: Shell redirection and denials Kroum Antov Re: The current status of sebusybox project Yuichi Nakamura The current status of sebusybox project KaiGai Kohei Tuesday, 9 October Re: Are the reference policy abstractions the right ones? Karl MacMillan Re: Are the reference policy abstractions the right ones? James Carter Re: Are the reference policy abstractions the right ones? Karl MacMillan Re: Are the reference policy abstractions the right ones? James Carter Re: Are the reference policy abstractions the right ones? Christopher J. PeBenito Re: Are the reference policy abstractions the right ones? Joshua Brindle Re: Shell redirection and denials Christopher J. PeBenito Re: Are the reference policy abstractions the right ones? Karl MacMillan Re: Shell redirection and denials Stephen Smalley Re: is any use of runcon by arbitrary users valid when enforcing? Jim Meyering Re: Shell redirection and denials Daniel J Walsh Are the reference policy abstractions the right ones? James Carter Re: Shell redirection and denials Karl MacMillan Re: Shell redirection and denials Stephen Smalley Re: is any use of runcon by arbitrary users valid when enforcing? Stephen Smalley Monday, 8 October Shell redirection and denials Karl MacMillan Re: policyd module Christopher J. PeBenito Re: [Refpolicy PATCH] (just a m4macro description miss?) Christopher J. PeBenito confining certain user to their home directory Mark Re: [RFC PATCH v4 0/3] Added new checks for labeled IPsec & SECMARK [en\|dis]able Paul Moore Sunday, 7 October deleteall added for ports and fcontext in semanage Daniel J Walsh Re: [RFC PATCH v4 0/3] Added new checks for labeled IPsec & SECMARK [en\|dis]able Paul Moore Re: [RFC PATCH v4 0/3] Added new checks for labeled IPsec & SECMARK [en\|dis]able James Morris [Refpolicy PATCH] (just a m4macro description miss?) shintaro_fujiwara is any use of runcon by arbitrary users valid when enforcing? Jim Meyering Friday, 5 October Re: policyd module Jan-Frode Myklebust [RFC PATCH v4 3/3] [SELinux] Enable dynamic enable/disable of the network access checks Paul Moore [RFC PATCH v4 2/3] [SELinux] Better integration between peer labeling subsystems Paul Moore [RFC PATCH v4 1/3] [SELinux] Add a capabilities bitmap to SELinux policy version 22 Paul Moore [RFC PATCH v4 0/3] Added new checks for labeled IPsec & SECMARK [en\|dis]able Paul Moore Re: un-escaped dots cleanup Christopher J. PeBenito Re: [PATCH] libsepol: add user to hierarchy checker Todd C. Miller Re: policyd module Christopher J. PeBenito Re: policycoreutils patch for semanage/seobject.py Daniel J Walsh Re: policycoreutils patch for semanage/seobject.py Stephen Smalley genhomedircon script Daniel J Walsh Re: policycoreutils patch for semanage/seobject.py Daniel J Walsh Re: puzzles about hidden_def and hidden_proto Ken Re: policycoreutils patch for semanage/seobject.py Stephen Smalley Re: Man page change for semodule -D qualifier Stephen Smalley Re: policycoreutils patch for semanage/seobject.py Stephen Smalley Re: [PATCH] ustr cleanups (policyrep branch) Stephen Smalley Re: [PATCH 3/3] libselinux: minor updates to AVC, mapping, callbacks Stephen Smalley Re: [patch 0/4] libsemanage: genhomedircon regressions Stephen Smalley Re: [PATCH] libsepol: add user to hierarchy checker Stephen Smalley Thursday, 4 October RE: One more problem with genhomedircon replacement. Todd Miller Re: [PATCH 3/3] libselinux: minor updates to AVC, mapping, callbacks Eamon Walsh Re: [PATCH 3/3] libselinux: minor updates to AVC, mapping, callbacks Joshua Brindle [PATCH 2/3] libselinux: minor updates to AVC, mapping, callbacks Eamon Walsh [PATCH 3/3] libselinux: minor updates to AVC, mapping, callbacks Eamon Walsh One more problem with genhomedircon replacement. Daniel J Walsh Wednesday, 3 October Re: [PATCH] Improve SELinux performance when AVC misses. James Morris Re: ftpd is denied access to a dir Michael Klinosky [PATCH 1/3] libselinux: minor updates to AVC, mapping, callbacks Eamon Walsh un-escaped dots cleanup Jan-Frode Myklebust policycoreutils patch for semanage/seobject.py Daniel J Walsh Man page change for semodule -D qualifier Daniel J Walsh Re: policyd module Jan-Frode Myklebust Re: [PATCH] Improve SELinux performance when AVC misses. KaiGai Kohei Re: [PATCH] Improve SELinux performance when AVC misses. KaiGai Kohei Tuesday, 2 October Re: [RFC PATCH v3 1/2] [SELINUX] Add a capabilities bitmap to SELinux policy version 22 Paul Moore SEPostgresql doesn't work on my targeted machine Shintaro Fujiwara Re: [RFC PATCH v3 2/2] [SELINUX] Better integration between peer labeling subsystems Paul Moore Re: [RFC PATCH v3 1/2] [SELINUX] Add a capabilities bitmap to SELinux policy version 22 Eric Paris Re: [RFC PATCH v3 2/2] [SELINUX] Better integration between peer labeling subsystems Eric Paris Re: [RFC PATCH v3 2/2] [SELINUX] Better integration between peer labeling subsystems Eric Paris [RFC PATCH v3 2/2] [SELINUX] Better integration between peer labeling subsystems Paul Moore [RFC PATCH v3 1/2] [SELINUX] Add a capabilities bitmap to SELinux policy version 22 Paul Moore [RFC PATCH v3 0/2] Small changes, now available in git form Paul Moore Re: ANN: Reference Policy Release Shintaro Fujiwara Re: [PATCH] Improve SELinux performance when AVC misses. Stephen Smalley Re: [PATCH] Improve SELinux performance when AVC misses. KaiGai Kohei Re: ftpd is denied access to a dir Daniel J Walsh Monday, 1 October ftpd is denied access to a dir Michael Klinosky RE: [PATCH] ustr cleanups (policyrep branch) James Antill RE: [patch 0/4] libsemanage: genhomedircon regressions Todd Miller RE: [PATCH] ustr cleanups (policyrep branch) Todd Miller Re: [patch 0/4] libsemanage: genhomedircon regressions Daniel J Walsh file names with spaces, file contexts and matchpathcon problems Ted X Toth [ANNOUNCE] The Linux Test Project has been Released for SEPTEMBER 2007 Subrata Modak Re: problem with ftpd Christopher J. PeBenito Re: policyd module Christopher J. PeBenito Re: m4 help Christopher J. PeBenito Re: problem with ftpd Stephen Smalley [PATCH] ustr cleanups (policyrep branch) James Antill Saturday, 29 September policyd module Jan-Frode Myklebust problem with ftpd Michael Klinosky Friday, 28 September m4 help Clarkson, Mike R \(US SSA\) Re: [PATCH] Improve SELinux performance when AVC misses. James Morris Re: [PATCH] Improve SELinux performance when AVC misses. Stephen Smalley Re: [patch 0/4] libsemanage: genhomedircon regressions Stephen Smalley Re: [patch 0/4] libsemanage: genhomedircon regressions Todd C. Miller Re: [PATCH] Improve SELinux performance when AVC misses. KaiGai Kohei RE: [patch 0/4] libsemanage: genhomedircon regressions Stephen Smalley Re: [patch 0/4] libsemanage: genhomedircon regressions Daniel J Walsh RE: [patch 0/4] libsemanage: genhomedircon regressions Joshua Brindle ANN: Reference Policy Release Christopher J. PeBenito Re: [patch 0/4] libsemanage: genhomedircon regressions Daniel J Walsh RE: [patch 0/4] libsemanage: genhomedircon regressions Stephen Smalley RE: [patch 0/4] libsemanage: genhomedircon regressions Todd Miller Re: [PATCH] Improve SELinux performance when AVC misses. Stephen Smalley RE: [patch 0/4] libsemanage: genhomedircon regressions Todd Miller Re: [patch 0/4] libsemanage: genhomedircon regressions Stephen Smalley Re: [patch 0/4] libsemanage: genhomedircon regressions Stephen Smalley Re: [patch 0/4] libsemanage: genhomedircon regressions Daniel J Walsh Re: [patch 0/4] libsemanage: genhomedircon regressions Stephen Smalley Re: [patch 0/4] libsemanage: genhomedircon regressions Stephen Smalley Re: [PATCH] Improve SELinux performance when AVC misses. KaiGai Kohei Thursday, 27 September [patch 4/4] libsemanage: rebuild_file_context option Todd C. Miller Re: [RFC] /var versus /srv Karl MacMillan Re: I am concerned about putting genhomedircon changesinlibsemanage into Fedora 8. Daniel J Walsh Re: [PATCH] Improve SELinux performance when AVC misses. James Morris [patch 2/4] libsemanage: fix getpw_r usage Todd C. Miller* [patch 3/4] libsemanage: update default user Todd C. Miller [patch 1/4] libsemanage: validate homedir contexts Todd C. Miller [patch 0/4] libsemanage: genhomedircon regressions Todd C. Miller RE: I am concerned about putting genhomedircon changesinlibsemanage into Fedora 8. Stephen Smalley Re: libselinux segfault, if file_contexts file does not exist Eamon Walsh Re: I am concerned about putting genhomedircon changesinlibsemanage into Fedora 8. Daniel J Walsh libselinux segfault, if file_contexts file does not exist Daniel J Walsh Re: [RFC PATCH v2 1/2] [SELINUX] Add a capabilities bitmap to SELinux policy version 22 Paul Moore Re: [RFC PATCH v2 1/2] [SELINUX] Add a capabilities bitmap to SELinux policy version 22 Paul Moore RE: I am concerned about putting genhomedircon changesinlibsemanage into Fedora 8. Todd C. Miller Re: [RFC PATCH v2 1/2] [SELINUX] Add a capabilities bitmap to SELinux policy version 22 Joshua Brindle Re: [PATCH] checkpolicy: implement handling of unknown classesandpermissions Christopher J. PeBenito Re: I am concerned about putting genhomedircon changesinlibsemanage into Fedora 8. Joshua Brindle Re: I am concerned about putting genhomedircon changesinlibsemanage into Fedora 8. Daniel J Walsh Re: ANN: Updated SELinux core userland release Stephen Smalley Re: I am concerned about putting genhomedircon changesinlibsemanage into Fedora 8. Stephen Smalley Re: [RFC PATCH v2 1/2] [SELINUX] Add a capabilities bitmap to SELinux policy version 22 Stephen Smalley RE: I am concerned about putting genhomedircon changesinlibsemanage into Fedora 8. Stephen Smalley Wednesday, 26 September Re: [PATCH] Improve SELinux performance when AVC misses. KaiGai Kohei Re: [PATCH] Improve SELinux performance when AVC misses. KaiGai Kohei Re: I am concerned about putting genhomedircon changesinlibsemanage into Fedora 8. Daniel J Walsh RE: I am concerned about putting genhomedircon changesinlibsemanage into Fedora 8. Todd Miller Re: [RFC PATCH v2 1/2] [SELINUX] Add a capabilities bitmap to SELinux policy version 22 Joshua Brindle RE: I am concerned about putting genhomedircon changesinlibsemanage into Fedora 8. Todd Miller [RFC PATCH v2 2/2] [SELINUX] Better integration between peer labeling subsystems Paul Moore [RFC PATCH v2 1/2] [SELINUX] Add a capabilities bitmap to SELinux policy version 22 Paul Moore [RFC PATCH v2 0/2] Updated patches based on comments Paul Moore Re: I am concerned about putting genhomedircon changesinlibsemanage into Fedora 8. Daniel J Walsh RE: I am concerned about putting genhomedircon changesinlibsemanage into Fedora 8. Todd C. Miller Re: [PATCH 01/24] CRED: Introduce a COW credentials record David Howells Re: [RFC PATCH 0/2] Series short description Paul Moore Re: [RFC PATCH 0/2] Series short description Stephen Smalley Re: [RFC PATCH 0/2] Series short description Joshua Brindle Re: [RFC PATCH 0/2] Series short description Joshua Brindle Re: I am concerned about putting genhomedircon changes inlibsemanage into Fedora 8. Daniel J Walsh Re: I am concerned about putting genhomedircon changes inlibsemanage into Fedora 8. Stephen Smalley Re: I am concerned about putting genhomedircon changes inlibsemanage into Fedora 8. Stephen Smalley Re: I am concerned about putting genhomedircon changes inlibsemanage into Fedora 8. Todd C. Miller Re: [RFC PATCH 0/2] Series short description Paul Moore Re: [RFC PATCH 0/2] Series short description Joshua Brindle Re: [RFC PATCH 0/2] Series short description Stephen Smalley Re: [RFC PATCH 0/2] Series short description Paul Moore Re: [RFC PATCH 0/2] Series short description Joshua Brindle Re: [RFC PATCH 0/2] Series short description Paul Moore Re: [RFC PATCH 2/2] [SELINUX] Better integration between peer labeling subsystems Paul Moore Re: [PATCH] fstools.te needs corecmd_exec_bin Shintaro Fujiwara Re: [RFC PATCH 2/2] [SELINUX] Better integration between peer labeling subsystems Paul Moore Re: I am concerned about putting genhomedircon changes in libsemanage into Fedora 8. Stephen Smalley Re: I am concerned about putting genhomedircon changes in libsemanage into Fedora 8. Stephen Smalley Re: I am concerned about putting genhomedircon changes in libsemanage into Fedora 8. Joshua Brindle Re: I am concerned about putting genhomedircon changes in libsemanage into Fedora 8. Daniel J Walsh Re: I am concerned about putting genhomedircon changes in libsemanage into Fedora 8. Stephen Smalley Re: I am concerned about putting genhomedircon changes in libsemanage into Fedora 8. Karl MacMillan Re: I am concerned about putting genhomedircon changes in libsemanage into Fedora 8. Stephen Smalley Re: ANN: Updated SELinux core userland release Daniel J Walsh Re: [PATCH 2/3] CRED: Split the task security data and move part of it into struct cred Casey Schaufler Re: I am concerned about putting genhomedircon changes in libsemanage into Fedora 8. Joshua Brindle [PATCH 22/24] AFS: Implement shared-writable mmap David Howells [PATCH 24/24] FS-Cache: Make kAFS use FS-Cache David Howells [PATCH 23/24] AF_RXRPC: Save the operation ID for debugging David Howells [PATCH 21/24] AFS: Improve handling of a rejected writeback David Howells Re: [PATCH 2/3] CRED: Split the task security data and move part of it into struct cred Stephen Smalley [PATCH 20/24] AFS: Add a function to excise a rejected write from the pagecache David Howells [PATCH 16/24] NFS: Use local caching David Howells [PATCH 18/24] NFS: Display local caching state David Howells [PATCH 17/24] NFS: Configuration and mount option changes to enable local caching on NFS David Howells [PATCH 19/24] AFS: Add TestSetPageError() David Howells [PATCH 14/24] CacheFiles: Export things for CacheFiles David Howells [PATCH 13/24] CacheFiles: Permit the page lock state to be monitored David Howells [PATCH 12/24] CacheFiles: Add a hook to write a single page of data to an inode David Howells [PATCH 11/24] CacheFiles: Add missing copy_page export for ia64 David Howells [PATCH 09/24] FS-Cache: Provide an add_wait_queue_tail() function David Howells [PATCH 07/24] FS-Cache: Release page->private after failed readahead David Howells [PATCH 05/24] CRED: Fix up the other credentials references David Howells [PATCH 08/24] FS-Cache: Recruit a couple of page flags for cache management David Howells [PATCH 06/24] CRED: Request a credential record for a kernel service David Howells [PATCH 04/24] CRED: Move the effective capabilities into the cred struct David Howells [PATCH 02/24] CRED: Split the task security data and move part of it into struct cred David Howells [PATCH 03/24] CRED: Alter security_task_getsecid() and similar to return both task SIDs David Howells [PATCH 00/24] Introduce credential record David Howells Re: [PATCH] fstools.te needs corecmd_exec_bin Christopher J. PeBenito Re: puzzles about hidden_def and hidden_proto Stephen Smalley Re: ANN: Updated SELinux core userland release Christopher J. PeBenito Re: I am concerned about putting genhomedircon changes in libsemanage into Fedora 8. Daniel J Walsh Re: [RFC PATCH 0/2] Series short description Stephen Smalley Re: ANN: Updated SELinux core userland release Stephen Smalley Re: [PATCH 2/3] CRED: Split the task security data and move part of it into struct cred David Howells Re: [RFC PATCH 0/2] Series short description Joshua Brindle Re: ANN: Updated SELinux core userland release Christopher J. PeBenito Re: [RFC PATCH 2/2] [SELINUX] Better integration between peer labeling subsystems Stephen Smalley RE: variables for file context files Christopher J. PeBenito Re: turning on optional_policy Christopher J. PeBenito puzzles about hidden_def and hidden_proto Ken YANG [PATCH] Improve SELinux performance when AVC misses. KaiGai Kohei RE: variables for file context files Clarkson, Mike R \(US SSA\) turning on optional_policy Clarkson, Mike R \(US SSA\) Tuesday, 25 September Re: [RFC PATCH 0/2] Series short description Paul Moore Re: [RFC PATCH 0/2] Series short description Joshua Brindle Re: [RFC PATCH 2/2] [SELINUX] Better integration between peer labeling subsystems Paul Moore Re: [RFC PATCH 0/2] Series short description Paul Moore Re: [RFC PATCH 2/2] [SELINUX] Better integration between peer labeling subsystems James Morris Re: [RFC PATCH 0/2] Series short description James Morris Re: [RFC PATCH 2/2] [SELINUX] Better integration between peer labeling subsystems Paul Moore Re: [RFC PATCH 2/2] [SELINUX] Better integration between peer labeling subsystems Eric Paris Re: [RFC PATCH 1/2] [SELINUX] Add a functionality version number Paul Moore Re: [RFC PATCH 1/2] [SELINUX] Add a functionality version number Eric Paris [RFC PATCH 2/2] [SELINUX] Better integration between peer labeling subsystems Paul Moore [RFC PATCH 1/2] [SELINUX] Add a functionality version number Paul Moore [RFC PATCH 0/2] Series short description Paul Moore ANN: Updated SELinux core userland release Stephen Smalley Re: [PATCH 04/22] CRED: Request a credential record for a kernel service David Howells Re: [patch] Tuning avtab to reduce memory usage Stephen Smalley Re: [patch] Tuning avtab to reduce memory usage Paul Moore Re: [patch] Tuning avtab to reduce memory usage KaiGai Kohei Monday, 24 September [PATCH] libsepol: add user to hierarchy checker Todd C. Miller Re: [RFC] [Patch 4/4] integrity: SELinux LIM calls Mimi Zohar Re: [PATCH 14/22] NFS: Use local caching Peter Staubach Re: Patch for libselinux to build correctly on Sparc. Stephen Smalley Re: Old libselinux bug. We are leaking a file descriptor. Stephen Smalley Patch for libselinux to build correctly on Sparc. Daniel J Walsh Re: [PATCH 2/3] CRED: Split the task security data and move part of it into struct cred David Howells Re: [PATCH 2/3] CRED: Split the task security data and move part of it into struct cred Serge E. Hallyn Re: [PATCH 2/3] CRED: Split the task security data and move part of it into struct cred Serge E. Hallyn Old libselinux bug. We are leaking a file descriptor. Daniel J Walsh Re: concept of a permissive domain Karl MacMillan Re: [PATCH 2/3] CRED: Split the task security data and move part of it into struct cred Stephen Smalley Re: [PATCH] checkpolicy: implement handling of unknown classes andpermissions Stephen Smalley Re: chcon -l permission Joshua Brindle Re: [PATCH] checkpolicy: implement handling of unknown classes andpermissions Joshua Brindle Re: [refpolicy] minor comment patch for cron.if Christopher J. PeBenito Re: [PATCH] checkpolicy: implement handling of unknown classes andpermissions Stephen Smalley Re: chcon -l permission Christopher J. PeBenito Re: [PATCH] checkpolicy: implement handling of unknown classes andpermissions Christopher J. PeBenito Sunday, 23 September Re: [PATCH -v4] kernel: selinux: policy selectable handling of unknown classes and perms James Morris Re: [PATCH -v4] kernel: selinux: policy selectable handling of unknown classes and perms James Morris Re: [PATCH -v4] kernel: selinux: policy selectable handling of unknown classes and perms Eric Paris Re: [PATCH -v4] kernel: selinux: policy selectable handling of unknown classes and perms James Morris [refpolicy] minor comment patch for cron.if Stefan Schulze Frielinghaus Saturday, 22 September chcon -l permission Clarkson, Mike R \(US SSA\) Friday, 21 September Re: [PATCH 14/22] NFS: Use local caching David Howells Re: [PATCH 14/22] NFS: Use local caching David Howells Re: [PATCH 00/22] Introduce credential record David Howells Re: [PATCH 11/22] CacheFiles: Permit the page lock state to be monitored David Howells Re: [PATCH 10/22] CacheFiles: Add a hook to write a single page of data to an inode David Howells Re: [PATCH -v4] kernel: selinux: policy selectable handling of unknown classes and perms Stephen Smalley Re: [RFC] [PATCH 4/4] SELinux changes Paul Moore Thursday, 20 September Re: [PATCH 3/3] CRED: Move the effective capabilities into the cred struct Andrew Morgan Friday, 21 September [PATCH 02/22] CRED: Split the task security data and move part of it into struct cred David Howells [PATCH 03/22] CRED: Move the effective capabilities into the cred struct David Howells [PATCH 05/22] FS-Cache: Release page->private after failed readahead David Howells [PATCH 06/22] FS-Cache: Recruit a couple of page flags for cache management David Howells [PATCH 04/22] CRED: Request a credential record for a kernel service David Howells [PATCH 09/22] CacheFiles: Add missing copy_page export for ia64 David Howells Re: [PATCH 00/22] Introduce credential record David Howells [PATCH 07/22] FS-Cache: Provide an add_wait_queue_tail() function David Howells Re: [RFC] [PATCH 3/4] Core networking changes Paul Moore [PATCH -v2] SELinux: Add get, set, and cloning of superblock security information Eric Paris Re: [patch] Tuning avtab to reduce memory usage Stephen Smalley Re: [RFC] [PATCH 2/4] Define new LSM hooks Paul Moore Re: [RFC] [PATCH 1/4] Label-based flow control of traffic Paul Moore Re: [PATCH] checkpolicy: implement handling of unknown classes andpermissions Stephen Smalley Re: [PATCH] checkpolicy: implement handling of unknown classes andpermissions Christopher J. PeBenito [PATCH -v4] kernel: selinux: policy selectable handling of unknown classes and perms Eric Paris [PATCH -v3] kernel: selinux: policy selectable handling of unknown classes and perms Eric Paris Re: [PATCH 00/22] Introduce credential record Casey Schaufler Re: [PATCH 00/22] Introduce credential record David Howells Memory and temporary file wiping msm_at_gwu.edu Re: [PATCH 00/22] Introduce credential record Casey Schaufler Re: [RFC] [Patch 4/4] integrity: SELinux LIM calls Stephen Smalley [PATCH 00/22] Introduce credential record David Howells [PATCH 20/22] AFS: Implement shared-writable mmap David Howells [PATCH 19/22] AFS: Improve handling of a rejected writeback David Howells [PATCH 11/22] CacheFiles: Permit the page lock state to be monitored David Howells [PATCH 22/22] FS-Cache: Make kAFS use FS-Cache David Howells [PATCH 18/22] AFS: Add a function to excise a rejected write from the pagecache David Howells [PATCH 14/22] NFS: Use local caching David Howells [PATCH 17/22] AFS: Add TestSetPageError() David Howells [PATCH 21/22] AF_RXRPC: Save the operation ID for debugging David Howells [PATCH 10/22] CacheFiles: Add a hook to write a single page of data to an inode David Howells [PATCH 15/22] NFS: Configuration and mount option changes to enable local caching on NFS David Howells [PATCH 12/22] CacheFiles: Export things for CacheFiles David Howells [PATCH 16/22] NFS: Display local caching state David Howells Re: [RFC]integrity: SELinux patch Mimi Zohar [RFC] [Patch 4/4] integrity: SELinux LIM calls Mimi Zohar [RFC] [Patch 2/4] integrity: IMA as an integrity service provider Mimi Zohar [RFC] [Patch 3/4] integrity: TPM internal kernel interface Mimi Zohar [RFC] [Patch 1/4] integrity: LIM api, hooks, and dummy provider Mimi Zohar Re: [RFC]integrity: SELinux patch Mimi Zohar Re: [PATCH -v2] kernel: selinux: policy selectable handling of unknown classes and perms Eric Paris Re: execmod permission Stephen Smalley Re: execmod permission Ken YANG Thursday, 20 September execmod permission Clarkson, Mike R \(US SSA\) Re: [PATCH -v2] kernel: selinux: policy selectable handling of unknown classes and perms Eamon Walsh Re: variables for file context files rob myers Re: [PATCH -v2] kernel: selinux: policy selectable handling of unknown classes and perms Eric Paris Re: [RFC]integrity: SELinux patch James Morris Re: variables for file context files Stephen Smalley Re: [RFC] [PATCH 4/4] SELinux changes Paul Moore RE: [RFC] [PATCH 4/4] SELinux changes Chad Hanson Re: [RFC] [PATCH 4/4] SELinux changes Paul Moore Re: [PATCH 2/3] CRED: Split the task security data and move part of it into struct cred David Howells Re: [PATCH 2/3] CRED: Split the task security data and move part of it into struct cred David Howells variables for file context files Clarkson, Mike R \(US SSA\) Re: [PATCH 2/3] CRED: Split the task security data and move part of it into struct cred Casey Schaufler Re: [PATCH 3/3] CRED: Move the effective capabilities into the cred struct Casey Schaufler Re: [RFC] [PATCH 4/4] SELinux changes Paul Moore Re: concept of a permissive domain Joshua Brindle RE: [RFC] [PATCH 4/4] SELinux changes Venkatesh Yekkirala Re: concept of a permissive domain Joshua Brindle Re: [RFC]integrity: SELinux patch Stephen Smalley Re: [PATCH 3/3] CRED: Move the effective capabilities into the cred struct David Howells Re: [patch] Tuning avtab to reduce memory usage KaiGai Kohei Wednesday, 19 September Re: [RFC]integrity: SELinux patch Mimi Zohar Re: [RFC] [PATCH 4/4] SELinux changes Paul Moore Re: [PATCH 2/3] CRED: Split the task security data and move part of it into struct cred David Howells Re: [RFC] [PATCH 4/4] SELinux changes James Morris Re: [RFC] [PATCH 4/4] SELinux changes Paul Moore Re: [RFC] [PATCH 4/4] SELinux changes Paul Moore RE: [RFC] [PATCH 4/4] SELinux changes Venkatesh Yekkirala RE: [RFC] [PATCH 4/4] SELinux changes Venkatesh Yekkirala Re: [PATCH] SELinux: whitespace fun James Morris Re: [RFC] [PATCH 4/4] SELinux changes James Morris Re: [RFC]integrity: SELinux patch Stephen Smalley Re: [patch] libsemanage, semodule: Improve error reporting Stephen Smalley Re: [RFC]integrity: SELinux patch Mimi Zohar [patch] libsemanage, semodule: Improve error reporting Stephen Smalley Re: [PATCH 2/3] CRED: Split the task security data and move part of it into struct cred Casey Schaufler Re: Change default error handling in libselinux matchpathcon to use syslog instead of stderr. Eamon Walsh Re: concept of a permissive domain Stephen Smalley Re: concept of a permissive domain Eric Paris Re: concept of a permissive domain Martin Orr [PATCH 1/3] CRED: Introduce a COW credentials record David Howells [PATCH 3/3] CRED: Move the effective capabilities into the cred struct David Howells [PATCH 2/3] CRED: Split the task security data and move part of it into struct cred David Howells [PATCH 0/3] Introduce credential record David Howells Re: [RFC] [PATCH 4/4] SELinux changes Stephen Smalley Re: concept of a permissive domain Chad Sellers Re: Change default error handling in libselinux matchpathcon to use syslog instead of stderr. Stephen Smalley Re: concept of a permissive domain Daniel J Walsh Tuesday, 18 September Re: [patch] Tuning avtab to reduce memory usage Paul Moore Re: concept of a permissive domain Chad Sellers Re: [PATCH] fstools.te needs corecmd_exec_bin Shintaro Fujiwara Re: [PATCH -v2] kernel: selinux: policy selectable handling of unknown classes and perms Eamon Walsh Re: concept of a permissive domain Joshua Brindle Re: [PATCH] libsepol: support the handle_unknown config flag Daniel J Walsh Re: concept of a permissive domain Stephen Smalley Re: [PATCH] libsepol: support the handle_unknown config flag Eric Paris Re: [PATCH] libsepol: support the handle_unknown config flag Stephen Smalley Re: Change default error handling in libselinux matchpathcon to use syslog instead of stderr. Daniel J Walsh Re: [PATCH] checkpolicy: implement handling of unknown classes and permissions Stephen Smalley Re: [PATCH]dpkg.if lacking dpkg_var_lib_t Christopher J. PeBenito Re: Change default error handling in libselinux matchpathcon to use syslog instead of stderr. Daniel J Walsh Re: [PATCH] libsepol: support the handle_unknown config flag Stephen Smalley Re: [patch] libselinux, setfiles: fix selabel option flag setting Eamon Walsh Re: rfc: kernel: special enforcing on suid and setgid chmod Daniel J Walsh [patch] libselinux, setfiles: fix selabel option flag setting Stephen Smalley Re: [PATCH] fstools.te needs corecmd_exec_bin Christopher J. PeBenito Re: Change default error handling in libselinux matchpathcon to use syslog instead of stderr. Stephen Smalley Re: Change default error handling in libselinux matchpathcon to use syslog instead of stderr. Joshua Brindle [PATCH] fstools.te needs corecmd_exec_bin Shintaro Fujiwara [RFC] [PATCH 4/4] SELinux changes Venkat Yekkirala [RFC] [PATCH 1/4] Label-based flow control of traffic Venkat Yekkirala [RFC] [PATCH 3/4] Core networking changes Venkat Yekkirala [RFC] [PATCH 2/4] Define new LSM hooks Venkat Yekkirala Re: [PATCH -v2] kernel: selinux: policy selectable handling of unknown classes and perms Stephen Smalley Re: Change default error handling in libselinux matchpathcon to use syslog instead of stderr. Stephen Smalley Re: [patch] Tuning avtab to reduce memory usage Stephen Smalley Re: Change default error handling in libselinux matchpathcon to use syslog instead of stderr. Joshua Brindle Re: rfc: kernel: special enforcing on suid and setgid chmod Stephen Smalley Re: Change default error handling in libselinux matchpathcon to use syslog instead of stderr. Stephen Smalley Re: [PATCH -v2] kernel: selinux: policy selectable handling of unknown classes and perms Eric Paris Re: [PATCH -v2] kernel: selinux: policy selectable handling of unknown classes and perms Stephen Smalley Change default error handling in libselinux matchpathcon to use syslog instead of stderr. Daniel J Walsh Re: alsactl policy Martin Orr [PATCH]dpkg.if lacking dpkg_var_lib_t Shintaro Fujiwara Re: [POLICYREP] [Patch 0/5] remove modular policy support for policy rep branch Joshua Brindle Re: [PATCH] SELinux: whitespace fun James Morris Monday, 17 September Re: [PATCH] selinux: Improving SELinux read/write performance James Morris Re: rfc: kernel: special enforcing on suid and setgid chmod Daniel J Walsh Re: [PATCH] selinux: Improving SELinux read/write performance Stephen Smalley Re: rfc: kernel: special enforcing on suid and setgid chmod Stephen Smalley rfc: kernel: special enforcing on suid and setgid chmod Eric Paris Re: [PATCH]some interfaces in userdomain.if lacking user_home_dir_t . Christopher J. PeBenito Re: [refpolicy] updated awstats policy Christopher J. PeBenito Re: [refpolicy] policy & patch for bitlbee Christopher J. PeBenito Re: alsactl policy Daniel J Walsh Sunday, 16 September alsactl policy Martin Orr Saturday, 15 September [PATCH]some interfaces in userdomain.if lacking user_home_dir_t . Shintaro Fujiwara Friday, 14 September Re: [refpolicy] apt and dpkg changes Stefan Schulze Frielinghaus Re: [refpolicy] apt and dpkg changes Christopher J. PeBenito Re: concept of a permissive domain Karl MacMillan This seems like a reasonable request, Not sure how to do this with current toolchain? Daniel J Walsh Re: concept of a permissive domain Joshua Brindle Re: concept of a permissive domain James Carter Re: [refpolicy] apt and dpkg changes Christopher J. PeBenito Thursday, 13 September Wrappers to load bitmaps (Re: [PATCH] Improve ebitmap scanning) KaiGai Kohei [PATCH] selinux: Improving SELinux read/write performance Yuichi Nakamura Re: [RFC]selinux: Improving SELinux read/write performance Yuichi Nakamura Re: concept of a permissive domain Eric Paris Re: [PATCH] Improve ebitmap scanning (Re: [patch] Tuning avtab to reduce memory usage) Paul Moore Re: concept of a permissive domain Karl MacMillan Re: concept of a permissive domain Stephen Smalley Re: concept of a permissive domain Daniel J Walsh Re: concept of a permissive domain Karl MacMillan [PATCH -v2] kernel: selinux: policy selectable handling of unknown classes and perms Eric Paris Re: concept of a permissive domain Stephen Smalley Re: concept of a permissive domain Karl MacMillan Re: concept of a permissive domain Karl MacMillan Re: concept of a permissive domain Stephen Smalley Re: concept of a permissive domain Stephen Smalley Re: concept of a permissive domain Stephen Smalley Re: concept of a permissive domain Eric Paris Re: concept of a permissive domain Stephen Smalley Re: [PATCH] SELinux: whitespace fun Eric Paris Re: concept of a permissive domain Karl MacMillan Re: [PATCH] SELinux: whitespace fun Stephen Smalley Re: [PATCH] checkpolicy: implement handling of unknown classes and permissions Stephen Smalley Re: concept of a permissive domain Stephen Smalley Re: Inherited tpe definition Karl MacMillan Re: [RFC]selinux: Improving SELinux read/write performance Stephen Smalley Re: I have put my latest policy patch up on http://dwalsh.fedorapeople.org/20070912/ Daniel J Walsh Re: [PATCH] Improve ebitmap scanning (Re: [patch] Tuning avtab to reduce memory usage) Stephen Smalley Re: I have put my latest policy patch up on http://dwalsh.fedorapeople.org/20070912/ Stefan Schulze Frielinghaus Re: Centos5 setroubleshoot failure Jan-Frode Myklebust Wednesday, 12 September [PATCH] Improve ebitmap scanning (Re: [patch] Tuning avtab to reduce memory usage) KaiGai Kohei I have put my latest policy patch up on http://dwalsh.fedorapeople.org/20070912/ Daniel J Walsh Re: [patch] Tuning avtab to reduce memory usage Paul Moore [PATCH] Small cleanup for 2.6.24 and a git tree test Paul Moore [PATCH] CIPSO: remove duplicated code in the cipso_v4__getattr() functions Paul Moore* Re: Networking Patch (outline) Paul Moore RE: Networking Patch (outline) Venkatesh Yekkirala Re: Inherited tpe definition Karl MacMillan Inherited tpe definition Karl MacMillan Type / attribute require ambiguity Karl MacMillan Re: getfilecon return code Stephen Smalley Class/permission discovery Stephen Smalley Re: [PATCH] refpolicy: services_rhgb changes rhgb searches /root Christopher J. PeBenito Re: [PATCH] refpolicy: services_procmail changes - Minor procmail fixes Christopher J. PeBenito Re: [PATCH] refpolicy: system_logging changes Christopher J. PeBenito Re: Centos5 setroubleshoot failure Daniel J Walsh Re: concept of a permissive domain Daniel J Walsh Re: concept of a permissive domain Karl MacMillan Re: concept of a permissive domain Karl MacMillan Centos5 setroubleshoot failure Jan-Frode Myklebust Re: [RFC]selinux: Improving SELinux read/write performance Yuichi Nakamura Tuesday, 11 September Re: [patch] Tuning avtab to reduce memory usage KaiGai Kohei Re: concept of a permissive domain Joshua Brindle Re: concept of a permissive domain Eric Paris Re: concept of a permissive domain Karl MacMillan Re: concept of a permissive domain Daniel J Walsh Re: Networking Patch (outline) Paul Moore Re: [PATCH] refpolicy: system_locallogin changes Christopher J. PeBenito Re: Lots of fixes for postfix Christopher J. PeBenito Re: [PATCH] refpolicy: services_inetd changes Christopher J. PeBenito concept of a permissive domain Eric Paris selinux introduction Mrinal Shanker Re: Role Creation Wizard Christopher J. PeBenito Re: Role Creation Wizard Stephen Smalley Re: [PATCH] refpolicy: mailscanner policy Christopher J. PeBenito RE: Networking Patch (outline) Venkatesh Yekkirala Monday, 10 September Re: error with polyinstantiation and mcstransd Linda Knippers RE: audit2allow module generation Karl MacMillan error with polyinstantiation and mcstransd Clarkson, Mike R \(US SSA\) RE: audit2allow module generation Anand Patel Re: [RFC]selinux: Improving SELinux read/write performance Stephen Smalley Re: apol on source policy Christopher J. PeBenito Re: [refpolicy] dovecot: handling of hard links Christopher J. PeBenito Sunday, 9 September Re: [RFC]selinux: Improving SELinux read/write performance Yuichi Nakamura Saturday, 8 September [refpolicy] exim policy Devin Carraway Friday, 7 September apol on source policy Joe Nall RE: Kernel panic when using refpolicy Kim Lawson-Jenkins RE: Kernel panic when using refpolicy Brian M. Williams Re: Kernel panic when using refpolicy Christopher J. PeBenito Re: Kernel panic when using refpolicy Eric Paris Kernel panic when using refpolicy Kim Lawson-Jenkins Re: Graphical depiction of TE policy J. Tang Re: Labelling a new port Ted X Toth Re: [refpolicy] dovecot: handling of hard links Stefan Schulze Frielinghaus Re: [patch 0/4] libsemanage: genhomedircon replacement Karl MacMillan Re: Graphical depiction of TE policy Karl MacMillan Re: [PATCH] refpolicy: apps_ada changes add ada_run policy for unconfined user Christopher J. PeBenito Re: [PATCH] refpolicy: apps_wine changes add run interface Christopher J. PeBenito Re: [PATCH] refpolicy: services_audioentropy changes Christopher J. PeBenito Re: [PATCH] refpolicy: services_automount changes Christopher J. PeBenito Re: [PATCH] refpolicy: services_dbus changes Christopher J. PeBenito Re: [PATCH] refpolicy: services_lpd changes New interface for samba Christopher J. PeBenito Re: Graphical depiction of TE policy Joe Nall Re: Graphical depiction of TE policy Dave Sugar Re: [refpolicy] dovecot: handling of hard links Christopher J. PeBenito Re: [refpolicy] dovecot: handling of hard links Stefan Schulze Frielinghaus Graphical depiction of TE policy Joe Nall Thursday, 6 September Re: [patch 0/4] libsemanage: genhomedircon replacement Daniel J Walsh Re: [PATCH] 1/2 SELinux: Add get, set, and cloning of superblock security information Stephen Smalley Re: [PATCH] 1/2 SELinux: Add get, set, and cloning of superblock security information Eric Paris Re: [refpolicy] selinuxutils (semodule) Christopher J. PeBenito Re: [refpolicy] terminal.if patch Christopher J. PeBenito Re: [patch 0/4] libsemanage: genhomedircon replacement Todd C. Miller Re: [refpolicy] dovecot: handling of hard links Christopher J. PeBenito Re: [patch 0/4] libsemanage: genhomedircon replacement Karl MacMillan Re: [patch 0/4] libsemanage: genhomedircon replacement Stephen Smalley Re: [PATCH] 1/2 SELinux: Add get, set, and cloning of superblock security information Stephen Smalley Re: [PATCH] refpolicy: services_apcupsd changes Christopher J. PeBenito Re: [PATCH] refpolicy: system_raid changes Christopher J. PeBenito Re: [PATCH] refpolicy: services_spamassassin changes Christopher J. PeBenito Re: [PATCH] refpolicy: services_rwho changes rwho uses a log file Christopher J. PeBenito Re: [PATCH] refpolicy: services_networkmanager changes Christopher J. PeBenito Re: [PATCH] refpolicy: services_openvpn changes Christopher J. PeBenito [PATCH] checkpolicy: implement handling of unknown classes and permissions Eric Paris Re: Networking Patch (outline) Paul Moore [PATCH] SELinux: whitespace fun Eric Paris Re: [PATCH] 1/2 SELinux: Add get, set, and cloning of superblock security information Eric Paris RE: Networking Patch (outline) Venkatesh Yekkirala Re: [PATCH] 1/2 SELinux: Add get, set, and cloning of superblock security information Casey Schaufler Re: [PATCH] 1/2 SELinux: Add get, set, and cloning of superblock security information Eric Paris Re: [PATCH] 1/2 SELinux: Add get, set, and cloning of superblock security information Casey Schaufler Re: [PATCH] refpolicy: system_hostname changes Christopher J. PeBenito Re: [RFC]selinux: Improving SELinux read/write performance Stephen Smalley Re: tunable and if-else conditional Stefan Schulze Frielinghaus Re: tunable and if-else conditional Christopher J. PeBenito Re: [PATCH] libselinux: fix rpm_execcon in SWIG bindings Daniel J Walsh [RFC]selinux: Improving SELinux read/write performance Yuichi Nakamura Re: tunable and if-else conditional Stefan Schulze Frielinghaus Wednesday, 5 September Re: Networking Patch (outline) Paul Moore [PATCH] 1/2 SELinux: Add get, set, and cloning of superblock security information Eric Paris [PATCH] 2/2 NFS/SELinux: Make NFSv3 explicitly set its superblock security options Eric Paris Role Creation Wizard Daniel J Walsh [PATCH] libselinux: fix rpm_execcon in SWIG bindings James Athey Re: [PATCH] refpolicy: system_udev changes including brctl policy. Mostly xen related Christopher J. PeBenito Re: tunable and if-else conditional Christopher J. PeBenito tunable and if-else conditional Stefan Schulze Frielinghaus Re: [RFC]Tuning selinux_file_permission Yuichi Nakamura Re: [RFC]Tuning selinux_file_permission Yuichi Nakamura Re: [PATCH] refpolicy: admin_vbetool changes Christopher J. PeBenito Re: [PATCH] refpolicy: services_hal changes Christopher J. PeBenito Re: [PATCH] refpolicy: services_clamav changes Christopher J. PeBenito Re: [PATCH] refpolicy: admin_bootloader changes Christopher J. PeBenito Re: [RFC]Tuning selinux_file_permission Paul Moore Tuesday, 4 September Re: [RFC]integrity: SELinux patch Steve Grubb Re: [RFC]integrity: SELinux patch Mimi Zohar Re: About the polgengui in FC7 Daniel J Walsh Re: [POLICYREP] [Patch 0/2] Add MLS support to policy rep branch Joshua Brindle Re: [PATCH] refpolicy: admin_readahead changes Christopher J. PeBenito Re: [PATCH] refpolicy: admin_usermanage changes Christopher J. PeBenito Re: [PATCH] refpolicy: apps_loadkeys changes Christopher J. PeBenito Re: [PATCH] refpolicy: services_setroubleshoot changes Christopher J. PeBenito Re: [PATCH] refpolicy: system_netlabel changes Christopher J. PeBenito [refpolicy] apcupsd request for comments Stefan Schulze Frielinghaus [refpolicy] terminal.if patch Stefan Schulze Frielinghaus Re: [RFC][PATCH] libselinux: refactored SWIG bindings Daniel J Walsh Re: [RFC]Tuning selinux_file_permission Stephen Smalley Re: Get source and destination info Stephen Smalley Re: [RFC]Tuning selinux_file_permission Stephen Smalley Re: SECMARK Stephen Smalley Re: Time to remove compat_net? Paul Moore Re: About the polgengui in FC7 Ian jonhson Monday, 3 September Re: Time to remove compat_net? Joshua Brindle [PATCH] Expand sepolgen parser to parse all modules Karl MacMillan Re: [PATCH] Suppress rule generation for dontaudit rules Karl MacMillan RE: audit2allow module generation Karl MacMillan [ANN] SE-PostgreSQL 8.2.4-1.0 Released KaiGai Kohei Re: Time to remove compat_net? Karl MacMillan Get source and destination info shahbaz khan [RFC]Tuning selinux_file_permission Yuichi Nakamura Sunday, 2 September [refpolicy] updated awstats policy Stefan Schulze Frielinghaus Saturday, 1 September SECMARK shahbaz khan Friday, 31 August Re: Networking Patch (outline) Paul Moore Networking Patch (outline) Venkat Yekkirala Re: SELinux security and passed file descriptors Mikel L. Matthews Re: SELinux security and passed file descriptors Casey Schaufler Re: SELinux security and passed file descriptors James Antill Re: SELinux security and passed file descriptors Stephen Smalley Re: use the OS functionality for reading Ulrich Drepper Re: use the OS functionality for reading Ulrich Drepper Re: SELinux security and passed file descriptors David Howells Re: [RFC]integrity: SELinux patch Mimi Zohar Re: use the OS functionality for reading Stephen Smalley Re: About the polgengui in FC7 Daniel J Walsh [ANNOUNCE] The Linux Test Project has been Released for AUGUST 2007 Subrata Modak Thursday, 30 August [PATCH][RFC] V3 Remove SELinux dependencies from linux-audit via LSM Casey Schaufler Re: About the polgengui in FC7 Ian jonhson Re: [RFC]integrity: SELinux patch Serge E. Hallyn Re: [RFC]integrity: SELinux patch Serge E. Hallyn Re: use the OS functionality for reading Stephen Smalley Re: Time to remove compat_net? Paul Moore Re: Backwards compatibility (proposal for a new compat_net like flag) Paul Moore Re: Time to remove compat_net? Stephen Smalley Re: Backwards compatibility (proposal for a new compat_net like flag) Stephen Smalley Time to remove compat_net? Paul Moore Backwards compatibility (proposal for a new compat_net like flag) Paul Moore Re: ANN: SELinux Policy IDE (SLIDE) version 1.2 Dave Sugar Re: SELinux security and passed file descriptors Stephen Smalley Re: how to run the pam_selinux_check to test SELINUX Daniel J Walsh SELinux security and passed file descriptors David Howells Re: [PATCH]interface name of certwatch_run in admin layer Christopher J. PeBenito Re: [RFC][selinux] Tuning SELinux permission check Stephen Smalley Re: [RFC][selinux] Tuning SELinux permission check Yuichi Nakamura RE: audit2allow module generation Anand Patel [PATCH]interface name of certwatch_run in admin layer Shintaro Fujiwara Re: Where can I chek refpolicy recent version? Stephen Smalley Where can I chek refpolicy recent version? Shintaro Fujiwara Re: [RFC][selinux] Tuning SELinux permission check Stephen Smalley Re: [RFC][selinux] Tuning SELinux permission check Stephen Smalley [RFC][selinux] Tuning SELinux permission check Yuichi Nakamura Wednesday, 29 August how to run the pam_selinux_check to test SELINUX Ian jonhson Re: [RFC 0/5] Static/fallback external labels for NetLabel Paul Moore Tuesday, 28 August catch errors Ulrich Drepper libsepol optimization Ulrich Drepper use the OS functionality for reading Ulrich Drepper Wednesday, 29 August Re: [RFC 0/5] Static/fallback external labels for NetLabel Paul Moore Re: [RFC 0/5] Static/fallback external labels for NetLabel Joshua Brindle RE: [RFC 0/5] Static/fallback external labels for NetLabel Venkat Yekkirala RE: [RFC 0/5] Static/fallback external labels for NetLabel Stephen Smalley Re: [RFC 0/5] Static/fallback external labels for NetLabel Joe Nall RE: [RFC 0/5] Static/fallback external labels for NetLabel Venkat Yekkirala Re: [RFC 0/5] Static/fallback external labels for NetLabel Joshua Brindle RE: [RFC 0/5] Static/fallback external labels for NetLabel Venkat Yekkirala Re: [RFC 0/5] Static/fallback external labels for NetLabel Paul Moore Re: [RFC 0/5] Static/fallback external labels for NetLabel Joshua Brindle Re: [RFC 0/5] Static/fallback external labels for NetLabel Joshua Brindle Re: [PATCH] Suppress rule generation for dontaudit rules Stephen Smalley Re: [RFC 0/5] Static/fallback external labels for NetLabel Paul Moore Re: [RFC]integrity: SELinux patch Mimi Zohar Re: [RFC 0/5] Static/fallback external labels for NetLabel Joe Nall Re: [RFC]integrity: SELinux patch Joshua Brindle Re: [RFC 0/5] Static/fallback external labels for NetLabel Joshua Brindle Re: Policy server Joshua Brindle Tuesday, 28 August Re: [RFC 0/5] Static/fallback external labels for NetLabel Joshua Brindle Re: ANN: SELinux Policy IDE (SLIDE) version 1.2 Ken YANG Re: [RFC 0/5] Static/fallback external labels for NetLabel Joshua Brindle [RFC][Patch 3/3]integrity:TPM internel kernel interface Mimi Zohar [RFC][Patch 2/3]integrity: IMA as an integrity service provider Mimi Zohar [RFC][PATCH 1/3]integrity: API, hooks, placement and dummy provider Mimi Zohar integrity.te Mimi Zohar [RFC]integrity: SELinux patch Mimi Zohar Re: [RFC 0/5] Static/fallback external labels for NetLabel Joe Nall Policy server shahbaz khan Re: [RFC 0/5] Static/fallback external labels for NetLabel Joshua Brindle Re: [RFC 0/5] Static/fallback external labels for NetLabel Paul Moore Re: [RFC 0/5] Static/fallback external labels for NetLabel Paul Moore Re: [RFC 0/5] Static/fallback external labels for NetLabel Paul Moore Re: [RFC 0/5] Static/fallback external labels for NetLabel Stephen Smalley Re: [RFC 0/5] Static/fallback external labels for NetLabel Joe Nall Re: [RFC 0/5] Static/fallback external labels for NetLabel Paul Moore Re: [RFC 0/5] Static/fallback external labels for NetLabel Paul Moore Re: [RFC 0/5] Static/fallback external labels for NetLabel Paul Moore RE: [RFC 0/5] Static/fallback external labels for NetLabel Venkat Yekkirala Re: [RFC 0/5] Static/fallback external labels for NetLabel Darrel Goeddel Re: [RFC 0/5] Static/fallback external labels for NetLabel Darrel Goeddel RE: Looks like we have a 64 bit problem on Rawhide. Stephen Smalley RE: Looks like we have a 64 bit problem on Rawhide. Todd Miller Re: [patch 0/4] libsemanage: genhomedircon replacement Daniel J Walsh Re: [RFC 0/5] Static/fallback external labels for NetLabel Joe Nall RE: [RFC 0/5] Static/fallback external labels for NetLabel Venkat Yekkirala Looks like we have a 64 bit problem on Rawhide. Daniel J Walsh Re: [RFC 0/5] Static/fallback external labels for NetLabel Joe Nall RE: [RFC 0/5] Static/fallback external labels for NetLabel Venkat Yekkirala Re: [RFC 0/5] Static/fallback external labels for NetLabel Paul Moore Re: [RFC 0/5] Static/fallback external labels for NetLabel Paul Moore Re: [RFC 0/5] Static/fallback external labels for NetLabel Darrel Goeddel Re: [RFC 0/5] Static/fallback external labels for NetLabel Darrel Goeddel Re: [RFC 0/5] Static/fallback external labels for NetLabel Paul Moore Re: [patch 0/4] libsemanage: genhomedircon replacement Karl MacMillan Re: [patch 0/4] libsemanage: genhomedircon replacement Stephen Smalley Re: [patch 0/4] libsemanage: genhomedircon replacement Joshua Brindle Re: [RFC 0/5] Static/fallback external labels for NetLabel Darrel Goeddel Re: About the SELinux in FedoraCore Daniel J Walsh [ANN] BusyBox SELinux support Yuichi Nakamura Re: [refpolicy] dovecot: handling of hard links Stefan Schulze Frielinghaus Re: ANN: SELinux Policy IDE (SLIDE) version 1.2 Dave Sugar [refpolicy] dovecot: handling of hard links Stefan Schulze Frielinghaus Re: About the SELinux in FedoraCore Ian jonhson Monday, 27 August RE: [RFC 0/5] Static/fallback external labels for NetLabel Venkat Yekkirala Re: [PATCH 1/2] VFS/Security: Rework inode_getsecurity and callers to return resulting buffer Casey Schaufler Re: [PATCH 1/2] VFS/Security: Rework inode_getsecurity and callers to return resulting buffer David P. Quigley Re: [PATCH] refpolicy: services_rshd changes Christopher J. PeBenito Re: [PATCH] refpolicy: apps_slocate changes Christopher J. PeBenito Re: [PATCH] refpolicy: admin_logrotate changes Christopher J. PeBenito Re: [PATCH] refpolicy: apps_games changes Christopher J. PeBenito Re: [PATCH] refpolicy: services_amavis changes amavis signals pyzor Christopher J. PeBenito Re: [PATCH] refpolicy: services_sendmail changes Christopher J. PeBenito Re: [PATCH] refpolicy: services_radius changes, raid with certs Christopher J. PeBenito Re: [patch 0/4] libsemanage: genhomedircon replacement Daniel J Walsh Re: [patch] Tuning avtab to reduce memory usage James Morris Re: [refpolicy] sendmail needs to read ssl/tls certs Christopher J. PeBenito Re: About the SELinux in FedoraCore Daniel J Walsh selinux avr32 port W Re: [RFC 0/5] Static/fallback external labels for NetLabel Paul Moore Re: [RFC 0/5] Static/fallback external labels for NetLabel Paul Moore Re: [patch] Tuning avtab to reduce memory usage Stephen Smalley Re: [PATCH] refpolicy: apps_vmware changes Christopher J. PeBenito RE: [RFC 0/5] Static/fallback external labels for NetLabel Venkat Yekkirala RE: [RFC 0/5] Static/fallback external labels for NetLabel Venkat Yekkirala RE: [RFC 0/5] Static/fallback external labels for NetLabel Venkat Yekkirala RE: [RFC 0/5] Static/fallback external labels for NetLabel Venkat Yekkirala Sunday, 26 August Re: [refpolicy] policy & patch for bitlbee Devin Carraway Saturday, 25 August Re: [RFC 0/5] Static/fallback external labels for NetLabel Paul Moore Re: [refpolicy] policy & patch for bitlbee Devin Carraway Re: [refpolicy] policy & patch for bitlbee Daniel J Walsh Re: ANN: SELinux Policy IDE (SLIDE) version 1.2 Ken YANG Friday, 24 August Re: [RFC 0/5] Static/fallback external labels for NetLabel Casey Schaufler Re: [RFC 0/5] Static/fallback external labels for NetLabel Paul Moore Re: [RFC 0/5] Static/fallback external labels for NetLabel Joshua Brindle Re: [RFC 0/5] Static/fallback external labels for NetLabel Casey Schaufler Re: [RFC 0/5] Static/fallback external labels for NetLabel Joshua Brindle Re: [RFC 0/5] Static/fallback external labels for NetLabel Paul Moore Re: [RFC 0/5] Static/fallback external labels for NetLabel James Morris Re: [RFC 0/5] Static/fallback external labels for NetLabel Paul Moore Re: [RFC 0/5] Static/fallback external labels for NetLabel Casey Schaufler Re: [RFC 0/5] Static/fallback external labels for NetLabel James Morris RE: [RFC 0/5] Static/fallback external labels for NetLabel Venkat Yekkirala RE: [RFC 0/5] Static/fallback external labels for NetLabel Venkat Yekkirala Re: [PATCH] refpolicy: apps_vmware changes Tom London ANN: SELinux Policy IDE (SLIDE) version 1.2 Dave Sugar Re: [RFC 0/5] Static/fallback external labels for NetLabel Paul Moore Re: [PATCH] Suppress rule generation for dontaudit rules Karl MacMillan Re: MLS directory write constraints Christopher J. PeBenito [ANNOUNCE] NUMA Testcases has been integrated to LTP Subrata Modak I am concerned about putting genhomedircon changes in libsemanage into Fedora 8. Daniel J Walsh [ANN] SETools 3.3.1 Release Christopher J. PeBenito Thursday, 23 August Re: [patch] Tuning avtab to reduce memory usage Yuichi Nakamura Re: [patch] Tuning avtab to reduce memory usage Yuichi Nakamura Re: MLS directory write constraints Klaus Weidner Re: setsockcreate Stephen Smalley setsockcreate Joe Nall Re: [PATCH] libsepol: support the handle_unknown config flag Stephen Smalley Re: colons valid in identifiers in compilers? Spencer R. Shimko Re: [PATCH] checkpolicy: add options to set handle_unknown Stephen Smalley Re: semanage and semodule failures... Stephen Smalley Re: colons valid in identifiers in compilers? Stephen Smalley Re: semanage and semodule failures... Stephen Smalley colons valid in identifiers in compilers? Spencer R. Shimko Re: [PATCH] refpolicy: apps_vmware changes Christopher J. PeBenito semanage and semodule failures... Hasan Rezaul-CHR010 Re: [patch] libsepol: eliminate unaligned accesses (Was: Re: wrong magic number (using old sources)) Stephen Smalley Re: [PATCH] selinuxfs to globally disable dontaudit rules Stephen Smalley Re: [patch 2/5] libsemanage: genhomedircon replacement Stephen Smalley Re: [PATCH] genhomedircon: fix find() return value usage Stephen Smalley Re: [patch] Tuning avtab to reduce memory usage James Morris Re: Question concerning building policy modules Christopher J. PeBenito Re: [PATCH] genhomedircon: fix find() return value usage Stephen Smalley Re: [patch 2/5] libsemanage: genhomedircon replacement Stephen Smalley Re: [PATCH] Suppress rule generation for dontaudit rules Stephen Smalley Re: [patch] Tuning avtab to reduce memory usage Stephen Smalley [refpolicy] sendmail needs to read ssl/tls certs Stefan Schulze Frielinghaus Wednesday, 22 August Re: [patch] Tuning avtab to reduce memory usage Yuichi Nakamura Re: [PATCH] refpolicy: apps_vmware changes Tom London Re: [Announce] RHEL5 LSPP/EAL4 Certification Testsuite has been released again Steve Grubb Re: [PATCH] refpolicy: apps_vmware changes Daniel J Walsh Re: [Fwd: [PATCH] refpolicy: system_iptables changes] Daniel J Walsh Re: weird mprotect error Christopher J. PeBenito Re: [Fwd: [PATCH] refpolicy: system_iptables changes] Christopher J. PeBenito Re: [Fwd: [PATCH] refpolicy: system_fstools changes] Christopher J. PeBenito Re: [PATCH] refpolicy: system_miscfiles changes Christopher J. PeBenito Re: [PATCH] refpolicy: services_avahi changes Christopher J. PeBenito Re: [PATCH] refpolicy: services_bind changes Christopher J. PeBenito Re: [PATCH] refpolicy: admin_logwatch changes Christopher J. PeBenito Re: [PATCH] refpolicy: apps_vmware changes Christopher J. PeBenito Re: [PATCH] refpolicy: apps_usernetctl changes Christopher J. PeBenito Re: weird mprotect error Stephen Smalley Re: Question concerning building policy modules Daniel J Walsh Re: Question concerning building policy modules James Carter Re: Question concerning building policy modules Christopher J. PeBenito Re: [refpolicy] postfix changes Stefan Schulze Frielinghaus Re: Question concerning building policy modules Daniel J Walsh Re: Question concerning building policy modules James Carter Re: [refpolicy] selinuxutils (semodule) Stefan Schulze Frielinghaus Re: weird mprotect error Christopher J. PeBenito Re: Question concerning building policy modules James Carter Re: Question concerning building policy modules Daniel J Walsh Re: Question concerning building policy modules James Carter Re: weird mprotect error Stephen Smalley Re: [patch] Tuning avtab to reduce memory usage James Morris Re: Question concerning building policy modules James Carter Re: weird mprotect error Stephen Smalley Re: [PATCH] selinuxfs to globally disable dontaudit rules Daniel J Walsh Re: weird mprotect error Stephen Smalley Re: weird mprotect error Stephen Smalley Re: [patch] Tuning avtab to reduce memory usage James Morris Re: weird mprotect error Joe Nall Don't know postfix well enough to know what to do with this one. Daniel J Walsh Re: Question concerning building policy modules Christopher J. PeBenito Re: Method to assign MCS Category without login. Stephen Smalley Re: Question concerning building policy modules Daniel J Walsh Re: Question concerning building policy modules Stephen Smalley Re: confining the unconfined_t domain Daniel J Walsh Re: [patch] Tuning avtab to reduce memory usage KaiGai Kohei Tuesday, 21 August Re: [patch] Tuning avtab to reduce memory usage KaiGai Kohei Re: [patch] Tuning avtab to reduce memory usage Yuichi Nakamura Re: [patch] Tuning avtab to reduce memory usage Yuichi Nakamura RE: confining the unconfined_t domain Clarkson, Mike R \(US SSA\) Re: [PATCH] selinuxfs to globally disable dontaudit rules Joshua Brindle Re: Method to assign MCS Category without login. Josh Re: confining the unconfined_t domain Daniel J Walsh Re: Question concerning building policy modules Daniel J Walsh Re: [PATCH] selinuxfs to globally disable dontaudit rules Daniel J Walsh Re: [PATCH] checkpolicy: add options to set handle_unknown Stephen Smalley Re: [PATCH] kernel: selinux: policy selectable handling of unknown classes and perms Stephen Smalley Re: [patch] Tuning avtab to reduce memory usage J. Tang Re: [patch] libsepol: eliminate unaligned accesses (Was: Re: wrong magic number (using old sources)) Stephen Smalley Re: [patch] libsepol: eliminate unaligned accesses (Was: Re: wrong magic number (using old sources)) Eric Paris Re: [refpolicy] debian changes Christopher J. PeBenito Re: [refpolicy] radvd changes Christopher J. PeBenito Re: [refpolicy] selinuxutils (semodule) Christopher J. PeBenito Re: [PATCH] genhomedircon: fix find() return value usage Joshua Brindle Re: [refpolicy] postfix changes Christopher J. PeBenito Re: [refpolicy] apt and rpm Christopher J. PeBenito [patch 2/5] libsemanage: genhomedircon replacement tmiller_at_tresys.com [patch 4/5] libsemanage: remove genhomedircon python script tmiller_at_tresys.com [patch 5/5] libsemanage: genhomedircon enable/disable GHDC tmiller_at_tresys.com [patch 3/5] libsemanage: test functions tmiller_at_tresys.com [patch 0/5] libsemanage: genhomedircon replacement v2 tmiller_at_tresys.com [patch 1/5] libsemanage: genhomedircon initial cleanup tmiller_at_tresys.com [patch] libsepol: eliminate unaligned accesses (Was: Re: wrong magic number (using old sources)) Stephen Smalley Re: [patch] Tuning avtab to reduce memory usage Paul Moore Re: [patch] Tuning avtab to reduce memory usage Stephen Smalley FYI My guide to writing SELinux policy. Daniel J Walsh Re: [patch] Tuning avtab to reduce memory usage Paul Moore Re: [PATCH] SELinux: change Kconfig to use select instead of depends James Morris Re: weird mprotect error Stephen Smalley Re: [patch] Tuning avtab to reduce memory usage Yuichi Nakamura Re: [PATCH] SELinux: change Kconfig to use select instead of depends Stephen Smalley Re: [patch] Tuning avtab to reduce memory usage James Morris Re: [patch] Tuning avtab to reduce memory usage Stephen Smalley Re: MLS directory write constraints Christopher J. PeBenito [Announce] RHEL5 LSPP/EAL4 Certification Testsuite has been released again Subrata Modak Re: Method to assign MCS Category without login. Stephen Smalley [patch] Tuning avtab to reduce memory usage Yuichi Nakamura Monday, 20 August Re: weird mprotect error Joe Nall Re: Method to assign MCS Category without login. Josh Re: MLS directory write constraints Klaus Weidner Re: MLS directory write constraints Klaus Weidner [PATCH] genhomedircon: fix find() return value usage Todd C. Miller MLS directory write constraints Christopher J. PeBenito Re: Adding a security parameter to VFS functions David Howells Re: Method to assign MCS Category without login. Stephen Smalley Re: why there is a only_changed_user in restorecon? Stephen Smalley why there is a only_changed_user in restorecon? Liu Jian Sunday, 19 August Method to assign MCS Category without login. Joshua.Kramer [refpolicy] policy & patch for bitlbee Devin Carraway Saturday, 18 August [refpolicy] apt and dpkg changes Stefan Schulze Frielinghaus [refpolicy] postfix changes Stefan Schulze Frielinghaus [refpolicy] radvd changes Stefan Schulze Frielinghaus Friday, 17 August Re: [PATCH 1/2] VFS/Security: Rework inode_getsecurity and callers to return resulting buffer Casey Schaufler Re: [PATCH 1/2] VFS/Security: Rework inode_getsecurity and callers to return resulting buffer David P. Quigley Re: [PATCH 1/2] VFS/Security: Rework inode_getsecurity and callers to return resulting buffer David P. Quigley Re: weird mprotect error Stephen Smalley Re: [PATCH 1/2] VFS/Security: Rework inode_getsecurity and callers to return resulting buffer Casey Schaufler Re: [patch 0/4] libsemanage: genhomedircon replacement Joshua Brindle [PATCH 2/2] VFS: Reorder vfs_getxattr to avoid unnecessary calls to the LSM David P. Quigley [RFC]Cleanup inode_getsecurity and callers for use with labeled NFS David P. Quigley [PATCH 1/2] VFS/Security: Rework inode_getsecurity and callers to return resulting buffer David P. Quigley RE: confining the unconfined_t domain Clarkson, Mike R \(US SSA\) weird mprotect error Christopher J. PeBenito RE: [patch 0/4] libsemanage: genhomedircon replacement Karl MacMillan RE: [patch 0/4] libsemanage: genhomedircon replacement Karl MacMillan Re: policycoreutils patches Karl MacMillan [Announce] RHEL5 LSPP/EAL4 Certification Testsuite has been released Subrata Modak Thursday, 16 August Re: TE for networked resources shahbaz khan Re: TE for networked resources shahbaz khan Re: TE for networked resources shahbaz khan RE: confining the unconfined_t domain Stephen Smalley Re: TE for networked resources Stephen Smalley Re: TE for networked resources shahbaz khan RE: confining the unconfined_t domain Clarkson, Mike R \(US SSA\) Re: TE for networked resources Joshua Brindle Re: [PATCH] selinuxfs to globally disable dontaudit rules Stephen Smalley Re: [patch 2/4] libsemanage: genhomedircon replacement Stephen Smalley Re: [PATCH] selinuxfs to globally disable dontaudit rules Joshua Brindle Re: [PATCH] selinuxfs to globally disable dontaudit rules Joshua Brindle Re: [PATCH] Suppress rule generation for dontaudit rules Joshua Brindle Re: [PATCH] selinuxfs to globally disable dontaudit rules Stephen Smalley Re: TE for networked resources Stephen Smalley Re: [PATCH] Suppress rule generation for dontaudit rules Stephen Smalley TE for networked resources shahbaz khan [POLICYREP] [Patch 2/2] Add mls to the policy representation. Mark Goldman [POLICYREP] [Patch 0/2] Add MLS support to policy rep branch Mark Goldman [POLICYREP] [Patch 1/2] Generalize an output function to make display easier. Mark Goldman Re: confining the unconfined_t domain Stephen Smalley Re: [PATCH] selinuxfs to globally disable dontaudit rules Stephen Smalley Re: [PATCH] selinuxfs to globally disable dontaudit rules Joshua Brindle Re: [PATCH] selinuxfs to globally disable dontaudit rules Stephen Smalley Re: [PATCH] selinuxfs to globally disable dontaudit rules Joshua Brindle Re: [PATCH] selinuxfs to globally disable dontaudit rules Stephen Smalley Re: policycoreutils patches Stephen Smalley confining the unconfined_t domain Clarkson, Mike R \(US SSA\) RE: [patch 0/4] libsemanage: genhomedircon replacement Stephen Smalley [POLICYREP] [Patch 2/5] This patch removes files that existed solely to support modular policies. Mark Goldman [POLICYREP] [Patch 1/5] << Part 1 >> This patch removes files that existed solely to support modular policies. Mark Goldman [POLICYREP] [Patch 3/5] << part 1 >> This patch does all the functional work of removing the module support code. Mark Goldman [POLICYREP] [Patch 4/5] This patch does all the functional work of removing the module support code. Mark Goldman [POLICYREP] [Patch 5/5] This patch moves dispol to libsepol utilities. No functional changes to dispol. Makefile was modified to build dispol. Mark Goldman [POLICYREP] [Patch 0/5] remove modular policy support for policy rep branch Mark Goldman Re: wrong magic number (using old sources) selinux770_at_tortenboxer.de Re: [RFC 0/5] Static/fallback external labels for NetLabel James Morris Re: wrong magic number (using old sources) Stephen Smalley Re: wrong magic number (using old sources) selinux770_at_tortenboxer.de Wednesday, 15 August Re: [RFC 0/5] Static/fallback external labels for NetLabel Darrel Goeddel Re: [patch 0/4] libsemanage: genhomedircon replacement Joshua Brindle RE: [patch 0/4] libsemanage: genhomedircon replacement Joshua Brindle RE: [patch 0/4] libsemanage: genhomedircon replacement Karl MacMillan RE: [patch 0/4] libsemanage: genhomedircon replacement Joshua Brindle RE: [patch 0/4] libsemanage: genhomedircon replacement Joshua Brindle RE: [patch 0/4] libsemanage: genhomedircon replacement Karl MacMillan RE: [patch 0/4] libsemanage: genhomedircon replacement Stephen Smalley Re: [POLICYREP] [Patch 0/3] remove modular policy support for policy rep branch Joshua Brindle Re: [POLICYREP] [Patch 0/3] remove modular policy support for policy rep branch Stephen Smalley RE: [patch 0/4] libsemanage: genhomedircon replacement Karl MacMillan RE: [patch 0/4] libsemanage: genhomedircon replacement Stephen Smalley [POLICYREP] [Patch 3/3] This patch moves dispol to libsepol utilities. No functional changes to dispol. Makefile was modified to build dispol. Mark Goldman [POLICYREP] [Patch 0/3] remove modular policy support for policy rep branch Mark Goldman RE: [patch 0/4] libsemanage: genhomedircon replacement Karl MacMillan RE: [patch 0/4] libsemanage: genhomedircon replacement Karl MacMillan Question concerning building policy modules James Carter Re: wrong magic number (using old sources) Stephen Smalley RE: [patch 0/4] libsemanage: genhomedircon replacement Joshua Brindle RE: [patch 0/4] libsemanage: genhomedircon replacement Stephen Smalley Re: Adding a security parameter to VFS functions David Howells Re: [PATCH 00/16] Permit filesystem local caching [try #3] Casey Schaufler Re: Adding a security parameter to VFS functions Casey Schaufler RE: [patch 0/4] libsemanage: genhomedircon replacement Joshua Brindle Re: [patch 0/4] libsemanage: genhomedircon replacement Karl MacMillan Re: wrong magic number (using old sources) selinux770_at_tortenboxer.de [refpolicy] selinuxutils (semodule) Stefan Schulze Frielinghaus Re: [patch 0/4] libsemanage: genhomedircon replacement Joshua Brindle Re: [patch 0/4] libsemanage: genhomedircon replacement Karl MacMillan [patch 3/4] libsemanage: test functions tmiller_at_tresys.com [patch 2/4] libsemanage: genhomedircon replacement tmiller_at_tresys.com [patch 1/4] libsemanage: genhomedircon initial cleanup tmiller_at_tresys.com [patch 4/4] libsemanage: remove genhomedircon python script tmiller_at_tresys.com [patch 0/4] libsemanage: genhomedircon replacement tmiller_at_tresys.com [PATCH] Suppress rule generation for dontaudit rules Karl MacMillan Re: The new audit2allow. Karl MacMillan patch certwatch.if Shintaro Fujiwara Re: The new audit2allow. Karl MacMillan Adding a security parameter to VFS functions David Howells Re: [refpolicy] apt and rpm Stefan Schulze Frielinghaus Re: [RFC 0/5] Static/fallback external labels for NetLabel James Morris Tuesday, 14 August Re: [PATCH] correct return code in selinux_audit_rule_init James Morris [PATCH] correct return code in selinux_audit_rule_init Steve G Re: Illegal errno from kernel Stephen Smalley Re: Illegal errno from kernel Stephen Smalley Re: [PATCH 00/16] Permit filesystem local caching [try #3] David Howells Re: [PATCH 00/16] Permit filesystem local caching [try #3] Stephen Smalley Illegal errno from kernel Steve G Re: [PATCH 00/16] Permit filesystem local caching [try #3] Stephen Smalley Re: [PATCH 00/16] Permit filesystem local caching [try #3] Casey Schaufler Re: [RFC 0/5] Static/fallback external labels for NetLabel Darrel Goeddel Re: Strange behavior with skype Tom London Re: Strange behavior with skype Stephen Smalley Re: Strange behavior with skype Tom London Re: Strange behavior with skype Stephen Smalley Re: [refpolicy] apt and rpm Stephen Smalley Re: Strange behavior with skype Tom London Re: The new audit2allow. Stephen Smalley Re: Strange behavior with skype Stephen Smalley Re: [PATCH 00/16] Permit filesystem local caching [try #3] David Howells [refpolicy] apt and rpm Stefan Schulze Frielinghaus Monday, 13 August Re: [PATCH] selinuxfs to globally disable dontaudit rules Joshua Brindle Re: [PATCH 00/16] Permit filesystem local caching [try #3] Casey Schaufler The new audit2allow. Brian M. Williams Re: Strange behavior with skype Tom London Re: [PATCH 00/16] Permit filesystem local caching [try #3] David Howells Re: certification test suite Casey Schaufler Re: certification test suite Steve Grubb Re: mls level of the terminal window problem Stephen Smalley certification test suite Linda Knippers mls level of the terminal window problem Clarkson, Mike R \(US SSA\) Re: Makeup of a secctx Casey Schaufler Re: Makeup of a secctx Stephen Smalley Re: [PATCH 00/16] Permit filesystem local caching [try #3] Casey Schaufler Re: [PATCH 00/16] Permit filesystem local caching [try #3] David Howells Re: [PATCH 00/16] Permit filesystem local caching [try #3] Casey Schaufler Re: [PATCH 00/16] Permit filesystem local caching [try #3] Casey Schaufler Re: [PATCH 00/16] Permit filesystem local caching [try #3] David Howells Re: [PATCH 00/16] Permit filesystem local caching [try #3] Casey Schaufler Re: [PATCH 00/16] Permit filesystem local caching [try #3] Stephen Smalley Re: [PATCH 00/16] Permit filesystem local caching [try #3] David Howells Re: [PATCH 00/16] Permit filesystem local caching [try #3] Stephen Smalley Re: [PATCH 00/16] Permit filesystem local caching [try #3] Casey Schaufler Re: Strange behavior with skype Stephen Smalley Re: [PATCH 00/16] Permit filesystem local caching [try #3] Stephen Smalley Re: wrong magic number (using old sources) Stephen Smalley Re: [PATCH 00/16] Permit filesystem local caching [try #3] David Howells Sunday, 12 August Re: [refpolicy] awstats Stefan Schulze Frielinghaus [refpolicy] awstats Stefan Schulze Frielinghaus Saturday, 11 August Strange behavior with skype Daniel J Walsh Re: wrong magic number (using old sources) selinux770_at_tortenboxer.de Re: [PATCH 00/16] Permit filesystem local caching [try #3] Casey Schaufler Re: beginner to SE Linux policy Daniel J Walsh [refpolicy] debian changes Stefan Schulze Frielinghaus Re: [PATCH 00/16] Permit filesystem local caching [try #3] David Howells Friday, 10 August Re: [PATCH 00/16] Permit filesystem local caching [try #3] Casey Schaufler Re: [PATCH] selinuxfs to globally disable dontaudit rules Daniel J Walsh Re: [PATCH 09/16] CacheFiles: Permit a process's create SID to be overridden [try #3] Casey Schaufler Re: [RFC 0/5] Static/fallback external labels for NetLabel James Morris [PATCH 16/16] NFS: Display local caching state [try #3] David Howells [PATCH 14/16] NFS: Use local caching [try #3] David Howells [PATCH 08/16] CacheFiles: Export things for CacheFiles [try #3] David Howells [PATCH 15/16] NFS: Configuration and mount option changes to enable local caching on NFS [try #3] David Howells [PATCH 12/16] CacheFiles: Get the SID under which the CacheFiles module should operate [try #3] David Howells [PATCH 11/16] CacheFiles: Permit an inode's security ID to be obtained [try #3] David Howells [PATCH 09/16] CacheFiles: Permit a process's create SID to be overridden [try #3] David Howells [PATCH 03/16] FS-Cache: Provide an add_wait_queue_tail() function [try #3] David Howells [PATCH 10/16] CacheFiles: Add an act-as SID override in task_security_struct [try #3] David Howells [PATCH 01/16] FS-Cache: Release page->private after failed readahead [try #3] David Howells [PATCH 07/16] CacheFiles: Permit the page lock state to be monitored [try #3] David Howells [PATCH 05/16] CacheFiles: Add missing copy_page export for ia64 [try #3] David Howells [PATCH 06/16] CacheFiles: Add a hook to write a single page of data to an inode [try #3] David Howells [PATCH 02/16] FS-Cache: Recruit a couple of page flags for cache management [try #3] David Howells [PATCH 00/16] Permit filesystem local caching [try #3] David Howells Re: [PATCH] selinuxfs to globally disable dontaudit rules Joshua Brindle Makeup of a secctx Casey Schaufler Re: java.if Daniel J Walsh Re: [PATCH] selinuxfs to globally disable dontaudit rules Daniel J Walsh Re: [PATCH] refpolicy: kernel_kernel changes Christopher J. PeBenito Re: wrong magic number (using old sources) selinux770_at_tortenboxer.de Re: wrong magic number (using old sources) Stephen Smalley Re: [PATCH] refpolicy: kernel_kernel changes Daniel J Walsh Re: wrong magic number (using old sources) Björn Vogel Re: wrong magic number (using old sources) Stephen Smalley Re: wrong magic number (using old sources) selinux770_at_tortenboxer.de Re: [PATCH] selinuxfs to globally disable dontaudit rules Stephen Smalley Re: wrong magic number (using old sources) Stephen Smalley Re: wrong magic number (using old sources) Stephen Smalley Re: xattr and LSM interaction Stephen Smalley wrong magic number (using old sources) selinux770_at_tortenboxer.de Re: Appropriate number of hash slots for te_avtab(Was:Re: [RFC] Dynamically deciding number of hash slots for avtab Yuichi Nakamura Thursday, 9 August Re: [PATCH] selinuxfs to globally disable dontaudit rules Joshua Brindle Re: [PATCH] selinuxfs to globally disable dontaudit rules Joshua Brindle Re: [RFC 0/5] Static/fallback external labels for NetLabel Darrel Goeddel Re: [RFC 0/5] Static/fallback external labels for NetLabel Paul Moore Re: [RFC 0/5] Static/fallback external labels for NetLabel Paul Moore Re: xattr and LSM interaction Chris Vance Re: [PATCH] selinuxfs to globally disable dontaudit rules James Morris [PATCH] selinuxfs to globally disable dontaudit rules Eric Paris Re: [RFC 0/5] Static/fallback external labels for NetLabel Darrel Goeddel Re: [RFC 0/5] Static/fallback external labels for NetLabel Stephen Smalley Re: xattr and LSM interaction Stephen Smalley Re: [RFC 0/5] Static/fallback external labels for NetLabel Paul Moore Re: [RFC 0/5] Static/fallback external labels for NetLabel Joe Nall Re: [RFC 0/5] Static/fallback external labels for NetLabel Darrel Goeddel xattr and LSM interaction Chris Vance Re: [RFC 0/5] Static/fallback external labels for NetLabel Paul Moore RE: reference policy filesystem.if Christopher J. PeBenito Re: [RFC 0/5] Static/fallback external labels for NetLabel Joe Nall Re: [PATCH] kernel: selinux: policy selectable handling of unknown classes and perms Stephen Smalley Fwd: Re: Upstreaming shared LSM interfaces Casey Schaufler Re: Upstreaming shared LSM interfaces David P. Quigley Re: [PATCH 09/14] CacheFiles: Permit a process's create SID to be overridden [try #2] David Howells Re: [PATCH 11/14] CacheFiles: Permit an inode's security ID to be obtained [try #2] David Howells Re: [PATCH 11/14] CacheFiles: Permit an inode's security ID to be obtained [try #2] Stephen Smalley Re: [PATCH 11/14] CacheFiles: Permit an inode's security ID to be obtained [try #2] Casey Schaufler Re: [PATCH 09/14] CacheFiles: Permit a process's create SID to be overridden [try #2] Casey Schaufler [Linux-cachefs] [PATCH 14/14] NFS: Use local caching [try #2] David Howells [Linux-cachefs] [PATCH 12/14] CacheFiles: Get the SID under which the CacheFiles module should operate [try #2] David Howells [Linux-cachefs] [PATCH 11/14] CacheFiles: Permit an inode's security ID to be obtained [try #2] David Howells [Linux-cachefs] [PATCH 10/14] CacheFiles: Add an act-as SID override in task_security_struct [try #2] David Howells [Linux-cachefs] [PATCH 09/14] CacheFiles: Permit a process's create SID to be overridden [try #2] David Howells [Linux-cachefs] [PATCH 08/14] CacheFiles: Export things for CacheFiles [try #2] David Howells [Linux-cachefs] [PATCH 07/14] CacheFiles: Permit the page lock state to be monitored [try #2] David Howells [Linux-cachefs] [PATCH 06/14] CacheFiles: Add a hook to write a single page of data to an inode [try #2] David Howells [Linux-cachefs] [PATCH 05/14] CacheFiles: Add missing copy_page export for ia64 [try #2] David Howells [Linux-cachefs] [PATCH 03/14] FS-Cache: Provide an add_wait_queue_tail() function [try #2] David Howells [Linux-cachefs] [PATCH 02/14] FS-Cache: Recruit a couple of page flags for cache management [try #2] David Howells [Linux-cachefs] [PATCH 01/14] FS-Cache: Release page->private after failed readahead [try #2] David Howells [Linux-cachefs] [PATCH 00/14] Permit filesystem local caching [try #2] David Howells Re: java error after installing reference policy Mark Re: [RFC 0/5] Static/fallback external labels for NetLabel Darrel Goeddel Re: java error after installing reference policy Stephen Smalley Re: [RFC 0/5] Static/fallback external labels for NetLabel Casey Schaufler Re: [RFC 0/5] Static/fallback external labels for NetLabel Darrel Goeddel Re: [RFC 0/5] Static/fallback external labels for NetLabel Stephen Smalley Re: [RFC 0/5] Static/fallback external labels for NetLabel James Morris Re: [RFC 0/5] Static/fallback external labels for NetLabel Casey Schaufler Re: [RFC 0/5] Static/fallback external labels for NetLabel Stephen Smalley Re: [RFC 0/5] Static/fallback external labels for NetLabel Paul Moore Re: [RFC 0/5] Static/fallback external labels for NetLabel Casey Schaufler java error after installing reference policy Mark Re: [RFC 0/5] Static/fallback external labels for NetLabel Stephen Smalley Re: [RFC 0/5] Static/fallback external labels for NetLabel Darrel Goeddel Re: [RFC 0/5] Static/fallback external labels for NetLabel Paul Moore Re: [RFC 0/5] Static/fallback external labels for NetLabel Paul Moore Re: [RFC 0/5] Static/fallback external labels for NetLabel Paul Moore Re: [RFC 0/5] Static/fallback external labels for NetLabel Darrel Goeddel RE: reference policy filesystem.if Clarkson, Mike R \(US SSA\) Re: [RFC 0/5] Static/fallback external labels for NetLabel James Morris RE: SLIDE error Anand Patel Re: [RFC 0/5] Static/fallback external labels for NetLabel Darrel Goeddel Re: [RFC 0/5] Static/fallback external labels for NetLabel James Morris Re: [RFC 0/5] Static/fallback external labels for NetLabel Stephen Smalley SLIDE error Mark Re: Strict policy in FC6 - firefox does not start. Hal Re: [RFC 0/5] Static/fallback external labels for NetLabel Paul Moore Re: Fedora/SE-PostgreSQL Christopher J. PeBenito Re: [RFC 0/5] Static/fallback external labels for NetLabel Stephen Smalley Re: Strict policy in FC6 - firefox does not start. Stephen Smalley Re: libsepol.print_missing_requirements Shintaro Fujiwara Re: reference policy filesystem.if Christopher J. PeBenito Re: [RFC 0/5] Static/fallback external labels for NetLabel Paul Moore Re: Fedora/SE-PostgreSQL KaiGai Kohei Re: [RFC 0/5] Static/fallback external labels for NetLabel KaiGai Kohei Strict policy in FC6 - firefox does not start. Kroum Antov Wednesday, 8 August reference policy filesystem.if Clarkson, Mike R \(US SSA\) Re: [PATCH] refpolicy: kernel_filesystem changes Christopher J. PeBenito Re: A QUESTION FROM SUN VALLEY, CA Stephen Smalley Re: A QUESTION FROM SUN VALLEY, CA Stephen Smalley [patch 2/3] libsemanage: test functions tmiller_at_tresys.com [patch 1/3] libsemanage: genhomedircon replacement tmiller_at_tresys.com [patch 0/3] libsemanage: genhomedircon replacement tmiller_at_tresys.com [patch 3/3] libsemanage: remove genhomedircon python script tmiller_at_tresys.com Re: A QUESTION FROM SUN VALLEY, CA Mark A QUESTION FROM SUN VALLEY, CA Robert Adams selinux nfs posgres shahbaz khan Re: only allow 1 port for listening Stephen Smalley Re: only allow 1 port for listening Mark Re: Fedora/SE-PostgreSQL KaiGai Kohei Re: only allow 1 port for listening shahbaz khan Re: only allow 1 port for listening Mark Re: only allow 1 port for listening Mark only allow 1 port for listening Mark Re: Appropriate number of hash slots for te_avtab(Was:Re: [RFC] Dynamically deciding number of hash slots for avtab James Morris Re: Appropriate number of hash slots for te_avtab(Was:Re: [RFC] Dynamically deciding number of hash slots for avtab Yuichi Nakamura Re: Appropriate number of hash slots for te_avtab(Was:Re: [RFC] Dynamically deciding number of hash slots for avtab Stephen Smalley Re: Appropriate number of hash slots for te_avtab(Was:Re: [RFC] Dynamically deciding number of hash slots for avtab Yuichi Nakamura Re: Appropriate number of hash slots for te_avtab(Was:Re: [RFC] Dynamically deciding number of hash slots for avtab Stephen Smalley Re: Appropriate number of hash slots for te_avtab(Was:Re: [RFC] Dynamically deciding number of hash slots for avtab James Morris RE: Migrating older SELinux policies to new Linux releases Kim Lawson-Jenkins Re: Migrating older SELinux policies to new Linux releases Christopher J. PeBenito Re: Migrating older SELinux policies to new Linux releases Stephen Smalley Re: Fedora/SE-PostgreSQL Christopher J. PeBenito Migrating older SELinux policies to new Linux releases Kim Lawson-Jenkins Re: Appropriate number of hash slots for te_avtab(Was:Re: [RFC] Dynamically deciding number of hash slots for avtab Yuichi Nakamura [patch][BusyBox] Domain assignment support for SELinux/AppArmor/LIDS himainu-ynakam_at_miomio.jp Tuesday, 7 August Re: Fedora/SE-PostgreSQL Joshua Brindle Re: policygentool error Stephen Smalley Re: beginner to SE Linux policy Mark Re: beginner to SE Linux policy Stephen Smalley Re: beginner to SE Linux policy Mark Re: [PATCH][RFC] V2 Remove SELinux dependencies from linux-audit via LSM Casey Schaufler Re: Fedora/SE-PostgreSQL KaiGai Kohei Re: [PATCH] refpolicy: kernel_storage changes Christopher J. PeBenito Re: [PATCH] refpolicy: kernel_corecommands changes Christopher J. PeBenito Re: [PATCH] refpolicy: kernel_filesystem changes Stephen Smalley java.if Clarkson, Mike R \(US SSA\) Re: [PATCH] refpolicy: kernel_filesystem changes Christopher J. PeBenito Re: [PATCH][RFC] V2 Remove SELinux dependencies from linux-audit via LSM Stephen Smalley Re: [PATCH] refpolicy: kernel_kernel changes Christopher J. PeBenito policygentool error Mark [RFC 2/5] NetLabel: Add secid token support to the NetLabel secattr struct Paul Moore [RFC 5/5] NetLabel: add auditing to the static labeling mechanism Paul Moore [RFC 4/5] NetLabel: introduce static network labels for unlabeled connections Paul Moore [RFC 0/5] Static/fallback external labels for NetLabel Paul Moore Re: [PATCH] refpolicy: kernel_terminal changes new terminal device Christopher J. PeBenito [RFC 3/5] NetLabel: add IP address family information to the netlbl_skbuff_getattr() function Paul Moore [RFC 1/5] SELinux: add secctx_to_secid() LSM hook Paul Moore Re: Fedora/SE-PostgreSQL Christopher J. PeBenito Re: Fedora/SE-PostgreSQL KaiGai Kohei Re: Application_domain Daniel J Walsh Re: Fedora/SE-PostgreSQL KaiGai Kohei Re: Application_domain Christopher J. PeBenito Re: strict/targeted merge snag Christopher J. PeBenito Re: Appropriate number of hash slots for te_avtab(Was:Re: [RFC] Dynamically deciding number of hash slots for avtab Stephen Smalley Re: Fedora/SE-PostgreSQL Stephen Smalley Re: Fedora/SE-PostgreSQL Christopher J. PeBenito Appropriate number of hash slots for te_avtab(Was:Re: [RFC] Dynamically deciding number of hash slots for avtab Yuichi Nakamura Re: Fedora/SE-PostgreSQL KaiGai Kohei Monday, 6 August Re: link to reference policy Ryan Jordan link to reference policy Mark Re: Fedora/SE-PostgreSQL Stephen Smalley Re: libselinux Patch to prevent segfault from un-initialized print statement Daniel J Walsh Re: libsepol.print_missing_requirements Shintaro Fujiwara Re: File Context problem Stephen Smalley Re: libsepol.print_missing_requirements Stephen Smalley File Context problem Daniel J Walsh Re: Fedora/SE-PostgreSQL KaiGai Kohei Sunday, 5 August Re: setroubleshooter/sealert on central loghost? Steve G [PATCH][RFC] V2 Remove SELinux dependencies from linux-audit via LSM Casey Schaufler Re: setroubleshooter/sealert on central loghost? Jan-Frode Myklebust Saturday, 4 August Re: Scope of SECMARK_MODE_SEL Casey Schaufler Friday, 3 August Re: Scope of SECMARK_MODE_SEL James Morris Re: libselinux Patch to prevent segfault from un-initialized print statement Eamon Walsh Re: libsepol.print_missing_requirements Shintaro Fujiwara libselinux Patch to prevent segfault from un-initialized print statement Daniel J Walsh Scope of SECMARK_MODE_SEL Casey Schaufler Re: libsepol.print_missing_requirements Stephen Smalley Re: [PATCH][RFC] V1 Remove SELinux dependencies from linux-audit via LSM Casey Schaufler Re: [PATCH][RFC] V1 Remove SELinux dependencies from linux-audit via LSM Stephen Smalley Re: [PATCH][RFC] V1 Remove SELinux dependencies from linux-audit via LSM Casey Schaufler Re: [PATCH][RFC] V1 Remove SELinux dependencies from linux-audit via LSM Casey Schaufler Re: [PATCH][RFC] V1 Remove SELinux dependencies from linux-audit via LSM Stephen Smalley [ANN] SETools 3.3 Release Christopher J. PeBenito Re: New resource for add in selinux.sf.net - Spanish Documentation Ken YANG Thursday, 2 August Re: [PATCH][RFC] V1 Remove SELinux dependencies from linux-audit via LSM Casey Schaufler [PATCH][RFC] V1 Remove SELinux dependencies from linux-audit via LSM Casey Schaufler New resource for add in selinux.sf.net - Spanish Documentation Wilmer Jaramillo M. Re: SE-PostgreSQL for Fedora (Re: Guideline for RPM packages) KaiGai Kohei Re: [PATCH] kernel: selinux: policy selectable handling of unknown classes and perms Daniel J Walsh Re: [PATCH] kernel: selinux: policy selectable handling of unknown classes and perms Joshua Brindle [PATCH] refpolicy: services_apache changes dwalsh_at_redhat.com [PATCH] refpolicy: services_audioentropy changes dwalsh_at_redhat.com [PATCH] refpolicy: services_automount changes dwalsh_at_redhat.com [PATCH] refpolicy: services_avahi changes dwalsh_at_redhat.com [PATCH] refpolicy: services_bluetooth changes dwalsh_at_redhat.com [PATCH] refpolicy: services_clamav changes dwalsh_at_redhat.com libsepol.print_missing_requirements Shintaro Fujiwara [PATCH] refpolicy: services_consolekit changes dwalsh_at_redhat.com [PATCH] refpolicy: services_cups changes dwalsh_at_redhat.com [PATCH] refpolicy: services_dbus changes dwalsh_at_redhat.com [PATCH] refpolicy: services_dhcp changes - dbus fixes dwalsh_at_redhat.com [PATCH] refpolicy: services_hal changes dwalsh_at_redhat.com [PATCH] refpolicy: services_inetd changes dwalsh_at_redhat.com [PATCH] refpolicy: services_kerberos changes dwalsh_at_redhat.com [PATCH] refpolicy: services_lpd changes New interface for samba dwalsh_at_redhat.com [PATCH] refpolicy: mailscanner policy dwalsh_at_redhat.com [PATCH] refpolicy: services_networkmanager changes dwalsh_at_redhat.com [PATCH] refpolicy: services_nagios changes Fix file context dwalsh_at_redhat.com [PATCH] refpolicy: services_nis changes dwalsh_at_redhat.com [PATCH] refpolicy: services_nscd changes dwalsh_at_redhat.com [PATCH] refpolicy: services_ntp changes dwalsh_at_redhat.com [PATCH] refpolicy: services_openvpn changes dwalsh_at_redhat.com [PATCH] refpolicy: services_procmail changes - Minor procmail fixes dwalsh_at_redhat.com [PATCH] refpolicy: services_pyzor changes - Fix interface dwalsh_at_redhat.com [PATCH] refpolicy: services_radius changes, raid with certs dwalsh_at_redhat.com [PATCH] refpolicy: services_rhgb changes rhgb searches /root dwalsh_at_redhat.com [PATCH] refpolicy: services_rpc changes dwalsh_at_redhat.com [PATCH] refpolicy: services_rwho changes rwho uses a log file dwalsh_at_redhat.com [PATCH] refpolicy: services_rshd changes dwalsh_at_redhat.com [PATCH] refpolicy: services_samba changes dwalsh_at_redhat.com [PATCH] refpolicy: services_sendmail changes dwalsh_at_redhat.com [PATCH] refpolicy: services_setroubleshoot changes dwalsh_at_redhat.com [PATCH] refpolicy: services_soundserver changes add nasd policy dwalsh_at_redhat.com [PATCH] refpolicy: services_ssh changes dwalsh_at_redhat.com [PATCH] refpolicy: services_spamassassin changes dwalsh_at_redhat.com [PATCH] refpolicy: services_amavis changes amavis signals pyzor dwalsh_at_redhat.com [PATCH] refpolicy: system_fusermount policy dwalsh_at_redhat.com [PATCH] refpolicy: system_ipsec changes sends audit messages dwalsh_at_redhat.com [PATCH] refpolicy: system_iptables changes uses nsswitch dwalsh_at_redhat.com [PATCH] refpolicy: system_locallogin changes dwalsh_at_redhat.com [PATCH] refpolicy: system_lvm changes dwalsh_at_redhat.com Re: [PATCH] kernel: selinux: policy selectable handling of unknown classes and perms Eamon Walsh [PATCH] refpolicy: system_miscfiles changes new fonts dir dwalsh_at_redhat.com [PATCH] refpolicy: system_modutils changes dwalsh_at_redhat.com [PATCH] refpolicy: system_mount changes dwalsh_at_redhat.com [PATCH] refpolicy: system_netlabel changes dwalsh_at_redhat.com [PATCH] refpolicy: system_raid changes dwalsh_at_redhat.com [PATCH] refpolicy: system_sysnetwork changes dwalsh_at_redhat.com [PATCH] refpolicy: kernel_storage changes dwalsh_at_redhat.com [PATCH] refpolicy: kernel_terminal changes new terminal device dwalsh_at_redhat.com [PATCH] refpolicy: kernel_selinux changes dwalsh_at_redhat.com Re: strict/targeted merge snag Stephen Smalley Re: [PATCH] kernel: selinux: policy selectable handling of unknown classes and perms Stephen Smalley [PATCH] refpolicy: kernel_filesystem changes dwalsh_at_redhat.com [PATCH] refpolicy: kernel_kernel changes dwalsh_at_redhat.com [PATCH] refpolicy: kernel_domain changes dwalsh_at_redhat.com [PATCH] refpolicy: kernel_corecommands changes dwalsh_at_redhat.com Re: [PATCH] kernel: selinux: policy selectable handling of unknown classes and perms Stephen Smalley [PATCH] refpolicy: apps_games changes dwalsh_at_redhat.com [PATCH] refpolicy: apps_slocate changes dwalsh_at_redhat.com [PATCH] refpolicy: apps_loadkeys changes dwalsh_at_redhat.com [PATCH] refpolicy: apps_usernetctl changes dwalsh_at_redhat.com [PATCH] refpolicy: apps_wine changes add run interface dwalsh_at_redhat.com [PATCH] refpolicy: apps_vmware changes dwalsh_at_redhat.com [PATCH] refpolicy: apps_ada changes add ada_run policy for unconfined user dwalsh_at_redhat.com Re: reference policy mailing list (was [PATCH] refpolicy: system_udev changes including brctl policy. Mostly xen related) Joshua Brindle Re: [PATCH] kernel: selinux: policy selectable handling of unknown classes and perms Joshua Brindle [PATCH] refpolicy: admin_usermanage changes dwalsh_at_redhat.com [PATCH] refpolicy: admin_vbetool changes dwalsh_at_redhat.com [PATCH] refpolicy: admin_logwatch changes dwalsh_at_redhat.com [PATCH] refpolicy: admin_logrotate changes dwalsh_at_redhat.com [PATCH] refpolicy: admin_bootloader changes dwalsh_at_redhat.com Re: Pattern patch. I believe this is a cut and paste error Christopher J. PeBenito [PATCH] refpolicy: services_apcupsd changes dwalsh_at_redhat.com [PATCH] refpolicy: services_bind changes dwalsh_at_redhat.com [PATCH] refpolicy: services_avahi changes dwalsh_at_redhat.com Pattern patch. I believe this is a cut and paste error Daniel J Walsh [PATCH] refpolicy: system_logging changes dwalsh_at_redhat.com policycoreutils patches Daniel J Walsh Re: [PATCH] kernel: selinux: policy selectable handling of unknown classes and perms Paul Moore [Fwd: [PATCH] refpolicy: admin_kudzu changes] Daniel J Walsh [Fwd: [PATCH] refpolicy: system_init changes] Daniel J Walsh [Fwd: [PATCH] refpolicy: system_fstools changes] Daniel J Walsh [Fwd: [PATCH] refpolicy: system_locallogin changes] Daniel J Walsh [Fwd: [PATCH] refpolicy: services_w3c changes] Daniel J Walsh [Fwd: [PATCH] refpolicy: system_iptables changes] Daniel J Walsh [PATCH] refpolicy: system_miscfiles changes Daniel J Walsh Lots of fixes for postfix Daniel J Walsh [PATCH] refpolicy: system_hostname changes Daniel J Walsh [PATCH] refpolicy: admin_readahead changes dwalsh_at_redhat.com [PATCH] refpolicy: system_udev changes including brctl policy. Mostly xen related dwalsh_at_redhat.com Re: strict/targeted merge snag Joshua Brindle Re: SE-PostgreSQL for Fedora (Re: Guideline for RPM packages) Joshua Brindle Re: SE-PostgreSQL for Fedora (Re: Guideline for RPM packages) KaiGai Kohei Re: strict/targeted merge snag Daniel J Walsh Re: [PATCH] kernel: selinux: policy selectable handling of unknown classes and perms Eric Paris Re: [PATCH] kernel: selinux: policy selectable handling of unknown classes and perms Joshua Brindle Re: strict/targeted merge snag Christopher J. PeBenito Re: Containing vmware player 2.0.0 with SELINUX Christopher J. PeBenito Re: [RFC] SENFS: MAC labeling support for NFSv4 Casey Schaufler Re: SE-PostgreSQL for Fedora (Re: Guideline for RPM packages) Joshua Brindle Re: strict/targeted merge snag Daniel J Walsh Re: [RFC] SENFS: MAC labeling support for NFSv4 Stephen Smalley strict/targeted merge snag Christopher J. PeBenito Application_domain Daniel J Walsh Re: [PATCH] kernel: selinux: policy selectable handling of unknown classes and perms Stephen Smalley Re: [RFC] SENFS: MAC labeling support for NFSv4 Casey Schaufler Re: [PATCH] kernel: selinux: policy selectable handling of unknown classes and perms Joshua Brindle Re: [PATCH] kernel: selinux: policy selectable handling of unknown classes and perms Stephen Smalley Re: setroubleshooter/sealert on central loghost? Daniel J Walsh Re: [RFC] SENFS: MAC labeling support for NFSv4 Stephen Smalley Re: [PATCH 6/7] NFSv4: Client implementation of MAC Labeling Stephen Smalley Re: [PATCH 7/7] NFSv4: Server implementation of MAC Labeling Stephen Smalley Re: [PATCH] libselinux: fix PREFIX argument to Makefiles Stephen Smalley Re: Containing vmware player 2.0.0 with SELINUX Louis Lam Re: [RFC] SENFS: MAC labeling support for NFSv4 James Morris Wednesday, 1 August Re: [PATCH 6/7] NFSv4: Client implementation of MAC Labeling James Morris Re: [PATCH 3/7] KConfig: Add KConfig entries for MAC labeled NFS James Morris Re: [PATCH 2/7] VFS: Add sid field to iattr structure for notify_change James Morris Re: [PATCH 1/7] Security: Add inode_{get,set}secid LSM hooks and security helper functions James Morris Re: [PATCH 2/2] NET: fix memory leaks from security_secid_to_secctx() James Morris [PATCH] libselinux: fix PREFIX argument to Makefiles Eamon Walsh Re: [PATCH 4/7] Security: Add secctx_to_secid LSM hooks and security helper functions Casey Schaufler Re: [Labeled-nfs] [PATCH 6/7] NFSv4: Client implementation of MAC Labeling Casey Schaufler Re: [RFC] SENFS: MAC labeling support for NFSv4 Casey Schaufler Re: [PATCH 4/7] Security: Add secctx_to_secid LSM hooks and security helper functions Paul Moore Re: security_task_getsecid and selinux_get_task_sid Casey Schaufler Re: [Labeled-nfs] [PATCH 6/7] NFSv4: Client implementation of MAC Labeling Stephen Smalley Re: [PATCH 7/7] NFSv4: Server implementation of MAC Labeling Casey Schaufler Re: [RFC] SENFS: MAC labeling support for NFSv4 Stephen Smalley Re: [PATCH 6/7] NFSv4: Client implementation of MAC Labeling Casey Schaufler Re: [PATCH 5/7] NFSv4: Add secid recommended attribute and NFSv4 flags Casey Schaufler Re: [PATCH 4/7] Security: Add secctx_to_secid LSM hooks and security helper functions Casey Schaufler Re: [PATCH 3/7] KConfig: Add KConfig entries for MAC labeled NFS Casey Schaufler Re: [PATCH 2/7] VFS: Add sid field to iattr structure for notify_change Casey Schaufler Re: [PATCH 1/7] Security: Add inode_{get,set}secid LSM hooks and security helper functions Casey Schaufler Re: [RFC] SENFS: MAC labeling support for NFSv4 Casey Schaufler Re: security_task_getsecid and selinux_get_task_sid Stephen Smalley Re: security_task_getsecid and selinux_get_task_sid Casey Schaufler Re: security_task_getsecid and selinux_get_task_sid Stephen Smalley [PATCH 4/7] Security: Add secctx_to_secid LSM hooks and security helper functions David P. Quigley [PATCH 1/7] Security: Add inode_{get,set}secid LSM hooks and security helper functions David P. Quigley [PATCH 5/7] NFSv4: Add secid recommended attribute and NFSv4 flags David P. Quigley [PATCH 6/7] NFSv4: Client implementation of MAC Labeling David P. Quigley [PATCH 2/7] VFS: Add sid field to iattr structure for notify_change David P. Quigley [PATCH 7/7] NFSv4: Server implementation of MAC Labeling David P. Quigley [PATCH 3/7] KConfig: Add KConfig entries for MAC labeled NFS David P. Quigley [RFC] SENFS: MAC labeling support for NFSv4 David P. Quigley security_task_getsecid and selinux_get_task_sid Casey Schaufler [PATCH] checkpolicy: add options to set handle_unknown Eric Paris [PATCH] libsepol: support the handle_unknown config flag Eric Paris [PATCH] kernel: selinux: policy selectable handling of unknown classes and perms Eric Paris RE: mounted file systems Stephen Smalley [PATCH 0/2] Small memory-leak patchset Paul Moore [PATCH 1/2] SELinux: remove redundant pointer checks before calling kfree() Paul Moore RE: mounted file systems Clarkson, Mike R \(US SSA\) [PATCH 2/2] NET: fix memory leaks from security_secid_to_secctx() Paul Moore Re: selinux rsbac and grsecurity internels Stephen Smalley RE: mounted file systems Stephen Smalley RE: mounted file systems Clarkson, Mike R \(US SSA\) Re: mounted file systems Stephen Smalley mounted file systems Clarkson, Mike R \(US SSA\) Re: Problem with semanage, looks like we don't handle the <<none>> context type? Stephen Smalley Re: Problem with semanage, looks like we don't handle the <<none>> context type? Daniel J Walsh Re: Problem with semanage, looks like we don't handle the <<none>> context type? Stephen Smalley Re: Problem with semanage, looks like we don't handle the <<none>> context type? Stephen Smalley Re: Problem with semanage, looks like we don't handle the <<none>> context type? Stephen Smalley Re: Problem with semanage, looks like we don't handle the <<none>> context type? Daniel J Walsh Re: Problem with semanage, looks like we don't handle the <<none>> context type? Stephen Smalley Fedora/SE-PostgreSQL KaiGai Kohei Re: selinux rsbac and grsecurity internels Steve G Re: Guideline for RPM packages KaiGai Kohei Tuesday, 31 July Re: [PATCH RFC] soundserver policy modification Ken YANG selinux rsbac and grsecurity internels shahbaz khan Re: oracle policy rob myers Re: PMS and SELinux shahbaz khan Re: Problem with semanage, looks like we don't handle the <<none>> context type? Daniel J Walsh [POLICYREP][patchv3 3/3] semodule_package implementation in cpp for libpolicyrep method_at_manicmethod.com [POLICYREP][patchv3 2/3] policy package implementation method_at_manicmethod.com [POLICYREP][patchv3 1/3] policy package class method_at_manicmethod.com [POLICYREP][patchv3 0/3] policy package implementation with xar method_at_manicmethod.com RE: Problem with semanage, looks like we don't handle the <<none>> context type? Joshua Brindle Re: Problem with semanage, looks like we don't handle the <<none>> context type? Daniel J Walsh Re: Problem with semanage, looks like we don't handle the <<none>> context type? Joshua Brindle Re: PMS and SELinux Joshua Brindle Re: oracle policy rob myers New audit record types for static network labels Paul Moore Re: setroubleshooter/sealert on central loghost? Steve G setroubleshooter/sealert on central loghost? Jan-Frode Myklebust Problem with semanage, looks like we don't handle the <<none>> context type? Daniel J Walsh [PATCH RFC] soundserver policy modification Ken YANG Monday, 30 July Re: [PATCH] SELinux: restore proper NetLabel caching behavior James Morris Re: [PATCH] SELinux: restore proper NetLabel caching behavior Paul Moore [PATCH] SELinux: restore proper NetLabel caching behavior Paul Moore PMS and selinux shahbaz khan PMS and SELinux shahbaz khan [PATCHES] kernel: checkpolicy: libsepol: allow unknown classes/perms in kernel Eric Paris Re: Guideline for RPM packages KaiGai Kohei Re: selinux_audit_set_callback Stephen Smalley selinux_audit_set_callback Casey Schaufler Sunday, 29 July Re: [patch] Update for libselinux embedded build support Yuichi Nakamura Friday, 27 July RE: beginner to SE Linux policy Brian M. Williams beginner to SE Linux policy Mark Re: Novice problem with apol/ policy.conf Christopher J. PeBenito Re: Novice problem with apol/ policy.conf Eric Paris Re: alsactl policy Christopher J. PeBenito Thursday, 26 July RE: newrole and ftp Clarkson, Mike R \(US SSA\) Re: newrole and ftp Stephen Smalley newrole and ftp Clarkson, Mike R \(US SSA\) SE-PostgreSQL for Fedora (Re: Guideline for RPM packages) KaiGai Kohei [POLICYREP] [PATCHv2 2/3] policy package implementation method_at_manicmethod.com [POLICYREP] [PATCHv2 0/3] policy package implentation with xar method_at_manicmethod.com [POLICYREP] [PATCHv2 3/3] semodule_package implementation in cpp for libpolicyrep method_at_manicmethod.com [POLICYREP] [PATCHv2 1/3] policy package class method_at_manicmethod.com Re: Guideline for RPM packages KaiGai Kohei Wednesday, 25 July RE: using semodule_package Stephen Smalley RE: using semodule_package Clarkson, Mike R \(US SSA\) Re: [RFC] Dynamically deciding number of hash slots for avtab (Was:Re: [patch] customizable AVTAB_HASH_BITS for embedded devices Yuichi Nakamura Re: [RFC] Dynamically deciding number of hash slots for avtab (Was:Re: [patch] customizable AVTAB_HASH_BITS for embedded devices Stephen Smalley Re: [patch] Update for libselinux embedded build support Stephen Smalley Tuesday, 24 July [patch] Update for libselinux embedded build support Yuichi Nakamura Re: [RFC] Dynamically deciding number of hash slots for avtab (Was:Re: [patch] customizable AVTAB_HASH_BITS for embedded devices Yuichi Nakamura Re: [PATCH] selinux_xfrm_sec_ctx_alloc: null-terminate context string James Morris Re: Additional permission checks for nscd Christopher J. PeBenito Re: [PATCH] selinux_xfrm_sec_ctx_alloc: null-terminate context string Stephen Smalley Re: [patch] libselinux: fix type mismatch in string_to_security_class Stephen Smalley Re: [patch] libselinux: fix type mismatch in string_to_security_class John D. Ramsdell Re: [PATCH] selinux_xfrm_sec_ctx_alloc: null-terminate context string Joy Latten Re: [PATCH] selinux_xfrm_sec_ctx_alloc: null-terminate context string Joy Latten [PATCH] selinux_xfrm_sec_ctx_alloc: null-terminate context string Venkat Yekkirala Re: [patch] customizable AVTAB_HASH_BITS for embedded devices James Morris Re: [RFC] Dynamically deciding number of hash slots for avtab (Was:Re: [patch] customizable AVTAB_HASH_BITS for embedded devices Stephen Smalley Monday, 23 July alsactl policy Martin Orr Tuesday, 24 July Re: [patch] customizable AVTAB_HASH_BITS for embedded devices Stephen Smalley Re: [patch] customizable AVTAB_HASH_BITS for embedded devices Stephen Smalley [RFC] Dynamically deciding number of hash slots for avtab (Was:Re: [patch] customizable AVTAB_HASH_BITS for embedded devices Yuichi Nakamura Re: [patch] customizable AVTAB_HASH_BITS for embedded devices Yuichi Nakamura Monday, 23 July Re: [patch] customizable AVTAB_HASH_BITS for embedded devices Joshua Brindle Re: [patch] customizable AVTAB_HASH_BITS for embedded devices KaiGai Kohei Re: [patch] customizable AVTAB_HASH_BITS for embedded devices Stephen Smalley Re: [patch] customizable AVTAB_HASH_BITS for embedded devices Stephen Smalley Re: [patch 0/1] Add user object to libpolicyrep Mark Goldman Re: Proposed patch to lisemanage/policycoreutils patches to not run genhomedircon/setfiles when setting booleans. Joshua Brindle [patch 0/1] Add user object to libpolicyrep mgoldman_at_tresys.com [patch 1/1] Add users to libpolicyrep mgoldman_at_tresys.com Re: Proposed patch to lisemanage/policycoreutils patches to not run genhomedircon/setfiles when setting booleans. Daniel J Walsh Re: libselinux man page changes to make translations easier. Daniel J Walsh Friday, 20 July Security BoF at LinuxWorld Crispin Cowan Monday, 23 July Re: Proposed patch to lisemanage/policycoreutils patches to not run genhomedircon/setfiles when setting booleans. Stephen Smalley Re: libselinux man page changes to make translations easier. Stephen Smalley Re: There is a bug in checkmodule that is driving me nuts Daniel J Walsh Re: There is a bug in checkmodule that is driving me nuts Daniel J Walsh Re: [patch] libselinux: fix type mismatch in string_to_security_class Joshua Brindle Re: There is a bug in checkmodule that is driving me nuts Karl MacMillan Re: There is a bug in checkmodule that is driving me nuts Daniel J Walsh Re: There is a bug in checkmodule that is driving me nuts Stephen Smalley Re: There is a bug in checkmodule that is driving me nuts Karl MacMillan [patch] libselinux: fix type mismatch in string_to_security_class Stephen Smalley Friday, 20 July [RFC][PATCH 01/01] SELinux: add VM entrypoint object class/permission David Windsor [RFC][PATCH 00/01]qemu VM entrypoints David Windsor [RFC][PATCH 01/01]qemu: add SELinux hook for loading virtual hard disk David Windsor Monday, 23 July [patch] customizable AVTAB_HASH_BITS for embedded devices Yuichi Nakamura Sunday, 22 July Re: [kvm-devel] [RFC][PATCH 00/01]qemu VM entrypoints David Windsor Re: [kvm-devel] [RFC][PATCH 00/01]qemu VM entrypoints David Windsor ANN: Labeled NFS mailing list James Morris Saturday, 21 July RE: [kvm-devel] [RFC][PATCH 00/01]qemu VM entrypoints Joshua Brindle Re: [kvm-devel] [RFC][PATCH 00/01]qemu VM entrypoints James Morris Re: [kvm-devel] [RFC][PATCH 00/01]qemu VM entrypoints David Windsor Re: There is a bug in checkmodule that is driving me nuts Shintaro Fujiwara Friday, 20 July Re: [kvm-devel] [RFC][PATCH 00/01]qemu VM entrypoints David Windsor Re: [kvm-devel] [RFC][PATCH 00/01]qemu VM entrypoints James Morris Re: [kvm-devel] [RFC][PATCH 00/01]qemu VM entrypoints James Morris Re: [kvm-devel] [RFC][PATCH 00/01]qemu VM entrypoints James Morris Re: There is a bug in checkmodule that is driving me nuts Karl MacMillan Re: [kvm-devel] [RFC][PATCH 00/01]qemu VM entrypoints David Windsor Re: [kvm-devel] [RFC][PATCH 00/01]qemu VM entrypoints David Windsor Re: [kvm-devel] [RFC][PATCH 00/01]qemu VM entrypoints James Morris Re: Proposed patch to lisemanage/policycoreutils patches to not run genhomedircon/setfiles when setting booleans. Daniel J Walsh Re: [kvm-devel] [RFC][PATCH 00/01]qemu VM entrypoints James Morris There is a bug in checkmodule that is driving me nuts Daniel J Walsh Re: [RFC]integrity: SELinux patch Mimi Zohar Re: Proposed patch to lisemanage/policycoreutils patches to not run genhomedircon/setfiles when setting booleans. Stephen Smalley Re: [Fwd: cups AVC...] James Morris Re: [Fwd: cups AVC...] Stephen Smalley Re: [Fwd: cups AVC...] Eric Paris Re: [Fwd: cups AVC...] Stephen Smalley Re: [Fwd: cups AVC...] Daniel J Walsh Re: [Fwd: cups AVC...] James Morris Re: [Fwd: cups AVC...] Stephen Smalley Re: [Fwd: cups AVC...] James Morris Re: New test program for libselinux/utils that helped with testing MLS/Role/Level coding Stephen Smalley Re: [Fwd: cups AVC...] Stephen Smalley [Fwd: cups AVC...] Daniel J Walsh Re: New test program for libselinux/utils that helped with testing MLS/Role/Level coding Xavier Toth Re: New test program for libselinux/utils that helped with testing MLS/Role/Level coding Ted X Toth Thursday, 19 July Re: [RFC]integrity: SELinux patch Stephen Smalley Wednesday, 18 July vmware policy modification problems Ken YANG Re: [RFC]integrity: SELinux patch Mimi Zohar [RFC][Patch 3/3]integrity:TPM internel kernel interface Mimi Zohar [RFC][Patch 2/3]integrity: IMA as an integrity service provider Mimi Zohar [RFC][Patch 1/3]integrity: API, hooks, placement and dummy provider Mimi Zohar Re: [RFC]integrity: SELinux patch Mimi Zohar Re: New test program for libselinux/utils that helped with testing MLS/Role/Level coding Ted X Toth Proposed patch to lisemanage/policycoreutils patches to not run genhomedircon/setfiles when setting booleans. Daniel J Walsh Re: [POLICYREP] [PATCH 1/1] policyrep role implementation Joshua Brindle Re: [RFC]integrity: SELinux patch Steve G Re: [POLICYREP] [RFC/PATCH 2/3] policy package implementation Christopher J. PeBenito Tuesday, 17 July Re: [POLICYREP] [RFC/PATCH 2/3] policy package implementation Karl MacMillan Re: [POLICYREP] [RFC/PATCH 2/3] policy package implementation Joshua Brindle Re: [POLICYREP] [RFC/PATCH 1/3] policy package class Karl MacMillan Re: [POLICYREP] [RFC/PATCH 2/3] policy package implementation Karl MacMillan Re: [POLICYREP] [RFC/PATCH 2/3] policy package implementation Joshua Brindle Re: [POLICYREP] [RFC/PATCH 2/3] policy package implementation Joshua Brindle Re: [POLICYREP] [RFC/PATCH 1/3] policy package class Joshua Brindle Re: [POLICYREP] [PATCH 1/1] policyrep role implementation Karl MacMillan Re: [POLICYREP] [PATCH 1/1] policyrep role implementation Karl MacMillan Re: [POLICYREP] [RFC/PATCH 2/3] policy package implementation Karl MacMillan Re: [POLICYREP] [RFC/PATCH 1/3] policy package class Karl MacMillan Re: [POLICYREP] [PATCH 1/1] policyrep role implementation Joshua Brindle [POLICYREP] [PATCH 1/1] policyrep role implementation Joshua Brindle [POLICYREP] [PATCH 0/1] policyrep role implementation Joshua Brindle Re: [POLICYREP] [RFC/PATCH 2/3] policy package implementation Joshua Brindle Re: [POLICYREP] [RFC/PATCH 1/3] policy package class Joshua Brindle Re: [POLICYREP] [RFC/PATCH 2/3] policy package implementation Karl MacMillan Re: [POLICYREP] [RFC/PATCH 1/3] policy package class Karl MacMillan [POLICYREP] [RFC/PATCH 3/3] policy package tests method_at_manicmethod.com [POLICYREP] [RFC/PATCH 2/3] policy package implementation method_at_manicmethod.com [POLICYREP] [RFC/PATCH 1/3] policy package class method_at_manicmethod.com [POLICYREP] [RFC/PATCH 0/3] policy package implementation with xar method_at_manicmethod.com Re: [RFC]integrity: SELinux patch James Morris Re: [RFC]integrity: SELinux patch Stephen Smalley Re: [RFC]integrity: SELinux patch James Morris Re: [RFC]integrity: SELinux patch Paul Moore Re: [RFC]integrity: SELinux patch Mimi Zohar Re: [PATCH v2 1/2] NetLabel: enable dynamic activation/deactivation of NetLabel/SELinux enforcement Paul Moore Re: [RFC]integrity: SELinux patch Joshua Brindle Re: Cannot run ldconfig in a home directory John D. Ramsdell Re: Cannot run ldconfig in a home directory Michal Piotrowski Cannot run ldconfig in a home directory John D. Ramsdell Monday, 16 July Re: [PATCH v2 0/2] Respun patches from Friday the 13th James Morris Re: [PATCH v2 1/2] NetLabel: enable dynamic activation/deactivation of NetLabel/SELinux enforcement James Morris Re: [RFC]integrity: SELinux patch James Morris Re: [RFC]integrity: SELinux patch Mimi Zohar Re: [RFC]integrity: SELinux patch Paul Moore Re: [RFC]integrity: SELinux patch Joshua Brindle [RFC]integrity: SELinux patch Mimi Zohar [PATCH v2 2/2] SELinux: use SECINITSID_NETMSG instead of SECINITSID_UNLABELED for NetLabel Paul Moore [PATCH v2 0/2] Respun patches from Friday the 13th Paul Moore [PATCH v2 1/2] NetLabel: enable dynamic activation/deactivation of NetLabel/SELinux enforcement Paul Moore Saturday, 14 July Re: [PATCH 2/2] NetLabel: enable dynamic activation/deactivation of NetLabel/SELinux enforcement James Morris Re: [PATCH 2/2] NetLabel: enable dynamic activation/deactivation of NetLabel/SELinux enforcement Paul Moore Re: [PATCH 2/2] NetLabel: enable dynamic activation/deactivation of NetLabel/SELinux enforcement James Morris Re: [PATCH 2/2] NetLabel: enable dynamic activation/deactivation of NetLabel/SELinux enforcement Paul Moore Re: [PATCH 2/2] NetLabel: enable dynamic activation/deactivation of NetLabel/SELinux enforcement James Morris Friday, 13 July [PATCH 1/2] SELinux: use SECINITSID_NETMSG instead of SECINITSID_UNLABELED for NetLabel Paul Moore [PATCH 2/2] NetLabel: enable dynamic activation/deactivation of NetLabel/SELinux enforcement Paul Moore [PATCH 0/2] Fix for the unlabeled NetLabel access check patch Paul Moore Thursday, 12 July RFC: LSM/SELinux handling of mount options Eric Paris Re: RHEL 5 strict and mls login fails B Topscher RE: Libsemanage dependency on version of Linux... Stephen Smalley Re: Libsemanage dependency on version of Linux... Stephen Smalley RE: Libsemanage dependency on version of Linux... Hasan Rezaul-CHR010 Re: RHEL 5 strict and mls login fails Stephen Smalley Re: Libsemanage dependency on version of Linux... Stephen Smalley RHEL 5 strict and mls login fails B Topscher Libsemanage dependency on version of Linux... Hasan Rezaul-CHR010 Re: which tool i should use for policy generation Stephen Smalley Wednesday, 11 July which tool i should use for policy generation Ken YANG Re: [PATCH] Initial policyrep patch v3 Joshua Brindle Additional permission checks for nscd Daniel J Walsh Add swigify directive to makefile in libselinux to allow rebuild of swigfiles in spec file. Daniel J Walsh libselinux patch for new flask.h/access_vectors.h Daniel J Walsh [PATCH] Initial policyrep patch v3 Karl MacMillan Re: SELinux user root Stefan Schulze Frielinghaus Re: using semodule_package Joshua Brindle Re: using semodule_package Stephen Smalley Tuesday, 10 July using semodule_package Clarkson, Mike R \(US SSA\) Re: using newrole to reset the mls level Stephen Smalley Re: getfilecon return code Joshua Brindle using newrole to reset the mls level Clarkson, Mike R \(US SSA\) Kernel caching Laura Crawley Re: can i use selinux and others to control bandwidth? Stephen Smalley Re: SELinux user root Stephen Smalley Re: getfilecon return code Stephen Smalley can i use selinux and others to control bandwidth? Ken YANG Re: Newbie: Using SELINUX to contain vmware Ken YANG Re: SELinux user root Ken YANG Re: Newbie: Using SELINUX to contain vmware Louis Lam Re: SELinux user root Stefan Schulze Frielinghaus Monday, 9 July Re: getfilecon return code John D. Ramsdell Re: getfilecon return code Joshua Brindle Re: getfilecon return code Stephen Smalley Re: getfilecon return code Stephen Smalley Re: SELinux user root Stephen Smalley getfilecon return code John D. Ramsdell Re: [patch] libselinux: fix getfilecon handling of zero-length context Joshua Brindle Re: [patch] libselinux: fix getfilecon handling of zero-length context Stephen Smalley Re: [patch] libselinux: fix getfilecon handling of zero-length context Joshua Brindle [patch] libselinux: fix getfilecon handling of zero-length context Stephen Smalley Re: Java and SE Linux Stephen Smalley Re: Newbie: Using SELINUX to contain vmware Ken YANG Re: Newbie: Using SELINUX to contain vmware Louis Lam Sunday, 8 July SELinux user root Stefan Schulze Frielinghaus Saturday, 7 July Re: [Fwd: libsemanage API] Joe Nall Friday, 6 July [Fwd: libsemanage API] Daniel J Walsh Java and SE Linux Mark Re: Newbie: Using SELINUX to contain vmware Louis Lam Re: Newbie: Using SELINUX to contain vmware Ken YANG Re: Newbie: Using SELINUX to contain vmware Ken YANG Newbie: Using SELINUX to contain vmware Louis Lam Thursday, 5 July Re: Can someone please assist me with selinux issue Stephen Smalley Wednesday, 4 July Re: Can someone please assist me with selinux issue David Cottle Re: selinux performance Steve G Re: ANN: SELinux Policy IDE (SLIDE) version 1.1 Shintaro Fujiwara selinux performance somayeh afzali Tuesday, 3 July Re: oracle policy Daniel J Walsh Re: oracle policy Daniel J Walsh Re: Allowing apache to read custom types Daniel J Walsh Re: Can someone please assist me with selinux issue Stephen Smalley Re: GPLv3 Russell Coker Re: Allowing apache to read custom types Karl MacMillan Can someone please assist me with selinux issue David Cottle Monday, 2 July Re: [patch 1/3] libsemanage: genhomedircon replacement James Antill Re: oracle policy rob myers Re: [patch 1/3] libsemanage: genhomedircon replacement Joshua Brindle Re: Allowing apache to read custom types Daniel J Walsh RE: [patch 1/3] libsemanage: genhomedircon replacement Joshua Brindle Re: GPLv3 John D. Ramsdell Re: GPLv3 KaiGai Kohei Re: [patch] refpolicy update for cap_setfcap Serge E. Hallyn Re: apcupsd policy addon Christopher J. PeBenito Re: [patch] refpolicy update for cap_setfcap Christopher J. PeBenito Re: [patch 1/3] libsemanage: genhomedircon replacement James Antill Allowing apache to read custom types Karl MacMillan Re: GPLv3 Karl MacMillan Re: [patch 1/3] libsemanage: genhomedircon replacement Karl MacMillan Re: [patch 1/3] libsemanage: genhomedircon replacement Joshua Brindle GPLv3 Russell Coker Sunday, 1 July Re: selinux performance James Morris [ANN] SE-PostgreSQL 1.0 Beta released KaiGai Kohei apcupsd policy addon Stefan Schulze Frielinghaus selinux performance somayeh afzali Re: selinux AVC errors despite making a rule :( Joshua Brindle selinux AVC errors despite making a rule :( David Cottle Friday, 29 June Re: [PATCH] Initial policyrep patch v2 Karl MacMillan Re: [PATCH] Initial policyrep patch v2 Joshua Brindle Re: [PATCH] SELinux: use SECINITSID_NETMSG instead of SECINITSID_UNLABELED for NetLabel Paul Moore Re: [PATCH] SELinux: use SECINITSID_NETMSG instead of SECINITSID_UNLABELED for NetLabel James Morris ANN: Reference Policy Release Christopher J. PeBenito [PATCH] SELinux: use SECINITSID_NETMSG instead of SECINITSID_UNLABELED for NetLabel Paul Moore LCA 2008 CFP James Morris Thursday, 28 June Re: selinux and FC6 Paul Moore [patch] refpolicy update for cap_setfcap Serge E. Hallyn Re: file_contexts & labelling... Joshua Brindle Re: selinux and FC6 Karl MacMillan Re: selinux and FC6 James Athey [PATCH] Initial policyrep patch v2 Karl MacMillan Re: [PATCH] Initial policyrep patch Karl MacMillan selinux and FC6 shazyboy khan Wednesday, 27 June file_contexts & labelling... Hasan Rezaul-CHR010 Re: [PATCHv2 0/5] Labeled network policy patches Paul Moore Re: rpcbind policy Christopher J. PeBenito Re: [PATCHv2 0/5] Labeled network policy patches Christopher J. PeBenito Tuesday, 26 June Re: Clamd creates files in amavis_var_run_t Christopher J. PeBenito Re: pyzor needs to communicate with http to get updates, signal spam Christopher J. PeBenito Re: [RFC] Security Enhanced NFS (SENFS) Requirements - draft 05 James Morris [RFC] Security Enhanced NFS (SENFS) Requirements - draft 06 James Morris Monday, 25 June RE: mls contraints on adding files to directories Stephen Smalley RE: mls contraints on adding files to directories Clarkson, Mike R \(US SSA\) Re: [PATCH] Initial policyrep patch James Antill RE: mls contraints on adding files to directories Stephen Smalley RE: mls contraints on adding files to directories Clarkson, Mike R \(US SSA\) Re: mls contraints on adding files to directories Stephen Smalley mls contraints on adding files to directories Clarkson, Mike R \(US SSA\) Re: regarding privilege granting Steve G [PATCH] Initial policyrep patch Karl MacMillan Re: regarding privilege granting Karl MacMillan Re: regarding privilege granting Stephen Smalley Re: regarding privilege granting Stephen Smalley Re: regarding privilege granting Steve G Re: regarding privilege granting Karl MacMillan Re: regarding privilege granting Steve G Re: Question on security_load_policy Stephen Smalley Re: backups in fedora david carvalho Re: Question on security_load_policy Karl MacMillan Re: [RFC] Security Enhanced NFS (SENFS) Requirements - draft 05 Paul Moore Sunday, 24 June Re: Question on security_load_policy Nagendra Tomar Question on security_load_policy Nagendra Tomar Saturday, 23 June Re: [RFC] Security Enhanced NFS (SENFS) Requirements - draft 05 James Morris Re: [RFC] Security Enhanced NFS (SENFS) Requirements - draft 05 James Morris Re: [RFC] Security Enhanced NFS (SENFS) Requirements - draft 05 Casey Schaufler Re: [RFC] Security Enhanced NFS (SENFS) Requirements - draft 05 James Morris Re: [RFC] Security Enhanced NFS (SENFS) Requirements - draft 05 Casey Schaufler Friday, 22 June Re: [RFC] Security Enhanced NFS (SENFS) Requirements - draft 05 James Morris Re: [RFC] Security Enhanced NFS (SENFS) Requirements - draft 05 James Morris Re: [RFC] Security Enhanced NFS (SENFS) Requirements - draft 05 Paul Moore Re: [RFC] Security Enhanced NFS (SENFS) Requirements - draft 05 Casey Schaufler Re: [patch 1/3] libsemanage: genhomedircon replacement Eamon Walsh Re: [patch 1/3] libsemanage: genhomedircon replacement James Antill Re: [RFC][PATCH] libselinux: refactored SWIG bindings Stephen Smalley Re: [patch 1/3] libsemanage: genhomedircon replacement Karl MacMillan Re: [patch 1/3] libsemanage: genhomedircon replacement Eamon Walsh RE: [patch 1/3] libsemanage: genhomedircon replacement Karl MacMillan RE: [patch 1/3] libsemanage: genhomedircon replacement Joshua Brindle Re: backups in fedora James Antill Re: [patch 1/3] libsemanage: genhomedircon replacement Karl MacMillan backups in fedora david carvalho RE: RHEL5 console login problem - pam_selinux cannot determine newcontext Kearney, Luke Thursday, 21 June [PATCHv2 3/5] Add NetLabel labeled and unlabeled support to the service domains Paul Moore Friday, 22 June Re: [patch 1/3] libsemanage: genhomedircon replacement Daniel J Walsh Re: Linux user / SELinux user changes... Stephen Smalley Thursday, 21 June Re: Linux user / SELinux user changes... Ken YANG Linux user / SELinux user changes... Hasan Rezaul-CHR010 [PATCHv2 5/5] Add NetLabel labeled and unlabeled support to the administrative domains Paul Moore [PATCHv2 4/5] Add NetLabel labeled and unlabeled support to the application domains Paul Moore [PATCHv2 1/5] Use the netmsg initial SID for NetLabel connections Paul Moore [PATCHv2 2/5] Add NetLabel labeled and unlabeled support to the system domains Paul Moore [PATCHv2 0/5] Labeled network policy patches Paul Moore Re: [patch 1/3] libsemanage: genhomedircon replacement Eamon Walsh Re: [RFC v2][PATCH] selinux: enable authoritative granting of capabilities Casey Schaufler RE: [patch 1/3] libsemanage: genhomedircon replacement Karl MacMillan RE: [patch 1/3] libsemanage: genhomedircon replacement Joshua Brindle RE: [patch 1/3] libsemanage: genhomedircon replacement Karl MacMillan RE: [patch 1/3] libsemanage: genhomedircon replacement Joshua Brindle RE: [patch 1/3] libsemanage: genhomedircon replacement Karl MacMillan As part of the merger of Strict and Targeted policy I have gone about reorganizing user definitions. Daniel J Walsh Re: nagios changes Christopher J. PeBenito RE: [patch 1/3] libsemanage: genhomedircon replacement Joshua Brindle Re: [patch 1/3] libsemanage: genhomedircon replacement Karl MacMillan Re: RHEL5 console login problem - pam_selinux cannot determine new context Stephen Smalley Re: dhcpd needs additional privs from dbus Christopher J. PeBenito Re: Services running into vserver Stephen Smalley Re: RHEL5 console login problem - pam_selinux cannot determine new context Stephen Smalley Re: Procmail needs to use ypbind, eliminate bogus udp avc messages Christopher J. PeBenito RHEL5 console login problem - pam_selinux cannot determine new context Luke Kearney Re: Cron needs many changes to run on MLS Christopher J. PeBenito Re: saslauthd needs to be able to update the passwd file (passwd expired) Christopher J. PeBenito Re: Many fixes to get xen working - Diff off of strict-targeted-merge-2266 Christopher J. PeBenito Re: [RFC v2][PATCH] selinux: enable authoritative granting of capabilities Stephen Smalley Re: Services running into vserver Stephen Smalley Services running into vserver Daniel Gil Mayol Re: [RFC] Security Enhanced NFS (SENFS) Requirements - draft 05 James Morris Wednesday, 20 June RE: [PATCH] libselinux: add x_contexts path lookup function Joshua Brindle RE: [RFC] Security Enhanced NFS (SENFS) Requirements - draft 05 James Morris Re: [RFC] Security Enhanced NFS (SENFS) Requirements - draft 05 James Morris Re: [RFC v2][PATCH] selinux: enable authoritative granting of capabilities Joshua Brindle Re: [RFC v2][PATCH] selinux: enable authoritative granting of capabilities Serge E. Hallyn Re: [RFC v2][PATCH] selinux: enable authoritative granting of capabilities Stephen Smalley [RFC] Security Enhanced NFS (SENFS) Requirements - draft 05 James Morris Re: [RFC v2][PATCH] selinux: enable authoritative granting of capabilities Serge E. Hallyn [PATCH] libselinux: add x_contexts path lookup function Eamon Walsh Re: kernel_corecommands changes Christopher J. PeBenito Re: kernel_files changes Christopher J. PeBenito Re: kernel_selinux changes Christopher J. PeBenito [PATCH] libselinux: minor man page fixes Eamon Walsh Re: [RFC v2][PATCH] selinux: enable authoritative granting of capabilities Stephen Smalley Re: [PATCH 1/5] Use the netmsg initial SID for NetLabel connections Paul Moore Re: [PATCH] libsepol: sepol_check_context correct error handling behavior Stephen Smalley Re: [PATCH 6/7] libselinux: labeling support (try 4) Stephen Smalley Re: radius wants to be able to read samba files Christopher J. PeBenito Re: [PATCH 6/7] libselinux: labeling support (try 4) Stephen Smalley Re: [PATCH 1/5] Use the netmsg initial SID for NetLabel connections Christopher J. PeBenito Re: Per Domain Permissive Mode Stephen Smalley Re: Per Domain Permissive Mode James Morris Re: Per Domain Permissive Mode Stephen Smalley Re: three problems about normal user login in strict policy Ken YANG Re: three problems about normal user login in strict policy Daniel J Walsh Re: three problems about normal user login in strict policy Ken YANG Tuesday, 19 June Re: [RFC][PATCH] libselinux: refactored SWIG bindings Daniel J Walsh Re: [RFC][PATCH] libselinux: refactored SWIG bindings James Athey Re: problem setting the security context of directories vs files Daniel J Walsh RE: problem setting the security context of directories vs files Clarkson, Mike R \(US SSA\) Re: Manage samba changes Christopher J. PeBenito Re: [RFC][PATCH] libselinux: refactored SWIG bindings Daniel J Walsh Re: snmp changes Christopher J. PeBenito Re: problem setting the security context of directories vs files Daniel J Walsh Re: problem setting the security context of directories vs files James Carter problem setting the security context of directories vs files Clarkson, Mike R \(US SSA\) Re: Per Domain Permissive Mode Daniel J Walsh Re: Per Domain Permissive Mode Karl MacMillan Re: Per Domain Permissive Mode James Morris Re: Per Domain Permissive Mode James Morris Re: Per Domain Permissive Mode Joshua Brindle Re: [patch 1/3] libsemanage: genhomedircon replacement Joshua Brindle Re: [RFC][PATCH] libselinux: refactored SWIG bindings James Athey Re: [PATCH 1/5] Use the netmsg initial SID for NetLabel connections Paul Moore Per Domain Permissive Mode Daniel J Walsh Re: unable to connect PostgreSQL from user_t Christopher J. PeBenito Re: [PATCH 1/5] Use the netmsg initial SID for NetLabel connections Christopher J. PeBenito Re: [RFC v2][PATCH] refpolicy: add memprotect and cap_override definitions and interfaces Christopher J. PeBenito Re: three problems about normal user login in strict policy Christopher J. PeBenito Re: three problems about normal user login in strict policy Stephen Smalley Re: [RFC][PATCH] libselinux: refactored SWIG bindings Stephen Smalley Re: three problems about normal user login in strict policy Ken YANG Monday, 18 June [PATCH] libsepol: sepol_check_context correct error handling behavior Eamon Walsh Re: [RFC v2][PATCH] selinux: enable authoritative granting of capabilities Stephen Smalley Re: [RFC v2][PATCH] selinux: enable authoritative granting of capabilities Casey Schaufler Re: [RFC v2][PATCH] selinux: enable authoritative granting of capabilities Stephen Smalley Thursday, 14 June Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Karl MacMillan Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Karl MacMillan Friday, 15 June Re: [RFC v2][PATCH] selinux: enable authoritative granting of capabilities Karl MacMillan Saturday, 16 June unable to connect PostgreSQL from user_t KaiGai Kohei Friday, 15 June [PATCH 7/7] libselinux: labeling support (try 4) Eamon Walsh [PATCH 6/7] libselinux: labeling support (try 4) Eamon Walsh [PATCH 5/7] libselinux: labeling support (try 4) Eamon Walsh [PATCH 4/7] libselinux: labeling support (try 4) Eamon Walsh [PATCH 3/7] libselinux: labeling support (try 4) Eamon Walsh [PATCH 2/7] libselinux: labeling support (try 4) Eamon Walsh [PATCH 1/7] libselinux: labeling support (try 4) Eamon Walsh Re: [RFC v2][PATCH] selinux: enable authoritative granting of capabilities Casey Schaufler Re: [RFC v2][PATCH] selinux: enable authoritative granting of capabilities Stephen Smalley Re: regarding privilege granting Stephen Smalley Re: [RFC v2][PATCH] selinux: enable authoritative granting of capabilities Casey Schaufler regarding privilege granting Steve G Re: [RFC v2][PATCH] selinux: enable authoritative granting of capabilities Stephen Smalley Re: [RFC v2][PATCH] selinux: enable authoritative granting of capabilities Casey Schaufler [RFC v2][PATCH] refpolicy: add memprotect and cap_override definitions and interfaces Stephen Smalley [RFC v2][PATCH] selinux: enable authoritative granting of capabilities Stephen Smalley Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Stephen Smalley Thursday, 14 June [PATCH 3/5] Add NetLabel labeled and unlabeled support to the service domains Paul Moore [PATCH 5/5] Add NetLabel labeled and unlabeled support to the administrative domains Paul Moore Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Casey Schaufler [PATCH 4/5] Add NetLabel labeled and unlabeled support to the application domains Paul Moore [PATCH 2/5] Add NetLabel labeled and unlabeled support to the system domains Paul Moore [PATCH 1/5] Use the netmsg initial SID for NetLabel connections Paul Moore [PATCH 0/5] NetLabel reference policy patches Paul Moore [REFERENCE ONLY 1/1] SELinux: use SECINITSID_NETMSG instead of SECINITSID_UNLABELED for NetLabel Paul Moore [REFERENCE ONLY 0/1] Kernel patch to go along with the Reference Policy patches Paul Moore Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Christopher J. PeBenito Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities James Morris Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Stephen Smalley Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Stephen Smalley Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Chad Sellers Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities James Morris Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Chad Sellers Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities James Morris Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Stephen Smalley Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Stephen Smalley Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Chad Sellers Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Stephen Smalley Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Joshua Brindle Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Stephen Smalley Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Joshua Brindle Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Casey Schaufler Re: [PATCH 1/3] libselinux: labeling support (try 3) Stephen Smalley Re: Informix has label based access control Shintaro Fujiwara Re: [PATCH 3/3] libselinux: labeling support (try 3) Stephen Smalley Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Stephen Smalley Re: selinux backups Stephen Smalley Re: selinux backups Russell Coker Wednesday, 13 June Informix has label based access control Russell Coker Thursday, 14 June Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Russell Coker Wednesday, 13 June Re: selinux backups Kazuki Omo Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Daniel J Walsh Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Stephen Smalley Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Daniel J Walsh Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Stephen Smalley Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Stephen Smalley Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Eric Paris Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Christopher J. PeBenito Re: selinux backups Stephen Smalley selinux backups david carvalho Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Stephen Smalley Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Christopher J. PeBenito Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Stephen Smalley [RFC][PATCH] libselinux: refactored SWIG bindings James Athey Re: kernel_mls changes Christopher J. PeBenito Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Stephen Smalley Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Russell Coker Re: Can't login in F7 strict Shintaro Fujiwara Tuesday, 12 June Re: three problems about normal user login in strict policy Ken YANG Re: [PATCH 1/3] libselinux: labeling support (try 3) Eamon Walsh Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Stephen Smalley Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Stephen Smalley Re: Can't login in F7 strict Shintaro Fujiwara Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Casey Schaufler Re: admin_amtu changes Daniel J Walsh Re: admin_amtu changes Christopher J. PeBenito Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities James Morris Re: [RFC] use the netmsg initial SID for NetLabel connections Paul Moore Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Casey Schaufler Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Serge E. Hallyn Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Stephen Smalley Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Serge E. Hallyn Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Stephen Smalley Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Casey Schaufler RE: [RFC][PATCH] selinux: enable authoritative granting of capab ilities Chad Hanson Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Stephen Smalley Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Stephen Smalley Re: fsdaemon writes files/disks at different levels, Needs write down. Christopher J. PeBenito Re: apps_slocate changes Christopher J. PeBenito Re: services_networkmanager changes Christopher J. PeBenito Re: services_mailman changes Christopher J. PeBenito Re: kernel_terminal changes Christopher J. PeBenito Re: Arpwatch uses nsswitch Christopher J. PeBenito Re: Avahi changes Christopher J. PeBenito Re: Cyrus attempts to write snmp_var_lib Christopher J. PeBenito Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Stephen Smalley Re: Can't login in F7 strict Daniel J Walsh Re: [RFC] use the netmsg initial SID for NetLabel connections Christopher J. PeBenito Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Stephen Smalley Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Stephen Smalley Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Stephen Smalley Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Stephen Smalley Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Russell Coker Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Russell Coker Re: Fwd: "star -xattr" in SELinux enabled system Russell Coker Monday, 11 June Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Casey Schaufler Re: [PATCH 1/3] libselinux: labeling support (try 3) Eamon Walsh Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Serge E. Hallyn Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities James Morris Re: Can't login in F7 strict Shintaro Fujiwara Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Casey Schaufler Re: [PATCH 1/3] libselinux: labeling support (try 3) Karl MacMillan Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities Serge E. Hallyn Re: [RFC][PATCH] selinux: enable authoritative granting of capabilities James Morris [RFC][PATCH] selinux: enable authoritative granting of capabilities Stephen Smalley [PATCH 3/3] libselinux: labeling support (try 3) Eamon Walsh [PATCH 2/3] libselinux: labeling support (try 3) Eamon Walsh [PATCH 1/3] libselinux: labeling support (try 3) Eamon Walsh [PATCH] libselinux: new callback mechanism Eamon Walsh Re: Can't login in F7 strict Daniel J Walsh Re: fsdaemon writes files/disks at different levels, Needs write down. Daniel J Walsh Re: fsdaemon writes files/disks at different levels, Needs write down. Christopher J. PeBenito Re: fsdaemon writes files/disks at different levels, Needs write down. Daniel J Walsh Re: admin_logwatch changes Christopher J. PeBenito Re: Spam can connect to smtp port and can use mysql backend Christopher J. PeBenito Re: iptables reads etc runtime files, execed out of failto ban with terminal redirected Christopher J. PeBenito Re: fsdaemon writes files/disks at different levels, Needs write down. Christopher J. PeBenito Re: openct modifications Christopher J. PeBenito Re: pcscd sends itself a signal and communicates with openct Christopher J. PeBenito Re: kernel_devices changes Christopher J. PeBenito Re: Additional textrel-shlib_t, ldconfig execed in rebuilding kernel needs tmp lnk_files Christopher J. PeBenito Re: Mdadm makes its own devices, reads generic iscsi Christopher J. PeBenito Re: apps_uml changes Daniel J Walsh Re: Allow tftpd to read public files Christopher J. PeBenito Re: setroubleshoot sends signull to itself Christopher J. PeBenito Re: Proper transition rules for pppd to create /etc/resolv.confe Christopher J. PeBenito Re: Oddjob does not use the audit system Christopher J. PeBenito Re: fix openvpn log/run file context Christopher J. PeBenito Re: apps_uml changes Christopher J. PeBenito Re: apps_mozilla changes Christopher J. PeBenito RE: audit2allow module generation Anand Patel Sunday, 10 June Re: Fwd: "star -xattr" in SELinux enabled system Nagendra Tomar Saturday, 9 June Re: Fwd: "star -xattr" in SELinux enabled system Russell Coker Re: Fwd: "star -xattr" in SELinux enabled system Russell Coker Re: Fwd: "star -xattr" in SELinux enabled system Nagendra Tomar Re: SELinux STRICT policy on CentOS 5 James Morris SELinux STRICT policy on CentOS 5 Brian Smith Friday, 8 June Re: Fwd: "star -xattr" in SELinux enabled system Russell Coker Re: [PATCH 3/3] libselinux: class and permission mapping support (try 3) Stephen Smalley [PATCH 3/3] libselinux: class and permission mapping support (try 3) Eamon Walsh [PATCH 2/3] libselinux: class and permission mapping support (try 3) Eamon Walsh [PATCH 1/3] libselinux: class and permission mapping support (try 3) Eamon Walsh RE: audit2allow module generation Karl MacMillan Re: Fwd: "star -xattr" in SELinux enabled system Nagendra Tomar Re: [RFC] use the netmsg initial SID for NetLabel connections Paul Moore Re: [RFC] use the netmsg initial SID for NetLabel connections Christopher J. PeBenito Re: Fwd: "star -xattr" in SELinux enabled system Stephen Smalley Thursday, 7 June Re: Fwd: "star -xattr" in SELinux enabled system Russell Coker Re: [PATCH 2/2] fix several unaligned kernel accesses in the CIPSO engine James Morris Re: [PATCH 1/2] NetLabel: consolidate the struct socket/sock handling to just struct sock James Morris Fwd: "star -xattr" in SELinux enabled system Nagendra Tomar [RFC] use the netmsg initial SID for NetLabel connections Paul Moore Re: [PATCH 0/5] libselinux: add object class discovery Eamon Walsh Re: three problems about normal user login in strict policy Christopher J. PeBenito [PATCH 1/2] NetLabel: consolidate the struct socket/sock handling to just struct sock Paul Moore [PATCH 2/2] fix several unaligned kernel accesses in the CIPSO engine Paul Moore [PATCH 0/2] NetLabel cleanups Paul Moore Re: Guideline for RPM packages KaiGai Kohei Re: Guideline for RPM packages Stephen Smalley Guideline for RPM packages KaiGai Kohei Re: [PATCH 2/2] libselinux: class and permission mapping support (try 2) Karl MacMillan Re: generic fallbacks of getpeercon (Re: [redhat-lspp] Labeling an interface) KaiGai Kohei Re: three problems about normal user login in strict policy Stephen Smalley Re: three problems about normal user login in strict policy Christopher J. PeBenito [PATCH 5/5] libselinux: update checkAccess for object class discovery Christopher J. PeBenito [PATCH 4/5] libselinux: add checking for kernel object class discovery Christopher J. PeBenito [PATCH 3/5] libselinux: add string<->value functions that use discovery Christopher J. PeBenito [PATCH 2/5] libselinux: add object class discovery Christopher J. PeBenito [PATCH 1/5] libselinux: rename existing name<->value functions for compat Christopher J. PeBenito [PATCH 0/5] libselinux: add object class discovery Christopher J. PeBenito Re: three problems about normal user login in strict policy Stephen Smalley three problems about normal user login in strict policy Ken YANG Re: [PATCH 3/5] libselinux: add string<->value functions that use discovery Christopher J. PeBenito Re: [PATCH 3/5] libselinux: add string<->value functions that use discovery Christopher J. PeBenito Re: generic fallbacks of getpeercon (Re: [redhat-lspp] Labeling an interface) Paul Moore Re: Can't login in F7 strict Shintaro Fujiwara Re: generic fallbacks of getpeercon (Re: [redhat-lspp] Labeling an interface) KaiGai Kohei Re: generic fallbacks of getpeercon (Re: [redhat-lspp] Labeling an interface) KaiGai Kohei Wednesday, 6 June Re: [PATCH 3/5] libselinux: add string<->value functions that use discovery Eamon Walsh Re: [PATCH 1/5] libselinux: rename existing name<->value functions for compat Eamon Walsh Re: [PATCH 1/5] libselinux: rename existing name<->value functions for compat Joshua Brindle Re: generic fallbacks of getpeercon (Re: [redhat-lspp] Labeling an interface) Eamon Walsh Re: generic fallbacks of getpeercon (Re: [redhat-lspp] Labeling an interface) Paul Moore Re: Can't login in F7 strict Shintaro Fujiwara Re: generic fallbacks of getpeercon (Re: [redhat-lspp] Labeling an interface) Joshua Brindle Re: generic fallbacks of getpeercon (Re: [redhat-lspp] Labeling an interface) Paul Moore Re: generic fallbacks of getpeercon (Re: [redhat-lspp] Labeling an interface) Joshua Brindle Re: [PATCH 1/5] libselinux: rename existing name<->value functions for compat Eamon Walsh Re: Passing sec info to security modules when mounting an FS Stephen Smalley Re: generic fallbacks of getpeercon (Re: [redhat-lspp] Labeling an interface) Paul Moore Re: Passing sec info to security modules when mounting an FS Eric Paris [PATCH 5/5] libselinux: update checkAccess for object class discovery Christopher J. PeBenito [PATCH 4/5] libselinux: add checking for kernel object class discovery Christopher J. PeBenito [PATCH 3/5] libselinux: add string<->value functions that use discovery Christopher J. PeBenito [PATCH 2/5] libselinux: add object class discovery Christopher J. PeBenito [PATCH 1/5] libselinux: rename existing name<->value functions for compat Christopher J. PeBenito [PATCH 0/5] libselinux: add object class discovery Christopher J. PeBenito RE: generic fallbacks of getpeercon (Re: [redhat-lspp] Labeling an interface) Stephen Smalley RE: generic fallbacks of getpeercon (Re: [redhat-lspp] Labeling an interface) Venkat Yekkirala [PATCH 2/2] libselinux: class and permission mapping support (try 2) Eamon Walsh RE: generic fallbacks of getpeercon (Re: [redhat-lspp] Labeling an interface) Venkat Yekkirala [PATCH 1/2] libselinux: class and permission mapping support (try 2) Eamon Walsh Re: [PATCH] Protection for exploiting null dereference using mmap Chris Wright Re: [PATCH] Protection for exploiting null dereference using mmap James Morris Re: generic fallbacks of getpeercon (Re: [redhat-lspp] Labeling an interface) Stephen Smalley Re: generic fallbacks of getpeercon (Re: [redhat-lspp] Labeling an interface) KaiGai Kohei Re: generic fallbacks of getpeercon (Re: [redhat-lspp] Labeling an interface) Paul Moore Re: generic fallbacks of getpeercon (Re: [redhat-lspp] Labeling an interface) Stephen Smalley Re: [PATCH] Protection for exploiting null dereference using mmap Stephen Smalley Re: generic fallbacks of getpeercon (Re: [redhat-lspp] Labeling an interface) KaiGai Kohei Re: generic fallbacks of getpeercon (Re: [redhat-lspp] Labeling an interface) KaiGai Kohei Re: SELinux userspace infrastructure language Stephen Bennett Re: [PATCH 1/2] libselinux: class and permission mapping support James Carter Re: [PATCH 1/2] libselinux: class and permission mapping support Eamon Walsh Re: SELinux userspace infrastructure language Karl MacMillan Re: [PATCH 1/2] libselinux: class and permission mapping support Eamon Walsh Re: SELinux userspace infrastructure language Stephen Bennett Re: [PATCH 1/2] libselinux: class and permission mapping support Stephen Smalley RE: [PATCH 1/2] libselinux: class and permission mapping support Joshua Brindle [PATCH 2/2] libselinux: class and permission mapping support Eamon Walsh [PATCH 1/2] libselinux: class and permission mapping support Eamon Walsh RE: SELinux userspace infrastructure language Joshua Brindle RE: SELinux userspace infrastructure language Karl MacMillan RE: SELinux userspace infrastructure language Joshua Brindle RE: SELinux userspace infrastructure language Karl MacMillan RE: SELinux userspace infrastructure language Karl MacMillan Re: generic fallbacks of getpeercon (Re: [redhat-lspp] Labeling an interface) Stephen Smalley Re: generic fallbacks of getpeercon (Re: [redhat-lspp] Labeling an interface) Paul Moore RE: generic fallbacks of getpeercon (Re: [redhat-lspp] Labeling an interface) Venkat Yekkirala Re: [PATCH] Protection for exploiting null dereference using mmap James Morris Re: [PATCH] Protection for exploiting null dereference using mmap Stephen Smalley RE: SELinux userspace infrastructure language Stephen Smalley Re: Can't login in F7 strict Stephen Smalley Re: [PATCH] Protection for exploiting null dereference using mmap Stephen Smalley Re: [PATCH] Protection for exploiting null dereference using mmap Stephen Smalley Re: generic fallbacks of getpeercon (Re: [redhat-lspp] Labeling an interface) Paul Moore Re: [PATCH] Protection for exploiting null dereference using mmap Russell Coker Re: [PATCH] Protection for exploiting null dereference using mmap Eric Paris Tuesday, 5 June Re: [RFC] permissions for conditional UPDATE statement KaiGai Kohei Re: generic fallbacks of getpeercon (Re: [redhat-lspp] Labeling an interface) KaiGai Kohei Re: Can't login in F7 strict Shintaro Fujiwara RE: SELinux userspace infrastructure language Joshua Brindle Re: [PATCH] Protection for exploiting null dereference using mmap Chris Wright Re: [PATCH] Protection for exploiting null dereference using mmap Chris Wright Re: Can't login in F7 strict Daniel J Walsh Re: Can't login in F7 strict Shintaro Fujiwara Re: [PATCH] Protection for exploiting null dereference using mmap Eric Paris Re: [PATCH] Protection for exploiting null dereference using mmap James Morris [PATCH] Protection for exploiting null dereference using mmap Eric Paris Re: [PATCH]: Add security check before flushing SAD/SPD Joy Latten RE: Help with semanage... Stephen Smalley RE: Help with semanage... Stephen Smalley RE: Help with semanage... Hasan Rezaul-CHR010 Re: upgrading to modular policy Christopher J. PeBenito RE: SELinux userspace infrastructure language Karl MacMillan upgrading to modular policy Antoine Martin RE: SELinux userspace infrastructure language Stephen Smalley Re: setfiles -c is failing do to bad checking on options. Stephen Smalley Re: [patch] Bug in restorecon Stephen Smalley Re: policycoreutils patch Stephen Smalley Re: [PATCH] libselinux: set errno in string functions Stephen Smalley Re: [PATCH] libselinux: string representation refactoring Stephen Smalley RE: Help with semanage... Stephen Smalley RE: [RFC] permissions for conditional UPDATE statement Joshua Brindle Re: help,sshd, nlmsg_relay Stephen Smalley Re: Can't login in F7 strict Stephen Smalley Monday, 4 June Help with semanage... Hasan Rezaul-CHR010 help,sshd, nlmsg_relay Paul S RE: SELinux userspace infrastructure language Karl MacMillan RE: SELinux userspace infrastructure language Joshua Brindle Re: [patch] Bug in restorecon Yuichi Nakamura Re: [PATCH] introduce schedule points in policydb_destroy() James Morris Re: [PATCH]: Add security check before flushing SAD/SPD James Morris RE: SELinux userspace infrastructure language Karl MacMillan RE: Help with semanage... Hasan Rezaul-CHR010 setfiles -c is failing do to bad checking on options. Daniel J Walsh [PATCH] introduce schedule points in policydb_destroy() Eric Paris Re: Help with semanage... Stephen Smalley Re: [PATCH]: Add security check before flushing SAD/SPD James Morris Re: generic fallbacks of getpeercon (Re: [redhat-lspp] Labeling an interface) Paul Moore Re: [PATCH]: Add security check before flushing SAD/SPD Eric Paris [Fwd: Re: More swig changes for libselinux] Ted X Toth Re: Apache and PHP Joshua Brindle Re: generic fallbacks of getpeercon (Re: [redhat-lspp] Labeling an interface) Stephen Smalley Re: Passing sec info to security modules when mounting an FS Stephen Smalley Re: [PATCH] SELinux protection for exploiting null dereference using mmap Stephen Smalley Re: [patch] Bug in restorecon Stephen Smalley Re: Apache and PHP Stephen Smalley Re: generic fallbacks of getpeercon (Re: [redhat-lspp] Labeling an interface) KaiGai Kohei Sunday, 3 June [patch] Bug in restorecon Yuichi Nakamura Monday, 4 June [RFC] permissions for conditional UPDATE statement kaigai_at_kaigai.gr.jp Sunday, 3 June Re: Apache and PHP Stefan Schulze Frielinghaus Saturday, 2 June Can't login in F7 strict Shintaro Fujiwara generic fallbacks of getpeercon (Re: [redhat-lspp] Labeling an interface) KaiGai Kohei Apache and PHP Stefan Schulze Frielinghaus Friday, 1 June Re: [PATCH] SELinux protection for exploiting null dereference using mmap Chris Wright Passing sec info to security modules when mounting an FS Eric Paris [PATCH] libselinux: set errno in string functions Eamon Walsh [PATCH] libselinux: string representation refactoring Eamon Walsh Re: object class discovery userland Eamon Walsh Re: With the release of Fedora Core 7 I have bumped the policy version in Rawhide Daniel J Walsh RE: SELinux userspace infrastructure language Joshua Brindle Re: With the release of Fedora Core 7 I have bumped the policy version in Rawhide Christopher J. PeBenito Re: SELinux userspace infrastructure language Karl MacMillan policycoreutils patch Daniel J Walsh Re: SELinux userspace infrastructure language Stephen Bennett Re: SELinux userspace infrastructure language Stephen Bennett Re: SELinux userspace infrastructure language James Antill Thursday, 31 May Re: [patch] Reducing size of libselinux/libsepol: 3rd Stephen Smalley RE: pipefs issue Stephen Smalley Re: SELinux userspace infrastructure language Stephen Bennett RE: pipefs issue Clarkson, Mike R \(US SSA\) RE: SELinux userspace infrastructure language Karl MacMillan Re: pipefs issue Chad Sellers Re: pipefs issue Stephen Smalley Re: pipefs issue Chad Sellers Re: SELinux userspace infrastructure language Stephen Bennett Re: [PATCH] libselinux: reindent selinux.h Eamon Walsh Re: SELinux userspace infrastructure language Karl MacMillan With the release of Fedora Core 7 I have bumped the policy version in Rawhide Daniel J Walsh Re: Dead links in checkpolicy/checkmodule man pages. Stephen Smalley Re: [BUG] Segfault on duplicate require of sensitivity Stephen Smalley Re: SELinux userspace infrastructure language Chad Sellers RE: SELinux userspace infrastructure language Joshua Brindle Re: SELinux userspace infrastructure language Karl MacMillan SELinux userspace infrastructure language Joshua Brindle Re: [RFC][PATCH] libselinux: Namespacing Karl MacMillan [RFC] Patch for using SELinux to stop DoS attack Pravin RE: audit2allow module generation Karl MacMillan Re: [PATCH] SELinux protection for exploiting null dereference using mmap Stephen Smalley Re: [PATCH] SELinux protection for exploiting null dereference using mmap James Morris Re: [PATCH] SELinux protection for exploiting null dereference using mmap Stephen Smalley Re: djbdns needs optional_policy Daniel J Walsh Re: [PATCH] SELinux protection for exploiting null dereference using mmap Stephen Smalley Re: pipefs issue Stephen Smalley Re: [PATCH] libselinux: reindent selinux.h Stephen Smalley Re: [PATCH] SELinux protection for exploiting null dereference using mmap James Morris Re: object class discovery userland KaiGai Kohei Re: djbdns needs optional_policy Christopher J. PeBenito Re: pipefs issue Christopher J. PeBenito Re: djbdns needs optional_policy Daniel J Walsh Re: djbdns needs optional_policy Petre Rodan Re: [PATCH] SELinux protection for exploiting null dereference using mmap Eric Paris Wednesday, 30 May Re: [PATCH] SELinux protection for exploiting null dereference using mmap Chris Wright pipefs issue Clarkson, Mike R \(US SSA\) Re: [PATCH] SELinux protection for exploiting null dereference using mmap James Morris [PATCH] libselinux: reindent selinux.h Eamon Walsh [PATCH] SELinux protection for exploiting null dereference using mmap Eric Paris Re: object class discovery userland Eamon Walsh Re: Centos 5 OpenVPN / SElinux Stephen Smalley Many hal changes dwalsh_at_redhat.com dovecot dwalsh_at_redhat.com Changes to xserver dwalsh_at_redhat.com Re: Centos 5 OpenVPN / SElinux Bernd Bartmann Re: Centos 5 OpenVPN / SElinux Daniel J Walsh Additional textrel-shlib_t, ldconfig execed in rebuilding kernel needs tmp lnk_files dwalsh_at_redhat.com apps_gnome changes dwalsh_at_redhat.com Kerberos changes dwalsh_at_redhat.com Remove unconfined_domain from sendmail, Allow others to read sendmail logs (snmp) dwalsh_at_redhat.com Interfaces to access rwho private date dwalsh_at_redhat.com Interfaces to access rwho private date dwalsh_at_redhat.com admin_kudzu changes dwalsh_at_redhat.com Proper transition rules for pppd to create /etc/resolv.confe dwalsh_at_redhat.com Avahi changes dwalsh_at_redhat.com rpcbind policy dwalsh_at_redhat.com Spam can connect to smtp port and can use mysql backend dwalsh_at_redhat.com fix openvpn log/run file context dwalsh_at_redhat.com Cron needs many changes to run on MLS dwalsh_at_redhat.com openct modifications dwalsh_at_redhat.com fsdaemon writes files/disks at different levels, Needs write down. dwalsh_at_redhat.com iptables reads etc runtime files, execed out of failto ban with terminal redirected dwalsh_at_redhat.com Clamd creates files in amavis_var_run_t dwalsh_at_redhat.com djbdns needs optional_policy dwalsh_at_redhat.com Allow tftpd to read public files dwalsh_at_redhat.com Arpwatch uses nsswitch dwalsh_at_redhat.com saslauthd needs to be able to update the passwd file (passwd expired) dwalsh_at_redhat.com Manage samba changes dwalsh_at_redhat.com kernel_mls changes dwalsh_at_redhat.com pcscd sends itself a signal and communicates with openct dwalsh_at_redhat.com snmp changes dwalsh_at_redhat.com remove uncofined_domain from modutils, needs to exec scripts, few other fixes dwalsh_at_redhat.com Fixes for consolekit dwalsh_at_redhat.com nagios changes dwalsh_at_redhat.com kernel_selinux changes dwalsh_at_redhat.com Procmail needs to use ypbind, eliminate bogus udp avc messages dwalsh_at_redhat.com mta changes dwalsh_at_redhat.com rpc domains do not need to bubd to all ports, just rpc porst dwalsh_at_redhat.com apcupsd policy dwalsh_at_redhat.com apps_uml changes dwalsh_at_redhat.com kernel_files changes dwalsh_at_redhat.com services_apache changes dwalsh_at_redhat.com rlogind needs to be able to change passwd data dwalsh_at_redhat.com pyzor needs to communicate with http to get updates, signal spam dwalsh_at_redhat.com kernel_devices changes dwalsh_at_redhat.com postfix changes dwalsh_at_redhat.com Automount changes dwalsh_at_redhat.com radius wants to be able to read samba files dwalsh_at_redhat.com inetd changes dwalsh_at_redhat.com setroubleshoot sends signull to itself dwalsh_at_redhat.com ntp is execed by hal with terminal redirection dwalsh_at_redhat.com rpc domains do not need to bubd to all ports, just rpc porst dwalsh_at_redhat.com Oddjob does not use the audit system dwalsh_at_redhat.com admin_amtu changes dwalsh_at_redhat.com apps_java changes dwalsh_at_redhat.com Cyrus attempts to write snmp_var_lib dwalsh_at_redhat.com admin_readahead changes dwalsh_at_redhat.com admin_alsa changes dwalsh_at_redhat.com kernel_terminal changes dwalsh_at_redhat.com services_networkmanager changes dwalsh_at_redhat.com Cups changes dwalsh_at_redhat.com admin_logrotate changes dwalsh_at_redhat.com admin_prelink changes dwalsh_at_redhat.com admin_amanda changes dwalsh_at_redhat.com services_mailman changes dwalsh_at_redhat.com dhcpc needs additional access to dbus, executes restorecon dwalsh_at_redhat.com apps_slocate changes dwalsh_at_redhat.com apps_mozilla changes dwalsh_at_redhat.com kernel_corecommands changes dwalsh_at_redhat.com admin_vbetool changes dwalsh_at_redhat.com dhcpd needs additional privs from dbus dwalsh_at_redhat.com Mdadm makes its own devices, reads generic iscsi dwalsh_at_redhat.com admin_logwatch changes dwalsh_at_redhat.com Many fixes to get xen working - Diff off of strict-targeted-merge-2266 dwalsh_at_redhat.com apps_mplayer changes dwalsh_at_redhat.com Centos 5 OpenVPN / SElinux Bernd Bartmann Re: [PATCH 4/4] selinux: add selinuxfs structure for object class discovery Stephen Smalley Re: [RFC][PATCH] libselinux: Namespacing Stephen Smalley RE: audit2allow module generation Anand Patel Re: cannot login using strict policy Ken YANG Tuesday, 29 May Re: object class discovery userland KaiGai Kohei Re: audit2allow module generation Karl MacMillan audit2allow module generation Anand Patel Re: AUDIT_AVC_PATH problems James Morris Re: object class discovery userland Eamon Walsh Re: [RFC][PATCH] libselinux: Namespacing Eamon Walsh Re: object class discovery userland Eamon Walsh Re: FW: redefining the numer of sensitivities and reconfiguring usersand login Christopher J. PeBenito FW: redefining the numer of sensitivities and reconfiguring usersand login Clarkson, Mike R \(US SSA\) Re: object class discovery userland Stephen Smalley Re: object class discovery userland Stephen Smalley RE: object class discovery userland Stephen Smalley Re: object class discovery userland Eamon Walsh AUDIT_AVC_PATH problems Steve Grubb Re: unshare behavior when polyinstantiating Daniel J Walsh Dead links in checkpolicy/checkmodule man pages. Daniel J Walsh unshare behavior when polyinstantiating Ted X Toth (no subject) somayeh afzali Monday, 28 May Re: labelled ipsec Joshua Brindle labelled ipsec shahbaz khan Friday, 25 May RE: [patch 1/3] libsemanage: genhomedircon replacement Karl MacMillan RE: object class discovery userland Joshua Brindle Re: object class discovery userland Eamon Walsh Re: [BUG] Segfault on duplicate require of sensitivity Caleb Case RE: [patch 1/3] libsemanage: genhomedircon replacement Joshua Brindle Re: [patch 1/3] libsemanage: genhomedircon replacement Karl MacMillan Re: [patch 1/3] libsemanage: genhomedircon replacement Mark Goldman Thursday, 24 May RE: object class discovery userland Joshua Brindle RE: object class discovery userland Joshua Brindle Re: object class discovery userland Eamon Walsh Re: [patch 1/3] libsemanage: genhomedircon replacement Mark Goldman Re: [patch 1/3] libsemanage: genhomedircon replacement James Antill Re: [patch 1/3] libsemanage: genhomedircon replacement Daniel J Walsh Re: [patch 1/3] libsemanage: genhomedircon replacement Karl MacMillan Re: [patch 1/3] libsemanage: genhomedircon replacement Steve G Re: [patch 1/3] libsemanage: genhomedircon replacement Karl MacMillan Re: [patch 1/3] libsemanage: genhomedircon replacement Mark Goldman Re: AVC: IPv6 problems Paul Moore Re: cannot login using strict policy Ken YANG Re: AVC: IPv6 problems Stefan Schulze Frielinghaus Wednesday, 23 May Re: object class discovery userland Eamon Walsh Re: [PATCH 1/4] selinux: add support for querying object classes and permissions from the running policy Christopher J. PeBenito Re: [PATCH 1/4] selinux: add support for querying object classes and permissions from the running policy James Antill Re: Fedora Core 7 has frozen and Fedora 8 Development has started Karl MacMillan RE: object class discovery userland Christopher J. PeBenito Re: AVC: IPv6 problems Paul Moore Re: selinux: add object class discovery v2 James Morris [PATCH 4/4] selinux: add selinuxfs structure for object class discovery Christopher J. PeBenito [PATCH 3/4] selinux: change sel_make_dir() to specify inode counter. Christopher J. PeBenito [PATCH 2/4] selinux: rename sel_remove_bools() for more general usage. Christopher J. PeBenito [PATCH 1/4] selinux: add support for querying object classes and permissions from the running policy Christopher J. PeBenito selinux: add object class discovery v2 Christopher J. PeBenito Re: AVC: IPv6 problems Daniel J Walsh Re: cannot login using strict policy Daniel J Walsh Re: AVC: IPv6 problems Stefan Schulze Frielinghaus Re: cannot login using strict policy Ken YANG Tuesday, 22 May [patch] Reducing size of libselinux/libsepol: 3rd Yuichi Nakamura Re: [patch 0/3] genhomedircon replacement in libsemanage Karl MacMillan Re: [patch 0/3] genhomedircon replacement in libsemanage Karl MacMillan Re: [patch 1/3] libsemanage: genhomedircon replacement Karl MacMillan SysV shared memory segments and X Eamon Walsh Re: AVC: IPv6 problems Paul Moore AVC: IPv6 problems Stefan Schulze Frielinghaus Re: [patch 0/3] genhomedircon replacement in libsemanage Joshua Brindle Re: [patch 0/3] genhomedircon replacement in libsemanage Daniel J Walsh Monday, 21 May [patch 3/3] Remove legacy genhomedircon python script jbrindle_at_tresys.com [patch 2/3] libsemanage: test functions jbrindle_at_tresys.com [patch 1/3] libsemanage: genhomedircon replacement jbrindle_at_tresys.com [patch 0/3] genhomedircon replacement in libsemanage jbrindle_at_tresys.com Tuesday, 22 May Re: Fedora Core 7 has frozen and Fedora 8 Development has started Joshua Brindle RE: Fedora Core 7 has frozen and Fedora 8 Development has started Todd Miller Re: Fedora Core 7 has frozen and Fedora 8 Development has started Joshua Brindle Re: Question on networking accesses Casey Schaufler RE: Fedora Core 7 has frozen and Fedora 8 Development has started Todd Miller Re: Fedora Core 7 has frozen and Fedora 8 Development has started James Antill Re: Question on networking accesses Paul Moore Re: Fedora Core 7 has frozen and Fedora 8 Development has started Joshua Brindle Re: Question on networking accesses Steve G Re: Question on networking accesses Casey Schaufler Monday, 21 May Re: Question on networking accesses Paul Moore Re: Fedora Core 7 has frozen and Fedora 8 Development has started Paul Moore Re: Fedora Core 7 has frozen and Fedora 8 Development has started Klaus Weidner Re: Question on networking accesses Casey Schaufler Re: Question on networking accesses Paul Moore Re: Fedora Core 7 has frozen and Fedora 8 Development has started James Antill Re: Question on networking accesses Casey Schaufler Re: Fedora Core 7 has frozen and Fedora 8 Development has started Paul Moore SELinux wiki - Developer Resources James Morris Re: Fedora Core 7 has frozen and Fedora 8 Development has started Daniel J Walsh Re: Fedora Core 7 has frozen and Fedora 8 Development has started Klaus Weidner Re: [PATCH 4/4] selinux: add selinuxfs structure for object class discovery James Morris Re: [PATCH 1/4] selinux: add support for querying object classes and permissions from the running policy Christopher J. PeBenito Re: [PATCH 4/4] selinux: add selinuxfs structure for object class discovery Christopher J. PeBenito Re: Question on networking accesses Paul Moore Re: [PATCH 4/4] selinux: add selinuxfs structure for object class discovery James Morris Re: [PATCH 1/4] selinux: add support for querying object classes and permissions from the running policy James Morris Re: Question on networking accesses Casey Schaufler [PATCH 4/4] selinux: add selinuxfs structure for object class discovery Christopher J. PeBenito [PATCH 3/4] selinux: change sel_make_dir() to specify inode counter. Christopher J. PeBenito [PATCH 2/4] selinux: rename sel_remove_bools() for more general usage. Christopher J. PeBenito [PATCH 1/4] selinux: add support for querying object classes and permissions from the running policy Christopher J. PeBenito [PATCH 0/4] selinux: add object class discovery Christopher J. PeBenito Re: Question on networking accesses Paul Moore Question on networking accesses Casey Schaufler Friday, 18 May Fedora Core 7 has frozen and Fedora 8 Development has started Daniel J Walsh Re: In FC8 I would like to start playing with trusted X. Eamon Walsh Wednesday, 16 May Re: cannot login using strict policy Ken YANG Re: In FC8 I would like to start playing with trusted X. Ted X Toth Re: In FC8 I would like to start playing with trusted X. Eamon Walsh Re: Console login problems Norman Elton Re: In FC8 I would like to start playing with trusted X. Daniel J Walsh Re: In FC8 I would like to start playing with trusted X. Eamon Walsh Re: In FC8 I would like to start playing with trusted X. Daniel J Walsh Re: In FC8 I would like to start playing with trusted X. James Antill Re: Console login problems Daniel J Walsh Tuesday, 15 May Re: In FC8 I would like to start playing with trusted X. Daniel J Walsh Re: In FC8 I would like to start playing with trusted X. Joshua Brindle Console login problems Norman Elton In FC8 I would like to start playing with trusted X. Daniel J Walsh Re: squid patch Christopher J. PeBenito Re: [BUG] Segfault on duplicate require of sensitivity Joshua Brindle Re: [BUG] Segfault on duplicate require of sensitivity Karl MacMillan Re: [BUG] Segfault on duplicate require of sensitivity Joshua Brindle Re: [BUG] Segfault on duplicate require of sensitivity Caleb Case Re: apcupsd policy Christopher J. PeBenito Re: [BUG] Segfault on duplicate require of sensitivity Karl MacMillan Re: [BUG] Segfault on duplicate require of sensitivity Caleb Case Re: non-standard filesystem support in SELinux Joshua Brindle Re: non-standard filesystem support in SELinux Keith Holder Re: non-standard filesystem support in SELinux Joshua Brindle swapon => libblkid.so.1 => libdevmapper.so.1.02.1 => libselinux.so.1 Russell Coker non-standard filesystem support in SELinux Keith Holder Monday, 14 May Re: Ver 4(Re: Ver3(Re: [patch] reducing size of libselinux(ver 2) Yuichi Nakamura Friday, 11 May Re: [ANN] SELinux kernel project page Karl MacMillan Re: [ANN] SELinux kernel project page Serge E. Hallyn [ANN] SELinux kernel project page James Morris [PATCH] Remove stub headers for sepol tests Karl MacMillan Re: Ver 4(Re: Ver3(Re: [patch] reducing size of libselinux(ver 2) Karl MacMillan Re: [PATCH] Basic policy representation Karl MacMillan Re: [PATCH -trunk] newrole: enable use of alternate pam configurations for running applications in a different context (Was: Re: launching apps at level (MLS) and polyinstantiation) Karl MacMillan Re: [RFC][PATCH] libselinux: Namespacing Karl MacMillan Re: [RFC][PATCH] Coalesce setfiles and restorecon into a single program Christopher J. PeBenito Re: [PATCH] Basic policy representation Joshua Brindle Re: [PATCH] Make sepol_iter_get_data return void Karl MacMillan Re: [PATCH] Convert sepol_list_del to void return Karl MacMillan Re: [PATCH] Make free functions return void in new policyrep code Karl MacMillan Re: [RFC][PATCH] libselinux: Namespacing James Antill Re: [RFC][PATCH] Coalesce setfiles and restorecon into a single program Karl MacMillan Re: Ver 4(Re: Ver3(Re: [patch] reducing size of libselinux(ver 2) Stephen Smalley Re: [RFC][PATCH] libselinux: Namespacing Stephen Smalley Re: cannot login using strict policy Stephen Smalley Re: [RFC][PATCH] libselinux: Namespacing Stephen Smalley Re: [RFC][PATCH] libselinux: Namespacing Stephen Smalley Re: cannot login using strict policy Ken YANG Ver 4(Re: Ver3(Re: [patch] reducing size of libselinux(ver 2) Yuichi Nakamura Thursday, 10 May Re: [RFC][PATCH] libselinux: Namespacing James Antill Re: [RFC][PATCH] libselinux: Namespacing Karl MacMillan [RFC][PATCH] libselinux: Namespacing Stephen Smalley Re: [PATCH] Basic policy representation Karl MacMillan Re: [PATCH] Basic policy representation J. Tang Re: Ver3(Re: [patch] reducing size of libselinux(ver 2) Stephen Smalley [PATCH] Basic policy representation Karl MacMillan [PATCH] Make sepol_iter_get_data return void Karl MacMillan Re: Making Fedora a contributer friendly environment Stephen Smalley Re: Ver3(Re: [patch] reducing size of libselinux(ver 2) Stephen Smalley Re: Making Fedora a contributer friendly environment Karl MacMillan Re: Making Fedora a contributer friendly environment Karl MacMillan Re: More swig changes for libselinux Xavier Toth Re: Ver3(Re: [patch] reducing size of libselinux(ver 2) Stephen Smalley Re: [PATCH] Convert sepol_list_del to void return Stephen Smalley Re: [PATCH] Make free functions return void in new policyrep code Stephen Smalley Re: cannot login using strict policy Stephen Smalley Re: cannot login using strict policy Ken YANG Ver3(Re: [patch] reducing size of libselinux(ver 2) Yuichi Nakamura Wednesday, 9 May Re: [PATCH] Basic policy representation Karl MacMillan Re: [PATCH] Basic policy representation J. Tang [PATCH] Convert sepol_list_del to void return Karl MacMillan [PATCH] Make free functions return void in new policyrep code Karl MacMillan Re: [patch] reducing size of libselinux(ver 2) Stephen Smalley Re: [PATCH] Basic policy representation Karl MacMillan Re: [patch] reducing size of libselinux(ver 2) Stephen Smalley Re: [PATCH] Basic policy representation J. Tang Re: [PATCH] Basic policy representation Karl MacMillan Re: policyrep questions James Antill Re: [PATCH] Basic policy representation James Antill [Fwd: Re: More swig changes for libselinux] Ted X Toth Re: policyrep questions Karl MacMillan Re: More swig changes for libselinux Stephen Smalley Re: Fix to genhomedircon to find conflicting directories correctly. Stephen Smalley Re: policyrep questions Stephen Smalley Re: policyrep questions Stephen Smalley Re: policyrep questions Karl MacMillan Re: [PATCH] Basic policy representation Karl MacMillan Tuesday, 8 May Re: [RFC][PATCH] Coalesce setfiles and restorecon into a single program Russell Coker policyrep questions Karl MacMillan Re: [PATCH -trunk] newrole: enable use of alternate pam configurations for running applications in a different context (Was: Re: launching apps at level (MLS) and polyinstantiation) Karl MacMillan Re: [PATCH] Basic policy representation Karl MacMillan Re: [PATCH] Basic policy representation Karl MacMillan Re: [PATCH] Basic policy representation Joshua Brindle [PATCH -trunk] newrole: enable use of alternate pam configurations for running applications in a different context (Was: Re: launching apps at level (MLS) and polyinstantiation) Stephen Smalley Re: [PATCH] Basic policy representation Stephen Smalley Re: [PATCH] Basic policy representation Joshua Brindle Re: launching apps at level (MLS) and polyinstantiation Stephen Smalley Re: [PATCH] Basic policy representation Stephen Smalley Re: [PATCH] Basic policy representation Stephen Smalley Re: [PATCH] Basic policy representation Brian Pomerantz Re: [PATCH] Basic policy representation Karl MacMillan Re: [PATCH] Basic policy representation Joshua Brindle Re: [RFC][PATCH] Coalesce setfiles and restorecon into a single program Christopher J. PeBenito Re: [RFC][PATCH] Coalesce setfiles and restorecon into a single program Stephen Smalley Re: [RFC][PATCH] Coalesce setfiles and restorecon into a single program Karl MacMillan Re: [PATCH] Basic policy representation Karl MacMillan Re: [PATCH] Basic policy representation Joshua Brindle Re: [NFS] [PATCH] introduce version field to struct nfs_clone_mount Stephen Smalley Re: [NFS] [PATCH] introduce version field to struct nfs_clone_mount Stephen Smalley Monday, 7 May [PATCH] Basic policy representation Karl MacMillan [PATCH] introduce version field to struct nfs_clone_mount Eric Paris Re: Hal fixes Christopher J. PeBenito Re: apcupsd policy Daniel J Walsh Re: apcupsd policy Christopher J. PeBenito Re: squid patch Daniel J Walsh Re: squid patch Christopher J. PeBenito [patch] reducing size of libselinux(ver 2) Yuichi Nakamura Friday, 4 May Re: launching apps at level (MLS) and polyinstantiation Ted X Toth Re: [RFC][PATCH] Coalesce setfiles and restorecon into a single program Stephen Smalley Re: launching apps at level (MLS) and polyinstantiation Stephen Smalley [RFC][PATCH] Coalesce setfiles and restorecon into a single program Stephen Smalley Re: launching apps at level (MLS) and polyinstantiation Ted X Toth Re: Where to specific the handling of unknown kernel classes and perms Daniel J Walsh Re: Where to specific the handling of unknown kernel classes and perms Karl MacMillan Re: oracle policy Daniel J Walsh Re: Where to specific the handling of unknown kernel classes and perms Daniel J Walsh More swig changes for libselinux Daniel J Walsh Fix to genhomedircon to find conflicting directories correctly. Daniel J Walsh Thursday, 3 May Re: Patch to cleanup audit handling in policy. Karl MacMillan Re: launching apps at level (MLS) and polyinstantiation Darrel Goeddel Re: launching apps at level (MLS) and polyinstantiation Stephen Smalley Re: squid patch Karl MacMillan Re: patch to allow modification of prefix via semanage Stephen Smalley Re: Where to specific the handling of unknown kernel classes and perms Joshua Brindle Re: squid patch Christopher J. PeBenito Re: Additional fixes for consolekit. Christopher J. PeBenito Re: Where to specific the handling of unknown kernel classes and perms Stephen Smalley Re: launching apps at level (MLS) and polyinstantiation Xavier Toth Re: launching apps at level (MLS) and polyinstantiation Stephen Smalley Re: launching apps at level (MLS) and polyinstantiation Stephen Smalley Re: Additional textrel_shlib_t Christopher J. PeBenito Re: Where to specific the handling of unknown kernel classes and perms Joshua Brindle Re: launching apps at level (MLS) and polyinstantiation Xavier Toth Re: Patch to cleanup audit handling in policy. Daniel J Walsh Re: rename_dir_perms missing Christopher J. PeBenito Re: [RFC] Ability to allow unknown class and permissions -v4 Stephen Smalley Re: Where to specific the handling of unknown kernel classes and perms Stephen Smalley Re: Where to specific the handling of unknown kernel classes and perms Karl MacMillan Re: logwatch tries to look at avahi, avahi needs to use winbind Christopher J. PeBenito Re: launching apps at level (MLS) and polyinstantiation Stephen Smalley Re: MLS and no read up, no write down Stefan Schulze Frielinghaus Re: Patch to cleanup audit handling in policy. Christopher J. PeBenito Wednesday, 2 May Re: Where to specific the handling of unknown kernel classes and perms Joshua Brindle Re: Where to specific the handling of unknown kernel classes and perms Joshua Brindle Re: launching apps at level (MLS) and polyinstantiation Xavier Toth Where to specific the handling of unknown kernel classes and perms Eric Paris Re: [RFC] Ability to allow unknown class and permissions -v4 Eric Paris Re: logwatch tries to look at avahi, avahi needs to use winbind Daniel J Walsh rename_dir_perms missing Dave Quigley Re: [RFC] Ability to allow unknown class and permissions -v4 Stephen Smalley [RFC] Ability to allow unknown class and permissions -v4 Eric Paris Re: logwatch tries to look at avahi, avahi needs to use winbind Christopher J. PeBenito Re: modutils policy patch Christopher J. PeBenito Re: Patch to cleanup audit handling in policy. Karl MacMillan Re: Patch to cleanup audit handling in policy. Christopher J. PeBenito Re: launching apps at level (MLS) and polyinstantiation Stephen Smalley Re: launching apps at level (MLS) and polyinstantiation Xavier Toth Tuesday, 1 May Re: Patch to cleanup audit handling in policy. Karl MacMillan patch to allow modification of prefix via semanage Daniel J Walsh Re: amtu policy/used for MLS Test suite, needs to run in the field Christopher J. PeBenito Re: Patch to cleanup audit handling in policy. Christopher J. PeBenito Re: MLS and no read up, no write down Stephen Smalley Re: MLS and no read up, no write down Joshua Brindle MLS and no read up, no write down Stefan Schulze Frielinghaus Monday, 30 April Re: Patch to cleanup audit handling in policy. Karl MacMillan oracle policy rob myers Re: cups sends mail, connects to smbd port and binds to ports 600-1023 Daniel J Walsh Re: cups sends mail, connects to smbd port and binds to ports 600-1023 Christopher J. PeBenito Re: rwho patch Christopher J. PeBenito Re: Patch to cleanup audit handling in policy. Christopher J. PeBenito Re: Patch to cleanup audit handling in policy. Christopher J. PeBenito Re: Patch to cleanup audit handling in policy. Daniel J Walsh Re: Patch to cleanup audit handling in policy. Christopher J. PeBenito Re: Additional rules for amavis Christopher J. PeBenito Re: aide has a new directory Christopher J. PeBenito Re: Patch to cleanup audit handling in policy. Steve G Re: Patch to cleanup audit handling in policy. Daniel J Walsh Re: Fixes for locate tool Christopher J. PeBenito Re: launching apps at level (MLS) and polyinstantiation Stephen Smalley Re: launching apps at level (MLS) and polyinstantiation Ted X Toth Re: Patch to cleanup audit handling in policy. Christopher J. PeBenito Re: misc fixes for netutils Christopher J. PeBenito Re: kudzu fixes to allow it to edit and restart init for MLS Christopher J. PeBenito Re: kudzu fixes to allow it to edit and restart init for MLS Daniel J Walsh Re: bluetooth reads inotifyfs_t:dir Christopher J. PeBenito Re: Patch to cleanup audit handling in policy. Daniel J Walsh Re: kudzu fixes to allow it to edit and restart init for MLS Christopher J. PeBenito Re: Patch to cleanup audit handling in policy. Christopher J. PeBenito [ANN] SETools 3.2 Release Jeremy A. Mowery Re: Does the MLS range in modular file context have to be raw? Stephen Smalley Sunday, 29 April Does the MLS range in modular file context have to be raw? Joe Nall Friday, 27 April Re: Patch to cleanup audit handling in policy. Steve G Patch to cleanup audit handling in policy. Daniel J Walsh Re: [RFC] Policy Representation Overview Karl MacMillan [RFC] Policy Representation Overview Christopher J. PeBenito Re: launching apps at level (MLS) and polyinstantiation Stephen Smalley Re: launching apps at level (MLS) and polyinstantiation Stephen Smalley [PATCH -policyrep] Drop preservebools support from userland policy loader Stephen Smalley launching apps at level (MLS) and polyinstantiation Ted X Toth Re: [PATCH 1/1] libselinux: helpful message when /selinux won't mount Stephen Smalley Re: [PATCH 1/1] libselinux: helpful message when /selinux won't mount Eamon Walsh Re: [PATCH 1/1] libselinux: helpful message when /selinux won't mount Karl MacMillan Re: Next policyrep patches Stephen Smalley Re: Next policyrep patches Karl MacMillan Re: [PATCH 1/1] libselinux: helpful message when /selinux won't mount Stephen Smalley Re: Next policyrep patches Joshua Brindle Re: policycoreutils patch Stephen Smalley Next policyrep patches Karl MacMillan Re: policycoreutils patch Karl MacMillan Re: policycoreutils patch Daniel J Walsh Re: can not boot with strict policy Ken YANG Thursday, 26 April Re: [POLICYREP PATCH] Add objset to libsepol Karl MacMillan [PATCH 1/1] libselinux: helpful message when /selinux won't mount Dax Kelson Re: [RFC] Ability to allow undefined permissions and classes -v3 Eric Paris Re: [POLICYREP PATCH] Add generic iterators and a list data type to libsepol Karl MacMillan Re: policycoreutils patch Karl MacMillan Re: [POLICYREP PATCH] Fix 64bit compilation issue (and remove questionably casting of void* to Karl MacMillan Re: [PATCH 0/6] Drop legacy boolean/users support (setlocaldefs) Karl MacMillan [POLICYREP PATCH] Add objset to libsepol Karl MacMillan [POLICYREP PATCH] Add objset to libsepol Karl MacMillan Re: [POLICYREP PATCH] Add objset to libsepol Karl MacMillan Re: [POLICYREP PATCH] Add objset to libsepol James Antill Re: [POLICYREP PATCH] Add objset to libsepol Karl MacMillan [POLICYREP PATCH] Add objset to libsepol Karl MacMillan Re: [PATCH 0/6] Drop legacy boolean/users support (setlocaldefs) Karl MacMillan Re: [PATCH 0/6] Drop legacy boolean/users support (setlocaldefs) Stephen Smalley policycoreutils patch Daniel J Walsh Re: [PATCH 0/6] Drop legacy boolean/users support (setlocaldefs) Joshua Brindle Re: [POLICYREP PATCH] Fix 64bit compilation issue (and remove questionably casting of void* to Stephen Smalley [PATCH 6/6] setsebool: Update for interface change to libselinux Stephen Smalley [PATCH 5/6] audit2why: update for interface change to libsepol Stephen Smalley [PATCH 4/6] libsemanage: update for interface change to libselinux Stephen Smalley [PATCH 3/6] libselinux: Remove obsolete interfaces and code for local boolean and user files Stephen Smalley [PATCH 2/6] libsepol: Remove obsolete interfaces and code used to support local boolean and user files Stephen Smalley Re: [POLICYREP PATCH] Add generic iterators and a list data type to libsepol Stephen Smalley [PATCH 1/6] libselinux: Drop setlocaldefs support from policy loading code Stephen Smalley Re: [POLICYREP PATCH] Add generic iterators and a list data type to libsepol Joshua Brindle [PATCH 0/6] Drop legacy boolean/users support (setlocaldefs) Stephen Smalley Re: [RFC] Ability to allow undefined permissions and classes -v3 Stephen Smalley Re: Remove admin templates from userdom_admin_user_template Christopher J. PeBenito Re: [POLICYREP PATCH] Add generic iterators and a list data type to libsepol Stephen Smalley Re: can not boot with strict policy Russell Coker Wednesday, 25 April Re: [RFC] Ability to allow undefined permissions and classes -v3 James Morris Re: [POLICYREP PATCH] Add objset to libsepol James Antill [POLICYREP PATCH] Add objset to libsepol Karl MacMillan [POLICYREP PATCH] Fix 64bit compilation issue (and remove questionably casting of void* to Karl MacMillan [RFC] Ability to allow undefined permissions and classes -v3 Eric Paris Re: [POLICYREP PATCH] Add generic iterators and a list data type to libsepol Joshua Brindle Re: [POLICYREP PATCH] Add generic iterators and a list data type to libsepol Karl MacMillan Re: Man page fixes for semanage. Add SELinux so whatis will pick it up Karl MacMillan Re: [POLICYREP PATCH] Add generic iterators and a list data type to libsepol Joshua Brindle Re: [POLICYREP PATCH] Add generic iterators and a list data type to libsepol Karl MacMillan Re: Man page fixes for semanage. Add SELinux so whatis will pick it up Joshua Brindle RE: [PATCH 01/33] libsepol: basic serilization support Karl MacMillan RE: [PATCH 01/33] libsepol: basic serilization support James Antill RE: [PATCH 01/33] libsepol: basic serilization support Joshua Brindle RE: [PATCH 01/33] libsepol: basic serilization support Karl MacMillan RE: [PATCH 01/33] libsepol: basic serilization support Joshua Brindle Re: adding to selinux.py Ted X Toth Re: cannot login using strict policy Stephen Smalley RE: [PATCH 01/33] libsepol: basic serilization support Karl MacMillan Re: cannot login using strict policy JanuGerman RE: [PATCH 01/33] libsepol: basic serilization support Joshua Brindle Re: cannot login using strict policy Karl MacMillan RE: [PATCH 01/33] libsepol: basic serilization support Karl MacMillan Man page fixes for semanage. Add SELinux so whatis will pick it up Daniel J Walsh Re: cannot login using strict policy JanuGerman Re: adding to selinux.py James Athey RE: [PATCH 01/33] libsepol: basic serilization support Joshua Brindle Re: adding to selinux.py Daniel J Walsh Re: can not boot with strict policy Ken YANG cannot login using strict policy JanuGerman Re: [PATCH 02/33] libsepol: boolean serialization Karl MacMillan RE: [PATCH 01/33] libsepol: basic serilization support Karl MacMillan Re: [PATCH 00/33] libsemanage/libsepol object serialization and ps-api James Antill RE: [PATCH 25/33] libsemanage: policy server database hooks Karl MacMillan Tuesday, 24 April RE: [PATCH 25/33] libsemanage: policy server database hooks Joshua Brindle RE: [PATCH 25/33] libsemanage: policy server database hooks Karl MacMillan Re: [PATCH 00/33] libsemanage/libsepol object serialization and ps-api James Antill RE: [PATCH 25/33] libsemanage: policy server database hooks Joshua Brindle RE: [PATCH 12/33] libsemanage: basic serialization Karl MacMillan RE: [PATCH 12/33] libsemanage: basic serialization Joshua Brindle RE: [PATCH 01/33] libsepol: basic serilization support Joshua Brindle Re: [PATCH 25/33] libsemanage: policy server database hooks Karl MacMillan Re: [PATCH 12/33] libsemanage: basic serialization Karl MacMillan Re: adding to selinux.py Ted X Toth Re: [Fwd: restorecon single fs patch] Stephen Smalley Re: Patch to correct genhomedircon homedir labeling. Stephen Smalley Re: directory polyinstantiation failure Ted X Toth Re: [PATCH 01/33] libsepol: basic serilization support Karl MacMillan Re: splice syscall Stephen Smalley Re: [PATCH 00/33] libsemanage/libsepol object serialization and ps-api Joshua Brindle Re: splice syscall Steve G Monday, 23 April [PATCH 30/33] libsemanage: node serialization tests jbrindle_at_tresys.com [PATCH 33/33] libsemanage: user serialization tests jbrindle_at_tresys.com [PATCH 28/33] libsemanage: fcontexts serialization tests jbrindle_at_tresys.com [PATCH 29/33] libsemanage: interface serialization tests jbrindle_at_tresys.com [PATCH 31/33] libsemanage: port serialization tests jbrindle_at_tresys.com [PATCH 32/33] libsemanage: seuser serialization tests jbrindle_at_tresys.com [PATCH 25/33] libsemanage: policy server database hooks jbrindle_at_tresys.com [PATCH 27/33] libsemanage: booleans serialization tests jbrindle_at_tresys.com [PATCH 26/33] libsemanage: module serialization tests jbrindle_at_tresys.com [PATCH 24/33] libsemanage: networking support jbrindle_at_tresys.com [PATCH 20/33] libsemanage: seuser serialization jbrindle_at_tresys.com [PATCH 22/33] libsemanage: module serialization jbrindle_at_tresys.com [PATCH 18/33] libsemanage: node serialization jbrindle_at_tresys.com [PATCH 21/33] libsemanage: user serialization jbrindle_at_tresys.com [PATCH 23/33] libsemanage: commit number serialization jbrindle_at_tresys.com [PATCH 16/33] libsemanage: fcontext serialization jbrindle_at_tresys.com [PATCH 19/33] libsemanage: port serialization jbrindle_at_tresys.com [PATCH 15/33] libsemanage: context serialization jbrindle_at_tresys.com [PATCH 17/33] libsemanage: interface serialization jbrindle_at_tresys.com [PATCH 14/33] libsemanage: boolean serialization jbrindle_at_tresys.com [PATCH 13/33] libsemanage: testing infrastructure jbrindle_at_tresys.com [PATCH 12/33] libsemanage: basic serialization jbrindle_at_tresys.com [PATCH 11/33] libsemanage: endianness macros jbrindle_at_tresys.com [PATCH 10/33] libsemanage: database serialization jbrindle_at_tresys.com [PATCH 09/33] libsemanage: dbase/dconfig cleanup jbrindle_at_tresys.com [PATCH 06/33] libsepol: port serialization jbrindle_at_tresys.com [PATCH 08/33] libsemanage: DESTDIR support in INCLUDE and safe test target jbrindle_at_tresys.com [PATCH 07/33] libsepol: user serialization jbrindle_at_tresys.com [PATCH 05/33] libsepol: node serialization jbrindle_at_tresys.com [PATCH 04/33] libsepol: interface serialization jbrindle_at_tresys.com [PATCH 03/33] libsepol: context serialization jbrindle_at_tresys.com [PATCH 02/33] libsepol: boolean serialization jbrindle_at_tresys.com [PATCH 01/33] libsepol: basic serilization support jbrindle_at_tresys.com [PATCH 00/33] libsemanage/libsepol object serialization and ps-api jbrindle_at_tresys.com Tuesday, 24 April splice syscall Steve G Re: directory polyinstantiation failure Ted X Toth Re: [PATCH -trunk][RFC] libselinux: drop setlocaldefs and preservebools support Stephen Smalley Re: [POLICYREP PATCH] Add generic iterators and a list data type to libsepol Stephen Smalley RE: directory polyinstantiation failure Chad Hanson Patch to correct genhomedircon homedir labeling. Daniel J Walsh Re: [Fwd: policycoreutils patches] Stephen Smalley Re: can not boot with strict policy Daniel J Walsh Re: can not boot with strict policy Stephen Smalley Re: can not boot with strict policy Christopher J. PeBenito Re: [POLICYREP PATCH] Add generic iterators and a list data type to libsepol Stephen Smalley Re: can not boot with strict policy Daniel J Walsh Re: can not boot with strict policy Christopher J. PeBenito Re: directory polyinstantiation failure Russell Coker Re: can not boot with strict policy Russell Coker Re: can not boot with strict policy Ken YANG Monday, 23 April Re: [POLICYREP PATCH] Add generic iterators and a list data type to libsepol James Antill Re: [POLICYREP PATCH] Add generic iterators and a list data type to libsepol Karl MacMillan Re: [RFC] SELinux: use SECINITSID_NETMSG instead of SECINITSID_UNLABELED for NetLabel Paul Moore Re: [RFC] SELinux: use SECINITSID_NETMSG instead of SECINITSID_UNLABELED for NetLabel Stephen Smalley Re: [RFC] SELinux: use SECINITSID_NETMSG instead of SECINITSID_UNLABELED for NetLabel Paul Moore Re: can not boot with strict policy Daniel J Walsh Re: [POLICYREP PATCH] Add generic iterators and a list data type to libsepol Stephen Smalley Re: can not boot with strict policy Stephen Smalley Re: can not boot with strict policy James Morris Re: object class discovery userland Nick Nam Re: object class discovery userland Nick Nam Re: [POLICYREP PATCH] Add generic iterators and a list data type to libsepol James Antill Re: [POLICYREP PATCH] Add generic iterators and a list data type to libsepol Karl MacMillan Re: can not boot with strict policy Stephen Smalley RE: object class discovery userland Stephen Smalley RE: object class discovery userland Joshua Brindle Re: object class discovery userland Stephen Smalley Re: adding to selinux.py Stephen Smalley adding to selinux.py Ted X Toth can not boot with strict policy Ken YANG Friday, 20 April Re: [POLICYREP PATCH] Add generic iterators and a list data type to libsepol Eamon Walsh amtu policy/used for MLS Test suite, needs to run in the field dwalsh_at_redhat.com kudzu fixes to allow it to edit and restart init for MLS dwalsh_at_redhat.com misc fixes for netutils dwalsh_at_redhat.com Fixes for locate tool dwalsh_at_redhat.com aide has a new directory dwalsh_at_redhat.com Additional rules for amavis dwalsh_at_redhat.com apcupsd policy dwalsh_at_redhat.com logwatch tries to look at avahi, avahi needs to use winbind dwalsh_at_redhat.com bluetooth reads inotifyfs_t:dir dwalsh_at_redhat.com cups sends mail, connects to smbd port and binds to ports 600-1023 dwalsh_at_redhat.com Re: object class discovery userland Christopher J. PeBenito Re: object class discovery userland Eamon Walsh Re: object class discovery userland Eamon Walsh Re: object class discovery userland Christopher J. PeBenito Re: object class discovery userland KaiGai Kohei RE: object class discovery userland Joshua Brindle RE: object class discovery userland Karl MacMillan RE: object class discovery userland Joshua Brindle RE: object class discovery userland Karl MacMillan RE: object class discovery userland Joshua Brindle object class discovery userland Christopher J. PeBenito [POLICYREP PATCH] Add generic iterators and a list data type to libsepol Karl MacMillan [POLICYREP PATCH] Add objpool data structure to libsepol Karl MacMillan Re: FCGlob John D. Ramsdell Thursday, 19 April Re: [PATCH][RFC] selinux: preserve boolean values across policy reloads James Morris Re: ANN: Reference Policy Release Manoj Srivastava Re: ANN: Reference Policy Release Karl MacMillan Re: ANN: Reference Policy Release Manoj Srivastava Re: [PATCH -trunk][RFC] setsebool: only use libsemanage for persistent boolean changes Joshua Brindle Re: [PATCH -trunk][RFC] setsebool: only use libsemanage for persistent boolean changes Stephen Smalley Re: [PATCH] avc_internal.c needs #include <linux/types.h> for rhel4 Stephen Smalley Re: Samba fixes Karl MacMillan Re: [PATCH][RFC] selinux: preserve boolean values across policy reloads Stephen Smalley Re: [PATCH][RFC] selinux: preserve boolean values across policy reloads Joshua Brindle Re: [PATCH -trunk][RFC] setsebool: only use libsemanage for persistent boolean changes Karl MacMillan Re: [PATCH][RFC] selinux: preserve boolean values across policy reloads Stephen Smalley Re: [PATCH][RFC] selinux: preserve boolean values across policy reloads Karl MacMillan [PATCH -trunk][RFC] setsebool: only use libsemanage for persistent boolean changes Stephen Smalley Re: [PATCH][RFC] selinux: preserve boolean values across policy reloads Joshua Brindle Re: Samba fixes Michael C Thompson Re: [PATCH -trunk][RFC] libselinux: drop setlocaldefs and preservebools support Joshua Brindle Re: [PATCH][RFC] selinux: preserve boolean values across policy reloads Stephen Smalley [PATCH -trunk][RFC] libsemanage: some optimizations Stephen Smalley Re: [PATCH][RFC] selinux: preserve boolean values across policy reloads Joshua Brindle [PATCH -trunk][RFC] libselinux: drop setlocaldefs and preservebools support Stephen Smalley [PATCH][RFC] selinux: preserve boolean values across policy reloads Stephen Smalley [PATCH] avc_internal.c needs #include <linux/types.h> for rhel4 Joshua Brindle Re: Samba fixes Daniel J Walsh Additional textrel_shlib_t Daniel J Walsh Re: [PATCH - policyrep] add objpool to libsepol James Antill Re: [PATCH - policyrep] add objpool to libsepol Karl MacMillan Re: [PATCH - policyrep] add objpool to libsepol James Antill Re: [PATCH - policyrep] add objpool to libsepol Karl MacMillan [BUG] Segfault on duplicate require of sensitivity B Topscher Hal fixes Daniel J Walsh Apache patch Daniel J Walsh Re: Samba fixes Michael C Thompson squid patch Daniel J Walsh Additional fixes for consolekit. Daniel J Walsh Re: modular policy: local module issues Stephen Smalley modutils policy patch Daniel J Walsh Samba fixes Daniel J Walsh Remove admin templates from userdom_admin_user_template Daniel J Walsh Re: directory polyinstantiation failure Ted X Toth Re: [PATCH - policyrep] add objpool to libsepol James Antill Wednesday, 18 April [PATCH - policyrep] add objpool to libsepol Karl MacMillan [PATCH - policyrep] hashtab iterator support Karl MacMillan [PATCH - policyrep] Export symtab hash functions Karl MacMillan [PATCH - policyrep] Add generic iterators and a linked-list data structure to libsepol Karl MacMillan Re: [PATCH - policyrep] Add generic iterators and a linked-list data structure to libsepol Karl MacMillan [PATCH - policyrep] Add generic iterators and a linked-list data structure to libsepol Karl MacMillan [PATCH - policyrep] Add support for doxygen documentation in libsepol Karl MacMillan [ANN] New policy representation branch Karl MacMillan Re: directory polyinstantiation failure Linda Knippers ANN: SELinux Policy IDE (SLIDE) version 1.1 Dave Sugar Re: directory polyinstantiation failure Xavier Toth RE: using cron in selinux policy Karl MacMillan RE: using cron in selinux policy Joshua Brindle Re: using cron in selinux policy Karl MacMillan RE: using cron in selinux policy ( a tip) Zwartsenberg, Remmolt Re: using cron in selinux policy Daniel J Walsh Tuesday, 17 April Re: FCGlob Russell Coker SELinux vs MVFS (via IBM's Rational ClearCase) James, Jay Re: directory polyinstantiation failure Michael C Thompson rwho patch Daniel J Walsh Re: directory polyinstantiation failure Xavier Toth Re: FCGlob James Athey Re: directory polyinstantiation failure Michael C Thompson Re: FCGlob James Antill Re: FCGlob John D. Ramsdell directory polyinstantiation failure Xavier Toth Re: FCGlob John D. Ramsdell Re: [HACKERS] [RFC] PostgreSQL Access Control Extension (PGACE) KaiGai Kohei Re: autoreconf fails in setools of revision 4290 Jeremy A. Mowery RE: FCGlob Christopher Ashworth modular policy: local module issues Antoine Martin ANN: Reference Policy Release Christopher J. PeBenito Re: FCGlob (does someone have the time to generate a special purpose machine) John D. Ramsdell RE: FCGlob (does someone have the time to generate a special purpose machine) Zwartsenberg, Remmolt Re: FCGlob John D. Ramsdell FCGlob Russell Coker autoreconf fails in setools of revision 4290 Ken YANG Monday, 16 April Re: fusermount policy Daniel J Walsh Re: fusermount policy Christopher J. PeBenito Friday, 13 April Re: [Fwd: policycoreutils patches] Karl MacMillan Re: [Fwd: policycoreutils patches] Stephen Smalley Re: [Fwd: policycoreutils patches] Karl MacMillan Re: Porting to solaris, bsd? Stephen Smalley* Porting to solaris, bsd? Dean Anderson* Re: [PATCH]: add boolmap argument to expand_module_avrules() Karl MacMillan Re: [Fwd: policycoreutils patches] Karl MacMillan Re: [Fwd: policycoreutils patches] Stephen Smalley Re: Additional swig interfaces for selinux Daniel J Walsh Re: [Fwd: policycoreutils patches] Daniel J Walsh Re: [Fwd: policycoreutils patches] Stephen Smalley Re: [Fwd: policycoreutils patches] Stephen Smalley Re: [Fwd: policycoreutils patches] Daniel J Walsh Re: [Fwd: policycoreutils patches] Stephen Smalley Re: Additional swig interfaces for selinux Stephen Smalley Re: [PATCH]: add boolmap argument to expand_module_avrules() Stephen Smalley [Fwd: policycoreutils patches] Daniel J Walsh Thursday, 12 April Additional swig interfaces for selinux Daniel J Walsh [PATCH]: add boolmap argument to expand_module_avrules() Christopher J. PeBenito Re: Fixes for checkmodule man page. Stephen Smalley Re: libselinux patch with corrected call to get_all Stephen Smalley RE: Would the SELinux act as a TippingPoint IPS to block the nasty Trojan traffic? Venkat Yekkirala RE: Would the SELinux act as a TippingPoint IPS to block the nasty Trojan traffic? Venkat Yekkirala RE: Would the SELinux act as a TippingPoint IPS to block the nasty Trojan traffic? Venkat Yekkirala Re: [Fwd: Re: seobject.py setransRecords.get_all method return values] Stephen Smalley Wednesday, 11 April Application diff Daniel J Walsh Re: w3c-markup-validator policy files Daniel J Walsh Re: X server won't start using MLS policy Daniel J Walsh Re: selinux_getattr patch Daniel J Walsh Re: New policy for consolekit. Daniel J Walsh Re: X server won't start using MLS policy Stephen Smalley Re: selinux_getattr patch Christopher J. PeBenito Re: X server won't start using MLS policy Mark Webb Re: X server won't start using MLS policy Mark Webb Re: Zabbix policy Christopher J. PeBenito Re: X server won't start using MLS policy Stephen Smalley X server won't start using MLS policy Mark Webb libselinux patch with corrected call to get_all Daniel J Walsh Fixes for checkmodule man page. Daniel J Walsh [Fwd: Re: seobject.py setransRecords.get_all method return values] Ted X Toth Re: Remove unconfined_domain from udev Christopher J. PeBenito Re: Random file context diffs Christopher J. PeBenito Re: Samba guys reviewed samba policy and fixed some of the ports used by samba Christopher J. PeBenito Re: sasl authd uses kerberos Christopher J. PeBenito Re: Removed unconfined_domain for insmod_t Christopher J. PeBenito Re: Would the SELinux act as a TippingPoint IPS to block the nasty Trojan traffic? Paul Moore Re: Would the SELinux act as a TippingPoint IPS to block the nasty Trojan traffic? Joshua Brindle 2007 SELinux Symposium papers and slides are posted Joshua Brindle Re: [patch] reducing size of libselnux/libsepol for embedded Yuichi Nakamura Re: Would the SELinux act as a TippingPoint IPS to block the nasty Trojan traffic? Paul Moore RE: Would the SELinux act as a TippingPoint IPS to block the nasty Trojan traffic? Venkat Yekkirala Re: consolekit needs additional privs. Daniel J Walsh Re: consolekit needs additional privs. Christopher J. PeBenito Re: Would the SELinux act as a TippingPoint IPS to block the nasty Trojan traffic? Paul Moore Tuesday, 10 April Re: Would the SELinux act as a TippingPoint IPS to block the nasty Trojan traffic? Joshua Brindle Re: Would the SELinux act as a TippingPoint IPS to block the nasty Trojan traffic? Paul Moore Re: [patch] reducing size of libselnux/libsepol for embedded Joshua Brindle Re: Would the SELinux act as a TippingPoint IPS to block the nasty Trojan traffic? Joshua Brindle Re: [patch] reducing size of libselnux/libsepol for embedded Karl MacMillan Re: Remove unconfined_domain from ldconfig Daniel J Walsh Re: Remove unconfined_domain from ldconfig Christopher J. PeBenito Re: [patch] reducing size of libselnux/libsepol for embedded Stephen Smalley Re: Added a patch so third party policy makers can identify ports as port_types Christopher J. PeBenito Re: Apache wants to read krb5kdc.conf file Christopher J. PeBenito Re: [patch] reducing size of libselnux/libsepol for embedded Stephen Smalley [PATCH] sepolgen updates Karl MacMillan Re: [patch] reducing size of libselnux/libsepol for embedded Joshua Brindle Re: Would the SELinux act as a TippingPoint IPS to block the nasty Trojan traffic? Paul Moore Re: djbdns patch Petre Rodan Re: logwatch sends syslog messages and reads netlink_route_socket. Christopher J. PeBenito Re: dontaudit using firstboot fifo_file Christopher J. PeBenito Re: cyrus sends mail and uses kerberos Christopher J. PeBenito Re: ccs uses tmp files. Christopher J. PeBenito Re: networkmanager now setpgid Christopher J. PeBenito Re: kudzu requests sys_ptrace, I am denying it. Christopher J. PeBenito Re: djbdns patch Christopher J. PeBenito Would the SELinux act as a TippingPoint IPS to block the nasty Trojan traffic? John Wan Monday, 9 April Re: [patch] reducing size of libselnux/libsepol for embedded Yuichi Nakamura Re: [patch] reducing size of libselnux/libsepol for embedded Yuichi Nakamura seobject.py setransRecords.get_all method return values Ted X Toth Re: libselinux patch Daniel J Walsh Re: [patch] reducing size of libselnux/libsepol for embedded Stephen Smalley Re: libselinux patch Stephen Smalley Re: [patch] reducing size of libselnux/libsepol for embedded Stephen Smalley Re: [patch] reducing size of libselnux/libsepol for embedded Joshua Brindle [patch] reducing size of libselnux/libsepol for embedded Yuichi Nakamura Sunday, 8 April Re: [patch] selinux: export initial SID contexts via selinuxfs (v2) KaiGai Kohei Friday, 6 April [patch 2/2] libselinux: add support for getting contexts for kernel initial SIDs from selinuxfs James Carter [patch 1/2] libselinux: add support for getting contexts for kernel initial SIDs from selinuxfs James Carter [patch 0/2] libselinux: add support for getting contexts for kernel initial SIDs from selinuxfs James Carter Re: conditional. policy does not take effect. Daniel J Walsh Re: [patch] selinux: export initial SID contexts via selinuxfs (v2) James Carter syscall-proxy Russell Coker Re: conditional. policy does not take effect. Christopher J. PeBenito conditional. policy does not take effect. JanuGerman Re: [patch] selinux: export initial SID contexts via selinuxfs (v2) KaiGai Kohei Thursday, 5 April Re: libselinux patch Daniel J Walsh Re: secmark integration Stephen Smalley Re: secmark integration Eamon Walsh Re: secmark integration Stephen Smalley Re: secmark integration Stephen Smalley Re: secmark integration Joshua Brindle Re: secmark integration Christopher J. PeBenito Re: [PATCH] libselinux: grant permissions on deny in permissive mode Eamon Walsh Re: secmark integration Stephen Smalley Re: [PATCH] libselinux: grant permissions on deny in permissive mode Stephen Smalley Re: secmark integration Christopher J. PeBenito Re: [PATCH] libselinux: grant permissions on deny in permissive mode Eamon Walsh Re: secmark integration Stephen Smalley Re: libselinux patch Stephen Smalley Re: [PATCH] libselinux: grant permissions on deny in permissive mode Stephen Smalley Re: secmark integration Karl MacMillan [PATCH] libselinux: grant permissions on deny in permissive mode Eamon Walsh libselinux patch Daniel J Walsh Re: secmark integration Christopher J. PeBenito Re: secmark integration Karl MacMillan Re: [patch 0/3] selinux: fix of selinuxfs inode number assigning and cleanup of selinuxfs James Morris Re: [patch 1/3] selinux: explicitly number all selinuxfs inodes Stephen Smalley Wednesday, 4 April Re: [patch 1/3] selinux: explicitly number all selinuxfs inodes Eric Paris Re: secmark integration Daniel J Walsh [patch 3/3] selinux: change numbering of boolean directory inodes in selinuxfs James Carter [patch 2/3] selinux: remove unused enumeration constant from selinuxfs James Carter [patch 1/3] selinux: explicitly number all selinuxfs inodes James Carter [patch 0/3] selinux: fix of selinuxfs inode number assigning and cleanup of selinuxfs James Carter Re: secmark integration Karl MacMillan Re: [patch] selinux: export initial SID contexts via selinuxfs (v2) Stephen Smalley Re: [patch] selinux: export initial SID contexts via selinuxfs (v2) Eric Paris Re: [patch] selinux: export initial SID contexts via selinuxfs (v2) James Morris Re: secmark integration Christopher J. PeBenito Re: [patch] selinux: export initial SID contexts via selinuxfs (v2) James Morris Re: [patch] selinux: export initial SID contexts via selinuxfs (v2) Stephen Smalley Re: [patch] selinux: export initial SID contexts via selinuxfs (v2) Eric Paris Re: Identification of Attribute values within the Security Server Stephen Smalley Re: Identification of Attribute values within the Security Server JanuGerman Re: [patch] selinux: export initial SID contexts via selinuxfs (v2) Stephen Smalley Re: Identification of Attribute values within the Security Server Stephen Smalley [patch] selinux: export initial SID contexts via selinuxfs (v2) James Carter Re: Identification of Attribute values within the Security Server JanuGerman Re: [patch] selinux: export initial SID contexts via selinuxfs Stephen Smalley Tuesday, 3 April Re: runcon problems Russell Coker Re: Applications without SELinux policies Russell Coker Re: Applications without SELinux policies Daniel J Walsh [PATCH] refpolicy: include LOCAL_ROOT modules in make conf James Athey [patch] selinux: export initial SID contexts via selinuxfs James Carter Applications without SELinux policies Dave Quigley Re: runcon problems Daniel J Walsh Re: Identification of Attribute values within the Security Server Stephen Smalley Identification of Attribute values within the Security Server JanuGerman Identification of Attribute values within the Security Server JanuGerman Re: Compatibility between binary policy file and kernel version Stephen Smalley Re: Compatibility between binary policy file and kernel version Pravin Monday, 2 April Re: Compatibility between binary policy file and kernel version Pravin Re: secmark integration Karl MacMillan Re: secmark integration James Morris Re: secmark integration James Morris [PATCH] libselinux: handle null SID's in sidput (revised) Eamon Walsh Re: [Fwd: restorecon single fs patch] Stephen Smalley [PATCH] libselinux: handle null SID's in sidput / sidget Eamon Walsh [Fwd: restorecon single fs patch] Daniel J Walsh Re: Compatibility between binary policy file and kernel version Eric Paris Re: Compatibility between binary policy file and kernel version Stephen Smalley Re: secmark integration Karl MacMillan Re: secmark integration Karl MacMillan Re: secmark integration Karl MacMillan Re: secmark integration Joshua Brindle Re: secmark integration James Morris Re: Java bindings for SELinux libraries KaiGai Kohei Re: Compatibility between binary policy file and kernel version Stephen Smalley Re: secmark integration Christopher J. PeBenito Re: secmark integration Eric Paris RE: Java bindings for SELinux libraries Brian M. Williams Re: secmark integration Paul Moore Compatibility between binary policy file and kernel version Pravin Re: secmark integration Daniel J Walsh Re: Some disable_trans stuff was missed in selinux-policy update Christopher J. PeBenito Re: implementation of conditional policies Stephen Smalley Re: implementation of conditional policies JanuGerman Sunday, 1 April Re: Java bindings for SELinux libraries Antoine Martin Friday, 30 March Re: secmark integration James Morris Re: secmark integration Eric Paris Re: secmark integration Karl MacMillan Re: Expunging userspace classes and permissions from kernel headers Christopher J. PeBenito Re: secmark integration Eric Paris Re: SELinux for upstream coreutils, finally (RFC: does mkdir need -Z?) Jim Meyering Re: Expunging userspace classes and permissions from kernel headers Stephen Smalley Re: secmark integration Karl MacMillan Re: [PATCH 3/3] libselinux: string and compute_create functions Stephen Smalley Re: [PATCH 2/3] libselinux: string and compute_create functions Stephen Smalley Re: [PATCH 1/3] libselinux: string and compute_create functions (resend) Stephen Smalley [PATCH 1/3] libselinux: string and compute_create functions (resend) Eamon Walsh Re: SELinux for upstream coreutils, finally (RFC: does mkdir need -Z?) Karl MacMillan Re: SELinux for upstream coreutils, finally (RFC: does mkdir need -Z?) Christopher J. PeBenito [PATCH 3/3] libselinux: string and compute_create functions Eamon Walsh Re: SELinux for upstream coreutils, finally (RFC: does mkdir need -Z?) Jim Meyering [PATCH 2/3] libselinux: string and compute_create functions Eamon Walsh Re: SELinux for upstream coreutils, finally (RFC: does mkdir need -Z?) Daniel J Walsh [PATCH 1/3] libselinux: string and compute_create functions Eamon Walsh Re: SELinux for upstream coreutils, finally (RFC: does mkdir need -Z?) Karl MacMillan Re: SELinux for upstream coreutils, finally (RFC: does mkdir need -Z?) Jim Meyering Re: SELinux for upstream coreutils, finally (RFC: does mkdir need -Z?) Karl MacMillan Re: Java bindings for SELinux libraries Karl MacMillan Re: SELinux for upstream coreutils, finally (RFC: does mkdir need -Z?) Russell Coker SELinux userland patches. Daniel J Walsh Re: SELinux for upstream coreutils, finally (RFC: does mkdir need -Z?) Jim Meyering Re: api for getting setrans information Ted X Toth Re: SELinux for upstream coreutils, finally (RFC: does mkdir need -Z?) Russell Coker Re: [PATCH] map booleans during expansion Joshua Brindle Re: [PATCH] map booleans during expansion Joshua Brindle Re: api for getting setrans information Stephen Smalley SELinux for upstream coreutils, finally (RFC: does mkdir need -Z?) Jim Meyering Re: api for getting setrans information Daniel J Walsh Thursday, 29 March api for getting setrans information Ted X Toth Java bindings for SELinux libraries Dave Quigley Re: Solaris 10 w/ Trusted Extensions vs SE Linux Comparison Karl MacMillan Re: [PATCH] map booleans during expansion Karl MacMillan Re: class unique perms hashtab nprim Stephen Smalley class unique perms hashtab nprim Christopher J. PeBenito Re: Conditional Policy using Reference Policy JanuGerman Re: [PATCH] map booleans during expansion Joshua Brindle Re: [PATCH] map booleans during expansion Stephen Smalley Re: [PATCH] map booleans during expansion Stephen Smalley Re: SELinux cache. Stephen Smalley Re: SELinux cache. JanuGerman Re: Conditional Policy using Reference Policy Christopher J. PeBenito Re: [PATCH] map booleans during expansion Joshua Brindle Re: Conditional Policy using Reference Policy Stephen Smalley Re: "HASHTAB_OVERFLOW" undeclared Christopher J. PeBenito Re: "HASHTAB_OVERFLOW" undeclared Stephen Smalley Re: "HASHTAB_OVERFLOW" undeclared Daniel J Walsh Re: "HASHTAB_OVERFLOW" undeclared Ken YANG Re: "HASHTAB_OVERFLOW" undeclared Stephen Smalley Conditional Policy using Reference Policy JanuGerman Wednesday, 28 March "HASHTAB_OVERFLOW" undeclared Ken YANG Re: coreutils: selinux is nearly ready: status Jim Meyering Re: [PATCH] map booleans during expansion Karl MacMillan Re: netutils reads dev_sysfs Christopher J. PeBenito Re: Samba guys reviewed samba policy and fixed some of the ports used by samba Daniel J Walsh Re: cpuspeed wants to write to sysfs_dirs Christopher J. PeBenito Re: Samba guys reviewed samba policy and fixed some of the ports used by samba Christopher J. PeBenito Re: Elimination of disable_trans boolean ramifications Christopher J. PeBenito Re: [PATCH 2/3] Refpolicy: remove a duplicate rule in the ipsec.te file Christopher J. PeBenito Re: [PATCH 1/3] Refpolicy: allow the IPsec management tools to start at boot Christopher J. PeBenito Re: coreutils: selinux is nearly ready: status Christopher J. PeBenito Re: LSPP kernels (was Re: [PATCH]: SAD sometimes has double SAs). James Morris Re: LSPP kernels (was Re: [PATCH]: SAD sometimes has double SAs). Eric Paris Re: LSPP kernels (was Re: [PATCH]: SAD sometimes has double SAs). Paul Moore LSPP kernels (was Re: [PATCH]: SAD sometimes has double SAs). James Morris [PATCH] map booleans during expansion Karl MacMillan Re: Separating libselinux/libsepol (Was: Re: BusyBox: load_policy applet) Russell Coker Re: [busybox:00575] Re: Separating libselinux/libsepol (Was: Re: BusyBox: load_policy applet) Joshua Brindle Re: Separating libselinux/libsepol (Was: Re: BusyBox: load_policy applet) Christopher J. PeBenito Re: Separating libselinux/libsepol (Was: Re: BusyBox: load_policy applet) Stephen Smalley Re: [busybox:00575] Re: Separating libselinux/libsepol (Was: Re: BusyBox: load_policy applet) Stephen Smalley Re: Separating libselinux/libsepol (Was: Re: BusyBox: load_policy applet) Stephen Smalley Re: Separating libselinux/libsepol (Was: Re: BusyBox: load_policy applet) Russell Coker Re: promoting printk for FS mounting back from KERN_DEBUG Stephen Smalley Re: [busybox:00575] Re: Separating libselinux/libsepol (Was: Re: BusyBox: load_policy applet) KaiGai Kohei Re: Separating libselinux/libsepol (Was: Re: BusyBox: load_policy applet) Yuichi Nakamura Tuesday, 27 March Re: Separating libselinux/libsepol (Was: Re: BusyBox: load_policy applet) Yuichi Nakamura Re: Separating libselinux/libsepol (Was: Re: BusyBox: load_policy applet) KaiGai Kohei Re: promoting printk for FS mounting back from KERN_DEBUG Steve G Re: Separating libselinux/libsepol (Was: Re: BusyBox: load_policy applet) Joshua Brindle Re: Separating libselinux/libsepol (Was: Re: BusyBox: load_policy applet) Ryan Bradetich Re: promoting printk for FS mounting back from KERN_DEBUG Eric Paris Re: promoting printk for FS mounting back from KERN_DEBUG Stephen Smalley Re: Separating libselinux/libsepol (Was: Re: BusyBox: load_policy applet) Ryan Bradetich promoting printk for FS mounting back from KERN_DEBUG Eric Paris Re: Separating libselinux/libsepol (Was: Re: BusyBox: load_policy applet) Christopher J. PeBenito Re: Separating libselinux/libsepol (Was: Re: BusyBox: load_policy applet) Karl MacMillan Re: Separating libselinux/libsepol (Was: Re: BusyBox: load_policy applet) Stephen Smalley Re: Separating libselinux/libsepol (Was: Re: BusyBox: load_policy applet) Christopher J. PeBenito Re: Separating libselinux/libsepol (Was: Re: BusyBox: load_policy applet) Karl MacMillan Re: Separating libselinux/libsepol (Was: Re: BusyBox: load_policy applet) Stephen Smalley Re: Separating libselinux/libsepol (Was: Re: BusyBox: load_policy applet) Christopher J. PeBenito Re: Error in installing RefPolicy possibly some conflict? Stephen Smalley Re: nscd errors Stephen Smalley Re: Error in installing RefPolicy possibly some conflict? JanuGerman Re: Error in installing RefPolicy possibly some conflict? Stephen Smalley Error in installing RefPolicy possibly some conflict? JanuGerman Re: Separating libselinux/libsepol (Was: Re: BusyBox: load_policy applet) Stephen Smalley Re: SELinux cache. Stephen Smalley Re: system-config-service of iptables needs this patch to work in targeted policy Christopher J. PeBenito Re: Separating libselinux/libsepol (Was: Re: BusyBox: load_policy applet) Christopher J. PeBenito Monday, 26 March Re: Separating libselinux/libsepol (Was: Re: BusyBox: load_policy applet) Christopher J. PeBenito Tuesday, 27 March Re: Separating libselinux/libsepol (Was: Re: BusyBox: load_policy applet) Stephen Smalley Monday, 26 March Re: Developer summit minutes Russell Coker Tuesday, 27 March nscd errors Sylviane Molinet SELinux cache. JanuGerman Re: why base.pp has attribute and policy.* not Ken YANG Monday, 26 March Re: Separating libselinux/libsepol (Was: Re: BusyBox: load_policy applet) Ryan Bradetich Re: Separating libselinux/libsepol (Was: Re: BusyBox: load_policy applet) Yuichi Nakamura Re: Developer summit minutes Ryan Bradetich runcon problems Yong Lee Re: [PATCH]: Add security check before flushing SAD/SPD Joy Latten Re: [PATCH]: Add security check before flushing SAD/SPD Eric Paris Re: system-config-service of iptables needs this patch to work in targeted policy Daniel J Walsh Re: [PATCH]: Add security check before flushing SAD/SPD James Morris Re: Elimination of disable_trans boolean ramifications Karl MacMillan Re: [PATCH]: Add security check before flushing SAD/SPD James Morris Re: [PATCH]: Add security check before flushing SAD/SPD Joy Latten Re: Fix dosfs handling in the interface Christopher J. PeBenito Re: Resend of cpuspeed.patch Christopher J. PeBenito Re: fix /dev/ub specification Christopher J. PeBenito Re: ipsec tools domtrans patch Christopher J. PeBenito Re: netutils needs to read sysfs Christopher J. PeBenito Re: system-config-service of iptables needs this patch to work in targeted policy Christopher J. PeBenito Re: Elimination of disable_trans boolean ramifications Daniel J Walsh Re: [PATCH 3/3] Refpolicy: allow netlabelctl to be run at boot Daniel J Walsh Developer summit minutes Stephen Smalley Re: Expunging userspace classes and permissions from kernel headers Stephen Smalley Re: Elimination of disable_trans boolean ramifications Karl MacMillan Re: Separating libselinux/libsepol (Was: Re: BusyBox: load_policy applet) Stephen Smalley Re: Separating libselinux/libsepol (Was: Re: BusyBox: load_policy applet) Karl MacMillan Re: Separating libselinux/libsepol (Was: Re: BusyBox: load_policy applet) Christopher J. PeBenito Re: [PATCH 3/3] Refpolicy: allow netlabelctl to be run at boot Stephen Smalley Re: [PATCH 3/3] Refpolicy: allow netlabelctl to be run at boot Daniel J Walsh Some disable_trans stuff was missed in selinux-policy update Daniel J Walsh Re: [PATCH 3/3] Refpolicy: allow netlabelctl to be run at boot Paul Moore Re: Expunging userspace classes and permissions from kernel headers Stephen Smalley Re: additional change to ipsec policy Christopher J. PeBenito Re: [PATCH 3/3] Refpolicy: allow netlabelctl to be run at boot Christopher J. PeBenito Re: some errors in installing pp Stephen Smalley Re: some errors in installing pp Karl MacMillan Re: Hal changes. Christopher J. PeBenito Separating libselinux/libsepol (Was: Re: BusyBox: load_policy applet) Stephen Smalley Re: why base.pp has attribute and policy.* not Stephen Smalley why base.pp has attribute and policy.* not Ken YANG Sunday, 25 March Re: BusyBox: load_policy applet Yuichi Nakamura Saturday, 24 March Re: some errors in installing pp Nerazzurri.YANG Friday, 23 March Re: Sample policy language extension supporting per-user policy Eamon Walsh Sample policy language extension supporting per-user policy Eamon Walsh Re: Last call for objections to 2 significant policy changes Christopher J. PeBenito Re: netlabel can be run in init scripts I think? Christopher J. PeBenito Re: some errors in installing pp Karl MacMillan Added a patch so third party policy makers can identify ports as port_types Daniel J Walsh dontaudit using firstboot fifo_file Daniel J Walsh Re: netlabel can be run in init scripts I think? Paul Moore kudzu requests sys_ptrace, I am denying it. Daniel J Walsh logwatch sends syslog messages and reads netlink_route_socket. Daniel J Walsh netutils reads dev_sysfs Daniel J Walsh ccs uses tmp files. Daniel J Walsh consolekit needs additional privs. Daniel J Walsh cyrus sends mail and uses kerberos Daniel J Walsh djbdns patch Daniel J Walsh Apache wants to read krb5kdc.conf file Daniel J Walsh networkmanager now setpgid Daniel J Walsh sasl authd uses kerberos Daniel J Walsh Not sure if I sent this patch before. Daniel J Walsh Remove unconfined_domain from ldconfig Daniel J Walsh Re: Expunging userspace classes and permissions from kernel headers Christopher J. PeBenito fusermount policy Daniel J Walsh mount_ntfs policy Daniel J Walsh netlabel can be run in init scripts I think? Daniel J Walsh Zabbix policy Daniel J Walsh Remove unconfined_domain from udev Daniel J Walsh cpuspeed wants to write to sysfs_dirs Daniel J Walsh Samba guys reviewed samba policy and fixed some of the ports used by samba Daniel J Walsh selinux_getattr patch Daniel J Walsh Re: [PATCH]: Add security check before flushing SAD/SPD Joy Latten Random file context diffs Daniel J Walsh Re: Expunging userspace classes and permissions from kernel headers Stephen Smalley Re: [PATCH]: Add security check before flushing SAD/SPD Eric Paris Re: Elimination of disable_trans boolean ramifications Daniel J Walsh Re: [PATCH]: Add security check before flushing SAD/SPD James Morris Re: Expunging userspace classes and permissions from kernel headers Eric Paris Re: Expunging userspace classes and permissions from kernel headers James Morris Elimination of disable_trans boolean ramifications Daniel J Walsh Re: [PATCH]: Add security check before flushing SAD/SPD Eric Paris Re: some errors in installing pp Stephen Smalley Re: [PATCH]: Add security check before flushing SAD/SPD Joy Latten Re: some errors in installing pp Stephen Smalley Re: some errors in installing pp Stephen Smalley Re: Expunging userspace classes and permissions from kernel headers Stephen Smalley Re: Expunging userspace classes and permissions from kernel headers Christopher J. PeBenito Re: some errors in installing pp Karl MacMillan [Fwd: target policy 2.5.9-2 in fc7 prevent mono] Daniel J Walsh Re: BusyBox: load_policy applet Stephen Smalley Re: some errors in installing pp Stephen Smalley some errors in installing pp Nerazzurri.YANG BusyBox: load_policy applet Yuichi Nakamura Re: [PATCH]: Add security check before flushing SAD/SPD Eric Paris Thursday, 22 March Re: [PATCH]: Add security check before flushing SAD/SPD James Morris Re: stdint.h required in avc.h in order for other package builds to work. (uint32_t definition) Eamon Walsh Re: [PATCH]: Add security check before flushing SAD/SPD Joy Latten Re: [PATCH]: Add security check before flushing SAD/SPD James Morris Re: [PATCH]: Add security check before flushing SAD/SPD Joy Latten stdint.h required in avc.h in order for other package builds to work. (uint32_t definition) Daniel J Walsh ANN: Updated SELinux core userland release Stephen Smalley Re: Expunging userspace classes and permissions from kernel headers Stephen Smalley Re: Expunging userspace classes and permissions from kernel headers Christopher J. PeBenito Re: Expunging userspace classes and permissions from kernel headers Stephen Smalley Re: Expunging userspace classes and permissions from kernel headers Christopher J. PeBenito Re: Added application_exec_type patch Christopher J. PeBenito Re: syslogd-ng defines tcp ports to connect to. Christopher J. PeBenito Expunging userspace classes and permissions from kernel headers Stephen Smalley Re: Minor changes to lvm Christopher J. PeBenito Re: [PATCH] refpolicy: experimental X policy -v2 Russell Coker Wednesday, 21 March Re: Kernel Panics, when start with amendments in SELInux Source Code Karl MacMillan Re: [PATCH] refpolicy: experimental X policy -v2 Eamon Walsh Re: [RFC] SELinux: use SECINITSID_NETMSG instead of SECINITSID_UNLABELED for NetLabel Paul Moore Re: [PATCH] refpolicy: experimental X policy -v2 Christopher J. PeBenito Re: Kernel Panics, when start with amendments in SELInux Source Code Stephen Smalley Re: [PATCH] refpolicy: experimental X policy -v2 Eamon Walsh Re: Kernel Panics, when start with amendments in SELInux Source Code JanuGerman Re: Kernel Panics, when start with amendments in SELInux Source Code JanuGerman Re: ricci_modstorage needs to transition to lvm and dontaudit ptrace Christopher J. PeBenito Re: Kernel Panics, when start with amendments in SELInux Source Code Stephen Smalley Kernel Panics, when start with amendments in SELInux Source Code JanuGerman Re: [PATCH] refpolicy: experimental X policy -v2 Christopher J. PeBenito [PATCH] sepolgen: move interface info to var Karl MacMillan Re: The reason why SEPostgreSQL use original userspace AVC KaiGai Kohei Re: The reason why SEPostgreSQL use original userspace AVC KaiGai Kohei Re: New fail2ban policy Christopher J. PeBenito Re: The reason why SEPostgreSQL use original userspace AVC Stephen Smalley Re: [PATCH] sepolgen fix tests and refpolicy formatting Stephen Smalley Re: The reason why SEPostgreSQL use original userspace AVC Stephen Smalley Re: [RFC] SELinux: use SECINITSID_NETMSG instead of SECINITSID_UNLABELED for NetLabel Stephen Smalley Tuesday, 20 March Re: [PATCH] refpolicy: experimental X policy -v2 Xavier Toth Re: [PATCH] refpolicy: experimental X policy -v2 Eamon Walsh Re: [RFC] SELinux: use SECINITSID_NETMSG instead of SECINITSID_UNLABELED for NetLabel Paul Moore [PATCH] sepolgen fix tests and refpolicy formatting Karl MacMillan Re: kudzu needs to init_telinit to change its runlevel Daniel J Walsh Re: New fail2ban policy Daniel J Walsh Re: New fail2ban policy Christopher J. PeBenito Re: [RFC] SELinux: use SECINITSID_NETMSG instead of SECINITSID_UNLABELED for NetLabel Stephen Smalley Re: [RFC] SELinux: use SECINITSID_NETMSG instead of SECINITSID_UNLABELED for NetLabel Paul Moore Re: kudzu needs to init_telinit to change its runlevel Christopher J. PeBenito Re: Confirmation about task_has_security in selinuxfs.c Stephen Smalley Re: Confirmation about task_has_security in selinuxfs.c JanuGerman Thursday, 15 March policy for subversion post-commit hook on fc6 targeted david x callaway Tuesday, 20 March Re: Incorrect comment or toolchain problem in refpolicy policy/modules/kernel/kernel.te? Stephen Smalley Re: Incorrect comment or toolchain problem in refpolicy policy/modules/kernel/kernel.te? Ryan Bradetich Monday, 19 March Re: [PATCH] libselinux lazy init Steve G Re: mls changes to get xinetd to work with labeled networking Christopher J. PeBenito Re: [RFC] SELinux: use SECINITSID_NETMSG instead of SECINITSID_UNLABELED for NetLabel Stephen Smalley Re: amtu policy Christopher J. PeBenito Re: kudzu needs to init_telinit to change its runlevel Linda Knippers Re: kudzu needs to init_telinit to change its runlevel Christopher J. PeBenito Re: gpg needs to be able to create its keys dir Christopher J. PeBenito Re: [PATCH] libselinux lazy init Stephen Smalley Re: Add kvmfs support Christopher J. PeBenito Re: [PATCH] libselinux lazy init Steve G Re: radius needs to read netlink_route and fix r_dir_perms->list_dir_perms Christopher J. PeBenito Re: systat needs to read sysfs Christopher J. PeBenito Re: using the xdm_t:fifo_file sometimes requires ioctl Christopher J. PeBenito Re: [PATCH] libselinux lazy init Steve G Re: [PATCH] libselinux lazy init Stephen Smalley Re: [PATCH] libselinux lazy init Stephen Smalley Re: [PATCH] libselinux lazy init Steve G Re: New policy for consolekit. Christopher J. PeBenito Re: sudo change in policy Christopher J. PeBenito Re: [PATCH] libselinux lazy init Stephen Smalley secmark integration James Morris Last call for objections to 2 significant policy changes Christopher J. PeBenito The reason why SEPostgreSQL use original userspace AVC KaiGai Kohei Re: errors in debugging "services.c" Stephen Smalley Re: Incorrect comment or toolchain problem in refpolicy policy/modules/kernel/kernel.te? Stephen Smalley Re: SELinux configuration problems on Fedora Core 6 Stephen Smalley Re: SELinux configuration problems on Fedora Core 6 Stephen Smalley Saturday, 17 March I built a little script to check how often te files are calling individual interfaces in the policy sources. Daniel J Walsh Monday, 19 March Re: Confirmation about task_has_security in selinuxfs.c Stephen Smalley Sunday, 18 March Re: [RFC] SELinux: use SECINITSID_NETMSG instead of SECINITSID_UNLABELED for NetLabel Joshua Brindle Re: errors in debugging "services.c" Joshua Brindle [PATCH] libselinux lazy init Steve G errors in debugging "services.c" JanuGerman Saturday, 17 March Incorrect comment or toolchain problem in refpolicy policy/modules/kernel/kernel.te? Ryan Bradetich Thursday, 15 March Re: Getting Security Identifier (SID) for newly created process Pravin Re: SELinux configuration problems on Fedora Core 6 JanuGerman SELinux configuration problems on Fedora Core 6 JanuGerman Wednesday, 14 March Re: Confirmation about task_has_security in selinuxfs.c JanuGerman Tuesday, 13 March [RFC] SELinux: use SECINITSID_NETMSG instead of SECINITSID_UNLABELED for NetLabel Paul Moore Re: Getting Security Identifier (SID) for newly created process Stephen Smalley Re: Confirmation about task_has_security in selinuxfs.c Stephen Smalley Re: Getting Security Identifier (SID) for newly created process Pravin Re: Confirmation about task_has_security in selinuxfs.c JanuGerman Re: Getting Security Identifier (SID) for newly created process Stephen Smalley Getting Security Identifier (SID) for newly created process Pravin Re: Confirmation about task_has_security in selinuxfs.c Stephen Smalley Re: Confirmation about task_has_security in selinuxfs.c JanuGerman Re: Fedora core 6 policy Stephen Smalley Fedora core 6 policy Nayak Debabrata-a22788 Re: Confirmation about task_has_security in selinuxfs.c Stephen Smalley Confirmation about task_has_security in selinuxfs.c JanuGerman Monday, 12 March Re: Modification in message for libsemanage Stephen Smalley Re: [PATCH] Dropping support for disabling caching of context translations (CACHETRANS=0) Stephen Smalley Re: [PATCH] Dropping compat support for /etc/security policy file paths Stephen Smalley Re: [ANN] SE-PostgreSQL 8.2.3-1.0 alpha release Stephen Smalley Re: [ANN] SE-PostgreSQL 8.2.3-1.0 alpha release Eamon Walsh Friday, 9 March additional change to ipsec policy Joy Latten Monday, 12 March Re: Some good reference for stacking SELinux LSM Stephen Smalley Some good reference for stacking SELinux LSM JanuGerman Re: Problems with login from serial port. Stephen Smalley Re: LSM site down! Stephen Smalley Re: Problems with login from serial port. Eric Paris Sunday, 11 March Re: Problems with login from serial port. Christopher J. PeBenito Re: [PATCH 0/8] busybox -- SELinux option support for coreutils: ver3 Yuichi Nakamura Problems with login from serial port. Ryan Bradetich Saturday, 10 March LSM site down! Masoom Alam Re: Changes to apt policy Stefan Schulze Frielinghaus Ver.6 (Re: [PATCH 7/8] busybox -- SELinux option support for coreutils: ver3) KaiGai Kohei Friday, 9 March Re: Changes to apt policy Christopher J. PeBenito Re: Running racoon from init_t? Christopher J. PeBenito [PATCH 3/3] Refpolicy: allow netlabelctl to be run at boot Paul Moore [PATCH 2/3] Refpolicy: remove a duplicate rule in the ipsec.te file Paul Moore [PATCH 1/3] Refpolicy: allow the IPsec management tools to start at boot Paul Moore [PATCH 0/3] Some quick policy patches based on the problems from earlier today Paul Moore Re: Running racoon from init_t? Paul Moore Re: Recommended location of setkey configuration file? Daniel J Walsh Re: Running racoon from init_t? Stephen Smalley Re: Running racoon from init_t? Stephen Smalley Running racoon from init_t? Paul Moore Recommended location of setkey configuration file? Paul Moore Re: mmap_file_perms needs ioctl also Stephen Smalley Re: mmap_file_perms needs ioctl also Casey Schaufler Re: [ANN] SE-PostgreSQL 8.2.3-1.0 alpha release Stephen Smalley Re: [ANN] SE-PostgreSQL 8.2.3-1.0 alpha release KaiGai Kohei Re: modutils needs to talk to terminal Daniel J Walsh Re: modutils needs to talk to terminal Christopher J. PeBenito Re: CKRM and SELinux Pravin Re: modutils needs to talk to terminal Daniel J Walsh Re: [PATCH] Refpolicy: Add rawip_socket to the recvfrom MLS constraints Christopher J. PeBenito Re: modutils needs to talk to terminal Christopher J. PeBenito Re: mmap_file_perms needs ioctl also Daniel J Walsh Re: mmap_file_perms needs ioctl also Stephen Smalley Re: Minor change to getsebool. Russell Coker Thursday, 8 March Re: radvd policy changes Russell Coker Friday, 9 March Re: mmap_file_perms needs ioctl also Russell Coker Thursday, 8 March Re: I would like to propose dropping the disable_trans boolean. Christopher J. PeBenito I would like to propose dropping the disable_trans boolean. Daniel J Walsh [PATCH] Dropping support for disabling caching of context translations (CACHETRANS=0) Steve G Re: [ANN] SE-PostgreSQL 8.2.3-1.0 alpha release Stephen Smalley Re: Minor change to getsebool. Daniel J Walsh Re: Minor change to getsebool. Christopher J. PeBenito Re: Modification in message for libsemanage Daniel J Walsh Modification in message for libsemanage Daniel J Walsh RE: Solaris 10 w/ Trusted Extensions vs SE Linux Comparison Fletcher, Boyd C. CIV US USJFCOM JFL J9935 Solaris 10 w/ Trusted Extensions vs SE Linux Comparison Fletcher, Boyd C. CIV US USJFCOM JFL J9935 Re: CKRM and SELinux Stephen Smalley Re: CKRM and SELinux Pravin Re: pyzor/spam changes in policy Daniel J Walsh Re: pyzor/spam changes in policy Christopher J. PeBenito Re: Minor change to getsebool. Stephen Smalley Re: Minor change to getsebool. Daniel J Walsh Re: Minor change to getsebool. Stephen Smalley Re: [ANN] SE-PostgreSQL 8.2.3-1.0 alpha release Eamon Walsh Minor change to getsebool. Daniel J Walsh gpg needs to be able to create its keys dir Daniel J Walsh Resend of cpuspeed.patch Daniel J Walsh Fix dosfs handling in the interface Daniel J Walsh fix /dev/ub specification Daniel J Walsh Re: [ANN] SE-PostgreSQL 8.2.3-1.0 alpha release Stephen Smalley ipsec tools domtrans patch Daniel J Walsh mmap_file_perms needs ioctl also Daniel J Walsh Re: [ANN] SE-PostgreSQL 8.2.3-1.0 alpha release Joshua Brindle kudzu needs to init_telinit to change its runlevel Daniel J Walsh Re: [ANN] SE-PostgreSQL 8.2.3-1.0 alpha release Joshua Brindle netutils needs to read sysfs Daniel J Walsh sudo patch Daniel J Walsh Add kvmfs support Daniel J Walsh Add bugzilla policy. Daniel J Walsh Add bugzilla policy. Daniel J Walsh Re: [ANN] SE-PostgreSQL 8.2.3-1.0 alpha release Stephen Smalley Hal changes. Daniel J Walsh mls changes to get xinetd to work with labeled networking Daniel J Walsh radius needs to read netlink_route and fix r_dir_perms->list_dir_perms Daniel J Walsh ricci_modstorage needs to transition to lvm and dontaudit ptrace Daniel J Walsh [PATCH] Dropping support for disabling caching of context translations (CACHETRANS=0) Steve G systat needs to read sysfs Daniel J Walsh Re: [ANN] SE-PostgreSQL 8.2.3-1.0 alpha release KaiGai Kohei using the xdm_t:fifo_file sometimes requires ioctl Daniel J Walsh system-config-service of iptables needs this patch to work in targeted policy Daniel J Walsh syslogd-ng defines tcp ports to connect to. Daniel J Walsh Re: [ANN] SE-PostgreSQL 8.2.3-1.0 alpha release KaiGai Kohei amtu policy Daniel J Walsh New fail2ban policy Daniel J Walsh Squid changes Daniel J Walsh Re: Don't audit restart of nscd daemon in strict policy Christopher J. PeBenito Re: pyzor/spam changes in policy Daniel J Walsh Re: [ANN] SE-PostgreSQL 8.2.3-1.0 alpha release Stephen Smalley Re: [ANN] SE-PostgreSQL 8.2.3-1.0 alpha release KaiGai Kohei Re: [PATCH] Dropping compat support for /etc/security policy file paths Steve G Re: [ANN] SE-PostgreSQL 8.2.3-1.0 alpha release Stephen Smalley Re: [ANN] SE-PostgreSQL 8.2.3-1.0 alpha release KaiGai Kohei Re: [PATCH] Dropping compat support for /etc/security policy file paths Stephen Smalley Wednesday, 7 March [PATCH] Dropping compat support for /etc/security policy file paths Steve G Re: procmail changes for policy Christopher J. PeBenito Re: pyzor/spam changes in policy Christopher J. PeBenito Re: Don't audit restart of nscd daemon in strict policy Daniel J Walsh RE: [RFC] Policy Management Server release Karl MacMillan Re: Don't audit restart of nscd daemon in strict policy Christopher J. PeBenito Re: [ANN] SE-PostgreSQL 8.2.3-1.0 alpha release Christopher J. PeBenito Re: [ANN] SE-PostgreSQL 8.2.3-1.0 alpha release Joshua Brindle Re: [ANN] SE-PostgreSQL 8.2.3-1.0 alpha release James W. Hoeft radvd policy changes Stefan Schulze Frielinghaus Re: [ANN] SE-PostgreSQL 8.2.3-1.0 alpha release Casey Schaufler Re: [ANN] SE-PostgreSQL 8.2.3-1.0 alpha release KaiGai Kohei Re: [ANN] SE-PostgreSQL 8.2.3-1.0 alpha release KaiGai Kohei Re: AVC denials debug Stefan Schulze Frielinghaus Tuesday, 6 March Re: [ANN] SE-PostgreSQL 8.2.3-1.0 alpha release Russell Coker Re: Question about the process : share permission. Ryan Bradetich Re: [ANN] SE-PostgreSQL 8.2.3-1.0 alpha release Stephen Smalley Re: [ANN] SE-PostgreSQL 8.2.3-1.0 alpha release KaiGai Kohei Re: Don't audit restart of nscd daemon in strict policy Daniel J Walsh RE: [RFC] Policy Management Server release Joshua Brindle Re: [RFC] Policy Management Server release Karl MacMillan Re: Question about the process : share permission. Stephen Smalley Re: ccs attempts to ptrace itself (Probably killall) Christopher J. PeBenito Question about the process : share permission. Ryan Bradetich Re: setroubleshoot changes for policy Christopher J. PeBenito Re: Don't audit restart of nscd daemon in strict policy Christopher J. PeBenito Re: Don't audit restart of nscd daemon in strict policy Christopher J. PeBenito Re: dev_delete to be used by lvm tools Daniel J Walsh Re: rpc changes for policy Christopher J. PeBenito Re: ricci changes in policy Daniel J Walsh Re: ricci changes in policy Christopher J. PeBenito Re: lvm changes to policy Christopher J. PeBenito Re: dev_delete to be used by lvm tools Christopher J. PeBenito Re: AVC denials debug Stephen Smalley Re: [ANN] SE-PostgreSQL 8.2.3-1.0 alpha release Russell Coker AVC denials debug Stefan Schulze Frielinghaus Monday, 5 March Re: [ANN] SE-PostgreSQL 8.2.3-1.0 alpha release KaiGai Kohei [ANN] SE-PostgreSQL 8.2.3-1.0 alpha release KaiGai Kohei Re: Changes to apt policy Stefan Schulze Frielinghaus Re: Assgin domain to busybox applet(Re: Failed write to /selinux/context in selinux_trans_to_raw_contex() Yuichi Nakamura Sunday, 4 March Re: Changes to apt policy Russell Coker Monday, 5 March Re: Failed write to /selinux/context in selinux_trans_to_raw_contex() Ryan Bradetich Re: Assgin domain to busybox applet(Re: Failed write to /selinux/context in selinux_trans_to_raw_contex() Ryan Bradetich Sunday, 4 March Assgin domain to busybox applet(Re: Failed write to /selinux/context in selinux_trans_to_raw_contex() Yuichi Nakamura Saturday, 3 March Changes to apt policy Stefan Schulze Frielinghaus Re: Failed write to /selinux/context in selinux_trans_to_raw_contex() Russell Coker Friday, 2 March [RFC] Policy Management Server release Joshua Brindle Re: Failed write to /selinux/context in selinux_trans_to_raw_contex() Stephen Smalley Re: Added application_exec_type patch Daniel J Walsh Re: Failed write to /selinux/context in selinux_trans_to_raw_contex() Ryan Bradetich Re: Added application_exec_type patch Christopher J. PeBenito Re: [RFC] policy diffing of MLS levels/ranges Darrel Goeddel Re: Failed write to /selinux/context in selinux_trans_to_raw_contex() Stephen Smalley Re: Failed write to /selinux/context in selinux_trans_to_raw_contex() Stephen Smalley Re: Failed write to /selinux/context in selinux_trans_to_raw_contex() Ryan Bradetich Thursday, 1 March Re: Failed write to /selinux/context in selinux_trans_to_raw_contex() Ryan Bradetich Re: [RFC v2] SELinux: move security_skb_extlbl_sid() out of the security server James Morris [RFC v2] SELinux: move security_skb_extlbl_sid() out of the security server Paul Moore Re: postfix policy changes Christopher J. PeBenito Re: [RFC] SELinux: move security_skb_extlbl_sid() out of the security server Paul Moore Re: [PATCH] sepolgen: process USER_AVC messages Karl MacMillan Re: [PATCH] restorecond init cleanup Karl MacMillan Re: [RFC] SELinux: move security_skb_extlbl_sid() out of the security server Stephen Smalley [RFC] policy diffing of MLS levels/ranges Christopher J. PeBenito [RFC] SELinux: move security_skb_extlbl_sid() out of the security server Paul Moore Re: Added application_exec_type patch Daniel J Walsh [PATCH] sepolgen: process USER_AVC messages Karl MacMillan [PATCH] sepolgen: correctly extract params from interface calls Karl MacMillan [PATCH] sepolgen: better match refpolicy style in output Karl MacMillan Re: Failed write to /selinux/context in selinux_trans_to_raw_contex() Stephen Smalley Re: Failed write to /selinux/context in selinux_trans_to_raw_contex() Ryan Bradetich Re: Added application_exec_type patch Christopher J. PeBenito Re: More textrel_shlib_t libraries Christopher J. PeBenito Re: Additional localtime files Christopher J. PeBenito Re: Additional bin_t files Christopher J. PeBenito Re: Add MATLAB policy to run as a java_exec_t Christopher J. PeBenito Re: wpa_cupplicant-global is a socket, Not sure if it used to be something different Christopher J. PeBenito Re: Additional Device definitions. Christopher J. PeBenito Re: [RFC 3/4] SELinux: extract the NetLabel SELinux support from the security server Paul Moore Re: [RFC 3/4] SELinux: extract the NetLabel SELinux support from the security server Stephen Smalley Re: [RFC 3/4] SELinux: extract the NetLabel SELinux support from the security server Stephen Smalley Re: Failed write to /selinux/context in selinux_trans_to_raw_contex() Stephen Smalley Failed write to /selinux/context in selinux_trans_to_raw_contex() Ryan Bradetich Wednesday, 28 February [PATCH] Refpolicy: Add rawip_socket to the recvfrom MLS constraints Paul Moore Re: [RFC] Dropping compat support for /etc/security policy file paths Russell Coker Re: [RFC 0/4] NetLabel fixups/cleanups Paul Moore Re: [RFC 0/4] NetLabel fixups/cleanups James Morris Added application_exec_type patch Daniel J Walsh [RFC 4/4] SELinux: rename selinux_netlabel.h to netlabel.h Paul Moore [RFC 0/4] NetLabel fixups/cleanups Paul Moore [RFC 3/4] SELinux: extract the NetLabel SELinux support from the security server Paul Moore [RFC 2/4] NetLabel: convert a BUG_ON in the CIPSO code to a runtime check Paul Moore [RFC 1/4] NetLabel: cleanup and document CIPSO constants Paul Moore Re: Kerberized telnetd support in policy Christopher J. PeBenito New policy for consolekit. Daniel J Walsh Re: Changes to ftp policy Christopher J. PeBenito Re: Kerberos changes for policy Christopher J. PeBenito Re: Changees to inetd to handle setting MLS network levels Christopher J. PeBenito sudo change in policy Daniel J Walsh Re: Additional wine executable Christopher J. PeBenito Re: [SPAM] mdadm does a ls of /dev Christopher J. PeBenito Re: Additional Games file context Christopher J. PeBenito Re: rpm-script needs to be able to look at running processes on the system Christopher J. PeBenito Re: refpolicy modules Vincenzo Ciaglia Re: refpolicy modules Christopher J. PeBenito Re: refpolicy modules Vincenzo Ciaglia RE: [RFC] Dropping compat support for /etc/security policy file paths Joshua Brindle Re: refpolicy modules Stephen Smalley [RFC] Dropping compat support for /etc/security policy file paths Stephen Smalley [RFC] Dropping support for disabling caching of context translations (CACHETRANS=0) Stephen Smalley refpolicy modules Vincenzo Ciaglia Tuesday, 27 February Re: [PATCH] Lazy config init in libselinux Steve G Re: [PATCH] Lazy config init in libselinux Stephen Smalley Re: [PATCH] Lazy config init in libselinux Steve G Re: [PATCH] refpolicy: experimental X policy -v2 Christopher J. PeBenito Re: [PATCH] Lazy config init in libselinux Stephen Smalley Re: [PATCH] Lazy config init in libselinux Steve G Re: [PATCH] Lazy config init in libselinux Stephen Smalley Re: libselinux patch Christopher J. PeBenito Re: [PATCH] sepolgen: optionally generate debugging information during parsing Stephen Smalley Re: libselinux patch Stephen Smalley [PATCH] restorecond init cleanup Steve G Re: CKRM and SELinux Stephen Smalley CKRM and SELinux Pravin Monday, 26 February Re: [PATCH 1/8] busybox -- SELinux option support for coreutils: ver3 Yuichi Nakamura Re: [PATCH] Lazy config init in libselinux Steve G Re: [PATCH] Lazy config init in libselinux Stephen Smalley Re: [PATCH] Lazy config init in libselinux Steve G Re: Policy patch for hal Daniel J Walsh Re: Fix man page Christopher J. PeBenito Additional Games file context Daniel J Walsh Re: Policy patch for hal Christopher J. PeBenito Fix man page Daniel J Walsh Certain domains also require ioctl Daniel J Walsh Re: Changes to init for policy Christopher J. PeBenito Re: [PATCH] Lazy config init in libselinux Stephen Smalley [PATCH] Lazy config init in libselinux Steve G Re: smartmon needs to be able to write to physical devices. Christopher J. PeBenito Re: [PATCH 8/8] busybox -- SELinux option support for coreutils: ver3 KaiGai Kohei Re: [PATCH 7/8] busybox -- SELinux option support for coreutils: ver3 KaiGai Kohei Re: Spamd policy patch Christopher J. PeBenito rpm-script needs to be able to look at running processes on the system Daniel J Walsh Re: libselinux patch Steve G Re: Latest bluetooth requires net_bind_service Christopher J. PeBenito Re: Updates to squid policy and corenet policy Christopher J. PeBenito [Fwd: Re: Changes to kerberos policy] Christopher J. PeBenito Re: I think this is equivalent to what we have now and more efficient. Steve Grubb Re: Is the usercanread attribute still needed? Christopher J. PeBenito Re: I think this is equivalent to what we have now and more efficient. Stephen Smalley Re: I think this is equivalent to what we have now and more efficient. Stephen Smalley Re: I think this is equivalent to what we have now and more efficient. Steve Grubb Re: I think this is equivalent to what we have now and more efficient. Stephen Smalley Re: Many log entries in /var/log/messages? Stephen Smalley Many log entries in /var/log/messages? James Jansen Sunday, 25 February Re: [PATCH 5/8] busybox -- SELinux option support for coreutils: ver3 Yuichi Nakamura Re: [PATCH 2/8] busybox -- SELinux option support for coreutils: ver3 Yuichi Nakamura Re: [PATCH 1/8] busybox -- SELinux option support for coreutils: ver3 Yuichi Nakamura [ANN] SELinux Policy Editor 2.1.0 Yuichi Nakamura Re: I think this is equivalent to what we have now and more efficient. Steve Grubb Saturday, 24 February Re: Is the usercanread attribute still needed? Ryan Bradetich Re: PATCH: Remove redundant role statement from the apache.te file. Ryan Bradetich Friday, 23 February Re: Latest bluetooth requires net_bind_service Daniel J Walsh Re: libselinux patch Stephen Smalley Re: IPTables needs to be able to talk to the terminal Christopher J. PeBenito Re: Prelink needs to be able to relabel from prelink_tmp_t Christopher J. PeBenito Re: policy changes to userdomain.if Christopher J. PeBenito Re: clamd wants to read kernerl sysctls. Christopher J. PeBenito Re: audit/logging changes Christopher J. PeBenito Re: mls_trusted_object(cupsd_var_run_t) defined twice. Christopher J. PeBenito Re: Latest bluetooth requires net_bind_service Christopher J. PeBenito Re: nis changes for policy Christopher J. PeBenito Re: Policy patch apmd needs to call telinit to change runlevel. Christopher J. PeBenito Re: Samba policy patch Christopher J. PeBenito Re: apache.fc references undefined user_cron_spool_t when using the strict policy. Christopher J. PeBenito Re: init_t and sshd Stephen Smalley init_t and sshd Vincenzo Ciaglia Re: Is the usercanread attribute still needed? Christopher J. PeBenito Re: PATCH: Remove redundant role statement from the apache.te file. Christopher J. PeBenito Re: Latest diffs - Resent with additional changes. Christopher J. PeBenito Re: [RFC] Drop setlocaldefs support from trunk (2.x series) Karl MacMillan Re: [RFC] Drop setlocaldefs support from trunk (2.x series) Stephen Smalley Re: [RFC] Remove init_context_translations() from libselinux Darrel Goeddel Re: [PATCH] Reassign printk levels in selinux kernel code James Morris Re: Several SELinux questions Stephen Smalley Re: [RFC] Drop setlocaldefs support from trunk (2.x series) Stephen Smalley Re: [PATCH] Reassign printk levels in selinux kernel code Stephen Smalley Re: [RFC] Remove init_context_translations() from libselinux Stephen Smalley Re: I think this is equivalent to what we have now and more efficient. Stephen Smalley [PATCH 8/8] busybox -- SELinux option support for coreutils: ver3 Yuichi Nakamura [PATCH 7/8] busybox -- SELinux option support for coreutils: ver3 Yuichi Nakamura [PATCH 6/8] busybox -- SELinux option support for coreutils: ver3 Yuichi Nakamura [PATCH 5/8] busybox -- SELinux option support for coreutils: ver3 Yuichi Nakamura [PATCH 4/8] busybox -- SELinux option support for coreutils: ver3 Yuichi Nakamura [PATCH 3/8] busybox -- SELinux option support for coreutils: ver3 Yuichi Nakamura [PATCH 1/8] busybox -- SELinux option support for coreutils: ver3 Yuichi Nakamura [PATCH 2/8] busybox -- SELinux option support for coreutils: ver3 Yuichi Nakamura [PATCH 0/8] busybox -- SELinux option support for coreutils: ver3 Yuichi Nakamura Thursday, 22 February Several SELinux questions Dave Quigley Re: [PATCH] Reassign printk levels in selinux kernel code James Morris [PATCH] Reassign printk levels in selinux kernel code Eric Paris [PATCH] sepolgen: optionally generate debugging information during parsing Karl MacMillan Re: MITRE releases Polgen 1.4 Karl MacMillan Re: [RFC] Drop setlocaldefs support from trunk (2.x series) Karl MacMillan Re: [PATCH 2/2] sepolgen: handle the latest reference policy Karl MacMillan Re: I think this is equivalent to what we have now and more efficient. Steve Grubb Re: [RFC] Remove init_context_translations() from libselinux Darrel Goeddel [RFC] Drop setlocaldefs support from trunk (2.x series) Stephen Smalley Re: I think this is equivalent to what we have now and more efficient. Stephen Smalley Re: [PATCH] newrole: fix for newrole hanging on some serial consoles Stephen Smalley Re: [RFC] Remove init_context_translations() from libselinux Daniel J Walsh Re: I think this is equivalent to what we have now and more efficient. Daniel J Walsh Re: libselinux patch Steve G Re: I think this is equivalent to what we have now and more efficient. Stephen Smalley Re: I think this is equivalent to what we have now and more efficient. Daniel J Walsh Re: I think this is equivalent to what we have now and more efficient. Stephen Smalley Re: I think this is equivalent to what we have now and more efficient. Stephen Smalley Re: I think this is equivalent to what we have now and more efficient. Daniel J Walsh Re: I think this is equivalent to what we have now and more efficient. Daniel J Walsh Re: [PATCH] newrole: fix for newrole hanging on some serial consoles Linda Knippers Re: I think this is equivalent to what we have now and more efficient. Stephen Smalley Re: I think this is equivalent to what we have now and more efficient. Steve Grubb Re: I think this is equivalent to what we have now and more efficient. Daniel J Walsh Re: I think this is equivalent to what we have now and more efficient. Stephen Smalley [PATCH] newrole: fix for newrole hanging on some serial consoles Linda Knippers Re: [PATCH] sepolgen: leave generated files in current directory Stephen Smalley Re: libselinux patch James Antill Re: [PATCH 2/2] sepolgen: handle the latest reference policy Stephen Smalley I think this is equivalent to what we have now and more efficient. Daniel J Walsh Re: libselinux patch Stephen Smalley Re: [PATCH] restorecond memory leaks Stephen Smalley Re: Another libselinux patch fixing memory leaks Stephen Smalley Re: libselinux patch Steve G Re: libselinux patch Stephen Smalley Wednesday, 21 February Re: Latest diffs - Resent with additional changes. Klaus Weidner Re: libselinux patch Steve G [PATCH 2/2] sepolgen: handle the latest reference policy Karl MacMillan [PATCH 1/2] sepolgen: update ply to the latest version Karl MacMillan [PATCH 0/2] sepolgen: update for the latest reference policy Karl MacMillan [PATCH] sepolgen: cleanup tests Karl MacMillan [PATCH] sepolgen: leave generated files in current directory Karl MacMillan Re: Latest diffs - Resent with additional changes. Darrel Goeddel Re: sepolgen fixes. Stephen Smalley Re: policycoreutils patch Stephen Smalley Re: libselinux patch Stephen Smalley [RFC] Remove init_context_translations() from libselinux Stephen Smalley Re: sepolgen fixes. Karl MacMillan Re: chcat changes (Was: Re: policycoreutils patch) Karl MacMillan Re: libselinux patch Stefanos Harhalakis Re: libselinux patch Steve G Re: libselinux patch Stephen Smalley Re: Latest diffs - Resent with additional changes. Daniel J Walsh Re: libselinux patch Steve G Re: libselinux patch Stephen Smalley Re: libselinux patch Steve G Tuesday, 20 February Re: Is the usercanread attribute still needed? Ryan Bradetich Re: apache.fc references undefined user_cron_spool_t when using the strict policy. Ryan Bradetich Re: Latest diffs - Resent with additional changes. Klaus Weidner Re: Latest diffs - Resent with additional changes. Darrel Goeddel A QUESTION FROM SUN VALLEY, CA. Robert Adams Re: Lets try this again: Advantages and Disadvantages of Overtyping a policy Stephen Smalley Re: apache.fc references undefined user_cron_spool_t when using the strict policy. Christopher J. PeBenito Re: Is the usercanread attribute still needed? Christopher J. PeBenito Re: Lets try this again: Advantages and Disadvantages of Overtyping a policy Christopher J. PeBenito Re: Latest diffs - Resent with additional changes. Christopher J. PeBenito Re: Latest diffs - Resent with additional changes. Darrel Goeddel RE: restorecond matchpathcon patch James Athey Re: newrole O_NONBLOCK change (Was: Re: policycoreutils patch) Linda Knippers [PATCH] restorecond memory leaks Steve G Re: chcat changes (Was: Re: policycoreutils patch) Daniel J Walsh Re: newrole O_NONBLOCK change (Was: Re: policycoreutils patch) Daniel J Walsh Latest bluetooth requires net_bind_service Daniel J Walsh mls_trusted_object(cupsd_var_run_t) defined twice. Daniel J Walsh Prelink needs to be able to relabel from prelink_tmp_t Daniel J Walsh audit/logging changes Daniel J Walsh clamd wants to read kernerl sysctls. Daniel J Walsh smartmon needs to be able to write to physical devices. Daniel J Walsh nis changes for policy Daniel J Walsh Re: restorecond matchpathcon patch Stephen Smalley Changes to init for policy Daniel J Walsh Re: restorecond matchpathcon patch Steve G Policy patch for hal Daniel J Walsh Policy patch apmd needs to call telinit to change runlevel. Daniel J Walsh IPTables needs to be able to talk to the terminal Daniel J Walsh Updates to squid policy and corenet policy Daniel J Walsh policy changes to userdomain.if Daniel J Walsh chcat changes (Was: Re: policycoreutils patch) Stephen Smalley Spamd policy patch Daniel J Walsh newrole O_NONBLOCK change (Was: Re: policycoreutils patch) Stephen Smalley Re: restorecond matchpathcon patch Stephen Smalley Re: Latest diffs - Resent with additional changes. Daniel J Walsh RE: checkpolicy/policy_parse.y:define_class: allow classidentifiers to contain dots Joshua Brindle Re: Compile error with the SVN version of the refpolicy. Stephen Smalley Re: Compile error with the SVN version of the refpolicy. Ryan Bradetich restorecond matchpathcon patch Steve G Re: PATCH: libsemanage-1.10.0 Stephen Smalley Re: PATCH: setfiles memory leak Stephen Smalley Re: PATCH: libselinux-1.34.0 bit type usage Stephen Smalley Re: checkpolicy/policy_parse.y:define_class: allow class identifiers to contain dots Stephen Smalley Re: libsemanage: function name consistency change for semanage_get_commit_number Stephen Smalley Re: libsemanage/Makefile: test target Stephen Smalley Re: policycoreutils/semanage/seobject.py:setransRecords: improper string subst Stephen Smalley Another libselinux patch fixing memory leaks Steve G Re: libselinux patch Stephen Smalley Re: libselinux patch Steve G sepolgen fixes. Daniel J Walsh libselinux patch Daniel J Walsh Re: Compile error with the SVN version of the refpolicy. Stephen Smalley Re: [RFC] Security design of SE-PostgreSQL (2/3) KaiGai Kohei Re: [RFC] Security design of SE-PostgreSQL (2/3) Russell Coker Monday, 19 February Re: [RFC] Security design of SE-PostgreSQL (2/3) KaiGai Kohei Re: [redhat-lspp] RE: Deleting xfrms Joy Latten Re: [redhat-lspp] RE: Deleting xfrms Eric Paris RE: Deleting xfrms Venkat Yekkirala Samba policy patch Stefan Schulze Frielinghaus Re: [RFC] Security design of SE-PostgreSQL (2/3) Russell Coker Sunday, 18 February Re: Latest diffs - Resent with additional changes. Klaus Weidner apache.fc references undefined user_cron_spool_t when using the strict policy. Ryan Bradetich Is the usercanread attribute still needed? Ryan Bradetich PATCH: Remove redundant role statement from the apache.te file. Ryan Bradetich Re: [RFC] Security design of SE-PostgreSQL (2/3) KaiGai Kohei coreutils plans, test release coming soon, then stable, then selinux Jim Meyering Re: [RFC] Security design of SE-PostgreSQL (2/3) Russell Coker Saturday, 17 February Compile error with the SVN version of the refpolicy. Ryan Bradetich Friday, 16 February Re: Latest diffs - Resent with additional changes. Christopher J. PeBenito Lets try this again: Advantages and Disadvantages of Overtyping a policy Dave Quigley Advantages and Disadvantages of Overtyping a policy Dave Quigley Re: SELinux and LFS Stephen Smalley Re: SELinux and LFS Vincenzo Ciaglia Re: SELinux and LFS Stephen Smalley Re: SELinux and LFS Vincenzo Ciaglia Re: SELinux and LFS Stephen Smalley Re: SELinux and LFS Vincenzo Ciaglia Re: su and context Ronan Waide [RFC] Security design of SE-PostgreSQL(3/3) KaiGai Kohei [RFC] Security design of SE-PostgreSQL (2/3) KaiGai Kohei [RFC] Security design of SE-PostgreSQL (1/3) KaiGai Kohei Thursday, 15 February Re: SELinux and LFS Vincenzo Ciaglia Re: SELinux and LFS Vincenzo Ciaglia Re: SELinux and LFS Stephen Smalley Re: SELinux and LFS Vincenzo Ciaglia Re: SELinux and LFS Eric Paris Re: [RFC] Ability to allow undefined permissions and classes -v2 Stephen Smalley Re: SELinux and LFS Vincenzo Ciaglia Re: SELinux and LFS Stephen Smalley Re: SELinux and LFS Vincenzo Ciaglia Re: SELinux and LFS Stephen Smalley Re: SELinux and LFS Vincenzo Ciaglia RE: [RFC] Ability to allow undefined permissions and classes -v2 Stephen Smalley Re: ssh/xinetd/getpeercon??? Joy Latten Re: SELinux and LFS Stephen Smalley RE: [RFC] Ability to allow undefined permissions and classes -v2 Stephen Smalley RE: [RFC] Ability to allow undefined permissions and classes -v2 Eric Paris Re: SELinux and LFS Vincenzo Ciaglia Re: SELinux and LFS Stephen Smalley RE: [RFC] Ability to allow undefined permissions and classes -v2 Stephen Smalley Re: [RFC] Ability to allow undefined permissions and classes -v2 Stephen Smalley Re: SELinux and LFS Vincenzo Ciaglia Re: SELinux and LFS Stephen Smalley Re: [RFC] Ability to allow undefined permissions and classes -v2 Chad Sellers RE: [RFC] Ability to allow undefined permissions and classes -v2 Eric Paris Re: [RFC] Ability to allow undefined permissions and classes -v2 Karl MacMillan Re: [redhat-lspp] Re: ssh/xinetd/getpeercon??? Paul Moore RE: [RFC] Ability to allow undefined permissions and classes -v2 Stephen Smalley Re: ssh/xinetd/getpeercon??? Stephen Smalley Re: SELinux and LFS Stephen Smalley RE: [RFC] Ability to allow undefined permissions and classes -v2 Stephen Smalley Re: [RFC] Ability to allow undefined permissions and classes -v2 Eamon Walsh Re: selinux patches Stephen Smalley Re: [RFC] Ability to allow undefined permissions and classes -v2 Stephen Smalley Re: SELinux and LFS Vincenzo Ciaglia Re: SELinux and LFS Vincenzo Ciaglia Re: su and context Russell Coker Re: [PATCH 6/6] busybox -- SELinux option support for coreutils Yuichi Nakamura Wednesday, 14 February Re: ssh/xinetd/getpeercon??? Joshua Brindle ssh/xinetd/getpeercon??? Joy Latten Re: SELinux and LFS Vincenzo Ciaglia Re: SELinux and LFS Karl MacMillan RE: [RFC] Ability to allow undefined permissions and classes -v2 Eric Paris RE: [RFC] Ability to allow undefined permissions and classes -v2 Joshua Brindle Re: [RFC] Ability to allow undefined permissions and classes -v2 Eric Paris Re: SELinux and LFS Christopher J. PeBenito Re: [RFC] Ability to allow undefined permissions and classes -v2 Joshua Brindle Re: [RFC] Ability to allow undefined permissions and classes -v2 Chad Sellers Re: SELinux and LFS Christopher J. PeBenito SELinux and LFS Vincenzo Ciaglia Re: [RFC] Ability to allow undefined permissions and classes -v2 Chad Sellers Re: selinux patches Vincenzo Ciaglia Re: selinux patches Karl MacMillan Re: selinux patches Vincenzo Ciaglia Re: selinux patches Joshua Brindle Re: selinux patches Michael C Thompson selinux patches Vincenzo Ciaglia Tuesday, 13 February [PATCH] refpolicy: experimental X policy -v2 Eamon Walsh Re: [PATCH] refpolicy: experimental X policy Xavier Toth Re: [RFC] Ability to allow undefined permissions and classes -v2 Eric Paris Re: [RFC] Ability to allow undefined permissions and classes -v2 Stephen Smalley Re: [RFC] Ability to allow undefined permissions and classes -v2 Stephen Smalley Re: [RFC] Ability to allow undefined permissions and classes -v2 Stephen Smalley Re: [RFC] Ability to allow undefined permissions and classes -v2 Stephen Smalley Re: [RFC] Ability to allow undefined permissions and classes -v2 Eric Paris Re: su and context Stephen Smalley Re: su and context Ted X Toth Re: [RFC] security_getprocattr() API idiocy Casey Schaufler Re: [RFC] security_getprocattr() API idiocy Stephen Smalley Re: Deleting xfrms Stephen Smalley Re: Deleting xfrms Stephen Smalley Re: [RFC] Ability to allow undefined permissions and classes -v2 Stephen Smalley Monday, 12 February Deleting xfrms Joy Latten [RFC] Ability to allow undefined permissions and classes -v2 Eric Paris Re: get_default_context_with_level seems to be broken in libselinux. Daniel J Walsh Re: su and context Stephen Smalley Re: get_default_context_with_level seems to be broken in libselinux. Stephen Smalley Re: su and context Ronan Waide Re: su and context Michael C Thompson Re: su and context Stephen Smalley Re: su and context Michael C Thompson Re: get_default_context_with_level seems to be broken in libselinux. Stephen Smalley get_default_context_with_level seems to be broken in libselinux. Daniel J Walsh Saturday, 10 February su and context Ted X Toth Re: how to enable se linux for my app? Russell Coker Friday, 9 February Re: how to enable se linux for my app? Greger Re: MITRE releases Polgen 1.4 Brian T. Sniffen Re: how to enable se linux for my app? Stephen Smalley Re: how to enable se linux for my app? Greger Re: how to enable se linux for my app? Michael C Thompson how to enable se linux for my app? Greger Re: Questions regarding loadable policy modules Stephen Smalley Re: [PATCH 0/5] sysctl cleanup selinux fixes Eric W. Biederman Re: Questions regarding loadable policy modules Christopher J. PeBenito Re: ANN: SETools Release Christopher J. PeBenito Re: MITRE releases Polgen 1.4 Karl MacMillan Re: [PATCH 4/5] selinux: Enhance selinux to always ignore private inodes. Stephen Smalley Re: [PATCH 3/5] sysctl: Fix the selinux_sysctl_get_sid Stephen Smalley Re: [busybox:00367] Re: [PATCH 3/6] busybox -- SELinux option support for coreutils Yuichi Nakamura Re: [busybox:00366] Re: [PATCH 2/6] busybox -- SELinux option support for coreutils Yuichi Nakamura Re: [busybox:00365] Re: [PATCH 1/6] busybox -- SELinux option support for coreutils Yuichi Nakamura Re: [PATCH 0/6] busybox -- SELinux option support for coreutils Yuichi Nakamura Thursday, 8 February MITRE releases Polgen 1.4 Brian T. Sniffen [PATCH 5/5] sysctl: Hide the sysctl proc inodes from selinux. Eric W. Biederman [PATCH 4/5] selinux: Enhance selinux to always ignore private inodes. Eric W. Biederman [PATCH 3/5] sysctl: Fix the selinux_sysctl_get_sid Eric W. Biederman [PATCH 2/5] sysctl: Set the parent field in the root sysctl table Eric W. Biederman [PATCH 1/5] sysctl: Remove declaration of nonexistent sysctl_init() Eric W. Biederman [PATCH 0/5] sysctl cleanup selinux fixes Eric W. Biederman Re: [PATCH 2/2] sysctl: Restore the selinux path based label lookup for sysctls. Eric W. Biederman Re: Small patch to allow semodule_deps to build Karl MacMillan Wednesday, 7 February Questions regarding loadable policy modules Dave Quigley Thursday, 8 February Re: ANN: SETools Release Karl MacMillan [ANN] Certifiable Linux Integration Platform (CLIP) Art Wilson ANN: SETools Release Christopher J. PeBenito Re: [PATCH 2/2] sysctl: Restore the selinux path based label lookup for sysctls. Stephen Smalley Re: [PATCH 2/2] sysctl: Restore the selinux path based label lookup for sysctls. Eric W. Biederman Re: Small patch to allow semodule_deps to build Stephen Smalley Re: Small patch to allow semodule_deps to build Karl MacMillan Re: [PATCH 2/2] sysctl: Restore the selinux path based label lookup for sysctls. Stephen Smalley Re: [PATCH 2/2] sysctl: Restore the selinux path based label lookup for sysctls. Stephen Smalley Re: [PATCH 0/6] busybox -- SELinux option support for coreutils Stephen Smalley [PATCH 6/6] busybox -- SELinux option support for coreutils Yuichi Nakamura [PATCH 5/6] busybox -- SELinux option support for coreutils Yuichi Nakamura [PATCH 4/6] busybox -- SELinux option support for coreutils Yuichi Nakamura [PATCH 3/6] busybox -- SELinux option support for coreutils Yuichi Nakamura [PATCH 2/6] busybox -- SELinux option support for coreutils Yuichi Nakamura [PATCH 1/6] busybox -- SELinux option support for coreutils Yuichi Nakamura [PATCH 0/6] busybox -- SELinux option support for coreutils Yuichi Nakamura Wednesday, 7 February Re: [PATCH 2/2] sysctl: Restore the selinux path based label lookup for sysctls. Eric W. Biederman Re: [PATCH] SELinux: change Kconfig to use select instead of depends James Morris Re: [PATCH 2/2] sysctl: Restore the selinux path based label lookup for sysctls. Eric W. Biederman Re: [PATCH 2/2] sysctl: Restore the selinux path based label lookup for sysctls. Stephen Smalley Small patch to allow semodule_deps to build Daniel J Walsh libsemanage patch to prevent python segfaults. Daniel J Walsh ANN: NSA Director of Information Assurance to be Keynote Speaker at SELinux Symposium Frank Mayer Re: MLS concepts, relational question Stephen Smalley Re: MLS concepts, relational question Stephen Smalley Re: MLS concepts, relational question Michael C Thompson Re: MLS concepts, relational question Michael C Thompson Re: [PATCH 2/2] sysctl: Restore the selinux path based label lookup for sysctls. Stephen Smalley Re: MLS concepts, relational question Casey Schaufler Re: MLS concepts, relational question Joe Nall MLS concepts, relational question Michael C Thompson Re: [PATCH] SELinux: change Kconfig to use select instead of depends Stephen Smalley Re: [PATCH] SELinux: change Kconfig to use select instead of depends Eric Paris Re: [PATCH] SELinux: change Kconfig to use select instead of depends Stephen Smalley Re: [PATCH 2/2] sysctl: Restore the selinux path based label lookup for sysctls. Stephen Smalley Re: [PATCH] SELinux: change Kconfig to use select instead of depends Stephen Smalley PATCH: libselinux-1.34.0 bit type usage Todd.Miller_at_sparta.com PATCH: setfiles memory leak Todd.Miller_at_sparta.com PATCH: libsemanage-1.10.0 Todd.Miller_at_sparta.com [PATCH] SELinux: change Kconfig to use select instead of depends Eric Paris Re: selinux branch: new program: runcon Stephen Smalley Re: selinux branch: new program: runcon Dale Amon Tuesday, 6 February Re: selinux branch: new program: runcon Jim Meyering Re: libselinux utilities applets - please test KaiGai Kohei Re: [RFC] new libsepol policy representation Robert Adams [PATCH 2/2] sysctl: Restore the selinux path based label lookup for sysctls. Eric W. Biederman [PATCH 1/2] sysctl: Add a parent entry to ctl_table and set the parent entry. Eric W. Biederman Re: libselinux utilities applets - please test KaiGai Kohei Re: [PATCH] add sepolgen Karl MacMillan Re: [RFC] new libsepol policy representation Karl MacMillan checkpolicy/policy_parse.y:define_class: allow class identifiers to contain dots Caleb Case libsemanage/Makefile: test target Caleb Case libsemanage: function name consistency change for semanage_get_commit_number Caleb Case policycoreutils/semanage/seobject.py:setransRecords: improper string subst Caleb Case Re: [patch] libsepol: check for unmet requires on sensitivities and categories (Was: Re: core dump) Karl MacMillan Re: [patch -trunk] libsepol: check for unmet requires on sensitivities and categories (Was: Re: core dump) Karl MacMillan Re: [patch] libsepol: check for unmet requires on sensitivities and categories (Was: Re: core dump) Karl MacMillan Re: [patch] libsepol: check for unmet requires on sensitivities and categories (Was: Re: core dump) V13 Re: [patch -trunk] libsepol: check for unmet requires on sensitivities and categories (Was: Re: core dump) Stephen Smalley [patch] libsepol: check for unmet requires on sensitivities and categories (Was: Re: core dump) Stephen Smalley Re: core dump Stephen Smalley Re: audit2allow and mls Stephen Smalley Re: Error thrown during binary policy compilation Richard Stock Monday, 5 February core dump Stefanos Harhalakis Re: audit2allow and mls Rosalie Hiebel Re: [PATCH] add sepolgen Stephen Smalley Re: question Stephen Smalley question Stefanos Harhalakis Re: audit2allow and mls Stephen Smalley Re: Error thrown during binary policy compilation Stephen Smalley Re: Problems installing current version of refpolicy with FC6 Stephen Smalley Re: [RFC] new libsepol policy representation Stephen Smalley Re: selinux branch: new program: runcon Stephen Smalley Re: [RFC] new libsepol policy representation Stephen Smalley Re: provoking fsetfilecon failure in a test case Stephen Smalley Friday, 2 February Re: selinux branch: new program: runcon Russell Coker selinux branch: new program: runcon Jim Meyering Re: DWARF2 [was : Problems installing refpolicy with FC6] Catalin DIMA Re: DWARF2 [was : Problems installing refpolicy with FC6] Paul Moore Re: [PATCH] refpolicy: experimental X policy Ted X Toth audit2allow and mls Rosalie Hiebel Re: DWARF2 [was : Problems installing refpolicy with FC6] Catalin DIMA Error thrown during binary policy compilation Richard Stock Thursday, 1 February Re: Kernel oops on fc6 with non-mls policy Eric Paris Re: Kernel oops on fc6 with non-mls policy Paul Moore Re: Kernel oops on fc6 with non-mls policy Paul Moore Re: [PATCH] add central errno.h to libsepol Karl MacMillan Re: PATCH: libselinux matchpathcon() eliminate %as scanf format Karl MacMillan Re: PATCH: libselinux matchpathcon() memory leak Karl MacMillan Re: Kernel oops on fc6 with non-mls policy Eric Paris Kernel oops on fc6 with non-mls policy Joshua Brindle [RFC] new libsepol policy representation Karl MacMillan coreutils: selinux is nearly ready: status Jim Meyering Re: selinux and UML integration problem Vincenzo Ciaglia Re: selinux and UML integration problem Stephen Bennett Re: selinux and UML integration problem Antoine Martin selinux and UML integration problem Pravin Re: missing avc message field names Steve Grubb Wednesday, 31 January Fwd: Bug#409173: ITP: incron -- cron like daemon which handles filesystem events Russell Coker Re: missing avc message field names Russell Coker Re: provoking fsetfilecon failure in a test case Jim Meyering Re: provoking fsetfilecon failure in a test case Stephen Smalley Re: provoking fsetfilecon failure in a test case Jim Meyering [PATCH] add sepolgen Karl MacMillan Re: provoking fsetfilecon failure in a test case Stephen Smalley Re: [busybox:00323] Re: [PATCH 4/8] busybox -- libselinux utilities applets KaiGai Kohei Re: missing avc message field names Joshua Brindle Tuesday, 30 January Re: missing avc message field names Karl MacMillan Re: missing avc message field names James Antill provoking fsetfilecon failure in a test case Jim Meyering Re: missing avc message field names Casey Schaufler Re: missing avc message field names Steve Grubb Re: missing avc message field names Valdis.Kletnieks_at_vt.edu Re: [PATCH] sysctl selinux: Don't look at table->de Casey Schaufler Re: missing avc message field names Joshua Brindle Re: Problems installing current version of refpolicy with FC6 Karl MacMillan Re: missing avc message field names Karl MacMillan Re: missing avc message field names Russell Coker Monday, 29 January Re: [PATCH] sysctl selinux: Don't look at table->de Russell Coker Re: [redhat-lspp] Problem SSH-ing into LSPP system with multiple categories Klaus Weidner Re: missing avc message field names Eamon Walsh Re: Problems installing current version of refpolicy with FC6 Catalin DIMA Re: missing avc message field names Steve Grubb Re: Problems installing current version of refpolicy with FC6 Karl MacMillan Re: missing avc message field names Karl MacMillan Re: missing avc message field names Steve G Re: Problems installing current version of refpolicy with FC6 Catalin DIMA Re: missing avc message field names Steve Grubb Re: [PATCH] sysctl selinux: Don't look at table->de Stephen Smalley Sunday, 28 January [PATCH] sysctl selinux: Don't look at table->de Eric W. Biederman Monday, 29 January Re: [PATCH] sysctl selinux: Don't look at table->de Eric W. Biederman Re: [PATCH] sysctl selinux: Don't look at table->de Eric W. Biederman Re: missing avc message field names Eamon Walsh Re: Problems installing current version of refpolicy with FC6 Karl MacMillan Re: missing avc message field names Karl MacMillan Re: missing avc message field names Stephen Smalley Re: [PATCH] sysctl selinux: Don't look at table->de Stephen Smalley Re: missing avc message field names Eamon Walsh Re: [PATCH] sysctl selinux: Don't look at table->de Eric W. Biederman Re: [PATCH] sysctl selinux: Don't look at table->de Casey Schaufler Problems installing current version of refpolicy with FC6 Catalin DIMA Re: missing avc message field names Steve G Re: [PATCH] sysctl selinux: Don't look at table->de Stephen Smalley Re: missing avc message field names Karl MacMillan Re: missing avc message field names Karl MacMillan Re: [PATCH 0/8] busybox -- libselinux utilities applets James Carter Re: [redhat-lspp] Problem SSH-ing into LSPP system with multiple categories Klaus Weidner Re: missing avc message field names Steve G Re: [PATCH] sysctl selinux: Don't look at table->de James Morris Re: missing avc message field names Stephen Smalley Re: missing avc message field names Steve G Re: missing avc message field names Steve G Re: missing avc message field names Karl MacMillan Re: [PATCH 5/8] busybox -- libselinux utilities applets KaiGai Kohei Re: missing avc message field names Stephen Smalley missing avc message field names Steve G Re: [PATCH 4/8] busybox -- libselinux utilities applets KaiGai Kohei Re: [PATCH 2/8] busybox -- libselinux utilities applets KaiGai Kohei Re: [PATCH 7/8] busybox -- libselinux utilities applets KaiGai Kohei Re: [PATCH 0/8] busybox -- libselinux utilities applets KaiGai Kohei Re: semodule problem Stephen Smalley Re: [PATCH] sysctl selinux: Don't look at table->de Stephen Smalley Re: [PATCH 5/8] busybox -- libselinux utilities applets Russell Coker Friday, 26 January Re: [redhat-lspp] Problem SSH-ing into LSPP system with multiple categories Daniel J Walsh Re: [redhat-lspp] Problem SSH-ing into LSPP system with multiple categories Tomas Mraz Re: libselinux python binding segfault patch Stephen Smalley Re: semodule problem Rosalie Hiebel Re: semodule problem Stephen Smalley Re: semodule problem Joshua Brindle Re: [redhat-lspp] Problem SSH-ing into LSPP system with multiple categories Tomas Mraz semodule problem Rosalie Hiebel Re: [PATCH 5/8] busybox -- libselinux utilities applets Christopher J. PeBenito Re: [PATCH 0/8] busybox -- libselinux utilities applets Christopher J. PeBenito [PATCH 1/1] selinux: fix 2.6.20-rc6 build when no xfrm Venkat Yekkirala Re: [PATCH 0/8] busybox -- libselinux utilities applets KaiGai Kohei contributors list Russell Coker Re: new postfix-script errors idr_remove Stephen Smalley Thursday, 25 January PATCH: libselinux matchpathcon() eliminate %as scanf format Todd C. Miller PATCH: libselinux matchpathcon() memory leak Todd C. Miller [PATCH] refpolicy: experimental X policy Eamon Walsh ANN: SELinux Policy IDE (SLIDE) Dave Sugar Re: [RFC] 0/4 - Hierarchal apache policy for reference policy Daniel J Walsh Re: new postfix-script errors idr_remove Antoine Martin Re: new postfix-script errors idr_remove Daniel J Walsh new postfix-script errors idr_remove Antoine Martin [PATCH 8/8] busybox -- libselinux utilities applets KaiGai Kohei [PATCH 7/8] busybox -- libselinux utilities applets KaiGai Kohei [PATCH 6/8] busybox -- libselinux utilities applets KaiGai Kohei [PATCH 5/8] busybox -- libselinux utilities applets KaiGai Kohei [PATCH 4/8] busybox -- libselinux utilities applets KaiGai Kohei [PATCH 3/8] busybox -- libselinux utilities applets KaiGai Kohei [PATCH 2/8] busybox -- libselinux utilities applets KaiGai Kohei [PATCH 0/8] busybox -- libselinux utilities applets KaiGai Kohei Latest diffs - Resent with additional changes. Daniel J Walsh Wednesday, 24 January RE: SELinux and LSM chaining. Joshua Brindle Fixes for chcat to work better in Large category environment. Daniel J Walsh Re: libselinux python binding segfault patch Daniel J Walsh Re: libselinux python binding segfault patch Stephen Smalley RE: SELinux and LSM chaining. Stephen Smalley Re: libselinux python binding segfault patch Daniel J Walsh RE: SELinux and LSM chaining. Martin_Stoilov_at_mcafee.com Re: libselinux python binding segfault patch Stephen Smalley ANN: Updated SELinux Release Stephen Smalley libselinux python binding segfault patch Daniel J Walsh Re: SELinux and LSM chaining. Stephen Smalley Re: Current/Future Plans to Support Stacking LSM Modules Paul Moore Tuesday, 23 January SELinux and LSM chaining. Martin_Stoilov_at_mcafee.com Re: Current/Future Plans to Support Stacking LSM Modules Russell Coker Re: SELinux and LSM chaining. Stephen Smalley Re: SELinux Symposium Case Studies, WiPs, and BoFs Chad Sellers Simple patch to policy to allow interfaces Daniel J Walsh Monday, 22 January Re: polyinstantiation, what should happen? Ted X Toth Re: installation from scratch problems Stephen Smalley Re: SELinux and kernel 2.6.19.2 Vincenzo Ciaglia Re: SELinux and kernel 2.6.19.2 Stephen Smalley Re: installation from scratch problems Stephen Smalley Re: installation from scratch problems Stephen Smalley Re: installation from scratch problems Stephen Smalley Re: [PATCH] Update newrole authors and provide use examples in manpage Stephen Smalley Sunday, 21 January selinux support on kernel 2.6.19.2 pt.2 Vincenzo Ciaglia Saturday, 20 January SELinux and kernel 2.6.19.2 Vincenzo Ciaglia Friday, 19 January Re: installation from scratch problems Vincenzo Ciaglia Re: installation from scratch problems Karl MacMillan Re: installation from scratch problems Vincenzo Ciaglia Re: installation from scratch problems Karl MacMillan Re: installation from scratch problems Vincenzo Ciaglia [PATCH] Update newrole authors and provide use examples in manpage Michael C Thompson Thursday, 18 January Re: polyinstantiation, what should happen? Xavier Toth Friday, 19 January Re: polyinstantiation, what should happen? Linda Knippers Re: 2.6.19.2 Oops James Morris Re: 2.6.19.2 Oops Stephen Smalley Re: 2.6.19.2 Oops Paul Moore Re: [PATCH] add selpolgen Stephen Smalley Re: [PATCH] add selpolgen Karl MacMillan Re: [PATCH] add selpolgen Stephen Smalley Re: [RFC] 0/4 - Hierarchal apache policy for reference policy Karl MacMillan Re: [PATCH] add selpolgen Karl MacMillan Re: [PATCH] add selpolgen Stephen Smalley RE: FW: Current/Future Plans to Support Stacking LSM Modules Tom Fortmann Re: 2.6.19.2 Oops Stephen Smalley Re: 2.6.19.2 Oops Paul Moore Re: 2.6.19.2 Oops Antoine Martin RE: FW: Current/Future Plans to Support Stacking LSM Modules Stephen Smalley Re: [PATCH] add selpolgen Stephen Smalley Re: 2.6.19.2 Oops Antoine Martin Re: 2.6.19.2 Oops Antoine Martin Re: 2.6.19.2 Oops Stephen Smalley Re: 2.6.19.2 Oops Paul Moore Re: installation from scratch problems Stephen Smalley Re: installation from scratch problems Antoine Martin installation from scratch problems Vincenzo Ciaglia 2.6.19.2 Oops Antoine Martin Thursday, 18 January RE: [RFC] 0/4 - Hierarchal apache policy for reference policy Joshua Brindle Re: Current/Future Plans to Support Stacking LSM Modules Casey Schaufler Re: [RFC] 0/4 - Hierarchal apache policy for reference policy Karl MacMillan RE: [RFC] 0/4 - Hierarchal apache policy for reference policy Joshua Brindle [ANN] Stable branch created for selinux core userland Stephen Smalley New policy patterns and policy generation Karl MacMillan RE: [RFC] 0/4 - Hierarchal apache policy for reference policy Stephen Smalley Re: Current/Future Plans to Support Stacking LSM Modules Stephen Smalley RE: [RFC] 0/4 - Hierarchal apache policy for reference policy Stephen Smalley RE: [RFC] 0/4 - Hierarchal apache policy for reference policy Joshua Brindle Re: [RFC] 0/4 - Hierarchal apache policy for reference policy Karl MacMillan Re: [PATCH] add selpolgen Karl MacMillan Re: [RFC] 0/4 - Hierarchal apache policy for reference policy Stephen Smalley Re: Current/Future Plans to Support Stacking LSM Modules Casey Schaufler Re: Current/Future Plans to Support Stacking LSM Modules Serge E. Hallyn Re: [RFC] 0/4 - Hierarchal apache policy for reference policy Karl MacMillan Re: Current/Future Plans to Support Stacking LSM Modules Casey Schaufler Re: [RFC] 0/4 - Hierarchal apache policy for reference policy Joshua Brindle Re: Current/Future Plans to Support Stacking LSM Modules Serge E. Hallyn Re: [RFC] 0/4 - Hierarchal apache policy for reference policy Karl MacMillan RE: FW: Current/Future Plans to Support Stacking LSM Modules Tom Fortmann Re: Current/Future Plans to Support Stacking LSM Modules Karl MacMillan Re: Current/Future Plans to Support Stacking LSM Modules Casey Schaufler [RFC] 4/4 - Hierarchal apache policy for reference policy (policy contexts) Joshua Brindle [RFC] 3/4 - Hierarchal apache policy for reference policy (file contexts) Joshua Brindle [RFC] 2/4 - Hierarchal apache policy for reference policy (interfaces) Joshua Brindle [RFC] 1/4 - Hierarchal apache policy for reference policy (te) Joshua Brindle [RFC] 0/4 - Hierarchal apache policy for reference policy Joshua Brindle Re: [RFC] Add list and iter data types to libsepol Stephen Smalley Re: [PATCH] add selpolgen Stephen Smalley Re: [PATCH] add central errno.h to libsepol Stephen Smalley Re: polyinstantiation, what should happen? Stephen Smalley Re: Current/Future Plans to Support Stacking LSM Modules Stephen Smalley Re: Current/Future Plans to Support Stacking LSM Modules Stephen Smalley RE: FW: Current/Future Plans to Support Stacking LSM Modules Stephen Smalley Wednesday, 17 January Re: polyinstantiation, what should happen? Linda Knippers polyinstantiation, what should happen? Xavier Toth RE: FW: Current/Future Plans to Support Stacking LSM Modules Tom Fortmann Re: Patch to make man -k selinux return all man pages. Stephen Smalley Re: [RFC] Add list and iter data types to libsepol Karl MacMillan Re: [RFC] Add list and iter data types to libsepol Stephen Smalley Tuesday, 16 January Patch to make man -k selinux return all man pages. Daniel J Walsh Re: [RFC] Add list and iter data types to libsepol Karl MacMillan [RFC] Add list and iter data types to libsepol Karl MacMillan Re: FW: Current/Future Plans to Support Stacking LSM Modules Casey Schaufler RE: FW: Current/Future Plans to Support Stacking LSM Modules Tom Fortmann Re: FW: Current/Future Plans to Support Stacking LSM Modules Stephen Smalley FW: Current/Future Plans to Support Stacking LSM Modules Tom Fortmann Re: Current/Future Plans to Support Stacking LSM Modules Casey Schaufler Re: Current/Future Plans to Support Stacking LSM Modules Stephen Smalley Current/Future Plans to Support Stacking LSM Modules Tom Fortmann Re: [PATCH] add selpolgen Karl MacMillan Re: [PATCH] add selpolgen Joshua Brindle Re: translation patch for semanage Karl MacMillan [PATCH] add selpolgen Karl MacMillan Re: I have been asked to add the following perms for NSCD. Stephen Smalley I have been asked to add the following perms for NSCD. Daniel J Walsh Re: [PATCH] add central errno.h to libsepol Karl MacMillan Re: We currently have a problem with cp -a /media/cdrom /etc Stephen Smalley Re: [PATCH] add central errno.h to libsepol Stephen Smalley Re: [PATCH] add central errno.h to libsepol Stephen Smalley Re: sparc64 kernel won't boot with selinux enabled Stephen Smalley Re: [PATCH] add central errno.h to libsepol Steve G Monday, 15 January Re: [PATCH] add central errno.h to libsepol Joshua Brindle [PATCH] add central errno.h to libsepol Karl MacMillan [PATCH 1/1] selinux: increment flow cache genid Venkat Yekkirala Re: sparc64 kernel won't boot with selinux enabled Karl MacMillan [Fwd: Re: sparc64 kernel won't boot with selinux enabled] Karl MacMillan Re: We currently have a problem with cp -a /media/cdrom /etc Jim Meyering Re: We currently have a problem with cp -a /media/cdrom /etc James Antill Sunday, 14 January Re: [RFC] clarifications for -l to newrole.1 Michael C Thompson Saturday, 13 January Re: We currently have a problem with cp -a /media/cdrom /etc Casey Schaufler Re: We currently have a problem with cp -a /media/cdrom /etc Russell Coker Re: We currently have a problem with cp -a /media/cdrom /etc Jim Meyering Re: We currently have a problem with cp -a /media/cdrom /etc Russell Coker Re: [RFC] clarifications for -l to newrole.1 Russell Coker Friday, 12 January Re: We currently have a problem with cp -a /media/cdrom /etc Casey Schaufler I tried to extract the current openssh patch for RHEL5 Daniel J Walsh Re: We currently have a problem with cp -a /media/cdrom /etc Stephen Smalley Re: [RFC] clarifications for -l to newrole.1 Stephen Smalley Re: We currently have a problem with cp -a /media/cdrom /etc Jim Meyering Re: We currently have a problem with cp -a /media/cdrom /etc Stephen Smalley Re: We currently have a problem with cp -a /media/cdrom /etc Jim Meyering Re: We currently have a problem with cp -a /media/cdrom /etc Stephen Smalley Re: We currently have a problem with cp -a /media/cdrom /etc Jim Meyering Re: We currently have a problem with cp -a /media/cdrom /etc James Antill Re: We currently have a problem with cp -a /media/cdrom /etc Stephen Smalley Re: We currently have a problem with cp -a /media/cdrom /etc Stephen Smalley Re: We currently have a problem with cp -a /media/cdrom /etc Stephen Smalley Re: We currently have a problem with cp -a /media/cdrom /etc James Antill Re: [RFC] clarifications for -l to newrole.1 Casey Schaufler Re: We currently have a problem with cp -a /media/cdrom /etc Stephen Smalley We currently have a problem with cp -a /media/cdrom /etc Daniel J Walsh Re: [RFC] clarifications for -l to newrole.1 Joe Nall Re: [RFC] clarifications for -l to newrole.1 Stephen Smalley Re: [RFC] clarifications for -l to newrole.1 Casey Schaufler Re: New test program for libselinux/utils that helped with testing MLS/Role/Level coding Daniel J Walsh Re: [RFC] clarifications for -l to newrole.1 Michael C Thompson Re: [RFC] clarifications for -l to newrole.1 Michael C Thompson Re: New test program for libselinux/utils that helped with testing MLS/Role/Level coding Stephen Smalley Re: [RFC] clarifications for -l to newrole.1 Stephen Smalley Re: patch for semanage.8 Stephen Smalley Re: [RFC] clarifications for -l to newrole.1 Stephen Smalley Thursday, 11 January Re: [RFC] clarifications for -l to newrole.1 Russell Coker Re: [RFC] clarifications for -l to newrole.1 Michael C Thompson Re: [RFC] clarifications for -l to newrole.1 Michael C Thompson Re: [RFC] clarifications for -l to newrole.1 Stephen Smalley Re: translation patch for semanage Daniel J Walsh Re: [RFC] clarifications for -l to newrole.1 Stephen Smalley [RFC] clarifications for -l to newrole.1 Michael C Thompson New test program for libselinux/utils that helped with testing MLS/Role/Level coding Daniel J Walsh Re: [RFC] Support for bzip compressed modules Karl MacMillan Re: [RFC] Support for bzip compressed modules Karl MacMillan Re: translation patch for semanage Karl MacMillan Re: [PATCH] allow semodule -i to accept list of modules Stephen Smalley Re: newrole patch Stephen Smalley Re: libselinux patch to add securetty rewritten with getline and using Lindent Stephen Smalley Iptables with secmark support now available in rawhide Karl MacMillan SELinux Symposium Case Studies, WiPs, and BoFs Chad Sellers translation patch for semanage Daniel J Walsh Translation patch for seobject.py Daniel J Walsh patch for semanage.8 Russell Coker Wednesday, 10 January SELinux Symposium: Head of IBM Linux Development to be Keynote Speaker Frank L. Mayer Re: Tar storage of SELinux context, translated or not Casey Schaufler Re: Tar storage of SELinux context, translated or not Stephen Smalley Re: Tar storage of SELinux context, translated or not Paul Moore Tar storage of SELinux context, translated or not James Antill Re: [PATCH] allow semodule -i to accept list of modules Stephen Smalley RE: [PATCH] allow semodule -i to accept list of modules Stephen Smalley Tuesday, 9 January Re: [RFC] Support for bzip compressed modules Russell Coker Wednesday, 10 January Re: [RFC] Support for bzip compressed modules James Antill Tuesday, 9 January PATCH[2.2/3]: labeled ipsec policy Joy Latten PATCH[2.1/3]: labeled ipsec policy Joy Latten RE: [PATCH] allow semodule -i to accept list of modules Joshua Brindle Re: [PATCH] allow semodule -i to accept list of modules Karl MacMillan Re: [RFC] Support for bzip compressed modules Karl MacMillan Re: [PATCH] allow semodule -i to accept list of modules Stephen Smalley Re: [PATCH] allow semodule -i to accept list of modules Stephen Smalley Re: patch to make seobject.py work correctly. Stephen Smalley Re: Fixfiles patch for creating logfile fixed. Stephen Smalley Re: libselinux patch to add securetty rewritten with getline and using Lindent Stephen Smalley Re: [RFC] Support for bzip compressed modules James Antill Re: [PATCH] allow semodule -i to accept list of modules Joshua Brindle Re: [RFC] Support for bzip compressed modules Stephen Smalley Re: [RFC] Support for bzip compressed modules Karl MacMillan Re: [PATCH] allow semodule -i to accept list of modules Karl MacMillan Fixfiles patch for creating logfile fixed. Daniel J Walsh patch to make seobject.py work correctly. Daniel J Walsh newrole patch Daniel J Walsh Re: [PATCH] allow semodule -i to accept list of modules Joshua Brindle libselinux patch to add securetty rewritten with getline and using Lindent Daniel J Walsh Re: [PATCH] allow semodule -i to accept list of modules Karl MacMillan Re: Error! Shell is not valid. Christopher J. PeBenito Re: Error! Shell is not valid. Stephen Smalley Error! Shell is not valid. selinux770_at_tortenboxer.de Re: [RFC] Support for bzip compressed modules James Antill Monday, 8 January Re: [PATCH RFC 1/2] stricter MLS policy constraints Klaus Weidner Re: Latest diffs Klaus Weidner Re: [PATCH] allow semodule -i to accept list of modules Joshua Brindle FYI:labeled ipsec policy Joy Latten [PATCH 3/3]: labeled ipsec policy Joy Latten [PATCH 1/3]: labeled ipsec policy Joy Latten [PATCH 0/3]: labeled ipsec policy Joy Latten [PATCH] allow semodule -i to accept list of modules Karl MacMillan Re: [PATCH] check for handle creation failures in seobject Joshua Brindle [RFC] Support for bzip compressed modules Karl MacMillan Re: Latest diffs Christopher J. PeBenito Re: Policycoreutils patches Daniel J Walsh Re: [PATCH RFC 0/2] stricter MLS policy constraints Christopher J. PeBenito Re: [PATCH RFC 1/2] stricter MLS policy constraints Christopher J. PeBenito Sunday, 7 January Re: cron on strict policy Shintaro Fujiwara Friday, 5 January [PATCH 2/2] NetLabel: correct CIPSO tag handling when adding new DOI definitions Paul Moore [PATCH 1/2] NetLabel: correct locking in selinux_netlbl_socket_setsid() Paul Moore [PATCH 0/2] Two pretty trivial NetLabel bugfixes Paul Moore Re: [PATCH] check for handle creation failures in seobject Joshua Brindle Re: [PATCH] semanage: optionally remove previous and linked to reduce disck usage Stephen Smalley Re: [PATCH] semanage: optionally remove previous and linked to reduce disck usage Karl MacMillan Re: Policycoreutils patches Stephen Smalley Re: [redhat-lspp] Re: [PATCH 2/3] Re: MLS enforcing PTYs, sshd, and newrole Stephen Smalley Re: [PATCH] semanage: optionally remove previous and linked to reduce disck usage Stephen Smalley Re: [redhat-lspp] Re: [PATCH 2/3] Re: MLS enforcing PTYs, sshd, and newrole Stephen Smalley Re: Policycoreutils patches Stephen Smalley Re: [PATCH] check for handle creation failures in seobject Karl MacMillan Re: [redhat-lspp] Re: [PATCH 2/3] Re: MLS enforcing PTYs, sshd, and newrole Daniel J Walsh Re: creating a new role/user to administer a service Karl MacMillan Re: creating a new role/user to administer a service Christopher J. PeBenito [PATCH] check for handle creation failures in seobject Karl MacMillan Re: [redhat-lspp] Re: [PATCH 2/3] Re: MLS enforcing PTYs, sshd, and newrole Daniel J Walsh Re: [redhat-lspp] Re: [PATCH 2/3] Re: MLS enforcing PTYs, sshd, and newrole Daniel J Walsh Re: [PATCH] semanage: optionally remove previous and linked to reduce disck usage Karl MacMillan Re: [redhat-lspp] Re: [PATCH 2/3] Re: MLS enforcing PTYs, sshd, and newrole Stephen Smalley RE: [redhat-lspp] Re: [PATCH 2/3] Re: MLS enforcing PTYs, sshd, and newrole Stephen Smalley Re: creating a new role/user to administer a service Karl MacMillan Re: cron on strict policy Stephen Smalley Re: creating a new role/user to administer a service Stephen Smalley Re: [PATCH] correct return value handling in libsemanage Stephen Smalley Re: [PATCH] semanage: optionally remove previous and linked to reduce disck usage Stephen Smalley Thursday, 4 January Re: [redhat-lspp] Re: [PATCH 2/3] Re: MLS enforcing PTYs, sshd, and newrole Klaus Weidner RE: [redhat-lspp] Re: [PATCH 2/3] Re: MLS enforcing PTYs, sshd, and newrole Joshua Brindle Re: [redhat-lspp] Re: [PATCH 2/3] Re: MLS enforcing PTYs, sshd, and newrole Klaus Weidner Re: [redhat-lspp] Re: [PATCH 2/3] Re: MLS enforcing PTYs, sshd, and newrole Joshua Brindle Re: [redhat-lspp] Re: [PATCH 2/3] Re: MLS enforcing PTYs, sshd, and newrole Klaus Weidner Re: [redhat-lspp] Re: [PATCH 2/3] Re: MLS enforcing PTYs, sshd, and newrole Linda Knippers Re: [redhat-lspp] Re: [PATCH 2/3] Re: MLS enforcing PTYs, sshd, and newrole Daniel J Walsh Re: [redhat-lspp] Re: [PATCH 2/3] Re: MLS enforcing PTYs, sshd, and newrole Daniel J Walsh Re: [redhat-lspp] Re: [PATCH 2/3] Re: MLS enforcing PTYs, sshd, and newrole Casey Schaufler Re: Policycoreutils patches Daniel J Walsh Re: [PATCH] correct return value handling in libsemanage Joshua Brindle Re: [PATCH] semanage: optionally remove previous and linked to reduce disck usage Joshua Brindle Re: [redhat-lspp] Re: [PATCH 2/3] Re: MLS enforcing PTYs, sshd, and newrole Linda Knippers Re: [redhat-lspp] Re: [PATCH 2/3] Re: MLS enforcing PTYs, sshd, and newrole Daniel J Walsh Re: Latest diffs Erich Schubert Re: Latest diffs Casey Schaufler Re: Latest diffs Russell Coker Re: Policycoreutils patches Stephen Smalley [PATCH] semanage: optionally remove previous and linked to reduce disck usage Karl MacMillan Re: Patch for libselinux Karl MacMillan Re: Latest diffs Casey Schaufler Re: Patch for libselinux Stephen Smalley Re: Policycoreutils patches Stephen Smalley Re: Latest diffs Russell Coker Re: Latest diffs Klaus Weidner Re: Latest diffs Steve G Wednesday, 3 January Re: Latest diffs Russell Coker Thursday, 4 January creating a new role/user to administer a service Ronan Waide Wednesday, 3 January cron on strict policy Shintaro Fujiwara Re: Latest diffs Klaus Weidner Re: Latest diffs Klaus Weidner Patch for libselinux Daniel J Walsh Policycoreutils patches Daniel J Walsh Sunday, 24 December Re: please guide me a way to study selinux in Kernel Nerazzurri.YANG Wednesday, 3 January Latest diffs Daniel J Walsh Re: Patch to load_policy to enforce quiet option Karl MacMillan Re: [PATCH] correct return value handling in libsemanage Karl MacMillan Re: [PATCH] correct return value handling in libsemanage Joshua Brindle Thursday, 21 December [PATCH] correct return value handling in libsemanage Karl MacMillan Re: [PATCH] change printks from KERN_INFO to KERN_DEBUG Stephen Smalley Re: [PATCH] change printks from KERN_INFO to KERN_DEBUG Steve G Wednesday, 20 December Re: [PATCH] change printks from KERN_INFO to KERN_DEBUG Eric Paris Re: please guide me a way to study selinux in Kernel Nerazzurri.YANG Re: [PATCH] change printks from KERN_INFO to KERN_DEBUG Steve G Re: [PATCH] change printks from KERN_INFO to KERN_DEBUG Stephen Smalley Re: [PATCH] change printks from KERN_INFO to KERN_DEBUG Eric Paris [ANN] Madison policy generation tools Karl MacMillan Re: [PATCH 0/4] NetLabel and MLS fixes for Reference Policy Paul Moore Re: please guide me a way to study selinux in Kernel Stephen Smalley Re: please guide me a way to study selinux in Kernel James Morris please guide me a way to study selinux in Kernel Nerazzurri.YANG Tuesday, 19 December Re: Fast User Switching and security / SELinux David Zeuthen Fast User Switching and security / SELinux Karl MacMillan Re: [PATCH] change printks from KERN_INFO to KERN_DEBUG James Morris Re: [PATCH] change printks from KERN_INFO to KERN_DEBUG Stephen Smalley [PATCH] change printks from KERN_INFO to KERN_DEBUG Eric Paris Re: superblock_doinit emits a message for every mount Steve G Re: superblock_doinit emits a message for every mount Stephen Smalley superblock_doinit emits a message for every mount Eric Paris Monday, 18 December Re: [PATCH 0/2] A bugfix patchset for NetLabel James Morris Re: [PATCH 0/2] A bugfix patchset for NetLabel Paul Moore Friday, 15 December Re: [PATCH 0/2] A bugfix patchset for NetLabel James Morris [PATCH 2/2] NetLabel: correctly fill in unused CIPSOv4 level and category mappings paul.moore_at_hp.com [PATCH 1/2] NetLabel: perform input validation earlier on CIPSOv4 DOI add ops paul.moore_at_hp.com [PATCH 0/2] A bugfix patchset for NetLabel paul.moore_at_hp.com RE: [PATCH 0/7] labeled ipsec policy changes Joy Latten RE: [PATCH 0/7] labeled ipsec policy changes Venkat Yekkirala Thursday, 14 December [PATCH 4/7] labeled ipsec policy changes Joy Latten [PATCH 7/7] labeled ipsec policy changes Joy Latten [PATCH 6/7] labeled ipsec policy changes Joy Latten [PATCH 5/7] labeled ipsec policy changes Joy Latten [PATCH 3/7] labeled ipsec policy changes Joy Latten [PATCH 2/7] labeled ipsec policy changes Joy Latten [PATCH 1/7] labeled ipsec policy changes Joy Latten [PATCH 0/7] labeled ipsec policy changes Joy Latten [PATCH 1/4] Policy patches to add NetLabel to support to various domains paul.moore_at_hp.com [PATCH 2/4] Policy patches to add NetLabel support for Raw IP sockets paul.moore_at_hp.com [PATCH 4/4] Policy patches to add MLS read/write-to-clearance access to inetd_t paul.moore_at_hp.com [PATCH 0/4] NetLabel and MLS fixes for Reference Policy paul.moore_at_hp.com [PATCH 3/4] Policy patches to add a MLS socket write-to-clearance interface paul.moore_at_hp.com Re: [PATCH RFC 0/2] stricter MLS policy constraints Joy Latten Wednesday, 13 December Re: [PATCH RFC 0/2] stricter MLS policy constraints Paul Moore Re: [PATCH RFC 0/2] stricter MLS policy constraints Klaus Weidner Re: [PATCH RFC 0/2] stricter MLS policy constraints Paul Moore RE: Labeling traffic over loopback James Morris RE: Labeling traffic over loopback Venkat Yekkirala Re: matchpathcon() for arbitrary subjects Stephen Smalley Tuesday, 12 December RE: Labeling traffic over loopback James Morris Re: [PATCH 1/1] selinux: Delete mls_copy_context - V.02 James Morris Re: matchpathcon() for arbitrary subjects Matt Anderson ANN: Reference Policy Release Christopher J. PeBenito Re: matchpathcon() for arbitrary subjects Stephen Smalley Re: matchpathcon() for arbitrary subjects Matt Anderson Re: matchpathcon() for arbitrary subjects Stephen Smalley Re: matchpathcon() for arbitrary subjects Stephen Smalley Re: matchpathcon() for arbitrary subjects Matt Anderson Re: matchpathcon() for arbitrary subjects Stephen Smalley Re: [PATCH 1/1] selinux: Delete mls_copy_context - V.02 Stephen Smalley Re: matchpathcon() for arbitrary subjects Stephen Smalley matchpathcon() for arbitrary subjects Matt Anderson [PATCH 1/1] selinux: Delete mls_copy_context - V.02 Venkat Yekkirala Re: [PATCH 1/1] selinux: Delete mls_copy_context Stephen Smalley Re: Patch for restorecond to not report an error if filesystem does not support XATTR Stephen Smalley Re: Patch to load_policy to enforce quiet option Stephen Smalley RE: Labeling traffic over loopback Venkat Yekkirala Re: Labeling traffic over loopback Paul Moore Re: Labeling traffic over loopback Casey Schaufler Re: Labeling traffic over loopback Joy Latten RE: Labeling traffic over loopback Venkat Yekkirala Re: Labeling traffic over loopback Paul Moore Re: [PATCH 1/1] selinux: Delete mls_copy_context Paul Moore RE: Labeling traffic over loopback Venkat Yekkirala Labeling traffic over loopback Venkat Yekkirala [PATCH RFC 3/2] stricter MLS policy constraints Klaus Weidner [PATCH 1/1] selinux: Delete mls_copy_context Venkat Yekkirala Re: help: 2 conditional expressions in refpolicy must match? Karl MacMillan help: 2 conditional expressions in refpolicy must match? ²Ì¼ÎÓÂ [PATCH RFC 2/2] stricter MLS policy constraints Klaus Weidner Re: [PATCH RFC 0/2] stricter MLS policy constraints Klaus Weidner [PATCH RFC 1/2] stricter MLS policy constraints Klaus Weidner [PATCH RFC 0/2] stricter MLS policy constraints Klaus Weidner Monday, 11 December Re: Patch to fix newrole/more problem where more fails because terminal is not open correctly Karl MacMillan Patch to fix newrole/more problem where more fails because terminal is not open correctly Daniel J Walsh Speakers for 3rd SELinux Symposium (Registration opens) Frank L. Mayer Friday, 8 December Re: [RFC] Thunar filesystem manager policy Christopher J. PeBenito Re: targeted policy patch Christopher J. PeBenito Thursday, 7 December Re: [redhat-lspp] pam_namespace is broken from an SELinux perspective. Stephen Smalley Re: [redhat-lspp] pam_namespace is broken from an SELinux perspective. Russell Coker Re: [redhat-lspp] pam_namespace is broken from an SELinux perspective. Stephen Smalley Re: [redhat-lspp] pam_namespace is broken from an SELinux perspective. Stephen Smalley Re: [redhat-lspp] pam_namespace is broken from an SELinux perspective. Russell Coker Re: [redhat-lspp] pam_namespace is broken from an SELinux perspective. Stephen Smalley Re: [redhat-lspp] pam_namespace is broken from an SELinux perspective. Stephen Smalley Wednesday, 6 December Re: [RFC] Thunar filesystem manager policy Bradley Chapman Re: Patch for restorecond to not report an error if filesystem does not support XATTR Karl MacMillan Re: Patch to load_policy to enforce quiet option Karl MacMillan Re: [PATCH 1/5] libselinux: labeling API basic front-end interface Karl MacMillan Tuesday, 5 December Re: XACE and MLS Eamon Walsh XACE and MLS Ted X Toth Monday, 4 December Re: User home directory creation with useradd (rhbz#217441) David O'Brien Sunday, 3 December Re: User home directory creation with useradd (rhbz#217441) David O'Brien Tuesday, 5 December Re: [RFC] Ability to allow unknown class and permissions Karl MacMillan Re: [RFC] Ability to allow unknown class and permissions Stephen Smalley RE: [RFC] Ability to allow unknown class and permissions Stephen Smalley Re: [RFC] Ability to allow unknown class and permissions Stephen Smalley targeted policy patch Russell Coker Re: User home directory creation with useradd (rhbz#217441) Russell Coker Monday, 4 December Re: [RFC] Ability to allow unknown class and permissions Joshua Brindle Re: [RFC] Ability to allow unknown class and permissions Karl MacMillan RE: [RFC] Ability to allow unknown class and permissions Joshua Brindle Re: [RFC] Ability to allow unknown class and permissions Karl MacMillan Re: Latest Diffs 11/29 Daniel J Walsh Re: [RFC] Ability to allow unknown class and permissions Stephen Smalley Re: [RFC] Ability to allow unknown class and permissions Karl MacMillan Re: [RFC] Ability to allow unknown class and permissions Karl MacMillan RE: [RFC] Ability to allow unknown class and permissions Stephen Smalley RE: [RFC] Ability to allow unknown class and permissions Joshua Brindle Re: Latest Diffs 11/29 Christopher J. PeBenito Re: [RFC] Ability to allow unknown class and permissions Karl MacMillan RE: [RFC] Ability to allow unknown class and permissions Joshua Brindle Re: Patch for restorecond to not report an error if filesystem does not support XATTR Stephen Smalley Re: [RFC] Ability to allow unknown class and permissions Karl MacMillan RE: [RFC] Ability to allow unknown class and permissions Joshua Brindle Re: [RFC] Ability to allow unknown class and permissions Karl MacMillan RE: [RFC] Ability to allow unknown class and permissions Stephen Smalley Re: User home directory creation with useradd (rhbz#217441) Casey Schaufler RE: [RFC] Ability to allow unknown class and permissions Eric Paris RE: [RFC] Ability to allow unknown class and permissions Joshua Brindle Re: User home directory creation with useradd (rhbz#217441) Karl MacMillan Re: User home directory creation with useradd (rhbz#217441) Casey Schaufler [ANN] SETools - 3.0.1 Jeremy A. Mowery Saturday, 2 December RE: User home directory creation with useradd (rhbz#217441) Joshua Brindle Re: User home directory creation with useradd (rhbz#217441) Linda Knippers Monday, 4 December RE: [RFC] Ability to allow unknown class and permissions Stephen Smalley RE: [RFC] Ability to allow unknown class and permissions Joshua Brindle Re: [RFC] Ability to allow unknown class and permissions Stephen Smalley Re: User home directory creation with useradd (rhbz#217441) Karl MacMillan Sunday, 3 December Re: root home directory and system cron jobs Erich Schubert Re: how to test ssh_sysadm_login(tunable) Russell Coker Re: root home directory and system cron jobs Russell Coker The prototype of SE-PostgreSQL KaiGai Kohei Re: how to test ssh_sysadm_login(tunable) Erich Schubert Re: root home directory and system cron jobs Erich Schubert Re: how to test ssh_sysadm_login(tunable) Jian Liu Saturday, 2 December Re: root home directory and system cron jobs Russell Coker root home directory and system cron jobs Erich Schubert Re: User home directory creation with useradd (rhbz#217441) Russell Coker RE: User home directory creation with useradd (rhbz#217441) Joshua Brindle Friday, 1 December Re: User home directory creation with useradd (rhbz#217441) Russell Coker Re: Patch for restorecond to not report an error if filesystem does not support XATTR Joshua Brindle Re: [PATCH 0/5] libselinux: labeling API for userspace object managers (try 2) Joshua Brindle Re: [RFC] Ability to allow unknown class and permissions Joshua Brindle Re: User home directory creation with useradd (rhbz#217441) Joshua Brindle Re: User home directory creation with useradd (rhbz#217441) Russell Coker Re: [PATCH 0/5] libselinux: labeling API for userspace object managers (try 2) Eamon Walsh Re: User home directory creation with useradd (rhbz#217441) Linda Knippers Re: User home directory creation with useradd (rhbz#217441) Karl MacMillan User home directory creation with useradd (rhbz#217441) James Antill Re: [RFC] Ability to allow unknown class and permissions Stephen Smalley Re: [RFC] Ability to allow unknown class and permissions Stephen Smalley Re: [PATCH 0/5] libselinux: labeling API for userspace object managers (try 2) Karl MacMillan Re: coreutils status Jim Meyering [RFC] Ability to allow unknown class and permissions Eric Paris Re: how to test ssh_sysadm_login(tunable) Russell Coker how to test ssh_sysadm_login(tunable) Jian Liu Re: coreutils status Chris PeBenito Thursday, 30 November Re: [PATCH 0/5] libselinux: labeling API for userspace object managers (try 2) Joshua Brindle [PATCH] labeling API examples: setfiles patch and simple program Eamon Walsh RE: Patch for restorecond to not report an error if filesystem does not support XATTR Stephen Smalley RE: Patch for restorecond to not report an error if filesystem does not support XATTR Joshua Brindle Re: Patch for restorecond to not report an error if filesystem does not support XATTR Daniel J Walsh Re: Patch to load_policy to enforce quiet option Daniel J Walsh Re: Patch for restorecond to not report an error if filesystem does not support XATTR Joshua Brindle Re: Patch to load_policy to enforce quiet option Joshua Brindle RE: [redhat-lspp] Re: labeled ipsec policy Venkat Yekkirala Re: [PATCH] Rename class_destroy to prevent namespace conflicts Stephen Smalley Re: Recovering .te and .fc files from modules Stephen Smalley Re: how to use a single .fc to set files Christopher J. PeBenito* how to use a single .fc to set files Jian Liu* Re: First argument of matchpathcon_filespec_add Yuichi Nakamura Wednesday, 29 November [PATCH 5/5] libselinux: labeling API file_contexts backend Eamon Walsh [PATCH 4/5] libselinux: labeling API simple backend Eamon Walsh [PATCH 3/5] libselinux: class and av_perm to string functions Eamon Walsh [PATCH 2/5] libselinux: labeling API basic front-end implementation Eamon Walsh [PATCH 1/5] libselinux: labeling API basic front-end interface Eamon Walsh [PATCH 0/5] libselinux: labeling API for userspace object managers (try 2) Eamon Walsh Re: [PATCH] refpolicy: add X object classes to unconfined_t Eamon Walsh RE: [redhat-lspp] Re: labeled ipsec policy Joy Latten Re: [PATCH 0/3] NetLabel: add the remaining CIPSO tag types from the IETF draft James Morris Re: [PATCH] refpolicy: add X object classes to unconfined_t Xavier Toth Patch for restorecond to not report an error if filesystem does not support XATTR Daniel J Walsh Patch to load_policy to enforce quiet option Daniel J Walsh Re: [PATCH 0/3] NetLabel: add the remaining CIPSO tag types from the IETF draft Paul Moore Latest Diffs 11/29 Daniel J Walsh Re: [PATCH 0/3] NetLabel: add the remaining CIPSO tag types from the IETF draft James Morris Re: [PATCH] Rename class_destroy to prevent namespace conflicts James Morris Re: [PATCH] Rename class_destroy to prevent namespace conflicts Stephen Smalley Re: Recovering .te and .fc files from modules Karl MacMillan [PATCH] Rename class_destroy to prevent namespace conflicts James Morris RE: More small fixes to policycoreutils Joshua Brindle Re: Recovering .te and .fc files from modules Stephen Smalley Re: [PATCH 3/3] NetLabel: add the ranged tag to the CIPSOv4 protocol James Morris RE: [redhat-lspp] Re: labeled ipsec policy Venkat Yekkirala Recovering .te and .fc files from modules Karl MacMillan Re: CentOS and SELinux refpolicy trouble Christopher J. PeBenito Re: First argument of matchpathcon_filespec_add Eamon Walsh Re: [PATCH] refpolicy: add X object classes to unconfined_t Eamon Walsh Re: XACE policy configuration Eamon Walsh Re: [PATCH 0/3] NetLabel: add the remaining CIPSO tag types from the IETF draft Casey Schaufler Re: CentOS and SELinux refpolicy trouble Stephen Smalley Re: CentOS and SELinux refpolicy trouble Filip Bartmann [PATCH 2/3] NetLabel: add the enumerated tag to the CIPSOv4 protocol paul.moore_at_hp.com [PATCH 1/3] NetLabel: convert to an extensibile/sparse category bitmap paul.moore_at_hp.com [PATCH 0/3] NetLabel: add the remaining CIPSO tag types from the IETF draft paul.moore_at_hp.com [PATCH 3/3] NetLabel: add the ranged tag to the CIPSOv4 protocol paul.moore_at_hp.com Re: CentOS and SELinux refpolicy trouble Stephen Smalley CentOS and SELinux refpolicy trouble Filip Bartmann [PATCH 30/19] CacheFiles: Fix the allocate_page() op David Howells Re: First argument of matchpathcon_filespec_add Stephen Smalley Re: [RFC] Thunar filesystem manager policy Christopher J. PeBenito Re: [PATCH] refpolicy: add X object classes to unconfined_t Xavier Toth Re: [redhat-lspp] Re: labeled ipsec policy Christopher J. PeBenito Re: Missing gen_requires for building additional user types in modules Christopher J. PeBenito Re: First argument of matchpathcon_filespec_add KaiGai Kohei Re: First argument of matchpathcon_filespec_add Russell Coker Tuesday, 28 November First argument of matchpathcon_filespec_add Yuichi Nakamura Missing gen_requires for building additional user types in modules Daniel J Walsh Re: More small fixes to policycoreutils Joshua Brindle Re: [RFC] Thunar filesystem manager policy Bradley Chapman Re: [RFC] Thunar filesystem manager policy Christopher J. PeBenito Re: [RFC] Thunar filesystem manager policy Bradley Chapman Monday, 27 November Re: [PATCH 3/5] libselinux: security_class_to_string helper function Eamon Walsh Re: [PATCH 2/5] libselinux: labeling API basic front-end implementation Eamon Walsh Re: [PATCH 1/5] libselinux: labeling API basic front-end interface Eamon Walsh Re: [redhat-lspp] Re: labeled ipsec policy Joy Latten Re: [PATCH] genhomedircon Karl MacMillan Re: Compiling libsepol with -fPIC instead of -fpic Karl MacMillan Re: [RFC] Thunar filesystem manager policy Christopher J. PeBenito Re: More small fixes to policycoreutils Joshua Brindle Friday, 24 November Re: [PATCH 10/13] NetLabel: use cipso_v4_doi_search() for local CIPSOv4 functions Paul Moore Thursday, 23 November Re: [PATCH 10/13] NetLabel: use cipso_v4_doi_search() for local CIPSOv4 functions Eric Paris [PATCH 29/19] CacheFiles: Remove old obsolete cull function David Howells [PATCH 28/19] FS-Cache: NFS: Handle caching being disabled correctly David Howells [PATCH 27/19] FS-Cache: Apply the PG_checked -> PG_fs_misc conversion to Ext4 David Howells Wednesday, 22 November Re: More small fixes to policycoreutils Daniel J Walsh Re: More small fixes to policycoreutils Daniel J Walsh Re: More small fixes to policycoreutils Daniel J Walsh Re: More small fixes to policycoreutils Joshua Brindle Re: More small fixes to policycoreutils Joshua Brindle Re: More small fixes to policycoreutils Joshua Brindle Re: More small fixes to policycoreutils Joshua Brindle Re: More small fixes to policycoreutils Joshua Brindle Re: More small fixes to policycoreutils Daniel J Walsh Re: More small fixes to policycoreutils Daniel J Walsh Re: More small fixes to policycoreutils Daniel J Walsh Re: More small fixes to policycoreutils Daniel J Walsh Re: More small fixes to policycoreutils Daniel J Walsh [RFC] Thunar filesystem manager policy Bradley Chapman RE: More small fixes to policycoreutils Joshua Brindle Re: More small fixes to policycoreutils Daniel J Walsh Re: Compiling libsepol with -fPIC instead of -fpic Stephen Smalley Re: [PATCH] genhomedircon Stephen Smalley Re: do SELinux write/read permission checks exist? Paul Moore Re: do SELinux write/read permission checks exist? Stephen Smalley do SELinux write/read permission checks exist? Michael C Thompson Tuesday, 21 November Re: MLS policy constraints verification Darrel Goeddel Re: [PATCH] genhomedircon Karl MacMillan Re: Compiling libsepol with -fPIC instead of -fpic Karl MacMillan Re: More small fixes to policycoreutils Stephen Smalley Re: Compiling libsepol with -fPIC instead of -fpic Stephen Smalley Re: Question about stat KaiGai Kohei Re: More small fixes to policycoreutils Karl MacMillan Re: More small fixes to policycoreutils Karl MacMillan Re: Question about stat Stephen Smalley Re: labeled ipsec policy Christopher J. PeBenito Re: Task SID 's Stephen Smalley Re: More small fixes to policycoreutils Stephen Smalley Question about stat KaiGai Kohei Monday, 20 November Task SID 's I_am alone Re: More small fixes to policycoreutils Joshua Brindle Re: [PATCH 12/19] CacheFiles: Permit a process's create SID to be overridden James Morris Re: More small fixes to policycoreutils Daniel J Walsh Re: More small fixes to policycoreutils Stephen Smalley Re: More small fixes to policycoreutils Karl MacMillan Re: Question about setsebool.c Stephen Smalley Re: Question about setsebool.c Karl MacMillan Re: Question about setsebool.c Stephen Smalley Re: [PATCH 12/19] CacheFiles: Permit a process's create SID to be overridden Karl MacMillan Re: anyway to reverse a dontaudit rule? Stephen Smalley Re: [PATCH 12/19] CacheFiles: Permit a process's create SID to be overridden Stephen Smalley Re: [PATCH 12/19] CacheFiles: Permit a process's create SID to be overridden Stephen Smalley Re: Question about setsebool.c Joshua Brindle Re: More small fixes to policycoreutils Joshua Brindle Re: [redhat-lspp] mqueue filesystem labeling Stephen Smalley More small fixes to policycoreutils Daniel J Walsh Re: Multiple small fixes to policycoreutils Karl MacMillan Re: Compiling libsepol with -fPIC instead of -fpic Karl MacMillan Re: [redhat-lspp] labeled ipsec policy Casey Schaufler Re: [redhat-lspp] labeled ipsec policy Paul Moore Re: Question about setsebool.c Karl MacMillan Re: [PATCH 2/5] libselinux: labeling API basic front-end implementation Karl MacMillan Re: [PATCH 1/5] libselinux: labeling API basic front-end interface Karl MacMillan Re: [redhat-lspp] labeled ipsec policy Joy Latten Question about setsebool.c Yuichi Nakamura Sunday, 19 November Re: selinux meets lspp requirements Michael C Thompson Saturday, 18 November Re: [PATCH 00/13] NetLabel cleanups for 2.6.20 [GIT] James Morris Re: [PATCH 00/13] NetLabel cleanups for 2.6.20 [GIT] Paul Moore selinux meets lspp requirements Mohammad Mahmoudi Friday, 17 November Re: [PATCH 00/13] NetLabel cleanups for 2.6.20 [GIT] James Morris labeled ipsec policy Joy Latten Re: [PATCH 3/5] libselinux: security_class_to_string helper function KaiGai Kohei [PATCH 0/5] libselinux: one large patch Eamon Walsh [PATCH 5/5] libselinux: labeling API file_contexts backend Eamon Walsh [PATCH 12/13] SELinux: peer secid consolidation for external network labeling paul.moore_at_hp.com [PATCH 10/13] NetLabel: use cipso_v4_doi_search() for local CIPSOv4 functions paul.moore_at_hp.com [PATCH 09/13] NetLabel: use the correct CIPSOv4 MLS label limits paul.moore_at_hp.com [PATCH 13/13] NetLabel: honor the audit_enabled flag paul.moore_at_hp.com [PATCH 08/13] NetLabel: return the correct error for translated CIPSOv4 tags paul.moore_at_hp.com [PATCH 03/13] NetLabel: change netlbl_secattr_init() to return void paul.moore_at_hp.com [PATCH 02/13] NetLabel: convert the unlabeled accept flag to use RCU paul.moore_at_hp.com [PATCH 07/13] NetLabel: fixup the handling of CIPSOv4 tags to allow for multiple tag types paul.moore_at_hp.com [PATCH 11/13] NetLabel: SELinux cleanups paul.moore_at_hp.com [PATCH 00/13] NetLabel cleanups for 2.6.20 paul.moore_at_hp.com [PATCH 01/13] NetLabel: use gfp_t instead of int where it makes sense paul.moore_at_hp.com [PATCH 06/13] NetLabel: add tag verification when adding new CIPSOv4 DOI definitions paul.moore_at_hp.com [PATCH 05/13] NetLabel: check for a CIPSOv4 option before we do call into the CIPSOv4 layer paul.moore_at_hp.com [PATCH 04/13] NetLabel: make netlbl_lsm_secattr struct easier/quicker to understand paul.moore_at_hp.com Re: Latest Diffs Russell Coker Re: Trouble with gconf and Thunar James Carter Thursday, 16 November Trouble with gconf and Thunar Bradley Chapman Friday, 17 November Re: MLS policy constraints verification Daniel J Walsh Re: Latest Diffs Joshua Brindle Re: Latest Diffs Russell Coker Re: Multiple small fixes to policycoreutils Daniel J Walsh [PATCH 26/19] CacheFiles: Don't include linux/proc_fs.h David Howells Thursday, 16 November RE: Multiple small fixes to policycoreutils Joshua Brindle [PATCH 4/5] libselinux: labeling API simple backend Eamon Walsh Re: Multiple small fixes to policycoreutils Karl MacMillan [PATCH 3/5] libselinux: security_class_to_string helper function Eamon Walsh RE: [PATCH 0/5] libselinux: labeling API for userspace objectmanagers Eamon Walsh RE: [PATCH 0/5] libselinux: labeling API for userspace objectmanagers Joshua Brindle Re: [PATCH 0/5] libselinux: labeling API for userspace object managers Eamon Walsh [Fwd: [redhat-lspp] mqueue filesystem labeling] Michael C Thompson [PATCH] genhomedircon Michael C Thompson Re: Strange file context issues Bradley Chapman Re: Strange file context issues Erich Schubert Re: Strange file context issues Christopher J. PeBenito Re: Strange file context issues Bradley Chapman Re: Strange file context issues Christopher J. PeBenito Re: [PATCH 0/5] libselinux: labeling API for userspace object managers Joshua Brindle Re: [redhat-lspp] Re: anyway to reverse a dontaudit rule? Christopher J. PeBenito Re: Latest Diffs Christopher J. PeBenito Strange file context issues Bradley Chapman Re: [PATCH] labeled-ipsec-policy: Cleanup Christopher J. PeBenito Fwd: A good place to start? Bradley Chapman Wednesday, 15 November [PATCH 2/5] libselinux: labeling API basic front-end implementation Eamon Walsh [PATCH 1/5] libselinux: labeling API basic front-end interface Eamon Walsh [PATCH 0/5] libselinux: labeling API for userspace object managers Eamon Walsh RE: Multiple small fixes to policycoreutils Joshua Brindle Re: anyway to reverse a dontaudit rule? Karl MacMillan Re: Multiple small fixes to policycoreutils Karl MacMillan anyway to reverse a dontaudit rule? Joy Latten RE: Multiple small fixes to policycoreutils Joshua Brindle Re: Multiple small fixes to policycoreutils Daniel J Walsh Re: Multiple small fixes to policycoreutils Joshua Brindle Re: [PATCH 12/19] CacheFiles: Permit a process's create SID to be overridden David Howells Re: [PATCH 12/19] CacheFiles: Permit a process's create SID to be overridden David Howells Re: Multiple small fixes to policycoreutils Karl MacMillan Re: [PATCH 12/19] CacheFiles: Permit a process's create SID to be overridden David Howells Re: Security issues with local filesystem caching David Howells Re: [PATCH 12/19] CacheFiles: Permit a process's create SID to be overridden Karl MacMillan Re: [PATCH 12/19] CacheFiles: Permit a process's create SID to be overridden Karl MacMillan Re: Latest Diffs Russell Coker [PATCH 25/19] FS-Cache: NFS: Wait in releasepage() if FS-Cache is busy and __GFP_WAIT is set David Howells Re: [PATCH 05/19] NFS: Use local caching David Howells [PATCH 24/19] FS-Cache: NFS: Remove old support for R/W caching David Howells [PATCH 23/19] FS-Cache: NFS: Don't invoke FS-Cache from nfs_zap_caches() David Howells Re: [PATCH 12/19] CacheFiles: Permit a process's create SID to be overridden David Howells Re: [PATCH 12/19] CacheFiles: Permit a process's create SID to be overridden James Morris Re: [PATCH 12/19] CacheFiles: Permit a process's create SID to be overridden James Morris Re: Multiple small fixes to policycoreutils Joshua Brindle Re: [PATCH 19/19] CacheFiles: Permit daemon to probe inuseness of a cache file David Howells Re: [PATCH 05/19] NFS: Use local caching David Howells Re: Security issues with local filesystem caching David Howells Re: [PATCH 12/19] CacheFiles: Permit a process's create SID to be overridden David Howells Re: Latest Diffs Daniel J Walsh [PATCH 22/19] FS-Cache: NFS: Rename NFS_INO_CACHEABLE David Howells [PATCH 21/19] CacheFiles: Set the file creation security ID whilst binding the cache David Howells Re: [PATCH 12/19] CacheFiles: Permit a process's create SID to be overridden David Howells Re: [PATCH 20/19] CacheFiles: Use secid not sid lest confusion arise with session IDs David Howells Re: Latest Diffs Russell Coker Compiling libsepol with -fPIC instead of -fpic Manoj Srivastava Tuesday, 14 November Cleaning up selinux_socket_getpeersec_dgram() Paul Moore Re: [PATCH 16/19] CacheFiles: Deal with LSM when accessing the cache James Morris Re: [PATCH 12/19] CacheFiles: Permit a process's create SID to be overridden James Morris Re: Latest Diffs Daniel J Walsh [PATCH 05/19] NFS: Use local caching David Howells [PATCH 06/19] FS-Cache: NFS: Only obtain cache cookies on file open, not on inode read David Howells Re: Multiple small fixes to policycoreutils Daniel J Walsh [PATCH 13/19] CacheFiles: Add an act-as SID override in task_security_struct David Howells [PATCH 17/19] CacheFiles: Use the VFS wrappers for inode ops David Howells [PATCH 16/19] CacheFiles: Deal with LSM when accessing the cache David Howells [PATCH 12/19] CacheFiles: Permit a process's create SID to be overridden David Howells [PATCH 19/19] CacheFiles: Permit daemon to probe inuseness of a cache file David Howells [PATCH 04/19] FS-Cache: Make kAFS use FS-Cache David Howells [PATCH 09/19] CacheFiles: Permit the page lock state to be monitored David Howells [PATCH 08/19] CacheFiles: Add a function to write a single page of data to an inode David Howells [PATCH 10/19] CacheFiles: Export things for CacheFiles David Howells [PATCH 15/19] CacheFiles: Get the SID under which the CacheFiles module should operate David Howells [PATCH 02/19] FS-Cache: Provide a filesystem-specific sync'able page bit David Howells [PATCH 14/19] CacheFiles: Permit an inode's security ID to be obtained David Howells [PATCH 03/19] FS-Cache: Release page->private after failed readahead David Howells [PATCH 00/19] Permit filesystem local caching and NFS superblock sharing David Howells [PATCH 07/19] CacheFiles: Add missing copy_page export for ia64 David Howells Re: Security issues with local filesystem caching David Howells Re: Multiple small fixes to policycoreutils Christopher J. PeBenito Valid setrans.conf entries? Michael C Thompson Re: Multiple small fixes to policycoreutils Daniel J Walsh Re: I would like to propose that we add compression to handle allpolicy files on disk. Karl MacMillan Re: Multiple small fixes to policycoreutils Christopher J. PeBenito RE: I would like to propose that we add compression to handle allpolicy files on disk. Joshua Brindle Latest translation changes to policycoreutils Daniel J Walsh Multiple small fixes to policycoreutils Daniel J Walsh Re: I would like to propose that we add compression to handle allpolicy files on disk. Daniel J Walsh Re: [PATCH] MLS context contains policy/libselinux changes Christopher J. PeBenito Monday, 13 November Re: [PATCH] libselinux MLS range context contains for PAM/cron Stephen Smalley Re: [PATCH 0/8] make newrole suid (take 3) Stephen Smalley Re: [PATCH RFC] SELinux support for DCCP James Morris Re: [PATCH RFC] SELinux support for DCCP Paul Moore Re: [PATCH RFC] SELinux support for DCCP Paul Moore Re: Specify default type for a role Joshua Brindle RE: I would like to propose that we add compression to handle allpolicy files on disk. Joshua Brindle Re: I would like to propose that we add compression to handle allpolicy files on disk. Karl MacMillan RE: [PATCH 0/3] labeled-ipsec: Repost patchset with updates [Originally: mlsxfrm: Various Fixes] Joshua Brindle Specify default type for a role Michael C Thompson Re: Flask headers (Was: RE: [PATCH RFC] SELinux support for DCCP) James Morris Re: Flask headers (Was: RE: [PATCH RFC] SELinux support for DCCP) Stephen Smalley Re: Flask headers (Was: RE: [PATCH RFC] SELinux support for DCCP) Christopher J. PeBenito RE: [PATCH 0/3] labeled-ipsec: Repost patchset with updates [Originally: mlsxfrm: Various Fixes] Venkat Yekkirala Re: MLS policy constraints verification Christopher J. PeBenito Re: broken interface: userdom_common_user_template Christopher J. PeBenito Flask headers (Was: RE: [PATCH RFC] SELinux support for DCCP) Stephen Smalley Sunday, 12 November genhomedircon bug Michael C Thompson Saturday, 11 November MLS policy constraints verification Klaus Weidner RE: [PATCH RFC] SELinux support for DCCP Joshua Brindle Re: [PATCH RFC] SELinux support for DCCP James Morris RE: [PATCH RFC] SELinux support for DCCP James Morris RE: [PATCH RFC] SELinux support for DCCP Joshua Brindle Re: [PATCH RFC] SELinux support for DCCP James Morris Re: [PATCH RFC] SELinux support for DCCP James Morris Re: [PATCH 0/3] labeled-ipsec: Repost patchset with updates [Originally: mlsxfrm: Various Fixes] Joshua Brindle Re: [PATCH RFC] SELinux support for DCCP Joshua Brindle Re: [PATCH RFC] SELinux support for DCCP Eric Paris [PATCH RFC] SELinux support for DCCP James Morris Friday, 10 November [PATCH] labeled-ipsec-policy: Cleanup Venkat Yekkirala broken interface: userdom_common_user_template Michael C Thompson Thursday, 9 November RE: I would like to propose that we add compression to handle allpolicy files on disk. Stephen Smalley RE: I would like to propose that we add compression to handle allpolicy files on disk. Karl MacMillan Re: [PATCH 4/8] make newrole suid (take 3) Serge E. Hallyn RE: I would like to propose that we add compression to handle allpolicy files on disk. Stephen Smalley RE: I would like to propose that we add compression to handle allpolicy files on disk. Stephen Smalley RE: I would like to propose that we add compression to handle allpolicy files on disk. Stephen Smalley Re: [PATCH 4/8] make newrole suid (take 3) Stephen Smalley Re: [PATCH 4/8] make newrole suid (take 3) Michael C Thompson Re: [PATCH 4/8] make newrole suid (take 3) Stephen Smalley RE: I would like to propose that we add compression tohandleallpolicy files on disk. Chris Stone RE: I would like to propose that we add compression to handleallpolicy files on disk. Karl MacMillan RE: I would like to propose that we add compression to handleallpolicy files on disk. Joshua Brindle RE: I would like to propose that we add compression to handle allpolicy files on disk. Karl MacMillan Re: I would like to propose that we add compression to handle allpolicy files on disk. Daniel J Walsh Re: [PATCH 4/4] SELinux: validate kernel object classes and permissions James Morris Re: [PATCH 2/3] mlsxfrm: Various fixes Paul Moore RE: I would like to propose that we add compression to handle allpolicy files on disk. Joshua Brindle Re: [PATCH] libselinux MLS range context contains for PAM/cron Christopher J. PeBenito Re: [PATCH 4/8] make newrole suid (take 3) Serge E. Hallyn Re: [PATCH] cron changes needed for MLS range checking (requires at least the libselinux patches) James Antill Re: [PATCH] cron changes needed for MLS range checking (requires at least the libselinux patches) Stephen Smalley Re: I would like to propose that we add compression to handle all policy files on disk. Joshua Brindle Re: [PATCH] cron changes needed for MLS range checking (requires at least the libselinux patches) James Antill Re: [PATCH] libselinux MLS range context contains for PAM/cron Stephen Smalley Re: [PATCH 4/4] SELinux: validate kernel object classes and permissions Stephen Smalley Re: I would like to propose that we add compression to handle all policy files on disk. Stephen Smalley Re: I would like to propose that we add compression to handle all policy files on disk. Stephen Smalley Re: [PATCH] cron changes needed for MLS range checking (requires at least the libselinux patches) Stephen Smalley Re: I would like to propose that we add compression to handle all policy files on disk. Joshua Brindle RE: [PATCH 0/3] labeled-ipsec: Repost patchset with updates [Originally: mlsxfrm: Various Fixes] Venkat Yekkirala Re: [PATCH 4/8] make newrole suid (take 3) Stephen Smalley I would like to propose that we add compression to handle all policy files on disk. Daniel J Walsh Re: [PATCH 2/3] mlsxfrm: Various fixes James Morris Re: [PATCH 2/3] mlsxfrm: Various fixes Paul Moore Re: [PATCH 0/3] labeled-ipsec: Repost patchset with updates [Originally: mlsxfrm: Various Fixes] James Morris Re: [PATCH 2/3] mlsxfrm: Various fixes James Morris Re: [PATCH 4/8] make newrole suid (take 3) Serge E. Hallyn Wednesday, 8 November Re: [PATCH 2/3] mlsxfrm: Various fixes Paul Moore Re: [PATCH 2/3] mlsxfrm: Various fixes James Morris Re: [PATCH 2/3] mlsxfrm: Various fixes Paul Moore Re: [PATCH] cron changes needed for MLS range checking (requires at least the libselinux patches) James Antill [PATCH 3/3] labeled-ipsec: Fix SA selection semantics Venkat Yekkirala [PATCH 2/3] labeled-ipsec: Return correct context for SO_PEERSEC Venkat Yekkirala [PATCH 1/3] labeled-ipsec: Various fixes Venkat Yekkirala [PATCH 0/3] labeled-ipsec: Repost patchset with updates [Originally: mlsxfrm: Various Fixes] Venkat Yekkirala Re: [PATCH] cron changes needed for MLS range checking (requires at least the libselinux patches) Stephen Smalley RE: [PATCH 3/3] mlsxfrm: Various fixes Stephen Smalley Re: [PATCH] cron changes needed for MLS range checking (requires at least the libselinux patches) James Antill Re: [PATCH] cron changes needed for MLS range checking (requires at least the libselinux patches) Stephen Smalley Re: [PATCH] cron changes needed for MLS range checking (requires at least the libselinux patches) James Antill SELinux userland patches in Debia Manoj Srivastava Re: [PATCH 4/8] make newrole suid (take 3) Michael C Thompson RE: [PATCH 3/3] mlsxfrm: Various fixes Venkat Yekkirala RE: [PATCH 3/3] mlsxfrm: Various fixes Stephen Smalley Re: [PATCH 4/8] make newrole suid (take 3) Serge E. Hallyn RE: [PATCH 3/3] mlsxfrm: Various fixes Venkat Yekkirala RE: [PATCH 2/3] mlsxfrm: Various fixes Venkat Yekkirala Re: [PATCH] cron changes needed for MLS range checking (requires at least the libselinux patches) Stephen Smalley RE: [PATCH] MLS context contains policy/libselinux changes Stephen Smalley RE: [PATCH] MLS context contains policy/libselinux changes Joshua Brindle Re: [PATCH] MLS context contains policy/libselinux changes James Antill Re: [PATCH] MLS context contains policy/libselinux changes Joshua Brindle Tuesday, 7 November [PATCH] cron changes needed for MLS range checking (requires at least the libselinux patches) James Antill [PATCH] libselinux MLS range context contains for PAM/cron James Antill [PATCH] MLS context contains policy/libselinux changes James Antill Re: [PATCH 4/4] SELinux: validate kernel object classes and permissions James Morris Re: [PATCH 4/4] SELinux: validate kernel object classes and permissions Stephen Smalley Re: [PATCH 3/3] mlsxfrm: Various fixes Stephen Smalley Re: [PATCH 2/3] mlsxfrm: Various fixes James Morris Re: [PATCH 3/3] mlsxfrm: Various fixes Paul Moore Re: [PATCH 4/8] make newrole suid (take 3) Michael C Thompson Re: [PATCH 2/8] make newrole suid (take 3) Michael C Thompson Proposed patch for handling bindresvport call. Daniel J Walsh Re: [PATCH 1/3] mlsxfrm: Various fixes Eric Paris Re: [redhat-lspp] Policy for aide Daniel J Walsh [PATCH 3/3] mlsxfrm: Various fixes Venkat Yekkirala [PATCH 1/3] mlsxfrm: Various fixes Venkat Yekkirala [PATCH 2/3] mlsxfrm: Various fixes Venkat Yekkirala Re: [PATCH 4/8] make newrole suid (take 3) Serge E. Hallyn Monday, 6 November Re: [PATCH 2/8] make newrole suid (take 3) Serge E. Hallyn Re: [PATCH 4/4] SELinux: validate kernel object classes and permissions Stephen Smalley Re: [PATCH 4/4] SELinux: validate kernel object classes and permissions James Morris Re: [PATCH 2/4] SELinux: export object class and permission definitions James Morris Re: rpmlint Joshua Brindle Re: rpmlint Karl MacMillan ANN: SEDarwin Release Todd Miller [PATCH 4/4] SELinux: validate kernel object classes and permissions Chad Sellers [PATCH 3/4] SELinux: ensure keys constant in hashtab_search Chad Sellers [PATCH 2/4] SELinux: export object class and permission definitions Chad Sellers [PATCH 1/4] SELinux: remove current object class and permission validation mechanism Chad Sellers [PATCH 0/4] SELinux: Validate kernel object classes and permissions Chad Sellers Policy for aide Matt Anderson Re: rpmlint Karl MacMillan Re: rpmlint Joshua Brindle Re: rpmlint Karl MacMillan Latest policycoreutils patch - This time with the patch. Daniel J Walsh Latest policycoreutils patch Daniel J Walsh Re: [PATCH 4/4] SELinux: validate kernel object classes and permissions Stephen Smalley Sunday, 5 November Re: rpmlint Joshua Brindle Friday, 3 November Re: [PATCH 4/4] SELinux: validate kernel object classes and permissions James Morris Re: [PATCH 4/4] SELinux: validate kernel object classes and permissions Chad Sellers Re: [PATCH 4/4] SELinux: validate kernel object classes and permissions Stephen Smalley Re: [PATCH 2/4] SELinux: export object class and permission definitions Stephen Smalley [PATCH 4/4] SELinux: validate kernel object classes and permissions Chad Sellers [PATCH 3/4] SELinux: ensure keys constant in hashtab_search Chad Sellers [PATCH 0/4] SELinux: Validate kernel object classes and permissions Chad Sellers [PATCH 1/4] SELinux: remove current object class and permission validation mechanism Chad Sellers [PATCH 2/4] SELinux: export object class and permission definitions Chad Sellers Re: SELinux Networking Enhancements Joshua Brindle RE: How should I run genfscon in my module? Stephen Smalley Re: Security issues with local filesystem caching David Howells Re: Security issues with local filesystem caching David Howells RE: SELinux Networking Enhancements Venkat Yekkirala RE: SELinux Networking Enhancements Venkat Yekkirala rpmlint Steve Grubb Re: Security issues with local filesystem caching David Howells Thursday, 2 November [PATCH 8/8] make newrole suid (take 3) Michael C Thompson [PATCH 7/8] make newrole suid (take 3) Michael C Thompson [PATCH 6/8] make newrole suid (take 3) Michael C Thompson [PATCH 5/8] make newrole suid (take 3) Michael C Thompson [PATCH 4/8] make newrole suid (take 3) Michael C Thompson [PATCH 3/8] make newrole suid (take 3) Michael C Thompson [PATCH 2/8] make newrole suid (take 3) Michael C Thompson [PATCH 1/8] make newrole suid (take 3) Michael C Thompson [PATCH 0/8] make newrole suid (take 3) Michael C Thompson Re: [PATCH 3/4] newrole suid functionality (take 2) Michael C Thompson Re: Security issues with local filesystem caching David Howells Re: [PATCH 3/4] newrole suid functionality (take 2) Stephen Smalley Re: Security issues with local filesystem caching David Howells Re: [PATCH 3/4] newrole suid functionality (take 2) Michael C Thompson Re: Security issues with local filesystem caching Stephen Smalley Re: MLS + MCS? Christopher J. PeBenito Re: [PATCH 0/4] newrole suid functionality (take 2) Michael C Thompson Re: [PATCH 3/4] newrole suid functionality (take 2) Stephen Smalley RE: SELinux Networking Enhancements Christopher J. PeBenito Re: [PATCH 0/4] newrole suid functionality (take 2) Stephen Smalley Re: Security issues with local filesystem caching Stephen Smalley RE: SELinux Networking Enhancements Joshua Brindle Re: SELinux Networking Enhancements Paul Moore RE: SELinux Networking Enhancements Venkat Yekkirala RE: SELinux Networking Enhancements Venkat Yekkirala Re: [PATCH 3/4] newrole suid functionality (take 2) Michael C Thompson RE: SELinux Networking Enhancements James Morris RE: SELinux Networking Enhancements Joshua Brindle Re: [PATCH 0/4] newrole suid functionality (take 2) Michael C Thompson Re: Security issues with local filesystem caching David Howells RE: SELinux Networking Enhancements Venkat Yekkirala RE: SELinux Networking Enhancements Venkat Yekkirala RE: SELinux Networking Enhancements Venkat Yekkirala Re: MLS + MCS? Michael C Thompson RE: SELinux Networking Enhancements Joshua Brindle RE: SELinux Networking Enhancements James Morris RE: SELinux Networking Enhancements James Morris Re: MLS + MCS? Christopher J. PeBenito RE: SELinux Networking Enhancements Joshua Brindle Re: Security issues with local filesystem caching Karl MacMillan RE: SELinux Networking Enhancements Venkat Yekkirala RE: SELinux Networking Enhancements Venkat Yekkirala MLS + MCS? Michael C Thompson RE: SELinux Networking Enhancements Venkat Yekkirala Re: SELinux Networking Enhancements Paul Moore RE: How should I run genfscon in my module? Karl MacMillan RE: SELinux Networking Enhancements Venkat Yekkirala Re: Policy tests failed Daniel Gil Mayol Re: Policy tests failed Stephen Smalley Re: Policy tests failed Daniel Gil Mayol Wednesday, 1 November Re: SELinux Networking Enhancements Paul Moore RE: SELinux Networking Enhancements Venkat Yekkirala RE: SELinux Networking Enhancements Joshua Brindle RE: SELinux Networking Enhancements James Morris RE: SELinux Networking Enhancements Joshua Brindle RE: SELinux Networking Enhancements Venkat Yekkirala Re: SELinux Networking Enhancements Paul Moore RE: How should I run genfscon in my module? Stephen Smalley RE: SELinux Networking Enhancements Christopher J. PeBenito Re: SELinux Networking Enhancements Paul Moore RE: SELinux Networking Enhancements Joshua Brindle Re: Security issues with local filesystem caching Stephen Smalley Re: SELinux Networking Enhancements Paul Moore Re: Security issues with local filesystem caching Stephen Smalley Re: SELinux Networking Enhancements James Morris Tuesday, 31 October Re: How should I run genfscon in my module? Karl MacMillan Wednesday, 1 November RE: How should I run genfscon in my module? Joshua Brindle RE: How should I run genfscon in my module? Karl MacMillan Re: SELinux Networking Enhancements Paul Moore Re: SELinux Networking Enhancements James Morris Re: Security issues with local filesystem caching Karl MacMillan RE: SELinux Networking Enhancements Venkat Yekkirala Re: New MLS constraint? Christopher J. PeBenito Re: Security issues with local filesystem caching David Howells RE: How should I run genfscon in my module? Joshua Brindle Re: How should I run genfscon in my module? Karl MacMillan Re: SELinux Networking Enhancements Paul Moore RE: Question on checks against unlabeled Christopher J. PeBenito RE: SELinux Networking Enhancements Christopher J. PeBenito Re: How should I run genfscon in my module? Stephen Smalley Re: Security issues with local filesystem caching Stephen Smalley Re: [PATCH 2/3] Re: MLS enforcing PTYs, sshd, and newrole Stephen Smalley Tuesday, 31 October RE: SELinux Networking Enhancements James Morris Re: New MLS constraint? Matt Anderson RE: User object manager context location Eamon Walsh Monday, 30 October Re: Question on checks against unlabeled Trent Jaeger Tuesday, 31 October Re: Security issues with local filesystem caching David Howells Re: Latest Diffs Christopher J. PeBenito RE: SELinux Networking Enhancements Venkat Yekkirala Re: Security issues with local filesystem caching David Howells RE: [PATCH] libsepol users in non-mls policy bugfix Joshua Brindle Re: [PATCH 2/3] Re: MLS enforcing PTYs, sshd, and newrole James Antill RE: [PATCH] libsepol users in non-mls policy bugfix Stephen Smalley Re: Security issues with local filesystem caching Stephen Smalley Re: [PATCH 2/3] Re: MLS enforcing PTYs, sshd, and newrole Stephen Smalley Re: Security issues with local filesystem caching David Howells Re: [PATCH 2/3] Re: MLS enforcing PTYs, sshd, and newrole James Antill Re: A good place to start? Stephen Smalley RE: Question on checks against unlabeled Venkat Yekkirala Re: [PATCH 2/3] Re: MLS enforcing PTYs, sshd, and newrole Stephen Smalley Re: [PATCH 2/3] Re: MLS enforcing PTYs, sshd, and newrole James Antill Re: [redhat-lspp] Re: MLS enforcing PTYs, sshd, and newrole Stephen Smalley Re: [PATCH 2/3] Re: MLS enforcing PTYs, sshd, and newrole Stephen Smalley Re: [PATCH 2/3] Re: MLS enforcing PTYs, sshd, and newrole Stephen Smalley Re: [PATCH 1/3] Re: MLS enforcing PTYs, sshd, and newrole Stephen Smalley Monday, 30 October RE: [PATCH] libsepol users in non-mls policy bugfix Joshua Brindle Re: [patch 1/1] NetLabel: protect the CIPSOv4 socket option from setsockopt() Paul Moore Re: [patch 1/1] NetLabel: protect the CIPSOv4 socket option from setsockopt() Eric Paris RE: User object manager context location James Carter Question on checks against unlabeled Venkat Yekkirala Re: [PATCH 3/3] Re: MLS enforcing PTYs, sshd, and newrole James Antill [PATCH 2/3] Re: MLS enforcing PTYs, sshd, and newrole James Antill [PATCH 1/3] Re: MLS enforcing PTYs, sshd, and newrole James Antill Re: [patch 1/1] NetLabel: protect the CIPSOv4 socket option from setsockopt() James Morris RE: [PATCH] libsepol users in non-mls policy bugfix Karl MacMillan Re: [PATCH] libsepol users in non-mls policy bugfix Darrel Goeddel RE: SELinux Networking Enhancements James Morris RE: SELinux Networking Enhancements Joshua Brindle RE: SELinux Networking Enhancements James Morris RE: SELinux Networking Enhancements Joshua Brindle RE: [PATCH] libsepol users in non-mls policy bugfix Joshua Brindle RE: SELinux Networking Enhancements James Morris Re: [PATCH] libsepol users in non-mls policy bugfix Karl MacMillan [patch 1/1] NetLabel: protect the CIPSOv4 socket option from setsockopt() paul.moore_at_hp.com [patch 0/1] NetLabel bugfix for 2.6.19 paul.moore_at_hp.com A good place to start? Bradley Chapman Re: Security issues with local filesystem caching David Howells [PATCH] libsepol users in non-mls policy bugfix Joshua Brindle Sunday, 29 October Re: New to SELinux -- any suggestions? Joshua Brindle is targeted/MCS a lost cause? Russell Coker Re: New to SELinux -- any suggestions? Russell Coker Re: New to SELinux -- any suggestions? Michael Graffam Re: New to SELinux -- any suggestions? Russell Coker Re: New to SELinux -- any suggestions? Michael Graffam Saturday, 28 October Re: New to SELinux -- any suggestions? Russell Coker New to SELinux -- any suggestions? Michael Graffam RE: User object manager context location Joshua Brindle Re: Object manager for X-Window Joshua Brindle Object manager for X-Window Salvo Giuffrida Friday, 27 October Re: [redhat-lspp] Re: MLS enforcing PTYs, sshd, and newrole Russell Coker RE: User object manager context location Eamon Walsh RE: User object manager context location Joshua Brindle RE: User object manager context location Eamon Walsh RE: User object manager context location James Carter RE: User object manager context location Joshua Brindle RE: User object manager context location Eamon Walsh RE: User object manager context location Eamon Walsh RE: User object manager context location Stephen Smalley RE: User object manager context location Joshua Brindle Re: Security issues with local filesystem caching Stephen Smalley Re: Security issues with local filesystem caching David Howells Re: Security issues with local filesystem caching David Howells Re: User object manager context location Eamon Walsh Re: Security issues with local filesystem caching Stephen Smalley Re: Security issues with local filesystem caching Stephen Smalley Re: Security issues with local filesystem caching David Howells Re: Security issues with local filesystem caching David Howells Re: Security issues with local filesystem caching Stephen Smalley Re: Security issues with local filesystem caching David Howells Re: [redhat-lspp] Re: MLS enforcing PTYs, sshd, and newrole Valdis.Kletnieks_at_vt.edu Re: User object manager context location James Carter Re: User object manager context location Stephen Smalley Re: Security issues with local filesystem caching Stephen Smalley Re: Security issues with local filesystem caching Stephen Smalley Re: Security issues with local filesystem caching David Howells User object manager context location Joshua Brindle Thursday, 26 October Re: Security issues with local filesystem caching David Howells [RFC] protect NetLabel options from setsockopt (was: socket options ... again) Paul Moore Re: socket options ... again Paul Moore Re: socket options ... again Paul Moore Re: socket options ... again Stephen Smalley Re: Security issues with local filesystem caching Stephen Smalley Re: socket options ... again Paul Moore Re: Security issues with local filesystem caching David Howells Re: socket options ... again Stephen Smalley Re: Security issues with local filesystem caching Stephen Smalley socket options ... again Paul Moore Re: Security issues with local filesystem caching David Howells Re: [redhat-lspp] Re: MLS enforcing PTYs, sshd, and newrole Daniel J Walsh Re: Security issues with local filesystem caching Stephen Smalley Re: Security issues with local filesystem caching David Howells Re: Security issues with local filesystem caching David Howells Re: Security issues with local filesystem caching David Howells Re: Security issues with local filesystem caching David Howells Re: vserver and vprocunhide Daniel Gil Mayol Wednesday, 25 October Re: [redhat-lspp] Re: MLS enforcing PTYs, sshd, and newrole Stephen Smalley Re: Security issues with local filesystem caching Stephen Smalley Re: [redhat-lspp] Re: MLS enforcing PTYs, sshd, and newrole Stephen Smalley Re: [redhat-lspp] Re: MLS enforcing PTYs, sshd, and newrole James Antill Re: Security issues with local filesystem caching David Howells Re: Security issues with local filesystem caching David Howells Re: Security issues with local filesystem caching Nate Diller Re: [redhat-lspp] Re: MLS enforcing PTYs, sshd, and newrole Stephen Smalley Re: [redhat-lspp] Re: MLS enforcing PTYs, sshd, and newrole James Antill Re: vserver and vprocunhide Stephen Smalley Re: [redhat-lspp] Re: MLS enforcing PTYs, sshd, and newrole Stephen Smalley Re: [redhat-lspp] Re: MLS enforcing PTYs, sshd, and newrole Stephen Smalley Security issues with local filesystem caching David Howells Re: vserver and vprocunhide Daniel Gil Mayol RE: Policy tests failed Nayak Debabrata-a22788 Tuesday, 24 October Re: [redhat-lspp] Re: MLS enforcing PTYs, sshd, and newrole George C. Wilson Re: [redhat-lspp] Re: MLS enforcing PTYs, sshd, and newrole James Antill ANN: SELinux Policy IDE (SLIDE) Dave Sugar Re: [PATCH] libsepol: fix version comparison when writing policies Karl MacMillan Re: vserver and vprocunhide Stephen Smalley Re: vserver and vprocunhide Stephen Smalley Re: [PATCH] libsepol: fix version comparison when writing policies Joshua Brindle Re: [PATCH] libsepol: fix version comparison when writing policies Stephen Smalley Latest Diffs Daniel J Walsh [PATCH] libsepol: fix version comparison when writing policies Darrel Goeddel RE: SELinux Networking Enhancements Venkat Yekkirala Re: [PATCH 3/4] reference policy support for setransd enhancement Christopher J. PeBenito Re: vserver and vprocunhide Daniel Gil Mayol Re: vserver and vprocunhide Daniel Gil Mayol Monday, 23 October RE: Denials from newest kernel Christopher J. PeBenito RE: SELinux Networking Enhancements James Morris Re: [PATCH 4/4] newrole suid functionality (take 2) Michael C Thompson Re: [PATCH 3/4] newrole suid functionality (take 2) Michael C Thompson Re: [PATCH 0/4] newrole suid functionality (take 2) Michael C Thompson Re: [PATCH 4/4] newrole suid functionality (take 2) Stephen Smalley Re: [PATCH 3/4] newrole suid functionality (take 2) Stephen Smalley Re: [PATCH 0/4] newrole suid functionality (take 2) Stephen Smalley Re: [redhat-lspp] Re: MLS enforcing PTYs, sshd, and newrole Casey Schaufler Re: vserver and vprocunhide Stephen Smalley RE: Denials from newest kernel Venkat Yekkirala Re: [redhat-lspp] Re: MLS enforcing PTYs, sshd, and newrole Paul Moore Re: [redhat-lspp] Re: MLS enforcing PTYs, sshd, and newrole Casey Schaufler RE: SELinux Networking Enhancements Venkat Yekkirala Re: [redhat-lspp] Re: MLS enforcing PTYs, sshd, and newrole James Antill vserver and vprocunhide Daniel Gil Mayol RE: Booleans and tunable_policy Christopher J. PeBenito Re: Policy tests failed Stephen Smalley Re: Policy tests failed Daniel Gil Mayol Sunday, 22 October Booleans and tunable_policy Salvo Giuffrida Saturday, 21 October Re: [redhat-lspp] Re: MLS enforcing PTYs, sshd, and newrole Casey Schaufler Friday, 20 October RE: SELinux Networking Enhancements James Morris Re: Policy tests failed Stephen Smalley RE: SELinux Networking Enhancements Venkat Yekkirala RE: rpm throws error with selinux enabled Osborn, Justin D. Re: Policy tests failed Daniel Gil Mayol RE: Denials from newest kernel Christopher J. PeBenito Re: [redhat-lspp] Re: MLS enforcing PTYs, sshd, and newrole Russell Coker Thursday, 19 October RE: SELinux Networking Enhancements James Morris Re: Policy tests failed Stephen Smalley Re: [redhat-lspp] Re: MLS enforcing PTYs, sshd, and newrole Daniel J Walsh RE: SELinux Networking Enhancements Venkat Yekkirala Re: SELinux Networking Enhancements Joshua Brindle RE: Denials from newest kernel Venkat Yekkirala RE: SELinux Networking Enhancements Venkat Yekkirala Policy tests failed Daniel Gil Mayol Re: allow tomcat_t self:capability 0x80000000; ?? Stephen Smalley Re: rpm throws error with selinux enabled Daniel J Walsh Re: nfs mount takes long time on x86 rhel4 u4 with selinux enabled Daniel J Walsh Re: [redhat-lspp] Re: MLS enforcing PTYs, sshd, and newrole Stephen Smalley Re: allow tomcat_t self:capability 0x80000000; ?? Daniel Gil Mayol Re: [redhat-lspp] Re: MLS enforcing PTYs, sshd, and newrole Daniel J Walsh Re: [PATCH 1/4] libselinux flask definition update for context class Stephen Smalley Re: [redhat-lspp] Re: MLS enforcing PTYs, sshd, and newrole Stephen Smalley Re: [redhat-lspp] Re: MLS enforcing PTYs, sshd, and newrole Steve Grubb Re: [redhat-lspp] Re: MLS enforcing PTYs, sshd, and newrole Stephen Smalley Re: policy issues in 2.3.18-10 - sshd & polyinstantiation Daniel J Walsh Re: allow tomcat_t self:capability 0x80000000; ?? Stephen Smalley ANN: Reference Policy Release Christopher J. PeBenito Re: policy issues in 2.3.18-10 - sshd & polyinstantiation Stephen Smalley Re: allow tomcat_t self:capability 0x80000000; ?? Daniel Gil Mayol Re: policy issues in 2.3.18-10 - sshd & polyinstantiation Daniel J Walsh Re: allow tomcat_t self:capability 0x80000000; ?? Stephen Smalley allow tomcat_t self:capability 0x80000000; ?? Daniel Gil Mayol Wednesday, 18 October ANN: Updated SELinux Release Stephen Smalley RE: SELinux Networking Enhancements Joshua Brindle RE: SELinux Networking Enhancements Venkat Yekkirala Re: SELinux Networking Enhancements Joe Nall Re: Denials from newest kernel Christopher J. PeBenito RE: SELinux Networking Enhancements Joshua Brindle Re: SID/Context Mapping Joshua Brindle Tuesday, 17 October SID/Context Mapping I_am alone Re: policy issues in 2.3.18-10 - sshd & polyinstantiation Klaus Weidner performance of security_context_to_sid Eric Paris policy issues in 2.3.18-10 - sshd & polyinstantiation Michael C Thompson Re: Denials from newest kernel Darrel Goeddel Re: [PATCH 0/4] newrole suid functionality (take 2) Michael C Thompson [PATCH 4/4] newrole suid functionality (take 2) Michael C Thompson [PATCH 3/4] newrole suid functionality (take 2) Michael C Thompson [PATCH 1/4] newrole suid functionality (take 2) Michael C Thompson [PATCH 0/4] newrole suid functionality (take 2) Michael C Thompson Re: Denials from newest kernel Christopher J. PeBenito Re: [PATCH 1/4] libselinux flask definition update for context class Eric Paris Re: [PATCH 1/4] libselinux flask definition update for context class Darrel Goeddel Re: Denials from newest kernel Darrel Goeddel Re: [PATCH 1/4] libselinux flask definition update for context class Joshua Brindle [PATCH 4/4] implement setransd access check for translations Darrel Goeddel [PATCH 3/4] reference policy support for setransd enhancement Darrel Goeddel [PATCH 2/4] kernel flask definition update for context class Darrel Goeddel [PATCH 1/4] libselinux flask definition update for context class Darrel Goeddel Re: [PATCH 1/1] Reworked patch for restorecon Stephen Smalley RE: Denials from newest kernel Christopher J. PeBenito Monday, 16 October Re: Denials from newest kernel Paul Moore Re: New MLS constraint? Matt Anderson RE: Denials from newest kernel Venkat Yekkirala Re: New MLS constraint? Christopher J. PeBenito RE: Denials from newest kernel Christopher J. PeBenito New MLS constraint? Matt Anderson RE: SELinux Networking Enhancements Venkat Yekkirala RE: SELinux Networking Enhancements Venkat Yekkirala RE: Denials from newest kernel Venkat Yekkirala RE: Denials from newest kernel Venkat Yekkirala RE: Denials from newest kernel Christopher J. PeBenito RE: Denials from newest kernel Venkat Yekkirala RE: Denials from newest kernel Christopher J. PeBenito Re: SELinux Networking Enhancements Joshua Brindle RE: Denials from newest kernel Christopher J. PeBenito RE: SE-X Joshua Brindle Re: SE-X Salvo Giuffrida Sunday, 15 October SELinux Networking Enhancements Venkat Yekkirala Re: SE-X Joshua Brindle Userspace object managers Salvo Giuffrida SE-X Salvo Giuffrida Saturday, 14 October RE: Denials from newest kernel Venkat Yekkirala RE: Denials from newest kernel James Morris Re: Denials from newest kernel Paul Moore RE: Denials from newest kernel Venkat Yekkirala RE: Denials from newest kernel Venkat Yekkirala Re: Denials from newest kernel Paul Moore Re: Denials from newest kernel Paul Moore Re: Denials from newest kernel James Morris Friday, 13 October RE: Denials from newest kernel Venkat Yekkirala RE: DOCUMENTATION OF SECID RECONCILIATION AND FLOW CONTROL FOR POLICY WRITERS Venkat Yekkirala RE: DOCUMENTATION OF SECID RECONCILIATION AND FLOW CONTROL FOR POLICY WRITERS Venkat Yekkirala Re: DOCUMENTATION OF SECID RECONCILIATION AND FLOW CONTROL FOR POLICY WRITERS Venkat Yekkirala Re: Denials from newest kernel Paul Moore Re: context_sensitivity_{get\|set} Joe Nall RE: Denials from newest kernel Venkat Yekkirala Re: context_sensitivity_{get\|set} Casey Schaufler Re: [patch 1/1] removal of unused private.h from libsemanage Stephen Smalley Re: [patch 1/1] removal of unused private.h from libsemanage Joshua Brindle Re: DOCUMENTATION OF SECID RECONCILIATION AND FLOW CONTROL FOR POLICY WRITERS Christopher J. PeBenito Re: context_sensitivity_{get\|set} Stephen Smalley Re: context_sensitivity_{get\|set} Linda Knippers [ANN] SETools - 3.0 Jeremy A. Mowery Re: context_sensitivity_{get\|set} Stephen Smalley Re: context_sensitivity_{get\|set} Casey Schaufler Re: context_sensitivity_{get\|set} Stephen Smalley Re: context_sensitivity_{get\|set} Klaus Weidner Re: context_sensitivity_{get\|set} Casey Schaufler Re: context_sensitivity_{get\|set} Stephen Smalley Re: context_sensitivity_{get\|set} Stephen Smalley Re: context_sensitivity_{get\|set} Matt Anderson Re: context_sensitivity_{get\|set} Paul Moore Re: context_sensitivity_{get\|set} Paul Moore Re: context_sensitivity_{get\|set} Klaus Weidner RE: Denials from newest kernel Christopher J. PeBenito Re: context_sensitivity_{get\|set} Stephen Smalley Thursday, 12 October Re: [PATCH 0/3] Collection of small NetLabel bugfixes James Morris RE: Denials from newest kernel Venkat Yekkirala context_sensitivity_{get\|set} Matt Anderson RE: Denials from newest kernel Christopher J. PeBenito Re: [redhat-lspp] Re: MLS enforcing PTYs, sshd, and newrole Casey Schaufler Re: MLS enforcing PTYs, sshd, and newrole Casey Schaufler Re: MLS enforcing PTYs, sshd, and newrole Michael C Thompson Re: [PATCH 1/2] Reference policy: NetLabel policy additions Paul Moore Re: MLS enforcing PTYs, sshd, and newrole Klaus Weidner Re: [PATCH 1/2] Reference policy: NetLabel policy additions Christopher J. PeBenito Re: MLS enforcing PTYs, sshd, and newrole Russell Coker MLS enforcing PTYs, sshd, and newrole Klaus Weidner RE: [PATCH 00/11] The _entire_ secid reconciliation patchset (tada!) James Morris RE: Denials from newest kernel James Morris Wednesday, 11 October [PATCH 3/3] NetLabel: the CIPSOv4 passthrough mapping does not pass categories correctly paul.moore_at_hp.com [PATCH 1/3] NetLabel: only deref the CIPSOv4 standard map fields when using standard mapping paul.moore_at_hp.com [PATCH 0/3] Collection of small NetLabel bugfixes paul.moore_at_hp.com [PATCH 2/3] NetLabel: better error handling involving mls_export_cat() paul.moore_at_hp.com [PATCH 1/2] Reference policy: NetLabel policy additions paul.moore_at_hp.com [PATCH 2/2] Reference policy: Restrict NetLabel to same MLS label connections by default paul.moore_at_hp.com [PATCH 0/2] NetLabel policy additions for the reference policy paul.moore_at_hp.com Re: security_compute_av Stephen Smalley RE: [PATCH 00/11] The _entire_ secid reconciliation patchset (tada!) Venkat Yekkirala RE: Denials from newest kernel Venkat Yekkirala Re: security_compute_av Salvo Giuffrida Re: security_compute_av Stephen Smalley security_compute_av Salvo Giuffrida Re: PATCH: fix memory leak in setfiles.c Joshua Brindle Re: PATCH: fix memory leaks in matchpathcon.c Joshua Brindle Tuesday, 10 October Re: [PATCH 1/4] make newrole suid Michael C Thompson Re: [PATCH 1/4] make newrole suid Michael C Thompson Re: [RFC 1/2] Reference policy: NetLabel policy additions Paul Moore Re: [PATCH 1/4] make newrole suid Stephen Smalley Re: [PATCH 1/4] make newrole suid Stephen Smalley RE: Denials from newest kernel Christopher J. PeBenito RE: Denials from newest kernel Venkat Yekkirala Re: [RFC 1/2] Reference policy: NetLabel policy additions Paul Moore Re: [PATCH 1/1] Reworked patch for restorecon Stephen Smalley RE: Denials from newest kernel Karl MacMillan RE: Denials from newest kernel Venkat Yekkirala RE: Denials from newest kernel Christopher J. PeBenito Re: [RFC 2/2] Reference policy: Restrict NetLabel to same MLS label connections by default Christopher J. PeBenito Re: [RFC 1/2] Reference policy: NetLabel policy additions Christopher J. PeBenito [RFC 2/2] Reference policy: Restrict NetLabel to same MLS label connections by default paul.moore_at_hp.com [RFC 0/2] NetLabel changes for Reference policy paul.moore_at_hp.com [RFC 1/2] Reference policy: NetLabel policy additions paul.moore_at_hp.com Re: nfs mount takes long time on x86 rhel4 u4 with selinux enabled abcde efghi RE: Denials from newest kernel Venkat Yekkirala RE: Denials from newest kernel Joshua Brindle RE: Denials from newest kernel Venkat Yekkirala Re: nfs mount takes long time on x86 rhel4 u4 with selinux enabled Russell Coker RE: Denials from newest kernel Venkat Yekkirala RE: Denials from newest kernel Christopher J. PeBenito Re: nfs mount takes long time on x86 rhel4 u4 with selinux enabled abcde efghi RE: Denials from newest kernel Venkat Yekkirala Re: [PATCH 4/4] Validate kernel object classes and permissions Chad Sellers RE: Denials from newest kernel Christopher J. PeBenito Re: PATCH: fix memory leaks in matchpathcon.c Stephen Smalley Re: Who is responsible for role assignment? Stephen Smalley Re: [PATCH 4/4] Validate kernel object classes and permissions Stephen Smalley Re: glibc error on rhel4 Russell Coker Re: nfs mount takes long time on x86 rhel4 u4 with selinux enabled Russell Coker glibc error on rhel4 abcde efghi nfs mount takes long time on x86 rhel4 u4 with selinux enabled abcde efghi rpm throws error with selinux enabled abcde efghi Monday, 9 October RE: Denials from newest kernel Joshua Brindle RE: Denials from newest kernel Venkat Yekkirala Re: [PATCH 00/11] The _entire_ secid reconciliation patchset (tada!) James Morris Re: [PATCH 00/11] The _entire_ secid reconciliation patchset (tada!) Paul Moore Re: [PATCH 00/11] The _entire_ secid reconciliation patchset (tada!) James Morris [PATCH 07/11] secid reconciliation: Enforcement for SELinux paul.moore_at_hp.com [PATCH 02/11] secid reconciliation: Add LSM hooks paul.moore_at_hp.com [PATCH 03/11] secid reconciliation: Invoke LSM hook for inbound traffic paul.moore_at_hp.com [PATCH 11/11] secid reconciliation: support for NetLabel paul.moore_at_hp.com [PATCH 09/11] secid reconciliation: Track peersecid at connection establishment paul.moore_at_hp.com [PATCH 10/11] secid reconciliation: various fixes paul.moore_at_hp.com [PATCH 01/11] secid reconciliation: new SELinux flask definitions paul.moore_at_hp.com [PATCH 08/11] secid reconciliation: Use secmark when classifying flow using skb paul.moore_at_hp.com [PATCH 00/11] The _entire_ secid reconciliation patchset (tada!) paul.moore_at_hp.com [PATCH 04/11] secid reconciliation: Invoke LSM hook for outbound traffic paul.moore_at_hp.com [PATCH 06/11] secid reconciliation: Label locally generated IPv4 traffic paul.moore_at_hp.com [PATCH 05/11] secid reconciliation: Label locally generated IPv6 traffic paul.moore_at_hp.com Re: DOCUMENTATION OF SECID RECONCILIATION AND FLOW CONTROL FOR POLICY WRITERS Venkat Yekkirala Re: [PATCH 2/4] make newrole suid Michael C Thompson PATCH: fix memory leak in setfiles.c Todd Miller RE: [PATCH 0/1] selinux: secid reconciliation fixes V01 Venkat Yekkirala PATCH: fix memory leaks in matchpathcon.c Todd Miller RE: [PATCH 0/1] selinux: secid reconciliation fixes V01 James Morris RE: [PATCH 1/1] selinux: secid reconciliation fixes V02 Venkat Yekkirala Re: [PATCH 1/1] selinux: secid reconciliation fixes V02 Paul Moore RE: [PATCH 0/1] selinux: secid reconciliation fixes V01 Venkat Yekkirala Re: [PATCH 0/1] selinux: secid reconciliation fixes V01: Intro Paul Moore Re: [PATCH 1/1] selinux: secid reconciliation fixes V02 Paul Moore RE: [PATCH 1/1] selinux: secid reconciliation fixes V02 Venkat Yekkirala Re: [PATCH 1/1] selinux: secid reconciliation fixes V02 Paul Moore RE: [PATCH 0/3] Fix for IPsec leakage with SELinux enabled - V.03 Venkat Yekkirala [PATCH 0/1] selinux: secid reconciliation fixes V02: Repost patchset with updates Venkat Yekkirala [PATCH 1/1] selinux: secid reconciliation fixes V02 Venkat Yekkirala Re: [PATCH 0/1] selinux: secid reconciliation fixes V01: Intro James Morris Re: [PATCH 0/1] selinux: secid reconciliation fixes V01: Intro Paul Moore RE: [PATCH 0/1] selinux: secid reconciliation fixes V01 James Morris RE: [PATCH 0/1] selinux: secid reconciliation fixes V01 Venkat Yekkirala RE: Denials from newest kernel Joshua Brindle RE: [PATCH 0/1] selinux: secid reconciliation fixes V01: Intro Venkat Yekkirala Re: [PATCH 0/1] selinux: secid reconciliation fixes V01 James Morris Re: MMCS patch against subversion policy Christopher J. PeBenito Re: Who is responsible for role assignment? Salvo Giuffrida SELinux Symposium CFP extended Joshua Brindle Re: [PATCH 0/1] selinux: secid reconciliation fixes V01: Intro Joshua Brindle DOCUMENTATION OF SECID RECONCILIATION AND FLOW CONTROL FOR POLICY WRITERS Venkat Yekkirala [PATCH 0/1] selinux: secid reconciliation fixes V01 Venkat Yekkirala [PATCH 0/1] selinux: secid reconciliation fixes V01: Intro Venkat Yekkirala Re: Who is responsible for role assignment? Joshua Brindle Who is responsible for role assignment? Salvo Giuffrida Saturday, 7 October Re: [PATCH 1/1] selinux: Null-out secmark after use - V.02 James Morris Re: MMCS patch against subversion policy Russell Coker Re: MMCS patch against subversion policy Daniel J Walsh Re: MMCS patch against subversion policy Russell Coker Re: MMCS patch against subversion policy Daniel J Walsh Friday, 6 October Re: MMCS patch against subversion policy Russell Coker RE: Labeled Networking For LSPP: Where we are and where we need t o go (quickly) Venkat Yekkirala Re: [PATCH 4/4] make newrole suid Michael C Thompson Re: [PATCH 4/4] Validate kernel object classes and permissions Chad Sellers [PATCH 4/4] make newrole suid Michael C Thompson [PATCH 3/4] make newrole suid Michael C Thompson Re: [PATCH 2/4] Remove current validation mechanism Chad Sellers [PATCH 2/4] make newrole suid Michael C Thompson [PATCH 1/4] make newrole suid Michael C Thompson [PATCH 1/1] Reworked patch for restorecon Karl MacMillan Re: [PATCH 1/1] selinux: Null-out secmark after use Venkat Yekkirala [PATCH 1/1] selinux: Null-out secmark after use - V.02 Venkat Yekkirala Re: [RFC PATCH] newrole suid breakdown Stephen Smalley Re: [PATCH 1/1] selinux: Null-out secmark after use Venkat Yekkirala [PATCH 1/1] selinux: Null-out secmark after use Venkat Yekkirala Re: [RFC PATCH] newrole suid breakdown Michael C Thompson Re: [PATCH 4/4] Validate kernel object classes and permissions Stephen Smalley RE: Denials from newest kernel Venkat Yekkirala Re: Denials from newest kernel Paul Moore RE: Denials from newest kernel Venkat Yekkirala RE: Denials from newest kernel Venkat Yekkirala Re: [PATCH 2/4] Remove current validation mechanism Stephen Smalley Re: [PATCH 1/4] Bug fix in polidydb_destroy James Morris Re: Denials from newest kernel Christopher J. PeBenito [PATCH 3/4] Export object class and permission definitions Chad Sellers [PATCH 4/4] Validate kernel object classes and permissions Chad Sellers [PATCH 2/4] Remove current validation mechanism Chad Sellers [PATCH 1/4] Bug fix in polidydb_destroy Chad Sellers [PATCH 0/4] Validate kernel object classes and permissions Chad Sellers RE: Denials from newest kernel Venkat Yekkirala Re: Denials from newest kernel Joshua Brindle Re: Denials from newest kernel James Morris RE: Denials from newest kernel Venkat Yekkirala Re: MMCS patch against subversion policy Daniel J Walsh Re: Denials from newest kernel Joshua Brindle Re: [RFC PATCH] newrole suid breakdown Russell Coker Re: Denials from newest kernel Paul Moore Re: [RFC PATCH] newrole suid breakdown Stephen Smalley Re: [RFC PATCH] newrole suid breakdown Daniel J Walsh Re: Denials from newest kernel Steve G Re: Denials from newest kernel Joshua Brindle Re: Labeled Networking For LSPP: Where we are and where we need to go (quickly) Eric Paris Re: Labeled Networking For LSPP: Where we are and where we need to go (quickly) Paul Moore Re: Labeled Networking For LSPP: Where we are and where we need t o go (quickly) Paul Moore Re: [RFC PATCH] newrole suid breakdown Russell Coker Re: Labeled Networking For LSPP: Where we are and where we need to go (quickly) James Morris Re: Denials from newest kernel James Morris RE: Labeled Networking For LSPP: Where we are and where we need t o go (quickly) Venkat Yekkirala Re: [RFC PATCH] newrole suid breakdown Stephen Smalley Re: [RFC PATCH] newrole suid breakdown Daniel J Walsh Re: [RFC PATCH] newrole suid breakdown Daniel J Walsh Re: Denials from newest kernel Karl MacMillan Re: [redhat-lspp] Re: RHEL5 Kernel with labeled networking Karl MacMillan Re: [redhat-lspp] Re: Labeled Networking For LSPP: Where we are and where we need to go (quickly) Paul Moore Re: Labeled Networking For LSPP: Where we are and where we need to go (quickly) Paul Moore RE: Denials from newest kernel Stephen Smalley Re: [RFC PATCH] newrole suid breakdown Stephen Smalley Labeled Networking For LSPP: Where we are and where we need to go (quickly) Eric Paris RE: Denials from newest kernel Stephen Smalley Re: [RFC PATCH] newrole suid breakdown Stephen Smalley RE: Denials from newest kernel Joshua Brindle Re: [redhat-lspp] Re: Networking policy patch Paul Moore Re: Networking policy patch Christopher J. PeBenito Re: [RFC PATCH] newrole suid breakdown Steve Grubb Re: [RFC PATCH] newrole suid breakdown Steve Grubb Re: [RFC PATCH] newrole suid breakdown Michael C Thompson Re: [RFC PATCH] newrole suid breakdown Linda Knippers Re: [redhat-lspp] Re: Networking policy patch Christopher J. PeBenito RE: Denials from newest kernel Stephen Smalley RE: Denials from newest kernel Joshua Brindle Re: [RFC PATCH] newrole suid breakdown Russell Coker Re: Networking policy patch Joshua Brindle RE: Denials from newest kernel Venkat Yekkirala Re: [RFC PATCH] newrole suid breakdown Stephen Smalley RE: Denials from newest kernel Joshua Brindle Re: Denials from newest kernel Paul Moore RE: Denials from newest kernel Venkat Yekkirala Re: [redhat-lspp] Re: Networking policy patch Paul Moore RE: Denials from newest kernel Joshua Brindle RE: Denials from newest kernel Venkat Yekkirala Denials from newest kernel Joshua Brindle RE: Networking policy patch Venkat Yekkirala MMCS patch against subversion policy Russell Coker Re: [redhat-lspp] Re: RHEL5 Kernel with labeled networking Joshua Brindle Re: Networking policy patch Joshua Brindle Thursday, 5 October Re: [PATCH 0/3] Fix for IPsec leakage with SELinux enabled - V.03 James Morris Re: [PATCH 1/1] NetLabel: use SECINITSID_UNLABELED for a base SID James Morris Re: [PATCH] libselinux: always store raw contexts in the avc sidtab Joshua Brindle Re: [PATCH 3/3] Fix for IPsec leakage with SELinux enabled - V.03: Process security errors for scket policies also James Morris selective quoting Russell Coker RE: [PATCH 1/3] Fix for IPsec leakage with SELinux enabled - V.03 James Morris Re: [RFC PATCH] newrole suid breakdown Russell Coker RE: [PATCH 1/3] Fix for IPsec leakage with SELinux enabled - V.03 James Morris Re: [redhat-lspp] Re: RHEL5 Kernel with labeled networking Klaus Weidner [PATCH 0/1] NetLabel changes from yesterday's discussion paul.moore_at_hp.com [PATCH 1/1] NetLabel: use SECINITSID_UNLABELED for a base SID paul.moore_at_hp.com Re: MLS login (Was: Re: newrole - adding capabilities for polyinstantiation) Klaus Weidner Re: [RFC PATCH] newrole suid breakdown Steve Grubb RE: [PATCH 1/3] Fix for IPsec leakage with SELinux enabled - V.03 Venkat Yekkirala RE: [PATCH 0/3] Fix for IPsec leakage with SELinux enabled - V.03 Venkat Yekkirala RE: [PATCH 1/3] Fix for IPsec leakage with SELinux enabled - V.03 Venkat Yekkirala Re: policy patch against subversion tree Daniel J Walsh RE: [PATCH 0/3] Fix for IPsec leakage with SELinux enabled - V.03 Venkat Yekkirala Re: [PATCH 1/3] Fix for IPsec leakage with SELinux enabled - V.03 James Morris Re: [RFC PATCH] newrole suid breakdown Michael C Thompson [PATCH] namespace.init needs to hold on to the privilages it was called with Michael C Thompson [PATCH 1/3] Fix for IPsec leakage with SELinux enabled - V.03 Venkat Yekkirala [PATCH 3/3] Fix for IPsec leakage with SELinux enabled - V.03: Process security errors for scket policies also Venkat Yekkirala [PATCH 1/3] Fix for IPsec leakage with SELinux enabled - V.03: Fix xfrm code Venkat Yekkirala [PATCH 0/3] Fix for IPsec leakage with SELinux enabled - V.03 Venkat Yekkirala Re: [RFC PATCH] newrole suid breakdown Michael C Thompson Re: [RFC PATCH] newrole suid breakdown Stephen Smalley Re: [RFC PATCH] newrole suid breakdown Stephen Smalley Re: [RFC PATCH] newrole suid breakdown Michael C Thompson Re: policy patch against subversion tree Christopher J. PeBenito Re: [RFC PATCH] newrole suid breakdown Michael C Thompson Re: [RFC PATCH 1/3] reference policy: add "context" security class Darrel Goeddel Re: [RFC PATCH 1/3] reference policy: add "context" security class Joshua Brindle Re: [RFC PATCH 1/3] reference policy: add "context" security class Stephen Smalley Re: [RFC PATCH 2/3] libselinux: define the "context" security class Darrel Goeddel Re: [RFC PATCH 1/3] reference policy: add "context" security class Darrel Goeddel Re: [RFC PATCH 1/3] reference policy: add "context" security class Darrel Goeddel Re: [RFC PATCH 3/3] mcstransd: perform an access check on the conext to be translated Daniel J Walsh Re: [PATCH] libselinux: always store raw contexts in the avc sidtab Joshua Brindle MLS login (Was: Re: newrole - adding capabilities for polyinstantiation) Stephen Smalley [patch 1/1] removal of unused private.h from libsemanage Caleb Case Re: [RFC PATCH 1/3] reference policy: add "context" security class Christopher J. PeBenito Re: [RFC PATCH 1/3] reference policy: add "context" security class Joshua Brindle [RFC v5 0/1] The 'v5' NetLabel secid support patch paul.moore_at_hp.com [RFC v5 1/1] NetLabel: secid reconciliation support paul.moore_at_hp.com Re: [RFC PATCH 2/3] libselinux: define the "context" security class Stephen Smalley Re: Networking policy patch Joshua Brindle Re: [RFC PATCH] newrole suid breakdown Stephen Smalley Re: Networking policy patch Christopher J. PeBenito [RFC PATCH 3/3] mcstransd: perform an access check on the conext to be translated Darrel Goeddel [RFC PATCH 2/3] libselinux: define the "context" security class Darrel Goeddel [RFC PATCH 1/3] reference policy: add "context" security class Darrel Goeddel [RFC PATCH 0/3] access checks for translating contexts Darrel Goeddel Re: [RFC PATCH] newrole suid breakdown Stephen Smalley Re: [RFC PATCH] newrole suid breakdown Stephen Smalley [PATCH] libselinux: always store raw contexts in the avc sidtab Darrel Goeddel Re: [RFC] NetLabel: shift to using SECINITSID_UNLABLED as a base Paul Moore Re: newrole - adding capabilities for polyinstantiation Klaus Weidner Re: [RFC PATCH] newrole suid breakdown Michael C Thompson Re: [RFC PATCH] newrole suid breakdown Michael C Thompson Re: [RFC PATCH] newrole suid breakdown Michael C Thompson Re: [RFC] NetLabel: shift to using SECINITSID_UNLABLED as a base Paul Moore Re: [RFC PATCH] newrole suid breakdown Stephen Smalley Re: [RFC PATCH] newrole suid breakdown Daniel J Walsh RE: [redhat-lspp] Re: RHEL5 Kernel with labeled networking Joshua Brindle Re: [RFC PATCH] newrole suid breakdown Michael C Thompson Re: [RFC PATCH] newrole suid breakdown Stephen Smalley Re: [RFC PATCH] newrole suid breakdown Daniel J Walsh [RFC] NetLabel: shift to using SECINITSID_UNLABLED as a base Paul Moore policy patch against subversion tree Russell Coker xinetd SELinux support (Was: Re: [PATCH v4 1/2] NetLabel: secid reconciliation support) Stephen Smalley Wednesday, 4 October Re: newrole - adding capabilities for polyinstantiation Russell Coker How are SAs created in Eric's kernel? Joy Latten Re: [PATCH 0/2] [PATCH 0/2] Updated NetLabel/secid-reconciliation bits and a bugfix James Morris Re: [PATCH v4 1/2] NetLabel: secid reconciliation support Paul Moore Re: newrole - adding capabilities for polyinstantiation Michael C Thompson RE: [redhat-lspp] Re: RHEL5 Kernel with labeled networking Joy Latten Re: [PATCH v4 1/2] NetLabel: secid reconciliation support Linda Knippers [RFC PATCH] newrole suid breakdown Michael C Thompson Re: [PATCH v4 1/2] NetLabel: secid reconciliation support Joe Nall Re: [PATCH v4 1/2] NetLabel: secid reconciliation support Steve Grubb Re: xdm leaks file descriptors on purpose, but this is causing random avc messages. Christopher J. PeBenito Re: [PATCH] enable/disable context translation in libselinux Stephen Smalley Re: [PATCH] enable/disable context translation in libselinux Linda Knippers Re: [PATCH] enable/disable context translation in libselinux Klaus Weidner Re: [PATCH v4 1/2] NetLabel: secid reconciliation support Paul Moore Re: [PATCH v4 1/2] NetLabel: secid reconciliation support Paul Moore xdm leaks file descriptors on purpose, but this is causing random avc messages. Daniel J Walsh Re: [PATCH v4 1/2] NetLabel: secid reconciliation support Stephen Smalley Re: [PATCH v4 1/2] NetLabel: secid reconciliation support Stephen Smalley Re: [PATCH v4 1/2] NetLabel: secid reconciliation support Paul Moore Re: newrole - adding capabilities for polyinstantiation Klaus Weidner Re: [PATCH 0/2] [PATCH 0/2] Updated NetLabel/secid-reconciliation bits and a bugfix Paul Moore RE: [PATCH v4 1/2] NetLabel: secid reconciliation support Stephen Smalley Re: [PATCH v4 1/2] NetLabel: secid reconciliation support Stephen Smalley Re: [PATCH v4 1/2] NetLabel: secid reconciliation support Paul Moore RE: [PATCH v4 1/2] NetLabel: secid reconciliation support Venkat Yekkirala Re: [PATCH v4 1/2] NetLabel: secid reconciliation support Paul Moore RE: [PATCH 0/2] [PATCH 0/2] Updated NetLabel/secid-reconciliation bits and a bugfix Venkat Yekkirala Re: [PATCH v4 1/2] NetLabel: secid reconciliation support Stephen Smalley Re: [PATCH 0/2] [PATCH 0/2] Updated NetLabel/secid-reconciliation bits and a bugfix Paul Moore RE: [PATCH v4 1/2] NetLabel: secid reconciliation support Venkat Yekkirala Re: [PATCH v4 1/2] NetLabel: secid reconciliation support Paul Moore Re: [PATCH] enable/disable context translation in libselinux Stephen Smalley Re: RHEL5 Kernel with labeled networking Joy Latten RE: [PATCH 0/2] [PATCH 0/2] Updated NetLabel/secid-reconciliation bits and a bugfix Venkat Yekkirala Re: [redhat-lspp] Re: RHEL5 Kernel with labeled networking Daniel J Walsh RE: [PATCH v4 1/2] NetLabel: secid reconciliation support Venkat Yekkirala Re: [PATCH 0/2] [PATCH 0/2] Updated NetLabel/secid-reconciliation bits and a bugfix Paul Moore Re: newrole - adding capabilities for polyinstantiation Stephen Smalley Re: [PATCH v4 1/2] NetLabel: secid reconciliation support Paul Moore Re: [PATCH 0/2] [PATCH 0/2] Updated NetLabel/secid-reconciliation bits and a bugfix James Morris RE: [redhat-lspp] Re: RHEL5 Kernel with labeled networking Venkat Yekkirala RE: [redhat-lspp] Labeled networking at the end of the day Oct 2, 2006 Venkat Yekkirala Re: [redhat-lspp] Re: RHEL5 Kernel with labeled networking Linda Knippers Re: [redhat-lspp] Re: RHEL5 Kernel with labeled networking Stephen Smalley Re: [redhat-lspp] Re: RHEL5 Kernel with labeled networking Stephen Smalley Re: [redhat-lspp] Re: RHEL5 Kernel with labeled networking Eric Paris Re: [redhat-lspp] Re: RHEL5 Kernel with labeled networking Klaus Weidner RE: [PATCH v4 1/2] NetLabel: secid reconciliation support Venkat Yekkirala RE: [PATCH v4 1/2] NetLabel: secid reconciliation support Venkat Yekkirala [PATCH] enable/disable context translation in libselinux Linda Knippers Re: newrole - adding capabilities for polyinstantiation Stephen Smalley Re: [redhat-lspp] Re: RHEL5 Kernel with labeled networking George C. Wilson Re: [redhat-lspp] Re: RHEL5 Kernel with labeled networking Karl MacMillan Re: [redhat-lspp] Re: RHEL5 Kernel with labeled networking Steve Grubb Re: newrole - adding capabilities for polyinstantiation Michael C Thompson Re: [redhat-lspp] Re: RHEL5 Kernel with labeled networking Steve Grubb Re: newrole - adding capabilities for polyinstantiation Stephen Smalley Re: newrole - adding capabilities for polyinstantiation Michael C Thompson Re: [redhat-lspp] Re: RHEL5 Kernel with labeled networking Steve Grubb [PATCH 2/2] NetLabel: fix a cache race condition paul.moore_at_hp.com [PATCH 0/2] [PATCH 0/2] Updated NetLabel/secid-reconciliation bits and a bugfix paul.moore_at_hp.com [PATCH v4 1/2] NetLabel: secid reconciliation support paul.moore_at_hp.com RE: [redhat-lspp] Labeled networking at the end of the day Oct 2, 2006 Eric Paris Re: RHEL5 Kernel with labeled networking Linda Knippers RE: [redhat-lspp] Labeled networking at the end of the day Oct 2, 2006 Venkat Yekkirala Re: [redhat-lspp] Re: gpm & mls Steve Grubb Re: RHEL5 Kernel with labeled networking Stephen Smalley Re: [PATCH 1/1] secid reconcialiation: Replace unlabeled_t with the network_t Paul Moore Re: newrole - adding capabilities for polyinstantiation Stephen Smalley RE: [PATCH 1/1] secid reconcialiation: Replace unlabeled_t with t he network_t Venkat Yekkirala Re: [PATCH 1/1] secid reconcialiation: Replace unlabeled_t with the network_t Christopher J. PeBenito Re: [PATCH 1/1] secid reconcialiation: Replace unlabeled_t with the network_t Paul Moore Re: [PATCH 1/1] secid reconcialiation: Replace unlabeled_t with the network_t Paul Moore RE: [redhat-lspp] Labeled networking at the end of the day Oct 2, 2006 Venkat Yekkirala Re: [redhat-lspp] Re: RHEL5 Kernel with labeled networking Stephen Smalley RE: [PATCH] Fix for IPsec leakage with SELinux enabled - V.02 Venkat Yekkirala Re: init unconfined in RHEL4? Christopher J. PeBenito RE: [redhat-lspp] Networking policy patch Venkat Yekkirala RE: init unconfined in RHEL4? Osborn, Justin D. Tuesday, 3 October Networking policy patch Venkat Yekkirala [PATCH 1/1] secid reconcialiation: Replace unlabeled_t with the network_t Venkat Yekkirala Re: newrole - adding capabilities for polyinstantiation Russell Coker Re: [redhat-lspp] Re: RHEL5 Kernel with labeled networking Casey Schaufler Re: RHEL5 Kernel with labeled networking Linda Knippers Re: RHEL5 Kernel with labeled networking Joshua Brindle Re: newrole - adding capabilities for polyinstantiation Michael C Thompson Re: init unconfined in RHEL4? Russell Coker Re: RHEL5 Kernel with labeled networking Linda Knippers Re: RHEL5 Kernel with labeled networking Karl MacMillan Re: RHEL5 Kernel with labeled networking Karl MacMillan Re: RHEL5 Kernel with labeled networking Linda Knippers Re: [redhat-lspp] Re: RHEL5 Kernel with labeled networking Klaus Weidner Re: RHEL5 Kernel with labeled networking Joshua Brindle Re: Labeled networking at the end of the day Oct 2, 2006 Paul Moore Re: init unconfined in RHEL4? Daniel J Walsh Labeled networking at the end of the day Oct 2, 2006 Eric Paris Re: RHEL5 Kernel with labeled networking Linda Knippers Re: Range transitions in modules+refpolicy Christopher J. PeBenito Re: Range transitions in modules+refpolicy Linda Knippers Re: RHEL5 Kernel with labeled networking Joshua Brindle Re: RHEL5 Kernel with labeled networking Joy Latten Re: RHEL5 Kernel with labeled networking Joshua Brindle Re: RHEL5 Kernel with labeled networking Joy Latten RE: RHEL5 Kernel with labeled networking Venkat Yekkirala Re: RHEL5 Kernel with labeled networking Joshua Brindle Re: RHEL5 Kernel with labeled networking Linda Knippers Re: RHEL5 Kernel with labeled networking James Morris Range transitions in modules+refpolicy Christopher J. PeBenito Re: RHEL5 Kernel with labeled networking Paul Moore Re: RHEL5 Kernel with labeled networking Linda Knippers Re: RHEL5 Kernel with labeled networking Linda Knippers Re: RHEL5 Kernel with labeled networking James Morris Re: RHEL5 Kernel with labeled networking Linda Knippers Re: RHEL5 Kernel with labeled networking Eric Paris Re: RHEL5 Kernel with labeled networking Stephen Smalley Re: RHEL5 Kernel with labeled networking Linda Knippers xinetd integration with SELinux (Was: LSPP Development Telecon 10/02/2006 Minutes) Stephen Smalley Monday, 2 October RHEL5 Kernel with labeled networking Eric Paris Re: gpm & mls Russell Coker [PATCH v3 1/1] NetLabel: secid reconciliation support paul.moore_at_hp.com Re: Default Mikefile in /usr/share/selinux/devel not nice Daniel J Walsh Re: Trouble installing SELinux on Ubuntu Russell Coker Re: [PATCH v2 1/1] NetLabel: secid reconciliation support Paul Moore [PATCH v3 0/1] One more time ... paul.moore_at_hp.com init unconfined in RHEL4? Osborn, Justin D. RE: [PATCH v2 1/1] NetLabel: secid reconciliation support Venkat Yekkirala Re: [PATCH v2 1/1] NetLabel: secid reconciliation support Paul Moore Re: [PATCH v2 1/1] NetLabel: secid reconciliation support Stephen Smalley [PATCH v2 1/1] NetLabel: secid reconciliation support paul.moore_at_hp.com [PATCH v2 0/1] Respun patch to match the latest secid patchset paul.moore_at_hp.com Re: [PATCH 7/9] secid reconciliation-v04: Enforcement for SELinux Paul Moore RE: [PATCH 7/9] secid reconciliation-v04: Enforcement for SELinux Venkat Yekkirala Re: [PATCH 7/9] secid reconciliation-v04: Enforcement for SELinux Paul Moore Re: [PATCH 7/9] secid reconciliation-v04: Enforcement for SELinux James Morris Re: [PATCH 2/9] secid reconciliation-v04: Add LSM hooks Stephen Smalley Re: [PATCH 7/9] secid reconciliation-v04: Enforcement for SELinux Stephen Smalley Re: [PATCH 7/9] secid reconciliation-v04: Enforcement for SELinux Paul Moore Re: gpm & mls Paul Moore Re: Default Mikefile in /usr/share/selinux/devel not nice Christopher J. PeBenito Re: [PATCH] refpolicy: Add GConf policy Christopher J. PeBenito Re: [PATCH] libsemanage: add genhomedircon path to semanage.conf parsing Karl MacMillan Re: Default Mikefile in /usr/share/selinux/devel not nice Michael C Thompson RE: gpm & mls Steve G RE: gpm & mls Chad Hanson Re: [PATCH] refpolicy: Add GConf policy James Carter Re: [PATCH] refpolicy: Add GConf policy Christopher J. PeBenito Re: RFC tweak for lpd.if to make it fit CUPS Christopher J. PeBenito gpm & mls Steve G Trouble installing SELinux on Ubuntu alex323 Sunday, 1 October Re: 'chcon': possible weakness Russell Coker 'chcon': possible weakness Salvo Giuffrida RE: [PATCH 7/7] secid reconciliation-v03: Enforcement for SELinux Venkat Yekkirala [PATCH 9/9] secid reconciliation-v04: Track peersecid at connection establishment Venkat Yekkirala [PATCH 8/9] secid reconciliation-v04: Use secmark when classifying flow using skb Venkat Yekkirala [PATCH 5/9] secid reconciliation-v04: Label locally generated IPv6 traffic Venkat Yekkirala [PATCH 4/9] secid reconciliation-v04: Invoke LSM hook for outbound traffic Venkat Yekkirala [PATCH 7/9] secid reconciliation-v04: Enforcement for SELinux Venkat Yekkirala [PATCH 6/9] secid reconciliation-v04: Label locally generated IPv4 traffic Venkat Yekkirala [PATCH 3/9] secid reconciliation-v04: Invoke LSM hook for inbound traffic Venkat Yekkirala [PATCH 2/9] secid reconciliation-v04: Add LSM hooks Venkat Yekkirala [PATCH 1/9] secid reconciliation-v04 Venkat Yekkirala [PATCH 0/9] secid reconciliation-v04: Repost patchset with updates Venkat Yekkirala Saturday, 30 September Re: Audit events for IPsec based network labeling Linda Knippers Audit events for IPsec based network labeling Steve G Re: Default Mikefile in /usr/share/selinux/devel not nice Chris PeBenito Re: RFC tweak for lpd.if to make it fit CUPS Russell Coker Friday, 29 September RFC tweak for lpd.if to make it fit CUPS Matt Anderson Re: [PATCH 1/1] NetLabel: audit fixups due to delayed feedback Steve Grubb [PATCH 1/1] NetLabel: audit fixups due to delayed feedback paul.moore_at_hp.com [PATCH 0/1] NetLabel audit fixup paul.moore_at_hp.com RE: [PATCH 7/7] secid reconciliation-v03: Enforcement for SELinux Venkat Yekkirala RE: [PATCH 7/7] secid reconciliation-v03: Enforcement for SELinux Venkat Yekkirala Re: [PATCH 1/1] NetLabel: secid reconciliation support Paul Moore git trees for SELinux kernel James Morris RE: [PATCH 1/1] NetLabel: secid reconciliation support Venkat Yekkirala Default Mikefile in /usr/share/selinux/devel not nice Michael C Thompson Re: newrole - adding capabilities for polyinstantiation Stephen Smalley Re: [PATCH 1/1] NetLabel: add audit support for configuration changes Paul Moore [PATCH 0/1] NetLabel: patch against Venkat's secid patchset paul.moore_at_hp.com [PATCH 1/1] NetLabel: secid reconciliation support paul.moore_at_hp.com Re: [PATCH 7/7] secid reconciliation-v03: Enforcement for SELinux Paul Moore Re: [PATCH 7/7] secid reconciliation-v03: Enforcement for SELinux James Morris Re: [PATCH 7/7] secid reconciliation-v03: Enforcement for SELinux Paul Moore Re: newrole - adding capabilities for polyinstantiation Michael C Thompson Re: [PATCH 7/7] secid reconciliation-v03: Enforcement for SELinux James Morris Re: SELINUX_ERR using chcon to set a printer to Secret Daniel J Walsh Re: [PATCH 7/7] secid reconciliation-v03: Enforcement for SELinux Paul Moore Re: [PATCH 7/7] secid reconciliation-v03: Enforcement for SELinux Paul Moore latest diffs Daniel J Walsh RE: [PATCH 7/7] secid reconciliation-v03: Enforcement for SELinux Venkat Yekkirala Re: [PATCH 7/7] secid reconciliation-v03: Enforcement for SELinux James Morris Re: [PATCH 1/1] NetLabel: add audit support for configuration changes Steve Grubb Re: SELINUX_ERR using chcon to set a printer to Secret Christopher J. PeBenito Re: [PATCH 1/1] NetLabel: add audit support for configuration changes Paul Moore Re: Where is the AVC? Steve G Re: Where is the AVC? Salvo Giuffrida Re: Where is the AVC? Salvo Giuffrida Re: SELINUX_ERR using chcon to set a printer to Secret Daniel J Walsh Re: [PATCH 7/7] secid reconciliation-v03: Enforcement for SELinux Paul Moore Re: [PATCH 7/7] secid reconciliation-v03: Enforcement for SELinux Paul Moore Re: [PATCH 7/7] secid reconciliation-v03: Enforcement for SELinux Paul Moore Re: Where is the AVC? Salvo Giuffrida Re: [PATCH 7/7] secid reconciliation-v03: Enforcement for SELinux James Morris RE: [PATCH 7/7] secid reconciliation-v03: Enforcement for SELinux Venkat Yekkirala Re: Where is the AVC? Stephen Smalley Re: [PATCH 7/7] secid reconciliation-v03: Enforcement for SELinux James Morris Re: [PATCH 7/7] secid reconciliation-v03: Enforcement for SELinux Paul Moore Re: [PATCH 7/7] secid reconciliation-v03: Enforcement for SELinux Paul Moore RE: [PATCH 7/7] secid reconciliation-v03: Enforcement for SELinux Venkat Yekkirala RE: [PATCH 7/7] secid reconciliation-v03: Enforcement for SELinux Venkat Yekkirala RE: [PATCH 7/7] secid reconciliation-v03: Enforcement for SELinux Venkat Yekkirala Re: [PATCH 7/7] secid reconciliation-v03: Enforcement for SELinux Paul Moore Re: [PATCH 7/7] secid reconciliation-v03: Enforcement for SELinux Paul Moore Re: [PATCH 7/7] secid reconciliation-v03: Enforcement for SELinux James Morris RE: [PATCH 7/7] secid reconciliation-v03: Enforcement for SELinux Venkat Yekkirala Where is the AVC? Salvo Giuffrida Re: [PATCH 7/7] secid reconciliation-v03: Enforcement for SELinux Paul Moore Re: libsemanage patch to handle installation problem Stephen Smalley Re: [PATCH 1/1] NetLabel: add audit support for configuration changes Paul Moore Re: [PATCH] -v3 newrole auditing of failures due to user actions Stephen Smalley Re: libsemanage patch to handle installation problem Joshua Brindle Re: [PATCH] libsemanage: don't destroy the sepol handle if the connection fails Stephen Smalley Re: [PATCH] libsemanage: add genhomedircon path to semanage.conf parsing Stephen Smalley Re: [redhat-lspp] updated racoon patch Stephen Smalley libsemanage patch to handle installation problem Daniel J Walsh Re: [PATCH 7/7] secid reconciliation-v03: Enforcement for SELinux Stephen Smalley RE: Indirect access to type David Caplan Re: [PATCH 7/7] secid reconciliation-v03: Enforcement for SELinux James Morris Re: [PATCH 7/7] secid reconciliation-v03: Enforcement for SELinux Stephen Smalley Re: [PATCH 1/1] NetLabel: add audit support for configuration changes James Morris Re: [PATCH 1/1] NetLabel: add audit support for configuration changes Steve Grubb Re: [PATCH 7/7] secid reconciliation-v03: Enforcement for SELinux Joshua Brindle Re: Indirect access to type Stephen Smalley Re: New Patch for Policycoreutils. Daniel J Walsh Re: [PATCH] refpolicy: Add GConf policy James Carter Indirect access to type Salvo Giuffrida Re: [PATCH 7/7] secid reconciliation-v03: Enforcement for SELinux Stephen Smalley Re: [PATCH 4/7] secid reconciliation-v03: Invoke LSM hook for outbound traffic James Morris Re: [PATCH 6/7] secid reconciliation-v03: Label locally generated IPv4 traffic James Morris Re: [PATCH 4/7] secid reconciliation-v03: Invoke LSM hook for outbound traffic James Morris Thursday, 28 September Re: [PATCH 7/7] secid reconciliation-v03: Enforcement for SELinux Joshua Brindle [PATCH 7/7] secid reconciliation-v03: Enforcement for SELinux Venkat Yekkirala [PATCH 6/7] secid reconciliation-v03: Label locally generated IPv4 traffic Venkat Yekkirala [PATCH 5/7] secid reconciliation-v03: Label locally generated IPv6 traffic Venkat Yekkirala [PATCH 3/7] secid reconciliation-v03: Invoke LSM hook for inbound traffic Venkat Yekkirala [PATCH 4/7] secid reconciliation-v03: Invoke LSM hook for outbound traffic Venkat Yekkirala [PATCH 2/7] secid reconciliation-v03: Add LSM hooks Venkat Yekkirala [PATCH 1/7] secid reconciliation-v03 Venkat Yekkirala [PATCH 0/7] secid reconciliation-v03: Repost patchset with updates Venkat Yekkirala [PATCH] -v3 newrole auditing of failures due to user actions Michael C Thompson [PATCH] libsemanage: don't destroy the sepol handle if the connection fails James Athey [PATCH] libsemanage: add genhomedircon path to semanage.conf parsing James Athey Re: [PATCH] -v2 newrole auditing of failures due to user actions Stephen Smalley Re: [PATCH 1/1] NetLabel: add audit support for configuration changes Paul Moore newrole - adding capabilities for polyinstantiation Michael C Thompson [PATCH] -v2 newrole auditing of failures due to user actions Michael C Thompson Re: [PATCH] newrole auditing of failures due to user actions Michael C Thompson Re: [PATCH] newrole auditing of failures due to user actions Stephen Smalley Re: [PATCH] refpolicy: Add GConf policy Christopher J. PeBenito Re: [PATCH] newrole auditing of failures due to user actions Steve Grubb Re: [PATCH 1/1] NetLabel: add audit support for configuration changes James Morris Re: [PATCH] newrole auditing of failures due to user actions Michael C Thompson Re: [PATCH 1/1] NetLabel: add audit support for configuration changes Paul Moore Re: SELINUX_ERR using chcon to set a printer to Secret Christopher J. PeBenito Re: [PATCH 1/1] NetLabel: add audit support for configuration changes James Morris Re: [PATCH] refpolicy: Add GConf policy James Carter Re: SELINUX_ERR using chcon to set a printer to Secret Matt Anderson Re: New Patch for Policycoreutils. Darrel Goeddel SELINUX_ERR using chcon to set a printer to Secret Matt Anderson Re: New Patch for Policycoreutils. Stephen Smalley Re: [PATCH] libsepol: compile archive with -fpic Joshua Brindle Re: run_init, and benchmarking Stephen Smalley [PATCH 1/1] NetLabel: add audit support for configuration changes paul.moore_at_hp.com Re: [Patch 1/3] SELinux: add support for quoted context mount option Stephen Smalley Re: Bug in 2.6.18: read of /proc/$PID/exe triggers ptrace check Thomas Bleher Re: Latest diffs. Trimmed down this time. Daniel J Walsh run_init, and benchmarking Salvo Giuffrida Re: [PATCH] refpolicy: Add GConf policy Christopher J. PeBenito Re: [redhat-lspp] Labeled Networking Telecon Notes James Morris Re: Latest diffs. Trimmed down this time. Christopher J. PeBenito Re: [Patch 1/3] SELinux: add support for quoted context mount option James Morris [Patch 3/3] nfsmount: quote context mount option to avoid comma collision Cory Olmo [Patch 2/3] mount: quote context option to avoid comma collision Cory Olmo [Patch 1/3] SELinux: add support for quoted context mount option Cory Olmo [Patch 0/3] Support context mount options that contain commas Cory Olmo Re: [PATCH take 3] allow range_transitions and MLS users in modules Joshua Brindle Wednesday, 27 September Re: MLS and Biba Klaus Weidner Re: MLS and Biba Russell Coker Labeled Networking Telecon Notes George C. Wilson Re: Bug in 2.6.18: read of /proc/$PID/exe triggers ptrace check Russell Coker Re: MLS and Biba Klaus Weidner RE: Labeled networking packets Venkat Yekkirala Updated iptables for secmark testing Steve Grubb RE: Labeled networking packets Joy Latten Re: Bug in 2.6.18: read of /proc/$PID/exe triggers ptrace check Stephen Smalley RE: Labeled networking packets James Morris RE: Labeled networking packets James Morris Bug in 2.6.18: read of /proc/$PID/exe triggers ptrace check Thomas Bleher RE: Labeled networking packets Venkat Yekkirala RE: Labeled networking packets Joy Latten RE: Labeled networking packets Stephen Smalley Re: Labeled networking packets Joshua Brindle RE: Labeled networking packets James Morris Re: Labeled networking packets Stephen Smalley Re: Labeled networking packets Joshua Brindle Re: [PATCH] libsepol: compile archive with -fpic Joshua Brindle Re: About Negation Special Operator Stephen Smalley Re: [PATCH] libsepol: compile archive with -fpic Stephen Smalley RE: Labeled networking packets Stephen Smalley Re: MLS and Biba Stephen Smalley Re: disabling selinux Stephen Smalley Re: disabling selinux abcde efghi Tuesday, 26 September Re: MLS and Biba Russell Coker RE: Labeled networking packets James Morris MLS and Biba Salvo Giuffrida RE: Labeled networking packets Venkat Yekkirala RE: Labeled networking packets James Morris [PATCH] refpolicy: Add GConf policy James Carter Re: [PATCH take 3] allow range_transitions and MLS users in modules Joshua Brindle [PATCH take 3] allow range_transitions and MLS users in modules Darrel Goeddel [PATCH] libsepol: compile archive with -fpic Jeremy A. Mowery RE: Labeled networking packets Stephen Smalley Re: Labeled networking telecon George C. Wilson RE: Labeled networking packets Venkat Yekkirala RE: Labeled networking packets Venkat Yekkirala About Negation Special Operator Shintaro Fujiwara New Patch for Policycoreutils. Daniel J Walsh Re: Latest diffs Christopher J. PeBenito Re: Latest diffs. Trimmed down this time. Christopher J. PeBenito RE: Labeled networking packets Stephen Smalley Re: Latest diffs Russell Coker Re: Latest diffs Christopher J. PeBenito Re: Latest diffs Russell Coker Monday, 25 September Labeled networking telecon George C. Wilson RE: Labeled networking packets James Morris RE: Labeled networking packets Venkat Yekkirala RE: Labeled networking packets Venkat Yekkirala RE: Labeled networking packets James Morris RE: Labeled networking packets Stephen Smalley Re: Latest diffs. Trimmed down this time. Erich Schubert RE: Labeled networking packets James Morris RE: Labeled networking packets Chad Hanson RE: Labeled networking packets James Morris Re: [PATCH take 2] allow range_transitions and MLS users in modules Joshua Brindle Re: Labeled networking packets Stephen Smalley Latest diffs. Trimmed down this time. Daniel J Walsh [PATCH take 2] allow range_transitions and MLS users in modules Darrel Goeddel Re: Errors with runcon - RHEL4/refpolicy Christopher J. PeBenito Re: Labeled networking packets Paul Moore Re: Labeled networking packets Stephen Smalley RE: Labeled networking packets Stephen Smalley RE: Labeled networking packets Stephen Smalley Re: [PATCH v2 0/8] Updated patchset with Thomas' comments James Morris Re: Latest diffs Daniel J Walsh Re: [Fwd: How should we handle polmatch avcs?] Joy Latten Re: Labeled networking packets Paul Moore RE: Labeled networking packets Joshua Brindle RE: Labeled networking packets Chad Hanson Re: Labeled networking packets Paul Moore Re: Latest diffs Christopher J. PeBenito RE: Labeled networking packets Stephen Smalley RE: Labeled networking packets Karl MacMillan RE: Labeled networking packets Karl MacMillan RE: Labeled networking packets Joshua Brindle RE: Labeled networking packets Karl MacMillan [PATCH v2 7/8] NetLabel: rework the Netlink attribute handling (part 2) paul.moore_at_hp.com [PATCH v2 8/8] NetLabel: update docs with website information paul.moore_at_hp.com [PATCH v2 6/8] NetLabel: rework the Netlink attribute handling (part 1) paul.moore_at_hp.com [PATCH v2 5/8] Netlink: add nla_validate_nested() paul.moore_at_hp.com [PATCH v2 4/8] Netlink: add nla_for_each_nested() to the interface list paul.moore_at_hp.com [PATCH v2 2/8] NetLabel: make the CIPSOv4 cache spinlocks bottom half safe paul.moore_at_hp.com [PATCH v2 1/8] NetLabel: correct improper handling of non-NetLabel peer contexts paul.moore_at_hp.com [PATCH v2 3/8] NetLabel: change the SELinux permissions paul.moore_at_hp.com [PATCH v2 0/8] Updated patchset with Thomas' comments paul.moore_at_hp.com RE: Labeled networking packets Stephen Smalley RE: Labeled networking packets Stephen Smalley RE: Labeled networking packets Stephen Smalley Re: FC5 policy Christopher J. PeBenito RE: Labeled networking packets Stephen Smalley Re: Labeled networking packets Darrel Goeddel RE: Labeled networking packets Karl MacMillan RE: Labeled networking packets Karl MacMillan RE: Labeled networking packets Joshua Brindle RE: Labeled networking packets Casey Schaufler Re: [PATCH 5/6] NetLabel: rework the Netlink attribute handling (part 2) Paul Moore RE: Labeled networking packets Stephen Smalley RE: Labeled networking packets Chad Hanson [Fwd: How should we handle polmatch avcs?] Daniel J Walsh Re: SSH pubkey authentication & MLS policy Serge E. Hallyn RE: Labeled networking packets Karl MacMillan RE: Labeled networking packets Chad Hanson RE: Labeled networking packets Karl MacMillan Re: [PATCH 5/6] NetLabel: rework the Netlink attribute handling (part 2) Paul Moore Errors with runcon - RHEL4/refpolicy Osborn, Justin D. Re: [redhat-lspp] updated racoon patch Steve Grubb Re: [RFC PATCH] allow range_transitions and MLS users in modules Darrel Goeddel Sunday, 24 September Bogus object labels for packet class Joshua Brindle Re: [RFC PATCH] allow range_transitions and MLS users in modules Joshua Brindle RE: [RFC PATCH] allow range_transitions and MLS users in modules Joshua Brindle Saturday, 23 September Re: FC5 policy Joshua Brindle Re: FC5 policy Russell Coker Re: FC5 policy Joshua Brindle Re: FC5 policy Russell Coker Re: FC5 policy Joshua Brindle FC5 policy Russell Coker RE: Labeled networking packets Joshua Brindle Friday, 22 September Re: Latest diffs Russell Coker RE: Labeled networking packets Joy Latten Re: Labeled networking packets Joy Latten RE: Labeled networking packets Venkat Yekkirala RE: Labeled networking packets Venkat Yekkirala Re: Labeled networking packets Paul Moore RE: Labeled networking packets Stephen Smalley RE: Labeled networking packets James Morris Re: Labeled networking packets James Morris RE: Labeled networking packets Venkat Yekkirala Re: Latest diffs Daniel J Walsh Re: [RFC PATCH] allow range_transitions and MLS users in modules Christopher J. PeBenito Re: Labeled networking packets James Morris Re: Labeled networking packets Stephen Smalley RE: Labeled networking packets Stephen Smalley RE: Labeled networking packets Stephen Smalley RE: Labeled networking packets Stephen Smalley RE: Labeled networking packets Joshua Brindle RE: How to configure and reload selinux policy Stephen Smalley Re: mkdir avc Stephen Smalley Re: mkdir avc Stephen Smalley Re: mkdir avc Steve G Re: Labeled networking packets Paul Moore Re: mkdir avc Stephen Smalley RE: Labeled networking packets Venkat Yekkirala Re: Latest diffs Christopher J. PeBenito Re: Labeled networking packets Paul Moore Re: Labeled networking packets Paul Moore RE: Labeled networking packets Venkat Yekkirala mkdir avc Steve G Re: Labeled networking packets Paul Moore RE: Labeled networking packets Venkat Yekkirala RE: Labeled networking packets Venkat Yekkirala Re: Labeled networking packets Paul Moore Re: Labeled networking packets Paul Moore RE: Labeled networking packets Venkat Yekkirala RE: Labeled networking packets Joshua Brindle RE: Labeled networking packets Venkat Yekkirala RE: Labeled networking packets Venkat Yekkirala Re: Labeled networking packets Paul Moore Re: Labeled networking packets Paul Moore RE: Labeled networking packets Venkat Yekkirala RE: Labeled networking packets Venkat Yekkirala RE: Labeled networking packets Venkat Yekkirala Re: Labeled networking packets Joshua Brindle RE: Labeled networking packets James Morris RE: Labeled networking packets Venkat Yekkirala Re: Labeled networking packets Paul Moore RE: Labeled networking packets Joshua Brindle RE: Labeled networking packets Karl MacMillan RE: Labeled networking packets Joshua Brindle RE: Labeled networking packets Stephen Smalley Thursday, 21 September RE: Labeled networking packets Joshua Brindle RE: How to configure and reload selinux policy Jin, Yihua RE: Labeled networking packets Venkat Yekkirala RE: Labeled networking packets Karl MacMillan Re: SSH pubkey authentication & MLS policy Erich Schubert Re: [PATCH 1/6] NetLabel: correct improper handling of non-NetLabel peer contexts Paul Moore Re: [PATCH 1/6] NetLabel: correct improper handling of non-NetLabel peer contexts James Morris Re: Latest diffs Christopher J. PeBenito RE: Labeled networking packets Venkat Yekkirala [PATCH 5/6] NetLabel: rework the Netlink attribute handling (part 2) paul.moore_at_hp.com [PATCH 3/6] NetLabel: change the SELinux permissions paul.moore_at_hp.com [PATCH 4/6] NetLabel: rework the Netlink attribute handling (part 1) paul.moore_at_hp.com [PATCH 6/6] NetLabel: update docs with website information paul.moore_at_hp.com [PATCH 1/6] NetLabel: correct improper handling of non-NetLabel peer contexts paul.moore_at_hp.com [PATCH 0/6] NetLabel fixes and reworked Netlink interface paul.moore_at_hp.com [PATCH 2/6] NetLabel: make the CIPSOv4 cache spinlocks bottom half safe paul.moore_at_hp.com Re: SSH pubkey authentication & MLS policy Serge E. Hallyn RE: Labeled networking packets Karl MacMillan Re: Latest diffs Karl MacMillan Re: SSH pubkey authentication & MLS policy Christopher J. PeBenito RE: Labeled networking packets Venkat Yekkirala Re: Latest diffs Casey Schaufler Re: SSH pubkey authentication & MLS policy Serge E. Hallyn RE: Labeled networking packets Stephen Smalley Re: Latest diffs Klaus Weidner Re: Latest diffs Joe Nall Re: SSH pubkey authentication & MLS policy Erich Schubert Re: Latest diffs Stephen Smalley Re: Latest diffs Mikel L. Matthews RE: Labeled networking packets Venkat Yekkirala FW: Labeled networking packets Venkat Yekkirala Re: Latest diffs Joshua Brindle FW: Labeled networking packets Venkat Yekkirala Re: SSH pubkey authentication & MLS policy Michael C Thompson Re: How to configure and reload selinux policy Stephen Smalley Re: Latest diffs Christopher J. PeBenito Re: Latest diffs Mikel L. Matthews Re: Latest diffs Daniel J Walsh Re: Latest diffs Christopher J. PeBenito Re: SSH pubkey authentication & MLS policy Daniel J Walsh Re: How to configure and reload selinux policy Christopher J. PeBenito How to configure and reload selinux policy Jin, Yihua How to modify and reload policy file Jin, Yihua Wednesday, 20 September RE: [PATCH 4/7] secid reconciliation-v02: Invoke LSM hook for out bound traffic James Morris Re: [PATCH 7/7] secid reconciliation-v02: Enforcement for SELinux Paul Moore RE: [PATCH 7/7] secid reconciliation-v02: Enforcement for SELinux Venkat Yekkirala Re: run_init requires full path. Stephen Smalley Re: Why does SELinux treat access(file, W_OK) the same way as write(fd, "XYZ")? Stephen Smalley Re: NetLabel base SID Stephen Smalley Re: What is the exactly meaning of local store policy, persistent policy and active policy in the API of libsemanage? Stephen Smalley Re: Problem with sshd and polyinstantiation Stephen Smalley RE: [PATCH 1/7] secid reconciliation-v02 Venkat Yekkirala RE: [PATCH 4/7] secid reconciliation-v02: Invoke LSM hook for out bound traffic Venkat Yekkirala Re: disabling selinux Stephen Smalley Latest diffs Daniel J Walsh run_init requires full path. Daniel J Walsh RE: [redhat-lspp] ipsec acquire has security context although I a m not using it. Joy Latten Why does SELinux treat access(file, W_OK) the same way as write(fd, "XYZ")? Daniel J Walsh NetLabel base SID Paul Moore Re: ipsec, netlabels, secmark- How about a little usability? James Morris Re: ipsec, netlabels, secmark- How about a little usability? Christopher J. PeBenito Re: ipsec, netlabels, secmark- How about a little usability? James Morris Re: ipsec, netlabels, secmark- How about a little usability? Christopher J. PeBenito RE: ipsec, netlabels, secmark- How about a little usability? Venkat Yekkirala What is the exactly meaning of local store policy, persistent policy and active policy in the API of libsemanage? dongmei Tuesday, 19 September Re: ipsec, netlabels, secmark- How about a little usability? Joshua Brindle RE: [redhat-lspp] ipsec acquire has security context although I a m not using it. Venkat Yekkirala ipsec acquire has security context although I am not using it. Joy Latten RE: ipsec, netlabels, secmark- How about a little usability? Venkat Yekkirala Re: ipsec, netlabels, secmark- How about a little usability? Karl MacMillan Re: ipsec, netlabels, secmark- How about a little usability? Karl MacMillan Re: ipsec, netlabels, secmark- How about a little usability? Christopher J. PeBenito Re: ipsec, netlabels, secmark- How about a little usability? Karl MacMillan Problem with sshd and polyinstantiation Rosalie Hiebel Re: disabling selinux abcde efghi Re: [redhat-lspp] Re: MLS Policy (rawhide) Daniel J Walsh Re: disabling selinux Stephen Smalley Re: [PATCH 1/1] SELINUX: Bug fix in security_sid_mls_copy Stephen Smalley Re: [RFC PATCH] allow range_transitions and MLS users in modules Joshua Brindle Re: disabling selinux abcde efghi Re: coreutils status Jim Meyering Monday, 18 September [PATCH 1/1] SELINUX: Bug fix in security_sid_mls_copy Venkat Yekkirala coreutils status Chris PeBenito Re: [PATCH 1/7] secid reconciliation-v02 James Morris Re: [PATCH 7/7] secid reconciliation-v02: Enforcement for SELinux Paul Moore Re: Latest patch for policycoreutils, reworked from previous. Daniel J Walsh Re: [PATCH 0/7] secid reconciliation-v02: Repost patchset with updates Paul Moore Re: Latest patch for policycoreutils, reworked from previous. Stephen Smalley Re: [PATCH 1/7] secid reconciliation-v02 Stephen Smalley RE: [PATCH 7/7] secid reconciliation-v02: Enforcement for SELinux Venkat Yekkirala Re: C++ reserved word 'class' used in selinux/avc.h with patch Joshua Brindle Re: [PATCH 4/7] secid reconciliation-v02: Invoke LSM hook for outbound traffic James Morris RE: [PATCH 4/7] secid reconciliation-v02: Invoke LSM hook for out bound traffic Venkat Yekkirala Re: [PATCH 7/7] secid reconciliation-v02: Enforcement for SELinux James Morris Re: [RFC PATCH] allow range_transitions and MLS users in modules Darrel Goeddel Re: [PATCH 7/7] secid reconciliation-v02: Enforcement for SELinux James Morris Re: awk, isatty(), libc and ioctl() Stephen Smalley Re: [PATCH 4/7] secid reconciliation-v02: Invoke LSM hook for outbound traffic James Morris Re: [PATCH 6/7] secid reconciliation-v02: Label locally generated IPv4 traffic James Morris Re: [PATCH 3/7] secid reconciliation-v02: Invoke LSM hook for inbound traffic James Morris Re: [RFC PATCH] allow range_transitions and MLS users in modules Joshua Brindle Introduction to SELinux tool Shintaro Fujiwara Re: semodule quirk Darrel Goeddel [RFC PATCH] allow range_transitions and MLS users in modules Darrel Goeddel Re: awk, isatty(), libc and ioctl() Erich Schubert Re: semodule quirk Stephen Smalley Re: awk, isatty(), libc and ioctl() Stephen Smalley Re: C++ reserved word 'class' used in selinux/avc.h with patch Stephen Smalley Re: [PATCH] refpolicy: add X object classes to unconfined_t Christopher J. PeBenito Re: C++ reserved word 'class' used in selinux/avc.h with patch Joshua Brindle Friday, 15 September semodule quirk Serge E. Hallyn Saturday, 16 September Re: awk, isatty(), libc and ioctl() Erich Schubert Re: awk, isatty(), libc and ioctl() Russell Coker Re: Cannot find your entry in the shadow passwd file Russell Coker Friday, 15 September C++ reserved word 'class' used in selinux/avc.h with patch Joe Nall Re: [PATCH] refpolicy: add X object classes to unconfined_t Eamon Walsh Re: Latest patch for policycoreutils, reworked from previous. Stephen Smalley Re: Question on type_member rule Stephen Smalley Re: Question on type_member rule Rosalie Hiebel Re: Question on type_member rule Stephen Smalley Tuesday, 12 September RE: Latest policycoreutils patch Karl MacMillan Friday, 15 September Re: Labeled IPSec status Joy Latten Re: Cannot find your entry in the shadow passwd file Daniel J Walsh Re: ipsec, netlabels, secmark- How about a little usability? Daniel J Walsh Re: Latest patch for policycoreutils, reworked from previous. Daniel J Walsh Question on type_member rule Rosalie Hiebel Re: [PATCH] refpolicy: add X object classes to unconfined_t Joshua Brindle Re: Labeled IPSec status Joshua Brindle Re: ipsec, netlabels, secmark- How about a little usability? Stuart James Thursday, 14 September RE: ipsec, netlabels, secmark- How about a little usability? Venkat Yekkirala RE: Labeled IPSec status Venkat Yekkirala Re: Latest patch for policycoreutils, reworked from previous. Steve G Re: Moving xconsole from xserver to logging policy Erich Schubert Re: Latest patch for policycoreutils, reworked from previous. Stephen Smalley Re: Latest patch for policycoreutils, reworked from previous. Steve G Re: Latest patch for policycoreutils, reworked from previous. Stephen Smalley Re: ipsec, netlabels, secmark- How about a little usability? Stephen Smalley Re: [redhat-lspp] Re: Polyinstantiation based on context with MLS Joe Nall Re: ipsec, netlabels, secmark- How about a little usability? James Antill Cannot find your entry in the shadow passwd file selinux770_at_tortenboxer.de Re: ipsec, netlabels, secmark- How about a little usability? Stephen Smalley Re: ipsec, netlabels, secmark- How about a little usability? James Antill Re: MAC_POLICY_LOAD on unloading module Stephen Smalley MAC_POLICY_LOAD on unloading module Michael C Thompson Re: ipsec, netlabels, secmark- How about a little usability? Stuart James Re: ipsec, netlabels, secmark- How about a little usability? Stephen Smalley Re: [PATCH] refpolicy: add X object classes to unconfined_t Joshua Brindle Re: ipsec, netlabels, secmark- How about a little usability? Joshua Brindle Re: ipsec, netlabels, secmark- How about a little usability? Joshua Brindle Re: Moving xconsole from xserver to logging policy Christopher J. PeBenito ipsec, netlabels, secmark- How about a little usability? Daniel J Walsh Latest patch for policycoreutils, reworked from previous. Daniel J Walsh Re: disabling selinux Stephen Smalley disabling selinux abcde efghi Wednesday, 13 September Re: Labeled IPSec status Joe Nall awk, isatty(), libc and ioctl() Erich Schubert Re: [PATCH] refpolicy: add X object classes to unconfined_t Eamon Walsh writing a policy Mark Re: Polyinstantiation based on context with MLS Stephen Smalley Re: Latest policycoreutils.patch Stephen Smalley Re: Moving xconsole from xserver to logging policy Erich Schubert Polyinstantiation based on context with MLS Rosalie Hiebel Re: Latest policycoreutils.patch Joshua Brindle Re: 2007 SELinux Symposium dates and call for papers Joshua Brindle Re: More policy changes from Debian Christopher J. PeBenito Re: More policy changes from Debian Christopher J. PeBenito Latest policycoreutils.patch Daniel J Walsh Re: More policy changes from Debian Uwe Hermann Re: Moving xconsole from xserver to logging policy Christopher J. PeBenito Re: Moving xconsole from xserver to logging policy Erich Schubert Re: Moving xconsole from xserver to logging policy Christopher J. PeBenito Moving xconsole from xserver to logging policy Erich Schubert Re: Latest policycoreutils patch Joshua Brindle More policy changes from Debian Erich Schubert Re: [PATCH] refpolicy: add X object classes to unconfined_t Christopher J. PeBenito Tuesday, 12 September Labeled IPSec status Venkat Yekkirala [PATCH] refpolicy: add X object classes to unconfined_t Eamon Walsh Latest libselinux and thread local storage Manoj Srivastava post update label checking script Steve G Monday, 11 September Re: Supporting multiple python versions Russell Coker Re: [RFC] SELinux and PostgreSQL (draft v2) Russell Coker Re: [RFC] SELinux and PostgreSQL (draft v2) Richard Hally Re: Supporting multiple python versions Erich Schubert Re: Latest updates Christopher J. PeBenito Re: Supporting multiple python versions Christopher J. PeBenito Re: [RFC] SELinux and PostgreSQL (draft v2) KaiGai Kohei RE: Latest policycoreutils patch Joshua Brindle RE: [RFC] SELinux and PostgreSQL (draft v2) Joshua Brindle Re: [RFC] SELinux and PostgreSQL (draft v2) KaiGai Kohei Re: Latest updates Erich Schubert Sunday, 10 September Re: [RFC] SELinux and PostgreSQL (draft v2) Russell Coker RE: [PATCH 2/7] secid reconciliation-v02: Add LSM hooks James Morris Re: [RFC] SELinux and PostgreSQL (draft v2) Joshua Brindle Re: [RFC] SELinux and PostgreSQL (draft v2) Richard Hally RE: [PATCH 2/7] secid reconciliation-v02: Add LSM hooks Venkat Yekkirala Re: [RFC] SELinux and PostgreSQL (draft v2) Russell Coker Re: [RFC] SELinux and PostgreSQL (draft v2) KaiGai Kohei Saturday, 9 September Re: [PATCH] policycoreutils semanage for nodes Rodrigo Vivi Friday, 8 September Re: Supporting multiple python versions Russell Coker Re: [PATCH] newrole: use pam session management services - v4 Russell Coker Re: [PATCH] newrole: use pam session management services - v4 Russell Coker Re: Latest policycoreutils patch Stephen Smalley Re: [PATCH 2/7] secid reconciliation-v02: Add LSM hooks James Morris Re: [redhat-lspp] Re: MLS Policy (rawhide) Michael C Thompson Re: [redhat-lspp] Re: MLS Policy (rawhide) Stephen Smalley Re: [redhat-lspp] Re: MLS Policy (rawhide) Michael C Thompson Re: [redhat-lspp] Re: MLS Policy (rawhide) Stephen Smalley Re: [redhat-lspp] Re: MLS Policy (rawhide) Michael C Thompson Which role to configure IPSec? Joy Latten Re: [PATCH] newrole: use pam session management services - v4 Daniel J Walsh Re: [PATCH] newrole: use pam session management services - v4 Stephen Smalley Re: MLS Policy (rawhide) Daniel J Walsh Re: [PATCH] policycoreutils semanage for nodes Karl MacMillan Re: [PATCH] newrole: use pam session management services - v4 Daniel J Walsh Re: [PATCH] newrole: use pam session management services - v4 Stephen Smalley [PATCH 7/7] secid reconciliation-v02: Enforcement for SELinux Venkat Yekkirala [PATCH 6/7] secid reconciliation-v02: Label locally generated IPv4 traffic Venkat Yekkirala [PATCH 5/7] secid reconciliation-v02: Label locally generated IPv6 traffic Venkat Yekkirala [PATCH 4/7] secid reconciliation-v02: Invoke LSM hook for outbound traffic Venkat Yekkirala [PATCH 2/7] secid reconciliation-v02: Add LSM hooks Venkat Yekkirala [PATCH 1/7] secid reconciliation-v02 Venkat Yekkirala [PATCH 3/7] secid reconciliation-v02: Invoke LSM hook for inbound traffic Venkat Yekkirala [PATCH 0/7] secid reconciliation-v02: Repost patchset with updates Venkat Yekkirala Re: Latest policycoreutils patch Daniel J Walsh Re: [PATCH] policycoreutils semanage for nodes Joshua Brindle Supporting multiple python versions Erich Schubert Re: [PATCH] policycoreutils semanage for nodes Karl MacMillan Re: Latest policycoreutils patch Karl MacMillan Re: [PATCH] newrole: use pam session management services - v4 Janak Desai Re: [PATCH] newrole: use pam session management services - v4 Janak Desai Re: Latest policycoreutils patch Stephen Smalley Re: Latest policycoreutils patch Joshua Brindle Re: Problems with the MLS policy Stephen Smalley Re: Latest policycoreutils patch Karl MacMillan Re: [PATCH] policycoreutils semanage for nodes Joshua Brindle Re: [PATCH] policycoreutils semanage for nodes Karl MacMillan Re: [RFC] SELinux and PostgreSQL KaiGai Kohei Re: IPC security context Stephen Smalley RE: [RFC] SELinux and PostgreSQL Joshua Brindle Re: How can I get the fedora sources through cvs?Are there any anonymous account for cvs.fedora.redhat.com? Todd Miller Re: [RFC] SELinux and PostgreSQL KaiGai Kohei Re: [RFC] SELinux and PostgreSQL KaiGai Kohei Re: [RFC] SELinux and PostgreSQL KaiGai Kohei Re: [RFC] SELinux and PostgreSQL KaiGai Kohei Re: [RFC] SELinux and PostgreSQL Russell Coker How can I get the fedora sources through cvs?Are there any anonymous account for cvs.fedora.redhat.com? dongmei Thursday, 7 September Re: semanage user Serge E. Hallyn RE: [RFC] SELinux and PostgreSQL Joshua Brindle Re: [RFC] SELinux and PostgreSQL Joshua Brindle RE: [RFC] SELinux and PostgreSQL James W. Hoeft RE: [RFC] SELinux and PostgreSQL Joshua Brindle Re: [RFC] SELinux and PostgreSQL Russell Coker Re: IPC security context Russell Coker Re: MLS Policy (rawhide) Michael C Thompson MLS Policy (rawhide) Michael C Thompson Re: IPC security context Steve G Re: Problems with the MLS policy Linda Knippers Re: Problems with the MLS policy Stephen Smalley Re: IPC security context Stephen Smalley IPC security context andy.suchoski_at_comcast.net Re: [RFC] SELinux and PostgreSQL Richard Hally Problems with the MLS policy Salvo Giuffrida Re: [RFC] SELinux and PostgreSQL Joshua Brindle Re: semanage user Karl MacMillan Re: [RFC] SELinux and PostgreSQL Joshua Brindle Re: [PATCH] newrole: use pam session management services - v4 Stephen Smalley Re: [PATCH] newrole: use pam session management services - v4 Darrel Goeddel Re: [RFC] SELinux and PostgreSQL KaiGai Kohei Re: [RFC] SELinux and PostgreSQL KaiGai Kohei Monday, 1 December Re: [RFC] SELinux and PostgreSQL Joshua Brindle Thursday, 7 September Re: [RFC] SELinux and PostgreSQL KaiGai Kohei Re: [RFC] SELinux and PostgreSQL Joshua Brindle Re: [RFC] SELinux and PostgreSQL Russell Coker Re: [RFC] SELinux and PostgreSQL Joshua Brindle Latest policycoreutils patch Daniel J Walsh Re: [RFC] SELinux and PostgreSQL Russell Coker Re: [RFC] SELinux and PostgreSQL Joshua Brindle [RFC] SELinux and PostgreSQL KaiGai Kohei Wednesday, 6 September Re: current selinux-usr incompatible with refpolicy-20060307? Todd Miller Re: Latest Diffs Christopher J. PeBenito RE: ipsec and getpeercon() Venkat Yekkirala semanage user Serge E. Hallyn RE: ipsec and getpeercon() Venkat Yekkirala RE: ipsec and getpeercon() Joshua Brindle service start/stop test script Steve G Re: mls policy problem Darrel Goeddel Re: current selinux-usr incompatible with refpolicy-20060307? Darrel Goeddel Tuesday, 5 September Latest Diffs Daniel J Walsh current selinux-usr incompatible with refpolicy-20060307? Todd Miller current selinux-usr incompatible with refpolicy-20060307? Todd Miller Re: Latest updates Daniel J Walsh RE: ipsec and getpeercon() Venkat Yekkirala RE: ipsec and getpeercon() Venkat Yekkirala Re: SELinux and separation Kernels Karl MacMillan mls policy problem LC Bruzenak [PATCH] policycoreutils semanage for nodes Rodrigo Vivi Re: ipsec and getpeercon() Paul Moore RE: ipsec and getpeercon() Venkat Yekkirala RE: ipsec and getpeercon() Venkat Yekkirala Re: ipsec and getpeercon() Paul Moore Re: refpolicy updates from debian Erich Schubert RE: ipsec and getpeercon() Venkat Yekkirala Re: ipsec and getpeercon() Paul Moore RE: ipsec and getpeercon() Venkat Yekkirala Re: SE Linux API Stephen Smalley Re: ipsec and getpeercon() Paul Moore Re: ipsec and getpeercon() Paul Moore Re: ipsec and getpeercon() Paul Moore Re: ipsec and getpeercon() Joy Latten Re: [PATCH 0/3] range_transition revisited Joshua Brindle Re: [PATCH] newrole: use pam session management services - v4 Stephen Smalley [PATCH 2/3 v3] semantic MLS representation for range_trans_rules Darrel Goeddel Re: refpolicy updates from debian Christopher J. PeBenito Re: refpolicy updates from debian Erich Schubert Re: [PATCH] newrole: use pam session management services - v4 Stephen Smalley Re: bootable SE Linux distro Russell Coker Re: [PATCH 3/3 v2] semantic MLS representation for users Stephen Smalley Re: refpolicy updates from debian Christopher J. PeBenito SE Linux API Mark Re: ipsec and getpeercon() Joshua Brindle Re: bootable SE Linux distro jayendren anand maduray Re: [PATCH 3/3 v2] semantic MLS representation for users Joshua Brindle Re: ipsec and getpeercon() Stephen Smalley Re: [PATCH] newrole: use pam session management services - v4 Joshua Brindle bootable SE Linux distro Mark Re: [PATCH] newrole: use pam session management services - v4 Stephen Smalley Re: [PATCH] newrole: use pam session management services - v4 Joshua Brindle Re: ipsec and getpeercon() Joshua Brindle Re: ipsec and getpeercon() Joshua Brindle Re: ipsec and getpeercon() Paul Moore Monday, 4 September Re: ipsec and getpeercon() Paul Moore Re: ipsec and getpeercon() Paul Moore Re: Latest updates Russell Coker Netlabel tools in Fedora development James Antill SELinux and separation Kernels Sergio C newrole policy changes for lspp specific requirements .. Janak Desai [PATCH] pam_namespace: add a new option for trusted programs to control unmount from pam_sm_close_session Janak Desai [PATCH] newrole: use pam session management services - v4 Janak Desai Re: refpolicy updates from debian Erich Schubert Re: ipsec and getpeercon() Joshua Brindle Re: refpolicy updates from debian Christopher J. PeBenito Re: Latest updates Christopher J. PeBenito Re: ipsec and getpeercon() Joshua Brindle Re: ipsec and getpeercon() Joshua Brindle RE: ipsec and getpeercon() Joshua Brindle Sunday, 3 September Re: Limitation of damages Russell Coker Limitation of damages Salvo Giuffrida Friday, 1 September refpolicy updates from debian Erich Schubert Re: Using scripting languages to "macro" policy Aleks Kissinger RE: ipsec and getpeercon() Joy Latten Re: ipsec and getpeercon() Paul Moore Re: ipsec and getpeercon() Paul Moore RE: ipsec and getpeercon() Venkat Yekkirala RE: ipsec and getpeercon() Venkat Yekkirala Re: [PATCH 2/3 v2] semantic MLS representation for range_trans_rules Stephen Smalley Re: [PATCH 1/3] support for extended range_transitions Stephen Smalley Re: ipsec and getpeercon() Paul Moore Re: [PATCH 2/3 v2] semantic MLS representation for range_trans_rules Stephen Smalley RE: ipsec and getpeercon() Joy Latten RE: ipsec and getpeercon() Joy Latten Re: Latest updates Daniel J Walsh RE: ipsec and getpeercon() Venkat Yekkirala RE: ipsec and getpeercon() Venkat Yekkirala [ANN] visreport-0.2: log data visualization for NSA SELinux and Netfilter Iptables L.M.H. Re: Using scripting languages to "macro" policy Erich Schubert Re: Using scripting languages to "macro" policy Christopher J. PeBenito Re: Using scripting languages to "macro" policy Lorenzo Hernández García-Hierro RE: ipsec and getpeercon() Joy Latten RE: ipsec and getpeercon() Joshua Brindle Re: Latest updates Eric Paris Re: MLSXFRM-v02: Add support to serefpolicy Christopher J. PeBenito RE: ipsec and getpeercon() Stephen Smalley Using scripting languages to "macro" policy Aleks Kissinger Re: Latest updates Christopher J. PeBenito RE: ipsec and getpeercon() Venkat Yekkirala Re: ipsec and getpeercon() Paul Moore Re: FW: [serue@us.ibm.com: Re: [redhat-lspp] LSPP Development Telecon 08/21/2006 Minutes] Casey Schaufler RE: ipsec and getpeercon() Joshua Brindle RE: [serue@us.ibm.com: Re: [redhat-lspp] LSPP Development Telecon 08/21/2006 Minutes] Venkat Yekkirala FW: [serue@us.ibm.com: Re: [redhat-lspp] LSPP Development Telecon 08/21/2006 Minutes] Venkat Yekkirala Re: policycoreutils translations patch Darrel Goeddel RE: ipsec and getpeercon() Venkat Yekkirala MLSXFRM-v02: Add support to serefpolicy Venkat Yekkirala Re: [PATCH FOR REFERENCE ONLY] MLSXFRM-v02: Add support to serefpolicy Stephen Smalley RE: ipsec and getpeercon() Stephen Smalley Re: [PATCH FOR REFERENCE ONLY] MLSXFRM-v02: Add support to serefpolicy Christopher J. PeBenito RE: ipsec and getpeercon() Venkat Yekkirala Re: type transitioning script race condition? Joshua Brindle Re: type transitioning script race condition? Russell Coker RE: ipsec and getpeercon() Joshua Brindle Re: [PATCH FOR REFERENCE ONLY] MLSXFRM-v02: Add support to serefpolicy Stephen Smalley Re: type transitioning script race condition? Stephen Smalley Thursday, 31 August [PATCH 3/3 v2] semantic MLS representation for users Darrel Goeddel Re: type transitioning script race condition? Karl MacMillan Re: [PATCH 3/3] semantic MLS representation for users Joshua Brindle Latest updates Daniel J Walsh Re: type transitioning script race condition? Klaus Weidner Re: type transitioning script race condition? Klaus Weidner Re: type transitioning script race condition? Karl MacMillan Re: type transitioning script race condition? Joshua Brindle Re: type transitioning script race condition? Klaus Weidner Re: type transitioning script race condition? Klaus Weidner Re: type transitioning script race condition? Joshua Brindle Re: type transitioning script race condition? Karl MacMillan RE: [PATCH 0/3] secid reconciliation-v01: Repost patchset with up dates Venkat Yekkirala Re: type transitioning script race condition? Stephen Smalley Re: type transitioning script race condition? Joshua Brindle Re: [PATCH 0/3] secid reconciliation-v01: Repost patchset with up dates Paul Moore Re: type transitioning script race condition? Stephen Smalley Re: [PATCH 2/3 v2] semantic MLS representation for range_trans_rules Darrel Goeddel Re: type transitioning script race condition? Joshua Brindle Re: [PATCH 2/3 v2] semantic MLS representation for range_trans_rules Joshua Brindle RE: [PATCH 0/3] secid reconciliation-v01: Repost patchset with up dates Venkat Yekkirala Re: [PATCH 2/3 v2] semantic MLS representation for range_trans_rules Darrel Goeddel Re: type transitioning script race condition? Karl MacMillan Wednesday, 30 August Re: type transitioning script race condition? Joshua Brindle Re: type transitioning script race condition? Russell Coker type transitioning script race condition? Klaus Weidner Re: [PATCH 3/3] semantic MLS representation for users Darrel Goeddel Re: [PATCH 0/3] secid reconciliation-v01: Repost patchset with up dates Paul Moore Re: [PATCH] newrole: use pam session management services -v3 Janak Desai Re: [PATCH] newrole: use pam session management services -v3 Stephen Smalley Re: [PATCH] newrole: use pam session management services -v3 Janak Desai RE: ipsec and getpeercon() Venkat Yekkirala Re: [PATCH 3/3] semantic MLS representation for users Darrel Goeddel Re: Bug in restorecon for symlinks in root dir Joshua Brindle Re: [PATCH 2/3] semantic MLS representation for range_trans_rules Darrel Goeddel Re: [PATCH 2/3] semantic MLS representation for range_trans_rules Darrel Goeddel Re: Bug in restorecon for symlinks in root dir Stephen Smalley Re: Bug in restorecon for symlinks in root dir Erich Schubert Re: [PATCH 0/6] Various NetLabel fixes and cleanups Paul Moore Re: [PATCH] newrole: use pam session management services -v3 Stephen Smalley Re: ipsec and getpeercon() Stephen Smalley Tuesday, 29 August Re: ipsec and getpeercon() Joshua Brindle Re: ipsec and getpeercon() Klaus Weidner Re: policycoreutils translations patch Stephen Smalley Re: [PATCH] newrole: use pam session management services -v3 Stephen Smalley Re: ipsec and getpeercon() Stephen Smalley Re: ipsec and getpeercon() Stephen Smalley Re: [PATCH 1/6] NetLabel: correctly initialize the NetLabel fields Paul Moore Re: [PATCH 3/3] semantic MLS representation for users Joshua Brindle Re: [PATCH 3/3] semantic MLS representation for users Karl MacMillan Re: ipsec and getpeercon() Joshua Brindle Re: [PATCH 2/3] semantic MLS representation for range_trans_rules Karl MacMillan Re: [PATCH 2/3] semantic MLS representation for range_trans_rules Joshua Brindle Re: ipsec and getpeercon() Stephen Smalley Re: ipsec and getpeercon() Paul Moore Re: [PATCH 1/3] support for extended range_transitions Karl MacMillan Re: [PATCH 1/6] NetLabel: correctly initialize the NetLabel fields James Morris Re: justifying --context=CTX (-Z) for upstream coreutils, like mkdir Stephen Smalley Re: [PATCH 1/3] support for extended range_transitions Joshua Brindle Re: ipsec and getpeercon() Paul Moore Re: ipsec and getpeercon() Joshua Brindle ipsec and getpeercon() Joshua Brindle Re: [PATCH 1/6] NetLabel: correctly initialize the NetLabel fields Paul Moore Re: [PATCH 1/6] NetLabel: correctly initialize the NetLabel fields James Morris Re: [PATCH 4/6] NetLabel: cleanup ebitmap_import() James Morris Re: [PATCH 3/6] NetLabel: comment corrections James Morris Re: [PATCH 2/6] NetLabel: remove unused function prototypes James Morris Re: [PATCH 6/6] NetLabel: add some missing #includes to various header files James Morris Re: [PATCH 5/6] NetLabel: uninline selinux_netlbl_inode_permission() James Morris Re: [PATCH 1/6] NetLabel: correctly initialize the NetLabel fields James Morris [PATCH 4/6] NetLabel: cleanup ebitmap_import() paul.moore_at_hp.com [PATCH 5/6] NetLabel: uninline selinux_netlbl_inode_permission() paul.moore_at_hp.com [PATCH 2/6] NetLabel: remove unused function prototypes paul.moore_at_hp.com [PATCH 6/6] NetLabel: add some missing #includes to various header files paul.moore_at_hp.com [PATCH 1/6] NetLabel: correctly initialize the NetLabel fields paul.moore_at_hp.com [PATCH 3/6] NetLabel: comment corrections paul.moore_at_hp.com [PATCH 0/6] Various NetLabel fixes and cleanups paul.moore_at_hp.com Re: [PATCH] SELinux: work around filesystems which call d_instantiate before setting inode mode James Morris Monday, 28 August Re: justifying --context=CTX (-Z) for upstream coreutils, like mkdir Stephen Smalley Re: justifying --context=CTX (-Z) for upstream coreutils, like mkdir Stephen Smalley Re: justifying --context=CTX (-Z) for upstream coreutils, like mkdir Stephen Smalley Re: install vs. matchpathcon(8) [Re: justifying --context=CTX (-Z) ... Stephen Smalley Re: justifying --context=CTX (-Z) for upstream coreutils, like mkdir Stephen Smalley Re: [PATCH] SELinux: work around filesystems which call d_instantiate before setting inode mode Stephen Smalley [PATCH 3/3] semantic MLS representation for users Darrel Goeddel [PATCH 2/3] semantic MLS representation for range_trans_rules Darrel Goeddel Re: [PATCH 1/3] support for extended range_transitions Darrel Goeddel [PATCH 1/3] support for extended range_transitions Darrel Goeddel [PATCH 0/3] range_transition revisited Darrel Goeddel Re: [OT] a trouble with posting to '.@tycho.nsa.gov' Erich Schubert* Re: justifying --context=CTX (-Z) for upstream coreutils, like mkdir Joshua Brindle [OT] a trouble with posting to '.@tycho.nsa.gov' KaiGai Kohei* Wednesday, 23 August Re: justifying --context=CTX (-Z) for upstream coreutils, like mkdir Jim Meyering Sunday, 27 August [PATCH] newrole: use pam session management services -v3 Janak Desai Re: poly-instantiated directories and call-gate Casey Schaufler Re: poly-instantiated directories and call-gate Russell Coker Re: MLS with DAC Casey Schaufler Re: poly-instantiated directories and call-gate Casey Schaufler MLS with DAC Salvo Giuffrida poly-instantiated directories and call-gate Russell Coker PIE Russell Coker Friday, 25 August Re: Users Erich Schubert [PATCH] SELinux: work around filesystems which call d_instantiate before setting inode mode Eric Paris Re: [PATCH] Add boolean controlling user access to kernel keyring Klaus Weidner Users Salvo Giuffrida Re: [PATCH] add fs_use_xattr on jffs2 KaiGai Kohei RE: [PATCH 0/3] secid reconciliation-v01: Repost patchset with up dates James Morris Re: [PATCH] Add boolean controlling user access to kernel keyring Christopher J. PeBenito Re: [PATCH] add fs_use_xattr on jffs2 Lorenzo Hernández García-Hierro RE: [PATCH 0/3] secid reconciliation-v01: Repost patchset with up dates Venkat Yekkirala Re: [PATCH] add fs_use_xattr on jffs2 Christopher J. PeBenito [PATCH] add fs_use_xattr on jffs2 KaiGai Kohei Thursday, 24 August [PATCH] Add boolean controlling user access to kernel keyring Klaus Weidner Re: [PATCH 0/3] secid reconciliation-v01: Repost patchset with updates James Morris Re: Bug in restorecon for symlinks in root dir Erich Schubert policycoreutils translations patch Daniel J Walsh [PATCH 3/3] secid reconciliation-v01: core networking changes Venkat Yekkirala [PATCH 2/3] secid reconciliation-v01: add LSM hooks Venkat Yekkirala [PATCH 1/3] secid reconciliation-v01 Venkat Yekkirala [PATCH 0/3] secid reconciliation-v01: Repost patchset with updates Venkat Yekkirala Re: Bug in restorecon for symlinks in root dir Stephen Smalley Re: [patch] libselinux: do not set compat_net upon policy load Darrel Goeddel Re: [patch] libselinux: do not set compat_net upon policy load Karl MacMillan Wednesday, 23 August Re: [patch] libselinux: do not set compat_net upon policy load Joshua Brindle Re: [patch] libselinux: do not set compat_net upon policy load Stephen Smalley Re: [patch] libselinux: do not set compat_net upon policy load Joshua Brindle [patch] libselinux: do not set compat_net upon policy load Stephen Smalley Latest diffs - Resent compressed this time. Daniel J Walsh Re: Bug in restorecon for symlinks in root dir Erich Schubert Re: Don't send statistics to audit logs Steve G Re: Bug in restorecon for symlinks in root dir Stephen Smalley Re: Don't send statistics to audit logs Stephen Smalley Re: [patch 1/1] make indent target update Karl MacMillan Re: [PATCH 2/2 v3] Refactor expander Karl MacMillan Re: [PATCH 1/2 v3] Conditionally expand neverallows Karl MacMillan Re: [patch 1/1] make indent target update Stephen Smalley Re: [PATCH 2/2 v3] Refactor expander Stephen Smalley Re: [PATCH 1/2 v3] Conditionally expand neverallows Stephen Smalley Re: justifying --context=CTX (-Z) for upstream coreutils, like mkdir Joshua Brindle Tuesday, 22 August Re: justifying --context=CTX (-Z) for upstream coreutils, like mkdir James Antill Re: justifying --context=CTX (-Z) for upstream coreutils, like mkdir Jim Meyering Re: justifying --context=CTX (-Z) for upstream coreutils, like mkdir Joshua Brindle Re: justifying --context=CTX (-Z) for upstream coreutils, like mkdir Jim Meyering Re: justifying --context=CTX (-Z) for upstream coreutils, like mkdir Joshua Brindle Monday, 21 August Bug in restorecon for symlinks in root dir Erich Schubert Re: justifying --context=CTX (-Z) for upstream coreutils, like mkdir Jim Meyering Re: justifying --context=CTX (-Z) for upstream coreutils, like mkdir Jim Meyering Re: justifying --context=CTX (-Z) for upstream coreutils, like mkdir Karl MacMillan Re: justifying --context=CTX (-Z) for upstream coreutils, like mkdir Christopher J. PeBenito Re: justifying --context=CTX (-Z) for upstream coreutils, like mkdir Jim Meyering [PATCH -mm] selinux: add selinux_install make option Serge E. Hallyn AVC message logs Lorenzo Hernández García-Hierro Sunday, 20 August CFP for LCA Russell Coker Saturday, 19 August (no subject) Russell Coker Re: refpoliy issues Russell Coker Friday, 18 August Re: refpoliy issues Erich Schubert Don't send statistics to audit logs Steve G Re: refpoliy issues Christopher J. PeBenito Re: cp: --preserve={context,xattr,acl} James Antill cp: --preserve={context,xattr,acl} Jim Meyering Re: refpoliy issues Erich Schubert Re: refpoliy issues Christopher J. PeBenito Does SELinux-enabled mkdir really need --context=CTX (aka -Z CTX)? Jim Meyering install vs. matchpathcon(8) [Re: justifying --context=CTX (-Z) ... Jim Meyering Thursday, 17 August refpoliy issues Erich Schubert [patch 1/1] make indent target update Caleb Case Re: Controlling term: unknown (Operation not supported) Stephen Smalley Controlling term: unknown (Operation not supported) selinux770_at_tortenboxer.de (no subject) selinux770_at_tortenboxer.de Re: subversion repository at sourceforge Erich Schubert [PATCH 1/2 v3] Conditionally expand neverallows Jeremy A. Mowery [PATCH 2/2 v3] Refactor expander Jeremy A. Mowery Wednesday, 16 August [PATCH] newrole: use pam session management services - v2 Janak Desai Re: justifying --context=CTX (-Z) for upstream coreutils, like mkdir Jim Meyering subversion repository at sourceforge Stephen Smalley Re: justifying --context=CTX (-Z) for upstream coreutils, like mkdir James Antill Re: Invalid context in targeted SELinux policy Daniel Musgrave Re: trouble with a transition to verify access to a printer Christopher J. PeBenito Re: [RFC Patch 1/3] Context Mounts and Unsupported Contexts: kernel James Morris Re: [PATCH] SELinux: 3/3-v3 convert sbsec->sem to a mutex Stephen Smalley Re: [PATCH] SELinux: 1/3-v3 eliminate inode_security_set_security Stephen Smalley Re: [PATCH] SELinux: 2/3-v3.1 change isec->sem to a mutex Stephen Smalley Re: Invalid context in targeted SELinux policy Erich Schubert Re: Invalid context in targeted SELinux policy Stephen Smalley Re: Invalid context in targeted SELinux policy Karl MacMillan Re: Invalid context in targeted SELinux policy Karl MacMillan RE: [PATCH 3/3] Separate local file contextsinto file_contexts.local Karl MacMillan RE: [PATCH 3/3] Separate local file contextsinto file_contexts.local Stephen Smalley Tuesday, 15 August RE: [PATCH 3/3] Separate local file contextsinto file_contexts.local Joshua Brindle Invalid context in targeted SELinux policy Daniel Musgrave Re: [RFC Patch 1/3] Context Mounts and Unsupported Contexts: kernel Cory Olmo Re: [RFC Patch 1/3] Context Mounts and Unsupported Contexts: kernel James Morris Re: [PATCH] work around filesystems which incorrectly call d_instantiate before setting inode mode Stephen Smalley [RFC Patch 3/3] Context Mounts and Unsupported Contexts: nfs-utils Cory Olmo [RFC Patch 2/3] Context Mounts and Unsupported Contexts: util-linux Cory Olmo [RFC Patch 1/3] Context Mounts and Unsupported Contexts: kernel Cory Olmo [RFC Patch 0/3] Context Mounts and Unsupported Contexts Cory Olmo trouble with a transition to verify access to a printer Matt Anderson Monday, 14 August [PATCH] work around filesystems which incorrectly call d_instantiate before setting inode mode Eric Paris Re: [RFC] Dynamic discover of object classes Chad Sellers Re: [RFC] Dynamic discover of object classes Stephen Smalley Re: [RFC] Dynamic discover of object classes Karl MacMillan Re: [RFC] Dynamic discover of object classes Chad Sellers Re: [PATCH 3/3] Separate local file contexts into file_contexts.local Stephen Smalley Re: justifying --context=CTX (-Z) for upstream coreutils, like mkdir Jim Meyering Re: justifying --context=CTX (-Z) for upstream coreutils, like mkdir Karl MacMillan Re: justifying --context=CTX (-Z) for upstream coreutils, like mkdir Jim Meyering Re: justifying --context=CTX (-Z) for upstream coreutils, like mkdir Karl MacMillan Re: [PATCH 3/3] Separate local file contexts into file_contexts.local Stephen Smalley Saturday, 12 August Re: justifying --context=CTX (-Z) for upstream coreutils, like mkdir Daniel J Walsh Re: [PATCH] fixfiles: fix test for $LOGFILE Joshua Brindle [PATCH] fixfiles: fix test for $LOGFILE James Morris RE: [RFC 3/3] expander support for hooks Joshua Brindle Re: [PATCH 3/3] Separate local file contexts into file_contexts.local Joshua Brindle Re: [patch] libselinux: access per-thread proc pid attr nodes, unify code James Antill Friday, 11 August Re: [PATCH 3/3] Separate local file contexts into file_contexts.local Stephen Smalley [patch] libselinux: access per-thread proc pid attr nodes, unify code Stephen Smalley Re: justifying --context=CTX (-Z) for upstream coreutils, like mkdir Jim Meyering Re: justifying --context=CTX (-Z) for upstream coreutils, like mkdir Casey Schaufler Re: justifying --context=CTX (-Z) for upstream coreutils, like mkdir Stephen Smalley Re: justifying --context=CTX (-Z) for upstream coreutils, like mkdir Karl MacMillan justifying --context=CTX (-Z) for upstream coreutils, like mkdir Jim Meyering [PATCH 3/3] Separate local file contexts into file_contexts.local Christopher J. PeBenito [PATCH 2/3] Separate local file contexts into file_contexts.local Christopher J. PeBenito [PATCH 1/3] Separate local file contexts into file_contexts.local Christopher J. PeBenito [PATCH 0/3] Separate local file contexts into file_contexts.local Christopher J. PeBenito Thursday, 10 August Re: does mv need a --context=CTX (-Z) option, too? Russell Coker Re: does mv need a --context=CTX (-Z) option, too? Jim Meyering Re: does mv need a --context=CTX (-Z) option, too? Jim Meyering Re: does mv need a --context=CTX (-Z) option, too? James Antill RE: [RFC 3/3] expander support for hooks Karl MacMillan RE: [RFC 0/3] libsepol enforcement hooks for policy server Karl MacMillan Re: does mv need a --context=CTX (-Z) option, too? Karl MacMillan Re: does mv need a --context=CTX (-Z) option, too? Casey Schaufler Re: does mv need a --context=CTX (-Z) option, too? Karl MacMillan Re: does mv need a --context=CTX (-Z) option, too? James Antill Re: does mv need a --context=CTX (-Z) option, too? Daniel J Walsh Re: does mv need a --context=CTX (-Z) option, too? Casey Schaufler Re: does mv need a --context=CTX (-Z) option, too? Jim Meyering Re: does mv need a --context=CTX (-Z) option, too? Daniel J Walsh Re: does mv need a --context=CTX (-Z) option, too? Jim Meyering Labeled networking code now in Fedora rawhide kernel James Morris Re: does mv need a --context=CTX (-Z) option, too? kmacmillan_at_mentalrootkit.com Re: does mv need a --context=CTX (-Z) option, too? Stephen Smalley does mv need a --context=CTX (-Z) option, too? Jim Meyering Wednesday, 9 August RE: [RFC 3/3] expander support for hooks Joshua Brindle RE: [RFC 1/3] hook callbacks Joshua Brindle RE: [RFC 0/3] libsepol enforcement hooks for policy server Joshua Brindle Re: [RFC 3/3] expander support for hooks Karl MacMillan Re: [RFC 1/3] hook callbacks Karl MacMillan Re: [RFC 0/3] libsepol enforcement hooks for policy server Karl MacMillan RE: [PATCH 2/2 take 2] userland support for new range_transitionstatements Joshua Brindle Re: [PATCH 2/2 take 2] userland support for new range_transition statements Karl MacMillan Re: [PATCH 2/2 take 2] userland support for new range_transition statements Darrel Goeddel Re: [PATCH 2/2] userland support for new range_transition statements Darrel Goeddel Re: [PATCH 2/2 take 2] userland support for new range_transition statements Darrel Goeddel Re: id -Z subsumed by secon? Jim Meyering stat's -Z/--context option is gone [Re: id -Z subsumed by secon? Jim Meyering Re: What the relationship of "users" file, "rolemap" file, "appconfig-strict/seusers" file and so on in Reference policy? Christopher J. PeBenito re: id -Z subsumed by secon? Karl MacMillan Re: [PATCH 2/2 take 2] userland support for new range_transition statements Joshua Brindle re: id -Z subsumed by secon? Janak Desai RE: [PATCH 2/2 take 2] userland support for new range_transition statements Karl MacMillan What the relationship of "users" file, "rolemap" file, "appconfig-strict/seusers" file and so on in Reference policy? root Tuesday, 8 August RE: [PATCH 2/2] userland support for new range_transition statements Joshua Brindle RE: [PATCH 2/2 take 2] userland support for new range_transition statements Joshua Brindle re: id -Z subsumed by secon? Daniel J Walsh [PATCH] libselinux: add library support for sockcreate Eric Paris Re: id -Z subsumed by secon? James Antill Re: setexeccon vs. setfscreatecon Jim Meyering Re: setexeccon vs. setfscreatecon Stephen Smalley Re: setexeccon vs. setfscreatecon James Antill Re: setexeccon vs. setfscreatecon Jim Meyering Re: setexeccon vs. setfscreatecon Stephen Smalley Re: [PATCH 2/2] userland support for new range_transition statements Darrel Goeddel setexeccon vs. setfscreatecon Jim Meyering Monday, 7 August Re: [PATCH 0/2] new and improved range_transition statements Stephen Smalley Re: hierarchical roles Janak Desai Re: hierarchical roles Stephen Smalley Re: mrtg policy addons Christopher J. PeBenito hierarchical roles Janak Desai Re: [PATCH 1/2] put neverallows in avtab, propagate errors in policydb Karl MacMillan [PATCH 1/3] Optionally expand neverallows, propagate errors in policydb Jeremy A. Mowery Re: [PATCH 2/3] Refactor expander Stephen Smalley Thursday, 3 August [PATCH-v01 4/7] NetLabel: core NetLabel subsystem paul.moore_at_hp.com Wednesday, 2 August Latest diffs Daniel J Walsh Thursday, 3 August [PATCH-v01 1/7] NetLabel: documentation paul.moore_at_hp.com Wednesday, 2 August [PATCH 1/2] Introduce symtab_datum_t. kmacmillan_at_mentalrootkit.com Thursday, 3 August Re: [PATCH 3/5] libsepol tests for the linker Joshua Brindle [PATCH-v01 3/7] NetLabel: CIPSOv4 engine paul.moore_at_hp.com [PATCH 3/5] libsepol tests for the linker Joshua Brindle Wednesday, 2 August [PATCH 1/2] Ver 2 Introduce symtab_datum_t Karl MacMillan Tuesday, 1 August [PATCH 1/2] put neverallows in avtab, propagate errors in policydb Joshua Brindle Thursday, 3 August [PATCH 1/2] Optionally expand neverallows, propagate errors in policydb Jeremy A. Mowery Monday, 7 August RE: [PATCH 0/2] new and improved range_transition statements Stephen Smalley [PATCH 3/3] corrected return code checking Jeremy A. Mowery [PATCH 2/3] Refactor expander Jeremy A. Mowery Re: [PATCH 0/2] new and improved range_transition statements Christopher J. PeBenito RE: [PATCH 0/2] new and improved range_transition statements Joshua Brindle RE: [PATCH 0/2] new and improved range_transition statements Stephen Smalley RE: [PATCH 2/2] userland support for new range_transition statements Joshua Brindle RE: [PATCH 0/2] new and improved range_transition statements Joshua Brindle Saturday, 5 August mrtg policy addons Stefan Friday, 4 August Re: [PATCH 0/2] new and improved range_transition statements Darrel Goeddel Re: [PATCH 2/2 take 2] userland support for new range_transition statements Darrel Goeddel Re: [PATCH 2/2] userland support for new range_transition statements Darrel Goeddel Re: [PATCH] SELinux: 2/3-v3.1 change isec->sem to a mutex Eric Paris Re: [PATCH 0/2] new and improved range_transition statements James Morris Re: [PATCH 0/2] new and improved range_transition statements Stephen Smalley Thursday, 3 August [PATCH] SELinux: 3/3-v3 convert sbsec->sem to a mutex Eric Paris [PATCH] SELinux: 1/3-v3 eliminate inode_security_set_security Eric Paris [PATCH] SELinux: 2/3-v3 change isec->sem to a mutex Eric Paris [PATCH] SELinux: 0/3-v3 clean up locking and semaphore usage Eric Paris [PATCH] SELinux: 0/3-v2 clean up locking and semaphore usage Eric Paris [PATCH] SELinux: 0/3-v2 clean up locking and semaphore usage Eric Paris [PATCH-v01 6/7] NetLabel: SELinux support paul.moore_at_hp.com [PATCH-v01 7/7] NetLabel: tie NetLabel into the Kconfig system paul.moore_at_hp.com [PATCH-v01 5/7] NetLabel: CIPSOv4 and Unlabeled packet integration paul.moore_at_hp.com [PATCH-v01 2/7] NetLabel: core network changes paul.moore_at_hp.com [PATCH-v01 0/7] Latest NetLabel patchset against net-2.6.19 paul.moore_at_hp.com Re: [PATCH 3/2] update return code checks for callers of expand_rule_helper Karl MacMillan* [PATCH 3/2] update return code checks for callers of expand_rule_helper Jeremy A. Mowery* Re: [PATCH 3/5] libsepol tests for the linker Stephen Smalley Re: [PATCH 1/2] Optionally expand neverallows, propagate errors in policydb Stephen Smalley RE: [PATCH 2/2] userland support for new range_transition statements Joshua Brindle Re: [PATCH 2/5] libsepol test commons Joshua Brindle Re: Patch to fix segfault in libselinux Daniel J Walsh Re: [PATCH 0/5] libsepol unit tests Stephen Smalley Re: [PATCH 2/2] Ver 2 Introduce symtab_datum_t Stephen Smalley Re: [PATCH] secon makefile Stephen Smalley Re: Patch to fix segfault in libselinux Stephen Smalley Re: [PATCH 7/6] netfilter integration take 2: style fixes Stephen Smalley [PATCH 5/5] libsepol dependancy tests Joshua Brindle [PATCH 4/5] libsepol expander tests Joshua Brindle [PATCH 2/5] libsepol test commons Joshua Brindle [PATCH 0/5] libsepol unit tests Joshua Brindle [PATCH 1/5] libsepol unit test infrastructure Joshua Brindle [PATCH 2/2] Refactor expander Jeremy A. Mowery RE: [PATCH 2/2] userland support for new range_transition statements Joshua Brindle Wednesday, 2 August Re: [PATCH 2/2] userland support for new range_transition statements Darrel Goeddel Re: SMP enabled restorecon Stephen Smalley Re: SMP enabled restorecon Klaus Weidner Re: SMP enabled restorecon Daniel J Walsh Re: [PATCH 2/2] userland support for new range_transition statements Karl MacMillan Re: [PATCH 7/6] netfilter integration take 2: style fixes Karl MacMillan [PATCH 2/2] Ver 2 Introduce symtab_datum_t Karl MacMillan [PATCH 0/2] Ver 2 Introduce symtab_datum_t Karl MacMillan [PATCH 2/2] Introduce symtab_datum_t kmacmillan_at_mentalrootkit.com Ver 2 Introduce symtab_datum_t kmacmillan_at_mentalrootkit.com [PATCH 7/6] netfilter integration take 2: style fixes Christopher J. PeBenito Re: [PATCH 2/2] userland support for new range_transition statements Darrel Goeddel RE: [RFC 1/3] secid reconciliation on inbound Venkat Yekkirala Re: [PATCH 4/6] netfilter integration take 2: add netfilter contexts sorting Christopher J. PeBenito Re: [PATCH 2/6] netfilter integration take 2: add netfilter contexts package section Karl MacMillan Re: [PATCH 4/6] netfilter integration take 2: add netfilter contexts sorting Karl MacMillan [PATCH] secon makefile Joshua Brindle Re: [PATCH 10/10] MLSXFRM-v02: Auto-labeling of child sockets Paul Moore Re: [PATCH 3/6] netfilter integration take 2: module store support Karl MacMillan Patch to fix segfault in libselinux Daniel J Walsh RE: [PATCH 10/10] MLSXFRM-v02: Auto-labeling of child sockets Venkat Yekkirala Re: [PATCH 2/6] netfilter integration take 2: add netfilter contexts package section Karl MacMillan Re: [PATCH 10/10] MLSXFRM-v02: Auto-labeling of child sockets Paul Moore Re: [RFC 1/3] secid reconciliation on inbound Stephen Smalley Re: [PATCH 2/6] netfilter integration take 2: add netfilter contexts package section Stephen Smalley RE: [PATCH 10/10] MLSXFRM-v02: Auto-labeling of child sockets Venkat Yekkirala Re: [PATCH 2/6] netfilter integration take 2: add netfilter contexts package section Karl MacMillan Re: [PATCH 1/6] netfilter integration take 2: add netfilter_contexts path to libselinux Karl MacMillan Re: [PATCH 10/10] MLSXFRM-v02: Auto-labeling of child sockets Paul Moore RE: [RFC 1/3] secid reconciliation on inbound Venkat Yekkirala RE: [RFC 2/3] secid reconciliation on inbound: add LSM hooks Venkat Yekkirala Re: [RFC 1/3] secid reconciliation on inbound James Morris Tuesday, 1 August Re: [RFC 1/3] secid reconciliation on inbound James Morris Re: [RFC 2/3] secid reconciliation on inbound: add LSM hooks James Morris RE: [PATCH 10/10] MLSXFRM-v02: Auto-labeling of child sockets Venkat Yekkirala Re: [PATCH 10/10] MLSXFRM-v02: Auto-labeling of child sockets Paul Moore [RFC 2/3] secid reconciliation on inbound: add LSM hooks Venkat Yekkirala [RFC 3/3] secid reconciliation on inbound: core networking changes Venkat Yekkirala [RFC 1/3] secid reconciliation on inbound Venkat Yekkirala Re: infelicity in context_user_set; new syscalls: setfileconat, etc.? Stephen Smalley Re: gnuTAR support for SELinux context (beta) James Antill Re: gnuTAR support for SELinux context (beta) James Antill Re: gnuTAR support for SELinux context (beta) Stephen John Smoogen [PATCH 6/6] netfilter integration take 2: add netfilter contexts sorting test case Christopher J. PeBenito [PATCH 5/6] netfilter integration take 2: add support to semodule_package Christopher J. PeBenito [PATCH 4/6] netfilter integration take 2: add netfilter contexts sorting Christopher J. PeBenito [PATCH 2/6] netfilter integration take 2: add netfilter contexts package section Christopher J. PeBenito [PATCH 3/6] netfilter integration take 2: module store support Christopher J. PeBenito [PATCH 1/6] netfilter integration take 2: add netfilter_contexts path to libselinux Christopher J. PeBenito [PATCH 0/6] netfilter integration take 2 Christopher J. PeBenito Re: gnuTAR support for SELinux context (beta) Stephen Smalley Re: [PATCH 1/2] put neverallows in avtab, propagate errors in policydb Stephen Smalley Re: gnuTAR support for SELinux context (beta) Stephen John Smoogen gnuTAR support for SELinux context (beta) James Antill [PATCH 2/2] refactor expander Joshua Brindle Re: Context mounts and unsupported context strings Stephen Smalley Re: Any idea why /proc/mtrr is marked as mtrr_device_t? Christopher J. PeBenito Re: Any idea why /proc/mtrr is marked as mtrr_device_t? Stephen Smalley Re: Any idea why /proc/mtrr is marked as mtrr_device_t? Daniel J Walsh Re: Any idea why /proc/mtrr is marked as mtrr_device_t? Stephen Smalley Any idea why /proc/mtrr is marked as mtrr_device_t? Daniel J Walsh Re: [PATCH 2/2] userland support for new range_transition statements Joshua Brindle Re: [PATCH 1/2] Introduce symtab_datum_t Joshua Brindle Re: [PATCH 2/2] Introduce symtab_datum_t Joshua Brindle [RFC 3/3] expander support for hooks Josh Brindle [RFC 2/3] hook enforcement Josh Brindle [RFC 1/3] hook callbacks Josh Brindle [RFC 0/3] libsepol enforcement hooks for policy server Josh Brindle Monday, 31 July Re: [PATCH] newrole: use pam session management services Janak Desai Re: [PATCH 1/2] kernel support for new range_transition statements James Morris Re: [PATCH 2/2] userland support for new range_transition statements Stephen Smalley Re: [PATCH] newrole: use pam session management services Karl MacMillan 2007 SELinux Symposium dates and call for papers Joshua Brindle Re: [PATCH 2/2] userland support for new range_transition statements Darrel Goeddel Re: [PATCH 2/2] userland support for new range_transition statements Karl MacMillan Re: [PATCH 2/2] userland support for new range_transition statements Darrel Goeddel Re: [PATCH 2/2] userland support for new range_transition statements Stephen Smalley Re: infelicity in context_user_set; new syscalls: setfileconat, etc.? Jim Meyering Re: [PATCH 1/2] kernel support for new range_transition statements Stephen Smalley [PATCH 1/2] Introduce symtab_datum_t Karl MacMillan Re: [PATCH 0/2] new and improved range_transition statements Valdis.Kletnieks_at_vt.edu RE: [PATCH 0/2] new and improved range_transition statements Karl MacMillan Re: [PATCH 0/2] new and improved range_transition statements Darrel Goeddel Re: [PATCH 0/2] new and improved range_transition statements Karl MacMillan [PATCH 2/2] Introduce symtab_datum_t Karl MacMillan [PATCH 0/2] Introduce symtab_datum_t Karl MacMillan Re: [PATCH 0/2] new and improved range_transition statements Stephen Smalley Re: [PATCH 0/2] new and improved range_transition statements Valdis.Kletnieks_at_vt.edu Re: [PATCH 0/2] new and improved range_transition statements Stephen Smalley RE: [PATCH 0/2] new and improved range_transition statements Joshua Brindle Re: infelicity in context_user_set; new syscalls: setfileconat, etc.? Jim Meyering Re: [PATCH 2/7] NetLabel: core network changes Paul Moore RE: [PATCH 0/2] new and improved range_transition statements Karl MacMillan Re: infelicity in context_user_set; new syscalls: setfileconat, etc.? Karl MacMillan RE: [PATCH 0/2] new and improved range_transition statements Joshua Brindle Re: infelicity in context_user_set; new syscalls: setfileconat, etc.? Stephen Smalley Re: [PATCH 0/2] new and improved range_transition statements Karl MacMillan Re: [PATCH 0/2] new and improved range_transition statements Stephen Smalley Re: infelicity in context_user_set; new syscalls: setfileconat, etc.? Jim Meyering Re: infelicity in context_user_set; new syscalls: setfileconat, etc.? Stephen Smalley Re: infelicity in context_user_set; new syscalls: setfileconat, etc.? Jim Meyering Re: infelicity in context_user_set; new syscalls: setfileconat, etc.? Karl MacMillan Re: [PATCH 0/2] new and improved range_transition statements Karl MacMillan RE: [PATCH 2/7] NetLabel: core network changes Venkat Yekkirala Re: infelicity in context_user_set; new syscalls: setfileconat, etc.? Russell Coker Re: infelicity in context_user_set; new syscalls: setfileconat, etc.? Jim Meyering Re: infelicity in context_user_set; new syscalls: setfileconat, etc.? Valdis.Kletnieks_at_vt.edu Sunday, 30 July Re: RHEL5 Security Guide draft TOC for review/comment David O'Brien Re: SMP enabled restorecon Russell Coker Re: SMP enabled restorecon Russell Coker Saturday, 29 July Re: [PATCH 2/7] NetLabel: core network changes Paul Moore RE: [PATCH 2/7] NetLabel: core network changes Venkat Yekkirala Re: [PATCH RETRY 2/3] Optionally expand neverallows Joshua Brindle Re: SMP enabled restorecon Russell Coker SMP enabled restorecon Russell Coker infelicity in context_user_set; new syscalls: setfileconat, etc.? Jim Meyering Friday, 28 July Re: mls policy Chris PeBenito mls policy andy.suchoski_at_comcast.net Re: [PATCH 2/7] NetLabel: core network changes Paul Moore Re: [PATCH 2/7] NetLabel: core network changes Paul Moore Re: [PATCH 2/7] NetLabel: core network changes Paul Moore Re: [PATCH 1/7] NetLabel: documentation Paul Moore Re: [PATCH 2/7] NetLabel: core network changes Paul Moore Re: [PATCH 2/7] NetLabel: core network changes Paul Moore Re: [PATCH 2/7] NetLabel: core network changes Paul Moore [PATCH] newrole: use pam session management services Janak Desai [PATCH 2/2] userland support for new range_transition statements Darrel Goeddel [PATCH 1/2] kernel support for new range_transition statements Darrel Goeddel [PATCH 0/2] new and improved range_transition statements Darrel Goeddel Re: [PATCH] SELinux: new /proc/self/attr/ipccreate for expliciteipc object labeling Eric Paris RE: [PATCH RETRY 2/3] Optionally expand neverallows Joshua Brindle Re: [PATCH RETRY 2/3] Optionally expand neverallows Stephen Smalley Re: [PATCH] SELinux: new /proc/self/attr/ipccreate for expliciteipc object labeling Stephen Smalley Re: [PATCH] SELinux: new /proc/self/attr/ipccreate for expliciteipc object labeling Russell Coker Re: [PATCH 10/10] MLSXFRM-v02: Auto-labeling of child sockets James Morris Re: [PATCH] SELinux: new /proc/self/attr/ipccreate for expliciteipc object labeling James Morris Re: [PATCH] SELinux: new /proc/self/attr/ipccreate for expliciteipc object labeling James Morris Thursday, 27 July RHEL5 Security Guide draft TOC for review/comment David O'Brien Re: [PATCH] SELinux: new /proc/self/attr/ipccreate for expliciteipc object labeling Valdis.Kletnieks_at_vt.edu Re: [PATCH RETRY 2/3] Optionally expand neverallows Karl MacMillan Re: semanage and RHPL Stephen Smalley RE: [PATCH RETRY 2/3] Optionally expand neverallows Joshua Brindle Re: [PATCH RETRY 2/3] Optionally expand neverallows Karl MacMillan [PATCH] restorecond 64bit correctness Joshua Brindle Re: [PATCH RETRY 2/3] Optionally expand neverallows Joshua Brindle Re: [PATCH] SELinux: 3/3 eliminate sbsec->sem altogether Stephen Smalley Re: [PATCH] SELinux: 2/3 change isec->sem to a mutex Stephen Smalley Re: [PATCH RETRY 2/3] Optionally expand neverallows Joshua Brindle Re: [PATCH] SELinux: 1/3 eliminate inode_security_set_security Stephen Smalley Re: [PATCH] SELinux: new /proc/self/attr/ipccreate for expliciteipc object labeling Stephen Smalley [PATCH] SELinux: 3/3 eliminate sbsec->sem altogether Eric Paris [PATCH] SELinux: 1/3 eliminate inode_security_set_security Eric Paris [PATCH] SELinux: 0/3 clean up locking and semaphore usage Eric Paris [PATCH] SELinux: 2/3 change isec->sem to a mutex Eric Paris [PATCH] SELinux: new /proc/self/attr/ipccreate for expliciteipc object labeling Eric Paris Re: [PATCH 10/10] MLSXFRM-v02: Auto-labeling of child sockets Venkat Yekkirala Re: Converting ebitmaps to copy-on-write? Paul Moore Re: [PATCH 0/6] netfilter integration Karl MacMillan Re: [PATCH 0/6] netfilter integration Casey Schaufler Re: Converting ebitmaps to copy-on-write? Karl MacMillan Re: [PATCH] clean up datum cast to uint32 Karl MacMillan RE: [PATCH] clean up datum cast to uint32 Joshua Brindle RE: [PATCH] clean up datum cast to uint32 Stephen Smalley Re: [PATCH] clean up datum cast to uint32 Karl MacMillan Re: [PATCH RETRY 3/3] Refactor expansion of avtab Karl MacMillan RE: [PATCH] clean up datum cast to uint32 Joshua Brindle Re: [PATCH 2/2] Refactor expansion of avtab Karl MacMillan Re: [PATCH 1/2] Conditionally expand neverallows Karl MacMillan Re: [PATCH] clean up datum cast to uint32 Stephen Smalley Re: [PATCH] helpful heirarchy check errors Karl MacMillan Re: [PATCH] clean up datum cast to uint32 Karl MacMillan RE: [PATCH RETRY 1/3] export sepol handle Joshua Brindle Re: [PATCH RETRY 2/3] Optionally expand neverallows Stephen Smalley Securing backup-shell-script Thomas Reuss Wednesday, 26 July Re: [PATCH 4/6] netfilter integration: add netfilter contexts sorting Karl MacMillan Re: [PATCH 3/6] netfilter integration: module store support Karl MacMillan Re: [PATCH 2/6] netfilter integration: add netfilter contexts package section Karl MacMillan Re: [PATCH 0/6] netfilter integration Karl MacMillan Re: [PATCH RETRY 2/3] Optionally expand neverallows Stephen Smalley Re: [PATCH RETRY 1/3] export sepol handle Stephen Smalley [PATCH RETRY 2/3] Optionally expand neverallows Joshua Brindle [PATCH RETRY 3/3] Refactor expansion of avtab Joshua Brindle [PATCH RETRY 1/3] export sepol handle Joshua Brindle RE: [PATCH 3/2] comments and format fixes Stephen Smalley Converting ebitmaps to copy-on-write? Paul Moore RE: [PATCH 3/2] comments and format fixes Joshua Brindle Re: [PATCH 3/2] comments and format fixes Stephen Smalley [PATCH 3/2] comments and format fixes Joshua Brindle Re: [PATCH 0/6] netfilter integration Christopher J. PeBenito [PATCH] clean up datum cast to uint32 Joshua Brindle [PATCH] helpful heirarchy check errors Joshua Brindle Tuesday, 25 July Context mounts and unsupported context strings Cory Olmo Re: [PATCH 0/6] netfilter integration Casey Schaufler RE: [PATCH 2/2] Refactor expansion of avtab Joshua Brindle RE: [PATCH] Export sepol handle Joshua Brindle RE: [PATCH 1/2] Conditionally expand neverallows Joshua Brindle Re: Bare bones SELinux Policy Aleks Kissinger Re: [PATCH 2/2] Refactor expansion of avtab Karl MacMillan Re: [PATCH 1/2] Conditionally expand neverallows Karl MacMillan Re: [PATCH] Export sepol handle Karl MacMillan Re: [PATCH 4/6] netfilter integration: add netfilter contexts sorting Christopher J. PeBenito Re: [PATCH 3/6] netfilter integration: module store support Christopher J. PeBenito Re: [PATCH 2/6] netfilter integration: add netfilter contexts package section Christopher J. PeBenito Re: [PATCH 0/6] netfilter integration Christopher J. PeBenito Bare bones SELinux Policy Aleks Kissinger [PATCH 2/2] Refactor expansion of avtab Joshua Brindle [PATCH 1/2] Conditionally expand neverallows Joshua Brindle [PATCH] Export sepol handle Joshua Brindle Re: security_context_to_sid failed - mounting from /etc/rc.d M Macnair Re: security_context_to_sid failed - mounting from /etc/rc.d Stephen Smalley security_context_to_sid failed - mounting from /etc/rc.d M Macnair Monday, 24 July Re: Existence of "helper" functions (specifcally MLS) Joe Nall Re: Existence of "helper" functions (specifcally MLS) Joshua Brindle Re: Existence of "helper" functions (specifcally MLS) Stephen Smalley Re: Existence of "helper" functions (specifcally MLS) Stephen Smalley Re: Existence of "helper" functions (specifcally MLS) Joe Nall Re: Existence of "helper" functions (specifcally MLS) Casey Schaufler Re: Existence of "helper" functions (specifcally MLS) Stephen Smalley Re: Existence of "helper" functions (specifcally MLS) Joe Nall Re: Existence of "helper" functions (specifcally MLS) Stephen Smalley Re: Existence of "helper" functions (specifcally MLS) Joe Nall Re: Existence of "helper" functions (specifcally MLS) David Quigley Thursday, 20 July Existence of "helper" functions (specifcally MLS) Michael C Thompson Wednesday, 19 July RE: [PATCH 4/6] netfilter integration: add netfilter contexts sor ting Venkat Yekkirala New projects on SELinux open source server Dave Sugar RE: [PATCH] SELinux: new /proc/self/attr/ipccreate for expliciteipc object labeling Joshua Brindle Re: [PATCH] SELinux: new /proc/self/attr/ipccreate for explicite ipc object labeling Karl MacMillan Re: [PATCH] SELinux: new /proc/self/attr/ipccreate for explicite ipc object labeling Joshua Brindle Tuesday, 18 July Re: [PATCH] SELinux: new /proc/self/attr/ipccreate for explicite ipc object labeling Stephen Smalley Re: [PATCH] SELinux: new /proc/self/attr/ipccreate for explicite ipc object labeling Karl MacMillan [PATCH] SELinux: new /proc/self/attr/ipccreate for explicite ipc object labeling Eric Paris Re: [PATCH 4/6] netfilter integration: add netfilter contexts sorting Karl MacMillan [PATCH 03/10] MLSXFRM-v02: Add security sid to sock Venkat Yekkirala [PATCH FOR REFERENCE ONLY] MLSXFRM-v02: Add support to serefpolicy Venkat Yekkirala [PATCH 08/10] MLSXFRM-v02: Add flow labeling Venkat Yekkirala [PATCH 10/10] MLSXFRM-v02: Auto-labeling of child sockets Venkat Yekkirala [PATCH 09/10] MLSXFRM-v02: Default labeling of socket specific IPSec policies Venkat Yekkirala [PATCH 07/10] MLSXFRM: Add security context to acquire messages using PF_KEY Venkat Yekkirala [PATCH 05/10] MLSXFRM-v02: Flow based matching of xfrm policy and state Venkat Yekkirala [PATCH 06/10] MLSXFRM-v02: Add security context to acquire messages using netlink Venkat Yekkirala [PATCH 04/10] MLSXFRM-v02: Add security sid to flowi Venkat Yekkirala [PATCH 02/10] MLSXFRM-v02: Define new SELinux service routine Venkat Yekkirala [PATCH 00/10] MLSXFRM-v02: Repost patchset with updates Venkat Yekkirala [PATCH 01/10] MLSXFRM-v02: Granular IPSec associations for use in MLS environments Venkat Yekkirala Re: [PATCH 4/6] netfilter integration: add netfilter contexts sorting Joshua Brindle Re: [PATCH 4/6] netfilter integration: add netfilter contexts sorting Karl MacMillan Re: [PATCH 3/6] netfilter integration: module store support Karl MacMillan Re: [PATCH 0/6] netfilter integration Karl MacMillan Re: [PATCH 1/6] netfilter integration: add netfilter_contexts path to libselinux Karl MacMillan Re: [PATCH 2/6] netfilter integration: add netfilter contexts package section Karl MacMillan Re: [PATCH 0/6] netfilter integration Casey Schaufler Monday, 17 July Re: [PATCH 0/6] netfilter integration Joshua Brindle Re: [PATCH 0/6] netfilter integration Casey Schaufler [PATCH 6/6] netfilter integration: add netfilter contexts sorting test case Christopher J. PeBenito [PATCH 5/6] netfilter integration: add support to semodule_package Christopher J. PeBenito [PATCH 4/6] netfilter integration: add netfilter contexts sorting Christopher J. PeBenito [PATCH 3/6] netfilter integration: module store support Christopher J. PeBenito [PATCH 2/6] netfilter integration: add netfilter contexts package section Christopher J. PeBenito [PATCH 1/6] netfilter integration: add netfilter_contexts path to libselinux Christopher J. PeBenito [PATCH 0/6] netfilter integration Christopher J. PeBenito Re: semanage and RHPL Stephen Bennett Re: [PATCH 0/7] Updated patchset w/James' comments Paul Moore Re: [PATCH 0/7] Updated patchset w/James' comments Valdis.Kletnieks_at_vt.edu [PATCH 3/7] NetLabel: CIPSOv4 engine paul.moore_at_hp.com [PATCH 1/7] NetLabel: documentation paul.moore_at_hp.com [PATCH 6/7] NetLabel: SELinux support paul.moore_at_hp.com [PATCH 4/7] NetLabel: core NetLabel subsystem paul.moore_at_hp.com [PATCH 7/7] NetLabel: tie NetLabel into the Kconfig system paul.moore_at_hp.com [PATCH 5/7] NetLabel: CIPSOv4 and Unlabeled packet integration paul.moore_at_hp.com [PATCH 2/7] NetLabel: core network changes paul.moore_at_hp.com [PATCH 0/7] Updated patchset w/James' comments paul.moore_at_hp.com [PATCH] security_compute_sid: minor bug fix Venkat Yekkirala RE: [PATCH 08/10] MLSXFRM: Add security context to acquire messag es using PF_KEY Venkat Yekkirala Friday, 14 July [PATCH 4/7] NetLabel: core NetLabel subsystem paul.moore_at_hp.com [PATCH 3/7] NetLabel: CIPSOv4 engine paul.moore_at_hp.com [PATCH 1/7] NetLabel: documentation paul.moore_at_hp.com [PATCH 6/7] NetLabel: SELinux support paul.moore_at_hp.com Monday, 17 July Request for info: development status of SELinux and Security in general David O'Brien Sunday, 16 July Re: [PATCH 3/7] NetLabel: CIPSOv4 engine Paul Moore Re: FC5 policy - rawhide Russell Coker Re: [PATCH 3/7] NetLabel: CIPSOv4 engine Paul Moore Type Change and Type Transition Mario Fanelli Saturday, 15 July FC5 policy Russell Coker Re: [PATCH 3/7] NetLabel: CIPSOv4 engine Paul Moore Re: [PATCH 3/7] NetLabel: CIPSOv4 engine James Morris Re: [PATCH 3/7] NetLabel: CIPSOv4 engine Paul Moore Re: [PATCH 3/7] NetLabel: CIPSOv4 engine Paul Moore Re: [PATCH 3/7] NetLabel: CIPSOv4 engine Paul Moore Re: [PATCH 3/7] NetLabel: CIPSOv4 engine Paul Moore Re: [PATCH 3/7] NetLabel: CIPSOv4 engine Paul Moore Re: [PATCH 2/7] NetLabel: core network changes Paul Moore Re: [PATCH 3/7] NetLabel: CIPSOv4 engine James Morris Re: [PATCH 3/7] NetLabel: CIPSOv4 engine James Morris Re: [PATCH 3/7] NetLabel: CIPSOv4 engine James Morris Re: [PATCH 08/10] MLSXFRM: Add security context to acquire messages using PF_KEY Herbert Xu CVS-2006-3626 local privilege escalation stopped by targeted policy Joshua Brindle Friday, 14 July Re: [PATCH 08/10] MLSXFRM: Add security context to acquire messages using PF_KEY Herbert Xu Re: [PATCH 3/7] NetLabel: CIPSOv4 engine James Morris Re: [PATCH 3/7] NetLabel: CIPSOv4 engine James Morris Re: [PATCH 3/7] NetLabel: CIPSOv4 engine James Morris Re: [PATCH 2/7] NetLabel: core network changes James Morris [PATCH 7/7] NetLabel: tie NetLabel into the Kconfig system paul.moore_at_hp.com [PATCH 2/7] NetLabel: core network changes paul.moore_at_hp.com [PATCH 5/7] NetLabel: CIPSOv4 and Unlabeled packet integration paul.moore_at_hp.com [PATCH 0/7] Latest NetLabel patch for 2.6.19 paul.moore_at_hp.com Re: role infrastructure Daniel J Walsh Re: [PATCH 08/10] MLSXFRM: Add security context to acquire messages using PF_KEY James Morris Re: role infrastructure Christopher J. PeBenito RHEL5 Security Documentation Scope Statement David O'Brien Re: [PATCH] selinux: fix memory leak James Morris Thursday, 13 July RE: [PATCH 08/10] MLSXFRM: Add security context to acquire messag es using PF_KEY Venkat Yekkirala SELinux opensource server online Joshua Brindle [PATCH] selinux: fix memory leak Darrel Goeddel Re: [PATCH 08/10] MLSXFRM: Add security context to acquire messages using PF_KEY James Morris RE: [PATCH 08/10] MLSXFRM: Add security context to acquire messag es using PF_KEY James Morris RE: [PATCH 08/10] MLSXFRM: Add security context to acquire messag es using PF_KEY Venkat Yekkirala Re: [PATCH] Fix security check for joint context= and fscontext= mount options James Morris RE: [PATCH 03/10] MLSXFRM: Add security sid to sock Venkat Yekkirala Re: [PATCH 10/10] MLSXFRM: Auto-labeling of child sockets Stephen Smalley Re: setsebool Christopher J. PeBenito Re: [PATCH 03/10] MLSXFRM: Add security sid to sock Stephen Smalley Re: setsebool Stephen Smalley Re: setsebool Karl MacMillan Re: setsebool Stephen Smalley Re: setsebool Steve Grubb Re: [PATCH] Fix security check for joint context= and fscontext= mount options Stephen Smalley Re: semanage and RHPL Stephen Smalley Re: setsebool Karl MacMillan Re: setsebool Stephen Smalley Re: setsebool Steve Grubb setsebool Daniel J Walsh Wednesday, 12 July Re: [PATCH 08/10] MLSXFRM: Add security context to acquire messages using PF_KEY James Morris FOR REFERENCE ONLY: MLSXFRM: Add support to serefpolicy Venkat Yekkirala [PATCH 10/10] MLSXFRM: Auto-labeling of child sockets Venkat Yekkirala [PATCH 09/10] MLSXFRM: Default labeling of socket specific IPSec policies Venkat Yekkirala [PATCH 08/10] MLSXFRM: Add security context to acquire messages using PF_KEY Venkat Yekkirala [PATCH 07/10] MLSXFRM: Add security context to acquire messages using PF_KEY Venkat Yekkirala [PATCH 06/10] MLSXFRM: Add security context to acquire messages using netlink Venkat Yekkirala [PATCH 05/10] MLSXFRM: Flow based matching of xfrm policy and state Venkat Yekkirala [PATCH 04/10] MLSXFRM: Add security sid to flowi Venkat Yekkirala [PATCH 03/10] MLSXFRM: Add security sid to sock Venkat Yekkirala [PATCH 02/10] MLSXFRM: Define new SELinux service routine Venkat Yekkirala [PATCH 01/10] MLSXFRM: Granular IPSec associations for use in MLS environments Venkat Yekkirala semanage and RHPL Stephen Bennett [PATCH] Fix security check for joint context= and fscontext= mount options Eric Paris Tuesday, 11 July [PATCH] semodule_deps Karl MacMillan Re: [PATCH] libsemanage: Read-only FS [2/2] Stephen Smalley Re: role infrastructure Daniel J Walsh Re: [PATCH] libsemanage: Read-only FS [1/2] Joshua Brindle Re: [ANN] SELinux Policy Editor 2.0(seedit 2.0) Stephen Smalley Re: [ANN] SELinux Policy Editor 2.0(seedit 2.0) Yuichi Nakamura Monday, 10 July Re: [ANN] SELinux Policy Editor 2.0(seedit 2.0) Stephen Smalley Thursday, 6 July [PATCH] libsemanage: Read-only FS [2/2] Caleb Case [PATCH] libsemanage: Read-only FS [1/2] Caleb Case [ANN] SELinux Policy Editor 2.0(seedit 2.0) Yuichi Nakamura Wednesday, 5 July Re: [PATCH] 2/2 rootcontext=, are RELABELFROM and ASSOCIATE enough in may_context_mount_inode_relabel? Stephen Smalley Re: [PATCH] 2/2 rootcontext=, are RELABELFROM and ASSOCIATE enough in may_context_mount_inode_relabel? Eric Paris Re: [PATCH] 2/2 rootcontext= option to label root inode when mounting (take 3) Stephen Smalley Re: [PATCH] 1/2 decouple fscontext/context mount options (take 3) Stephen Smalley [PATCH] 2/2 rootcontext= option to label root inode when mounting (take 3) Eric Paris [PATCH] 1/2 decouple fscontext/context mount options (take 3) Eric Paris Re: [PATCH] 2/2 rootcontext= option to label root inode when mounting Stephen Smalley Re: [PATCH] 1/2 decouple fscontext/context mount options Stephen Smalley [PATCH] 1/2 decouple fscontext/context mount options Eric Paris [PATCH] 2/2 rootcontext= option to label root inode when mounting Eric Paris Monday, 3 July Re: ANN: SELinux BOF at OLS Stephen Smalley Monday, 26 June Re: [PATCH] libselinux: 2/2 Convert functions to use new get,set procattrcon Daniel J Walsh Friday, 30 June Re: [RFC PATCH] 1/2 decouple fscontext/context Stephen Smalley Thursday, 29 June Re: [RFC PATCH] 1/2 decouple fscontext/context Eric Paris Re: [PATCH] ioprio: Add security hook definition for getioprio and insert hooks (Attempt #3) Stephen Smalley [PATCH] ioprio: Add security hook definition for getioprio and insert hooks (Attempt #3) David Quigley Re: Proposal for increasing the granularity of "setopt" Paul Moore Re: [PATCH] ioprio: Add security hook definition for getioprio and insert hooks Stephen Smalley Re: [PATCH] ioprio: Add security hook definition for getioprio and insert hooks David Quigley [PATCH] ioprio: Add security hook definition for getioprio and insert hooks David Quigley RE: [PATCH] remove te rule conflict checking from parser Stephen Smalley RE: [PATCH] remove te rule conflict checking from parser Joshua Brindle Re: [PATCH] remove te rule conflict checking from parser Stephen Smalley Re: [PATCH] remove te rule conflict checking from parser Stephen Smalley Re: [RFC PATCH] 2/2 rootcontext= Stephen Smalley Re: [RFC PATCH] 1/2 decouple fscontext/context Stephen Smalley Re: [redhat-lspp] libselinux get_default_context not working? Stephen Smalley Wednesday, 28 June [RFC PATCH] 2/2 rootcontext= Eric Paris [RFC PATCH] 1/2 decouple fscontext/context Eric Paris [RFC PATCH] 0/2 decouple fscontext/context add new rootcontext Eric Paris [PATCH] remove te rule conflict checking from parser Joshua Brindle [PATCH 3/3] usb core: Save and pass the sending task SID when sending David Quigley [PATCH 2/3] signal: Add security hook call to kill_proc_info_as_uid David Quigley [PATCH 1/3] security: Extend task_kill hook to handle signals sent by AIO completion David Quigley libselinux get_default_context not working? Wightman, Reid K Civ AFRL/IFEB Re: Security Architecture other than FLASK Casey Schaufler Re: Wrong tclass on a cifs share content David-Alexandre Davidson Re: Wrong tclass on a cifs share content Stephen Smalley Wrong tclass on a cifs share content David-Alexandre Davidson Re: [PATCH 1/3] security: Extend task_kill hook to handle signals sent by AIO completion James Morris Re: [PATCH 1/3] security: Extend task_kill hook to handle signals sent by AIO completion Stephen Smalley Re: [PATCH 1/3] security: Extend task_kill hook to handle signals sent by AIO completion James Morris Re: [PATCH] sched: Add security hooks to mips {get,set}affinity Stephen Smalley Re: [PATCH 1/3] security: Extend task_kill hook to handle signals sent by AIO completion Stephen Smalley Re: [PATCH 1/3] security: Extend task_kill hook to handle signals sent by AIO completion Stephen Smalley Tuesday, 27 June Re: [PATCH 1/3] security: Extend task_kill hook to handle signals sent by AIO completion Timothy R. Chavez Re: [PATCH 1/3] security: Extend task_kill hook to handle signals sent by AIO completion Timothy R. Chavez Re: [PATCH] sched: Add security hooks to mips {get,set}affinity James Morris Re: [PATCH 1/3] security: Extend task_kill hook to handle signals sent by AIO completion James Morris Re: [PATCH] libselinux: 1/2 Introduce {get,set}procattrcon Stephen Smalley [PATCH] sched: Add security hooks to mips {get,set}affinity David Quigley [PATCH 3/3] usb core: Save and pass the sending task SID when sending David Quigley [PATCH 2/3] signal: Add security hook call to kill_proc_info_as_uid David Quigley [PATCH 1/3] security: Extend task_kill hook to handle signals sent by AIO completion David Quigley Re: [redhat-lspp] Re: [RFC 3/7] NetLabel: CIPSOv4 engine Klaus Weidner Re: Labeled Networking Requirements and Design (formerly RE: [PATCH 01/06] MLSXFRM: Granular IPSec associations for use in MLS environments) Venkat Yekkirala Re: Labeled Networking Requirements and Design (formerly RE: [PATCH 01/06] MLSXFRM: Granular IPSec associations for use in MLS environments) Venkat Yekkirala RE: Labeled Networking Requirements and Design (formerly RE: [PAT CH 01/06] MLSXFRM: Granular IPSec associations for use in MLS environmen ts) Venkat Yekkirala Monday, 26 June Re: [redhat-lspp] Re: [RFC 3/7] NetLabel: CIPSOv4 engine Paul Moore Re: Labeled Networking Requirements and Design (formerly RE: [PATCH 01/06] MLSXFRM: Granular IPSec associations for use in MLS environments) Paul Moore Re: [redhat-lspp] Re: [RFC 3/7] NetLabel: CIPSOv4 engine James Morris Re: Labeled Networking Requirements and Design (formerly RE: [PATCH 01/06] MLSXFRM: Granular IPSec associations for use in MLS environments) James Morris Re: [redhat-lspp] Re: [RFC 3/7] NetLabel: CIPSOv4 engine Joe Nall Labeled Networking Requirements and Design (formerly RE: [PATCH 01/06] MLSXFRM: Granular IPSec associations for use in MLS environments) Venkat Yekkirala RE: [PATCH 01/06] MLSXFRM: Granular IPSec associations for use in MLS environments Chad Hanson Re: [PATCH] libselinux: 1/2 Introduce {get,set}procattrcon Stephen Smalley Re: [PATCH] libselinux: 1/2 Introduce {get,set}procattrcon Eric Paris Re: [PATCH] libselinux: 1/2 Introduce {get,set}procattrcon Stephen Smalley Re: [PATCH] libselinux: add support for keycreate attribute Eric Paris [PATCH] libselinux: 2/2 Convert functions to use new get,set procattrcon Eric Paris [PATCH] libselinux: 1/2 Introduce {get,set}procattrcon Eric Paris [PATCH] libselinux: 0/2 Refactor Handling of /proc/pid/attr/* Eric Paris Re: [PATCH] selinux: inherit /proc/self/attr/keycreate across fork James Morris Security Architecture other than FLASK Mohammad Mahmoudi Re: [PATCH] selinux: inherit /proc/self/attr/keycreate across fork David Howells Sunday, 25 June Re: moving modules into base Erich Schubert Re: moving modules into base Russell Coker Saturday, 24 June Re: [PATCH] libselinux: 2/2 Convert functions to use new get,set procattrcon Eric Paris Friday, 23 June Re: [PATCH] libselinux: 2/2 Convert functions to use new get,set procattrcon James Antill Re: [PATCH] libselinux: 1/2 Introduce {get,set}procattrcon James Antill Re: [PATCH] libselinux: add support for keycreate attribute Eric Paris [PATCH] libselinux: 2/2 Convert functions to use new get,set procattrcon Eric Paris [PATCH] libselinux: 1/2 Introduce {get,set}procattrcon Eric Paris [PATCH] libselinux: 0/2 Refactor Handling of /proc/pid/attr/* Eric Paris [PATCH 11/10] fix decl val index, other leaks Joshua Brindle Re: Selinux Sources Thorsten Scherf [PATCH 6/10] link algorithm Joshua Brindle Re: [PATCH 2/10] fix parser bugs Timothy R. Chavez Re: Selinux Sources Miguel Fernandes [PATCH 9/10] type flavors Joshua Brindle [PATCH 10/10] alias fix Joshua Brindle [PATCH 8/10] expander fixes Joshua Brindle [PATCH 7/10] fix link callbacks Joshua Brindle [PATCH 5/10] decl index in policydb Joshua Brindle [PATCH 4/10] misc fixes Joshua Brindle [PATCH 3/10] expand type set fixes Joshua Brindle [PATCH 2/10] fix parser bugs Joshua Brindle [PATCH 1/10] setfiles audit fix Joshua Brindle [PATCH 0/10] Optionals in base take 2 Joshua Brindle Re: Selinux Sources Thorsten Scherf Selinux Sources Miguel Fernandes Thursday, 22 June RE: [PATCH 01/06] MLSXFRM: Granular IPSec associations for use in MLS environments James Morris Re: [RFC 2/7] NetLabel: core network changes James Morris Re: [PATCH] pam_namespace : allow use of X while polyinstantiating /tmp - v3 Tomas Mraz Re: [PATCH] pam_namespace : allow use of X while polyinstantiating /tmp - v3 Janak Desai Re: [PATCH] pam_namespace : allow use of X while polyinstantiating /tmp - v3 Janak Desai Re: [PATCH] libselinux: add support for keycreate attribute Michael LeMay Re: [PATCH] libselinux: add support for keycreate attribute Steve G Re: [PATCH] pam_namespace : allow use of X while polyinstantiating /tmp - v3 Valdis.Kletnieks_at_vt.edu Re: [PATCH] selinux: inherit /proc/self/attr/keycreate across fork David Howells Re: [RFC 2/7] NetLabel: core network changes Steve Grubb [PATCH] policycoreutils: add support for keycreate attribute in secon Michael LeMay [PATCH] libselinux: add support for keycreate attribute Michael LeMay Re: [RFC 3/7] NetLabel: CIPSOv4 engine Paul Moore Re: [RFC 2/7] NetLabel: core network changes Paul Moore Re: [PATCH] pam_namespace : allow use of X while polyinstantiating /tmp - v3 Tomas Mraz Re: [PATCH] pam_namespace : allow use of X while polyinstantiating /tmp - v3 Valdis.Kletnieks_at_vt.edu Wednesday, 21 June Re: policy patch for FC5 anti-virus and Postgrey Russell Coker Re: [redhat-lspp] Re: [RFC 4/7] NetLabel: core NetLabel subsystem Steve Grubb Re: [PATCH] repost: new sockcreate interface to specify context of socket when they are created Michael LeMay Re: [redhat-lspp] Re: [RFC 4/7] NetLabel: core NetLabel subsystem Paul Moore [PATCH] selinux: inherit /proc/self/attr/keycreate across fork Michael LeMay Re: [RFC 4/7] NetLabel: core NetLabel subsystem Steve Grubb Re: [PATCH] repost: new sockcreate interface to specify context of socket when they are created Christopher J. PeBenito Re: [PATCH] selinux: inherit /proc/self/attr/keycreate across fork James Morris RE: [PATCH 01/06] MLSXFRM: Granular IPSec associations for use in MLS environments Venkat Yekkirala [PATCH] selinux: inherit /proc/self/attr/keycreate across fork Michael LeMay Re: [PATCH] repost: new sockcreate interface to specify context of socket when they are created Michael LeMay [RFC 3/7] NetLabel: CIPSOv4 engine paul.moore_at_hp.com [RFC 4/7] NetLabel: core NetLabel subsystem paul.moore_at_hp.com [RFC 5/7] NetLabel: SELinux support paul.moore_at_hp.com Re: [PATCH] repost: new sockcreate interface to specify context of socket when they are created Christopher J. PeBenito [RFC 6/7] NetLabel: CIPSOv4 integration paul.moore_at_hp.com [RFC 7/7] NetLabel: unlabeled packet handling paul.moore_at_hp.com [RFC 1/7] NetLabel: documentation paul.moore_at_hp.com [RFC 2/7] NetLabel: core network changes paul.moore_at_hp.com [RFC 0/7] Updated NetLabel patch paul.moore_at_hp.com Yet another pass at libselinux/matchpathcon fix. Daniel J Walsh Re: [PATCH] repost: new sockcreate interface to specify context of socket when they are created Stephen Smalley Re: [PATCH] repost: new sockcreate interface to specify context of socket when they are created Christopher J. PeBenito Re: Latest diffs Christopher J. PeBenito Re: I have redone the original patch for libselinux Stephen Smalley Re: [PATCH] repost: new sockcreate interface to specify context of socket when they are created James Morris Re: [PATCH] repost: new sockcreate interface to specify context of socket when they are created James Morris Re: [RFC][PATCH] selinux: add an unlink permission on keys Michael LeMay Re: [PATCH] repost: new sockcreate interface to specify context of socket when they are created Stephen Smalley Re: [PATCH] repost: new sockcreate interface to specify context of socket when they are created Stephen Smalley Re: [PATCH] repost: new sockcreate interface to specify context of socket when they are created Eric Paris Re: [RFC][PATCH] selinux: add an unlink permission on keys David Howells Re: [PATCH] repost: new sockcreate interface to specify context of socket when they are created James Morris [PATCH] repost: new sockcreate interface to specify context of socket when they are created Eric Paris [RFC][PATCH] selinux: add an unlink permission on keys Michael LeMay Re: [PATCH 03/06] MLSXFRM: Add security sid to sock Herbert Xu Tuesday, 20 June Re: [PATCH 03/06] MLSXFRM: Add security sid to sock Herbert Xu Wednesday, 21 June Re: policy patch for FC5 anti-virus and Postgrey Daniel J Walsh [PATCH] refpolicy: add keycreate process attribute Michael LeMay Tuesday, 20 June Latest diffs Daniel J Walsh Wednesday, 21 June policy patch for FC5 anti-virus and Postgrey Russell Coker Re: [PATCH 01/06] MLSXFRM: Granular IPSec associations for use in MLS environments James Morris Re: [PATCH 03/06] MLSXFRM: Add security sid to sock James Morris Tuesday, 20 June RE: [PATCH 03/06] MLSXFRM: Add security sid to sock Venkat Yekkirala I have redone the original patch for libselinux Daniel J Walsh Re: [PATCH 2/2] mempolicy: Insert security hook calls for setmempolicy (Attempt 2) Stephen Smalley [PATCH 2/2] mempolicy: Insert security hook calls for setmempolicy (Attempt 2) David Quigley Re: [PATCH 2/2] mempolicy: Insert security hook calls for setmempolicy Stephen Smalley Re: [PATCH 1/2] security: Add security hook definitions for setmempolicy Stephen Smalley [PATCH 1/2] security: Add security hook definitions for setmempolicy David Quigley [PATCH 2/2] mempolicy: Insert security hook calls for setmempolicy David Quigley [PATCH 06/06] MLSXFRM: Add security context to acquire messages using PF_KEY Venkat Yekkirala FOR REFERENCE ONLY: MLSXFRM: Add support to serefpolicy Venkat Yekkirala [PATCH 04/06] MLSXFRM: Flow based matching of xfrm policy and state Venkat Yekkirala [PATCH 05/06] MLSXFRM: Add security context to acquire messages using netlink Venkat Yekkirala [PATCH 03/06] MLSXFRM: Add security sid to sock Venkat Yekkirala [PATCH 01/06] MLSXFRM: Granular IPSec associations for use in MLS environments Venkat Yekkirala [PATCH 02/06] MLSXFRM: Define new SELinux service routine Venkat Yekkirala Re: [PATCH] cpuset: Add security hook call to mediate attach_task Stephen Smalley Re: [PATCH] sched: Add security hooks to {get,set}affinity Stephen Smalley Re: New patch for libselinux Stephen Smalley Re: New patch for libselinux Stephen Smalley Re: New patch for libselinux Daniel J Walsh [PATCH] cpuset: Add security hook call to mediate attach_task David Quigley [PATCH] sched: Add security hooks to {get,set}affinity David Quigley Re: New patch for libselinux Stephen Smalley [PATCH] pam_namespace : allow use of X while polyinstantiating /tmp - v3 Janak Desai New patch for libselinux Daniel J Walsh Monday, 19 June Re: Some sort of explicit labeling for ipc? Stephen Smalley Some sort of explicit labeling for ipc? Eric Paris SELinux T-Shirt available. Daniel J Walsh Re: [PATCH] new sockcreate interface to specify context of socket when they are created James Morris Re: moving modules into base Christopher J. PeBenito [PATCH 1/6] Keys: Sort out key quota system [try #3] David Howells [PATCH 6/6] Keys: Add a way to store the appropriate context for newly-created keys [try #3] David Howells [PATCH 5/6] Keys: Restrict contents of /proc/keys to Viewable keys [try #3] David Howells [PATCH 3/6] Keys: Let keyctl_chown() change a key's owner [try #3] David Howells [PATCH 4/6] Keys: Allocate key serial numbers randomly [try #3] David Howells [PATCH 2/6] Keys: Discard the contents of a key on revocation [try #3] David Howells [PATCH 0/6] Keys: Key management updates [try #3] David Howells Sunday, 18 June Re: [PATCH] pam_namespace : allow use of X and gdm while polyinstantiating /tmp Janak Desai [PATCH] pam_namespace : allow use of X while polyinstantiating /tmp - v2 Janak Desai Re: [PATCH] pam_namespace : allow use of X and gdm while polyinstantiating /tmp James Antill policy problems with run_init? Stefan Saturday, 17 June moving modules into base Russell Coker Re: [PATCH] pam_namespace : allow use of X and gdm while polyinstantiating /tmp Daniel J Walsh Re: [PATCH] pam_namespace : allow use of X and gdm while polyinstantiating /tmp Russell Coker Re: [PATCH] pam_namespace : allow use of X and gdm while polyinstantiating /tmp Daniel J Walsh Friday, 16 June Re: [PATCH] pam_namespace : allow use of X and gdm while polyinstantiating /tmp Valdis.Kletnieks_at_vt.edu Re: [PATCH] pam_namespace : allow use of X and gdm while polyinstantiating /tmp Russell Coker [PATCH] new sockcreate interface to specify context of socket when they are created Eric Paris Re: [redhat-lspp] Got up at 5 AM, and thought I would try to write a new role Stephen John Smoogen Re: [redhat-lspp] Got up at 5 AM, and thought I would try to write a new role Daniel J Walsh Re: [redhat-lspp] Got up at 5 AM, and thought I would try to write a new role Steve Grubb Got up at 5 AM, and thought I would try to write a new role Daniel J Walsh Re: [PATCH] pam_namespace : allow use of X and gdm while polyinstantiating /tmp Casey Schaufler Re: polyinstantiating /tmp and gdm Casey Schaufler Re: [PATCH] pam_namespace : allow use of X and gdm while polyinstantiating /tmp Daniel J Walsh Re: [PATCH] pam_namespace : allow use of X and gdm while polyinstantiating /tmp Janak Desai Re: [PATCH] pam_namespace : allow use of X and gdm while polyinstantiating /tmp Timothy R. Chavez Re: [PATCH [try #2] 6/6] Keys: Add a way to store the appropriate context for newly-created keys Michael LeMay Re: polyinstantiating /tmp and gdm Russell Coker RE: Type transition rules in conditionals Christopher J. PeBenito [PATCH [try #2] 6/6] Keys: Add a way to store the appropriate context for newly-created keys David Howells [PATCH [try #2] 5/6] Keys: Restrict contents of /proc/keys to Viewable keys David Howells [PATCH [try #2] 4/6] Keys: Allocate key serial numbers randomly David Howells [PATCH [try #2] 3/6] Keys: Let keyctl_chown() change a key's owner David Howells [PATCH [try #2] 2/6] Keys: Discard the contents of a key on revocation David Howells [PATCH 0/6] Keys: Key management updates David Howells [PATCH [try #2] 1/6] Keys: Sort out key quota system David Howells Re: [PATCH] selinux: add /proc/pid/attr/keycreate Michael LeMay RE: Type transition rules in conditionals Stephen Smalley Re: determining security level domination Stephen Smalley Re: [PATCH] selinux: add /proc/pid/attr/keycreate David Howells Thursday, 15 June [PATCH] pam_namespace : allow use of X and gdm while polyinstantiating /tmp Janak Desai determining security level domination Matt Anderson RE: Type transition rules in conditionals Stephen Smalley RE: Type transition rules in conditionals Joshua Brindle Re: Type transition rules in conditionals Stephen Smalley Type transition rules in conditionals Joshua Brindle Re: [PATCH 5/6] Keys: Restrict contents of /proc/keys to Viewable keys Michael LeMay [PATCH 6/6] Keys: Add a way to store the appropriate context for newly-created keys David Howells [PATCH 5/6] Keys: Restrict contents of /proc/keys to Viewable keys David Howells [PATCH 3/6] Keys: Let keyctl_chown() change a key's owner David Howells [PATCH 4/6] Keys: Allocate key serial numbers randomly David Howells [PATCH 2/6] Keys: Discard the contents of a key on revocation David Howells [PATCH 1/6] Keys: Sort out key quota system David Howells [PATCH 0/6] Keys: Key management updates David Howells Wednesday, 14 June [PATCH] selinux: restrict /proc/keys and /proc/key-users Michael LeMay [PATCH] keys: restrict /proc/keys and /proc/key-users Michael LeMay [PATCH] selinux: add /proc/pid/attr/keycreate Michael LeMay Re: [PATCH] fix masking of capabilities over netlink in permissive mode Stephen Smalley RE: selinuxfs Stephen Smalley Tuesday, 13 June Re: selinuxfs Joshua Brindle RE: selinuxfs Wightman, Reid K Civ AFRL/IFEB Re: [PATCH] fix masking of capabilities over netlink in permissive mode Darrel Goeddel Re: polyinstantiating /tmp and gdm Casey Schaufler Re: R: PaX and SELinux Joshua Brindle Re: [PATCH] keys: restrict /proc/keys and /proc/key-users David Howells I: PaX and SELinux Mario Fanelli [PATCH] keys: restrict /proc/keys and /proc/key-users Michael LeMay [PATCH] keys: randomize key serial numbers Michael LeMay Re: PaX and SELinux Joshua Brindle PaX and SELinux Mario Fanelli Re: [PATCH] keys: randomize key serial numbers David Howells Re: [PATCH] policy server API Christopher Ashworth Re: polyinstantiating /tmp and gdm Janak Desai Re: polyinstantiating /tmp and gdm Russell Coker Re: [PATCH] keys: randomize key serial numbers Michael LeMay polyinstantiating /tmp and gdm Janak Desai Re: [PATCH] keys: randomize key serial numbers David Howells Re: [PATCH] keys: randomize key serial numbers David Howells [PATCH] selinux: add /proc/pid/attr/keycreate to convey key creation context Michael LeMay Monday, 12 June Re: Latest diffs Christopher J. PeBenito Re: Latest diffs Christopher J. PeBenito Re: [PATCH] policy server API Stephen Smalley [PATCH] keys: randomize key serial numbers Michael LeMay Re: [PATCH] policy server API Christopher Ashworth Re: [PATCH] policy server API Stephen Smalley Latest diffs Daniel J Walsh Re: [RFC] [SELXFRM 0/4] SELinux/MLS enhancements to IPSec James Morris RE: [RFC] [SELXFRM 0/4] SELinux/MLS enhancements to IPSec Venkat Yekkirala Re: [RFC] [SELXFRM 0/4] SELinux/MLS enhancements to IPSec Joy Latten Re: [PATCH] selinux: add /proc/pid/attr/keycreate to convey key creation context Stephen Smalley Saturday, 10 June [RFC] [SELXFRM 2/4] Add support to SELinux LSM Venkat Yekkirala [RFC] [SELXFRM 4/4] FOR REFERENCE ONLY: Add support to serefpolic y Venkat Yekkirala [RFC] [SELXFRM 0/4] SELinux/MLS enhancements to IPSec Venkat Yekkirala [RFC] [SELXFRM 1/4] Add support to core networking Venkat Yekkirala [RFC] [SELXFRM 3/4] Add support to xfrm subsystem Venkat Yekkirala Monday, 12 June Re: Kernel Panic after Kernel Upgrade Moises Mojica Re: why I have /selinux?? Stephen Smalley Re: selinuxfs Stephen Smalley Re: permissions on /proc/self/attrib/current Stephen Smalley Re: Proposal for increasing the granularity of "setopt" Paul Moore Re: Relabeling Network Objects ? Stephen Smalley Re: Proposal for increasing the granularity of "setopt" Stephen Smalley Re: permissions on /proc/self/attrib/current Chuck Mead Re: Kernel Panic after Kernel Upgrade Stephen Smalley Re: permissions on /proc/self/attrib/current Stephen Smalley Sunday, 11 June selinuxfs Mario Fanelli Friday, 9 June Re: permissions on /proc/self/attrib/current Russell Coker Relabeling Network Objects ? Rodrigo Vivi [PATCH] policycoreutils: prevent null deref Serge E. Hallyn Re: General security concerns with the key subsystem Michael LeMay Re: General security concerns with the key subsystem David Howells Thursday, 8 June General security concerns with the key subsystem Michael LeMay [PATCH 3/3] libsemanage: fix memory semanage_fc_sort leak Serge E. Hallyn [PATCH 2/3] libsemanage: deref and double close of fp Serge E. Hallyn [PATCH 1/3] libsemanage: database_file.c uninit'd deref Serge E. Hallyn Proposal for increasing the granularity of "setopt" Paul Moore [PATCH] selinux: add /proc/pid/attr/keycreate to convey key creation context Michael LeMay Wednesday, 7 June Re: Latest diffs Christopher J. PeBenito Kernel Panic after Kernel Upgrade Moises Mojica Latest diffs - Resend from correct source address Daniel J Walsh Tuesday, 6 June Re: permissions on /proc/self/attrib/current James Antill permissions on /proc/self/attrib/current Chuck Mead Monday, 5 June Re: Latest policy diffs Christopher J. PeBenito Friday, 26 May Latest policy diffs Daniel J Walsh Tuesday, 30 May Re: [PATCH] policy server API Christopher Ashworth Monday, 5 June Re: why I have /selinux?? Antoine Martin Re: Switch between struct security_context_t and context_t James Antill why I have /selinux?? Mario Fanelli Switch between struct security_context_t and context_t Mario Fanelli Friday, 2 June [PATCH] refpolicy: Kernel access key retention policy support Michael LeMay [PATCH] refpolicy: Kernel access key retention policy support Michael LeMay RE: [PATCH] selinux: Kernel access key retention support for SELinux Casey Schaufler RE: [PATCH] selinux: Kernel access key retention support for SELinux Frank L. Mayer Re: [PATCH] selinux: Kernel access key retention support for SELinux Casey Schaufler Re: [PATCH] fix masking of capabilities over netlink in permissive mode Stephen Smalley Re: [PATCH] fix masking of capabilities over netlink in permissive mode Darrel Goeddel Re: [PATCH] selinux: Kernel access key retention support for SELinux David Howells Re: [PATCH] selinux: Kernel access key retention support for SELinux David Howells Re: [PATCH] selinux: Kernel access key retention support for SELinux Stephen Smalley [PATCH] selinux: Kernel access key retention support for SELinux Michael LeMay Re: [PATCH] selinux: Kernel access key retention support for SELinux David Howells Re: [PATCH] selinux: Kernel access key retention support for SELinux David Howells [PATCH] selinux: Kernel access key retention support for SELinux Michael LeMay Re: [PATCH] selinux: Kernel access key retention support for SELinux Stephen Smalley Re: [PATCH] selinux: Kernel access key retention support for SELinux David Howells Re: [PATCH] selinux: Kernel access key retention support for SELinux Stephen Smalley Re: [PATCH] selinux: Kernel access key retention support for SELinux Stephen Smalley Re: [PATCH] selinux: Kernel access key retention support for SELinux David Howells Re: [PATCH] selinux: Kernel access key retention support for SELinux Michael LeMay Re: [PATCH] selinux: Kernel access key retention support for SELinux David Howells Thursday, 1 June Re: [PATCH] selinux: Kernel access key retention support for SELinux James Morris [PATCH] selinux: Kernel access key retention support for SELinux Michael LeMay [PATCH] pam_namespace : option to check instance parent mode and man page(s) updates - v2 Janak Desai Re: [PATCH] fix masking of capabilities over netlink in permissive mode Linda Knippers Re: [redhat-lspp] Re: [PATCH] fix masking of capabilities over netlink in permissive mode Steve Grubb Re: [PATCH] pam_namespace : option to check instance parent mode and man page(s) updates Janak Desai Re: [PATCH] selinux: Kernel access key retention support for SELinux Stephen Smalley Re: [PATCH] selinux: Kernel access key retention support for SELinux Stephen Smalley Re: [PATCH] fix masking of capabilities over netlink in permissive mode Darrel Goeddel Re: [PATCH] selinux: Kernel access key retention support for SELinux Valdis.Kletnieks_at_vt.edu Re: [PATCH] selinux: Kernel access key retention support for SELinux David Howells Re: [PATCH] selinux: Kernel access key retention support for SELinux David Howells Re: [PATCH] fix masking of capabilities over netlink in permissive mode Stephen Smalley Re: [PATCH] selinux: Kernel access key retention support for SELinux James Morris Re: [PATCH] selinux: Kernel access key retention support for SELinux Stephen Smalley Re: [PATCH] fix masking of capabilities over netlink in permissive mode Darrel Goeddel Re: [PATCH] selinux: Kernel access key retention support for SELinux David Howells Re: [PATCH] selinux: Kernel access key retention support for SELinux Stephen Smalley Re: [PATCH] selinux: Kernel access key retention support for SELinux David Howells Re: [PATCH] selinux: Kernel access key retention support for SELinux David Howells Re: [PATCH] selinux: Kernel access key retention support for SELinux David Howells Wednesday, 31 May [PATCH] pam_namespace : option to check instance parent mode and man page(s) updates Janak Desai Re: [PATCH] selinux: Kernel access key retention support for SELinux James Morris Key unlink permission Michael LeMay Re: [PATCH] selinux: Kernel access key retention support for SELinux Stephen Smalley Re: [PATCH] fix masking of capabilities over netlink in permissive mode Stephen Smalley [PATCH] selinux: Kernel access key retention support for SELinux Michael LeMay [PATCH] fix masking of capabilities over netlink in permissive mode Darrel Goeddel Re: Use of file /proc/pid_number/attr/prevcon Stephen Smalley Use of file /proc/pid_number/attr/prevcon Mario Fanelli Re: Trouble with /lib/libselinux and linking Stephen Smalley Re: Trouble with /lib/libselinux and linking Valdis.Kletnieks_at_vt.edu Trouble with /lib/libselinux and linking Mario Fanelli Tuesday, 30 May Re: Bugs with bool_ids usage (libsepol) Karl MacMillan Re: Bugs with bool_ids usage (libsepol) Stephen Smalley Re: Bugs with bool_ids usage (libsepol) Stephen Smalley Re: Bugs with bool_ids usage (libsepol) Stephen Smalley Re: clam/amavis policy Stephen Smalley Re: R: SELinux and SID Stephen Smalley RE: Fedora Core + GSX server + SELinux policies Wolfe, William SPAWAR R: SELinux and SID Mario Fanelli Re: SELinux and SID Stephen Smalley Re: trouble with execmod permission in file class Stephen Smalley Re: Revocation Support Stephen Smalley Re: Use of type_change and type_transition declarations Stephen Smalley Re: [redhat-lspp] Re: [patch] Full relabel audit event Steve Grubb Re: Use of type_change and type_transition declarations Christopher J. PeBenito Re: [redhat-lspp] Re: [patch] Full relabel audit event Steve Grubb Re: SELinux and SID Joshua Brindle Re: nepenthes policy Petre Rodan SELinux and SID Mario Fanelli trouble with execmod permission in file class Mario Fanelli Monday, 29 May Use of type_change and type_transition declarations Mario Fanelli Re: Use of role dominance declaration Christopher J. PeBenito Use of role dominance declaration Mario Fanelli Re: daemons and MCS categories Christopher J. PeBenito Sunday, 28 May Re: Revocation Support Joshua Brindle Re: Revocation Support Joshua Brindle Re: Revocation Support Erich Schubert Re: nepenthes policy Petre Rodan Revocation Support Mohammad Mahmoudi clam/amavis policy Russell Coker Saturday, 27 May Re: nepenthes policy Russell Coker Re: nepenthes policy Petre Rodan Re: nepenthes policy Russell Coker Re: Fedora Core 5 Tomcat 4 problems Russell Coker Friday, 26 May Re: [RFC][PATCH] selinux: introduce support for deferred mapping of inode security contexts Jeremy Katz Re: [RFC][PATCH] selinux: introduce support for deferred mapping of inode security contexts Stephen Smalley Re: libsepol and libselinux patches Stephen Smalley Re: [RFC 0/4] NetLabel James Morris Re: [RFC][PATCH] selinux: introduce support for deferred mapping of inode security contexts Jeremy Katz Re: [redhat-lspp] Re: [patch] Full relabel audit event Stephen Smalley Re: [patch] Full relabel audit event James Antill nepenthes policy Petre Rodan Re: [patch] Full relabel audit event Stephen Smalley Re: [RFC 0/4] NetLabel Paul Moore Re: [RFC 0/4] NetLabel Mikel L. Matthews Re: [RFC 0/4] NetLabel Paul Moore Re: [RFC 0/4] NetLabel Mikel L. Matthews Re: libsepol and libselinux patches Serge E. Hallyn Re: [RFC 0/4] NetLabel James Morris Re: [RFC 0/4] NetLabel Paul Moore Re: [PATCH] selinux: Kernel access key retention support for SELinux David Howells Re: [PATCH] selinux: Kernel access key retention support for SELinux David Howells Re: [PATCH] selinux: Kernel access key retention support for SELinux Stephen Smalley Re: [PATCH] selinux: Kernel access key retention support for SELinux Stephen Smalley Re: [PATCH] selinux: Kernel access key retention support for SELinux Stephen Smalley Re: [PATCH] selinux: Kernel access key retention support for SELinux Stephen Smalley Thursday, 25 May Re: Fedora Core 5 Tomcat 4 problems Russell Coker Re: [RFC 0/4] NetLabel James Morris Re: secon (Was: Policycoreutils patch) James Antill Re: [RFC 0/4] NetLabel Paul Moore [patch] Full relabel audit event James Antill [RFC 3/4] NetLabel Paul Moore [RFC 2/4] NetLabel Paul Moore [RFC 1/4] NetLabel Paul Moore [RFC 4/4] NetLabel Paul Moore [RFC 0/4] NetLabel Paul Moore RE: [RFC][PATCH] selinux: introduce support for deferredmappingof inode security contexts Joshua Brindle Re: Bugs with bool_ids usage (libsepol) Karl MacMillan [PATCH] selinux: Kernel access key retention support for SELinux Michael LeMay RE: [RFC][PATCH] selinux: introduce support for deferred mappingof inode security contexts Stephen Smalley RE: [RFC][PATCH] selinux: introduce support for deferred mappingof inode security contexts Stephen Smalley Re: Bugs with bool_ids usage (libsepol) Stephen Smalley RE: [RFC][PATCH] selinux: introduce support for deferred mappingof inode security contexts Joshua Brindle Re: Bugs with bool_ids usage (libsepol) Karl MacMillan Re: [RFC][PATCH] selinux: introduce support for deferred mapping of inode security contexts Stephen Smalley Re: [RFC][PATCH] selinux: introduce support for deferred mapping of inode security contexts Stephen Smalley Re: Fedora Core 5 Tomcat 4 problems Michael Smith Re: Bugs with bool_ids usage (libsepol) Stephen Smalley Re: Fedora Core + GSX server + SELinux policies Christopher J. PeBenito Re: Fedora Core 5 Tomcat 4 problems Christopher J. PeBenito Fedora Core + GSX server + SELinux policies Michael Colef Re: Fedora Core 5 Tomcat 4 problems Stephen Smalley Re: Fedora Core 5 Tomcat 4 problems Stephen Smalley Re: daemons and MCS categories Russell Coker Re: daemons and MCS categories James Morris Wednesday, 24 May Re: HTTPD network access Policy Problem Russell Coker Re: Fedora Core 5 Tomcat 4 problems Russell Coker Re: HTTPD network access Policy Problem Christopher L Tubbs II Re: libsepol and libselinux patches Serge E. Hallyn Re: Fedora Core 5 Tomcat 4 problems Michael K. Smith Re: libsepol and libselinux patches Stephen Smalley Re: Gentoo SELinux problem in enforcing mode Tetsuji Maverick Rai Re: Gentoo SELinux problem in enforcing mode Stephen Smalley Re: [PATCH] policy server API Christopher Ashworth Gentoo SELinux problem in enforcing mode Tetsuji Maverick Rai Re: [RFC][PATCH] selinux: introduce support for deferred mapping of inode security contexts Stephen Smalley Re: [RFC][PATCH] selinux: introduce support for deferred mapping of inode security contexts Stephen Smalley RE: [RFC][PATCH] selinux: introduce support for deferred mappingof inode security contexts Joshua Brindle Re: [RFC][PATCH] selinux: introduce support for deferred mapping of inode security contexts Jeremy Katz Re: [RFC][PATCH] selinux: introduce support for deferred mapping of inode security contexts Jeremy Katz Re: [RFC][PATCH] selinux: introduce support for deferred mapping of inode security contexts Jeremy Katz Re: Fedora Core 5 Tomcat 4 problems Stephen Smalley Re: Fedora Core 5 Tomcat 4 problems Michael K. Smith Re: libsetrans: ___tls_get_addr Stephen Smalley Re: Fedora Core 5 Tomcat 4 problems Stephen Smalley Fedora Core 5 Tomcat 4 problems Michael K. Smith libsetrans: ___tls_get_addr Serge E. Hallyn Re: HTTPD network access Policy Problem Christopher J. PeBenito Re: [PATCH] keys: Kernel access key retention support for SELinux Stephen Smalley Tuesday, 23 May [PATCH] policy server API Christopher Ashworth Re: [PATCH] keys: Kernel access key retention support for SELinux James Morris Re: [PATCH] keys: Kernel access key retention support for SELinux James Morris HTTPD network access Policy Problem Christopher L Tubbs II [PATCH] serefpolicy: Flask support for kernel access key retention (retained_key) Michael D Lemay [PATCH] keys: Kernel access key retention support for SELinux Michael D Lemay Re: [RFC][PATCH] selinux: introduce support for deferred mapping of inode security contexts Stephen Smalley Re: [RFC][PATCH] selinux: introduce support for deferred mapping of inode security contexts Stephen Smalley Re: [RFC][PATCH] selinux: introduce support for deferred mapping of inode security contexts Daniel J Walsh Re: [RFC][PATCH] selinux: introduce support for deferred mapping of inode security contexts Stephen Smalley libsepol and libselinux patches Serge E. Hallyn Problem with libselinux kakou Monday, 22 May Re: Real simple cache that removes most of the lookups in mcstrans Stephen Smalley Re: Support for MLS in SELinux Stephen Smalley Re: is it a newbie'sh question?: where is the log for violated access ? Tetsuji Maverick Rai Re: Real simple cache that removes most of the lookups in mcstrans Stephen Smalley Re: is it a newbie'sh question?: where is the log for violated access ? Stephen Smalley Support for MLS in SELinux Mohammad Mahmoudi is it a newbie'sh question?: where is the log for violated access ? Tetsuji Maverick Rai Re: Which filesystem is the best for SELinux Tetsuji Maverick Rai Re: Which filesystem is the best for SELinux Tetsuji Maverick Rai Re: Which filesystem is the best for SELinux Tetsuji Maverick Rai Re: Which filesystem is the best for SELinux coderman Re: pam_namespace improvements .. Janak Desai Re: correct way to set context in perl? Maria Iano Sunday, 21 May Re: pam_namespace improvements .. Russell Coker pam_namespace improvements .. Janak Desai Re: Which filesystem is the best for SELinux Russell Coker daemons and MCS categories Russell Coker Re: Is SELinux appropriate for my use? Russell Coker Saturday, 20 May Re: Is SELinux appropriate for my use? Valdis.Kletnieks_at_vt.edu Re: Real simple cache that removes most of the lookups in mcstrans Russell Coker Re: Real simple cache that removes most of the lookups in mcstrans Joshua Brindle Re: correct way to set context in perl? Russell Coker Friday, 19 May Re: fc5 policy patch Russell Coker Re: Latest diffs Daniel J Walsh Re: Is SELinux appropriate for my use? Christopher J. PeBenito Re: Is SELinux appropriate for my use? Christopher J. PeBenito Which filesystem is the best for SELinux Tetsuji Maverick Rai Re: Latest diffs Christopher J. PeBenito Re: Is SELinux appropriate for my use? Tetsuji Maverick Rai Re: correct way to set context in perl? Maria Iano Re: correct way to set context in perl? Stephen Smalley Re: correct way to set context in perl? Maria Iano Re: fc5 policy patch Daniel J Walsh fc5 policy patch Russell Coker Re: Real simple cache that removes most of the lookups in mcstrans Russell Coker Re: fc5 policy patch Russell Coker Re: correct way to set context in perl? Maria Iano Re: [RFC][PATCH] selinux: introduce support for deferred mapping of inode security contexts Daniel J Walsh RE: [RFC][PATCH] selinux: introduce support for deferred mapping of inode security contexts Stephen Smalley Re: Latest diffs Daniel J Walsh Re: [RFC][PATCH] selinux: introduce support for deferred mapping of inode security contexts Stephen Smalley Re: genhomedircon Christopher J. PeBenito RE: [RFC][PATCH] selinux: introduce support for deferred mapping of inode security contexts Joshua Brindle Re: Real simple cache that removes most of the lookups in mcstrans Stephen Smalley Re: Latest diffs Christopher J. PeBenito Re: [RFC][PATCH] selinux: introduce support for deferred mapping of inode security contexts Daniel J Walsh Re: correct way to set context in perl? Russell Coker Re: Is SELinux appropriate for my use? Russell Coker Re: Real simple cache that removes most of the lookups in mcstrans Joshua Brindle Re: [RFC][PATCH] selinux: introduce support for deferred mapping of inode security contexts Stephen Smalley Re: Real simple cache that removes most of the lookups in mcstrans Russell Coker Re: [RFC][PATCH] selinux: introduce support for deferred mapping of inode security contexts Karl MacMillan Re: [RFC][PATCH] selinux: introduce support for deferred mapping of inode security contexts Joshua Brindle Re: [RFC][PATCH] selinux: introduce support for deferred mapping of inode security contexts Stephen Smalley genhomedircon Russell Coker Re: Is SELinux appropriate for my use? Russell Coker Re: Is SELinux appropriate for my use? Valdis.Kletnieks_at_vt.edu Thursday, 18 May Re: correct way to set context in perl? Erich Schubert Re: correct way to set context in perl? Maria Iano Re: correct way to set context in perl? Erich Schubert Re: Is SELinux appropriate for my use? Tetsuji Maverick Rai correct way to set context in perl? Maria Iano Re: [RFC][PATCH] selinux: introduce support for deferred mapping of inode security contexts Thomas Bleher Re: Real simple cache that removes most of the lookups in mcstrans Daniel J Walsh Latest diffs Daniel J Walsh search trends for SELinux Russell Coker Wednesday, 17 May Re: [RFC][PATCH] selinux: introduce support for deferred mapping of inode security contexts Stephen Smalley Re: Resent with correct patch Stephen Smalley Re: [RFC][PATCH] selinux: introduce support for deferred mapping of inode security contexts Stephen Smalley Resent with correct patch Daniel J Walsh Re: [RFC][PATCH] selinux: introduce support for deferred mapping of inode security contexts Karl MacMillan Re: [RFC][PATCH] selinux: introduce support for deferred mapping of inode security contexts Stephen Smalley Re: Real simple cache that removes most of the lookups in mcstrans Daniel J Walsh Re: [RFC][PATCH] selinux: introduce support for deferred mapping of inode security contexts Karl MacMillan Re: [PATCH] initialize sym_val_to_name arrays Stephen Smalley Re: Real simple cache that removes most of the lookups in mcstrans Joshua Brindle Re: Real simple cache that removes most of the lookups in mcstrans Steve Grubb Re: Real simple cache that removes most of the lookups in mcstrans Joshua Brindle Re: Real simple cache that removes most of the lookups in mcstrans Stephen Smalley Re: Real simple cache that removes most of the lookups in mcstrans James Antill Re: Real simple cache that removes most of the lookups in mcstrans James Antill Re: Real simple cache that removes most of the lookups in mcstrans Daniel J Walsh Re: Real simple cache that removes most of the lookups in mcstrans Daniel J Walsh Re: Real simple cache that removes most of the lookups in mcstrans Joshua Brindle Re: Real simple cache that removes most of the lookups in mcstrans Daniel J Walsh Re: Latest diffs in policy Christopher J. PeBenito Re: [RFC] SECMARK 1.1 James Morris [PATCH] initialize sym_val_to_name arrays Kevin Carr Re: Real simple cache that removes most of the lookups in mcstrans Joshua Brindle Re: [RFC] SECMARK 1.1 Thomas Bleher Re: Real simple cache that removes most of the lookups in mcstrans Steve Grubb Real simple cache that removes most of the lookups in mcstrans Daniel J Walsh Re: Is SELinux appropriate for my use? Russell Coker Re: [RFC][PATCH] selinux: introduce support for deferred mapping of inode security contexts Thomas Bleher Tuesday, 16 May Is SELinux appropriate for my use? Tetsuji Maverick Rai RE: [RFC][PATCH] selinux: introduce support fordeferred mappingof inode security contexts Joshua Brindle Re: Latest diffs in policy Christopher J. PeBenito Re: [RFC][PATCH] selinux: introduce support for deferred mappingof inode security contexts Stephen Smalley Re: Latest diffs in policy Daniel J Walsh Re: [RFC][PATCH] selinux: introduce support for deferred mappingof inode security contexts Joshua Brindle RE: [RFC][PATCH] selinux: introduce support for deferred mappingof inode security contexts Stephen Smalley Re: Latest diffs in policy Christopher J. PeBenito RE: [RFC][PATCH] selinux: introduce support for deferred mappingof inode security contexts Joshua Brindle Re: [RFC][PATCH] selinux: introduce support for deferred mapping of inode security contexts Stephen Smalley Monday, 15 May Re: Latest diffs in policy Casey Schaufler Re: Latest diffs in policy Daniel J Walsh Latest diffs in policy Daniel J Walsh Re: Latest diffs in policy Christopher J. PeBenito Re: [RFC][PATCH] selinux: introduce support for deferred mapping of inode security contexts Stephen Smalley Re: Selinux testsuite updated in latest LTP release Stephen Smalley [RFC][PATCH] selinux: introduce support for deferred mapping of inode security contexts Stephen Smalley Re: cvs repository at sourceforge (Was: Re: policycoreuitls patch) Stephen Smalley cvs repository at sourceforge (Was: Re: policycoreuitls patch) Stephen Smalley Re: [RFC] SECMARK 1.1 Karl MacMillan Re: [RFC][SECMARK 05/08] Add new packet controls to SELinux Stephen Smalley Re: Trouble with setexeccon/setcon Stephen Smalley Re: [RFC] SECMARK 1.1 James Morris Re: [RFC] SECMARK 1.1 James Morris Re: [RFC] SECMARK 1.1 James Morris Re: [RFC] SECMARK 1.1 James Morris Re: [RFC] SECMARK 1.1 James Morris Sunday, 14 May [RFC] SECMARK 1.1 James Morris Saturday, 13 May Re: [RFC][SECMARK 05/08] Add new packet controls to SELinux Thomas Bleher Trouble with setexeccon/setcon Mario Fanelli Friday, 12 May Re: [Fwd: [PATCH 1/1] mount: shared-subtree support for mount] Russell Coker Re: AVC Decision Tree. Daniel J Walsh Re: AVC Decision Tree. Christopher J. PeBenito Re: Trouble with setexeccon/setcon Stephen Smalley Trouble with setexeccon/setcon Mario Fanelli Re: [Fwd: [PATCH 1/1] mount: shared-subtree support for mount] Janak Desai Re: [Fwd: [PATCH 1/1] mount: shared-subtree support for mount] Russell Coker Re: Trouble with setexeccon/setcon Stephen Smalley Re: avcs when setting a watch Russell Coker Re: Trouble with setexeccon/setcon Thomas Bleher Trouble with setexeccon/setcon Mario Fanelli Re: pam_namespace Russell Coker Re: pam_namespace Russell Coker Re: pam_namespace Rogelio Serrano Re: pam_namespace Rogelio Serrano Re: pam_namespace Rogelio Serrano Thursday, 11 May Re: pam_namespace Russell Coker Re: textrel_shlib_t Daniel J Walsh Re: textrel_shlib_t Valdis.Kletnieks_at_vt.edu Re: textrel_shlib_t Daniel J Walsh textrel_shlib_t Valdis.Kletnieks_at_vt.edu Re: pam_namespace Stephen Smalley Re: pam_namespace Rogelio Serrano Re: pam_namespace Janak Desai Re: [RFC][SECMARK 05/08] Add new packet controls to SELinux Stephen Smalley Wednesday, 10 May Re: [RFC][SECMARK 05/08] Add new packet controls to SELinux Valdis.Kletnieks_at_vt.edu Re: pam_namespace Russell Coker Re: [RFC][SECMARK 05/08] Add new packet controls to SELinux Thomas Bleher avcs when setting a watch Steve G Re: Bugs with bool_ids usage (libsepol) Karl MacMillan Bugs with bool_ids usage (libsepol) Cedric Roux Re: pam_namespace Janak Desai Re: [RFC][SECMARK 03/08] Add xtables SECMARK target James Morris Tuesday, 9 May Re: pam_namespace Russell Coker Re: [RFC] SECMARK 1.0 James Morris Re: [RFC] SECMARK 1.0 Karl MacMillan Re: [RFC] SECMARK 1.0 Stephen Smalley Re: [RFC] SECMARK 1.0 James Morris Re: Network access controls (resolving xfrm, secmark, and NetLabel) Paul Moore Re: [RFC][SECMARK 05/08] Add new packet controls to SELinux James Morris Re: Network access controls (resolving xfrm, secmark, and NetLabel) Brian Sniffen Re: Network access controls (resolving xfrm, secmark, and NetLabel) Paul Moore Re: restorecond and security related files Stephen Smalley Re: pam_namespace Janak Desai Re: Network access controls (resolving xfrm, secmark, and NetLabel) Brian Sniffen [Fwd: [PATCH 1/1] mount: shared-subtree support for mount] Janak Desai Re: pam_namespace Janak Desai Re: pam_namespace Russell Coker subversion repository at sourceforge Stephen Smalley Re: [RFC] SECMARK 1.0 Karl MacMillan Re: pam_namespace Janak Desai Re: pam_namespace Russell Coker restorecond and security related files Joshua Brindle Re: [PATCH] fix warnings in selinux-usr Karl MacMillan Re: pam_namespace Stephen Smalley Re: [RFC][SECMARK 05/08] Add new packet controls to SELinux Stephen Smalley Monday, 8 May Re: [RFC][SECMARK 05/08] Add new packet controls to SELinux James Morris Re: [PATCH] fix warnings in selinux-usr Ivan Gyurdiev Re: pam_namespace Thomas Bleher Re: [RFC] SECMARK 1.0 James Morris Re: [RFC][SECMARK 08/08] Add selinux_relabel_packet_permission() check to xt_SECMARK James Morris Re: secon (Was: Policycoreutils patch) James Antill Re: pam_namespace Valdis.Kletnieks_at_vt.edu RE: [Fwd: Re: libsemanage swig problem] Joshua Brindle Re: [RFC][SECMARK 08/08] Add selinux_relabel_packet_permission() check to xt_SECMARK Karl MacMillan Re: [RFC] SECMARK 1.0 Karl MacMillan Re: [RFC][SECMARK 05/08] Add new packet controls to SELinux Karl MacMillan Re: libsemanage swig problem Stephen Smalley Re: libsemanage swig problem Stephen Smalley libsemanage swig problem Joshua Brindle Re: [RFC][SECMARK 05/08] Add new packet controls to SELinux Stephen Smalley Re: secon (Was: Policycoreutils patch) Daniel J Walsh Re: Policycoreutils fixes/translations Stephen Smalley Re: [PATCH] fix warnings in selinux-usr Stephen Smalley Policycoreutils fixes/translations Daniel J Walsh Re: [PATCH] fix warnings in selinux-usr Karl MacMillan secon (Was: Policycoreutils patch) Stephen Smalley Re: policy for clockspeed Christopher J. PeBenito Re: pam_namespace Janak Desai Re: [PATCH] Libsepol test framework Karl MacMillan Re: [PATCH] fix warnings in selinux-usr Karl MacMillan setrans client support in libselinux Stephen Smalley Re: [PATCH] Fix set* functions parameter Stephen Smalley Re: [PATCH] Check return value of getexeccon() Stephen Smalley Re: [PATCH] fix warnings in selinux-usr Stephen Smalley Re: [PATCH] Libsepol test framework Stephen Smalley Re: [PATCH] fix warnings in selinux-usr Karl MacMillan policy for clockspeed Petre Rodan Sunday, 7 May Re: pam_namespace Russell Coker Re: pam_namespace Russell Coker Re: /etc/mtab and namespaces Russell Coker Re: pam_namespace Valdis.Kletnieks_at_vt.edu Re: /etc/mtab and namespaces Valdis.Kletnieks_at_vt.edu Re: [RFC] SECMARK 1.0 James Morris Re: [RFC] SECMARK 1.0 James Morris Re: [RFC] SECMARK 1.0 Joshua Brindle [RFC][SECMARK userland 03/03] Add libip6t_SECMARK James Morris [RFC][SECMARK userland 02/03] Add libipt_SECMARK James Morris [RFC][SECMARK userland 01/03] Add libselinux support James Morris [RFC][SECMARK 08/08] Add selinux_relabel_packet_permission() check to xt_SECMARK James Morris [RFC][SECMARK 07/08] Add selinux_relabel_packet_permission() to SELinux API James Morris [RFC][SECMARK 06/08] Define a relabelto permission in the SELinux packet class James Morris [RFC][SECMARK 05/08] Add new packet controls to SELinux James Morris [RFC][SECMARK 04/08] Add new flask definitions to SELinux James Morris [RFC][SECMARK 03/08] Add xtables SECMARK target James Morris [RFC][SECMARK 02/08] Export selinux_string_to_sid from SELinux James Morris [RFC] [SECMARK 01/08] Add secmark support to core networking James Morris [RFC] SECMARK 1.0 James Morris /etc/mtab and namespaces Russell Coker Re: pam_namespace Russell Coker Saturday, 6 May Re: [PATCH] fix warnings in selinux-usr Ivan Gyurdiev Re: Reference policy documentation Joshua Brindle Reference policy documentation James Morris Friday, 5 May Re: semodule fails in -i or -u (solved -u case) Shintaro Fujiwara Re: semodule fails in -i or -u (solved -i case) Shintaro Fujiwara semodule fails in -i or -u Shintaro Fujiwara [PATCH] fix warnings in selinux-usr Karl MacMillan Network access controls (resolving xfrm, secmark, and NetLabel) Paul Moore Re: swig wrapper bug: setexeccon Stephen Smalley swig wrapper bug: setexeccon Christopher J. PeBenito Re: pam_namespace Valdis.Kletnieks_at_vt.edu Re: pam_namespace Russell Coker Re: pam_namespace Valdis.Kletnieks_at_vt.edu pam_namespace Russell Coker Thursday, 4 May Re: We are attempting once again to split policy out into individual RPMS. Thomas Bleher Re: [redhat-lspp] semanage login -a vs useradd Stephen Smalley Re: We are attempting once again to split policy out into individual RPMS. Thomas Bleher Wednesday, 3 May Re: We are attempting once again to split policy out into individual RPMS. Joshua Brindle Re: Making MCS mandatory Russell Coker Re: We are attempting once again to split policy out into individual RPMS. Karl MacMillan Re: We are attempting once again to split policy out into individual RPMS. Jeremy Katz Re: We are attempting once again to split policy out into individual RPMS. Joshua Brindle Re: appletalk sockets Stephen Smalley Re: appletalk sockets Christopher J. PeBenito appletalk sockets Christopher J. PeBenito RE: We are attempting once again to split policy outintoindividual RPMS. Stephen Smalley Re: We are attempting once again to split policy out into individual RPMS. Karl MacMillan RE: We are attempting once again to split policy outintoindividual RPMS. Karl MacMillan Re: We are attempting once again to split policy out into individual RPMS. Daniel J Walsh Re: We are attempting once again to split policy out into individual RPMS. Karl MacMillan Re: We are attempting once again to split policy out into individual RPMS. Karl MacMillan Re: [2/4] Labeling only policy for fireflier (fireflier.pp) Christopher J. PeBenito Google Summer of Code SELinux projects Erich Schubert Re: Making MCS mandatory James Morris RE: [ANN] Setools-2.4 Kevin Carr Making MCS mandatory Russell Coker Tuesday, 2 May ANN: SELinux Policy IDE (SLIDE) Dave Sugar RE: We are attempting once again to split policy outintoindividualRPMS. Joshua Brindle PAGE_SIZE is going away or at least being discouraged Daniel J Walsh [ANN] Setools-2.4 Kevin Carr RE: We are attempting once again to split policy outintoindividual RPMS. Jeremy Katz RE: We are attempting once again to split policy outintoindividual RPMS. Stephen Smalley RE: We are attempting once again to split policy outintoindividual RPMS. Joshua Brindle RE: We are attempting once again to split policy out intoindividual RPMS. Jeremy Katz RE: We are attempting once again to split policy out intoindividual RPMS. Stephen Smalley [PATCH] Libsepol test framework Karl MacMillan RE: We are attempting once again to split policy out intoindividual RPMS. Joshua Brindle Re: Latest diffs Christopher J. PeBenito Re: We are attempting once again to split policy out into individual RPMS. Jeremy Katz Re: We are attempting once again to split policy out into individual RPMS. Stephen Smalley Re: We are attempting once again to split policy out into individual RPMS. Stephen Smalley Re: We are attempting once again to split policy out into individual RPMS. Paul Nasrat Re: We are attempting once again to split policy out into individual RPMS. Paul Nasrat Re: We are attempting once again to split policy out into individual RPMS. Jeremy Katz Re: We are attempting once again to split policy out into individual RPMS. Jeremy Katz Re: We are attempting once again to split policy out into individual RPMS. Jeremy Katz Re: Latest diffs Christopher J. PeBenito Re: We are attempting once again to split policy out into individual RPMS. Stephen Smalley Re: We are attempting once again to split policy out into individual RPMS. Richard Hally [PATCH] Fix set* functions parameter Glauber de Oliveira Costa [PATCH] Check return value of getexeccon() Glauber de Oliveira Costa Re: [1/4] Labeling only policy for fireflier Török Edwin Re: We are attempting once again to split policy out into individual RPMS. Joshua Brindle Re: We are attempting once again to split policy out into individual RPMS. Stephen Smalley Re: We are attempting once again to split policy out into individual RPMS. Joshua Brindle We are attempting once again to split policy out into individual RPMS. Daniel J Walsh Monday, 1 May Re: [PATCH ] consistent labeling of block\|character devices Stephen Smalley Re: [1/4] Labeling only policy for fireflier Christopher J. PeBenito [3/4] Labeling only policy for fireflier (example module) TÃ¶rÃ¶k Edwin Re: [2/4] Labeling only policy for fireflier (fireflier.pp) TÃ¶rÃ¶k Edwin [1/4] Labeling only policy for fireflier TÃ¶rÃ¶k Edwin [PATCH ] consistent labeling of block\|character devices TÃ¶rÃ¶k Edwin [4/4] Labeling only policy for fireflier (install) TÃ¶rÃ¶k Edwin Friday, 28 April [patch] libsepol: Fix conditional handling for modules Stephen Smalley Thursday, 27 April Re: Labeling only policy and problems with booleans Karl MacMillan Re: Labeling only policy and problems with booleans TÃ¶rÃ¶k Edwin Re: login error with strict modular ref pol in RHEL4 Daniel J Walsh Wednesday, 26 April RE: login error with strict modular ref pol in RHEL4 Dinardo, Michael \(Xetron\) Re: login error with strict modular ref pol in RHEL4 Valdis.Kletnieks_at_vt.edu Re: Labeling only policy and problems with booleans TÃ¶rÃ¶k Edwin RE: login error with strict modular ref pol in RHEL4 Dinardo, Michael \(Xetron\) Re: Labeling only policy and problems with booleans Stephen Smalley Re: Labeling only policy and problems with booleans Christopher J. PeBenito Re: Labeling only policy and problems with booleans Török Edwin Re: Labeling only policy and problems with booleans Török Edwin RE: login error with strict modular ref pol in RHEL4 Dinardo, Michael \(Xetron\) Re: Labeling only policy and problems with booleans Christopher J. PeBenito Re: textrel_shlib_t handling Chris PeBenito Re: textrel_shlib_t handling Stephen Smalley Re: Labeling only policy and problems with booleans Stephen Smalley Re: getfscreatecon(3) Daniel J Walsh Re: login error with strict modular ref pol in RHEL4 Daniel J Walsh Re: getfscreatecon(3) Stephen Smalley Tuesday, 25 April getfscreatecon(3) Russell Coker nethooks stress testing completed successfully Joy Latten Monday, 24 April Re: semodule fails(I found it !) Shintaro Fujiwara Re: semodule fails Shintaro Fujiwara Re: semodule fails Joshua Brindle semodule fails Shintaro Fujiwara Sunday, 23 April Labeling only policy and problems with booleans TÃ¶rÃ¶k Edwin (no subject) Russell Coker Re: Walter Steenvoorden (no subject) Mohammad Mahmoudi Saturday, 22 April textrel_shlib_t handling Chris PeBenito Friday, 21 April login error with strict modular ref pol in RHEL4 Dinardo, Michael \(Xetron\) hierarchical policy Christopher J. PeBenito Re: network packets have become unlabeled_t Stephen Smalley network packets have become unlabeled_t Antoine Martin Thursday, 20 April RE: Latest diffs Chad Hanson Re: Latest diffs Christopher J. PeBenito Latest diffs Daniel J Walsh razor Christopher J. PeBenito Wednesday, 19 April Re: Latest diffs Christopher J. PeBenito Tuesday, 18 April Latest diffs Daniel J Walsh Re: VPN module Christopher J. PeBenito Re: VPN module Christopher J. PeBenito Monday, 17 April Re: VPN module Erich Schubert Re: VPN module Erich Schubert Re: modules.conf "stability" by sorting entries in "make conf" Christopher J. PeBenito Re: Latest patches. Christopher J. PeBenito modules.conf "stability" by sorting entries in "make conf" Erich Schubert Saturday, 15 April Re: semanage patch Steve Grubb Friday, 14 April Re: semanage patch Russell Coker Re: VPN module Christopher J. PeBenito Re: VPN module Petre Rodan Re: semanage patch Stephen Smalley Re: [PATCH] file context sort in libsemanage Stephen Smalley Re: Selinux testsuite updated in latest LTP release Stephen Smalley Latest patches. Daniel J Walsh Re: Latest patches. Russell Coker semanage patch Russell Coker Thursday, 13 April Selinux testsuite updated in latest LTP release Joy Latten Re: [PATCH] file context sort in libsemanage Christopher Ashworth Article about SE Linux on NetworkWorld Russell Coker Re: Untrusted applications under SELinux Erich Schubert Wednesday, 12 April Re: [RFC] [PATCH] Extend vixie-cron to allow cron jobs at multiple security contexts Janak Desai Re: Untrusted applications under SELinux Valdis.Kletnieks_at_vt.edu Untrusted applications under SELinux Gaurav Poothia Untrusted applications under SELinux Gaurav Poothia Re: [PATCH] file context sort in libsemanage Christopher Ashworth Re: Latest Updates Christopher J. PeBenito Re: Sendmail & SELinux policies, again Tanel Kokk Re: Sendmail & SELinux policies, again Stephen Smalley Re: Sendmail & SELinux policies, again Tanel Kokk Re: Sendmail & SELinux policies, again Stephen Smalley Re: Sendmail & SELinux policies, again Christopher J. PeBenito Re: Sendmail & SELinux policies, again Tanel Kokk Re: Sendmail & SELinux policies, again Stephen Smalley Re: [RFC] [PATCH] Extend vixie-cron to allow cron jobs at multiple security contexts Steve Greenland Re: [RFC] [PATCH] Extend vixie-cron to allow cron jobs at multiple security contexts Russell Coker Please remove my e-mail address from your contact lists Morrison, Daniel C Sendmail & SELinux policies, again Tanel Kokk Tuesday, 11 April Python changes for libselinux Daniel J Walsh Re: [PATCH] file context sort in libsemanage Stephen Smalley Latest Updates Daniel J Walsh Monday, 10 April [PATCH] file context sort in libsemanage Christopher Ashworth Friday, 7 April audit PID of child process and end of process kakou [RFC] [PATCH] Extend vixie-cron to allow cron jobs at multiple security contexts JANAK DESAI Thursday, 6 April Re: rsync resetting contexts in /var/www J. Simonetti Re: Sendmail & SELinux policies Tanel Kokk Re: Sendmail & SELinux policies Stephen Smalley Re: Sendmail & SELinux policies Tanel Kokk Re: AVC to Usable messages Stephen Smalley Re: Sendmail & SELinux policies Stephen Smalley Sendmail & SELinux policies Tanel Kokk Wednesday, 5 April Re: rsync resetting contexts in /var/www Erich Schubert AVC to Usable messages Daniel J Walsh Re: rsync resetting contexts in /var/www Stephen Smalley Re: VPN module Erich Schubert Re: qmail policy Christopher J. PeBenito Re: VPN module Joshua Brindle Re: VPN module Christopher J. PeBenito VPN module Erich Schubert Re: End User Mailing List / Group / Policy Made Easy Erich Schubert rsync resetting contexts in /var/www J. Simonetti Tuesday, 4 April Re: End User Mailing List / Group / Policy Made Easy Randal T. Rioux qmail policy Petre Rodan Re: [patch] userhelper.te typo fix Christopher J. PeBenito [patch] userhelper.te typo fix James Leighton Athey Monday, 3 April Re: [SEPOL] Fix leak of optional package sections Stephen Smalley Re: End User Mailing List / Group Stephen Smalley Re: End User Mailing List / Group Erich Schubert End User Mailing List / Group Randal T. Rioux Sunday, 2 April RE: The sort algorithm is broken by the second rule, We need a way to pin these rules to the top. Joshua Brindle Re: The sort algorithm is broken by the second rule, We need a way to pin these rules to the top. Ivan Gyurdiev Re: The sort algorithm is broken by the second rule, We need a way to pin these rules to the top. Joshua Brindle Re: MCS and unconfined_t KaiGai Kohei Re: The sort algorithm is broken by the second rule, We need a way to pin these rules to the top. Ivan Gyurdiev Friday, 31 March Re: The sort algorithm is broken by the second rule, We need a way to pin these rules to the top. Ivan Gyurdiev Re: The sort algorithm is broken by the second rule, We need a way to pin these rules to the top. Stephen Smalley Re: The sort algorithm is broken by the second rule, We need a way to pin these rules to the top. Stephen Smalley Re: The sort algorithm is broken by the second rule, We need a way to pin these rules to the top. Joshua Brindle Re: The sort algorithm is broken by the second rule, We need a way to pin these rules to the top. Stephen Smalley Re: The sort algorithm is broken by the second rule, We need a way to pin these rules to the top. Ivan Gyurdiev Re: The sort algorithm is broken by the second rule, We need a way to pin these rules to the top. Stephen Smalley Re: Need testers for Modules policicy on RHEL4 James de Lurker [SEPOL] Fix leak of optional package sections Ivan Gyurdiev Re: The sort algorithm is broken by the second rule, We need a way to pin these rules to the top. Ivan Gyurdiev Re: AVC Decision Tree. Daniel J Walsh Re: The sort algorithm is broken by the second rule, We need a way to pin these rules to the top. Ivan Gyurdiev Re: The sort algorithm is broken by the second rule, We need a way to pin these rules to the top. Christopher Ashworth Re: The sort algorithm is broken by the second rule, We need a way to pin these rules to the top. Joshua Brindle Re: MCS and unconfined_t Russell Coker Re: The sort algorithm is broken by the second rule, We need a way to pin these rules to the top. Stephen Smalley Re: The sort algorithm is broken by the second rule, We need a way to pin these rules to the top. Stephen Smalley Re: The sort algorithm is broken by the second rule, We need a way to pin these rules to the top. Stephen Smalley Re: The sort algorithm is broken by the second rule, We need a way to pin these rules to the top. Daniel J Walsh Re: The sort algorithm is broken by the second rule, We need a way to pin these rules to the top. Joshua Brindle The sort algorithm is broken by the second rule, We need a way to pin these rules to the top. Daniel J Walsh Thursday, 30 March Re: [PATCH] typo fix for corenetwork.if.m4 Christopher J. PeBenito Re: Need testers for Modules policicy on RHEL4 Christopher J. PeBenito Re: Need testers for Modules policicy on RHEL4 Daniel J Walsh AVC Decision Tree. Daniel J Walsh Re: Fix file descriptor leak Stephen Smalley Re: Fix file descriptor leak Daniel J Walsh [PATCH] typo fix for corenetwork.if.m4 James Athey Re: Latest policy Stephen Smalley Re: Fix file descriptor leak Stephen Smalley Re: Latest policy Daniel J Walsh Re: Latest policy Christopher J. PeBenito Re: Need testers for Modules policicy on RHEL4 Stephen Smalley Re: MCS and unconfined_t Stephen Smalley Re: MCS and unconfined_t Russell Coker Re: Need testers for Modules policicy on RHEL4 James de Lurker Wednesday, 29 March Re: MCS and unconfined_t KaiGai Kohei Re: Need testers for Modules policicy on RHEL4 Stephen J. Smoogen Need testers for Modules policicy on RHEL4 Daniel J Walsh Fix file descriptor leak Daniel J Walsh Latest policy Daniel J Walsh Re: ANN: Fedora Core 5 SELinux FAQ Stephen Smalley Re: MCS and unconfined_t Christopher J. PeBenito Re: ANN: Fedora Core 5 SELinux FAQ Stephen Smalley Re: MCS and unconfined_t Stephen Smalley Re: MCS and unconfined_t Christopher J. PeBenito policycoreutils patch Daniel J Walsh SELinux overview on line. Daniel J Walsh Re: MCS and unconfined_t Stephen Smalley Tuesday, 28 March ANN: Fedora Core 5 SELinux FAQ Chad Sellers Re: MCS and unconfined_t Russell Coker Re: Misc policy fixes Thomas Bleher PATCH: Add examples to man-pages Thomas Bleher Re: MCS and unconfined_t Stephen Smalley MCS and unconfined_t KaiGai Kohei Re: I am add a custom rule, know how 2 do te file, what about fc file, please he Rongdong Lu Monday, 27 March Re: I am add a custom rule, know how 2 do te file, what about fc file, please help Serge E. Hallyn Re: [RFC][PATCH] extending the libsepol API Ivan Gyurdiev Re: [RFC][PATCH] extending the libsepol API Ivan Gyurdiev Re: [RFC][PATCH] extending the libsepol API Ivan Gyurdiev Re: [RFC][PATCH] extending the libsepol API Ivan Gyurdiev Selinux Testsuite changes Joy Latten Re: I am add a custom rule, know how 2 do te file, what about fc file, please help Stephen Smalley Re: I am add a custom rule, know how 2 do te file, what about fc file, please help Daniel J Walsh Re: How can modular policy ever have worked? [patch] Christopher J. PeBenito Re: mta=module not working, make 3.81-rc2 issues Christopher J. PeBenito Re: Query about desktop apps. Stephen Smalley Re: Query about desktop apps. Valdis.Kletnieks_at_vt.edu Re: Query about desktop apps. Mark Ennis Sunday, 26 March Re: Query about desktop apps. Gaurav Poothia Saturday, 25 March Re: Query about desktop apps. Valdis.Kletnieks_at_vt.edu Re: How can modular policy ever have worked? [patch] Joshua Brindle Query about desktop apps. Gaurav Poothia I am add a custom rule, know how 2 do te file, what about fc file, please help Rongdong Lu Re: How can modular policy ever have worked? [patch] Erich Schubert Friday, 24 March mta=module not working, make 3.81-rc2 issues Erich Schubert [patch] libsepol: fix endianness problem in policy module write code Stephen Smalley Re: interfaces added... Christopher J. PeBenito RE: [RFC][PATCH] extending the libsepol API Kevin Carr Re: Misc policy fixes Christopher J. PeBenito interfaces added... Joy Latten RE: [RFC][PATCH] extending the libsepol API Stephen Smalley Re: Install several policy modules at once? Stephen Smalley Re: Install several policy modules at once? Thomas Bleher Misc policy fixes Thomas Bleher Install several policy modules at once? Thomas Bleher Thursday, 23 March Re: Latest Diffs. This is a big one because we were frozen for so long. Daniel J Walsh Re: [RFC][PATCH] extending the libsepol API Stephen Smalley Re: How can modular policy ever have worked? [patch] Stephen Smalley RE: [RFC][PATCH] extending the libsepol API Stephen Smalley Re: Latest Diffs. This is a big one because we were frozen for so long. Christopher J. PeBenito RE: [RFC][PATCH] extending the libsepol API Kevin Carr Wednesday, 22 March RE: [RFC][PATCH] extending the libsepol API Kevin Carr Re: [RFC][PATCH] extending the libsepol API Stephen Smalley Tuesday, 21 March [RFC][PATCH] extending the libsepol API Kevin Carr Re: Changes to policycoreutils. Daniel J Walsh Re: How can modular policy ever have worked? [patch] Christopher J. PeBenito Re: Changes to policycoreutils. Daniel J Walsh Re: Changes to policycoreutils. Stephen Smalley Monday, 20 March Re: Changes to policycoreutils. Stephen Smalley Re: Changes to policycoreutils. Daniel J Walsh Re: Changes to policycoreutils. Stephen Smalley Re: Changes to policycoreutils. Stephen Smalley Re: Changes to policycoreutils. Russell Coker Re: Changes to policycoreutils. Stephen Smalley Re: Changes to policycoreutils. Stephen Smalley Re: semodule dumps core Stephen Smalley Re: How can modular policy ever have worked? [patch] Christopher J. PeBenito Re: How can modular policy ever have worked? [patch] Stephen Smalley Re: Changes to policycoreutils. Stephen Smalley Re: How can modular policy ever have worked? [patch] Christopher J. PeBenito Re: How can modular policy ever have worked? [patch] Erich Schubert Re: Changes to policycoreutils. Daniel J Walsh Re: How can modular policy ever have worked? [patch] Stephen Smalley Re: Changes to policycoreutils. Stephen Smalley Sunday, 19 March RE: [PATCH] MLS interface update schaufler-ca.com - Casey Schaufler Saturday, 18 March Re: Changes to policycoreutils. Daniel J Walsh Friday, 17 March RE: [PATCH] MLS interface update Thomas Bleher Saturday, 18 March How can modular policy ever have worked? [patch] Erich Schubert Re: Changes to policycoreutils. Valdis.Kletnieks_at_vt.edu Friday, 17 March Re: semodule dumps core Thomas Bleher Changes to policycoreutils. Daniel J Walsh Latest Diffs. This is a big one because we were frozen for so long. Daniel J Walsh Re: semodule dumps core Stephen Smalley Re: semodule dumps core Stephen Smalley Re: Bug in the semanage user management code or genhomedircon? Stephen Smalley Re: Bug in the semanage user management code or genhomedircon? Thomas Bleher Thursday, 16 March Re: semodule dumps core Ivan Gyurdiev semodule dumps core Thomas Bleher Re: Bug in the semanage user management code or genhomedircon? Ivan Gyurdiev Bug in the semanage user management code or genhomedircon? Thomas Bleher Re: [SEMANAGE] Manpage reorganization James Morris ANN: Polgen 1.3, now with PSL Brian Sniffen [SEMANAGE] Manpage reorganization Ivan Gyurdiev Re: one line fix for tor module Christopher J. PeBenito Wednesday, 15 March one line fix for tor module Erich Schubert Re: Problem with semodule mls policy Daniel J Walsh ANN: Updated SELinux Release Stephen Smalley RE: Problem with semodule mls policy Chad Hanson Re: Problem with semodule mls policy Stephen Smalley Re: Problem with semodule mls policy Joshua Brindle Re: Problem with semodule mls policy Stephen Smalley Re: [PATCH] MLS interface update Christopher J. PeBenito Re: Problem with semodule mls policy Joshua Brindle Re: Problem with semodule mls policy Stephen Smalley Re: Problem with semodule mls policy Joshua Brindle Re: Problem with semodule mls policy Stephen Smalley RE: [PATCH] MLS interface update Chad Hanson Problem with semodule mls policy Daniel J Walsh Tuesday, 14 March postfix mysql Antoine Martin Re: virtual SELinux appliances, automated test suites Antoine Martin Re: policy support for SSP Christopher J. PeBenito Re: w3c.te module policy Christopher J. PeBenito RE: [PATCH] MLS interface update Frank Mayer Re: Writing system policy Stephen Smalley Monday, 13 March Writing system policy shubhamsaxena1_at_30gigs.com RE: [PATCH] MLS interface update Chad Hanson Re: Strange behaviour in MLS Policy Stephen Smalley Strange behaviour in MLS Policy Daniel J Walsh Re: [PATCH] MLS policy comment update Christopher J. PeBenito Re: [PATCH] MLS interface update Christopher J. PeBenito [SECURITY] SELinux ptrace bug (CVE-2006-1052) Stephen Smalley Re: We need a tool to extract the file context contents out of a policy package. Joshua Brindle Re: We need a tool to extract the file context contents out of a policy package. Daniel J Walsh Re: Patch to add a "netuser" role and user Christopher J. PeBenito Sunday, 12 March policy support for SSP Petre Rodan updated german translations for policycoreutils 1.28 Manoj Srivastava Saturday, 11 March Re: We need a tool to extract the file context contents out of a policy package. Joshua Brindle Re: We need a tool to extract the file context contents out of a policy package. Daniel J Walsh Re: We need a tool to extract the file context contents out of a policy package. Ivan Gyurdiev w3c.te module policy Daniel J Walsh We need a tool to extract the file context contents out of a policy package. Daniel J Walsh Friday, 10 March Re: Query MLS info outside of SELinux/LSM? Paul Moore Re: Query MLS info outside of SELinux/LSM? Stephen Smalley Re: Query MLS info outside of SELinux/LSM? Joe Nall Re: Query MLS info outside of SELinux/LSM? Stephen Smalley Re: Query MLS info outside of SELinux/LSM? Paul Moore Re: Query MLS info outside of SELinux/LSM? Stephen Smalley Re: Query MLS info outside of SELinux/LSM? Paul Moore Re: Query MLS info outside of SELinux/LSM? Stephen Smalley Query MLS info outside of SELinux/LSM? Paul Moore [PATCH] MLS interface update Chad Hanson [PATCH] MLS policy comment update Chad Hanson [PATCH] initscripts - restorecon of /dev/pts Chad Hanson [ANN] selinuxnews.org registration open James Morris Thursday, 9 March Re: Patch to add a "netuser" role and user Erich Schubert SELinux symposium materials Frank Mayer Re: Deprecate freecon and freeconary Stephen Smalley Re: [redhat-lspp] How to build test policy now? Stephen Smalley Re: [redhat-lspp] How to build test policy now? Stephen Smalley Re: [redhat-lspp] How to build test policy now? Daniel J Walsh Re: Patch to add a "netuser" role and user Christopher J. PeBenito Wednesday, 8 March Abort early on merge() errors Ivan Gyurdiev Re: Desktop Integration Take 2 Joe Nall Re: Patch to add a "netuser" role and user Erich Schubert Re: Desktop Integration Take 2 Ivan Gyurdiev Tuesday, 7 March Current diff from debian svn Erich Schubert Wednesday, 8 March Re: Desktop Integration Take 2 Joe Nall Re: Desktop Integration Take 2 Ivan Gyurdiev Re: Current diff from debian svn Christopher J. PeBenito Re: Patch to add a "netuser" role and user Christopher J. PeBenito Re: policycoreutils latest diffs. Stephen Smalley Re: libsemanage/src/semanage_store.c:semanage_split_fc Serge E. Hallyn Re: libsemanage/src/semanage_store.c:semanage_split_fc Stephen Smalley ANN: SELinux BOF at OLS Stephen Smalley Re: libsepol/src/link.c:copy_avrule_list( ) Joshua Brindle Re: libsepol/src/link.c:copy_avrule_list( ) Stephen Smalley Re: libsepol/src/link.c:copy_avrule_list( ) Ivan Gyurdiev Re: libsepol/src/link.c:copy_avrule_list( ) Stephen Smalley Re: libsepol/src/conditional.c:cond_evaluate_expr() Stephen Smalley Tuesday, 7 March Patch to add a "netuser" role and user Erich Schubert Re: refpoliy additions: amavis, clamd Christopher J. PeBenito Re: SEL+RHEL4+Amanda, targeted policy 18, enforcing Brad Willson Re: SEL+RHEL4+Amanda, targeted policy 18, enforcing Stephen Smalley Re: Tor module for refpolicy Christopher J. PeBenito Re: SEL+RHEL4+Amanda, targeted policy 18, enforcing Brad Willson ANN: Reference Policy Release Christopher J. PeBenito Re: SEL+RHEL4+Amanda, targeted policy 18, enforcing Stephen Smalley SEL+RHEL4+Amanda, targeted policy 18, enforcing Brad Willson Monday, 6 March Re: libsemanage/src/semanage_store.c:semanage_split_fc Ivan Gyurdiev Re: libsepol/src/link.c:copy_avrule_list( ) Ivan Gyurdiev libsemanage/src/semanage_store.c:semanage_split_fc Serge E. Hallyn Re: named SELinux policy Erich Schubert Re: Desktop integration Erich Schubert libsepol/src/conditional.c:cond_evaluate_expr() Serge E. Hallyn Re: named SELinux policy Ivan Gyurdiev Re: named SELinux policy Daniel J Walsh Re: Desktop integration Daniel J Walsh Sunday, 5 March RE: selinux.org domain Frank Mayer Re: selinux.org domain gwe3409_at_att.net selinux.org domain Manoj Srivastava Friday, 3 March Re: Refpolicy: Small fix to make refpolicy compile with make from CVS Erich Schubert Tuesday, 21 February Refpolicy: Small fix to make refpolicy compile with make from CVS Thomas Bleher Friday, 3 March RE: ANN: CDS Framework IDE Kevin Carr Re: FYI SELinux/AppArmor press coderman Re: FYI SELinux/AppArmor press Erich Schubert Thursday, 2 March Re: FYI SELinux/AppArmor press Joshua Brindle Re: building base targeted policy... Klaus Weidner building base targeted policy... Joy Latten Re: UDP API Joy Latten Re: FYI SELinux/AppArmor press Erich Schubert Wednesday, 1 March Re: FYI SELinux/AppArmor press Chad Sellers Re: FYI SELinux/AppArmor press Erich Schubert Re: FYI SELinux/AppArmor press Benjy Grogan Re: ANN: CDS Framework IDE Serge E. Hallyn UDP API Mark Re: FYI SELinux/AppArmor press Erich Schubert Re: virtual SELinux appliances, automated test suites coderman Tuesday, 28 February Planet SELinux James Morris Re: FYI SELinux/AppArmor press cwarner virtual SELinux appliances, automated test suites coderman ANN: CDS Framework IDE Kevin Carr ANN: SELinux Policy IDE (SLIDE) Kevin Carr Desktop Integration Take 2 Ivan Gyurdiev Re: Context translation and MLS categories Stephen Smalley Re: Context translation and MLS categories Ivan Gyurdiev Re: Deprecate freecon and freeconary Ivan Gyurdiev Re: Context translation and MLS categories Stephen Smalley Re: Context translation and MLS categories Ivan Gyurdiev Re: Desktop integration Ivan Gyurdiev Re: Context translation and MLS categories Stephen Smalley Re: Context translation and MLS categories Ivan Gyurdiev Re: FYI SELinux/AppArmor press Erich Schubert Monday, 27 February Deprecate freecon and freeconary Ivan Gyurdiev Tuesday, 28 February Re: Context translation and MLS categories Stephen Smalley Re: Deprecate freecon and freeconary Stephen Smalley Re: Desktop integration Daniel J Walsh Re: Desktop integration Ivan Gyurdiev Context translation and MLS categories Ivan Gyurdiev Monday, 27 February Re: Latest changes to policy Christopher J. PeBenito Saturday, 25 February refpoliy additions: amavis, clamd Erich Schubert Wishlist: services/httpd.* module, module meta information, conflicts Erich Schubert Re: FYI SELinux/AppArmor press Randal T. Rioux Friday, 24 February Tor module for refpolicy Erich Schubert Re: [PATCH] support for context based audit filtering Darrel Goeddel [PATCH] support for context based audit filtering Darrel Goeddel FYI SELinux/AppArmor press Daniel J Walsh Re: [PATCH] context based audit filtering (take 3) Steve Grubb Re: [PATCH] context based audit filtering (take 3) Stephen Smalley Re: [PATCH] context based audit filtering (take 4) Stephen Smalley Thursday, 23 February Re: [PATCH] context based audit filtering (take 3) Darrel Goeddel Latest changes to policy Daniel J Walsh Re: [PATCH] context based audit filtering (take 4) Darrel Goeddel Re: Latest diffs Christopher J. PeBenito Re: policycoreutils latest diffs. Stephen Smalley Re: libselinux CVS doesn't honor DESTDIR Erich Schubert Re: libselinux CVS doesn't honor DESTDIR Stephen Smalley Re: Apache/PHP module boot restriction? Stephen Smalley libselinux CVS doesn't honor DESTDIR Erich Schubert Fwd: Refpolicy: Small fix to make refpolicy compile with make from CVS Thomas Bleher Wednesday, 22 February Apache/PHP module boot restriction? Andrew JH Ring policycoreutils latest diffs. Daniel J Walsh Re: [RFC][PATCH] collect security labels on user processes generating audit messages Timothy R. Chavez Re: [RFC][PATCH] collect security labels on user processes generating audit messages Timothy R. Chavez Re: semanage non MLS breakage Stephen Smalley Re: [PATCH] context based audit filtering (take 3) Stephen Smalley Re: [PATCH] context based audit filtering (take 3) Stephen Smalley Re: [PATCH] context based audit filtering (take 3) Stephen Smalley Re: [PATCH] context based audit filtering (take 3) Stephen Smalley Re: [PATCH] context based audit filtering (take 3) Stephen Smalley Re: [RFC][PATCH] collect security labels on user processes generating audit messages Stephen Smalley Re: [RFC][PATCH] collect security labels on user processes generating audit messages Stephen Smalley Tuesday, 21 February Re: [PATCH] context based audit filtering (take 3) Darrel Goeddel [PATCH] context based audit filtering (take 3) Darrel Goeddel Saturday, 18 February SERefpolicy for Debian patches Erich Schubert Tuesday, 21 February Re: How to build external policy modules outside of the main tree Serge E. Hallyn Monday, 20 February Re: How to build external policy modules outside of the main tree Daniel J Walsh How to build external policy modules outside of the main tree Thomas Bleher Latest diffs Daniel J Walsh Re: Audit log denials for strict policy Daniel J Walsh Re: Latesr diffs Ivan Gyurdiev [Fwd: [Fwd: Leveraging Security-Enhanced Linux in Your Data Center]] Daniel J Walsh Re: Latesr diffs Christopher J. PeBenito Re: libselinux swig wrapper breakage Ivan Gyurdiev Re: libselinux swig wrapper breakage Ivan Gyurdiev Sunday, 19 February libselinux swig wrapper breakage Chris PeBenito Re: semanage non MLS breakage Ivan Gyurdiev Re: semanage non MLS breakage Joshua Brindle Latesr diffs Daniel J Walsh Re: semanage non MLS breakage Ivan Gyurdiev Saturday, 18 February Re: semanage non MLS breakage Ivan Gyurdiev Re: semanage non MLS breakage Chris PeBenito Re: Genhomedircon - C or Python? Ivan Gyurdiev Re: Genhomedircon - C or Python? Ivan Gyurdiev Friday, 17 February Re: semanage non MLS breakage Ivan Gyurdiev Re: [RFC][PATCH] collect security labels on user processes generating audit messages Timothy R. Chavez Re: ipsec in reference policy Christopher J. PeBenito Re: [RFC] [PATCH] Stephen Smalley Re: [RFC] [PATCH] Darrel Goeddel ipsec in reference policy Joy Latten Re: semanage non MLS breakage Ivan Gyurdiev Re: semanage non MLS breakage Joshua Brindle Re: semanage non MLS breakage Ivan Gyurdiev Re: semanage non MLS breakage Ivan Gyurdiev Re: semanage non MLS breakage Joshua Brindle Re: [RFC] [PATCH] Darrel Goeddel Re: semanage non MLS breakage Joshua Brindle Re: semanage non MLS breakage Ivan Gyurdiev Genhomedircon - C or Python? Ivan Gyurdiev Thursday, 16 February semanage non MLS breakage Chris PeBenito Re: [RFC] semodule policy Joshua Brindle Re: [RFC] semodule policy Stephen Smalley Re: [RFC] semodule policy Stephen Smalley Re: [RFC][PATCH] collect security labels on user processes generating audit messages Timothy R. Chavez Re: [RFC] [PATCH] Stephen Smalley Re: [RFC] [PATCH] Darrel Goeddel Re: Latest diffs Christopher J. PeBenito [RFC] semodule policy Christopher J. PeBenito Re: [RFC][PATCH] collect security labels on user processes generating audit messages Lamont R. Peterson Re: [SEMANAGE/SEPOL] Nodes: fix bug, and add netmask ordering support Stephen Smalley Re: [RFC] [PATCH] Stephen Smalley Re: [RFC][PATCH] collect security labels on user processes generating audit messages Timothy R. Chavez Re: [RFC][PATCH] collect security labels on user processes generating audit messages Steve Grubb Re: [RFC][PATCH] collect security labels on user processes generating audit messages Stephen Smalley [RFC] [PATCH] Darrel Goeddel Re: [RFC][PATCH] collect security labels on user processes generating audit messages Steve Grubb Wednesday, 15 February Re: [RFC][PATCH] collect security labels on user processes generating audit messages Steve Grubb Re: [RFC][PATCH] collect security labels on user processes generating audit messages Steve Grubb Re: [RFC][PATCH] collect security labels on user processes generating audit messages Steve Grubb Re: [RFC][PATCH] collect security labels on user processes generating audit messages Steve Grubb Thursday, 16 February Re: [SEMANAGE/SEPOL] Nodes: fix bug, and add netmask ordering support Ivan Gyurdiev [SEMANAGE/SEPOL] Nodes: fix bug, and add netmask ordering support Ivan Gyurdiev Wednesday, 15 February Re: [RFC][PATCH] collect security labels on user processes generating audit messages Darrel Goeddel Re: [RFC][PATCH] collect security labels on user processes generating audit messages Timothy R. Chavez Re: [PATCH] refpolicy: external modules Christopher J. PeBenito Re: [RFC][PATCH] collect security labels on user processes generating audit messages Linda Knippers Re: Bugfix patch Stephen Smalley Re: [RFC][PATCH] collect security labels on user processes generating audit messages Timothy R. Chavez Re: [RFC][PATCH] collect security labels on user processes generating audit messages Stephen Smalley Re: [RFC][PATCH] collect security labels on user processes generating audit messages Stephen Smalley Re: [RFC][PATCH] collect security labels on user processes generating audit messages Timothy R. Chavez Bugfix patch Ivan Gyurdiev Re: [RFC][PATCH] collect security labels on user processes generating audit messages Linda Knippers Re: [RFC][PATCH] collect security labels on user processes generating audit messages Stephen Smalley Re: [RFC][PATCH] collect security labels on user processes generating audit messages Timothy R. Chavez Re: [SEPOL] Nodes, Ports: always prepend Stephen Smalley Re: [SEMANAGE] Use the paths array Stephen Smalley Re: [RFC][PATCH] collect security labels on user processes generating audit messages Stephen Smalley Tuesday, 14 February Re: [RFC][PATCH] collect security labels on user processes generating audit messages Timothy R. Chavez [SEPOL] Nodes, Ports: always prepend Ivan Gyurdiev [SEMANAGE] Use the paths array Ivan Gyurdiev Re: seref: patch: postfix and roles Christopher J. PeBenito RE: [PATCH 1/3] libsepol - fix aliased sensitivities Stephen Smalley Re: Improve bindings, add PyList(String) for roles array Stephen Smalley Re: Latest diffs Joshua Brindle Re: [SEMANAGE][SEPOL] Minor cleanups Stephen Smalley Re: [SEPOL][SEMANAGE] Nodecon Support: Try 1 Stephen Smalley Re: Move python bindings into semanageswig_python.i Stephen Smalley Re: [SEMANAGE][UTILS] Use PyList in bindings Stephen Smalley Improve bindings, add PyList(String) for roles array Ivan Gyurdiev Re: Congratulations Steve! Stephen Smalley Re: Congratulations Steve! schaufler-ca.com - Casey Schaufler Re: [SEMANAGE/utility] Improve usage() Stephen Smalley Re: Latest diffs Daniel J Walsh Re: Congratulations Steve! Stephen Smalley Move python bindings into semanageswig_python.i Ivan Gyurdiev Re: [SEMANAGE][UTILS] Use PyList in bindings Ivan Gyurdiev [SEMANAGE/utility] Improve usage() Ivan Gyurdiev Congratulations Steve! Russell Coker Monday, 13 February Re: Latest diffs Christopher J. PeBenito Re: [RFC][PATCH] collect security labels on user processes generating audit messages Stephen Smalley RE: [PATCH 1/3] libsepol - fix aliased sensitivities Stephen Smalley RE: [PATCH 1/3] libsepol - fix aliased sensitivities Kevin Carr Re: [PATCH 1/3] libsepol - fix aliased sensitivities Stephen Smalley Re: [PATCH] Add version option to policycoreutils Stephen Smalley Re: [PATCH] optionals in base Stephen Smalley Re: [SEMANAGE] Fix parse_optional_ch Stephen Smalley Re: Semanage/libsemanage seems to be broken. Stephen Smalley Friday, 10 February Re: [SEPOL][SEMANAGE] Nodecon Support: Try 1 Ivan Gyurdiev RE: [SEPOL][SEMANAGE] Nodecon Support: Try 1 Chad Hanson seref: patch: postfix and roles Serge E. Hallyn Re: [SEPOL][SEMANAGE] Nodecon Support: Try 1 Ivan Gyurdiev [SEMANAGE] Fix parse_optional_ch Ivan Gyurdiev [PATCH] refpolicy: external modules Spencer Shimko [PATCH] optionals in base Joshua Brindle Re: [PATCH] XML Documentaion Modification and Third Party Module support Christopher J. PeBenito [PATCH] XML Documentaion Modification and Third Party Module support David Sugar Re: seref: trivial patch: Serge E. Hallyn Re: seref: trivial patch: Christopher J. PeBenito [PATCH] Add version option to policycoreutils Glauber de Oliveira Costa Re: seref: trivial patch: Serge E. Hallyn Re: seref: trivial patch: Christopher J. PeBenito semanage doing translations? Joshua Brindle Re: [Patch] Refpolicy constraints patch for hierarchy Christopher J. PeBenito Re: [PATCH] Add version option to newrole Glauber de Oliveira Costa Thursday, 9 February Re: [RFC][PATCH] collect security labels on user processes generating audit messages James Morris Re: Semanage/libsemanage seems to be broken. Ivan Gyurdiev Re: [RFC][PATCH] collect security labels on user processes generating audit messages Timothy R. Chavez audit2ref helpful tool for writing some reference policy Daniel J Walsh My thoughts on SELinux and AppArmor Daniel J Walsh Re: [PATCH] Add version option to newrole Stephen Smalley Re: [PATCH] Add version option to newrole Stephen Smalley seref: trivial patch: Serge E. Hallyn Latest diffs Daniel J Walsh Re: [RFC][PATCH] collect security labels on user processes generating audit messages Stephen Smalley Re: [RFC][PATCH] collect security labels on user processes generating audit messages Stephen Smalley Re: [RFC][PATCH] collect security labels on user processes generating audit messages Timothy R. Chavez Re: [RFC][PATCH] collect security labels on user processes generating audit messages Stephen Smalley Re: [RFC][PATCH] collect security labels on user processes generating audit messages James Morris Re: [RFC][PATCH] collect security labels on user processes generating audit messages Timothy R. Chavez Re: [RFC][PATCH] collect security labels on user processes generating audit messages James Morris Re: [RFC][PATCH] collect security labels on user processes generating audit messages Darrel Goeddel Re: [RFC][PATCH] collect security labels on user processes generating audit messages James Morris Wednesday, 8 February [RFC][PATCH] collect security labels on user processes generating audit messages Timothy R. Chavez Re: [PATCH] Add version option to newrole Glauber de Oliveira Costa Re: [PATCH] Add version option to newrole Steve G Re: [PATCH] Add version option to newrole Stephen Smalley [PATCH] Add version option to newrole Glauber de Oliveira Costa Re: auditctl examples? David Caplan Re: auditctl examples? Steve G Re: auditctl examples? David Caplan Re: [PATCH] add version option to newrole Glauber de Oliveira Costa Re: [PATCH] add version option to newrole Glauber de Oliveira Costa Re: [PATCH] add version option to newrole Steve G Re: [PATCH] add version option to newrole Stephen Smalley [PATCH] add version option to newrole Glauber de Oliveira Costa [SEMANAGE][SEPOL] Minor cleanups Ivan Gyurdiev Re: [SEPOL][SEMANAGE] Nodecon Support: Try 1 Ivan Gyurdiev Tuesday, 7 February Re: auditctl examples? Steve G Re: [PATCH] Add seuser and user_extra to package format Joshua Brindle [Patch] Refpolicy constraints patch for hierarchy Chad Sellers auditctl examples? David Slater Re: [PATCH] Add seuser and user_extra to package format Ivan Gyurdiev Re: [PATCH] Add seuser and user_extra to package format Daniel J Walsh Re: [PATCH] Add seuser and user_extra to package format Joshua Brindle Re: [redhat-lspp] Re: problem changing role. Stephen Smalley Re: problem changing role. Rodrigo Vivi Re: problem changing role. Stephen Smalley problem changing role. Glauber de Oliveira Costa Re: Why cron doesn't work in strict policy Daniel J Walsh Re: [PATCH] Add seuser and user_extra to package format Daniel J Walsh Re: Why cron doesn't work in strict policy Ivan Gyurdiev Re: [PATCH] Add seuser and user_extra to package format Ivan Gyurdiev Re: Why cron doesn't work in strict policy Stephen Smalley Re: Why cron doesn't work in strict policy Ivan Gyurdiev Re: Why cron doesn't work in strict policy Daniel J Walsh Re: Why cron doesn't work in strict policy Ivan Gyurdiev Re: Why cron doesn't work in strict policy Stephen Smalley Re: Why cron doesn't work in strict policy Daniel J Walsh Re: [PATCH] Add seuser and user_extra to package format Stephen Smalley RE: SElinux from scratch Frank Mayer Re: MCS policy patch Daniel J Walsh Re: SElinux from scratch Stephen Smalley Re: [PATCH 3/3] libsepol - fix aliased sensitivities Stephen Smalley Re: [PATCH 2/3] libsepol - fix aliased sensitivities Stephen Smalley Re: [PATCH 1/3] libsepol - fix aliased sensitivities Stephen Smalley Re: MCS policy patch Russell Coker Re: SElinux from scratch Goo GGooo Re: initrc_t has no execmod in targeted policy Vladimir Simonov Monday, 6 February Re: SElinux from scratch Valdis.Kletnieks_at_vt.edu Re: MCS policy patch Russell Coker Re: [PATCH] Add seuser and user_extra to package format Joshua Brindle Re: [PATCH] Add seuser and user_extra to package format Ivan Gyurdiev SElinux from scratch Goo GGooo Re: MCS policy patch Christopher J. PeBenito Re: Latest Diffs Christopher J. PeBenito [PATCH] Add seuser and user_extra to package format Joshua Brindle [PATCH 3/3] libsepol - fix aliased sensitivities Kevin Carr [PATCH 2/3] libsepol - fix aliased sensitivities Kevin Carr [PATCH 1/3] libsepol - fix aliased sensitivities Kevin Carr SELinux Symposium Final Agenda: Case studies, WIPS, and BOFs Frank Mayer RE: writing refpolicy modules... Karl MacMillan Re: initrc_t has no execmod in targeted policy Stephen Smalley Re: initrc_t has no execmod in targeted policy Vladimir Simonov Re: writing refpolicy modules... Daniel J Walsh Re: writing refpolicy modules... Stephen Smalley Re: writing refpolicy modules... Stephen Smalley writing refpolicy modules... Joy Latten Re: [PATCH] fix PPC compile issues Stephen Smalley Re: initrc_t has no execmod in targeted policy Stephen Smalley initrc_t has no execmod in targeted policy Vladimir Simonov Sunday, 5 February Re: [SEPOL][SEMANAGE] Nodecon Support: Try 1 Ivan Gyurdiev [SEPOL][SEMANAGE] Nodecon Support: Try 1 Ivan Gyurdiev [PATCH] fix PPC compile issues Chris PeBenito Friday, 3 February Re: MCS policy patch Daniel J Walsh Re: MCS policy patch Russell Coker SELinux Symposium: Second Keynote Speaker announced Frank Mayer Re: MCS policy patch James Morris MCS policy patch Russell Coker Re: [SEMANAGE][UTILS] Use PyList in bindings Joshua Brindle Re: [SEMANAGE][UTILS] Use PyList in bindings Stephen Smalley Re: labeling of compilers etc Stephen Smalley Re: labeling of compilers etc Russell Coker RHEL4 and module loading Russell Coker Thursday, 2 February Re: [SEMANAGE][UTILS] Use PyList in bindings Ivan Gyurdiev [SEMANAGE][UTILS] Use PyList in bindings Ivan Gyurdiev Re: [SEMANAGE][SEPOL][UTILS] Clone record on set_con Stephen Smalley [SEMANAGE][SEPOL][UTILS] Clone record on set_con Ivan Gyurdiev Re: labeling of compilers etc Stephen Smalley Wednesday, 1 February is there possibility to access xterm from client of selinux? shih lin Re: labeling of compilers etc Russell Coker Re: labeling of compilers etc Russell Coker Re: [PATCH 2/2] - use common av_to_string implementation Stephen Smalley Re: Desktop integration Joshua Brindle Re: labeling of compilers etc Stephen Smalley Re: labeling of compilers etc Stephen Smalley Latest Diffs Daniel J Walsh Re: Desktop integration Thomas Bleher Re: labeling of compilers etc Daniel J Walsh Re: labeling of compilers etc Russell Coker Tuesday, 31 January Re: labeling of compilers etc Daniel J Walsh SELinux Wiki is open for business... Daniel J Walsh [PATCH 2/2] - use common av_to_string implementation Joshua Brindle [PATCH 1/2] libsepol - fix assertion copying Joshua Brindle ANN: Setools-2.3 release Kevin Carr LCA Russell Coker Re: labeling of compilers etc Russell Coker Monday, 30 January Re: Desktop integration Ivan Gyurdiev Re: [SEPOL] Fix overflow bugs on athlon 64 Ivan Gyurdiev Re: [PATCH] libsepol - cond_expr mapping and package num_sections bugs Stephen Smalley Re: [SEPOL] Fix overflow bugs on athlon 64 Stephen Smalley Re: [SEMANAGE,SEPOL,UTILS] Improve port/fcontext type string API Stephen Smalley Re: [SEMANAGE,UTILS] Support seusers.system Stephen Smalley Re: [SEMANAGE] Fix more size_t warnings Stephen Smalley Re: [SEMANAGE] Pass fname argument to all file-backed dbases Stephen Smalley Re: [SEPOL] Fix overflow bugs on athlon 64 Stephen Smalley Re: [PATCH] libsepol - cond_expr mapping and package num_sections bugs Joshua Brindle Re: [SEMANAGE] nodecon Daniel J Walsh Re: Desktop integration Daniel J Walsh Re: [SEMANAGE] nodecon Stephen Smalley Re: [SEMANAGE] nodecon Ivan Gyurdiev Desktop integration Ivan Gyurdiev Re: [PATCH] libsepol - cond_expr mapping and package num_sections bugs Stephen Smalley Re: labeling of compilers etc Stephen Smalley Re: labeling of compilers etc Russell Coker Sunday, 29 January Re: labeling of compilers etc Lorenzo Hernández García-Hierro Re: labeling of compilers etc Russell Coker Re: labeling of compilers etc Lorenzo Hernández García-Hierro Re: labeling of compilers etc Russell Coker Re: labeling of compilers etc Steve G Saturday, 28 January labeling of compilers etc Russell Coker Re: [SEMANAGE,UTILS] Support seusers.system Ivan Gyurdiev Re: [SEMANAGE,UTILS] Support seusers.system Ivan Gyurdiev [SEPOL] Fix overflow bugs on athlon 64 Ivan Gyurdiev Re: Latest diff Daniel J Walsh [SEMANAGE,SEPOL,UTILS] Improve port/fcontext type string API Ivan Gyurdiev [SEMANAGE,UTILS] Support seusers.system Ivan Gyurdiev [SEMANAGE] Fix more size_t warnings Ivan Gyurdiev [SEMANAGE] Pass fname argument to all file-backed dbases Ivan Gyurdiev Friday, 27 January Re: [PATCH] libsepol - cond_expr mapping and package num_sections bugs Stephen Smalley [PATCH] libsepol - cond_expr mapping and package num_sections bugs Joshua Brindle Re: Adding audit message to newrole Stephen Smalley Re: [SEMANAGE] Rename seuser -> seuser_local Stephen Smalley Re: macros in old policy? Christopher J. PeBenito Re: Best method for obtaining the 'sid' of a task? Stephen Smalley Re: Latest diff Christopher J. PeBenito Best method for obtaining the 'sid' of a task? Timothy R. Chavez macros in old policy? Joy Latten RE: [PATCH] mls passwd policy Chad Hanson Re: [PATCH] libsemanage/semanage - permission check for semanage Joshua Brindle Re: [PATCH] libsemanage/semanage - permission check for semanage Stephen Smalley Adding audit message to newrole Steve G Latest diff Daniel J Walsh Thursday, 26 January Re: [PATCH] mls passwd policy Chad Sellers Re: [PATCH] libsemanage/semanage - permission check for semanage Joshua Brindle Re: apparent bug in setrans Russell Coker [PATCH] mls password policy Chad Hanson [PATCH] mls passwd policy Chad Hanson Re: policycoreutils 1.29.10 Daniel J Walsh RE: password policy question Steve G Re: API for getting loginuid, for use by newrole and run_init Stephen Smalley Wednesday, 25 January Re: [SEMANAGE] Rename seuser -> seuser_local Ivan Valeriev Gyurdiev Re: policycoreutils 1.29.10 Daniel J Walsh Re: [SEMANAGE] Rename seuser -> seuser_local Daniel J Walsh Re: password policy question JANAK DESAI RE: password policy question Chad Hanson Re: Refpolicy: Add target to create tags file Christopher J. PeBenito RE: password policy question Stephen Smalley Re: Latest Diff Christopher J. PeBenito RE: password policy question Chad Hanson Re: Refpolicy: Add target to create tags file Christopher J. PeBenito Re: policycoreutils 1.29.10 Stephen Smalley Re: password policy question Stephen Smalley Re: [SEMANAGE] Rename seuser -> seuser_local Stephen Smalley Re: password policy question JANAK DESAI Re: [SEMANAGE] Rename seuser -> seuser_local Daniel J Walsh Adding audit messge to newrole Steve G Re: [SEMANAGE] Rename seuser -> seuser_local Ivan Valeriev Gyurdiev Re: [SEMANAGE] nodecon Daniel J Walsh Re: apparent bug in setrans Daniel J Walsh Re: password policy question Stephen Smalley Re: sudo selinux patch has been removed. Stephen Smalley Re: policycoreutils 1.29.10 Stephen Smalley Re: [SEMANAGE] Rename seuser -> seuser_local Stephen Smalley Re: policycoreutils 1.29.10 Daniel J Walsh Re: [SEMANAGE] Rename seuser -> seuser_local Ivan Valeriev Gyurdiev Refpolicy: Add target to create tags file Thomas Bleher sudo selinux patch has been removed. Daniel J Walsh password policy question JANAK DESAI Re: API for getting loginuid, for use by newrole and run_init Stephen Smalley Tuesday, 24 January Latest Diff Daniel J Walsh Opening keynote annouce for SELinux Symposium Frank Mayer [SEMANAGE] nodecon Chad Hanson API for getting loginuid, for use by newrole and run_init Stephen Smalley Monday, 23 January Re: apparent bug in setrans Russell Coker apparent bug in setrans Russell Coker Re: [PATCH] libsemanage/semanage - permission check for semanage Joshua Brindle Re: [PATCH] libsemanage/semanage - permission check for semanage Stephen Smalley Re: [PATCH] libsemanage/semanage - permission check for semanage Joshua Brindle Re: [PATCH] libsemanage/semanage - permission check for semanage Stephen Smalley Re: [PATCH] libsemanage/semanage - permission check for semanage Joshua Brindle Re: [PATCH] libsemanage/semanage - permission check for semanage Stephen Smalley Re: [PATCH] libsemanage/semanage - permission check for semanage Joshua Brindle Re: [PATCH] libsemanage/semanage - permission check for semanage Stephen Smalley Friday, 20 January [SEMANAGE] Rename seuser -> seuser_local Ivan Gyurdiev Monday, 23 January Re: [SEMANAGE] Rename seuser -> seuser_local Stephen Smalley Friday, 20 January [ANN] Linux Event Dispatcher Junji Kanemaru Re: [PATCH] libsemanage/semanage - permission check for semanage Joshua Brindle Re: [PATCH] libsemanage/semanage - permission check for semanage Stephen Smalley Re: [PATCH] libsemanage/semanage - permission check for semanage Joshua Brindle Re: [SEMANAGE] Further bugfixes Stephen Smalley Re: [SEMANAGE] Further bugfixes Stephen Smalley Re: [PATCH] libsemanage/semanage - permission check for semanage Stephen Smalley Re: Latest Diffs Christopher J. PeBenito Re: [SEMANAGE] Further bugfixes Russell Coker [ANN] Linux Event Dispatcher Junji Kanemaru Re: [SEMANAGE] Further bugfixes Daniel J Walsh Re: [SEMANAGE] Further bugfixes Russell Coker Re: [PATCH] libsemanage/semanage - permission check for semanage Stephen Smalley Re: [SEMANAGE] Further bugfixes Ivan Gyurdiev Re: [PATCH] libsemanage/semanage - permission check for semanage Joshua Brindle Re: [SEMANAGE] Further bugfixes Daniel J Walsh Re: [PATCH] libsemanage/semanage - permission check for semanage Stephen Smalley Re: [PATCH] libsemanage/semanage - permission check for semanage Joshua Brindle Re: Latest Diffs Daniel J Walsh Re: [PATCH] libsemanage/semanage - permission check for semanage Stephen Smalley Re: Seusers vs ldap Ivan Gyurdiev Re: Seusers vs ldap Joshua Brindle Re: [SEMANAGE] Further bugfixes Stephen Smalley Re: [SEMANAGE] Further bugfixes Ivan Gyurdiev Re: [SEMANAGE] Further bugfixes Russell Coker Re: LDAP vs Dbase semantics Ivan Gyurdiev LDAP vs Dbase semantics Ivan Gyurdiev Re: Seusers vs ldap Ivan Gyurdiev Thursday, 19 January Re: [PATCH] libsemanage/semanage - permission check for semanage Joshua Brindle Re: [PATCH] libsemanage/semanage - permission check for semanage Ivan Gyurdiev Re: [PATCH] libsemanage/semanage - permission check for semanage Joshua Brindle [SEMANAGE] Further bugfixes Ivan Gyurdiev Re: dropping pppd_script_exec_t Russell Coker Re: dropping pppd_script_exec_t Russell Coker Re: Latest Diffs Christopher J. PeBenito Re: next try at refpolicy-gentoo patches Christopher J. PeBenito Re: next try at refpolicy-gentoo patches Christopher J. PeBenito Re: [PATCH] libsemanage/semanage - permission check for semanage Ivan Gyurdiev [PATCH] libsemanage/semanage - permission check for semanage Joshua Brindle Re: next try at refpolicy-gentoo patches Serge E. Hallyn next try at refpolicy-gentoo patches Serge E. Hallyn Latest Diffs Daniel J Walsh Re: dropping pppd_script_exec_t Christopher J. PeBenito MCS article James Morris Re: dropping pppd_script_exec_t Jim McCullough Re: Latest policycoreutils patch Daniel J Walsh Re: dropping pppd_script_exec_t Russell Coker Wednesday, 18 January Re: Seusers vs ldap Joshua Brindle Re: Latest policycoreutils patch Ivan Gyurdiev Re: Latest policycoreutils patch Stephen Smalley Re: Latest policycoreutils patch Stephen Smalley Re: Latest policycoreutils patch Daniel J Walsh Re: Latest policycoreutils patch Ivan Gyurdiev Re: Latest policycoreutils patch Daniel J Walsh Re: Latest policycoreutils patch Ivan Gyurdiev Re: Latest policycoreutils patch Stephen Smalley Re: Seusers vs ldap Daniel J Walsh Re: Latest policycoreutils patch Ivan Gyurdiev Seusers vs ldap Ivan Gyurdiev Re: Latest policycoreutils patch Stephen Smalley Re: Latest policycoreutils patch Ivan Gyurdiev Re: Latest policycoreutils patch Ivan Gyurdiev Re: [SEMANAGE(lib/tool)] Remove add_local/set_local Stephen Smalley Re: [SEMANAGE] Fix up hidden definitions again... Stephen Smalley Re: Latest policycoreutils patch Stephen Smalley Re: Latest policycoreutils patch Daniel J Walsh SELinux Symposium WiPs, BoFs, and Case Studies Reminder Joshua Brindle Re: Latest diffs Christopher J. PeBenito [SEMANAGE] Fix up hidden definitions again... Ivan Gyurdiev [SEMANAGE] Improve tests Ivan Gyurdiev Re: Latest policycoreutils patch Ivan Gyurdiev Tuesday, 17 January Re: Latest policycoreutils patch Joshua Brindle Re: Latest policycoreutils patch Daniel J Walsh Re: Latest policycoreutils patch Joshua Brindle Re: Latest policycoreutils patch Daniel J Walsh Re: [PATCH] sereference: enable local login Russell Coker Re: Latest policycoreutils patch Joshua Brindle Re: Latest policycoreutils patch Joshua Brindle Latest diffs Daniel J Walsh [ANN] SELinux Policy Editor 1.3.1 Yuichi Nakamura [SEMANAGE] Only do read locking in direct case Ivan Gyurdiev ANN: Reference Policy Release Christopher J. PeBenito Latest policycoreutils patch Daniel J Walsh [SEMANAGE] Fix memory leak in cache error path Ivan Gyurdiev Re: Why are we managing seusers file via libsemanage? Ivan Gyurdiev Re: [SEMANAGE] Improve cache management Ivan Gyurdiev Re: Why are we managing seusers file via libsemanage? Ivan Gyurdiev Re: latest diff Christopher J. PeBenito [SEMANAGE] Remove apply_local function Ivan Gyurdiev Re: Why are we managing seusers file via libsemanage? Daniel J Walsh Re: Why are we managing seusers file via libsemanage? schaufler-ca.com - Casey Schaufler [SEMANAGE] Improve cache management Ivan Gyurdiev Re: [PATCH] sereference: enable local login Serge E. Hallyn Re: Why are we managing seusers file via libsemanage? Ivan Gyurdiev Re: [PATCH] sereference: enable local login Russell Coker Re: Why are we managing seusers file via libsemanage? Ivan Gyurdiev Re: Why are we managing seusers file via libsemanage? Ivan Gyurdiev Re: Why are we managing seusers file via libsemanage? Ivan Gyurdiev Re: Why are we managing seusers file via libsemanage? Joshua Brindle Re: Why are we managing seusers file via libsemanage? Joshua Brindle Monday, 16 January latest diff Daniel J Walsh Why are we managing seusers file via libsemanage? Daniel J Walsh Re: sereference: screen policy Serge E. Hallyn Re: [PATCH] sereference: Makefile changes Christopher J. PeBenito Re: [PATCH] sereference: network macros and permissions Christopher J. PeBenito Re: sereference: screen policy Serge E. Hallyn Re: djb-related policy diff Christopher J. PeBenito Re: sereference: screen policy Christopher J. PeBenito Saturday, 14 January djb-related policy diff Petre Rodan semanage patch Russell Coker Re: [SEMANAGE(tool)] Fix many issues Ivan Gyurdiev Re: [SEMANAGE(tool)] Fix many issues Ivan Gyurdiev Re: [SEMANAGE(tool)] Fix many issues Ivan Gyurdiev Re: [SEMANAGE] User extra data (part 1) Ivan Gyurdiev [SEMANAGE(tool)] Fix many issues Ivan Gyurdiev Re: [SEMANAGE] User extra data (part 1) Daniel J Walsh Friday, 13 January Re: [SEMANAGE(lib/tool)] Remove add_local/set_local Ivan Gyurdiev Re: sereference: screen policy Serge E. Hallyn Re: sound policy (aumix-minimal) Daniel J Walsh Re: sereference: screen policy Serge E. Hallyn Re: sereference: screen policy Christopher J. PeBenito Re: [PATCH] newrole cleanup Stephen Smalley Re: setfiles and restorecon performance patch Stephen Smalley Re: [SEMANAGE] Disallow overlap of local port ranges Stephen Smalley Re: [SEMANAGE] Bugfixes Stephen Smalley Re: [SEMANAGE] Cleanups after add/set removal Stephen Smalley Re: [SEMANAGE] Fix calloc check in semanage_store:115 Stephen Smalley Re: [SEMANAGE] [SEPOL] Change size_t -> unsigned int Stephen Smalley Re: [SEMANAGE] User extra data (part 1) Stephen Smalley Re: [SEMANAGE(lib/tool)] Remove add_local/set_local Stephen Smalley [SEMANAGE] Disallow overlap of local port ranges Ivan Gyurdiev Thursday, 12 January Re: [SEMANAGE] User extra data (part 1) Ivan Gyurdiev sereference: screen policy Serge E. Hallyn [PATCH] sereference: Makefile changes Spencer Shimko [PATCH] sereference: network macros and permissions Spencer Shimko dropping pppd_script_exec_t Christopher J. PeBenito Re: Document about object classes and permissions Stephen Smalley Re: Document about object classes and permissions Yuichi Nakamura sound policy (aumix-minimal) Christopher J. PeBenito Re: [PATCH] sereference: enable local login Christopher J. PeBenito [SEMANAGE] Join: User Extra Data (part 2) Ivan Gyurdiev Wednesday, 11 January Re: Latest policy diffs, very large Daniel J Walsh Thursday, 12 January [SEMANAGE] Bugfixes Ivan Gyurdiev [SEMANAGE] Join: implementation Ivan Gyurdiev [SEMANAGE] Join: Prerequsites Ivan Gyurdiev [SEMANAGE] Cleanups after add/set removal Ivan Gyurdiev Wednesday, 11 January Re: Latest policy diffs, very large Christopher J. PeBenito [SEMANAGE] Fix calloc check in semanage_store:115 Ivan Gyurdiev [SEMANAGE] [SEPOL] Change size_t -> unsigned int Ivan Gyurdiev Re: [PATCH] sereference: enable local login Serge E. Hallyn [PATCH] sereference: enable local login Serge E. Hallyn Re: Latest diffs Christopher J. PeBenito Tuesday, 10 January [PATCH] newrole cleanup Steve G ANN: Userspace security server update Joshua Brindle Latest diffs Daniel J Walsh Re: [SEMANAGE] User extra data (part 1) Joshua Brindle Re: [SEMANAGE] User extra data (part 1) Ivan Gyurdiev Monday, 9 January [SEMANAGE] User extra data (part 1) Ivan Gyurdiev Re: file contexts patch for performance Russell Coker Re: file contexts patch for performance Daniel J Walsh Re: MLS/MCS Constraints causing problems for unconfined_t. Daniel J Walsh Re: Latest policy diffs, very large Daniel J Walsh [SEMANAGE(lib/tool)] Remove add_local/set_local Ivan Gyurdiev Re: Latest policy diffs, very large Christopher J. PeBenito Re: Auditallow execmem Steve G Re: Auditallow execmem Joshua Brindle Re: MLS/MCS Constraints causing problems for unconfined_t. Stephen Smalley Re: Auditallow execmem Stephen Smalley MLS/MCS Constraints causing problems for unconfined_t. Daniel J Walsh Auditallow execmem Daniel J Walsh Re: [SEMANAGE] Fix fcontext comparator Stephen Smalley Re: [SEPOL] Const in APIs (2) Stephen Smalley Sunday, 8 January Re: Document about object classes and permissions James Morris file contexts patch for performance Russell Coker Friday, 6 January Re: setfiles and restorecon performance patch Stephen Tweedie Re: selinux/PostgreSQL problems with RHEL 4.2 shintarou_fujiwara selinux/PostgreSQL problems with RHEL 4.2 R. Steven Rainwater Re: [Fwd: Re: [RFC] SELinux file_ioctl hook permission checks changes] Chad Sellers [SEMANAGE] Fix fcontext comparator Ivan Gyurdiev [SEPOL] Const in APIs (2) Ivan Gyurdiev Re: [SEPOL] Const in APIs (part 1) Stephen Smalley Re: [SEPOL] Const in APIs (part 1) Ivan Gyurdiev Re: [SEMANAGE] Validation of local file contexts Daniel J Walsh Re: [SEMANAGE] Hidden def/proto update Stephen Smalley Re: [SEMANAGE] Validation of local file contexts Stephen Smalley Re: [SEMANAGE] Const in APIs (part 2) Stephen Smalley Re: [SEPOL] Const in APIs (part 1) Stephen Smalley Thursday, 5 January [SEMANAGE] Const in APIs (part 2) Ivan Gyurdiev [SEPOL] Const in APIs (part 1) Ivan Gyurdiev [SEMANAGE] Hidden def/proto update Ivan Gyurdiev Re: [SEPOL][SEMANAGE] Compare2 functions Ivan Gyurdiev Re: [SEPOL][SEMANAGE] Compare2 functions Joshua Brindle [SEPOL][SEMANAGE] Compare2 functions Ivan Gyurdiev Re: SELinux metadata protection Joe Nall [SEMANAGE] Validation of local file contexts Ivan Gyurdiev Re: libsemanage performance patch Stephen Smalley Re: libsepol Stephen Smalley Re: SELinux metadata protection Stephen Smalley Re: SELinux metadata protection Serge E. Hallyn Re: SELinux metadata protection Serge E. Hallyn Re: libsepol Stephen Smalley Re: [SEMANAGE] Add more tests Stephen Smalley Re: libsemanage performance patch Stephen Smalley Wednesday, 4 January [SEMANAGE] Manpages for dbase functions Ivan Gyurdiev [SEMANAGE] Add more tests Ivan Gyurdiev [SEMANAGE] Remove add/mod/del for active booleans Ivan Gyurdiev [SEMANAGE] semanage_fcontext_get_by_idx Ivan Gyurdiev [SEPOL] Ordering of ports in compare fn Ivan Gyurdiev Re: Also libsemanage does not seem to work when adding. Ivan Gyurdiev Re: [SEMANAGE] [SETSEBOOL] Clone record on set/add/modify Ivan Gyurdiev Re: Policycoreutils latest diffs. Ivan Gyurdiev Re: Policycoreutils latest diffs. Joshua Brindle Re: Policycoreutils latest diffs. Ivan Gyurdiev Re: Policycoreutils latest diffs. Joshua Brindle Re: Policycoreutils latest diffs. Daniel J Walsh Re: Policycoreutils latest diffs. Ivan Gyurdiev Re: Policycoreutils latest diffs. Ivan Gyurdiev Re: Policycoreutils latest diffs. Joshua Brindle Re: Policycoreutils latest diffs. Ivan Gyurdiev Re: Policycoreutils latest diffs. Daniel J Walsh Re: [SEMANAGE] [SETSEBOOL] Clone record on set/add/modify Ivan Gyurdiev Re: Policycoreutils latest diffs. Ivan Gyurdiev Re: Policycoreutils latest diffs. Ivan Gyurdiev Re: [SEMANAGE] [SETSEBOOL] Clone record on set/add/modify Stephen Smalley Re: [SEMANAGE] [SETSEBOOL] Clone record on set/add/modify Ivan Gyurdiev Re: [SEMANAGE] [SETSEBOOL] Clone record on set/add/modify Joshua Brindle Re: [SEMANAGE] [SETSEBOOL] Clone record on set/add/modify Ivan Gyurdiev Re: [SEMANAGE] [SETSEBOOL] Clone record on set/add/modify Joshua Brindle Re: libselinux patch to add getpidcon python wrapper. Stephen Smalley Re: Policycoreutils latest diffs. Stephen Smalley Re: [SEMANAGE] [SETSEBOOL] Clone record on set/add/modify Stephen Smalley Re: [SEMANAGE] Seuser mls validation Daniel J Walsh Re: SELinux & SuSE Steve G Re: [SEMANAGE] [SETSEBOOL] Clone record on set/add/modify Ivan Gyurdiev [SEMANAGE] [SETSEBOOL] Clone record on set/add/modify Ivan Gyurdiev Re: SELinux metadata protection KaiGai Kohei Re: [SEMANAGE] Swig update Stephen Smalley Re: [SEMANAGE] Seuser mls validation Ivan Gyurdiev Re: [SEMANAGE] Seuser mls validation Stephen Smalley Re: Documentation, anyone? Stephen Smalley Re: libsetrans performance patch Russell Coker Tuesday, 3 January Re: Documentation, anyone? Erich Schubert Re: [SEMANAGE] Commit numbers for ro database calls Stephen Smalley Re: setfiles and restorecon performance patch Joshua Brindle libselinux patch to add getpidcon python wrapper. Daniel J Walsh Re: Policycoreutils latest diffs. Ivan Gyurdiev Re: libsetrans performance patch Daniel J Walsh Latest policy diffs, very large Daniel J Walsh Re: libsemanage performance patch Ivan Gyurdiev Re: libsepol Ivan Gyurdiev Re: libsemanage performance patch Ivan Gyurdiev Re: Policycoreutils latest diffs. Ivan Gyurdiev Re: setfiles and restorecon performance patch Russell Coker Wednesday, 21 December Re: Adding audit messge to newrole Chris Wright Re: Adding audit messge to newrole Chris Wright Tuesday, 3 January libsepol Russell Coker libsemanage performance patch Russell Coker libsetrans performance patch Russell Coker Re: [patch] sereference: add requires to ppp policy Christopher J. PeBenito Policycoreutils latest diffs. Daniel J Walsh Re: libsetrans and libselinux Daniel J Walsh Re: libsetrans and libselinux Stephen Smalley Re: libsetrans and libselinux Daniel J Walsh Re: libsetrans and libselinux Stephen Smalley Re: more genhomedircon badness... Stephen Smalley Re: Debian users: don't upgrade for now Stephen Smalley Re: [SEMANAGE][SEPOL] Enable ports Ivan Gyurdiev Re: Documentation, anyone? Stephen Smalley Re: [SEMANAGE][SEPOL] Enable ports Joshua Brindle SELinux & SuSE Clif Flynt Re: setfiles and restorecon performance patch Steve G Re: ANN: Reference Policy Release Christopher J. PeBenito Re: SELinux metadata protection Stephen Smalley [SEMANAGE] Improve dbase spec/documentaiton Ivan Gyurdiev Re: [SEMANAGE] File contexts APIs (part2) Ivan Gyurdiev [SEMANAGE] File contexts APIs (part2) Ivan Gyurdiev Re: [SEMANAGE] Seuser mls validation Ivan Gyurdiev [SEMANAGE] Seuser mls validation Ivan Gyurdiev Re: SELinux novice and SuSE Thomas Bleher Re: [SEMANAGE][SEPOL] Enable ports Ivan Gyurdiev setfiles and restorecon performance patch Russell Coker Re: libsetrans and libselinux Joshua Brindle Monday, 2 January Re: libsetrans and libselinux Daniel J Walsh libsetrans and libselinux Russell Coker SELinux novice and SuSE Clif Flynt Re: [SEMANAGE][SEPOL] Enable ports Ivan Gyurdiev Re: [SEMANAGE] Swig update: typemaps Joshua Brindle Re: [SEMANAGE] Swig update: typemaps Ivan Gyurdiev Re: [SEMANAGE] Reorganize sandbox_expand Ivan Gyurdiev Re: [SEMANAGE] File Contexts APIs (part 1) Ivan Gyurdiev Re: [SEMANAGE] Swig update: typemaps Joshua Brindle Re: Documentation, anyone? Joshua Brindle Re: [SEMANAGE] Reorganize sandbox_expand Joshua Brindle Re: [SEMANAGE] File Contexts APIs (part 1) Joshua Brindle Re: [SEMANAGE] Commit numbers for ro database calls Joshua Brindle Re: [SEMANAGE] Commit numbers for ro database calls Ivan Gyurdiev Re: [SEMANAGE] Commit numbers for ro database calls Joshua Brindle Re: [SEMANAGE] Annotate objects Ivan Gyurdiev Re: [SEMANAGE] Swig update: typemaps Joshua Brindle Re: [SEMANAGE] Optional rebuild Ivan Gyurdiev Re: SELinux metadata protection schaufler-ca.com - Casey Schaufler Re: [SEMANAGE][SEPOL] Enable ports Joshua Brindle Re: [SEMANAGE] Commit numbers for ro database calls Ivan Gyurdiev Re: [SEMANAGE] Annotate objects Joshua Brindle Re: [SEMANAGE] Optional rebuild Joshua Brindle Re: [SEMANAGE] Commit numbers for ro database calls Joshua Brindle Re: SELinux metadata protection KaiGai Kohei Re: SELinux metadata protection KaiGai Kohei Sunday, 1 January Re: SELinux metadata protection Serge E. Hallyn Re: more genhomedircon badness... Ivan Gyurdiev Re: Documentation, anyone? Ivan Gyurdiev Re: Documentation, anyone? Erich Schubert more genhomedircon badness... Erich Schubert Re: Documentation, anyone? Ivan Gyurdiev Re: SELinux metadata protection Serge E. Hallyn Re: SELinux metadata protection KaiGai Kohei Debian users: don't upgrade for now Erich Schubert Documentation, anyone? Erich Schubert Re: SELinux metadata protection Serge E. Hallyn [SEMANAGE] Reorganize sandbox_expand Ivan Gyurdiev Saturday, 31 December [SEPOL] Include guards for internal headers Ivan Gyurdiev [SEPOL] Context validity and range checks Ivan Gyurdiev Friday, 30 December Re: logging in using sereference policy Ivan Gyurdiev logging in using sereference policy Serge E. Hallyn Tuesday, 27 December SELinux Symposium Registration now open Joshua Brindle Re: errors compiling policycoreutils-1.28 L L Monday, 26 December [SEMANAGE] Flip traversal order for llist iterate/list operations Ivan Gyurdiev [SEMANAGE] File Contexts APIs (part 1) Ivan Gyurdiev Document about object classes and permissions Yuichi Nakamura Sunday, 25 December [SEMANAGE] Swig update: typemaps Ivan Gyurdiev errors compiling policycoreutils-1.28 L L Saturday, 24 December [SEMANAGE(tool)] Further exists/query bugfixes Ivan Gyurdiev [SEMANAGE] Swig update Ivan Gyurdiev [SEMANAGE(tool)] Do not attempt to delete in-policy users Ivan Gyurdiev Friday, 23 December [SEMANAGE][SEPOL] Enable ports Ivan Gyurdiev [SEMODULE] Make -B flag force rebuild (without changes) Ivan Gyurdiev [SETSEBOOL] Apply active booleans through libsemanage Ivan Gyurdiev [SETSEBOOL] Miscellaneous cleanups Ivan Gyurdiev [SEMANAGE] Optional rebuild Ivan Gyurdiev [SEMANAGE] Commit numbers for ro database calls Ivan Gyurdiev [SEMANAGE] Active dbase: missed handle.h changes Ivan Gyurdiev [SEMANAGE] Active dbase backend, active booleans Ivan Gyurdiev [SEMANAGE][SEPOL] Support ordering of records in compare function Ivan Gyurdiev [SEMANAGE] Fold together internal headers Ivan Gyurdiev [SEMANAGE] Annotate objects Ivan Gyurdiev [SEMANAGE] Separate file rw code from linked list Ivan Gyurdiev Thursday, 22 December Re: [RFC] SELinux file_ioctl hook permission checks changes schaufler-ca.com - Casey Schaufler Re: [RFC] SELinux file_ioctl hook permission checks changes abreeves [patch] sereference: add requires to ppp policy Serge E. Hallyn Re: [patch] sereference: permit reiserfs Serge E. Hallyn Re: [patch] sereference: permit reiserfs Stephen Smalley Wednesday, 21 December [PATCH] Re: ANN: Reference Policy Release Serge E. Hallyn [patch] sereference: permit reiserfs Serge E. Hallyn [trivial patch] semanage: pwd.getpwname does not exist Serge E. Hallyn Re: [RFC] SELinux file_ioctl hook permission checks changes Stephen Smalley [RFC] SELinux file_ioctl hook permission checks changes Lorenzo Hernández García-Hierro Re: Adding audit messge to newrole Stephen Smalley Re: Adding audit messge to newrole Stephen Smalley Re: Adding audit messge to newrole Steve G Re: newrole cleanup patch Stephen Smalley Re: Adding audit messge to newrole Steve G Re: newrole cleanup patch Steve G Re: newrole cleanup patch Steve G Re: Adding audit messge to newrole Stephen Smalley Re: Adding audit messge to newrole Stephen Smalley Re: Adding audit messge to newrole Stephen Smalley Re: newrole cleanup patch Stephen Smalley Re: newrole cleanup patch Stephen Smalley Re: diffs + additions to NSA cvs policy Erich Schubert Re: diffs + additions to NSA cvs policy Stephen Smalley Tuesday, 20 December Re: diffs + additions to NSA cvs policy Erich Schubert diffs + additions to NSA cvs policy Erich Schubert Re: Adding audit messge to newrole Timothy R. Chavez Re: Adding audit messge to newrole Timothy R. Chavez Adding audit messge to newrole Steve G newrole cleanup patch Steve G Monday, 19 December IRC talk Russell Coker Sunday, 18 December UML SELinux Antoine Martin Re: ANN: Reference Policy Release Serge E. Hallyn Re: New strategy for enableaudit. Joshua Brindle Saturday, 17 December Re: New strategy for enableaudit. Ivan Gyurdiev Re: New strategy for enableaudit. Daniel J Walsh Re: New strategy for enableaudit. Ivan Gyurdiev New strategy for enableaudit. Daniel J Walsh Friday, 16 December Re: ANN: Virgil 0.1 released Daniel H. Jones Re: ANN: Virgil 0.1 released Daniel H. Jones Re: ANN: Reference Policy Release Daniel J Walsh Re: ANN: Virgil 0.1 released Yuichi Nakamura procps in rawhide is using libsetrans Daniel J Walsh Re: ANN: Virgil 0.1 released Stephen Smalley [patch] libsepol: bug fix for mls_range_cpy, affects MLS-enabled policies Stephen Smalley Re: Error while trying to copy /proc files Rachita Kothiyal Thursday, 15 December Re: RHES4, Subversion, Apache and SElinux Johan Fischer Re: RHES4, Subversion, Apache and SElinux Bernd Bartmann Re: RHES4, Subversion, Apache and SElinux Daniel J Walsh Re: RHES4, Subversion, Apache and SElinux Bernd Bartmann Re: RHES4, Subversion, Apache and SElinux Daniel J Walsh Re: RHES4, Subversion, Apache and SElinux Tobias Nijweide Re: ANN: Reference Policy Release Serge E. Hallyn RHES4, Subversion, Apache and SElinux Bernd Bartmann ANN: Virgil 0.1 released Daniel H. Jones Separating role changes from su/sudo (Was: Re: [redhat-lspp] Reviewing the sudo patch.) Stephen Smalley Wednesday, 14 December Re: SELinux performance Serge E. Hallyn Re: SELinux performance sharp Re: SELinux performance James Morris SELinux performance Joy Latten Re: Error while trying to copy /proc files Stephen Smalley Re: Latest Diffs Christopher J. PeBenito Error while trying to copy /proc files Rachita Kothiyal Re: [SEMANAGE] Further header cleanups Stephen Smalley [SEMANAGE] Further header cleanups Ivan Gyurdiev Tuesday, 13 December Re: Adding two new booleans to httpd to tighten it's security. Tom London Latest Diffs Daniel J Walsh Re: Latest diffs. Daniel J Walsh Re: Latest diffs. Christopher J. PeBenito Re: Updated policy Christopher J. PeBenito Re: SELinux: Unregistering netfilter hooks Stephen Smalley SELinux: Unregistering netfilter hooks Saivasan, Prakash (STSD) Re: [SEMANAGE] Include guards for internal headers Stephen Smalley Latest diffs. Daniel J Walsh Re: SELinux patent issues? Luke Kenneth Casson Leighton Re: SELinux patent issues? Luke Kenneth Casson Leighton Re: SELinux patent issues? Stephen Smalley Re: SELinux patent issues? Tom Sunday, 11 December [PATCH 5/6] selinux: Remove unneeded k[cm]alloc() return value casts Jesper Juhl [PATCH 5/6] selinux: Remove unneeded k[cm]alloc() return value casts Jesper Juhl Tuesday, 13 December Re: Adding two new booleans to httpd to tighten it's security. Tom London SELinux patent issues? Pax Dickinson Monday, 12 December Re: Adding two new booleans to httpd to tighten it's security. Daniel J Walsh Re: Adding two new booleans to httpd to tighten it's security. Daniel J Walsh [SEMANAGE] Include guards for internal headers Ivan Gyurdiev [SEMANAGE] Polymorphism vs headers - fix Ivan Gyurdiev [SEMANAGE] Fix memory leak in clear_obsolete Ivan Gyurdiev [SEMANAGE] Toggle modified flag in semanage_policydb_modify Ivan Gyurdiev Re: Latest Ref Policy Diffs Eric Paris Re: Interesting reading on exec* access checks. Stephen Smalley Re: Interesting reading on exec* access checks. Yuichi Nakamura Re: Latest Ref Policy Diffs Christopher J. PeBenito Re: libsemanage patch to make seusers world readable. Stephen Smalley Re: Interesting reading on exec* access checks. Stephen Smalley Re: Latest Ref Policy Diffs Stephen Smalley Saturday, 10 December Updated policy Daniel J Walsh Friday, 9 December Re: Latest Ref Policy Diffs Christopher J. PeBenito ANN: userspace security server prototype Joshua Brindle Adding two new booleans to httpd to tighten it's security. Daniel J Walsh Re: Latest Ref Policy Diffs Christopher J. PeBenito Re: Latest Ref Policy Diffs Daniel J Walsh Re: Latest Ref Policy Diffs Christopher J. PeBenito Thursday, 8 December Interesting reading on exec* access checks. Daniel J Walsh Latest Ref Policy Diffs Daniel J Walsh Re: Patch to fix some of the swig objects. Now using them in chcat. Stephen Smalley Re: audit2allow long options Stephen Smalley Re: libsemanage patch to make seusers world readable. Stephen Smalley small c++ program which allows denied log (segate) shintarou_fujiwara ANN: Polgen 1.2 released Brian Sniffen Wednesday, 7 December SELinux Symposium Agenda released Frank Mayer ANN: Updated SELinux Release Stephen Smalley Re: libsemanage patch to make seusers world readable. Daniel J Walsh Re: libsemanage patch to make seusers world readable. Stephen Smalley Re: libsemanage patch to make seusers world readable. Daniel J Walsh Re: libsemanage patch to make seusers world readable. Stephen Smalley Patch to fix some of the swig objects. Now using them in chcat. Daniel J Walsh Re: audit2allow long options Daniel J Walsh ANN: Reference Policy Release Christopher J. PeBenito Tuesday, 6 December Re: slapd on debian stable Mario Olimpio de Menezes Re: slapd on debian stable Manoj Srivastava Monday, 5 December http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=253925 Luke Kenneth Casson Leighton http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=253969 Luke Kenneth Casson Leighton http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=265920 Luke Kenneth Casson Leighton Re: Impact of IPSEC integration on policy James Morris slapd on debian stable Erich Schubert Impact of IPSEC integration on policy Stephen Smalley Sunday, 4 December Gentoo diffs Petre Rodan Friday, 2 December Re: [patch] checkpolicy cleanups Stephen Smalley Re: [patch] checkpolicy cleanups Joshua Brindle Re: Checkmodule man page Stephen Smalley Re: [patch] checkpolicy cleanups Stephen Smalley Thursday, 1 December Re: [patch] checkpolicy cleanups Joshua Brindle Checkmodule man page Daniel J Walsh [patch] checkpolicy cleanups Stephen Smalley Re: matchpathcon_init overhead Stephen Smalley audit2allow --tefile/--fcfile support, genhomedircon bug fix, semodule* man pages Stephen Smalley Re: matchpathcon_init overhead Stephen Smalley Re: matchpathcon_init overhead Daniel J Walsh Re: matchpathcon_init overhead Stephen Smalley Wednesday, 30 November Re: matchpathcon_init overhead Daniel J Walsh matchpathcon_init overhead Stephen Smalley spamassasin_domain() Christopher J. PeBenito Another thing... console logins Erich Schubert Re: Linux 2.6.13.4 --> 2.6.14.3 & security contexts Stephen Smalley Re: Another small issue on Debian Stephen Smalley Another small issue on Debian Erich Schubert Re: Linux 2.6.13.4 --> 2.6.14.3 & security contexts Stephen Smalley Tuesday, 29 November Linux 2.6.13.4 --> 2.6.14.3 & security contexts Sami Farin Wednesday, 30 November NTP log rotation on debian [policy addition] Erich Schubert Tuesday, 29 November Re: Bug (?) in cvs selinux policy Erich Schubert Re: Bug (?) in cvs selinux policy Antoine Martin Re: Bug (?) in cvs selinux policy Erich Schubert Re: Bug (?) in cvs selinux policy Antoine Martin Re: Bug (?) in cvs selinux policy Daniel J Walsh Re: Patch to fix up sestatus, audit2allow and first version of semanage Stephen Smalley Re: Patch to fix up sestatus, audit2allow and first version of semanage Stephen Smalley Patch to fix up sestatus, audit2allow and first version of semanage Daniel J Walsh semanage utiliy is in policycoreutils. login (selinux user mappings) and user is working somewhat. Daniel J Walsh Re: [ SEPOL ] Check if policy file is MLS enabled Stephen Smalley Re: [ SEPOL ] Check if policy file is MLS enabled Stephen Smalley Re: [ SEPOL ] Check if policy file is MLS enabled Stephen Smalley Monday, 28 November Re: [ SEPOL ] Check if policy file is MLS enabled Ivan Gyurdiev Re: [SEPOL] Remove defrole from sepol Ivan Gyurdiev Re: [PATCH] wrap char*** for user_get_roles() Stephen Smalley Re: [PATCH] wrap char*** for user_get_roles() Joshua Brindle Re: [PATCH] wrap char*** for user_get_roles() Daniel J Walsh Re: [PATCH] wrappers for writing users and seusers Stephen Smalley Re: [ SEPOL ] Check if policy file is MLS enabled Stephen Smalley Re: [SEPOL] Remove defrole from sepol Stephen Smalley Re: Audit2allow in python generates module code. Stephen Smalley Re: Swigify libselinux Stephen Smalley [PATCH] wrap char*** for user_get_roles() Joshua Brindle Re: Other unused permissions(Re: swapon unsuppoted? Stephen Smalley Re: link between roles and domains Stephen Smalley Re: link between roles and domains Guillaume PETITJEAN RE: link between roles and domains Karl MacMillan Re: Threaded applications and "execmem" privilege Lorenzo Hernandez Garcia-Hierro Re: link between roles and domains Stephen Smalley Re: Threaded applications and "execmem" privilege Stephen Smalley Re: Threaded applications and "execmem" privilege Erich Schubert Re: Threaded applications and "execmem" privilege Stephen Smalley Friday, 25 November Bug (?) in cvs selinux policy Erich Schubert Re: [SEPOL] Remove defrole from sepol Joshua Brindle Re: [refpolicy][PATCH] fix Makefile BASE_MODS and MOD_MODS detection Christopher J. PeBenito Thursday, 24 November Re: [refpolicy][PATCH] fix Makefile BASE_MODS and MOD_MODS detection Johan Fischer NSA SELinux on embedded devices: surveillance-oriented applications Lorenzo Hernandez Garcia-Hierro Wednesday, 23 November Re: [SEPOL] Remove defrole from sepol Ivan Gyurdiev Re: [SEPOL] Remove defrole from sepol Joshua Brindle Re: [PATCH] wrappers for writing users and seusers Joshua Brindle Re: [SEPOL] Remove defrole from sepol Joshua Brindle Re: [SEPOL] Remove defrole from sepol Ivan Gyurdiev Re: [SEPOL] Remove defrole from sepol Ivan Gyurdiev Re: [PATCH] wrappers for writing users and seusers Ivan Gyurdiev Re: [SEPOL] Remove defrole from sepol Joshua Brindle Re: [SEPOL] Remove defrole from sepol Ivan Gyurdiev Re: [SEPOL] Remove defrole from sepol Joshua Brindle [PATCH] wrappers for writing users and seusers Joshua Brindle Re: [SEPOL] Remove defrole from sepol Ivan Gyurdiev Re: [ SEPOL ] Check if policy file is MLS enabled Ivan Gyurdiev Re: [ SEPOL ] Check if policy file is MLS enabled Joshua Brindle [ SEPOL ] Check if policy file is MLS enabled Ivan Gyurdiev Re: [SEPOL] Remove defrole from sepol Ivan Gyurdiev Tuesday, 22 November Re: Threaded applications and "execmem" privilege Erich Schubert Monday, 21 November Re: [SEPOL] Remove defrole from sepol Ivan Gyurdiev link between roles and domains Guillaume PETITJEAN Sunday, 20 November Threaded applications and "execmem" privilege Erich Schubert Saturday, 19 November [SEPOL] Remove defrole from sepol Ivan Gyurdiev Friday, 18 November Re: Current Reference Policy patch Christopher J. PeBenito Re: Current Reference Policy patch Daniel J Walsh Re: Current Reference Policy patch Christopher J. PeBenito Re: Current Reference Policy patch Daniel J Walsh Re: (new?) problems installing with checkinstall Andreas Bernauer Thursday, 17 November Re: Debian SELinux backports project Erich Schubert Re: Current Reference Policy patch Christopher J. PeBenito Updated Policy in the Sourceforge CVS James Carter Re: Swigify libselinux Daniel J Walsh Re: Debian SELinux backports project Dale Amon Re: Swigify libselinux Joshua Brindle Swigify libselinux Daniel J Walsh Re: Please tell semodule to shut up???? Joshua Brindle Re: Please tell semodule to shut up???? Daniel J Walsh Please tell semodule to shut up???? Daniel J Walsh Re: Audit2allow in python generates module code. Stephen Smalley Current Reference Policy patch Daniel J Walsh Re: Audit2allow in python generates module code. Daniel J Walsh Re: Debian SELinux backports project Erich Schubert Re: Debian SELinux backports project Luke Kenneth Casson Leighton Re: Audit2allow in python generates module code. Stephen Smalley Re: Audit2allow in python generates module code. Stephen Smalley New version of reference policy on people. Daniel J Walsh Debian SELinux backports project Erich Schubert Wednesday, 16 November Audit2allow in python generates module code. Daniel J Walsh Re: Replacing capability:sys_admin by other permissions Stephen Smalley Replacing capability:sys_admin by other permissions Yuichi Nakamura RefPolicy was pulled from Test 1. It will be in Test 2. Daniel J Walsh Re: Policy mods in last nights refpolicy Joshua Brindle Re: rawhide targeted vs. refpolicy rpm Ivan Gyurdiev Re: Policy mods in last nights refpolicy Christopher J. PeBenito Re: rawhide targeted vs. refpolicy rpm Ivan Gyurdiev Re: [ SEMANAGE ] Clear obsoleted objects Stephen Smalley Re: rawhide targeted vs. refpolicy rpm Stephen Smalley Re: [ SEMANAGE ] Clear obsoleted objects Ivan Gyurdiev Re: rawhide targeted vs. refpolicy rpm Ivan Gyurdiev Re: [ SEMANAGE ] Clear obsoleted objects Stephen Smalley Re: Policy mods in last nights refpolicy Stephen Smalley Re: rawhide targeted vs. refpolicy rpm Stephen Smalley Tuesday, 15 November [ SEMANAGE ] Clear obsoleted objects Ivan Gyurdiev Wednesday, 16 November Re: rawhide targeted vs. refpolicy rpm Ivan Gyurdiev Re: Policy mods in last nights refpolicy Stephen Smalley Re: rawhide targeted vs. refpolicy rpm Stephen Smalley Re: rawhide targeted vs. refpolicy rpm Ivan Gyurdiev Re: rawhide targeted vs. refpolicy rpm Stephen Smalley Re: rawhide targeted vs. refpolicy rpm Stephen Smalley Re: Port of audit2allow to python Daniel J Walsh Tuesday, 15 November Re: [ SEMANAGE ] Stub pserver backend Daniel J Walsh Re: [ SEMANAGE ] Stub pserver backend Daniel J Walsh Re: Policy mods in last nights refpolicy Daniel J Walsh Re: rawhide targeted vs. refpolicy rpm Ivan Gyurdiev Re: rawhide targeted vs. refpolicy rpm Joshua Brindle Re: rawhide targeted vs. refpolicy rpm Stephen Smalley Re: Port of audit2allow to python Stephen Smalley Re: Port of audit2allow to python Stephen Smalley Re: [ SEMANAGE ] Stub pserver backend Ivan Gyurdiev Re: [ SEMANAGE ] Stub pserver backend Ivan Gyurdiev Re: [ SEMANAGE ] Stub pserver backend Joshua Brindle Port of audit2allow to python Daniel J Walsh Re: [ SEMANAGE ] Stub pserver backend Ivan Gyurdiev Re: [ SEMANAGE ] Stub pserver backend Chad Sellers Re: [ SEMANAGE ] Stub pserver backend Joshua Brindle Re: [ SEMANAGE ] Stub pserver backend Stephen Smalley Re: [ SEMANAGE ] Stub pserver backend Joshua Brindle Re: sewatch (small script tracking audit.log) Steve G Re: [ SEMANAGE ] Stub pserver backend Ivan Gyurdiev Re: Policy mods in last nights refpolicy Christopher J. PeBenito Re: [ SEMANAGE ] Stub pserver backend Ivan Gyurdiev Re: [ SEMANAGE ] Stub kernel booleans API Ivan Gyurdiev sewatch (small script tracking audit.log) shintarou_fujiwara Re: rawhide targeted vs. refpolicy rpm Stephen Smalley Re: rawhide targeted vs. refpolicy rpm Stephen Smalley Re: rawhide targeted vs. refpolicy rpm Stephen Smalley Re: rawhide targeted vs. refpolicy rpm Daniel J Walsh Re: [ SEMANAGE ] Stub pserver backend Daniel J Walsh Policy mods in last nights refpolicy Daniel J Walsh Re: [ SEMANAGE ] Stub pserver backend Stephen Smalley Re: changes in ~2.6.13 break postfix policy? James Morris Re: [ SEMANAGE ] Stub pserver backend Stephen Smalley Re: [ SEMANAGE ] Stub pserver backend Daniel J Walsh Re: rawhide targeted vs. refpolicy rpm Stephen Smalley Re: [ SELINUX ] Make rpm_execcon failure non-fatal in permissive mode. Stephen Smalley Re: [ SEPOL ] Mls cleanups (2) Stephen Smalley Re: [ SEPOL ] Add sepol_policydb_mls_enabled, organize map file Stephen Smalley Re: [PATCH] move genhomedircon call out of transaction Stephen Smalley Re: rawhide targeted vs. refpolicy rpm Stephen Smalley Re: I have modified Joshua's libsemanage-swigify patch to work better in my spec file Stephen Smalley Re: changes in ~2.6.13 break postfix policy? Stephen Smalley Re: changes in ~2.6.13 break postfix policy? James Morris Re: [ SELINUX ] Make rpm_execcon failure non-fatal in permissive mode. Stephen Smalley Re: changes in ~2.6.13 break postfix policy? Stephen Smalley Re: Running programs from a PHP script under SELinux Stephen Smalley Re: [ SEMANAGE ] Stub pserver backend Stephen Smalley Re: [ SELINUX ] Make rpm_execcon failure non-fatal in permissive mode. Stephen Smalley Re: [ SEMANAGE ] Stub pserver backend Stephen Smalley Re: [ SEMANAGE ] Stub kernel booleans API Stephen Smalley Re: [ SEPOL ] Add sepol_policydb_mls_enabled, organize map file Stephen Smalley Re: rawhide targeted vs. refpolicy rpm Stephen Smalley Re: [ SEPOL ] Mls cleanups (2) Ivan Gyurdiev Re: Running programs from a PHP script under SELinux Simon Gornall [ SELINUX ] Make rpm_execcon failure non-fatal in permissive mode. Ivan Gyurdiev Monday, 14 November Re: [PATCH] move genhomedircon call out of transaction Ivan Gyurdiev Re: [PATCH] move genhomedircon call out of transaction Ivan Gyurdiev Re: [PATCH] move genhomedircon call out of transaction Chad Sellers [ SEPOL ] Mls cleanups Ivan Gyurdiev Re: changes in ~2.6.13 break postfix policy? James Morris Re: [PATCH] move genhomedircon call out of transaction Ivan Gyurdiev Re: [PATCH] move genhomedircon call out of transaction Ivan Gyurdiev [PATCH] move genhomedircon call out of transaction Chad Sellers Re: Mls data structure, Seusers... Ivan Gyurdiev Re: [ SEPOL ] Add sepol_policydb_mls_enabled, organize map file Ivan Gyurdiev [ SEMANAGE ] Stub pserver backend Ivan Gyurdiev [ SEMANAGE ] Stub kernel booleans API Ivan Gyurdiev [owner@bugs.debian.org: Bug#338543 acknowledged by developer (Bug#338543: fixed in linux-2.6 2.6.14-3)] Luke Kenneth Casson Leighton Re: rawhide targeted vs. refpolicy rpm Stephen Smalley Re: rawhide targeted vs. refpolicy rpm Stephen Smalley Re: rawhide targeted vs. refpolicy rpm Daniel J Walsh Re: rawhide targeted vs. refpolicy rpm Daniel J Walsh I have modified Joshua's libsemanage-swigify patch to work better in my spec file Daniel J Walsh Re: rawhide targeted vs. refpolicy rpm Ivan Gyurdiev Re: rawhide targeted vs. refpolicy rpm Joshua Brindle Re: rawhide targeted vs. refpolicy rpm Stephen Smalley Re: [ SEPOL ] Add sepol_policydb_mls_enabled, organize map file Stephen Smalley Re: rawhide targeted vs. refpolicy rpm Daniel J Walsh RE: Mls data structure, Seusers... Chad Hanson Re: Running programs from a PHP script under SELinux Stephen Smalley Re: (new?) problems installing with checkinstall Stephen Smalley [PATCH] Add swig wrappers for libsemanage Joshua Brindle Re: changes in ~2.6.13 break postfix policy? Stephen Smalley Re: [ SEPOL ] Add sepol_policydb_mls_enabled, organize map file Stephen Smalley Re: Mls data structure, Seusers... Stephen Smalley Re: Small patch for runuser: disallow suid operation Thomas Bleher Sunday, 13 November Running programs from a PHP script under SELinux Simon Gornall (new?) problems installing with checkinstall Andreas Bernauer Saturday, 12 November Re: [ SEPOL ] Add sepol_policydb_mls_enabled, organize map file Ivan Gyurdiev [ SEPOL ] Add sepol_policydb_mls_enabled, organize map file Ivan Gyurdiev Mls data structure, Seusers... Ivan Gyurdiev Re: unreasonably long SE Linux context display Russell Coker Re: Small patch for runuser: disallow suid operation Russell Coker Re: Should this be a dontaudit or an allow in targeted. Russell Coker Friday, 11 November Re: changes in ~2.6.13 break postfix policy? Luke Kenneth Casson Leighton Thursday, 10 November [PATCH] policy secadmin consistency Jonathan Kim New version of Targeted Reference policy is available to play with. Daniel J Walsh Re: changes in ~2.6.13 break postfix policy? Stephen Smalley Re: New version of Targeted Reference policy is available to play with. Stephen Smalley Re: Problems with policy-1.26 Thomas Bleher Re: New version of Targeted Reference policy is available to play with. Stephen Smalley Re: New version of Targeted Reference policy is available to play with. Stephen Smalley Re: New version of Targeted Reference policy is available to play with. Stephen Smalley Re: [PATCH] SELinux - canonicalize getxattr() (fwd) Stephen Smalley Re: [PATCH] SELinux - canonicalize getxattr() (fwd) Stephen Smalley Re: [PATCH] SELinux - canonicalize getxattr() (fwd) Chad Sellers Re: [PATCH] SELinux - canonicalize getxattr() (fwd) Stephen Smalley New version of Targeted Reference policy is available to play with. Daniel J Walsh Re: [ SEMANAGE ] Fix hidden declarations Stephen Smalley Re: [ SEMANAGE ] Move seuser validation to proper place Stephen Smalley Re: [ SEMANAGE ] Fix hidden declarations Stephen Smalley Re: Problems with policy-1.26 Stephen Smalley Re: [PATCH] SELinux - canonicalize getxattr() (fwd) Stephen Smalley Re: MLS translations for libsemanage and libsepol Stephen Smalley Re: [PATCH] SELinux - canonicalize getxattr() (fwd) Stephen Smalley Re: MLS translations for libsemanage and libsepol Stephen Smalley Re: [PATCH] SELinux - canonicalize getxattr() (fwd) Stephen Smalley Wednesday, 9 November [ SEMANAGE ] Fix hidden declarations Ivan Gyurdiev [ SEMANAGE ] Move seuser validation to proper place Ivan Gyurdiev Re: [PATCH] SELinux - canonicalize getxattr() (fwd) Daniel J Walsh MLS translations for libsemanage and libsepol Ivan Gyurdiev Re: Problems with policy-1.26 Goo GGooo Re: [PATCH] SELinux - canonicalize getxattr() (fwd) Chad Sellers Re: FIrst pass at genhomedircon patch Stephen Smalley Selinux-testsuite updated in LTP Joy Latten FIrst pass at genhomedircon patch Daniel J Walsh RE: [PATCH] MLS Policy Chad Hanson Re: [PATCH] MLS Policy Daniel J Walsh [Patch] /dev/pts/ MLS label restore Jonathan Kim [Patch] policy - passwd error Jonathan Kim [PATCH] MLS Policy Jonathan Kim Re: [ LIBSEMANAGE ] Cleanup patch (resync-ed) Stephen Smalley Re: [refpolicy] policy not compiling Christopher J. PeBenito Re: [refpolicy][PATCH] fix Makefile BASE_MODS and MOD_MODS detection Christopher J. PeBenito Re: Stability of libsepol and libsemanage? Stephen Smalley Re: [ LIBSEMANAGE ] Cleanup patch (resync-ed) Stephen Smalley Re: [ SETSEBOOL ] Cleanup patch Stephen Smalley Re: Stability of libsepol and libsemanage? Stephen Smalley Re: Using SElinux on OS X tiger Stephen Smalley Re: Problems with policy-1.26 Stephen Smalley Stability of libsepol and libsemanage? Thomas Bleher Re: changes in ~2.6.13 break postfix policy? Stephen Smalley Re: [ LIBSEMANAGE ] Cleanup patch (resync-ed) Ivan Gyurdiev [ LIBSEMANAGE ] Cleanup patch (resync-ed) Ivan Gyurdiev Tuesday, 8 November [ SETSEBOOL ] Cleanup patch Ivan Gyurdiev [refpolicy] policy not compiling Johan Fischer [refpolicy][PATCH] fix Makefile BASE_MODS and MOD_MODS detection Johan Fischer Re: changes in ~2.6.13 break postfix policy? Erich Schubert Re: [PATCH] semanage - rename instead of copy Stephen Smalley Re: [PATCH] semanage - rename instead of copy Stephen Smalley Monday, 7 November Re: [PATCH] semanage - rename instead of copy Joshua Brindle Re: [PATCH] semanage - rename instead of copy Stephen Smalley [PATCH] semanage - rename instead of copy Joshua Brindle Re: [Fwd: [patch 1/1] selinux: Extend selinuxfs context interface] Stephen Smalley [Fwd: [patch 1/1] selinux: Extend selinuxfs context interface] Stephen Smalley [Fwd: [patch 1/1] selinux: Disable setxattr on mountpoint labeled filesystems] Stephen Smalley [Fwd: [patch 1/1] selinux: MLS compatibility] Stephen Smalley Re: multiple avcs in 1 audit event Stephen Smalley Re: changes in ~2.6.13 break postfix policy? Stephen Smalley Re: [ SELINUX ] [ POLICYCOREUTILS ] Convert setsebool -P to use libsemanage Stephen Smalley Re: [ SEMANAGE ] Cleanup : move some things around Stephen Smalley Re: [ SEMANAGE ] Cleanup : move some things around Ivan Gyurdiev Re: [ SEMANAGE ] Cleanup : move some things around Joshua Brindle Re: [ SELINUX ] [ POLICYCOREUTILS ] Convert setsebool -P to use libsemanage Ivan Gyurdiev seuser policy Kevin Carr Re: [ SEMANAGE ] Cleanup : move some things around Stephen Smalley Re: [ SEMANAGE ] Cleanup : move some things around Ivan Gyurdiev Re: [ SEMANAGE ] Cleanup : move some things around Stephen Smalley Re: [ SELINUX ] [ POLICYCOREUTILS ] Convert setsebool -P to use libsemanage Stephen Smalley Re: [ LIBSEMANAGE ] Runtime control over preservebools argument Daniel J Walsh Re: [ SELINUX ] [ POLICYCOREUTILS ] Convert setsebool -P to use libsemanage Stephen Smalley Re: [ LIBSEMANAGE ] Runtime control over preservebools argument Joshua Brindle Re: [ SELINUX ] [ POLICYCOREUTILS ] Convert setsebool -P to use libsemanage Stephen Smalley Question about selinux b.c.jansen_at_kpn.com Sunday, 6 November multiple avcs in 1 audit event Steve G Using SElinux on OS X tiger Walter Steenvoorden Problems with policy-1.26 Goo GGooo [ SEMANAGE ] Cleanup : move some things around Ivan Gyurdiev Saturday, 5 November [ LIBSEMANAGE ] Runtime control over preservebools argument Ivan Gyurdiev [ SETSEBOOL ] Fix memory leak Ivan Gyurdiev Friday, 4 November Re: changes in ~2.6.13 break postfix policy? Erich Schubert Re: [PATCH] MLS policy Daniel J Walsh Re: [ SELINUX ] [ POLICYCOREUTILS ] Convert setsebool -P to use libsemanage Ivan Gyurdiev Re: [ SELINUX ] [ POLICYCOREUTILS ] Convert setsebool -P to use libsemanage Ivan Gyurdiev Re: [ SEMANAGE ] Assert whitespace between records Stephen Smalley Re: changes in ~2.6.13 break postfix policy? Stephen Smalley Re: changes in ~2.6.13 break postfix policy? Erich Schubert [ SEMANAGE ] Assert whitespace between records Ivan Gyurdiev RE: [PATCH] libselinux Chad Hanson RE: [PATCH] libselinux Stephen Smalley Re: [ SELINUX ] [ POLICYCOREUTILS ] Convert setsebool -P to use libsemanage Stephen Smalley Re: [ SELINUX ] [ POLICYCOREUTILS ] Convert setsebool -P to use libsemanage Stephen Smalley Re: [ SELINUX ] [ POLICYCOREUTILS ] Convert setsebool -P to use libsemanage Stephen Smalley [PATCH] MLS policy Jonathan Kim Re: [ SELINUX ] [ POLICYCOREUTILS ] Convert setsebool -P to use libsemanage Ivan Gyurdiev RE: [PATCH] libselinux Jonathan Kim Re: [ SELINUX ] [ POLICYCOREUTILS ] Convert setsebool -P to use libsemanage Stephen Smalley Re: [ SELINUX ] [ POLICYCOREUTILS ] Convert setsebool -P to use libsemanage Stephen Smalley Re: [ SELINUX ] [ POLICYCOREUTILS ] Convert setsebool -P to use libsemanage Daniel J Walsh Re: [ SELINUX ] [ POLICYCOREUTILS ] Convert setsebool -P to use libsemanage Daniel J Walsh Re: [ SELINUX ] [ POLICYCOREUTILS ] Convert setsebool -P to use libsemanage Stephen Smalley Re: [ SELINUX ] [ POLICYCOREUTILS ] Convert setsebool -P to use libsemanage Stephen Smalley Re: [ SELINUX ] [ POLICYCOREUTILS ] Convert setsebool -P to use libsemanage Ivan Gyurdiev Re: [ SELINUX ] [ POLICYCOREUTILS ] Convert setsebool -P to use libsemanage Ivan Gyurdiev Re: [ SEMANAGE 4 ] Copyright Stephen Smalley Re: [ SELINUX ] [ POLICYCOREUTILS ] Convert setsebool -P to use libsemanage Stephen Smalley Re: [ SELINUX ] [ POLICYCOREUTILS ] Convert setsebool -P to use libsemanage Stephen Smalley Re: [ SEMANAGE] Resync seuser parser Stephen Smalley Re: [ SEMANAGE] Resync seuser parser Ivan Gyurdiev Re: [ SEMANAGE] Resync seuser parser Ivan Gyurdiev Re: [ SELINUX ] [ POLICYCOREUTILS ] Convert setsebool -P to use libsemanage Stephen Smalley Re: [ SELINUX ] [ POLICYCOREUTILS ] Convert setsebool -P to use libsemanage Ivan Gyurdiev Re: [ SEMANAGE] Resync seuser parser Stephen Smalley Re: changes in ~2.6.13 break postfix policy? Stephen Smalley Re: [ SEMANAGE] Resync seuser parser Stephen Smalley Re: [ SELINUX ] [ POLICYCOREUTILS ] Convert setsebool -P to use libsemanage Stephen Smalley changes in ~2.6.13 break postfix policy? Erich Schubert Re: [ SEMANAGE] Resync seuser parser Ivan Gyurdiev Re: [ SEMANAGE] Resync seuser parser Ivan Gyurdiev [ SEMANAGE 4 ] Copyright Ivan Gyurdiev [ SEPOL ] Fix usage of context_destroy - correct memory leaks/null derefs Ivan Gyurdiev [ SELINUX ] [ POLICYCOREUTILS ] Convert setsebool -P to use libsemanage Ivan Gyurdiev [ SEMANAGE 3 ] Fix evil strtol bug (breaks booleans) Ivan Gyurdiev [ SEMANAGE 2 ] Database modification tracking, and cleanup Ivan Gyurdiev Thursday, 3 November Re: Transitions using su command Oliver Hookins ANN: Setools-2.2 Kevin Carr [ SEMANAGE] Resync seuser parser Ivan Gyurdiev Re: [PATCH] libselinux Stephen Smalley Re: [PATCH] libselinux Stephen Smalley Re: [PATCH] libselinux Stephen Smalley Re: [ SEMANAGE 4 ] Order-preserving file dbase Stephen Smalley [PATCH] libselinux Jonathan Kim Re: A question on integrating IPSec to Selinux Joy Latten antivir policy shintarou_fujiwara Re: Transitions using su command Stephen Smalley Re: [ SEMANAGE 4 ] Order-preserving file dbase Stephen Smalley Wednesday, 2 November Re: A question on integrating IPSec to Selinux Wei Shen RE: A question on integrating IPSec to Selinux Remmolt Zwartsenberg Transitions using su command Oliver Hookins Re: [ SEMANAGE 4 ] Order-preserving file dbase Ivan Gyurdiev [ SEMANAGE 4 ] Order-preserving file dbase Ivan Gyurdiev A question on integrating IPSec to Selinux Wei Shen [ SEMANAGE 3 ] Push assert_noeof into parse_utils, fix bug Ivan Gyurdiev Re: [ SEMANAGE ] Some seusers mapping validation Ivan Gyurdiev [ SEPOL ] [ SEMANAGE 2] Fix spec for sepol_context_to_string Ivan Gyurdiev [ SEMANAGE ] Interfaces, more parser things Ivan Gyurdiev Tuesday, 1 November [SEPOL] Add dso.h and _internal.h headers, apply hidden_def/hidden Stephen Smalley Re: [ SEMANAGE ] Install seusers, rename some files Stephen Smalley Re: [ SEMANAGE ] Install seusers, rename some files Stephen Smalley Re: [ SEMANAGE ] Install seusers, rename some files Ivan Gyurdiev Re: [ SEMANAGE ] Some seusers mapping validation Stephen Smalley Re: [ SEMANAGE ] Install seusers, rename some files Ivan Gyurdiev Re: [ SEMANAGE ] Install seusers, rename some files Ivan Gyurdiev Re: [ SEMANAGE ] Install seusers, rename some files Stephen Smalley Re: [ SEMANAGE ] Install seusers, rename some files Stephen Smalley Re: [ SEMANAGE ] Install seusers, rename some files Stephen Smalley Re: [ SEMANAGE ] Install seusers, rename some files Joshua Brindle Re: [ SEMANAGE ] Install seusers, rename some files Ivan Gyurdiev Re: [ SEMANAGE ] Install seusers, rename some files Joshua Brindle Re: [ SEMANAGE ] Install seusers, rename some files Ivan Gyurdiev Re: [ SEMANAGE ] Install seusers, rename some files Joshua Brindle Re: [ SEMANAGE ] Install seusers, rename some files Stephen Smalley Re: [ SEMANAGE ] Install seusers, rename some files Ivan Gyurdiev Re: [ SEMANAGE ] Install seusers, rename some files Ivan Gyurdiev Re: [ SEMANAGE ] Install seusers, rename some files Stephen Smalley Re: [ SEMANAGE ] Some seusers mapping validation Stephen Smalley Re: Policy specification for Netlink and domain sockets. Yuichi Nakamura Re: [ SEMANAGE ] Some seusers mapping validation Stephen Smalley Re: [ SEMANAGE ] Fix MLS parsing of users Stephen Smalley Re: [ SEMANAGE ] Add parse/print error messages Ivan Gyurdiev Re: [ SEMANAGE ] Some seusers mapping validation Ivan Gyurdiev [ SEMANAGE ] Some seusers mapping validation Ivan Gyurdiev Monday, 31 October Re: [ SEMANAGE ] Fix MLS parsing of users Ivan Gyurdiev [ SEMANAGE ] Fix MLS parsing of users Ivan Gyurdiev [ SEMANAGE ] Add more error messages... Ivan Gyurdiev [ SEMANAGE ] Add parse/print error messages Ivan Gyurdiev [ SEMANAGE ] Install seusers, rename some files Ivan Gyurdiev Policy specification for Netlink and domain sockets. Kaimal Biju-E11660 Tuesday, 25 October [ SEMANAGE ] [ SEPOL ] Pass handle to user/boolean/interface, and port APIs Ivan Gyurdiev Monday, 31 October Re: unreasonably long SE Linux context display Stephen Smalley Re: unreasonably long SE Linux context display Daniel J Walsh Re: unreasonably long SE Linux context display Stephen Smalley Re: unreasonably long SE Linux context display Joe Nall Re: [ SEPOL 3 ] Improve/fix sepol_user_set_roles Stephen Smalley Re: Should this be a dontaudit or an allow in targeted. Stephen Smalley Re: audit logging & log callback for avc Stephen Smalley audit logging & log callback for avc Steve G Should this be a dontaudit or an allow in targeted. Daniel J Walsh sendmail policy Russell Coker [ SEPOL 3 ] Improve/fix sepol_user_set_roles Ivan Gyurdiev [ SEPOL 2 ] [ SEMANAGE 4 ] Record bugfixes Ivan Gyurdiev Re: [ SEMANAGE 3 ] Common database code Ivan Gyurdiev [ SEMANAGE 3 ] Common database code Ivan Gyurdiev unreasonably long SE Linux context display Russell Coker [ SEMANAGE 2 ] Fix bug in dbase_file_flush Ivan Gyurdiev [ SEPOL ] [ SEMANAGE ] Fix record interfaces Ivan Gyurdiev Sunday, 30 October Re: logging question Dale Amon Saturday, 29 October Re: logging question Luke Kenneth Casson Leighton Re: [owner@bugs.debian.org: Bug#249499 acknowledged by developer (Bug#249499: fixed in pam 0.79-1)] Manoj Srivastava Re: System hang during boot on Debian Sid Manoj Srivastava Re: System hang during boot on Debian Sid Manoj Srivastava Re: logging question Manoj Srivastava Thursday, 27 October Re: [ SEMANAGE ] [ SEPOL ] Implement dbase_policydb_list Stephen Smalley [ SEMANAGE ] [ SEPOL ] Implement dbase_policydb_list Ivan Gyurdiev Re: [PATCH] SELinux - canonicalize getxattr() (fwd) Stephen Smalley Re: [ SEMANAGE ] Enable things for testing, add missing set relay Stephen Smalley Re: [PATCH] SELinux - canonicalize getxattr() (fwd) James Morris Re: [PATCH] SELinux - canonicalize getxattr() (fwd) Stephen Smalley [ SEMANAGE ] Enable things for testing, add missing set relay Ivan Gyurdiev Re: [ SEMANAGE ] Implement dbase_file_set, fix memleak Ivan Gyurdiev Re: [ SEMANAGE ] Implement dbase_file_set, fix memleak Stephen Smalley Re: [PATCH] Sort file contexts Stephen Smalley Re: squid policy Russell Coker Re: [ SEMANAGE ] Implement dbase_file_set, fix memleak Ivan Gyurdiev Wednesday, 26 October Re: Red Hat Government Users Conference. Daniel J Walsh [ SEMANAGE ] Implement dbase_file_set, fix memleak Ivan Gyurdiev [ SEMANAGE ] Complete query APIs for in-policy objects Ivan Gyurdiev [PATCH] Sort file contexts Joshua Brindle Red Hat Government Users Conference. Daniel J Walsh Re: [ SEPOL 3 ] Fix MLS memory leaks: interfaces/ports/users Stephen Smalley Re: [PATCH] selinux_set_file_paths function Stephen Smalley Re: [ SEPOL 3 ] Fix MLS memory leaks: interfaces/ports/users Ivan Gyurdiev [ SEPOL 3 ] Fix MLS memory leaks: interfaces/ports/users Ivan Gyurdiev [ SEMANAGE 3 ] Simplify and fix dbase_policydb_cache Ivan Gyurdiev Tuesday, 25 October [ SEMANAGE 2 ] Seusers Ivan Gyurdiev [ SEPOL 2 ] More debug things Ivan Gyurdiev RE: [PATCH] libsetrans Chad Hanson Re: [PATCH] libsetrans Daniel J Walsh Re: mysql 4.1 requires shlib_t:file execmod? Antoine Martin Re: [PATCH] selinux_set_file_paths function Chad Sellers Re: [PATCH] selinux_set_file_paths function Stephen Smalley Re: [ SEPOL ] Further users cleanup Stephen Smalley Re: [ SEPOL ] Further users cleanup Ivan Gyurdiev Re: [ SEPOL 6 ] Fix all the bugs Stephen Smalley Re: [ SEPOL ] Further users cleanup Stephen Smalley [PATCH] selinux_set_file_paths function Chad Sellers Re: [ SEPOL 6 ] Fix all the bugs Ivan Gyurdiev Re: [ SEPOL ] Further users cleanup Ivan Gyurdiev Re: capability audit_write, audit_control Yuichi Nakamura Re: [ SEPOL ] Further users cleanup Stephen Smalley Re: [ SEMANAGE 2 ] Booleans, parser fixes/improvements Stephen Smalley Re: [ SEMANAGE 2 ] Booleans, parser fixes/improvements Stephen Smalley Re: [PATCH 4/4] features/fixes for rawhide and refpolicy Stephen Smalley Re: [ SEPOL 6 ] Fix all the bugs Stephen Smalley Monday, 24 October [ SEMANAGE 2 ] Booleans, parser fixes/improvements Ivan Gyurdiev [ SEMANAGE ] Resync to sepol changes (again) Ivan Gyurdiev [ SEPOL 2 ] Count functions Ivan Gyurdiev [PATCH] libsetrans Chad Hanson [ SEPOL ] Users/booleans - add some missing functions Ivan Gyurdiev daemon_domain does not work on backup_t ? shintarou_fujiwara Re: [PATCH 0/4] features/fixes for rawhide and refpolicy Stephen Smalley Re: [ SEMANAGE 2 ] Fix dbase transactions Ivan Gyurdiev Re: [ SEMANAGE 2 ] Fix dbase transactions Stephen Smalley [PATCH 4/4] features/fixes for rawhide and refpolicy Joshua Brindle [PATCH 3/4] features/fixes for rawhide and refpolicy Joshua Brindle [PATCH 2/4] features/fixes for rawhide and refpolicy Joshua Brindle [PATCH 1/4] features/fixes for rawhide and refpolicy Joshua Brindle [PATCH 0/4] features/fixes for rawhide and refpolicy Joshua Brindle Re: capability audit_write, audit_control Stephen Smalley Re: pegasus Daniel J Walsh Re: [ SEMANAGE ] Resync to sepol changes Ivan Gyurdiev Re: [ SEPOL ] Context interface cleanup Stephen Smalley Re: [ SEPOL ] Context interface cleanup Ivan Gyurdiev Re: [ SEPOL ] Context interface cleanup Ivan Gyurdiev Re: [ SEPOL ] Context interface cleanup Stephen Smalley Sunday, 23 October Re: [gentoo-hardened] mysql 4.1 requires shlib_t:file execmod? Russell Coker Re: [gentoo-hardened] mysql 4.1 requires shlib_t:file execmod? Antoine Martin Friday, 21 October Re: MLS context? Russell Coker Saturday, 22 October [ SEMANAGE 2 ] Fix dbase transactions Ivan Gyurdiev pegasus Christopher J. PeBenito Re: [ SEMANAGE ] Resync to sepol changes Ivan Gyurdiev Security context of tcp_socket Gaurav Poothia lyris test Remmolt Zwartsenberg [ SEMANAGE ] Resync to sepol changes Ivan Gyurdiev Re: [gentoo-hardened] mysql 4.1 requires shlib_t:file execmod? Antoine Martin Re: [gentoo-hardened] mysql 4.1 requires shlib_t:file execmod? Antoine Martin [ SEPOL 6 ] Fix all the bugs Ivan Gyurdiev Re: [gentoo-hardened] mysql 4.1 requires shlib_t:file execmod? Antoine Martin Re: run_init: Fork:: No such file or directory Antoine Martin Re: [gentoo-hardened] mysql 4.1 requires shlib_t:file execmod? Antoine Martin Re: run_init: Fork:: No such file or directory Chris PeBenito Re: run_init: Fork:: No such file or directory Petre Rodan mysql 4.1 requires shlib_t:file execmod? Antoine Martin Re: run_init: Fork:: No such file or directory Antoine Martin Re: [ SEPOL 5 ] Pass key to sepol Ivan Gyurdiev run_init: Fork:: No such file or directory Antoine Martin [ SEPOL 5 ] Pass key to sepol Ivan Gyurdiev [ SEPOL 4 ] user - to_record fn, mls cleanups Ivan Gyurdiev [ SEPOL 3 ] Interfaces, ports, booleans - record conversion fn Ivan Gyurdiev [ SEPOL 2 ] Context_to_record function Ivan Gyurdiev Re: [ SEPOL ] Context interface cleanup Ivan Gyurdiev Friday, 21 October Re: capability audit_write, audit_control Yuichi Nakamura Re: [ SEPOL ] Context interface cleanup Ivan Gyurdiev [ SEPOL ] Context interface cleanup Ivan Gyurdiev Re: capability audit_write, audit_control Yuichi Nakamura Re: capability audit_write, audit_control Stephen Smalley Re: capability audit_write, audit_control Stephen Smalley Re: [ SEPOL ] Further users cleanup Stephen Smalley Re: capability audit_write, audit_control Yuichi Nakamura Re: [ SEPOL ] Further users cleanup Ivan Gyurdiev Re: [ SEPOL ] Further users cleanup Stephen Smalley [ SEPOL ] Further users cleanup Ivan Gyurdiev Re: [ SEMANAGE ] Remove unused relay functions Stephen Smalley Re: [ SEPOL ] Fix user record memory leak Stephen Smalley Re: [ SEPOL ] Reorganize users.c Stephen Smalley Re: MLS context? Stephen Smalley Re: MLS context? James Morris [RFC} sectioned package format Chad Sellers Re: Other unused permissions(Re: swapon unsuppoted? Stephen Smalley Re: [ SEPOL ] Reorganize users.c Ivan Gyurdiev Re: [ SEPOL ] Reorganize users.c Stephen Smalley Re: capability audit_write, audit_control Stephen Smalley Re: MLS context? Stephen Smalley Re: MLS context? James Morris Thursday, 20 October Re: MLS context? Russell Coker capability audit_write, audit_control Yuichi Nakamura Re: SuSE packages updated Thomas Bleher [PATCH] MLS Support Chad Hanson [PATCH] MLS booleans Chad Hanson Re: [ SEMANAGE ] Remove unused relay functions Ivan Gyurdiev [ SEMANAGE ] Remove unused relay functions Ivan Gyurdiev Re: range transitions in MCS James Carter Re: [ SEPOL ] Reorganize users.c Ivan Gyurdiev RE: [PATCH] MLS James Carter Re: Latest Diffs James Carter Re: Small policy cleanups James Carter Re: Fix mcsconvert target James Carter Re: [ SEPOL ] Reorganize users.c Stephen Smalley Updated Policy in the Sourceforge CVS James Carter Re: [ SEPOL ] Reorganize users.c Ivan Gyurdiev [ SEPOL ] Reorganize users.c Ivan Gyurdiev Re: [ SEMANAGE ] More dbase things Stephen Smalley [ SEPOL ] Fix user record memory leak Ivan Gyurdiev Re: [ SEMANAGE ] More work on policy_components.c Ivan Gyurdiev Re: [ SEMANAGE ] More work on policy_components.c Stephen Smalley Re: [ SEMANAGE ] More work on policy_components.c Stephen Smalley Re: [ SEMANAGE ] More work on policy_components.c Ivan Gyurdiev Re: [ SEMANAGE ] More work on policy_components.c Stephen Smalley Re: [ SEMANAGE ] More dbase things Ivan Gyurdiev Re: [ SEMANAGE ] More work on policy_components.c Stephen Smalley Re: [ SEMANAGE ] More work on policy_components.c Stephen Smalley Re: [ SEMANAGE ] Fix and make consistent interface naming Stephen Smalley Other unused permissions(Re: swapon unsuppoted? Yuichi Nakamura Re: [RFC] sectioned package format Joshua Brindle Re: [RFC] sectioned package format Stephen Smalley Audit errors Jayendren Anand Maduray Wednesday, 19 October Re: SuSE packages updated Dale Amon [ SEMANAGE ] More work on policy_components.c Ivan Gyurdiev SuSE packages updated Thomas Bleher ANN: Reference Policy Release Christopher J. PeBenito Re: MLS context? Russell Coker [ SEMANAGE ] Fix and make consistent interface naming Ivan Gyurdiev Small patch for runuser: disallow suid operation Thomas Bleher Re: [PATCH] declare then require Joshua Brindle Re: [PATCH] makefile prefix fixes Stephen Smalley Re: [PATCH] declare then require Stephen Smalley Re: [PATCH] stack overflow in module parser Stephen Smalley Re: Loading things into policy Ivan Gyurdiev [RFC] sectioned package format Joshua Brindle RE: [PATCH] MLS Chad Hanson Re: Loading things into policy Ivan Gyurdiev Re: Loading things into policy Stephen Smalley Re: Loading things into policy Ivan Gyurdiev Re: Loading things into policy Ron Kuris Re: [PATCH] makefile prefix fixes Stephen Smalley Re: Loading things into policy Ivan Gyurdiev Re: Loading things into policy Stephen Smalley [PATCH] makefile prefix fixes Joshua Brindle [PATCH] declare then require Joshua Brindle [PATCH] stack overflow in module parser Joshua Brindle Re: Loading things into policy Stephen Smalley Re: Loading things into policy Stephen Smalley Re: Loading things into policy Stephen Smalley Re: Record keys Ivan Gyurdiev Re: Loading things into policy Ivan Gyurdiev Re: [ SEMANAGE ] Remove connection requirement from POLICYDB backend Stephen Smalley Re: [PATCH] transaction rollback in lock Stephen Smalley [PATCH] MLS Chad Hanson Re: MLS context? Stephen Smalley Re: Record keys Joshua Brindle Re: Loading things into policy Joshua Brindle [PATCH] transaction rollback in lock Joshua Brindle Tuesday, 18 October Re: Loading things into policy Ivan Gyurdiev Loading things into policy Ivan Gyurdiev Re: logging question Russell Coker Re: MLS context? Russell Coker [ SEMANAGE ] Remove connection requirement from POLICYDB backend Ivan Gyurdiev Re: [PATCH] Fix commit locking, rename read_lock to active_lock Joshua Brindle [ SEMANAGE ] Default database Ivan Gyurdiev Re: [ SEMANAGE ] Rename direct -> policydb as appropriate Stephen Smalley Re: [RFC] Dynamic discover of object classes Joshua Brindle Re: logging question Stephen Smalley Monday, 17 October [ SEMANAGE ] Rename direct -> policydb as appropriate Ivan Gyurdiev Small policy cleanups Thomas Bleher Re: logging question Luke Kenneth Casson Leighton [ SEMANAGE ] Acquire/release read lock in databases Ivan Gyurdiev Re: logging question Russell Coker Re: [RFC] Dynamic discover of object classes James Morris [ SEMANAGE ] Move local dbase initialization Ivan Gyurdiev [RFC] Dynamic discover of object classes Chad Sellers Re: logging question Stephen Smalley logging question Eric Moore (no subject) schaufler-ca.com - Casey Schaufler Re: Kernel woes (summary) Unix Admin RE: MLS context? Chad Hanson Re: Kernel woes Stephen Smalley Re: MLS context? James Morris Re: Kernel woes Daniel J Walsh Kernel woes Unix Admin Re: MLS context? Stephen Smalley Sunday, 16 October Re: range transitions in MCS Russell Coker Re: range_transition inside a conditional Joshua Brindle Saturday, 15 October MLS context? Russell Coker range transitions in MCS Russell Coker Sunday, 16 October range_transition inside a conditional Russell Coker Saturday, 15 October Re: [ SEMANAGE ] User and port apis - policy database Ivan Gyurdiev [ SEMANAGE ] User and port apis - policy database Ivan Gyurdiev Re: [ SEMANAGE ] Add a few direct dbases to handle Ivan Gyurdiev Re: [ SEMANAGE ] Add a few direct dbases to handle Ivan Gyurdiev Re: Record keys Ivan Gyurdiev Friday, 14 October Re: MLS policy Russell Coker Re: [ SEMANAGE ] Add a few direct dbases to handle Ivan Gyurdiev Re: [ SEMANAGE ] Add a few direct dbases to handle Joshua Brindle Re: [ SEMANAGE ] Add a few direct dbases to handle Ivan Gyurdiev Re: [PATCH] Conditional expression mapping fix Stephen Smalley Re: [ SEMANAGE ] Add a few direct dbases to handle Joshua Brindle Re: [ SEMANAGE ] Add a few direct dbases to handle Ivan Gyurdiev Re: [ SEMANAGE ] Add a few direct dbases to handle Ivan Gyurdiev Re: [ SEMANAGE ] Add a few direct dbases to handle Joshua Brindle Re: [ SEMANAGE ] Bugfix previous patches Stephen Smalley [PATCH] Conditional expression mapping fix Joshua Brindle Re: [ SEMANAGE ] Bugfix previous patches Ivan Gyurdiev [ SEMANAGE ] Add a few direct dbases to handle Ivan Gyurdiev [ SEMANAGE ] Seuser database Ivan Gyurdiev [ SEMANAGE ] Seuser record Ivan Gyurdiev [ SEMANAGE ] Add more databases - booleans and interfaces Ivan Gyurdiev Re: Non-PAM Policycoreutils Stephen Smalley Rawhide updated to use getseuserbyname for logins. Daniel J Walsh RE: MLS policy Chad Hanson Re: [ SEMANAGE ] [ SEPOL ] More database work Stephen Smalley Re: [ SEMANAGE ] [ SEPOL ] More database work Joshua Brindle Re: [ SEMANAGE ] [ SEPOL ] More database work Stephen Smalley trivial patch Russell Coker Record keys Ivan Gyurdiev Thursday, 13 October Re: [ SEMANAGE ] [ SEPOL ] More database work Joshua Brindle Re: Non-PAM Policycoreutils Timothy Re: Non-PAM Policycoreutils Stephen Smalley Re: Non-PAM Policycoreutils Timothy Re: Non-PAM Policycoreutils Stephen Smalley Re: [ SEMANAGE ] [ SEPOL ] More database work Stephen Smalley Re: Non-PAM Policycoreutils Timothy Re: [ SEMANAGE ] [ SEPOL ] More database work Stephen Smalley Re: [ SEMANAGE ] [ SEPOL ] More database work Stephen Smalley Re: Non-PAM Policycoreutils Stephen Smalley Non-PAM Policycoreutils Timothy Re: [ SEPOL ] [ SEMANAGE ] Debug v3, some database things Stephen Smalley Re: [PATCH] require in conditional Stephen Smalley Re: [ SEMANAGE ] [ SEPOL ] More database work Stephen Smalley Re: [ SEPOL ] [ SEMANAGE ] Debug v3, some database things Ivan Gyurdiev Re: MLS policy Daniel J Walsh Re: MLS policy Daniel J Walsh Re: [ SEPOL ] [ SEMANAGE ] Debug v3, some database things Stephen Smalley Re: [ SEPOL ] [ SEMANAGE ] Debug v3, some database things Ivan Gyurdiev Fix mcsconvert target Thomas Bleher Re: [ SEPOL ] [ SEMANAGE ] Debug v3, some database things Ivan Gyurdiev mls policy comments Russell Coker MLS policy Russell Coker MLS policy patch Russell Coker Re: More Debian bugs Dale Amon Wednesday, 12 October new setools release Kevin Carr Re: [ SEMANAGE ] [ SEPOL ] More database work Stephen Smalley Re: [ SEMANAGE ] [ SEPOL ] More database work Joshua Brindle Re: [ SEMANAGE ] [ SEPOL ] More database work Stephen Smalley Re: [ SEMANAGE ] [ SEPOL ] More database work Stephen Smalley [ANN] SELinux Symposium Delegate Program James Morris Re: System hang during boot on Debian Sid Thomas Bleher Re: [ SEMANAGE ] [ SEPOL ] More database work Joshua Brindle Re: [ RESEND ] [ SEMANAGE ] Debugging system Ivan Gyurdiev Re: [ SEMANAGE ] [ SEPOL ] More database work Stephen Smalley Re: [ SEMANAGE ] [ SEPOL ] More database work Joshua Brindle Re: System hang during boot on Debian Sid Valdis.Kletnieks_at_vt.edu Re: [ RESEND ] [ SEMANAGE ] Debugging system Stephen Smalley Re: [ RESEND ] [ SEMANAGE ] Debugging system Ivan Gyurdiev Re: [ RESEND ] [ SEMANAGE ] Debugging system Stephen Smalley Re: [ SEMANAGE ] [ SEPOL ] More database work Stephen Smalley Re: swapon unsuppoted? Stephen Smalley Re: [ SEMANAGE ] [ SEPOL ] More database work Joshua Brindle Re: swapon unsuppoted? Stephen Smalley Re: swapon unsuppoted? Yuichi Nakamura Re: swapon unsuppoted? Yuichi Nakamura Re: [ SEMANAGE ] [ SEPOL ] More database work Stephen Smalley [PATCH] require in conditional Joshua Brindle [ RESEND ] [ SEMANAGE ] Debugging system Ivan Gyurdiev Re: System hang during boot on Debian Sid Thomas Bleher Tuesday, 11 October Re: System hang during boot on Debian Sid Dave Patterson Re: [ SEMANAGE ] [ SEPOL ] More database work Joshua Brindle Re: [ SEMANAGE ] [ SEPOL ] More database work Joshua Brindle Re: [ SEMANAGE ] [ SEPOL ] More database work Stephen Smalley Re: [ SEMANAGE ] [ SEPOL ] More database work Stephen Smalley Re: [ SEMANAGE ] [ SEPOL ] More database work Stephen Smalley Re: [ SEMANAGE ] Replace semanage debugging system Stephen Smalley Re: [ SEMANAGE ] Replace semanage debugging system Ivan Gyurdiev Re: System hang during boot on Debian Sid Luke Kenneth Casson Leighton Re: [ SEMANAGE ] Replace semanage debugging system Ivan Gyurdiev Re: Makefiles Stephen Smalley Re: [ SEPOL ] Another debugging system Stephen Smalley Makefiles Timothy Re: [ SEMANAGE ] Replace semanage debugging system Stephen Smalley Re: [ SEPOL ] Another debugging system Stephen Smalley Re: [ SEMANAGE ] Replace semanage debugging system Ivan Gyurdiev Re: [ SEPOL ] Another debugging system Ivan Gyurdiev Re: [ SEMANAGE ] Replace semanage debugging system Stephen Smalley Re: [ SEPOL ] Another debugging system Stephen Smalley Re: [ SEMANAGE ] Replace semanage debugging system Ivan Gyurdiev Re: [ SEMANAGE ] Replace semanage debugging system Stephen Smalley Re: [ SEMANAGE ] Replace semanage debugging system Stephen Smalley Re: [ SEMANAGE ] Replace semanage debugging system Ivan Gyurdiev Re: [ SEMANAGE ] Replace semanage debugging system Stephen Smalley Re: [ SEMANAGE ] Replace semanage debugging system Ivan Gyurdiev [ SEMANAGE ] Replace semanage debugging system Ivan Gyurdiev Re: [ SEMANAGE ] Replace semanage debugging system Stephen Smalley Re: System hang during boot on Debian Sid Dave Patterson Re: [ SEMANAGE ] [ SEPOL ] More database work Stephen Smalley Re: [ SEMANAGE ] [ SEPOL ] More database work Stephen Smalley Re: System hang during boot on Debian Sid Stephen Smalley Re: matchpathcon regcomp return code Stephen Smalley Re: swapon unsuppoted? Stephen Smalley Re: [ SEPOL ] Another debugging system Ivan Gyurdiev Monday, 10 October swapon unsuppoted? Yuichi Nakamura Re: matchpathcon regcomp return code Christopher J. PeBenito Re: More Debian bugs Luke Kenneth Casson Leighton Sunday, 9 October Re: More Debian bugs Russell Coker Re: More Debian bugs Luke Kenneth Casson Leighton Re: More Debian bugs Russell Coker Re: More Debian bugs Luke Kenneth Casson Leighton Re: More Debian bugs Russell Coker System hang during boot on Debian Sid Dave Patterson Friday, 7 October Re: Loadable Modules and RPM Joshua Brindle Re: [ SEMANAGE ] [ SEPOL ] More database work Ivan Gyurdiev Re: Loadable Modules and RPM Stephen Smalley Re: Loadable Modules and RPM Stephen Smalley Re: [ SEMANAGE ] [ SEPOL ] More database work Stephen Smalley Re: [ SEMANAGE ] [ SEPOL ] More database work Joshua Brindle Re: [ SEMANAGE ] [ SEPOL ] More database work Stephen Smalley Re: [ SEMANAGE ] [ SEPOL ] More database work Joshua Brindle Loadable Modules and RPM Daniel J Walsh Re: [ SEMANAGE ] [ SEPOL ] More database work Stephen Smalley KDE_IS_PRELINKED and KDE_FORK_SLAVES Luke Kenneth Casson Leighton Re: [ SEMANAGE ] [ SEPOL ] More database work Stephen Smalley Re: [ SEMANAGE ] [ SEPOL ] More database work Joshua Brindle Re: [ SEMANAGE ] [ SEPOL ] More database work Stephen Smalley Re: [ SEMANAGE ] [ SEPOL ] More database work Stephen Smalley Re: [ SEMANAGE ] [ SEPOL ] More database work Ivan Gyurdiev Re: [ SEMANAGE ] [ SEPOL ] More database work Stephen Smalley Re: [ SEMANAGE ] [ SEPOL ] More database work Joshua Brindle Re: [ SEMANAGE ] [ SEPOL ] More database work Stephen Smalley Re: [ SEMANAGE ] [ SEPOL ] More database work Stephen Smalley Re: [ SEMANAGE ] [ SEPOL ] More database work Ivan Gyurdiev Re: [ SEMANAGE ] [ SEPOL ] More database work Stephen Smalley Thursday, 6 October [ SEMANAGE ] [ SEPOL ] More database work Ivan Gyurdiev Re: matchpathcon regcomp return code Johan Fischer Re: Newbie questions Luke Kenneth Casson Leighton Re: matchpathcon regcomp return code Christopher J. PeBenito Re: Newbie questions Ivan Gyurdiev Re: [ SEMANAGE ] [ SEPOL ] More database work Stephen Smalley Re: matchpathcon regcomp return code Stephen Smalley Re: getseuserbyname patch Stephen Smalley Newbie questions Gaurav Poothia Newbie questions Gaurav Poothia Re: matchpathcon regcomp return code Christopher J. PeBenito Re: getseuserbyname patch Daniel J Walsh Re: getseuserbyname patch Stephen Smalley RE: [RFC][PATCH] New interface for loading policy Stephen Smalley Re: [PATCH] permission value inconsistency Joshua Brindle Re: [ SEMANAGE ] [ SEPOL ] More database work Ivan Gyurdiev Re: getseuserbyname patch Daniel J Walsh Re: getseuserbyname patch Stephen Smalley Re: getseuserbyname patch Daniel J Walsh Re: getseuserbyname patch Stephen Smalley http://packages.debian.org/unstable/admin/libpam-tmpdir Luke Kenneth Casson Leighton Wednesday, 5 October RE: [RFC][PATCH] New interface for loading policy Stephen Smalley Re: I've written a shell script which turns log deny to allow. shintarou_fujiwara Re: matchpathcon regcomp return code Stephen Smalley Re: [PATCH] libsepol - assertion invalid destroy Stephen Smalley Re: [PATCH] permission value inconsistency Stephen Smalley Re: matchpathcon regcomp return code Stephen Smalley Re: I've written a shell script which turns log deny to allow. Stephen Smalley Re: matchpathcon regcomp return code Christopher J. PeBenito RE: [RFC][PATCH] New interface for loading policy Stephen Smalley I've written a shell script which turns log deny to allow. shintarou_fujiwara Re: matchpathcon regcomp return code Stephen Smalley Re: seusers.conf file Stephen Smalley matchpathcon regcomp return code Johan Fischer Tuesday, 4 October Synchronization/Caching Ivan Gyurdiev Re: [ SEMANAGE ] Completely split database per backend Stephen Smalley Re: [ SEMANAGE ] Break up interfaces.h, implement parsing helpers Stephen Smalley Re: [ SEMANAGE ] [ SEPOL ] Backend iterate function Stephen Smalley Re: [10 / 9] [ SEMANAGE ] FIx placement of function table Stephen Smalley [PATCH] libsepol - assertion invalid destroy Joshua Brindle [PATCH] checkpolicy - constraint destroy Joshua Brindle [PATCH] permission value inconsistency Joshua Brindle [PATCH] checkpolicy - misleading error Joshua Brindle [PATCH] checkpolicy - self leak Joshua Brindle [PATCH] checkpolicy - no module version Joshua Brindle RE: [RFC][PATCH] New interface for loading policy Karl MacMillan Re: [PATCH] mls in modules Stephen Smalley Monday, 3 October Re: [PATCH] mls in modules Stephen Smalley Re: [PATCH] mls in modules Stephen Smalley RE: [RFC][PATCH] New interface for loading policy Stephen Smalley Re: [PATCH] mls in modules Joshua Brindle Re: getseuserbyname patch Stephen Smalley Re: getseuserbyname patch Stephen Smalley RE: [RFC][PATCH] New interface for loading policy Stephen Smalley Re: [PATCH] mls in modules Stephen Smalley RE: [RFC][PATCH] New interface for loading policy Karl MacMillan Re: [RFC][PATCH] New interface for loading policy Daniel J Walsh RE: [RFC][PATCH] New interface for loading policy Stephen Smalley RE: [RFC][PATCH] New interface for loading policy Stephen Smalley RE: [RFC][PATCH] New interface for loading policy Karl MacMillan RE: [10 / 9] [ SEMANAGE ] FIx placement of function table Karl MacMillan RE: [RFC][PATCH] New interface for loading policy Karl MacMillan Friday, 30 September Re: [ SEMANAGE ] Break up interfaces.h, implement parsing helpers Ivan Gyurdiev Re: [ SEMANAGE ] [ SEPOL ] Backend iterate function Ivan Gyurdiev Re: [PATCH] SELinux - fix SCTP socket bug and general IP protocol handling (fwd) James Morris [PATCH] SELinux - fix SCTP socket bug and general IP protocol handling (fwd) James Morris Re: [10 / 9] [ SEMANAGE ] FIx placement of function table Ivan Gyurdiev [PATCH] mls in modules Joshua Brindle Re: [10 / 9] [ SEMANAGE ] FIx placement of function table Stephen Smalley Re: [RFC][PATCH] New interface for loading policy Daniel J Walsh [10 / 9] [ SEMANAGE ] FIx placement of function table Ivan Gyurdiev Re: [ 4/9 ] [ SEMANAGE ] Database initialization Stage 1 Ivan Gyurdiev Re: postfix.te Russell Coker Re: [RFC][PATCH] New interface for loading policy Stephen Smalley RE: seinfo and binary policy endianness Karl MacMillan RE: seinfo and binary policy endianness Karl MacMillan RE: [RFC][PATCH] New interface for loading policy Karl MacMillan RE: [RFC][PATCH] New interface for loading policy Stephen Smalley RE: [RFC][PATCH] New interface for loading policy Karl MacMillan RE: seinfo and binary policy endianness Stephen Smalley RE: seinfo and binary policy endianness Stephen Smalley RE: seinfo and binary policy endianness Karl MacMillan RE: seinfo and binary policy endianness Frank Mayer RE: seinfo and binary policy endianness Karl MacMillan RE: seinfo and binary policy endianness Stephen Smalley RE: seinfo and binary policy endianness Stephen Smalley RE: seinfo and binary policy endianness Karl MacMillan Re: seinfo and binary policy endianness Stephen Smalley Re: seinfo and binary policy endianness Stephen Smalley Thursday, 29 September Re: [ 8/9 ] [ SEMANAGE ] Eliminate struct pointer typedefs Ivan Gyurdiev [ 1/9 ] [ SEPOL ] Eliminate struct pointer typedefs Ivan Gyurdiev Friday, 30 September RE: seinfo and binary policy endianness Karl MacMillan Re: postfix.te Daniel J Walsh RE: seinfo and binary policy endianness Karl MacMillan RE: [PATCH] semanage-functionality 4/17 Karl MacMillan Re: [ 7/9 ] [ SEMANAGE ] Backend separation (Init 3) Ivan Gyurdiev Re: /proc and chcon Stephen Smalley Re: [PATCH] semanage-functionality 4/17 Ivan Gyurdiev Re: [RFC][PATCH] New interface for loading policy Daniel J Walsh Re: [RFC][PATCH] New interface for loading policy Stephen Smalley Re: [RFC][PATCH] New interface for loading policy Stephen Smalley Re: postfix.te Russell Coker /proc and chcon Russell Coker Re: postfix.te Daniel J Walsh Re: Memory leaks Ivan Gyurdiev Re: Linking to semanage Ivan Gyurdiev postfix.te Russell Coker Thursday, 29 September Re: [RFC][PATCH] New interface for loading policy Ivan Gyurdiev Linking to semanage Ivan Gyurdiev Memory leaks Ivan Gyurdiev Re: [ 9/9 ] [ SEPOL ] User list function, Bugfixes Ivan Gyurdiev Re: [ 7/9 ] [ SEMANAGE ] Backend separation (Init 3) Ivan Gyurdiev Re: [ 6/9 ] [ SEMANAGE ] Database Initialization Stage 2 Ivan Gyurdiev Re: [ 5/9 ] [ SEMANAGE ] Change database to singly-linked list Ivan Gyurdiev Re: [ 4/9 ] [ SEMANAGE ] Database initialization Stage 1 Ivan Gyurdiev Re: [ 3/9 ] [ SEMANAGE ] Rename files Ivan Gyurdiev Re: [ 2/9 ] [ SEMANAGE ] Restore sepol compatibility Ivan Gyurdiev Re: seinfo and binary policy endianness George Wilson seinfo and binary policy endianness George Wilson Re: [RFC][PATCH] New interface for loading policy Daniel J Walsh Re: getseuserbyname patch Stephen Smalley [RFC][PATCH] New interface for loading policy Stephen Smalley Re: apmd policy Daniel J Walsh Re: apache tunable expression Daniel J Walsh Re: getseuserbyname patch Daniel J Walsh Re: apmd policy Stephen Smalley Re: apache tunable expression Stephen Smalley apache tunable expression Christopher J. PeBenito Re: getseuserbyname patch Stephen Smalley Re: getseuserbyname patch Daniel J Walsh Re: getseuserbyname patch Stephen Smalley Re: getseuserbyname patch Stephen Smalley Fix to stop traversing nfs file systems in fixfiles Daniel J Walsh Re: getseuserbyname patch Daniel J Walsh Wednesday, 28 September apmd policy Christopher J. PeBenito Re: getseuserbyname patch Stephen Smalley RE: [PATCH] semanage-functionality 4/17 Karl MacMillan RE: [PATCH] semanage-functionality 4/17 Stephen Smalley RE: [PATCH] semanage-functionality 4/17 Karl MacMillan RE: [PATCH] semanage-functionality 4/17 Karl MacMillan RE: [PATCH] semanage-functionality 4/17 Karl MacMillan RE: [PATCH] semanage-functionality 11/17 Karl MacMillan RE: [ SEMANAGE ] dbase initialization/semanage_handle stub/fixes Karl MacMillan RE: [PATCH] semanage-functionality 4/17 Karl MacMillan Re: [PATCH] semanage-functionality 4/17 Ivan Gyurdiev Re: [PATCH] semanage-functionality 4/17 Stephen Smalley Re: [ SEMANAGE ] Infrastucture patch Ivan Gyurdiev Tuesday, 27 September RE: [PATCH] semanage-functionality 4/17 Stephen Smalley Re: [PATCH] semanage-functionality 4/17 Stephen Smalley Re: [PATCH] semanage-functionality 4/17 Ivan Gyurdiev Re: [PATCH] semanage-functionality 4/17 Ivan Gyurdiev RE: [PATCH] semanage-functionality 4/17 Karl MacMillan Re: [PATCH] semanage-functionality 4/17 Stephen Smalley Re: [ SEPOL ] Extract user records from binary policy Stephen Smalley Re: [PATCH] semanage-functionality 11/17 Stephen Smalley Re: [ SEPOL ] Extract user records from binary policy Ivan Gyurdiev Re: [ SEPOL ] Extract user records from binary policy Stephen Smalley Re: [owner@bugs.debian.org: Bug#249499 acknowledged by developer (Bug#249499: fixed in pam 0.79-1)] Stephen Smalley getseuserbyname patch Daniel J Walsh Re: [PATCH] semanage-functionality 11/17 Ivan Gyurdiev Re: [PATCH] semanage-functionality 9/17 Ivan Gyurdiev Re: [PATCH] semanage-functionality 4/17 Ivan Gyurdiev Re: [ SEMANAGE ] dbase initialization/semanage_handle stub/fixes Ivan Gyurdiev IBM, Red Hat and Trusted Computer Solutions Team to Deliver Most Secure Version of Linux Available Daniel J Walsh [PATCH] semanage-functionality 14/17 Karl MacMillan Monday, 26 September Re: [ SEPOL ] Extract user records from binary policy Ivan Gyurdiev Tuesday, 27 September [PATCH] semanage-functionality 17/17 Karl MacMillan [PATCH] semanage-functionality 16/17 Karl MacMillan [PATCH] semanage-functionality 15/17 Karl MacMillan [PATCH] semanage-functionality 13/17 Karl MacMillan [PATCH] semanage-functionality 12/17 Karl MacMillan [PATCH] semanage-functionality 11/17 Karl MacMillan [PATCH] semanage-functionality 10/17 Karl MacMillan [PATCH] semanage-functionality 9/17 Karl MacMillan [PATCH] semanage-functionality 8/17 Karl MacMillan [PATCH] semanage-functionality 7/17 Karl MacMillan [PATCH] semanage-functionality 6/17 Karl MacMillan [PATCH] semanage-functionality 5/17 Karl MacMillan [PATCH] semanage-functionality 4/17 Karl MacMillan [PATCH] semanage-functionality 3/17 Karl MacMillan RE: [ SEMANAGE ] dbase initialization/semanage_handle stub/fixes Karl MacMillan Monday, 26 September [PATCH] semanage-functionality 2/17 Karl MacMillan [PATCH] semanage-functionality 1/17 Karl MacMillan [PATCH] semanage-functionality 0/17 Karl MacMillan [PATCH] libsepol fix Karl MacMillan Tuesday, 27 September [owner@bugs.debian.org: Bug#249499 acknowledged by developer (Bug#249499: fixed in pam 0.79-1)] Luke Kenneth Casson Leighton Monday, 26 September [PATCH] libsemanage-reorg 6/7 Karl MacMillan [PATCH] libsemanage-reorg 7/7 Karl MacMillan [PATCH] libsemanage-reorg 5/7 Karl MacMillan [PATCH] libsemanage-reorg 4/7 Karl MacMillan [PATCH] libsemanage-reorg 3/7 Karl MacMillan [PATCH] libsemanage-reorg 2/7 Karl MacMillan [PATCH] libsemanage-reorg 1/7 Karl MacMillan [PATCH] libsemanage-reorg 0/7 Karl MacMillan Re: reserved_port_type attribute Daniel J Walsh RE: Fix for segfault on duplicate role transitions Stephen Smalley Re: [ SEPOL ] Extract user records from binary policy Stephen Smalley Re: reserved_port_type attribute Stephen Smalley Re: reserved_port_type attribute Stephen Smalley RE: Fix for segfault on duplicate role transitions Karl MacMillan Fix for segfault on duplicate role transitions Karl MacMillan reserved_port_type attribute Christopher J. PeBenito setfiles vs restorecon in MLS Christopher J. PeBenito Saturday, 24 September [ SEPOL ] Extract user records from binary policy Ivan Gyurdiev Monday, 26 September Re: More Debian bugs Dale Amon Saturday, 24 September kickstart install of rawhide with SE Linux MCS policy Russell Coker Re: [ SEPOL ] Extract user records from binary policy Ivan Gyurdiev Friday, 23 September [ SEMANAGE ] dbase initialization/semanage_handle stub/fixes Ivan Gyurdiev Re: More Debian bugs Dale Amon Re: More Debian bugs Stephen Smalley Re: More Debian bugs Stephen Smalley Re: State of Debian SELinux Stephen Smalley More Debian bugs Dale Amon Re: State of Debian SELinux sswami_at_eden.rutgers.edu Re: Why do we have dhcp_state_t, dhcpc_state_t and dhcpd_state_t? Daniel J Walsh Re: Getting started with SELinux and Slackware Stephen Smalley Re: [PATCH] sepol, write.c policy version Stephen Smalley Re: [PATCH] sepol link.c fixes Joshua Brindle Re: [PATCH] sepol link.c fixes Stephen Smalley Re: [ SEMANAGE ] Redesign dbase Stephen Smalley RE: [ SEPOL/SEMANAGE ] Boolean record Karl MacMillan Thursday, 22 September Re: State of Debian SELinux Dale Amon Re: Getting started with SELinux and Slackware Timothy Re: State of Debian SELinux Dale Amon Re: State of Debian SELinux Dale Amon Re: Getting started with SELinux and Slackware Lyle Sigurdson [PATCH] sepol, write.c policy version Joshua Brindle [PATCH] sepol, leaks and extra checking Joshua Brindle [PATCH] module.c, leak and double free Joshua Brindle [PATCH] sepol link.c fixes Joshua Brindle ANN: Reference Policy Release Christopher J. PeBenito [PATCH] sepol minor fixes Joshua Brindle [PATCH] sepol license fix Joshua Brindle [PATCH] checkpolicy policy version warnings Joshua Brindle Re: State of Debian SELinux Stephen Smalley Re: Getting started with SELinux and Slackware Timothy Re: Getting started with SELinux and Slackware Lee Lowder Re: [ SEMANAGE ] Redesign dbase Ivan Gyurdiev Wednesday, 21 September [ SEMANAGE ] Redesign dbase Ivan Gyurdiev Thursday, 22 September Re: Getting started with SELinux and Slackware Stephen Smalley Re: Getting started with SELinux and Slackware Russell Coker cvs policy Russell Coker Getting started with SELinux and Slackware Lee Lowder Wednesday, 21 September Re: [ SEMANAGE ] Redesign dbase Ivan Gyurdiev Re: [ SEPOL/SEMANAGE ] Boolean record Ivan Gyurdiev Anyone in the Boston area tonight who want to talk about SELinux... Daniel J Walsh RE: [ SEPOL/SEMANAGE ] Boolean record Karl MacMillan Re: [ SEPOL/SEMANAGE ] Boolean record Ivan Gyurdiev RE: [ SEPOL/SEMANAGE ] Boolean record Karl MacMillan RE: [ SEPOL/SEMANAGE ] Boolean record Stephen Smalley RE: [ SEPOL/SEMANAGE ] Boolean record Stephen Smalley RE: [ SEPOL/SEMANAGE ] Boolean record Karl MacMillan Re: [ SEPOL/SEMANAGE ] Boolean record Ivan Gyurdiev Re: [ SEMANAGE ] Fix record handlers, add status codes Stephen Smalley Re: [ SEMANAGE ] Fix record handlers, add status codes Ivan Gyurdiev Re: [ SEPOL ] Fix memory leaks Stephen Smalley Re: [ SEMANAGE ] Fix record handlers, add status codes Stephen Smalley Re: [ SEMANAGE ] Stub record handlers Stephen Smalley Re: [ SEPOL/SEMANAGE ] Boolean record Stephen Smalley Re: [ SEPOL/SEMANAGE ] Boolean record Stephen Smalley Re: [ SEPOL/SEMANAGE ] Boolean record Stephen Smalley Tuesday, 20 September Re: [ SEPOL/SEMANAGE ] Boolean record Ivan Gyurdiev Re: [ SEPOL/SEMANAGE ] Boolean record Ivan Gyurdiev RE: [ SEPOL/SEMANAGE ] Boolean record Karl MacMillan Re: [ SEPOL ] Fix memory leaks Ivan Gyurdiev Re: Reference policy status page update Christopher J. PeBenito Re: [ SEPOL/SEMANAGE ] Boolean record Stephen Smalley Re: State of Debian SELinux Stephen Smalley Re: State of Debian SELinux Dale Amon Re: [ SEPOL/SEMANAGE ] Boolean record Ivan Gyurdiev Re: [ SEPOL/SEMANAGE ] Boolean record Stephen Smalley Re: Reference policy status page update Daniel J Walsh Re: [ SEPOL/SEMANAGE ] Boolean record Ivan Gyurdiev Re: [ SEPOL/SEMANAGE ] Boolean record Stephen Smalley Re: policycoreutils: run_init blocks sigCHLD but doesn't unblock it before exec Stephen Smalley Re: [ SEMANAGE ] Fix record handlers, add status codes Ivan Gyurdiev [ SEMANAGE ] Stub record handlers Ivan Gyurdiev [ SEPOL/SEMANAGE ] Boolean record Ivan Gyurdiev Monday, 19 September Re: misc policy patches Daniel J Walsh Re: misc policy patches Russell Coker Re: misc policy patches Daniel J Walsh Re: [ SEPOL/SEMANAGE ] Interface record Stephen Smalley Re: [ SEMANAGE ] Stub iterate Stephen Smalley Re: [ SEPOL ] Move more things to newer debug system Stephen Smalley Call for papers deadline extended SELinux Symposium Chair Friday, 16 September Latest Diffs Daniel J Walsh Monday, 19 September Re: [ SEPOL ] Move more things to newer debug system Ivan Gyurdiev Re: [ SEPOL ] Move more things to newer debug system Stephen Smalley Re: [ SEPOL ] Move more things to newer debug system Ivan Gyurdiev Re: Doing testing with MCS looks like we get initial roles/levels by using fromcon. Stephen Smalley Re: [ SEPOL ] Move more things to newer debug system Stephen Smalley fsadm tmpfs_t:file Christopher J. PeBenito Re: [ SEPOL ] Move more things to newer debug system Ivan Gyurdiev Re: [ SEPOL ] Move more things to newer debug system Stephen Smalley Re: State of Debian SELinux Stephen Smalley Re: State of Debian SELinux Stephen Smalley Re: State of Debian SELinux Luke Kenneth Casson Leighton Re: State of Debian SELinux Dale Amon misc policy patches Russell Coker procmail.te and targeted policy Russell Coker postfix policy patch Russell Coker policy patches Russell Coker Sunday, 18 September Re: State of Debian SELinux Luke Kenneth Casson Leighton Re: State of Debian SELinux Dale Amon Re: [ SEPOL/SEMANAGE ] Interface record Ivan Gyurdiev [ SEPOL/SEMANAGE ] Interface record Ivan Gyurdiev Re: [ SEPOL ] Move more things to newer debug system Ivan Gyurdiev Re: State of Debian SELinux Luke Kenneth Casson Leighton Re: State of Debian SELinux Dale Amon Re: State of Debian SELinux Dale Amon Saturday, 17 September Re: [ SEPOL ] Move more things to newer debug system Ivan Gyurdiev Re: [ SEPOL ] Move more things to newer debug system Ivan Gyurdiev Re: [ SEPOL ] Move more things to newer debug system Ivan Gyurdiev [ SEMANAGE ] Stub iterate Ivan Gyurdiev Re: State of Debian SELinux Luke Kenneth Casson Leighton Re: State of Debian SELinux Jiann-Ming Su State of Debian SELinux Dale Amon Introduction to MCS (Multi-Category Security) James Morris cdrecord policy patch Russell Coker Re: disable setenforce Russell Coker Re: disable setenforce Russell Coker Friday, 16 September Re: Doing testing with MCS looks like we get initial roles/levels by using fromcon. Daniel J Walsh Re: ping broken symptoms Daniel J Walsh Re: ping broken symptoms Stephen Smalley ping broken symptoms Christopher J. PeBenito Re: error building file_contexts Antoine Martin Re: Doing testing with MCS looks like we get initial roles/levels by using fromcon. Stephen Smalley Re: Doing testing with MCS looks like we get initial roles/levels by using fromcon. Daniel J Walsh Re: Doing testing with MCS looks like we get initial roles/levels by using fromcon. Stephen Smalley Re: Doing testing with MCS looks like we get initial roles/levels by using fromcon. Daniel J Walsh RE: [PATCH] fix checkpolicy segfaults when using role dominancestatements Karl MacMillan Re: Doing testing with MCS looks like we get initial roles/levels by using fromcon. Stephen Smalley Re: [PATCH] fix checkpolicy segfaults when using role dominance statements Stephen Smalley Re: New ideas on implementation on libsetrans. Stephen Smalley Re: Doing testing with MCS looks like we get initial roles/levels by using fromcon. Daniel J Walsh Re: [ SEPOL ] Move more things to newer debug system Luke Kenneth Casson Leighton Re: New ideas on implementation on libsetrans. Luke Kenneth Casson Leighton Re: New ideas on implementation on libsetrans. Steve G Re: [ SEPOL ] Move more things to newer debug system Luke Kenneth Casson Leighton Re: New ideas on implementation on libsetrans. Luke Kenneth Casson Leighton Re: [ SEPOL ] Move more things to newer debug system Luke Kenneth Casson Leighton Re: [ SEPOL ] Move more things to newer debug system Stephen Smalley Re: mqueue labeling Stephen Smalley Thursday, 15 September [PATCH] fix checkpolicy segfaults when using role dominance statements Darrel Goeddel Updated Policy in Sourcforge CVS James Carter mqueue labeling Christopher J. PeBenito Re: [ SEPOL ] Move more things to newer debug system Ivan Gyurdiev Re: [ SEPOL ] Move more things to newer debug system Stephen Smalley Re: [ SEPOL ] Move more things to newer debug system Stephen Smalley Re: [ SEPOL ] Move more things to newer debug system Stephen Smalley Re: [ SEPOL ] Move more things to newer debug system Ivan Gyurdiev policycoreutils: run_init blocks sigCHLD but doesn't unblock it before exec Manoj Srivastava Wednesday, 14 September Introducing Multi-Category Security (MCS) SELinux policy in Rawhide Daniel J Walsh Re: [ SEPOL ] Move more things to newer debug system Dale Amon Re: [ SEPOL ] Move more things to newer debug system Ivan Gyurdiev Re: [ SEPOL ] Move more things to newer debug system Stephen Smalley Re: New ideas on implementation on libsetrans. Stephen Smalley Re: [ SEPOL ] Move more things to newer debug system Stephen Smalley Re: [ SEPOL ] Move more things to newer debug system Ivan Gyurdiev Re: [ SEPOL ] Move more things to newer debug system Ivan Gyurdiev Re: [ SEPOL ] Detach old debug system from new Stephen Smalley [ SEPOL ] Detach old debug system from new Ivan Gyurdiev Re: [ SEPOL ] Move more things to newer debug system Stephen Smalley Re: info on SELinux support for IPSEC Stephen Smalley Re: [ SEPOL ] Move more things to newer debug system Stephen Smalley Re: New ideas on implementation on libsetrans. Stephen Smalley Re: New ideas on implementation on libsetrans. Stephen Smalley Re: New ideas on implementation on libsetrans. Steve G Re: [ SEPOL ] Move more things to newer debug system Ivan Gyurdiev Re: [ SEPOL ] Move more things to newer debug system Ivan Gyurdiev Re: [ SEPOL ] Move more things to newer debug system Stephen Smalley Re: [ SEPOL ] Move more things to newer debug system Joshua Brindle Re: [ SEPOL ] Move more things to newer debug system Stephen Smalley Re: [ SEMANAGE ] Introduce record table Stephen Smalley Re: [ SEMANAGE ] Stub out user/port functionality Stephen Smalley Re: [ SEPOL ] Move more things to newer debug system Stephen Smalley Re: [ SEPOL ] Move more things to newer debug system Joshua Brindle info on SELinux support for IPSEC Prakash Saivasan Re: [ SEPOL ] Move more things to newer debug system Stephen Smalley Re: [ SEPOL ] Move more things to newer debug system Joshua Brindle [PATCH] SELinux - canonicalize getxattr() (fwd) James Morris Re: New ideas on implementation on libsetrans. Daniel J Walsh Re: [ SEPOL ] Move more things to newer debug system Dale Amon Re: [ SEPOL ] Move more things to newer debug system Stephen Smalley Re: New ideas on implementation on libsetrans. Stephen Smalley Re: New ideas on implementation on libsetrans. Stephen Smalley Re: [ SEPOL ] Move more things to newer debug system Joshua Brindle Re: [ SEPOL ] Move more things to newer debug system Stephen Smalley Re: New ideas on implementation on libsetrans. Steve G Re: [ SEPOL ] Move more things to newer debug system Stephen Smalley Re: [ SEPOL ] Move more things to newer debug system Stephen Smalley Re: error building file_contexts Daniel J Walsh Re: [ SEPOL ] Move more things to newer debug system Stephen Smalley Re: New ideas on implementation on libsetrans. Stephen Smalley Re: [ SEPOL ] Move more things to newer debug system Luke Kenneth Casson Leighton Re: [ SEPOL ] Move more things to newer debug system Luke Kenneth Casson Leighton Tuesday, 13 September Re: [ SEPOL ] Move more things to newer debug system Ivan Gyurdiev Re: [ SEPOL ] Move more things to newer debug system Ivan Gyurdiev Re: [ SEPOL ] Move more things to newer debug system Joshua Brindle Re: [ SEMANAGE ] Introduce record table Ivan Gyurdiev Reference policy status page update Christopher J. PeBenito Re: [ SEPOL ] Move more things to newer debug system Ivan Gyurdiev Re: [ SEMANAGE ] Introduce record table Ivan Gyurdiev Re: error building file_contexts Eric Paris Re: error building file_contexts antoine Re: New ideas on implementation on libsetrans. Luke Kenneth Casson Leighton Re: New ideas on implementation on libsetrans. Daniel J Walsh Re: New ideas on implementation on libsetrans. Stephen Smalley Re: New ideas on implementation on libsetrans. Daniel J Walsh Re: New ideas on implementation on libsetrans. Stephen Smalley Re: [ SEPOL ] Move more things to newer debug system Stephen Smalley Re: New ideas on implementation on libsetrans. Daniel J Walsh Re: New ideas on implementation on libsetrans. Stephen Smalley Re: New ideas on implementation on libsetrans. Daniel J Walsh Re: [ SEMANAGE ] Introduce record table Stephen Smalley Re: New ideas on implementation on libsetrans. Darrel Goeddel Re: New ideas on implementation on libsetrans. Luke Kenneth Casson Leighton Re: New ideas on implementation on libsetrans. Stephen Smalley New ideas on implementation on libsetrans. Daniel J Walsh Re: error building file_contexts Stephen Smalley Re: error building file_contexts Antoine Martin Re: error building file_contexts Stephen Smalley Re: error building file_contexts Christopher J. PeBenito Re: error building file_contexts Antoine Martin Re: error building file_contexts Stephen Smalley Re: Problem compiling libselinux 1.26 Stephen Smalley [jeroen@wolffelaar.nl: Re: ftp.debian.org: libselinux1 needs to be priority "important" or "required"] Luke Kenneth Casson Leighton Monday, 12 September Re: [ SEPOL ] Move more things to newer debug system Ivan Gyurdiev error building file_contexts antoine Re: Problem compiling libselinux 1.26 Pierre Re: Problem compiling libselinux 1.26 Lorenzo Hernández García-Hierro Problem compiling libselinux 1.26 Pierre Refpolicy loadable modules Christopher J. PeBenito Re: After talking to some people at Red Hat, they feal the translation library should be plugable Stephen Smalley Re: After talking to some people at Red Hat, they feal the translation library should be plugable Stephen Smalley After talking to some people at Red Hat, they feal the translation library should be plugable Daniel J Walsh xfs and reiserfs broken for SELinux in latest -git (and likely 2.6.14) Stephen Smalley Re: disable setenforce Stephen Smalley Re: [ SEMANAGE ] Introduce record table Ivan Gyurdiev [ SEMANAGE ] Stub out user/port functionality Ivan Gyurdiev Re: disable setenforce Russell Coker Saturday, 10 September Re: (fwd) Bug#270919: Can you test a new version of sysvinit? Luke Kenneth Casson Leighton Friday, 9 September fix for typo in setfiles.te Russell Coker dhcpc.te patch Russell Coker Thursday, 8 September [pere@hungry.com: Bug#270919: Can you test a new version of sysvinit?] Luke Kenneth Casson Leighton ANN: selinux mailing list server offline 9-11 Sep Stephen Smalley Wednesday, 7 September ANN: Reference Policy Release Christopher J. PeBenito Updated SELinux Release Stephen Smalley Re: ntp policy Daniel J Walsh Re: ntp policy Christopher J. PeBenito Re: ntp policy Daniel J Walsh Tuesday, 6 September ANN: SELinux Policy Editor 1.2 Yuichi Nakamura RE: quotaon Karl MacMillan Monday, 5 September ntp policy Christopher J. PeBenito Saturday, 3 September (no subject) Russell Coker Friday, 2 September squid policy Christopher J. PeBenito Re: quotaon Stephen Smalley (no subject) Karl MacMillan Re: [RFC][PATCH] killall context regex and userid matching Stephen Smalley Re: Policy devel Stephen Smalley Re: Policy devel Christopher J. PeBenito Re: [PATCH] show correct error message when a policy has duplicate declarations Joshua Brindle Thursday, 1 September run_init breaks munin Erich Schubert Re: Some policy files Erich Schubert Policy devel Javier Godinez Re: [redhat-lspp] [RFC][PATCH] killall context regex and userid matching Daniel J Walsh Some policy files Erich Schubert SELinux Symposium - Call for papers reminder SELinux Symposium Chair [RFC][PATCH] killall context regex and userid matching ltcgcw_at_us.ibm.com Wednesday, 31 August ANN: New Release of Setools Kevin Carr Re: [PATCH] show correct error message when a policy has duplicate declarations Stephen Smalley Re: [PATCH] show correct error message when a policy has duplicate declarations Stephen Smalley [PATCH] show correct error message when a policy has duplicate declarations Jason Tang Re: Another place where policy blows up because of translations in MCS. Darrel Goeddel Re: Another place where policy blows up because of translations in MCS. Stephen Smalley Re: Another place where policy blows up because of translations in MCS. Stephen Smalley Re: Another place where policy blows up because of translations in MCS. Stephen Smalley Tuesday, 30 August MCS/Targeted policy and translation library available to be played with. Daniel J Walsh MCS Policy. Daniel J Walsh Re: Another place where policy blows up because of translations in MCS. Daniel J Walsh Re: Another place where policy blows up because of translations in MCS. Stephen Smalley Another place where policy blows up because of translations in MCS. Daniel J Walsh Monday, 29 August Re: conditional name_bind permission check Stephen Smalley Friday, 26 August conditional name_bind permission check Spencer Shimko Re: Problems with MCS/Targeted policy update. Stephen Smalley Re: Problems with MCS/Targeted policy update. Daniel J Walsh Re: Problems with MCS/Targeted policy update. Daniel J Walsh Re: Problems with MCS/Targeted policy update. Stephen Smalley Re: Problems with MCS/Targeted policy update. Stephen Smalley Re: Problems with MCS/Targeted policy update. Daniel J Walsh Re: memory leak in services.c Stephen Smalley Re: Problems with MCS/Targeted policy update. Daniel J Walsh Re: corrected sidtab locking patch Stephen Smalley Re: corrected sidtab locking patch Stephen Smalley corrected sidtab locking patch Jason Tang memory leak in services.c Jason Tang Re: [PATCH] remove selinux stacked ops Chris Wright Re: [PATCH] remove selinux stacked ops Chris Wright Re: [PATCH] remove selinux stacked ops Stephen Smalley Re: [PATCH] remove selinux stacked ops Stephen Smalley Re: [PATCH] remove selinux stacked ops serue_at_us.ibm.com Re: [PATCH] remove selinux stacked ops Chris Wright ANN: Reference Policy Release Christopher J. PeBenito Re: Ok I plead ignorance to the way MLS works. Daniel J Walsh RE: Ok I plead ignorance to the way MLS works. Stephen Smalley Re: [PATCH] remove selinux stacked ops Stephen Smalley Re: [PATCH] remove selinux stacked ops Stephen Smalley Re: [PATCH] remove selinux stacked ops Stephen Smalley Re: [PATCH] remove selinux stacked ops Stephen Smalley Re: selinux stacked ops Stephen Smalley Thursday, 25 August [PATCH] remove selinux stacked ops Chris Wright selinux stacked ops Chris Wright RE: Ok I plead ignorance to the way MLS works. Chad Hanson RE: libselinux category patch Chad Hanson RE: Problems with MCS/Targeted policy update. Karl MacMillan Re: [PATCH 3/6] libsepol: resource leaks in policydb.c Stephen Smalley RE: Problems with MCS/Targeted policy update. Stephen Smalley Anyone looking to write policy Daniel J Walsh RE: Problems with MCS/Targeted policy update. Karl MacMillan Re: [PATCH] libselinux: avoid NULL deref serue_at_us.ibm.com Re: Problems with MCS/Targeted policy update. Stephen Smalley Re: [PATCH] libselinux: avoid NULL deref Stephen Smalley RE: libselinux category patch Stephen Smalley Re: Problems with MCS/Targeted policy update. Stephen Smalley Re: libselinux category patch Stephen Smalley RE: Ok I plead ignorance to the way MLS works. Stephen Smalley Wednesday, 24 August [PATCH] libselinux: avoid NULL deref serue_at_us.ibm.com Re: [PATCH] libsemanage: fix resource leaks serue_at_us.ibm.com RE: Ok I plead ignorance to the way MLS works. Chad Hanson Re: Ok I plead ignorance to the way MLS works. Daniel J Walsh RE: Ok I plead ignorance to the way MLS works. Chad Hanson RE: libselinux category patch Chad Hanson Re: libselinux category patch Stephen Smalley RE: Ok I plead ignorance to the way MLS works. Stephen Smalley Re: Ok I plead ignorance to the way MLS works. James Morris RE: Ok I plead ignorance to the way MLS works. Chad Hanson Re: Ok I plead ignorance to the way MLS works. Stephen Smalley Re: Ok I plead ignorance to the way MLS works. Daniel J Walsh Re: Ok I plead ignorance to the way MLS works. Stephen Smalley Re: Ok I plead ignorance to the way MLS works. Darrel Goeddel Re: Problems with MCS/Targeted policy update. Daniel J Walsh Re: libselinux category patch Stephen Smalley Ok I plead ignorance to the way MLS works. Daniel J Walsh Re: libselinux category patch Darrel Goeddel Re: libselinux category patch Joshua Brindle Re: libselinux category patch Stephen Smalley Re: libselinux category patch Darrel Goeddel Re: libselinux category patch Daniel J Walsh Re: Problems with MCS/Targeted policy update. Stephen Smalley Re: libselinux category patch Darrel Goeddel Re: libselinux category patch Stephen Smalley Problems with MCS/Targeted policy update. Daniel J Walsh Re: libselinux category patch Daniel J Walsh Tuesday, 23 August Policycoreutils fixes for fixfiles Daniel J Walsh Re: libselinux category patch Stephen Smalley Re: libselinux category patch Stephen Smalley Re: libselinux category patch Daniel J Walsh Re: libselinux category patch Stephen Smalley Re: [PATCH 3/6] libsepol: resource leaks in policydb.c Joshua Brindle Re: libselinux category patch Stephen Smalley Re: libselinux category patch Stephen Smalley Re: [PATCH 4/6] libsepol: expand.c resource leaks serue_at_us.ibm.com Re: libselinux category patch Daniel J Walsh Re: libselinux category patch Stephen Smalley Re: libselinux category patch Daniel J Walsh Re: libselinux category patch Stephen Smalley Re: libselinux category patch Stephen Smalley Re: libselinux category patch Daniel J Walsh Re: libselinux category patch Joshua Brindle Re: libselinux category patch Stephen Smalley Re: [PATCH] XATTR issues on JFFS2 Stephen Smalley Re: [PATCH] XATTR issues on JFFS2 KaiGai Kohei Monday, 22 August libselinux category patch Daniel J Walsh Tuesday, 23 August Re: [PATCH 6/6] libsepol: resource leak in avrule_decl_create Stephen Smalley Re: [PATCH 4/6] libsepol: expand.c resource leaks Stephen Smalley Re: [PATCH 3/6] libsepol: resource leaks in policydb.c Stephen Smalley Re: [PATCH] XATTR issues on JFFS2 Stephen Smalley Re: [PATCH] XATTR issues on JFFS2 KaiGai Kohei Monday, 22 August [PATCH 6/6] libsepol: resource leak in avrule_decl_create serue_at_us.ibm.com [PATCH 5/6] libsepol: cond_read_node resource leak serue_at_us.ibm.com [PATCH 4/6] libsepol: expand.c resource leaks serue_at_us.ibm.com [PATCH 3/6] libsepol: resource leaks in policydb.c serue_at_us.ibm.com [PATCH 2/6] libsepol: conditional.c resource leaks serue_at_us.ibm.com [PATCH 1/6] libsepol: range_trans_clone memory leak serue_at_us.ibm.com Re: [PATCH] libsemanage: fix resource leaks Stephen Smalley [PATCH] policycoreutils: check lstat return value serue_at_us.ibm.com Re: [PATCH] add variable initializer serue_at_us.ibm.com [PATCH] policycoreutils: needless check serue_at_us.ibm.com Re: [PATCH] libsepol resource leak serue_at_us.ibm.com [PATCH] libsemanage: fix resource leaks serue_at_us.ibm.com [PATCH] libsemanage: fix apparent typo serue_at_us.ibm.com [PATCH] add variable initializer serue_at_us.ibm.com Re: info on Security enhanced X server Darrel Goeddel Re: libselinux does not compile on ia64 Florian Weimer Sunday, 21 August SuSE 10.0 packages Thomas Bleher Friday, 19 August Re: [RFC] Checking the loaded policy against a policy on disk Thomas Bleher Re: [RFC] Checking the loaded policy against a policy on disk George Wilson RE: [RFC] Checking the loaded policy against a policy on disk Stephen Smalley RE: [RFC] Checking the loaded policy against a policy on disk Frank Mayer object classes and permissions list updated Christopher J. PeBenito Re: [RFC] Checking the loaded policy against a policy on disk James Morris Re: kernel Oops from policy James Morris Re: [RFC] Checking the loaded policy against a policy on disk Stephen Smalley Re: [RFC] Checking the loaded policy against a policy on disk Joshua Brindle Re: avtab reduction, binary policy format version change Stephen Smalley Re: kernel Oops from policy Stephen Smalley Re: info on Security enhanced X server Stephen Smalley [RFC] Checking the loaded policy against a policy on disk Stephen Smalley info on Security enhanced X server Prakash Saivasan kernel Oops from policy Russell Coker Thursday, 18 August Re: [PATCH] checkpolicy: fix use-after-free Stephen Smalley Re: [PATCH] libsepol resource leak Stephen Smalley [PATCH] checkpolicy: fix use-after-free hallyn_at_serge.ibm.com [PATCH] libsepol resource leak hallyn_at_serge.ibm.com [PATCH] libsepol: NULL dereference of tmp_roles[] on error path hallyn_at_serge.ibm.com [PATCH] libsepol: potential error_msg resource leak hallyn_at_serge.ibm.com [PATCH] libsepol: potential NULL dereference from next_entry() hallyn_at_serge.ibm.com remove apostrophe Russell Coker policy patch Russell Coker Tuesday, 16 August RE: Category Translation patch for MCS/MLS Policy Stephen Smalley Re: pty / idr_remove problem persists Stephen Smalley Monday, 15 August syslinux Russell Coker RE: Category Translation patch for MCS/MLS Policy Chad Hanson pty / idr_remove problem persists Christopher J. PeBenito Re: [patch 2/2] Fix memory leaks in libsepol/checkpolicy Stephen Smalley Re: [patch 1/2] Fix memory leaks in libsepol/checkpolicy Stephen Smalley Latest Diffs Daniel J Walsh Saturday, 13 August Re: Red Hat's passwd Daniel J Walsh Friday, 12 August [patch 2/2] Fix memory leaks in libsepol/checkpolicy Stephen Smalley [patch 1/2] Fix memory leaks in libsepol/checkpolicy Stephen Smalley Re: [PATCH] check ebitmap_write return value in policydb_write Stephen Smalley Re: [PATCH] fix order of error checking in libsepol Stephen Smalley [PATCH] check ebitmap_write return value in policydb_write serue_at_us.ibm.com [PATCH] fix order of error checking in libsepol serue_at_us.ibm.com Re: avtab reduction, binary policy format version change Stephen Smalley Thursday, 11 August avtab reduction, binary policy format version change Stephen Smalley Re: Red Hat's passwd Joshua Brindle Re: libselinux does not compile on ia64 Stephen Smalley Re: Red Hat's passwd Stephen Smalley Re: [PATCH] fix use-after-free in matchpathcon.c Stephen Smalley radvd.fc Russell Coker Wednesday, 10 August I'm new too. Jaron Omega [PATCH] Free alloc'ed memory on error path in matchpathcon_filespec_add serue_at_us.ibm.com [PATCH] free conary on error path in get_default_context() serue_at_us.ibm.com [PATCH] don't risk returning freed data in get_failsafe_context serue_at_us.ibm.com [PATCH] fix two related bugs in context_{new,free} serue_at_us.ibm.com [PATCH] Don't free n[i] when n is NULL serue_at_us.ibm.com [PATCH] fix resource leak (on failure path) in sidtab_insert serue_at_us.ibm.com [PATCH] fix use-after-free in matchpathcon.c serue_at_us.ibm.com Re: checkpolicy constraints bug Stephen Smalley Re: new to selinux Stephen Smalley new to selinux nitin kanaskar Re: checkpolicy constraints bug Stephen Smalley Re: Category Translation patch for MCS/MLS Policy Casey Schaufler Updated Policy in Sourceforge CVS James Carter checkpolicy constraints bug Russell Coker Re: Category Translation patch for MCS/MLS Policy Stephen Smalley Re: Category Translation patch for MCS/MLS Policy Daniel J Walsh spamassassin policy Russell Coker radvd.te Russell Coker Tuesday, 9 August lvm.te patch Russell Coker Monday, 8 August Re: Attributes in new binary format Stephen Smalley Re: Category Translation patch for MCS/MLS Policy Joshua Brindle Re: [RFC][PATCH 0/3] Reduce number of avtab nodes Stephen Smalley Re: Category Translation patch for MCS/MLS Policy Colin Walters Re: Category Translation patch for MCS/MLS Policy Darrel Goeddel Re: Category Translation patch for MCS/MLS Policy Darrel Goeddel RE: Attributes in new binary format Stephen Smalley Re: Category Translation patch for MCS/MLS Policy Casey Schaufler Re: Attributes in new binary format Stephen Smalley Re: Attributes in new binary format Joshua Brindle Friday, 5 August Category Translation patch for MCS/MLS Policy Daniel J Walsh Monday, 8 August RE: Attributes in new binary format Frank Mayer Re: Attributes in new binary format Stephen Smalley Attributes in new binary format Joshua Brindle Re: [PATCH] Fix the range_transition rule Joshua Brindle Re: [PATCH] Fix the range_transition rule Stephen Smalley Re: libselinux does not compile on ia64 Janak Desai Re: chcon v. setfilecon Stephen Smalley Re: libselinux does not compile on ia64 Stephen Smalley Saturday, 6 August Re: [PATCH] Fix the range_transition rule Joshua Brindle Cleaner patch for for libselinux IA64 build failure Manoj Srivastava libselinux does not compile on ia64 Manoj Srivastava Friday, 5 August [PATCH] Fix the range_transition rule Paul Moore Re: Red Hat's passwd Joshua Brindle Re: Red Hat's passwd Colin Walters Re: Red Hat's passwd Joshua Brindle Re: Red Hat's passwd Colin Walters Re: Red Hat's passwd Daniel J Walsh Re: chcon v. setfilecon Daniel J Walsh Re: Red Hat's passwd Joshua Brindle Re: Red Hat's passwd Colin Walters patch: disallow policy from declaring the type 'self' Jason Tang Red Hat's passwd Joshua Brindle Thursday, 4 August chcon v. setfilecon rich turner Re: [RFC][PATCH 0/3] Reduce number of avtab nodes Stephen Smalley Re: [RFC][PATCH 0/3] Reduce number of avtab nodes Joshua Brindle Re: [RFC][PATCH 0/3] Reduce number of avtab nodes Russell Coker Re: [RFC][PATCH 0/3] Reduce number of avtab nodes Stephen Smalley Re: [RFC][PATCH 0/3] Reduce number of avtab nodes Joshua Brindle Re: [RFC][PATCH 0/3] Reduce number of avtab nodes Stephen Smalley Re: [RFC][PATCH 0/3] Reduce number of avtab nodes Valdis.Kletnieks_at_vt.edu Re: [RFC][PATCH 0/3] Reduce number of avtab nodes Stephen Smalley Re: restoring file attributes Stephen Smalley Re: [RFC][PATCH 0/3] Reduce number of avtab nodes Stephen Smalley Re: [RFC][PATCH 0/3] Reduce number of avtab nodes Russell Coker Re: [RFC][PATCH 0/3] Reduce number of avtab nodes Russell Coker Wednesday, 3 August restoring file attributes rich turner Re: how to pronounce SE Linux Christopher Warner how to pronounce SE Linux Russell Coker BackupPC and Selinux Daniela Gradim Tuesday, 2 August Re: [RFC][PATCH 0/3] Reduce number of avtab nodes Stephen Smalley Re: [PATCH] move module read/write code into libsepol Stephen Smalley Re: [PATCH] move module read/write code into libsepol Stephen Smalley Re: [RFC][PATCH 0/3] Reduce number of avtab nodes Stephen Smalley ANN: Reference Policy Release Christopher J. PeBenito [PATCH] move module read/write code into libsepol Jason Tang Re: [ libsemanage ] Key extract function Stephen Smalley Re: [ libsepol ] User, context, port records. Bugfixes. Stephen Smalley Re: [ libsemanage ] Relay libsepol records Stephen Smalley Monday, 1 August Re: [RFC] selinux management API Russell Coker Red Hat LSPP mailing list James Morris Re: [RFC] selinux management API Jason Tang Re: [RFC][PATCH 0/3] Reduce number of avtab nodes Joshua Brindle Re: [RFC][PATCH 0/3] Reduce number of avtab nodes Stephen Smalley Re: [RFC][PATCH 0/3] Reduce number of avtab nodes Stephen Smalley Re: [RFC][PATCH 0/3] Reduce number of avtab nodes Joshua Brindle Re: [RFC][PATCH 0/3] Reduce number of avtab nodes Luke Kenneth Casson Leighton Re: [RFC][PATCH 0/3] Reduce number of avtab nodes Stephen Smalley Sunday, 31 July Re: FastCGI and SELinux Toby Boudreaux Re: FastCGI and SELinux Petre Rodan Re: [RFC][PATCH 0/3] Reduce number of avtab nodes James Morris Re: FastCGI and SELinux Toby Boudreaux Saturday, 30 July Re: [RFC][PATCH 0/3] Reduce number of avtab nodes Joshua Brindle tcl headers, useradd and libuser.conf Simon Hecht no-ip policy shintarou_fujiwara Re: [RFC][PATCH 0/3] Reduce number of avtab nodes James Morris Friday, 29 July Re: [ libsemanage ] Key extract function Ivan Gyurdiev Re: SELinux for embedded devices... Christopher J. PeBenito Re: [ libsemanage ] Key extract function Ivan Gyurdiev Re: file context ordering Christopher J. PeBenito [ libsemanage ] Relay libsepol records Ivan Gyurdiev Re: file context ordering Christopher J. PeBenito Re: file context ordering Christopher J. PeBenito [ libsepol ] User, context, port records. Bugfixes. Ivan Gyurdiev Re: [RFC][PATCH 0/3] Reduce number of avtab nodes James Morris Re: file context ordering Ron Kuris Re: [RFC][PATCH 0/3] Reduce number of avtab nodes Stephen Smalley Re: file context ordering Christopher J. PeBenito Libsepol ongoing Ivan Gyurdiev [RFC][PATCH 3/3] Reduce number of avtab nodes Stephen Smalley [RFC][PATCH 2/3] Reduce number of avtab nodes Stephen Smalley [RFC][PATCH 1/3] Reduce number of avtab nodes Stephen Smalley [RFC][PATCH 0/3] Reduce number of avtab nodes Stephen Smalley Re: SELinux for embedded devices... Stephen Smalley Re: SELinux for embedded devices... Stephen Smalley Re: file context ordering Stephen Smalley Re: file context ordering Daniel J Walsh Re: SELinux for embedded devices... Luke Kenneth Casson Leighton Re: SELinux for embedded devices... Luke Kenneth Casson Leighton RE: SELinux for embedded devices... Sriram, Kannan RE: SELinux for embedded devices... Lorenzo Hernández García-Hierro RE: SELinux for embedded devices... Sriram, Kannan Re: SELinux for embedded devices... Lorenzo Hernández García-Hierro Thursday, 28 July SELinux for embedded devices... Sriram, Kannan Re: file context ordering Ron Kuris file context ordering Christopher J. PeBenito Re: Suse selinux policy Dale Amon FastCGI and SELinux Toby Boudreaux Re: [RFC] selinux management API Russell Coker Re: Failed to get default security context? Christopher J. PeBenito Re: [RFC] selinux management API Joshua Brindle Re: [RFC] selinux management API Russell Coker Wednesday, 27 July Re: [RFC][PATCH 1/3] Reduce avtab node size Valdis.Kletnieks_at_vt.edu Re: [RFC][PATCH 1/3] Reduce avtab node size Stephen Smalley Re: [RFC][PATCH 1/3] Reduce avtab node size Valdis.Kletnieks_at_vt.edu Re: [RFC][PATCH 1/3] Reduce avtab node size Stephen Smalley Re: [RFC][PATCH 1/3] Reduce avtab node size Stephen Smalley Tuesday, 26 July Re: [RFC][PATCH 1/3] Reduce avtab node size Valdis.Kletnieks_at_vt.edu Re: [RFC][PATCH 1/3] Reduce avtab node size Stephen Smalley Re: [ policycoreutils ] Resend: make restorecon print status messages to stdout Stephen Smalley Re: [RFC][PATCH 1/3] Reduce avtab node size Valdis.Kletnieks_at_vt.edu Re: [RFC][PATCH 1/3] Reduce avtab node size Stephen Smalley Re: [RFC][PATCH 1/3] Reduce avtab node size Valdis.Kletnieks_at_vt.edu [ policycoreutils ] Resend: make restorecon print status messages to stdout Ivan Gyurdiev Re: console param in kernel boot string causes deadlock Stephen Smalley Re: console param in kernel boot string causes deadlock Stephen Smalley Re: [ libsepol 10 ] Bugfixes for 0-9 Stephen Smalley Re: [ libsepol 10 ] Bugfixes for 0-9 Ivan Gyurdiev Re: [ libsepol 10 ] Bugfixes for 0-9 Stephen Smalley Re: [ libsepol 10 ] Bugfixes for 0-9 Ivan Gyurdiev [ libsepol 10 ] Bugfixes for 0-9 Ivan Gyurdiev Failed to get default security context? Pax Dickinson ANN: SELinux Policy Editor 1.0 Yuichi Nakamura Re: Sepol related questions Stephen Smalley Re: MLS dominance Stephen Smalley Re: Adding more NSCD constants Stephen Smalley Monday, 25 July Re: Iptables discussion Joshua Brindle Re: Iptables discussion Ivan Gyurdiev Re: Iptables discussion Joshua Brindle RE: Iptables discussion Chad Hanson RE: Iptables discussion Chad Hanson [RFC][PATCH 2/3] Reduce avtab node size Stephen Smalley [RFC][PATCH 3/3] Reduce avtab node size Stephen Smalley Re: Iptables discussion Ivan Gyurdiev [RFC][PATCH 1/3] Reduce avtab node size Stephen Smalley Re: Iptables discussion Joshua Brindle Re: Iptables discussion Daniel J Walsh Re: Iptables discussion Ivan Gyurdiev Re: Iptables discussion Ivan Gyurdiev Re: Iptables discussion Christopher J. PeBenito [ libsepol 9 ] remove printf from write and services Ivan Gyurdiev Re: Iptables discussion Daniel J Walsh SELinux testcase coverage Joy Latten Re: ainit Stephen Smalley Re: I have a question about log on SELinux Stephen Smalley Re: Suse selinux policy Stephen Smalley Unitialized variable in libsepol Daniel J Walsh Re: Iptables discussion James Morris Sunday, 24 July Re: Iptables discussion Casey Schaufler dynamic firewall configuration & program access control to ports Török Edvin Re: Iptables discussion James Morris RE: Iptables discussion James Morris Saturday, 23 July kudzu.fc Russell Coker Friday, 22 July Re: Iptables discussion Ivan Gyurdiev Re: Iptables discussion Ivan Gyurdiev Re: Iptables discussion Joshua Brindle Re: Iptables discussion Ivan Gyurdiev Re: Dropping unused booleans Joshua Brindle Dropping unused booleans Christopher J. PeBenito Re: Iptables discussion Joshua Brindle RE: Iptables discussion Ivan Gyurdiev RE: Iptables discussion Casey Schaufler RE: Iptables discussion Karl MacMillan Re: Iptables discussion Ivan Gyurdiev Re: Iptables discussion Jason Tang RE: Iptables discussion Ivan Gyurdiev RE: Iptables discussion Ivan Gyurdiev Re: Iptables discussion Ivan Gyurdiev Re: Iptables discussion Jason Tang [ libsepol 8/6] Cache corrections Ivan Gyurdiev RE: Iptables discussion Karl MacMillan RE: Iptables discussion Ivan Gyurdiev RE: Iptables discussion Ivan Gyurdiev RE: Iptables discussion Frank Mayer RE: Iptables discussion Karl MacMillan Re: Iptables discussion Joshua Brindle RE: Iptables discussion Casey Schaufler Re: Iptables discussion Ivan Gyurdiev [RFC][PATCH] newrole - support for polyinstantiated directories Janak Desai RE: Iptables discussion Karl MacMillan RE: Iptables discussion Karl MacMillan Re: [ libsepol 0/6] Context reorganization Joshua Brindle Re: [ libsepol 0/6] Context reorganization Ivan Gyurdiev RE: Iptables discussion Chad Hanson Re: Iptables discussion Joshua Brindle Re: Iptables discussion Joshua Brindle Re: Iptables discussion Daniel J Walsh RE: Iptables discussion Ivan Gyurdiev Re: [ libsepol 0/6] Context reorganization Joshua Brindle RE: Iptables discussion Karl MacMillan Re: [ libsepol 0/6] Context reorganization Ivan Gyurdiev Re: [ libsepol 0/6] Context reorganization Ivan Gyurdiev Re: [ libsepol 0/6] Context reorganization Joshua Brindle Re: [ libsepol 0/6] Context reorganization Ivan Gyurdiev Re: [ libsepol 0/6] Context reorganization Joshua Brindle Re: [ libsepol 0/6] Context reorganization Ivan Gyurdiev RE: Iptables discussion Ivan Gyurdiev RE: Iptables discussion Karl MacMillan RE: Iptables discussion Karl MacMillan Re: Iptables discussion Daniel J Walsh Iptables discussion Ivan Gyurdiev Thursday, 21 July Re: [ libsepol 2/6] Ports Joshua Brindle Re: [ libsepol 2/6] Ports Ivan Gyurdiev Re: [ libsepol 2/6] Ports Joshua Brindle Re: [ libsepol 2/6] Ports Ivan Gyurdiev Re: [ libsepol 2/6] Ports Joshua Brindle RE: [ libsepol 2/6] Ports Ivan Gyurdiev RE: [ libsepol 2/6] Ports Karl MacMillan Re: [ libsepol 6/6] Summary John D. Ramsdell [ libsepol 7/6] Interfaces Ivan Gyurdiev RE: [ libsepol 2/6] Ports Ivan Gyurdiev RE: [ libsepol 2/6] Ports Karl MacMillan Re: [ libsepol 3/6] Users Ivan Gyurdiev Re: [ libsepol 6/6] Summary Joshua Brindle Re: [ libsepol 6/6] Summary Ivan Gyurdiev Re: [ libsepol 1/6] Fix memory leaks Ivan Gyurdiev Re: [ libsepol 1/6] Fix memory leaks Joshua Brindle Re: [ libsepol 2/6] Ports Ivan Gyurdiev Re: [ libsepol 6/6] Summary Joshua Brindle Re: [ libsepol 0/6] Context reorganization Ivan Gyurdiev Re: [ libsepol 3/6] Users Joshua Brindle Re: [ libsepol 0/6] Context reorganization Joshua Brindle Re: [ libsepol 2/6] Ports Ivan Gyurdiev Re: [ libsepol 0/6] Context reorganization Ivan Gyurdiev Re: [ libsepol 2/6] Ports Joshua Brindle Re: [ libsepol 0/6] Context reorganization Joshua Brindle [ libsepol 6/6] Summary Ivan Gyurdiev [ libsepol 5/6] Policydb_convert in legacy Ivan Gyurdiev [ libsepol 4/6] Booleans Ivan Gyurdiev [ libsepol 3/6] Users Ivan Gyurdiev [ libsepol 2/6] Ports Ivan Gyurdiev [ libsepol 1/6] Fix memory leaks Ivan Gyurdiev [ libsepol 0/6] Context reorganization Ivan Gyurdiev Re: ainit Casey Schaufler Re: ainit Colin Walters Re: ainit Colin Walters Re: ainit Christopher J. PeBenito Re: [RFC][PATCH] polyinstantiation using process namespace Chad Sellers Re: [RFC][PATCH] polyinstantiation using process namespace Janak Desai I have a question about log on SELinux shintarou_fujiwara ainit Russell Coker Sepol related questions Ivan Gyurdiev RE: [RFC] selinux management API Ivan Gyurdiev Re: Suse selinux policy Dale Amon Wednesday, 20 July restorecon policy Russell Coker Re: SElinux nss/nscd serviceg Luke Kenneth Casson Leighton Re: SElinux nss/nscd service Luke Kenneth Casson Leighton Re: SElinux nss/nscd service Luke Kenneth Casson Leighton RE: [RFC][PATCH] polyinstantiation using process namespace Chad Sellers Re: Latest diffs Ivan Gyurdiev Re: init running at s9 by default on a MLS system? Paul Moore Re: Latest diffs Daniel J Walsh Re: init running at s9 by default on a MLS system? Paul Moore Re: SElinux nss/nscd service Ivan Gyurdiev Re: Latest diffs Ivan Gyurdiev Re: Patch: rename semod Ivan Gyurdiev Re: Patch: rename semod Joshua Brindle SELinux repository for Sarge? Thomas Bleher Re: Suse selinux policy Thomas Bleher Re: Suse selinux policy Dale Amon console param in kernel boot string causes deadlock Yevheniy Yevtushenko Re: Latest diffs Daniel J Walsh MLS dominance Frank Mayer Re: cvs and mta Junji Kanemaru Re: SElinux nss/nscd service Luke Kenneth Casson Leighton Re: SElinux nss/nscd service Ivan Gyurdiev Re: SElinux nss/nscd service Luke Kenneth Casson Leighton Tuesday, 19 July Re: Latest diffs Casey Schaufler Re: Latest diffs Daniel J Walsh RE: Latest diffs Casey Schaufler RE: Latest diffs Frank Mayer Re: Latest diffs Casey Schaufler Re: SElinux nss/nscd service Ivan Gyurdiev Re: Latest diffs Ivan Gyurdiev Re: SElinux nss/nscd service Luke Kenneth Casson Leighton RE: SElinux nss/nscd service Ivan Gyurdiev Latest diffs Daniel J Walsh RE: SElinux nss/nscd service Karl MacMillan RE: SElinux nss/nscd service Ivan Gyurdiev Patch: rename semod Ivan Gyurdiev Call for Paper - 2nd SELinux Symposium Frank Mayer RE: SElinux nss/nscd service Karl MacMillan RE: SElinux nss/nscd service Karl MacMillan RE: SElinux nss/nscd service Ivan Gyurdiev RE: SElinux nss/nscd service Karl MacMillan Re: init running at s9 by default on a MLS system? Daniel J Walsh RE: SElinux nss/nscd service Ivan Gyurdiev RE: SElinux nss/nscd service Karl MacMillan RE: init running at s9 by default on a MLS system? Chad Hanson RE: SElinux nss/nscd service Karl MacMillan Re: SElinux nss/nscd service Daniel J Walsh Re: init running at s9 by default on a MLS system? Daniel J Walsh Re: SElinux nss/nscd service Ivan Gyurdiev RE: init running at s9 by default on a MLS system? Chad Hanson Re: MCS/Targeted Policy... Casey Schaufler Adding more NSCD constants Ivan Gyurdiev RE: [RFC] selinux management API Chad Hanson Re: [RFC] selinux management API Daniel J Walsh Re: MCS/Targeted Policy... Daniel J Walsh Monday, 18 July Re: [RFC] selinux management API Joshua Brindle Re: MCS/Targeted Policy... Casey Schaufler Suse selinux policy Dale Amon RE: [RFC] selinux management API Chad Hanson RE: [RFC] selinux management API Chad Hanson Updated Policy in Sourceforge CVS James Carter Re: [RFC] selinux management API Daniel J Walsh RE: [RFC] selinux management API Ivan Gyurdiev RE: [RFC] selinux management API Chad Hanson Re: More patches Ivan Gyurdiev Re: More patches Stephen Smalley Re: Patches: libsepol Stephen Smalley Re: [PATCH] fix hierarchy checking location Stephen Smalley Re: [PATCH] Fix hierarchy checking on type rules Stephen Smalley Re: [PATCH] Makefile fixes and cleanups for selinux-usr Stephen Smalley Re: [RFC][PATCH] polyinstantiation using process namespace Janak Desai Re: MCS/Targeted Policy... James Morris Friday, 15 July [RFC][PATCH] polyinstantiation using process namespace Janak Desai Monday, 18 July Re: size limit on posts? James Carter Friday, 15 July size limit on posts? Janak Desai Re: [RFC] selinux management API Ivan Gyurdiev [PATCH 2/2] unshare system call patch - needed to test pam_namespace Janak Desai [PATCH 1/2] unshare system call patch - needed to test pam_namespace patch Janak Desai Re: [RFC] selinux management API Joshua Brindle Re: [RFC] selinux management API Ivan Gyurdiev More patches Ivan Gyurdiev Re: [RFC] selinux management API Joshua Brindle Re: [RFC] selinux management API Ivan Gyurdiev Patches: libsepol Ivan Gyurdiev Re: [RFC] selinux management API Joshua Brindle init running at s9 by default on a MLS system? Paul Moore Re: [RFC] selinux management API Ivan Gyurdiev [PATCH] fix hierarchy checking location Joshua Brindle [RFC] selinux management API Joshua Brindle Re: apache virtualhost and selinux Joshua Brindle Re: cvs and mta Junji Kanemaru apache virtualhost and selinux Alexander Kabanov Re: MCS/Targeted Policy... Casey Schaufler Thursday, 14 July Selinux testcases in LTP Joy Latten security context character set Colin Walters Re: MCS/Targeted Policy... James Morris [PATCH] Fix hierarchy checking on type rules Joshua Brindle [PATCH] Makefile fixes and cleanups for selinux-usr Joshua Brindle Re: cvs and mta Daniel J Walsh Re: cvs and mta Daniel J Walsh Re: id -Z causing some problem Tobias Nijweide id -Z causing some problem Preeti Malakar Wednesday, 13 July Re: MCS/Targeted Policy... Casey Schaufler Re: cvs and mta Junji Kanemaru Re: MCS/Targeted Policy... James Morris Re: MCS/Targeted Policy... Stephen Smalley Re: MCS/Targeted Policy... Daniel J Walsh Re: MCS/Targeted Policy... Casey Schaufler MCS/Targeted Policy... Daniel J Walsh Re: cvs and mta Daniel J Walsh cvs and mta Junji Kanemaru Tuesday, 12 July Re: port and address caches Joy Latten Re: port and address caches Joy Latten Latest Diffs Daniel J Walsh Re: port and address caches James Morris Re: port and address caches Stephen Smalley port and address caches Joy Latten Re: Useradd patchset - seeking comments.. Russell Coker Re: Ottawa Linux Symposium Stephen Smalley Monday, 11 July Updated Policy in Sourceforge CVS James Carter Re: libsemod???? Daniel J Walsh RE: libsemod???? Stephen Smalley Saturday, 9 July ANN: SLAT 2.0 John D. Ramsdell Sunday, 10 July Re: crond_t Daniel J Walsh Saturday, 9 July some problem SE Linux Preeti Malakar Friday, 8 July Re: crond_t Russell Coker RE: libsemod???? Karl MacMillan libsemod???? Daniel J Walsh Re: crond_t Daniel J Walsh crond_t Russell Coker Thursday, 7 July Latest diffs Daniel J Walsh Friday, 8 July RE: Useradd patchset - seeking comments.. Stephen Smalley Thursday, 7 July RE: Useradd patchset - seeking comments.. Karl MacMillan RE: Useradd patchset - seeking comments.. Ivan Gyurdiev RE: Useradd patchset - seeking comments.. Karl MacMillan ANN: New SELinux Reference Policy Release Christopher J. PeBenito RE: Useradd patchset - seeking comments.. Ivan Gyurdiev ANN: Dates set of Second SELinux Symposium Frank Mayer RE: Useradd patchset - seeking comments.. Karl MacMillan Should usermod restorecon HOME_DIR on role change Ivan Gyurdiev Re: Useradd patchset - seeking comments.. Ivan Gyurdiev Re: Useradd patchset - seeking comments.. Roger Brunell Wednesday, 6 July Re: Useradd patchset - seeking comments.. Ivan Gyurdiev Useradd patchset - seeking comments.. Ivan Gyurdiev Re: [PATCH] SELinux Loadable Modules Stephen Smalley RE: [RFC]Kernel Built-in IDS extension (UPDATED) Stephen Smalley Virus Scanner Policies Trevor Vaughan RE: [RFC]Kernel Built-in IDS extension (UPDATED) horietk_at_nttdata.co.jp Tuesday, 5 July RE: Groups in the alternative user solution Ivan Gyurdiev Re: Groups in the alternative user solution Daniel J Walsh Re: [RFC]Kernel Built-in IDS extension (UPDATED) Steve G RE: Groups in the alternative user solution Karl MacMillan Updated Policy in Sourceforge CVS James Carter Re: Groups in the alternative user solution Daniel J Walsh Re: Groups in the alternative user solution Colin Walters Re: Groups in the alternative user solution Daniel J Walsh Re: [RFC]Kernel Built-in IDS extension (UPDATED) Stephen Smalley Monday, 4 July [RFC]Kernel Built-in IDS extension (UPDATED) horietk_at_nttdata.co.jp Tuesday, 5 July Re: Logging of a system call Steve G Logging of a system call Paulo Silva Sunday, 3 July Libre Software Meeting 2005 Lorenzo Hernández García-Hierro Re: cgiemail and senmail policy Daniel J Walsh catman policy Russell Coker Friday, 1 July Re: SELinux auditing and NISPOM Ch 8 The UnSeen Thursday, 30 June cgiemail and senmail policy R. Steven Rainwater Re: RFC: jail functionality serue_at_us.ibm.com RE: SELinux auditing and NISPOM Ch 8 Karl MacMillan Re: wish-list item for selinux policy analyss Luke Kenneth Casson Leighton Re: Groups in the alternative user solution Casey Schaufler Re: SELinux auditing and NISPOM Ch 8 Stephen Smalley SELinux auditing and NISPOM Ch 8 Rix, Tom Re: Groups in the alternative user solution Ivan Gyurdiev Re: Groups in the alternative user solution Casey Schaufler RE: file contexts and modularity Stephen Smalley RE: file contexts and modularity Karl MacMillan Re: file contexts and modularity Stephen Smalley Re: file contexts and modularity Stephen Smalley Re: file contexts and modularity Ivan Gyurdiev RE: file contexts and modularity Stephen Smalley Re: Groups in the alternative user solution Stephen Smalley Re: Groups in the alternative user solution Ivan Gyurdiev Re: RFC: jail functionality Stephen Smalley Re: RFC: jail functionality Colin Walters Re: wish-list item for selinux policy analyss Joshua Brindle Re: security_compute_av(3) Stephen Smalley Re: crontab policy Stephen Smalley Re: idea for reducing policy size: put representation of macros in binary form Stephen Smalley Re: wish-list item for selinux policy analyss Stephen Smalley idea for reducing policy size: put representation of macros in binary form Luke Kenneth Casson Leighton Re: wish-list item for selinux policy analyss Luke Kenneth Casson Leighton Re: wish-list item for selinux policy analyss Luke Kenneth Casson Leighton Re: wish-list item for selinux policy analyss Ivan Gyurdiev Re: RFC: jail functionality Greg KH crontab policy Russell Coker Wednesday, 29 June security_compute_av(3) Russell Coker Re: wish-list item for selinux policy analyss Casey Schaufler Re: wish-list item for selinux policy analyss Casey Schaufler Re: wish-list item for selinux policy analyss Luke Kenneth Casson Leighton Re: wish-list item for selinux policy analyss Luke Kenneth Casson Leighton Re: wish-list item for selinux policy analyss Luke Kenneth Casson Leighton Re: file contexts and modularity Luke Kenneth Casson Leighton Re: file contexts and modularity Ivan Gyurdiev RE: file contexts and modularity Ivan Gyurdiev Re: file contexts and modularity Janak Desai libsepol patch to fix error message Daniel J Walsh Re: file contexts and modularity Janak Desai policycoreutils-rhat.patch Daniel J Walsh RE: file contexts and modularity Stephen Smalley Re: Execmem boolean Ivan Gyurdiev RE: file contexts and modularity Ivan Gyurdiev Re: Execmem boolean Stephen Smalley RE: file contexts and modularity Stephen Smalley Re: Execmem boolean Daniel J Walsh RE: file contexts and modularity Ivan Gyurdiev RE: file contexts and modularity Ivan Gyurdiev RE: file contexts and modularity Karl MacMillan RE: file contexts and modularity Karl MacMillan Re: Execmem boolean Stephen Smalley Re: Execmem boolean Ivan Gyurdiev RE: file contexts and modularity Stephen Smalley Re: Execmem boolean Stephen Smalley RE: file contexts and modularity Ivan Gyurdiev Re: RFC: jail functionality serue_at_us.ibm.com Re: RFC: jail functionality serue_at_us.ibm.com RE: file contexts and modularity Karl MacMillan Re: RFC: jail functionality James Morris Re: wish-list item for selinux policy analyss Ron Kuris Re: Execmem boolean Daniel J Walsh RE: file contexts and modularity Ivan Gyurdiev Re: wish-list item for selinux policy analyss Casey Schaufler Re: RFC: jail functionality Stephen Smalley RFC: jail functionality serue_at_us.ibm.com Re: Groups in the alternative user solution Stephen Smalley Re: wish-list item for selinux policy analyss Ivan Gyurdiev Re: Groups in the alternative user solution Ivan Gyurdiev Re: Groups in the alternative user solution Stephen Smalley Tuesday, 28 June wish-list item for selinux policy analyss Luke Kenneth Casson Leighton http://sourceforge.net/mailarchive/forum.php?thread_id=6364737&forum_id=35600 Luke Kenneth Casson Leighton Re: Groups in the alternative user solution Ivan Gyurdiev Re: Groups in the alternative user solution Stephen Smalley RE: file contexts and modularity Ivan Gyurdiev Groups in the alternative user solution Ivan Gyurdiev RE: file contexts and modularity Stephen Smalley RE: file contexts and modularity Karl MacMillan RE: Alternative user management approach Casey Schaufler [PATCH] SELinux Loadable Modules Joshua Brindle RE: Alternative user management approach Chad Hanson RE: file contexts and modularity Karl MacMillan RE: Alternative user management approach Frank Mayer Monday, 27 June Re: Alternative user management approach Russell Coker RE: file contexts and modularity Ivan Gyurdiev RE: file contexts and modularity Karl MacMillan Re: XML Based Policy Configuration for SELinux Junji Kanemaru RE: file contexts and modularity Ivan Gyurdiev Re: Alternative user management approach Casey Schaufler RE: file contexts and modularity Karl MacMillan Re: [PATCH] disallow * and ~ in rules Joshua Brindle Re: Alternative user management approach Joshua Brindle Re: Execmem boolean Stephen Smalley Re: Execmem boolean Ivan Gyurdiev Sunday, 26 June Re: Alternative user management approach Russell Coker Re: Alternative user management approach Casey Schaufler Re: Alternative user management approach Russell Coker Execmem boolean Ivan Gyurdiev Re: Alternative user management approach Ivan Gyurdiev Re: Alternative user management approach Casey Schaufler Re: Alternative user management approach Russell Coker Re: Alternative user management approach Russell Coker Re: Alternative user management approach Russell Coker Re: Alternative user management approach Russell Coker Saturday, 25 June Re: Alternative user management approach Daniel J Walsh Re: Alternative user management approach Ivan Gyurdiev Re: Alternative user management approach Ivan Gyurdiev Re: Alternative user management approach Casey Schaufler Re: Alternative user management approach Joshua Brindle Re: Alternative user management approach Daniel J Walsh Friday, 24 June Re: mdadm policy Daniel J Walsh Re: Alternative user management approach James Morris Re: Alternative user management approach Casey Schaufler Re: Alternative user management approach Valdis.Kletnieks_at_vt.edu Re: Alternative user management approach Stephen Smalley Re: Alternative user management approach James Morris Re: mdadm policy Stephen Smalley Re: mdadm policy Stephen Smalley RE: Alternative user management approach Stephen Smalley RE: Alternative user management approach Stephen Smalley Re: mdadm policy Ivan Gyurdiev Re: mdadm policy antoine RE: Alternative user management approach Ivan Gyurdiev RE: Alternative user management approach Stephen Smalley Re: mdadm policy Ivan Gyurdiev RE: Alternative user management approach Stephen Smalley RE: Alternative user management approach Ivan Gyurdiev RE: Alternative user management approach Karl MacMillan RE: file contexts and modularity Stephen Smalley RE: file contexts and modularity Ivan Gyurdiev RE: Alternative user management approach Karl MacMillan RE: Alternative user management approach Karl MacMillan Re: Alternative user management approach Ivan Gyurdiev RE: file contexts and modularity Stephen Smalley Re: Alternative user management approach Ivan Gyurdiev Re: Alternative user management approach Stephen Smalley Re: Alternative user management approach Stephen Smalley Re: Alternative user management approach Ivan Gyurdiev Re: Alternative user management approach Brian T. Sniffen RE: file contexts and modularity Frank Mayer Re: mdadm policy antoine RE: file contexts and modularity Ivan Gyurdiev Re: mdadm policy Ivan Gyurdiev RE: Alternative user management approach Karl MacMillan RE: Alternative user management approach Casey Schaufler RE: file contexts and modularity Casey Schaufler RE: Alternative user management approach Karl MacMillan RE: file contexts and modularity Karl MacMillan RE: file contexts and modularity Casey Schaufler Re: Alternative user management approach Casey Schaufler RE: file contexts and modularity Karl MacMillan Re: mdadm policy antoine RE: file contexts and modularity Karl MacMillan RE: file contexts and modularity Karl MacMillan RE: file contexts and modularity Ivan Gyurdiev Alternative user management approach Karl MacMillan Re: mdadm policy Colin Walters RE: file contexts and modularity Casey Schaufler RE: file contexts and modularity Ivan Gyurdiev Re: mdadm policy Ivan Gyurdiev RE: file contexts and modularity Karl MacMillan RE: file contexts and modularity Karl MacMillan RE: [PATCH] disallow * and ~ in rules Karl MacMillan Re: [PATCH] disallow * and ~ in rules Stephen Smalley Re: [PATCH] disallow * and ~ in rules Stephen Smalley Re: [PATCH] disallow * and ~ in rules Russell Coker RE: file contexts and modularity Stephen Smalley Re: general selinux questions Stephen Smalley RE: file contexts and modularity Stephen Smalley Re: [PATCH] selinux_sb_copy_data requires a whole page? Stephen Smalley Re: [PATCH] disallow * and ~ in rules Stephen Smalley Re: mdadm policy Stephen Smalley Re: mdadm policy antoine Re: [PATCH] disallow * and ~ in rules Russell Coker Re: dumb newbie questions Russell Coker RE: file contexts and modularity Ivan Gyurdiev Thursday, 23 June Re: mdadm policy Ivan Gyurdiev mdadm policy antoine Re: general selinux questions antoine RE: file contexts and modularity Ivan Gyurdiev Re: [PATCH] disallow * and ~ in rules Joshua Brindle RE: file contexts and modularity Ivan Gyurdiev Re: [PATCH] disallow * and ~ in rules Stephen Smalley Re: [PATCH] selinux_sb_copy_data requires a whole page? Eric Paris Re: [PATCH] selinux_sb_copy_data requires a whole page? James Morris RE: file contexts and modularity Karl MacMillan Re: [PATCH] disallow * and ~ in rules Joshua Brindle RE: file contexts and modularity Ivan Gyurdiev Re: [PATCH] disallow * and ~ in rules Stephen Smalley Re: [PATCH] disallow * and ~ in rules Joshua Brindle RE: file contexts and modularity Karl MacMillan RE: file contexts and modularity Ivan Gyurdiev RE: file contexts and modularity Karl MacMillan RE: file contexts and modularity Ivan Gyurdiev Re: general selinux questions Stephen Smalley RE: ANN: SELinux Reference Policy Release Karl MacMillan Re: [PATCH] disallow * and ~ in rules Stephen Smalley Re: general selinux questions Stephen Smalley Re: general selinux questions antoine RE: file contexts and modularity Karl MacMillan Re: sshd policy Ivan Gyurdiev [PATCH] selinux_sb_copy_data requires a whole page? Eric Paris Re: general selinux questions Stephen Smalley [PATCH] disallow * and ~ in rules Joshua Brindle Re: general selinux questions antoine Re: sshd policy Russell Coker Re: sshd policy Russell Coker Re: sshd policy Stephen Smalley Re: sshd policy Ivan Gyurdiev sshd policy Russell Coker local_login_t and btmp Russell Coker base_user_macros.te Russell Coker /usr/local policy patch Russell Coker ssh-keysign Russell Coker Re: http://www.securityfocus.com/columnists/334/3 James Morris Wednesday, 22 June file contexts and modularity Ivan Gyurdiev Re: XML Based Policy Configuration for SELinux Ivan Gyurdiev http://www.securityfocus.com/columnists/334/3 Luke Kenneth Casson Leighton Re: XML Based Policy Configuration for SELinux Luke Kenneth Casson Leighton Re: general selinux questions antoine Re: upgrade howto antoine Updated SELinux Release Stephen Smalley Re: need info about a paper James Morris Re: dumb newbie questions Christopher Warner Re: upgrade howto Stephen Smalley Re: upgrade howto Stephen Smalley Re: 'name_connect' undefined! Stephen Smalley Re: XML Based Policy Configuration for SELinux Joshua Brindle need info about a paper Prakash Saivasan Re: mkfs.cramfs Russell Coker Re: XML Based Policy Configuration for SELinux Luke Kenneth Casson Leighton Re: mkfs.cramfs Luke Kenneth Casson Leighton mkfs.cramfs Russell Coker Tuesday, 21 June Re: XML Based Policy Configuration for SELinux Joshua Brindle RE: ANN: SELinux Reference Policy Release Lorenzo Hernández García-Hierro RE: ANN: SELinux Reference Policy Release Karl MacMillan Re: XML Based Policy Configuration for SELinux Luke Kenneth Casson Leighton Re: XML Based Policy Configuration for SELinux Joshua Brindle Re: ANN: SELinux Reference Policy Release antoine Re: 'name_connect' undefined! Stephen Bennett upgrade howto antoine 'name_connect' undefined! antoine Re: XML Based Policy Configuration for SELinux Alex Barclay Re: XML Based Policy Configuration for SELinux Luke Kenneth Casson Leighton Re: XML Based Policy Configuration for SELinux alexander-barclay_at_utulsa.edu Re: XML Based Policy Configuration for SELinux Luke Kenneth Casson Leighton XML Based Policy Configuration for SELinux Brandon Pollet RE: [RFC]Kernel Built-in IDS extension Stephen Smalley RE: [RFC]Kernel Built-in IDS extension horietk_at_nttdata.co.jp Monday, 20 June Re: dumb newbie questions Casey Schaufler Re: dumb newbie questions Valdis.Kletnieks_at_vt.edu Re: dumb newbie questions Casey Schaufler Re: dumb newbie questions Luke Kenneth Casson Leighton Re: dumb newbie questions Luke Kenneth Casson Leighton Re: dumb newbie questions Luke Kenneth Casson Leighton Re: dumb newbie questions Luke Kenneth Casson Leighton Re: dumb newbie questions Daniel J Walsh Re: dumb newbie questions R. Steven Rainwater Re: dumb newbie questions Daniel J Walsh RE: dumb newbie questions Karl MacMillan Re: dumb newbie questions Ivan Gyurdiev Re: dumb newbie questions R. Steven Rainwater Re: dumb newbie questions Stephen Smalley Re: dumb newbie questions Stephen Smalley Re: dumb newbie questions Stephen Smalley Re: dumb newbie questions Ivan Gyurdiev Re: dumb newbie questions Ivan Gyurdiev Re: dumb newbie questions R. Steven Rainwater Re: dumb newbie questions R. Steven Rainwater Re: dumb newbie questions Ivan Gyurdiev Re: dumb newbie questions R. Steven Rainwater Re: dumb newbie questions Trevor Vaughan Sunday, 19 June Re: Useradd Integration (v. 3) Ivan Gyurdiev Saturday, 18 June Useradd Integration (v. 2) Ivan Gyurdiev Monday, 20 June watchdog policy Russell Coker Re: [RFC]Kernel Built-in IDS extension Russell Coker Re: dumb newbie questions Valdis.Kletnieks_at_vt.edu Re: dumb newbie questions Ivan Gyurdiev Sunday, 19 June Re: Useradd Integration (v. 3) Ivan Gyurdiev Re: dumb newbie questions R. Steven Rainwater Re: dumb newbie questions Casey Schaufler Re: dumb newbie questions Casey Schaufler Re: dumb newbie questions Luke Kenneth Casson Leighton Re: dumb newbie questions Luke Kenneth Casson Leighton Re: dumb newbie questions Luke Kenneth Casson Leighton Re: dumb newbie questions Casey Schaufler Re: dumb newbie questions Ivan Gyurdiev Re: dumb newbie questions Ivan Gyurdiev Re: dumb newbie questions Casey Schaufler Re: dumb newbie questions Ivan Gyurdiev SELinux not enforced, messagse while booting, please help me Preeti Malakar Re: dumb newbie questions Casey Schaufler Re: dumb newbie questions Ivan Gyurdiev Saturday, 18 June dumb newbie questions R. Steven Rainwater SE Linux play machine Russell Coker Re: Useradd Integration (v. 2) Ivan Gyurdiev Re: SELinux Integrated Logging Tool Steve G Friday, 17 June Re: SELinux Integrated Logging Tool James Morris SELinux Integrated Logging Tool Brandon Pollet Re: [RFC]Kernel Built-in IDS extension James Morris Re: [RFC]Kernel Built-in IDS extension Stephen Smalley Re: mail_client_macros.te Christopher J. PeBenito Re: [RFC]Kernel Built-in IDS extension Stephen Smalley Re: [RFC]Kernel Built-in IDS extension Lorenzo Hernández García-Hierro Re: mail_client_macros.te Stephen Smalley Re: [RFC]Kernel Built-in IDS extension Luke Kenneth Casson Leighton [RFC]Kernel Built-in IDS extension horietk_at_nttdata.co.jp Re: mail_client_macros.te Russell Coker Thursday, 16 June Re: mail_client_macros.te Daniel J Walsh Re: mail_client_macros.te Ivan Gyurdiev Re: mail_client_macros.te Russell Coker Re: mail_client_macros.te Ivan Gyurdiev rpcd.te Russell Coker mail_client_macros.te Russell Coker Re: Making libselinux depend on libsepol Ivan Gyurdiev Re: Making libselinux depend on libsepol Stephen Smalley Re: Making libselinux depend on libsepol Ivan Gyurdiev Re: Making libselinux depend on libsepol Stephen Smalley Re: Making libselinux depend on libsepol Ivan Gyurdiev Re: ANN: SELinux Reference Policy Release James Carter Re: Making libselinux depend on libsepol Stephen Smalley Making libselinux depend on libsepol Ivan Gyurdiev Re: ANN: SELinux Reference Policy Release Lorenzo Hernández García-Hierro Re: Question about integration of IPsec with SELinux? Brian T. Sniffen Re: ANN: SELinux Reference Policy Release KaiGai Kohei Re: ANN: SELinux Reference Policy Release Valdis.Kletnieks_at_vt.edu Re: ANN: SELinux Reference Policy Release Christopher J. PeBenito Re: [PATCH] devpts xattr support Darrel Goeddel Re: Step by step installation instruction Stephen Smalley Re: Step by step installation instruction hendra Re: ANN: SELinux Reference Policy Release Christopher J. PeBenito Re: ANN: SELinux Reference Policy Release KaiGai Kohei Re: Step by step installation instruction Christopher Warner Wednesday, 15 June RE: ANN: SELinux Reference Policy Release Karl MacMillan Step by step installation instruction hendra Re: Content macros v 2 (create implies read in policy) Ivan Gyurdiev Re: ANN: SELinux Reference Policy Release antoine Re: ANN: SELinux Reference Policy Release Colin Walters Re: Question about integration of IPsec with SELinux? Luke Kenneth Casson Leighton ANN: SELinux Reference Policy Release Christopher J. PeBenito Re: Content macros v 2 (create implies read in policy) Ivan Gyurdiev Re: Content macros v 2 Ivan Gyurdiev Re: Content macros v 2 (create implies read in policy) Ivan Gyurdiev Tuesday, 14 June Re: Question about integration of IPsec with SELinux? Casey Schaufler Re: Question about integration of IPsec with SELinux? Park Lee Re: Question about integration of IPsec with SELinux? Casey Schaufler Re: general selinux questions antoine Re: Question about integration of IPsec with SELinux? Park Lee Re: Content macros - request for comments Ivan Gyurdiev Re: general selinux questions Colin Walters Java & SELinux? JNI? antoine Re: general selinux questions antoine Interface between applications. (Re: [PATCH] independent with attribute declararion oeder for attachment) KaiGai Kohei Re: Question about integration of IPsec with SELinux? Trent Jaeger Re: Question about integration of IPsec with SELinux? Stephen Smalley Re: [PATCH] devpts xattr support Stephen Smalley Content macros - request for comments Ivan Gyurdiev Re: [RFC] Module language syntax Joshua Brindle Re: [RFC] Module language syntax Russell Coker Monday, 13 June Re: libsepol - users [ Patch v. 0] Ivan Gyurdiev Re: Question about integration of IPsec with SELinux? Luke Kenneth Casson Leighton Re: Question about integration of IPsec with SELinux? Casey Schaufler Re: Question about integration of IPsec with SELinux? Luke Kenneth Casson Leighton Re: Question about integration of IPsec with SELinux? Luke Kenneth Casson Leighton Re: Question about integration of IPsec with SELinux? Luke Kenneth Casson Leighton Re: [PATCH] devpts xattr support Darrel Goeddel Re: [PATCH] devpts xattr support Stephen Smalley Re: libsepol - users [ Patch v. 0] Stephen Smalley Re: libsepol - users [ Patch v. 0] Ivan Gyurdiev Re: libsepol - users [ Patch v. 0] Stephen Smalley Re: [PATCH] independent with attribute declararion oeder for attachment Stephen Smalley Re: Question about integration of IPsec with SELinux? Casey Schaufler Re: Question about integration of IPsec with SELinux? Valdis.Kletnieks_at_vt.edu Re: Question about integration of IPsec with SELinux? Stephen Smalley Re: Question about integration of IPsec with SELinux? Stephen Smalley Re: Question about integration of IPsec with SELinux? Stephen Smalley Re: Question about integration of IPsec with SELinux? Luke Kenneth Casson Leighton Sunday, 12 June Re: Question about integration of IPsec with SELinux? Valdis.Kletnieks_at_vt.edu Re: Question about integration of IPsec with SELinux? Casey Schaufler Re: Question about integration of IPsec with SELinux? Valdis.Kletnieks_at_vt.edu Re: Question about integration of IPsec with SELinux? Luke Kenneth Casson Leighton Re: Question about integration of IPsec with SELinux? Valdis.Kletnieks_at_vt.edu [owner@bugs.debian.org: Bug#249496 acknowledged by developer (Bug#249496: fixed in dpkg 1.13.9)] Luke Kenneth Casson Leighton Re: Question about integration of IPsec with SELinux? Luke Kenneth Casson Leighton Re: Question about integration of IPsec with SELinux? Valdis.Kletnieks_at_vt.edu Re: Questions about "labeled networking" and "network message" Casey Schaufler Re: Question about integration of IPsec with SELinux? Casey Schaufler Re: Question about integration of IPsec with SELinux? Casey Schaufler Questions about "labeled networking" and "network message" Park Lee Re: Question about integration of IPsec with SELinux? Park Lee Re: Question about integration of IPsec with SELinux? Park Lee Re: Question about integration of IPsec with SELinux? Park Lee Re: [PATCH] independent with attribute declararion oeder for attachment KaiGai Kohei Re: Question about integration of IPsec with SELinux? Luke Kenneth Casson Leighton Re: Question about integration of IPsec with SELinux? Luke Kenneth Casson Leighton Re: [PATCH] independent with attribute declararion oeder for attachment Joshua Brindle Re: Question about integration of IPsec with SELinux? Valdis.Kletnieks_at_vt.edu Re: Question about integration of IPsec with SELinux? Valdis.Kletnieks_at_vt.edu [PATCH] independent with attribute declararion oeder for attachment KaiGai Kohei Re: Question about integration of IPsec with SELinux? Luke Kenneth Casson Leighton Saturday, 11 June Re: Question about integration of IPsec with SELinux? Park Lee Re: Question about integration of IPsec with SELinux? Casey Schaufler Re: Question about integration of IPsec with SELinux? Valdis.Kletnieks_at_vt.edu Re: Question about integration of IPsec with SELinux? Park Lee RE: Restorecon script Ivan Gyurdiev RE: Restorecon script Karl MacMillan Fwd: Re: Bringing interfaces up at boot and SElinux (?) Russell Coker RE: Nested Booleans Karl MacMillan RE: Restorecon script Karl MacMillan Re: Question about integration of IPsec with SELinux? Casey Schaufler Question about integration of IPsec with SELinux? Park Lee Friday, 10 June Re: Restorecon script Luke Kenneth Casson Leighton Re: Restorecon script Luke Kenneth Casson Leighton Re: Restorecon script Casey Schaufler Re: Nested Booleans Ivan Gyurdiev Nested Booleans Ivan Gyurdiev Re: Restorecon script Valdis.Kletnieks_at_vt.edu Re: Restorecon script Luke Kenneth Casson Leighton Re: libsepol - users [ Patch v. 0] Ivan Gyurdiev Re: Restorecon script Ivan Gyurdiev Re: Restorecon script Ivan Gyurdiev RE: Restorecon script Ivan Gyurdiev Re: Restorecon script Luke Kenneth Casson Leighton RE: Restorecon script Ivan Gyurdiev RE: Restorecon script Karl MacMillan Re: Restorecon script Luke Kenneth Casson Leighton Re: Restorecon script Valdis.Kletnieks_at_vt.edu RE: Restorecon script Karl MacMillan RE: Restorecon script Joshua Brindle RE: Restorecon script Ivan Gyurdiev Re: Restorecon script Ivan Gyurdiev RE: Restorecon script Ivan Gyurdiev Re: Restorecon script Luke Kenneth Casson Leighton Re: general selinux questions Stephen Smalley Re: general selinux questions Stephen Smalley RE: Restorecon script Karl MacMillan RE: Restorecon script Karl MacMillan Re: general selinux questions antoine RE: Restorecon script Karl MacMillan RE: Restorecon script Ivan Gyurdiev RE: Restorecon script Ivan Gyurdiev RE: Restorecon script Karl MacMillan RE: Restorecon script Stephen Smalley RE: Restorecon script Karl MacMillan Re: Restorecon script Ivan Gyurdiev RE: Restorecon script Ivan Gyurdiev Re: Restorecon script Ivan Gyurdiev Re: Restorecon script Ivan Gyurdiev RE: Restorecon script Stephen Smalley RE: Restorecon script Karl MacMillan Re: Restorecon script Ivan Gyurdiev Re: Restorecon script Ivan Gyurdiev Re: Restorecon script Stephen Smalley Re: Restorecon script Joshua Brindle Re: Restorecon script Stephen Smalley Re: Restorecon script Stephen Smalley Re: Restorecon script Stephen Smalley Re: general selinux questions Stephen Smalley Re: general selinux questions antoine Re: general selinux questions Stephen Smalley Re: general selinux questions antoine Re: Restorecon script Steve G Re: http://www.golden-gryphon.com/software/security/selinux.xhtml va, manoj Thursday, 9 June Re: [uml-devel] 2.6.12-rc6-mm1 patches testing Blaisorblade Friday, 10 June Re: [uml-devel] 2.6.12-rc6-mm1 patches testing Stephen Smalley Re: general selinux questions Jayendren Anand Maduray Thursday, 9 June Re: Restorecon script Ivan Gyurdiev Re: Restorecon script Joshua Brindle Re: http://www.golden-gryphon.com/software/security/selinux.xhtml antoine Re: http://www.golden-gryphon.com/software/security/selinux.xhtml Luke Kenneth Casson Leighton Re: Bug#312714 acknowledged by developer (Re: Bug#312714: initrd-tools: swsuspend requires an extra line in order to avoid filesystem corruption) Luke Kenneth Casson Leighton Re: http://www.golden-gryphon.com/software/security/selinux.xhtml antoine Re: [uml-devel] 2.6.12-rc6-mm1 patches testing Stephen Smalley http://www.golden-gryphon.com/software/security/selinux.xhtml Luke Kenneth Casson Leighton Re: Labeling confusion with apt-get/dpkg Luke Kenneth Casson Leighton Re: Labeling confusion with apt-get/dpkg Luke Kenneth Casson Leighton Re: libsepol - users [ Patch v. 0] Ivan Gyurdiev libsepol - users [ Patch v. 0] Ivan Gyurdiev Re: general selinux questions Stephen Smalley Re: Bonobo Stephen Smalley Re: general selinux questions Stephen Smalley Re: [uml-devel] 2.6.12-rc6-mm1 patches testing antoine Restorecon script Ivan Gyurdiev Re: [Patch 1/3] Loadable policy module infrastructure Stephen Smalley Re: general selinux questions antoine Wednesday, 8 June Re: [Fwd: Unable to create files when using "context"option for NFS] Daniel J Walsh general selinux questions antoine Re: Labeling confusion with apt-get/dpkg Manoj Srivastava Re: Labeling confusion with apt-get/dpkg Manoj Srivastava Re: Labeling confusion with apt-get/dpkg Manoj Srivastava Re: Dynamic Policy Enforcement in SELinux Brandon Pollet Re: Dynamic Policy Enforcement in SELinux Brandon Pollet Re: Dynamic Policy Enforcement in SELinux James Morris Re: [Fwd: Unable to create files when using "context"option for NFS] Stephen Smalley [Fwd: Unable to create files when using "context"option for NFS] Daniel J Walsh RE: couple validatetrans questions Frank Mayer RE: couple validatetrans questions Stephen Smalley Re: Dynamic Policy Enforcement in SELinux Stephen Smalley Tuesday, 7 June RE: couple validatetrans questions James Morris RE: Dynamic Policy Enforcement in SELinux Frank Mayer RE: couple validatetrans questions Frank Mayer Monday, 6 June Dynamic Policy Enforcement in SELinux brandon-pollet_at_utulsa.edu Re: Question about assurance? Park Lee Re: fork rules Arpan Darivemula Re: fork rules Arpan Darivemula RE: couple validatetrans questions Frank Mayer Re: Question about assurance? Stephen Smalley Re: Question about assurance? Park Lee Re: Question about assurance? Stephen Smalley Re: Policy Logic vs. Policy component? Stephen Smalley Re: fork rules Stephen Smalley Sunday, 5 June dhcp policy Russell Coker Re: fork rules Valdis.Kletnieks_at_vt.edu Re: Question about assurance? Park Lee fork rules Arpan Darivemula Re: Question about assurance? Lorenzo Hernández García-Hierro Question about assurance? Park Lee Policy Logic vs. Policy component? Park Lee Friday, 3 June Bonobo Ivan Gyurdiev Re: Labeling confusion with apt-get/dpkg Valdis.Kletnieks_at_vt.edu Re: Labeling confusion with apt-get/dpkg Roger Brunell Re: Labeling confusion with apt-get/dpkg Luke Kenneth Casson Leighton Re: Labeling confusion with apt-get/dpkg Roger Brunell Re: Labeling confusion with apt-get/dpkg Luke Kenneth Casson Leighton Labeling confusion with apt-get/dpkg Roger Brunell Wednesday, 1 June Re: SELinux on Arm? Valdis.Kletnieks_at_vt.edu SELinux on Arm? Mike Anderson Re: [Patch 1/3] Loadable policy module infrastructure Joshua Brindle Polgen 1.1 is now available Brian T. Sniffen Re: [Patch 1/3] Loadable policy module infrastructure Stephen Smalley Re: [Patch 2/3] Loadable policy module infrastructure Joshua Brindle Re: [Patch 2/3] Loadable policy module infrastructure Stephen Smalley Re: file_type_auto_trans is not sufficient Stephen Smalley Tuesday, 31 May Re: file_type_auto_trans is not sufficient Luke Kenneth Casson Leighton Re: file_type_auto_trans is not sufficient Chad Sellers Re: gentoo/hardened Luke Kenneth Casson Leighton Re: smaller memory footprint for 'strict' policy - helping gentoo as well Luke Kenneth Casson Leighton Re: file_type_auto_trans is not sufficient Luke Kenneth Casson Leighton Re: file_type_auto_trans is not sufficient Luke Kenneth Casson Leighton Re: file_type_auto_trans is not sufficient Luke Kenneth Casson Leighton Re: smaller memory footprint for 'strict' policy - helping gentoo as well Luke Kenneth Casson Leighton Re: [Patch 1/3] Loadable policy module infrastructure Stephen Smalley Re: [Patch 1/3] Loadable policy module infrastructure Joshua Brindle Re: [Patch 1/3] Loadable policy module infrastructure Joshua Brindle Re: [Patch 1/3] Loadable policy module infrastructure Stephen Smalley Updated Policy in Sourceforge CVS James Carter Re: [Patch 1/3] Loadable policy module infrastructure Joshua Brindle Re: [Patch 1/3] Loadable policy module infrastructure Stephen Smalley RE: file_type_auto_trans is not sufficient Ivan Gyurdiev RE: file_type_auto_trans is not sufficient Stephen Smalley RE: file_type_auto_trans is not sufficient Ivan Gyurdiev RE: file_type_auto_trans is not sufficient Stephen Smalley RE: file_type_auto_trans is not sufficient Ivan Gyurdiev RE: file_type_auto_trans is not sufficient Karl MacMillan Re: [Patch 1/3] Loadable policy module infrastructure Stephen Smalley Re: gentoo/hardened Casey Schaufler Re: file_type_auto_trans is not sufficient Ivan Gyurdiev RE: file_type_auto_trans is not sufficient Ivan Gyurdiev Sunday, 29 May [ PATCH ]: evolution/thunderbird/gconf/orbit/other stuff - comments? Ivan Gyurdiev Tuesday, 31 May RE: file_type_auto_trans is not sufficient Karl MacMillan Re: smaller memory footprint for 'strict' policy - helping gentoo as well Valdis.Kletnieks_at_vt.edu Re: file_type_auto_trans is not sufficient Stephen Smalley Re: smaller memory footprint for 'strict' policy - helping gentoo as well Valdis.Kletnieks_at_vt.edu Re: gentoo/hardened Valdis.Kletnieks_at_vt.edu Re: file_type_auto_trans is not sufficient Stephen Smalley Re: file_type_auto_trans is not sufficient Ivan Gyurdiev Re: file_type_auto_trans is not sufficient Stephen Smalley Re: gentoo/hardened Stephen Bennett Re: smaller memory footprint for 'strict' policy - helping gentoo as well Luke Kenneth Casson Leighton Re: gentoo/hardened Luke Kenneth Casson Leighton courier policy Russell Coker Re: gentoo/hardened Chris PeBenito Monday, 30 May Re: smaller memory footprint for 'strict' policy - helping gentoo as well Joshua Brindle smaller memory footprint for 'strict' policy - helping gentoo as well Luke Kenneth Casson Leighton Re: gentoo/hardened Luke Kenneth Casson Leighton Re: gentoo/hardened Chris PeBenito Re: file_type_auto_trans is not sufficient Ivan Gyurdiev Sunday, 29 May Re: file_type_auto_trans is not sufficient Ivan Gyurdiev gentoo/hardened Luke Kenneth Casson Leighton Re: file_type_auto_trans is not sufficient Ivan Gyurdiev On building a smaller 'strict' policy. Valdis.Kletnieks_at_vt.edu dhcpc_t and privuser Russell Coker Re: file_type_auto_trans is not sufficient Daniel J Walsh Re: Strange trace - tty problems Russell Coker Saturday, 28 May Re: file_type_auto_trans is not sufficient Ivan Gyurdiev Re: file_type_auto_trans is not sufficient Daniel J Walsh latest diffs Daniel J Walsh Friday, 27 May Re: file_type_auto_trans is not sufficient Ivan Gyurdiev file_type_auto_trans is not sufficient Ivan Gyurdiev Re: [RFC] Module language syntax Luke Kenneth Casson Leighton Re: [RFC] Module language syntax Joshua Brindle Re: [RFC] Module language syntax Luke Kenneth Casson Leighton [RFC] Module language syntax Joshua Brindle Thursday, 26 May [Patch 3/3] Loadable policy module infrastructure Joshua Brindle [Patch 2/3] Loadable policy module infrastructure Joshua Brindle [Patch 1/3] Loadable policy module infrastructure Joshua Brindle [Patch 0/3] Loadable policy module infrastructure Joshua Brindle Tuesday, 24 May Re: A few performance results serue_at_us.ibm.com Re: A few performance results James Morris Re: A few performance results serue_at_us.ibm.com Re: couple validatetrans questions Stephen Smalley couple validatetrans questions Frank Mayer Re: A few performance results James Morris A few performance results serue_at_us.ibm.com Re: Moving target -- kernel version. Stephen Smalley Re: Moving target -- kernel version. Roger Brunell Re: Moving target -- kernel version. Luke Kenneth Casson Leighton Re: Moving target -- kernel version. Luke Kenneth Casson Leighton Re: Moving target -- kernel version. Stephen Smalley Moving target -- kernel version. Roger Brunell Re: depinit Valdis.Kletnieks_at_vt.edu Monday, 23 May Re: depinit Luke Kenneth Casson Leighton Updated Policy in Sourceforge CVS James Carter Re: Time estimate to create Debian enforceable policy Luke Kenneth Casson Leighton Re: depinit Luke Kenneth Casson Leighton Re: depinit Valdis.Kletnieks_at_vt.edu Re: depinit Valdis.Kletnieks_at_vt.edu Re: Time estimate to create Debian enforceable policy Valdis.Kletnieks_at_vt.edu Re: Time estimate to create Debian enforceable policy Roger Brunell Sunday, 22 May Re: depinit Luke Kenneth Casson Leighton Monday, 23 May Time estimate to create Debian enforceable policy Roger Brunell Sunday, 22 May Re: depinit Luke Kenneth Casson Leighton Re: depinit Chris PeBenito Re: depinit Kurt Wall depinit Luke Kenneth Casson Leighton pppd.fc Russell Coker Thursday, 19 May Re: Latest Diff Ivan Gyurdiev Re: [RFC]{Patch 5/5] Polyinstantation Chad Sellers Re: [RFC]{Patch 4/5] Polyinstantation Chad Sellers Re: [RFC]{Patch 3/5] Polyinstantation Chad Sellers Re: [RFC]{Patch 2/5] Polyinstantation Chad Sellers Re: [RFC]{Patch 1/5] Polyinstantation Chad Sellers Re: [RFC]{Patch 0/5] Polyinstantation Chad Sellers Latest Diff Daniel J Walsh [ANN] SETools-2.1.1 release Joshua Brindle Re: targeted policy patch Serge Hallyn Re: targeted policy patch Stephen Smalley targeted policy patch Serge Hallyn Wednesday, 18 May Re: [Fwd: load_policy problem] Russell Coker [Fwd: load_policy problem] Daniel J Walsh Tuesday, 17 May RE: policy directory structure - Debian and Tresys tools Karl MacMillan RE: policy directory structure - Debian and Tresys tools Roger Brunell Re: Busted by constraints. Daniel J Walsh Re: Busted by constraints. Stephen Smalley Re: Busted by constraints. Stephen Smalley Re: Busted by constraints. Stephen Smalley Monday, 16 May Re: Busted by constraints. Daniel J Walsh Re: Busted by constraints. Stephen Smalley dead types (was: crond_log_t) Christopher J. PeBenito Re: bash: cd: /etc/selinux/strict/users/: No such file or directory Stephen Smalley crond_log_t Russell Coker bluetooth policy patch Russell Coker Re: fixfiles and lost+found Steve G Re: ls -Z on non-SE machine Stephen Smalley bash: cd: /etc/selinux/strict/users/: No such file or directory Roger Brunell Re: ls -Z on non-SE machine Russell Coker Re: ls -Z on non-SE machine Stephen Smalley Sunday, 15 May Re: ls -Z on non-SE machine Luke Kenneth Casson Leighton Re: fixfiles and lost+found Russell Coker Re: policy change needed for screen Russell Coker Re: ls -Z on non-SE machine Russell Coker Re: ls -Z on non-SE machine Luke Kenneth Casson Leighton Re: ls -Z on non-SE machine Ivan Gyurdiev Re: ls -Z on non-SE machine Luke Kenneth Casson Leighton ls -Z on non-SE machine Russell Coker initrc.fc patch Russell Coker fixfiles and lost+found Russell Coker postfix policy patch Russell Coker Friday, 13 May RE: policy directory structure - Debian and Tresys tools Karl MacMillan Updated Policy in Sourceforge CVS James Carter Re: Busted by constraints. Stephen Smalley Re: Busted by constraints. Stephen Smalley setfiles and relabeling Russell Coker Re: Busted by constraints. Casey Schaufler Re: Busted by constraints. Stephen Smalley Re: Busted by constraints. Stephen Smalley Re: Busted by constraints. Casey Schaufler Re: Busted by constraints. Stephen Smalley Re: Policy 1.22 Presentation? Stephen Smalley Policy 1.22 Presentation? Roger Brunell Re: [RFC]{Patch 0/5] Polyinstantation Stephen Smalley Re: Busted by constraints. Stephen Smalley Re: [RFC]{Patch 0/5] Polyinstantation Daniel J Walsh Makefile patch for policy Russell Coker Re: [RFC]{Patch 0/5] Polyinstantation Valdis.Kletnieks_at_vt.edu Re: [RFC]{Patch 0/5] Polyinstantation Russell Coker Thursday, 12 May Re: Busted by constraints. Casey Schaufler Re: policy directory structure - Debian and Tresys tools Stephen Smalley policy directory structure - Debian and Tresys tools Roger Brunell Re: Busted by constraints. Daniel J Walsh Re: Busted by constraints. Stephen Smalley Busted by constraints. Daniel J Walsh Re: [RFC]{Patch 0/5] Polyinstantation Chad Sellers Re: Strange trace - tty problems Stephen Smalley Re: [RFC]{Patch 0/5] Polyinstantation Stephen Smalley Re: [selinux] [RFC]{Patch 0/5] Polyinstantation Magosányi Árpád Strange trace - tty problems Ivan Gyurdiev Wednesday, 11 May Re: [RFC]{Patch 0/5] Polyinstantation Daniel J Walsh Re: [RFC]{Patch 0/5] Polyinstantation Chad Sellers Re: [RFC]{Patch 0/5] Polyinstantation Daniel J Walsh Re: [RFC]{Patch 0/5] Polyinstantation Casey Schaufler Re: [RFC]{Patch 0/5] Polyinstantation Timothy R. Chavez Re: [RFC]{Patch 0/5] Polyinstantation Casey Schaufler Re: [RFC]{Patch 0/5] Polyinstantation Chad Sellers Re: [RFC]{Patch 0/5] Polyinstantation Janak Desai Re: [RFC]{Patch 0/5] Polyinstantation Casey Schaufler [RFC]{Patch 5/5] Polyinstantation Chad Sellers [RFC]{Patch 4/5] Polyinstantation Chad Sellers [RFC]{Patch 3/5] Polyinstantation Chad Sellers [RFC]{Patch 2/5] Polyinstantation Chad Sellers [RFC]{Patch 1/5] Polyinstantation Chad Sellers [RFC]{Patch 0/5] Polyinstantation Chad Sellers Re: [Fwd: Latest Diff] Stephen Smalley Tuesday, 10 May Re: [selinux] HOWTO Install SELinux on Ubuntu Lorenzo Hernandez Garcia-Hierro Re: [selinux] HOWTO Install SELinux on Ubuntu Brian T. Sniffen Monday, 9 May Re: [Fwd: Latest Diff] Ivan Gyurdiev Re: [Fwd: Latest Diff] Daniel J Walsh Re: [Fwd: Latest Diff] Ivan Gyurdiev Re: [Fwd: Latest Diff] Daniel J Walsh Re: [Fwd: Latest Diff] Ivan Gyurdiev Re: [Fwd: Latest Diff] Daniel J Walsh Re: [ PATCHES ] mozilla, gift, games, orbit, gconf, genhomedircon Ivan Gyurdiev telnetd policy Russell Coker kudzu policy patch Russell Coker xdm/gpg policy patch Russell Coker [ PATCHES ] mozilla, gift, games, orbit, gconf, genhomedircon Ivan Gyurdiev Re: gentoo diffs Russell Coker Sunday, 8 May Re: gentoo diffs petre rodan Re: gentoo diffs Russell Coker rdisc policy Russell Coker policy change needed for screen Russell Coker Saturday, 7 May Re: [Fwd: Latest Diff] Russell Coker Re: [Fwd: Latest Diff] Ivan Gyurdiev Re: [Fwd: Latest Diff] Ivan Gyurdiev Re: [Fwd: Latest Diff] Russell Coker gentoo diffs petre rodan Friday, 6 May Updated Policy in Sourceforge CVS James Carter Re: [Fwd: Latest Diff] Ivan Gyurdiev Re: [Fwd: Latest Diff] Russell Coker Re: [Fwd: Latest Diff] Daniel J Walsh Re: [Fwd: Latest Diff] Daniel J Walsh Re: [Fwd: Latest Diff] Russell Coker Thursday, 5 May Re: [Fwd: Latest Diff] Ivan Gyurdiev Re: [Fwd: Latest Diff] Russell Coker Re: [Fwd: Latest Diff] Ivan Gyurdiev [Fwd: Latest Diff] Daniel J Walsh Re: attributes on the other end of a network connection Stephen Smalley Wednesday, 4 May policy for games Russell Coker Re: attributes on the other end of a network connection Kodungallur Varma restorecon policy Russell Coker postfix policy patch Russell Coker Tuesday, 3 May [selinux] HOWTO Install SELinux on Ubuntu Lorenzo Hernández García-Hierro Monday, 2 May Re: How should we handle automount. Daniel J Walsh Re: How should we handle automount. Stephen Smalley Re: Updated Policy in Sourceforge CVS James Carter How should we handle automount. Daniel J Walsh Saturday, 30 April Re: Restrict Home v. 4 Ivan Gyurdiev Friday, 29 April Re: Restrict Home v. 3 Ivan Gyurdiev Saturday, 30 April su policy Russell Coker Friday, 29 April Restrict Home v. 2 Ivan Gyurdiev Updated Policy in Sourceforge CVS James Carter MLS permission map Frank Mayer ANN: Policy management server Joshua Brindle RE: Is there a SELinux tutorial for ISVs ? Karl MacMillan Wednesday, 27 April Latest diffs. Daniel J Walsh Thursday, 28 April policy for afs server (v2) selinux_at_reisse.net RE: Is there a SELinux tutorial for ISVs ? Karl MacMillan RE: Is there a SELinux tutorial for ISVs ? Karl MacMillan RE: Is there a SELinux tutorial for ISVs ? Chad Hanson Re: Is there a SELinux tutorial for ISVs ? Stephen Smalley Re: Is there a SELinux tutorial for ISVs ? Lorenzo Hernández García-Hierro Re: Is there a SELinux tutorial for ISVs ? Daniel J Walsh Re: [RFC][PATCH 1/2] Further SELinux restrictions on mprotect Stephen Smalley Wednesday, 27 April Re: [RFC][PATCH 1/2] Further SELinux restrictions on mprotect Lorenzo Hernández García-Hierro Re: [RFC][PATCH 1/2] Further SELinux restrictions on mprotect Lorenzo Hernández García-Hierro Re: /tmp Ivan Gyurdiev [PATCH] runcon "-c" transition option Chad Hanson Re: [RFC][PATCH 1/2] Further SELinux restrictions on mprotect Stephen Smalley Re: /tmp Ivan Gyurdiev /tmp Ivan Gyurdiev Re: Signal problem Stephen Smalley Tuesday, 26 April Re: Signal problem Chris Wright Re: Signal problem Steve G Re: Signal problem Chris Wright Re: Signal problem Steve G Re: Signal problem Chris Wright Re: Signal problem Chris Wright Re: Signal problem Stephen Smalley Re: Signal problem Stephen Smalley Signal problem Steve G Monday, 25 April Small patch to udev.te Paul Moore Re: New policy for DCC Russell Coker Re: Strange audit messages - whitespace Chris Wright A small patch for auditd.te Paul Moore Re: Strange audit messages - whitespace Stephen Smalley Re: Strange audit messages - whitespace Steve G Re: Strange audit messages - whitespace Stephen Smalley Re: New policy for DCC David Hampton portmap policy Russell Coker fsadm_t policy patch Russell Coker cdrecord policy patch Russell Coker Sunday, 24 April Re: Strange audit messages - whitespace Steve G Saturday, 23 April Strange audit messages - whitespace Ivan Gyurdiev Re: [ PATCH ] Cumulative patch - various fixes, untrusted_content_t, mozilla, gnome types Ivan Gyurdiev Friday, 22 April Re: Sugg. for SELinux enabled Interpreters Luke Kenneth Casson Leighton Re: Cleanup of chkpwd and su macros Russell Coker Re: Tweaks to the amavis policy Russell Coker Re: SELinux Policy Editor and CAP_SYS_BOOT Russell Coker Re: sshd transition points (user@ip or net_context with setcon) Russell Coker Re: Sugg. for SELinux enabled Interpreters Russell Coker Re: ssh problems when no pty allocated Russell Coker A small patch for auditd.te Paul Moore Re: Cleanup of chkpwd and su macros James Carter Updated Policy in Sourceforge CVS James Carter Re: policy hierarchy patch Joshua Brindle Re: Tweaks to the amavis policy Daniel J Walsh Re: This weeks diffs Russell Coker Re: Tweaks to the clamav policy Russell Coker Re: Tweaks to the amavis policy Russell Coker Re: Updates to amavisd [patch] Russell Coker Re: Updates to dcc [patch] Russell Coker Thursday, 21 April Re: pppd Patch for PPTPClient Russell Coker Re: Cleanup of chkpwd and su macros Russell Coker Re: New policy for tripwire Russell Coker Re: New policy for DCC Russell Coker Re: selinux-policy-mls is now available for your testing pleasure. Paul Moore Re: selinux-policy-mls is now available for your testing pleasure. Paul Moore I added back in matchpathcon to libselinux rpm. Daniel J Walsh Re: Cleanup of chkpwd and su macros James Carter Re: [Fwd: Re: Experiences with selinux enabled targetted on Fedora Core 3] Daniel J Walsh Re: Latest diffs Daniel J Walsh Re: [Fwd: Re: Experiences with selinux enabled targetted on Fedora Core 3] Stephen Smalley [Fwd: Re: Experiences with selinux enabled targetted on Fedora Core 3] Richard Hally [owner@bugs.debian.org: Bug#283372 acknowledged by developer (Bug#283372: fixed in wdm 1.28-1)] Luke Kenneth Casson Leighton Wednesday, 20 April Re: Cleanup of chkpwd and su macros Russell Coker Re: Latest diffs Daniel J Walsh Re: Experiences with selinux enabled targetted on Fedora Core 3 Russell Coker Re: latest diff Russell Coker Re: Latest diffs Russell Coker This weeks diffs Daniel J Walsh Re: selinux-policy-mls is now available for your testing pleasure. Paul Moore Re: selinux-policy-mls is now available for your testing pleasure. jrdesai18-tech_at_yahoo.com [RFC][PATCH 2/2] Further SELinux restrictions on mprotect Lorenzo Hernández García-Hierro [RFC][PATCH 1/2] Further SELinux restrictions on mprotect Lorenzo Hernández García-Hierro Re: selinux-policy-mls is now available for your testing pleasure. Stephen Smalley Re: selinux-policy-mls is now available for your testing pleasure. Paul Moore Re: selinux-policy-mls is now available for your testing pleasure. Paul Moore Re: selinux-policy-mls is now available for your testing pleasure. Daniel J Walsh Cleanup of chkpwd and su macros James Carter Re: selinux-policy-mls is now available for your testing pleasure. Paul Moore CVS Policy on Sourceforge Updated James Carter Re: selinux-policy-mls is now available for your testing pleasure. Paul Moore Re: attributes on the other end of a network connection Stephen Smalley Re: selinux-policy-mls is now available for your testing pleasure. Stephen Smalley Re: Experiences with selinux enabled targetted on Fedora Core 3 Richard Hally linux.conf.au Russell Coker Tuesday, 19 April Re: attributes on the other end of a network connection James Morris attributes on the other end of a network connection Kodungallur Varma Re: Problems with SElinux and MySQL accessing file on /tmp Jason Re: Problems with SElinux and MySQL accessing file on /tmp Russell Coker Re: Proposed policy feature: $1_domain attribute Russell Coker Re: selinux-policy-mls is now available for your testing pleasure. James Morris Re: selinux-policy-mls is now available for your testing pleasure. Paul Moore Re: Problems with SElinux and MySQL accessing file on /tmp Daniel J Walsh Re: I am attempting to add a secadm_r Russell Coker Re: I am attempting to add a secadm_r Russell Coker Monday, 18 April Problems with SElinux and MySQL accessing file on /tmp Jason Re: [POLICY/PATCH] IA-64 Boot Partition Russell Coker named strict policy Russell Coker [ANN] SETools-2.1.0 release Joshua Brindle Re: Be labeled with SID or security context? James Morris Re: [POLICY/PATCH] IA-64 Boot Partition Stephen Smalley Re: [RFC & PATCH] inherited type definition. KaiGai Kohei Re: [POLICY/PATCH] IA-64 Boot Partition KaiGai Kohei Be labeled with SID or security context? Park Lee Re: [POLICY/PATCH] IA-64 Boot Partition Stephen Smalley Re: [RFC & PATCH] inherited type definition. Stephen Smalley Sunday, 17 April postgrey policy Russell Coker Re: [ PATCH ] Cumulative patch - various fixes, untrusted_content_t, mozilla, gnome types Russell Coker Re: [ PATCH ] Cumulative patch - various fixes, untrusted_content_t, mozilla, gnome types Luke Kenneth Casson Leighton Re: [ PATCH ] Cumulative patch - various fixes, untrusted_content_t, mozilla, gnome types Russell Coker Saturday, 16 April Re: [POLICY/PATCH] IA-64 Boot Partition Christopher J. PeBenito Re: [POLICY/PATCH] IA-64 Boot Partition KaiGai Kohei Re: [POLICY/PATCH] IA-64 Boot Partition Christopher J. PeBenito Re: [RFC & PATCH] inherited type definition. KaiGai Kohei [POLICY/PATCH] IA-64 Boot Partition KaiGai Kohei Friday, 15 April selinux-policy-mls is now available for your testing pleasure. Daniel J Walsh Re: Question: ROLE_file_type vs customizable Daniel J Walsh Re: Question: ROLE_file_type vs customizable Daniel J Walsh Re: [ PATCH ] restrict_home Daniel J Walsh Re: dcache_lock deadlock due to auditing serue_at_us.ibm.com Re: dcache_lock deadlock due to auditing Stephen Smalley Re: dcache_lock deadlock due to auditing serue_at_us.ibm.com Re: make install fails if any users are in local.users Stephen Smalley Re: make install fails if any users are in local.users Ivan Gyurdiev Re: [ PATCH ] restrict_home Ivan Gyurdiev Thursday, 14 April [ PATCH ] restrict_home Ivan Gyurdiev Re: You mentioned somewhere there is a step by step guide to getting the MLS policy installed on a machine? James Morris Re: You mentioned somewhere there is a step by step guide to getting the MLS policy installed on a machine? Luke Kenneth Casson Leighton Webalizer [patch] David Hampton Updates to yam [patch] David Hampton Updates to razor [patch] David Hampton Updates to dcc [patch] David Hampton Updates to clamav [patch] David Hampton Updates to amavisd [patch] David Hampton Description of the httpdcontent attribute [patch] David Hampton RE: dcache_lock deadlock due to auditing Stephen Smalley Latest diffs Daniel J Walsh Re: You mentioned somewhere there is a step by step guide to getting the MLS policy installed on a machine? Stephen Smalley RE: dcache_lock deadlock due to auditing Steve G Re: You mentioned somewhere there is a step by step guide to getting the MLS policy installed on a machine? Paul Moore Question: ROLE_file_type vs customizable Ivan Gyurdiev RE: dcache_lock deadlock due to auditing Karl MacMillan RE: dcache_lock deadlock due to auditing Daniel H Jones RE: dcache_lock deadlock due to auditing Stephen Smalley RE: dcache_lock deadlock due to auditing Karl MacMillan Re: dcache_lock deadlock due to auditing Stephen Smalley Re: Provide finer-grained booleans for execmem/execmod, please Stephen Smalley Sourceforge Policy Updated James Carter Re: Latest Patch James Carter Re: Provide finer-grained booleans for execmem/execmod, please Daniel J Walsh Wednesday, 13 April dcache_lock deadlock due to auditing Serge Hallyn Thursday, 14 April Provide finer-grained booleans for execmem/execmod, please Stephen Smalley Re: policy hierarchy patch Stephen Smalley Re: load_policy with latest strict policy Stephen Smalley load_policy with latest strict policy Russell Coker ntpdate policy Russell Coker Re: dhcpd policy settings Russell Coker Wednesday, 13 April Re: [ PATCH ] Cumulative patch - various fixes, untrusted_content_t, mozilla, gnome types Ivan Gyurdiev [ PATCH ] Cumulative patch - various fixes, untrusted_content_t, mozilla, gnome types Ivan Gyurdiev Re: policy hierarchy patch Stephen Smalley Re: policy hierarchy patch Stephen Smalley Re: selinux-policy-targeted (1:1.22-2) available Lorenzo Hernández García-Hierro Tuesday, 12 April Strict policy gettting stricter. Daniel J Walsh Re: inode_doinit_with_dentry messages Russell Coker Re: inode_doinit_with_dentry messages Stephen Smalley Re: inode_doinit_with_dentry messages Russell Coker Re: inode_doinit_with_dentry messages Russell Coker Re: inode_doinit_with_dentry messages Stephen Smalley Re: inode_doinit_with_dentry messages James Morris inode_doinit_with_dentry messages Russell Coker Re: named policy patch Russell Coker Re: dhcpd policy settings Daniel J Walsh Re: named policy patch Daniel J Walsh named policy patch Russell Coker Re: audit2 in FC4T2 Russell Coker Re: getfattr works, but getfilecon doesn't Stephen Smalley Re: dhcpd policy settings Stephen Smalley audit2 in FC4T2 Russell Coker Re: dhcpd policy settings Junji Kanemaru dhcpd policy settings Junji Kanemaru Monday, 11 April Re: getfattr works, but getfilecon doesn't Nigel Cunningham Re: policy hierarchy patch Darrel Goeddel Re: policy for afs server James Carter Re: getfattr works, but getfilecon doesn't Stephen Smalley Re: getfattr works, but getfilecon doesn't Stephen Smalley Friday, 8 April Re: policy hierarchy patch Joshua Brindle Saturday, 9 April Re: patch: cleanup old typealiases Thomas Bleher Friday, 8 April patch: file-contexts fixes Thomas Bleher patch: cleanup old typealiases Thomas Bleher Re: SELinux packages for SuSE 9.2 Thomas Bleher getfattr works, but getfilecon doesn't Nigel Cunningham Re: What's the pronunciation of "SELinux"? Wolfgang Pfeiffer Re: setfiles segfault Stephen Smalley Re: SELinux packages for SuSE 9.2 Stephen Smalley Re: What's the pronunciation of "SELinux"? Mark Davies Re: What's the pronunciation of "SELinux"? Bradley Chapman Re: What's the pronunciation of "SELinux"? Tom Re: What's the pronunciation of "SELinux"? Russell Coker What's the pronunciation of "SELinux"? Park Lee Thursday, 7 April RE: I am attempting to add a secadm_r Chad Hanson setfiles segfault Chris PeBenito SELinux packages for SuSE 9.2 Paul Dwerryhouse Re: policy hierarchy patch Darrel Goeddel Re: policy hierarchy patch Joshua Brindle Re: I am attempting to add a secadm_r Stephen Smalley Re: I am attempting to add a secadm_r Daniel J Walsh Re: I am attempting to add a secadm_r Luke Kenneth Casson Leighton Looking for the last CIPSO draft Paul Moore Re: I am attempting to add a secadm_r Stephen Smalley Re: I am attempting to add a secadm_r Luke Kenneth Casson Leighton Re: More patches James Carter Re: More patches James Carter Re: I am attempting to add a secadm_r Stephen Smalley Re: I am attempting to add a secadm_r Stephen Smalley Re: I am attempting to add a secadm_r Stephen Smalley Re: I am attempting to add a secadm_r Stephen Smalley Re: I am attempting to add a secadm_r Luke Kenneth Casson Leighton Re: policy hierarchy patch Darrel Goeddel I am attempting to add a secadm_r Daniel J Walsh Re: More patches Stephen Smalley Re: policy hierarchy patch Stephen Smalley Wednesday, 6 April Re: [RFC & PATCH] inherited type definition. Kaigai Kohei Re: More patches Ivan Gyurdiev Re: policy hierarchy patch Darrel Goeddel Re: More patches James Carter Re: More patches Ivan Gyurdiev Re: More patches Daniel J Walsh Re: More patches Ivan Gyurdiev Re: [RFC & PATCH] inherited type definition. Jim McCullough Re: [RFC & PATCH] inherited type definition. Luke Kenneth Casson Leighton Re: [RFC & PATCH] inherited type definition. Russell Coker Re: [RFC & PATCH] inherited type definition. KaiGai Kohei Re: build fixes for selinux-doc-1.18 Stephen Smalley Re: build fixes for selinux-doc-1.18 Stephen Smalley Re: [RFC & PATCH] inherited type definition. Russell Coker Re: More patches Daniel J Walsh Re: More patches Daniel J Walsh Re: More patches James Carter More patches Daniel J Walsh Extended attributes on RAMFS. Nigel Cunningham Re: [ PATCH ] X clients cleanup Patch #3 Ivan Gyurdiev Re: [ PATCH ] X clients cleanup Patch #3 Ivan Gyurdiev Tuesday, 5 April Re: policy hierarchy patch Darrel Goeddel Re: [ PATCH ] X clients cleanup Patch #3 Ivan Gyurdiev Re: New Policy Patch Ivan Gyurdiev Re: New Policy Patch James Carter Re: build fixes for selinux-doc-1.18 Andreas Steinmetz Re: build fixes for selinux-doc-1.18 Stephen Smalley Re: build fixes for selinux-doc-1.18 Andreas Steinmetz Re: policy hierarchy patch Joshua Brindle Re: New policy for DCC James Carter Re: New policy for pyzor James Carter Re: New policy for razor James Carter Re: Tweaks to the amavis policy James Carter Re: Tweaks to the clamav policy James Carter Re: Additions to net_contexts James Carter Re: selinux without sysvinit Russell Coker Monday, 4 April Re: policy hierarchy patch Darrel Goeddel Re: build fixes for selinux-doc-1.18 Stephen Smalley Re: New Policy Patch Daniel J Walsh Re: New Policy Patch Ivan Gyurdiev Re: policy hierarchy patch Joshua Brindle Re: New Policy Patch Ivan Gyurdiev New Policy Patch Daniel J Walsh Re: policy hierarchy patch Stephen Smalley policy hierarchy patch Joshua Brindle Re: /dev/pts/x use denials Stephen Smalley Re: /dev/pts/x use denials Daniel J Walsh Re: fix setfiles segfault caused by libselinux-1.22 Stephen Smalley Re: fix for segfault in getconlist of libselinux-1.22 Stephen Smalley Re: /dev/pts/x use denials Ivan Gyurdiev Re: shell based replacement for genhomedircon Stephen Smalley Re: /dev/pts/x use denials Stephen Smalley Re: /dev/pts/x use denials Daniel J Walsh fix setfiles segfault caused by libselinux-1.22 Andreas Steinmetz Re: hal - denials Stephen Smalley build fixes for selinux-doc-1.18 Andreas Steinmetz Sunday, 3 April Re: Desktop apps interoperability Casey Schaufler Re: /dev/pts/x use denials Ivan Gyurdiev /dev/pts/x use denials Ivan Gyurdiev shell based replacement for genhomedircon Andreas Steinmetz fix for segfault in getconlist of libselinux-1.22 Andreas Steinmetz Saturday, 2 April hal - denials Ivan Gyurdiev Re: [ PATCH ] X clients cleanup Patch #3 Ivan Gyurdiev Re: conferences Russell Coker Re: [ PATCH ] X clients cleanup Patch #3 Russell Coker Re: [ PATCH ] X clients cleanup Patch #3 Daniel J Walsh Friday, 1 April [ PATCH ] X clients cleanup Patch #3 Ivan Gyurdiev Re: Desktop apps interoperability Casey Schaufler Re: [patch] tighten fetchmail policy Greg Norris Re: [patch] tighten fetchmail policy James Carter Re: patch: cleanup uses of notdevfile_class_set James Carter Re: patch: Use etc_domain() where possible James Carter Re: patch: change var_lib_DOMAIN_t to DOMAIN_var_lib_t James Carter Re: patch: Cleanup policy for /var/lock James Carter Re: Policy Patch James Carter Re: Cron /null fd:use use denials Daniel J Walsh Ottawa Linux Symposium Stephen Smalley Re: Desktop apps interoperability Tom Re: Question about customizing apache policy. petre rodan Re: Desktop apps interoperability Rogelio Serrano Thursday, 31 March Re: Further X client cleanups..questions Ivan Gyurdiev Further X client cleanups..questions Ivan Gyurdiev Re: Desktop apps interoperability Stephen Smalley Re: Desktop apps interoperability Tom userhelper + xauth files - staff vs sysadm Ivan Gyurdiev Re: Logrotate, ssh_agent - read selinux_config_t Stephen Smalley Re: Logrotate, ssh_agent - read selinux_config_t Daniel J Walsh Re: Logrotate, ssh_agent - read selinux_config_t Stephen Smalley Re: Logrotate, ssh_agent - read selinux_config_t Ivan Gyurdiev RE: Question about customizing apache policy. Karl MacMillan Re: Logrotate, ssh_agent - read selinux_config_t Stephen Smalley Re: Cron /null fd:use use denials Stephen Smalley Logrotate, ssh_agent - read selinux_config_t Ivan Gyurdiev Cron /null fd:use use denials Ivan Gyurdiev Re: Desktop apps interoperability Stephen Smalley Mozilla Denials Question Ivan Gyurdiev Question about customizing apache policy. Daniel J Walsh Re: Desktop apps interoperability Ivan Gyurdiev Re: Desktop apps interoperability Casey Schaufler Re: Desktop apps interoperability Stephen Smalley Re: Desktop apps interoperability Casey Schaufler Re: Getting the real task name in avc messages Stephen Smalley Re: Getting the real task name in avc messages Darrel Goeddel Re: Getting the real task name in avc messages Stephen Smalley Re: Getting the real task name in avc messages Steve G Re: Getting the real task name in avc messages Stephen Smalley Re: Getting the real task name in avc messages Stephen Smalley Re: Selinux checkpolicy parse error Stephen Smalley Re: Desktop apps interoperability Ivan Gyurdiev Re: Desktop apps interoperability Luke Kenneth Casson Leighton Re: Desktop apps interoperability Ivan Gyurdiev Re: Desktop apps interoperability Ivan Gyurdiev Re: Desktop apps interoperability Ivan Gyurdiev Re: Desktop apps interoperability Tom Wednesday, 30 March Re: Getting the real task name in avc messages Darrel Goeddel Re: Selinux checkpolicy parse error Christopher Warner Re: Getting the real task name in avc messages James Morris Re: Desktop apps interoperability Luke Kenneth Casson Leighton Re: Desktop apps interoperability Luke Kenneth Casson Leighton Re: Desktop apps interoperability Luke Kenneth Casson Leighton Re: Desktop apps interoperability Tom Re: Getting the real task name in avc messages Stephen Smalley Re: Getting the real task name in avc messages Stephen Smalley Re: Getting the real task name in avc messages Steve G Re: Getting the real task name in avc messages James Morris Re: Getting the real task name in avc messages Stephen Smalley Getting the real task name in avc messages Steve G Re: Desktop apps interoperability Jim McCullough Re: Desktop apps interoperability Stephen Smalley Re: Desktop apps interoperability Casey Schaufler Re: Desktop apps interoperability Casey Schaufler Re: Desktop apps interoperability Ivan Gyurdiev Re: Desktop apps interoperability Casey Schaufler Re: Desktop apps interoperability Stephen Smalley Re: Desktop apps interoperability Luke Kenneth Casson Leighton Re: Desktop apps interoperability Casey Schaufler patch: cleanup uses of notdevfile_class_set Thomas Bleher patch: Use etc_domain() where possible Thomas Bleher patch: change var_lib_DOMAIN_t to DOMAIN_var_lib_t Thomas Bleher Re: Desktop apps interoperability Ivan Gyurdiev patch: Cleanup policy for /var/lock Thomas Bleher Re: Desktop apps interoperability Casey Schaufler Re: Desktop apps interoperability Ivan Gyurdiev Re: Desktop apps interoperability Casey Schaufler Re: problems using setcon() Stephen Smalley Monday, 28 March Re: [ PATCH ] X clients cleanup patch #2 Russell Coker Wednesday, 30 March Re: Desktop apps interoperability Ivan Gyurdiev Tuesday, 29 March Re: problems using setcon() Kodungallur Varma Re: setools-1.5.1 Joshua Brindle [patch] tighten fetchmail policy Greg Norris RE: setools-1.5.1 Karl MacMillan Re: Selinux checkpolicy parse error Christopher Warner Policy Patch Daniel J Walsh RE: setools-1.5.1 James R. Marcus Re: setools-1.5.1 Stephen Smalley Re: Selinux checkpolicy parse error Stephen Smalley Selinux checkpolicy parse error Christopher Warner setools-1.5.1 James R. Marcus Re: Desktop apps interoperability Colin Walters Re: problems using setcon() Stephen Smalley Re: Desktop apps interoperability Stephen Smalley Re: Desktop apps interoperability Dale Amon Monday, 28 March Re: problems using setcon() Kodungallur Varma Re: Desktop apps interoperability Stephen Smalley Re: Desktop apps interoperability Luke Kenneth Casson Leighton Re: [ PATCH ] hal - create netlink socket James Morris Re: Desktop apps interoperability Stephen Smalley Re: Desktop apps interoperability Luke Kenneth Casson Leighton SELinux Policy Editor Update Yuichi Nakamura Re: [ PATCH ] hal - create netlink socket Stephen Smalley Re: [ PATCH ] hal - create netlink socket Ivan Gyurdiev Re: [ PATCH ] hal - create netlink socket Stephen Smalley Re: [ PATCH ] hal - create netlink socket Ivan Gyurdiev Re: Desktop apps interoperability Casey Schaufler Re: Desktop apps interoperability Stephen Smalley Re: Desktop apps interoperability Tom Re: [ PATCH ] hal - create netlink socket Stephen Smalley Re: Desktop apps interoperability Stephen Smalley Re: [ PATCH ] hal - create netlink socket Ivan Gyurdiev Re: Desktop apps interoperability Tom Re: Desktop apps interoperability Tom Re: Desktop apps interoperability Stephen Smalley Re: Desktop apps interoperability Ivan Gyurdiev Re: Desktop apps interoperability Tom Re: Desktop apps interoperability Stephen Smalley Re: Desktop apps interoperability Stephen Smalley Re: Desktop apps interoperability Ivan Gyurdiev Re: [ PATCH ] hal - create netlink socket Stephen Smalley Re: Desktop apps interoperability Tom Re: Desktop apps interoperability Ivan Gyurdiev Re: Desktop apps interoperability Tom Re: Desktop apps interoperability Rogelio Serrano Re: Desktop apps interoperability Luke Kenneth Casson Leighton Re: Desktop apps interoperability Luke Kenneth Casson Leighton Re: Desktop apps interoperability Ivan Gyurdiev Re: Desktop apps interoperability Ivan Gyurdiev Sunday, 27 March Desktop apps interoperability Ivan Gyurdiev Re: [ PATCH ] X clients cleanup patch #2 Ivan Gyurdiev [ PATCH ] X clients cleanup patch #2 Ivan Gyurdiev selinux-policy-targeted (1:1.22-3) available Lorenzo Hernández García-Hierro Re: selinux-policy-targeted (1:1.22-2) available Lorenzo Hernández García-Hierro Re: selinux-policy-targeted (1:1.22-2) available Dale Amon [ PATCH ] hal - create netlink socket Ivan Gyurdiev Saturday, 26 March Re: selinux-policy-targeted (1:1.22-2) available Colin Walters selinux-policy-targeted (1:1.22-2) available Lorenzo Hernández García-Hierro Friday, 25 March [Ubuntu SELinux] Linux-PAM-0.78, cron, checkpolicy, libselinux, libsepol, logrotate, sysvinit Lorenzo Hernández García-Hierro Re: [RFC] selinux-support (1.0.1) available Colin Walters Re: [RFC] selinux-support (1.0.1) available Lorenzo Hernández García-Hierro Re: [RFC] selinux-support (1.0.1) available Lorenzo Hernández García-Hierro Re: [RFC] selinux-support (1.0.1) available Lorenzo Hernández García-Hierro Re: [RFC] selinux-support (1.0.1) available Luke Kenneth Casson Leighton Re: New policy for pyzor David Hampton Re: [RFC] selinux-support (1.0.1) available Colin Walters Re: I would like to propose some kind of consolidation of tmpfs_t and tmp_t Daniel J Walsh Re: [RFC] selinux-support (1.0.1) available Lorenzo Hernández García-Hierro Re: [RFC] selinux-support (1.0.1) available Stephen Smalley Re: [RFC] selinux-support (1.0.1) available Stephen Smalley Re: I would like to propose some kind of consolidation of tmpfs_t and tmp_t Stephen Smalley Thursday, 24 March [RFC] selinux-support (1.0.1) available Lorenzo Hernández García-Hierro Re: [RFC & PATCH] inherited type definition. Luke Kenneth Casson Leighton Re: [RFC & PATCH] inherited type definition. Luke Kenneth Casson Leighton Re: I would like to propose some kind of consolidation of tmpfs_t and tmp_t Luke Kenneth Casson Leighton Re: Do you trust X server? Tom Re: Do you trust X server? Casey Schaufler Re: Do you trust X server? Tom Re: I would like to propose some kind of consolidation of tmpfs_t and tmp_t Daniel J Walsh Re: setsebool problems Daniel J Walsh Re: setsebool problems Stephen Smalley setsebool problems Daniel J Walsh Re: I would like to propose some kind of consolidation of tmpfs_t and tmp_t Stephen Smalley Re: I would like to propose some kind of consolidation of tmpfs_t and tmp_t Stephen Smalley Re: I would like to propose some kind of consolidation of tmpfs_t and tmp_t Stephen Smalley I would like to propose some kind of consolidation of tmpfs_t and tmp_t Daniel J Walsh Re: [RFC & PATCH] inherited type definition. Kaigai Kohei Re: [RFC & PATCH] inherited type definition. Kaigai Kohei Re: [RFC & PATCH] inherited type definition. Luke Kenneth Casson Leighton Re: [RFC & PATCH] inherited type definition. Luke Kenneth Casson Leighton Re: New policy for pyzor Luke Kenneth Casson Leighton Wednesday, 23 March Re: New policy for pyzor David Hampton Re: New policy for pyzor James Carter Re: Latest diff. James Carter Re: You mentioned somewhere there is a step by step guide to getting the MLS policy installed on a machine? Stephen Smalley Re: [RFC & PATCH] inherited type definition. Stephen Smalley Re: You mentioned somewhere there is a step by step guide to getting the MLS policy installed on a machine? Daniel J Walsh Re: latest diff Stephen Smalley Re: Reloading Policy? Stephen Smalley Re: You mentioned somewhere there is a step by step guide to getting the MLS policy installed on a machine? Stephen Smalley Re: latest diff Thomas Bleher Re: [RFC & PATCH] inherited type definition. Kaigai Kohei Reloading Policy? John Buwa Tuesday, 22 March You mentioned somewhere there is a step by step guide to getting the MLS policy installed on a machine? Daniel J Walsh Re: Latest diff. Daniel J Walsh Latest diff. Daniel J Walsh Re: [PATCH] don't do pointless NULL checks and casts before kfree() in security/ Stephen Smalley RE: [RFC & PATCH] inherited type definition. Karl MacMillan Monday, 21 March New policy for DCC David Hampton New policy for pyzor David Hampton New policy for razor David Hampton Re: [RFC & PATCH] inherited type definition. Luke Kenneth Casson Leighton Re: latest diff James Carter Re: [RFC & PATCH] inherited type definition. Stephen Smalley RE: [RFC & PATCH] inherited type definition. Karl MacMillan Re: [RFC & PATCH] inherited type definition. KaiGai Kohei Sunday, 20 March Re: [RFC & PATCH] inherited type definition. Luke Kenneth Casson Leighton RE: [RFC & PATCH] inherited type definition. Karl MacMillan Saturday, 19 March Re: latest diff Daniel J Walsh Re: latest diff Christopher J. PeBenito latest diff Daniel J Walsh Friday, 18 March Re: [RFC & PATCH] inherited type definition. Luke Kenneth Casson Leighton Re: concerns about object-inheritance wrt files/directories Luke Kenneth Casson Leighton RE: [RFC & PATCH] inherited type definition. Karl MacMillan Re: Do you trust X server? Valdis.Kletnieks_at_vt.edu Re: Do you trust X server? Casey Schaufler Re: Do you trust X server? Daniel J Walsh RE: [RFC & PATCH] inherited type definition. Stephen Smalley RE: [RFC & PATCH] inherited type definition. Stephen Smalley Re: Do you trust X server? Stephen Smalley Re: Do you trust X server? Tom Re: Do you trust X server? Valdis.Kletnieks_at_vt.edu Thursday, 17 March Do you trust X server? Jun OKAJIMA RE: [RFC & PATCH] inherited type definition. Karl MacMillan Re: Need functions to manipulare users file. Stephen Smalley Need functions to manipulare users file. Daniel J Walsh RE: [RFC & PATCH] inherited type definition. Stephen Smalley Re: New policy for yam Daniel J Walsh RE: [RFC & PATCH] inherited type definition. Karl MacMillan Re: make install fails if any users are in local.users Stephen Smalley Re: [RFC & PATCH] inherited type definition. KaiGai Kohei Re: [RFC & PATCH] inherited type definition. Stephen Smalley Re: [RFC & PATCH] inherited type definition. Kaigai Kohei Re: [RFC & PATCH] inherited type definition. Kaigai Kohei Wednesday, 16 March RE: [RFC & PATCH] inherited type definition. Karl MacMillan RE: [RFC & PATCH] inherited type definition. Karl MacMillan Re: make install fails if any users are in local.users Eric Paris Re: make install fails if any users are in local.users Stephen Smalley Re: make install fails if any users are in local.users Colin Walters Re: [RFC & PATCH] inherited type definition. Stephen Smalley Re: concerns about object-inheritance wrt files/directories Stephen Smalley concerns about object-inheritance wrt files/directories Luke Kenneth Casson Leighton Re: make install fails if any users are in local.users Stephen Smalley Tweaks to the dovecot policy David Hampton Tweaks to the amavis policy David Hampton Tweaks to the clamav policy David Hampton Additions to net_contexts David Hampton Re: [RFC & PATCH] inherited type definition. Luke Kenneth Casson Leighton Re: [RFC & PATCH] inherited type definition. Luke Kenneth Casson Leighton Tuesday, 15 March Re: [RFC & PATCH] inherited type definition. Kaigai Kohei Re: [RFC & PATCH] inherited type definition. Kaigai Kohei Re: New policy for yam David Hampton Re: Patch: Policy for NX server James Carter Re: gentoo policies for daemontools, ucspi-tcp, publicfile, djbdns, clockspeed James Carter Re: restorecon read symlink Ivan Gyurdiev Re: [RFC & PATCH] inherited type definition. Stephen Smalley Re: restorecon read symlink Stephen Smalley restorecon read symlink Ivan Gyurdiev Re: make install fails if any users are in local.users Stephen Smalley Re: Manual pages for utilities in libsepol Stephen Smalley Re: New policy for yam Daniel J Walsh Re: Latest patches Daniel J Walsh RE: [RFC & PATCH] inherited type definition. Karl MacMillan Re: make install fails if any users are in local.users Stephen Smalley Re: Latest patches Stephen Smalley Re: [RFC & PATCH] inherited type definition. KaiGai Kohei Re: [RFC & PATCH] inherited type definition. KaiGai Kohei make install fails if any users are in local.users Ivan Gyurdiev Monday, 14 March Re: user_trans/user_trans_boolean macro Ivan Gyurdiev Re: user_trans/user_trans_boolean macro Daniel J Walsh Re: user_trans/user_trans_boolean macro Stephen Smalley Re: [RFC & PATCH] inherited type definition. Stephen Smalley Re: Latest patches James Carter Re: user_trans/user_trans_boolean macro Ivan Gyurdiev Re: user_trans/user_trans_boolean macro Ivan Gyurdiev Re: user_trans/user_trans_boolean macro Stephen Smalley Re: user_trans/user_trans_boolean macro Ivan Gyurdiev Re: [2.6 patch] selinux: cleanups Stephen Smalley Re: [RFC & PATCH] inherited type definition. Valdis.Kletnieks_at_vt.edu Re: user_trans/user_trans_boolean macro Ivan Gyurdiev Re: user_trans/user_trans_boolean macro Stephen Smalley Re: user_trans/user_trans_boolean macro Stephen Smalley Re: [RFC & PATCH] inherited type definition. Stephen Smalley Re: user_trans/user_trans_boolean macro Ivan Gyurdiev Re: user_trans/user_trans_boolean macro Ivan Gyurdiev Re: user_trans/user_trans_boolean macro Ivan Gyurdiev Re: [RFC & PATCH] inherited type definition. Luke Kenneth Casson Leighton Re: user_trans/user_trans_boolean macro Stephen Smalley Re: [RFC & PATCH] inherited type definition. KaiGai Kohei Re: user_trans/user_trans_boolean macro Ivan Gyurdiev RE: [RFC & PATCH] inherited type definition. Karl MacMillan Re: [RFC & PATCH] inherited type definition. Luke Kenneth Casson Leighton Re: [RFC & PATCH] inherited type definition. Stephen Smalley Re: problems using setcon() Stephen Smalley Re: [RFC & PATCH] inherited type definition. Luke Kenneth Casson Leighton Re: sysadm home label Russell Coker Re: [RFC & PATCH] inherited type definition. Stephen Smalley Re: sysadm home label Stephen Smalley Re: [RFC & PATCH] inherited type definition. KaiGai Kohei Re: user_trans/user_trans_boolean macro Stephen Smalley Re: user_trans/user_trans_boolean macro Stephen Smalley Sunday, 13 March [RFC & PATCH] inherited type definition. KaiGai Kohei user_trans/user_trans_boolean macro Ivan Gyurdiev sysadm home label Ivan Gyurdiev Saturday, 12 March New policy for yam David Hampton New policy for tripwire David Hampton Manual pages for utilities in libsepol Manoj Srivastava Friday, 11 March Re: problems using setcon() Kodungallur Varma Latest patches Daniel J Walsh Re: Policy for giFT p2p Luke Kenneth Casson Leighton Relationship between Security server and Security Policy Database? Park Lee Thursday, 10 March Re: Latest policy Thomas Bleher Re: *SPAM* Re: Latest policy Daniel J Walsh Re: Latest policy James Carter genhomedircon cleanup Daniel J Walsh Re: [patch 1/1] SELinux AVC audit log ipaddr field support (for task_struct->curr_ip) Stephen Smalley [patch 1/1] SELinux AVC audit log ipaddr field support (for task_struct->curr_ip) Lorenzo Hernández García-Hierro Re: Issue on getting security context of socket and message Stephen Smalley Re: Question about packet_socket class? Stephen Smalley Re: Issue on getting security context of socket and message Park Lee Question about packet_socket class? Park Lee Wednesday, 9 March Updated SELinux Release Stephen Smalley Selinux symposium presentations Frank Mayer Re: memory access restrictions Stephen Smalley memory access restrictions Mark Davies Latest policy Daniel J Walsh Re: problems using setcon() Thomas Bleher Tuesday, 8 March problems using setcon() Kodungallur Varma Re: Question regarding SELinux and IPsec Kodungallur Varma Re: shm denials Ivan Gyurdiev Fw: Question regarding SELinux and IPsec Trent Jaeger Question regarding SELinux and IPsec Paul Moore Monday, 7 March Policy for giFT p2p Ivan Gyurdiev Re: conferences Karsten Wade Re: Question - dac_override/dac_read_search Stephen Smalley Re: conferences Greg Norris Re: SELinux Design Documentation Stephen Smalley SELinux Design Documentation Casey Schaufler RE: Proposed policy feature: $1_domain attribute Karl MacMillan RE: Proposed policy feature: $1_domain attribute Karl MacMillan RE: Proposed policy feature: $1_domain attribute Karl MacMillan Re: conferences Stephen Smalley Re: new user domain (FC3) Stephen Smalley Re: SELinux - FC Project Daniel J Walsh Sunday, 6 March Re: conferences Shyaam Sundhar Rajamadam Srinivasan Re: conferences Dale Amon conferences Russell Coker Saturday, 5 March bootup problem Marco Morales Barrera Friday, 4 March Re: new user domain (FC3) Valdis.Kletnieks_at_vt.edu Re: Proposed policy feature: $1_domain attribute Ivan Gyurdiev new user domain (FC3) Holger Burde Question - dac_override/dac_read_search Ivan Gyurdiev Thursday, 3 March Re: Fedora policies on Gentoo? petre rodan Re: Fwd: Compromise of SHA1 and SElinux Valdis.Kletnieks_at_vt.edu Wednesday, 2 March x_client_domain: reducing privileges - suspect rules Ivan Gyurdiev Tuesday, 1 March Re: Proposed policy feature: $1_domain attribute Ivan Gyurdiev Re: Proposed policy feature: $1_domain attribute Ivan Gyurdiev Re: Proposed policy feature: $1_domain attribute Stephen Smalley Re: Proposed policy feature: $1_domain attribute Ivan Gyurdiev Re: Proposed policy feature: $1_domain attribute Stephen Smalley Re: Proposed policy feature: $1_domain attribute Ivan Gyurdiev Re: writing zero bytes in bash Stephen Smalley Re: Proposed policy feature: $1_domain attribute Stephen Smalley Re: Proposed policy feature: $1_domain attribute Thomas Bleher Re: Proposed policy feature: $1_domain attribute Ivan Gyurdiev Re: Proposed policy feature: $1_domain attribute Stephen Smalley Re: Proposed policy feature: $1_domain attribute Stephen Smalley Re: Proposed policy feature: $1_domain attribute Ivan Gyurdiev Re: writing zero bytes in bash Stephen Smalley Re: Proposed policy feature: $1_domain attribute Stephen Smalley Re: writing zero bytes in bash Stephen Smalley Proposed policy feature: $1_domain attribute Ivan Gyurdiev Re: security files - why not sysadmfile Luke Kenneth Casson Leighton Problem with BackupPC and selinux - FC# Daniela Gradim Re: [ PATCH ] home_domain macro / x_client cleanup patch Ivan Gyurdiev Monday, 28 February [ANN] Setools 2.0 released Karl MacMillan Re: writing zero bytes in bash Russell Coker Re: RFE: inheritance Stephen Smalley Re: security files - why not sysadmfile Stephen Smalley Re: security files - why not sysadmfile Ivan Gyurdiev Re: RFE: inheritance Stephen Smalley Re: security files - why not sysadmfile Stephen Smalley Re: RFE: inheritance Ivan Gyurdiev Re: security files - why not sysadmfile Ivan Gyurdiev Re: RFE: inheritance Stephen Smalley Re: security files - why not sysadmfile Stephen Smalley Re: writing zero bytes in bash Stephen Smalley Re: writing zero bytes in bash Stephen Smalley Re: Strange staff role problems... Stephen Smalley Re: [ PATCH ] home_domain macro / x_client cleanup patch Ivan Gyurdiev Problem with mount context. Daniel J Walsh Re: Mozilla content handlers Ivan Gyurdiev Sunday, 27 February Re: Compromise of SHA1 and SElinux todd glassey Re: Compromise of SHA1 and SElinux Valdis.Kletnieks_at_vt.edu Re: Compromise of SHA1 and SElinux Lorenzo Hernández García-Hierro Re: missing features in user-land tools Lorenzo Hernández García-Hierro Re: [ PATCH ] home_domain macro / x_client cleanup patch Ivan Gyurdiev Compromise of SHA1 and SElinux todd glassey Re: Assigning user context to files out of home dir. Bartlomiej Balcerek Re: RFE: inheritance Luke Kenneth Casson Leighton Re: writing zero bytes in bash Luke Kenneth Casson Leighton Saturday, 26 February writing zero bytes in bash Russell Coker Re: writing zero bytes in bash Russell Coker Re: writing zero bytes in bash Russell Coker Re: writing zero bytes in bash Russell Coker RFE: inheritance Ivan Gyurdiev missing features in user-land tools Russell Coker [ PATCH ] home_domain macro / x_client cleanup patch Ivan Gyurdiev security files - why not sysadmfile Ivan Gyurdiev Re: writing zero bytes in bash Russell Coker Re: writing zero bytes in bash Russell Coker Friday, 25 February Re: [PATCH][SELINUX] 3/7 Add node controls James Morris Re: [PATCH][SELINUX] 3/7 Add node controls Park Lee Isson on meaning of local socket in ... Park Lee Re: Fedora policies on Gentoo? petre rodan RE: Fedora policies on Gentoo? Simpson, Richard Fedora policies on Gentoo? bjorn.padding_at_ifsav.nl Read_sysctl macro Ivan Gyurdiev Patch's to make load_policy (and libsepol) be quiet. Daniel J Walsh Re: Strange staff role problems... Daniel J Walsh Re: Assigning user context to files out of home dir. Russell Coker Thursday, 24 February Re: Strange staff role problems... Ivan Gyurdiev Re: [Fwd: New policy patch] James Carter Re: policycoreutils fixes Stephen Smalley Wednesday, 23 February Re: What's the purpose of labeling packets Stephen Smalley Re: Question of purpose of labeling port numbers? Stephen Smalley What's the purpose of labeling packets Park Lee Question of purpose of labeling port numbers? Park Lee Exim and SELinux David Woodhouse Re: fc3 - password change problem - syslog and portmapper Jayendren Anand Maduray Re: Strange staff role problems... Stephen Smalley Re: Strange staff role problems... Daniel J Walsh Re: Strange staff role problems... Stephen Smalley Re: Strange staff role problems... Daniel J Walsh Re: [RFC][PATCH] Pass requested protection to security_file_mmap/mprotect hooks Stephen Smalley Re: [RFC][PATCH] Pass requested protection to security_file_mmap/mprotect hooks Stephen Smalley policycoreutils fixes Daniel J Walsh Re: Strange staff role problems... Stephen Smalley Assigning user context to files out of home dir. Bartlomiej Balcerek Re: fc3 - password change problem - syslog and portmapper Jayendren Anand Maduray Re: fc3 - password change problem - syslog and portmapper Jayendren Anand Maduray Tuesday, 22 February Strange staff role problems... Ivan Gyurdiev Mplayer: PT_GNU_STACK RWE Ivan Gyurdiev Mplayer: PT_GNU_STACK RWE Ivan Gyurdiev Re: [RFC][PATCH] Pass requested protection to security_file_mmap/mprotect hooks Chris Wright Re: JFFS2 Extended attributes support & SELinux in handhelds Lorenzo Hernández García-Hierro Re: [RFC][PATCH] Pass requested protection to security_file_mmap/mprotect hooks Chris Wright Re: [RFC][PATCH] Pass requested protection to security_file_mmap/mprotect hooks James Morris Re: [RFC][PATCH] Pass requested protection to security_file_mmap/mprotect hooks Stephen Smalley Re: [RFC][PATCH] Pass requested protection to security_file_mmap/mprotect hooks Colin Walters Re: [RFC][PATCH] Pass requested protection to security_file_mmap/mprotect hooks Stephen Smalley Re: [RFC][PATCH] Pass requested protection to security_file_mmap/mprotect hooks Colin Walters [RFC][PATCH] Pass requested protection to security_file_mmap/mprotect hooks Stephen Smalley Re: idr_remove Lorenzo Hernández García-Hierro JFFS2 Extended attributes support & SELinux in handhelds Lorenzo Hernández García-Hierro Re: sshd transition points (user@ip or net_context with setcon) Stephen Smalley Re: sshd transition points (user@ip or net_context with setcon) Luke Kenneth Casson Leighton Re: PT_GNU_STACK RWE Stephen Smalley Re: sshd transition points (user@ip or net_context with setcon) Stephen Smalley Re: Access_terminal + ioctl Stephen Smalley Re: PT_GNU_STACK RWE Stephen Smalley Re: What is typealias and typeattribute KaiGai Kohei Re: Java Legacy problem Stephen Smalley Re: fc3 - password change problem - syslog and portmapper Stephen Smalley Re: What is typealias and typeattribute Stephen Smalley Re: fc3 - password change problem - syslog and portmapper Russell Coker squirrelmail, Fedora Core 3, Apache, mail not sent Jeremy Ardley Re: fc3 - password change problem - syslog and portmapper Luke Kenneth Casson Leighton Re: fc3 - password change problem - syslog and portmapper Jayendren Anand Maduray Re: fc3 - password change problem - syslog and portmapper Jayendren Anand Maduray Re: fc3 - password change problem - syslog and portmapper Jayendren Anand Maduray Monday, 21 February Re: What is typealias and typeattribute Christopher J. PeBenito Tuesday, 22 February Re: fc3 - password change problem - syslog and portmapper Russell Coker fc3 - password change problem - syslog and portmapper Jayendren Anand Maduray Monday, 21 February crypto museum Russell Coker Re: Java Legacy problem Luke Kenneth Casson Leighton Re: Java Legacy problem Daniel J Walsh Re: Java Legacy problem Luke Kenneth Casson Leighton Re: Java Legacy problem Ivan Gyurdiev Re: Java Legacy problem Daniel J Walsh What is typealias and typeattribute KaiGai Kohei sshd transition points (user@ip or net_context with setcon) Luke Kenneth Casson Leighton Re: Mozilla vs ORBit tmp files Daniel J Walsh Re: Java Legacy problem Ivan Gyurdiev Re: Java Legacy problem Daniel J Walsh Sunday, 20 February Access_terminal + ioctl Ivan Gyurdiev PT_GNU_STACK RWE Ivan Gyurdiev RE: Bell & Lapadula Model Lorenzo Hernández García-Hierro Re: Java Legacy problem Luke Kenneth Casson Leighton Re: Java Legacy problem Ivan Gyurdiev Re: Java Legacy problem Luke Kenneth Casson Leighton Mozilla vs ORBit tmp files Ivan Gyurdiev Java Legacy problem Ivan Gyurdiev Friday, 18 February RE: sepol_genusers Karl MacMillan Re: sepol_genusers Stephen Smalley RE: sepol_genusers Stephen Smalley RE: sepol_genusers Karl MacMillan Re: sepol_genusers Stephen Smalley RE: sepol_genusers Stephen Smalley [PATCH] HOME on /var causes incorrect labelling Laurens Blankers Thursday, 17 February RE: sepol_genusers Karl MacMillan Re: sepol_genusers Daniel J Walsh RE: Bell & Lapadula Model Lorenzo Hernández García-Hierro Re: [Fwd: New policy patch] Daniel J Walsh Re: sshd transition points Luke Kenneth Casson Leighton RE: Bell & Lapadula Model Frank Mayer Re: sshd transition points Luke Kenneth Casson Leighton Re: [PATCH] audit validatetrans denials Darrel Goeddel Re: [PATCH] audit validatetrans denials Stephen Smalley Re: [PATCH] audit validatetrans denials Stephen Smalley Re: [PATCH] audit validatetrans denials Darrel Goeddel Re: libselinux patch to add file_context.homedirs and remove potential memory and fd leaks. Stephen Smalley sepol_genusers Stephen Smalley Re: [PATCH] policy defined range transitions Stephen Smalley Re: [PATCH] audit validatetrans denials Stephen Smalley Wednesday, 16 February Re: [PATCH] policy defined range transitions James Morris Re: [PATCH] audit validatetrans denials James Morris [PATCH] audit validatetrans denials Darrel Goeddel [PATCH] policy defined range transitions Darrel Goeddel ssh problems when no pty allocated Thomas Bleher Re: sshd transition points Peter K. Lee [owner@bugs.debian.org: Bug#258725 acknowledged by developer (Bug#258725: fixed in hotplug 0.0.20040329-17)] Luke Kenneth Casson Leighton Re: sshd transition points Luke Kenneth Casson Leighton Re: sshd transition points Stephen Smalley Re: sshd transition points Luke Kenneth Casson Leighton Re: sshd transition points Luke Kenneth Casson Leighton Re: dynamic context transitions Luke Kenneth Casson Leighton Re: sshd transition points Luke Kenneth Casson Leighton Re: sshd transition points Luke Kenneth Casson Leighton Re: dynamic context transitions Stephen Smalley Re: dynamic context transitions Luke Kenneth Casson Leighton Re: sshd transition points Luke Kenneth Casson Leighton Re: sshd transition points Stephen Smalley Re: sshd transition points Stephen Smalley Re: sshd transition points Luke Kenneth Casson Leighton Re: sshd transition points Luke Kenneth Casson Leighton Re: sshd transition points Luke Kenneth Casson Leighton Re: Bootup problems Stephen Smalley Re: sshd transition points Stephen Smalley Re: sshd transition points Stephen Smalley Re: dynamic context transitions Stephen Smalley Re: sshd transition points Stephen Smalley Re: sshd transition points Stephen Smalley Re: Bootup problems Timothy Wood Tuesday, 15 February Re: Best way to label a filesystem for another system Russell Coker Re: sshd transition points Luke Kenneth Casson Leighton [patch] dynamic auto trans Luke Kenneth Casson Leighton Re: sshd transition points Luke Kenneth Casson Leighton Re: dynamic context transitions Luke Kenneth Casson Leighton Re: sshd transition points Luke Kenneth Casson Leighton Re: dynamic context transitions Darrel Goeddel dynamic context transitions Luke Kenneth Casson Leighton Re: sshd transition points Luke Kenneth Casson Leighton Re: sshd transition points Luke Kenneth Casson Leighton Re: sshd transition points Stephen Smalley Re: sshd transition points Luke Kenneth Casson Leighton Re: Setting loginuid Stephen Smalley Re: Determining if SELinux is installed Daniel J Walsh Re: sshd transition points Stephen Smalley Re: Determining if SELinux is installed Scott Cain Re: Setting loginuid Steve G Re: Determining if SELinux is installed Stephen Smalley Re: Determining if SELinux is installed Daniel J Walsh Re: Setting loginuid Casey Schaufler Re: Determining if SELinux is installed Stephen Smalley Re: Determining if SELinux is installed Scott Cain Re: Adding libseuser functionality to libselinux? Daniel J Walsh Re: Setting loginuid Stephen Smalley Re: Determining if SELinux is installed Stephen Smalley Re: Setting loginuid Stephen Smalley Determining if SELinux is installed Scott Cain Re: Adding libseuser functionality to libselinux? Stephen Smalley Re: Setting loginuid Casey Schaufler Adding libseuser functionality to libselinux? Daniel J Walsh Setting loginuid Steve G sshd transition points Luke Kenneth Casson Leighton Monday, 14 February Re: shm denials Stephen Smalley Re: shm denials Ivan Gyurdiev Re: shm denials Stephen Smalley Saturday, 12 February shm denials Ivan Gyurdiev Patch: Policy for NX server Thomas Bleher Thursday, 10 February Latest diffs Daniel J Walsh Friday, 11 February genhomedircon again Daniel J Walsh Thursday, 10 February Re: TTY question Daniel J Walsh Re: Rewrite of genhomedircon Daniel J Walsh libselinux patch to add file_context.homedirs and remove potential memory and fd leaks. Daniel J Walsh Re: Rewrite of genhomedircon Stephen Smalley Re: TTY question Stephen Smalley Re: TTY question Ivan Gyurdiev Re: Modifications to the local.users file Stephen Smalley Re: TTY question Ivan Gyurdiev Modifications to the local.users file Daniel J Walsh Re: TTY question Stephen Smalley Re: some policy patches Daniel J Walsh Re: TTY question Ivan Gyurdiev Re: TTY question Stephen Smalley Rewrite of genhomedircon Daniel J Walsh Re: TTY question Ivan Gyurdiev Re: TTY question Stephen Smalley Re: TTY question Ivan Gyurdiev Re: TTY question Stephen Smalley Re: TTY question Ivan Gyurdiev Re: some policy patches James Carter Re: Latest diffs James Carter Re: How to install CVS wine Stephen Smalley Re: TTY question Ivan Gyurdiev Re: TTY question Stephen Smalley Wednesday, 9 February Re: TTY question Ivan Gyurdiev policy for afs server Andrew Reisse Re: TTY question Stephen Smalley Tuesday, 8 February Re: TTY question Jim McCullough TTY question Ivan Gyurdiev Policy makefile Russell Coker Monday, 7 February [Linux-aus] Security Miniconf at LCA2005 (fwd) James Morris RE: Best way to label a filesystem for another system Stephen Smalley RE: Best way to label a filesystem for another system Villalovos, John L Re: policycoreutils diff Stephen Smalley Re: Latest diffs Stephen Smalley Re: Latest diffs Richard Hally policycoreutils diff Daniel J Walsh RE: Best way to label a filesystem for another system Stephen Smalley Re: Latest diffs Ivan Gyurdiev Friday, 4 February RE: Best way to label a filesystem for another system Villalovos, John L RE: Best way to label a filesystem for another system Stephen Smalley Re: Java Policy Daniel J Walsh RE: Best way to label a filesystem for another system Villalovos, John L Re: Java Policy Stephen Smalley Re: Java Policy Daniel J Walsh Re: [PATCH][SELINUX] Fix selinux_inode_setattr hook Chris Wright Re: [PATCH][SELINUX] Fix selinux_inode_setattr hook Stephen Smalley Re: [PATCH][SELINUX] Fix selinux_inode_setattr hook Chris Wright [PATCH][SELINUX] Fix selinux_inode_setattr hook Stephen Smalley Re: Java Policy Ivan Gyurdiev Re: Java Policy Stephen Smalley Java Policy Daniel J Walsh Re: How to install CVS wine Stephen Smalley Re: How to install CVS wine Ivan Gyurdiev Re: How to install CVS wine Stephen Smalley Re: How to install CVS wine Ivan Gyurdiev Re: Latest diffs Ivan Gyurdiev Re: Latest diffs Stephen Smalley Re: Latest diffs Daniel J Walsh Re: Latest diffs Stephen Smalley Re: How to install CVS wine Stephen Smalley Re: How to install CVS wine Stephen Smalley Re: Restart Stephen Smalley Re: Latest diffs Ivan Gyurdiev Re: Latest diffs Stephen Smalley Re: Best way to label a filesystem for another system Stephen Smalley How to install CVS wine Ivan Gyurdiev Thursday, 3 February Restart Subba Rao Re: Latest diffs Ivan Gyurdiev Best way to label a filesystem for another system Villalovos, John L RE: Advice on bringing up SE Linux Villalovos, John L Re: FC3, Apache and CGI web app Scott Cain Re: FC3, Apache and CGI web app Daniel J Walsh Re: FC3, Apache and CGI web app Scott Cain Re: FC3, Apache and CGI web app Daniel J Walsh Re: FC3, Apache and CGI web app Stephen Smalley Re: FC3, Apache and CGI web app Scott Cain Re: FC3, Apache and CGI web app Daniel J Walsh Re: FC3, Apache and CGI web app Scott Cain Re: FC3, Apache and CGI web app Daniel J Walsh Re: Advice on bringing up SE Linux Lorenzo Hernández García-Hierro some policy patches Russell Coker policy for a cron-job Stefan SF Re: Advice on bringing up SE Linux Russell Coker Re: Advice on bringing up SE Linux Russell Coker Wednesday, 2 February Re: FC3, Apache and CGI web app Scott Cain Re: FC3, Apache and CGI web app Colin Walters Re: FC3, Apache and CGI web app Daniel J Walsh FC3, Apache and CGI web app Scott Cain Re: New patch for fixfiles sed script Stephen Smalley Re: New patch for fixfiles sed script Daniel J Walsh Re: New patch for fixfiles sed script Stephen Smalley Re: New patch for fixfiles sed script Daniel J Walsh Re: New patch for fixfiles sed script Stephen Smalley Re: File Browsing apps and getattr Ivan Gyurdiev Re: New patch for fixfiles sed script Daniel J Walsh Re: File Browsing apps and getattr Daniel J Walsh Re: New patch for fixfiles sed script Stephen Smalley Re: File Browsing apps and getattr Ivan Gyurdiev Re: File Browsing apps and getattr Daniel J Walsh Re: File Browsing apps and getattr Stephen Smalley Re: File Browsing apps and getattr Ivan Gyurdiev Re: File Browsing apps and getattr Daniel J Walsh New patch for fixfiles sed script Daniel J Walsh Re: Latest diffs Daniel J Walsh Re: Latest diffs Stephen Smalley Re: File Browsing apps and getattr Stephen Smalley Re: File Browsing apps and getattr Ivan Gyurdiev Re: Latest diffs Stephen Smalley RE: Advice on bringing up SE Linux Stephen Smalley Re: Latest diffs Stephen Smalley Re: File Browsing apps and getattr Stephen Smalley Tuesday, 1 February Re: File Browsing apps and getattr Ivan Gyurdiev Re: Latest diffs Ivan Gyurdiev RE: Advice on bringing up SE Linux Villalovos, John L RE: Advice on bringing up SE Linux Villalovos, John L Re: File Browsing apps and getattr Stephen Smalley Re: Latest diffs Stephen Smalley Re: Advice on bringing up SE Linux Stephen Smalley Re: Advice on bringing up SE Linux Stephen Smalley Advice on bringing up SE Linux Villalovos, John L Re: Latest diffs James Carter Re: File Browsing apps and getattr Ivan Gyurdiev Re: File Browsing apps and getattr Daniel J Walsh Reminder I need the equivalent of name_bind for name_connect Daniel J Walsh Re: [patch] enhanced MLS support Stephen Smalley Re: File Browsing apps and getattr Casey Schaufler Re: Policy format: apostrophe in comments David Caplan Re: Patch to policycoreutils Stephen Smalley Re: File Browsing apps and getattr Stephen Smalley Re: File Browsing apps and getattr Ivan Gyurdiev Re: slapd_db_t database inaccessable to domain like shadow_t Stephen Smalley Re: File Browsing apps and getattr Stephen Smalley Re: File Browsing apps and getattr Ivan Gyurdiev Re: Any problems with adding the following. Stephen Smalley Re: Policy format: apostrophe in comments Stephen Smalley Re: File Browsing apps and getattr Stephen Smalley slapd_db_t database inaccessable to domain like shadow_t mailinglist.selinux_at_ifsaudiovisueel.nl Monday, 31 January Policy format: apostrophe in comments Ivan Gyurdiev File Browsing apps and getattr Ivan Gyurdiev Any problems with adding the following. Daniel J Walsh Re: Strange Denial Stephen Smalley Re: Patch to policycoreutils Daniel J Walsh Re: Strange Denial Stephen Smalley Strange Denial Ivan Gyurdiev Re: Patch to policycoreutils Stephen Smalley Re: Patch to policycoreutils Daniel J Walsh NSA web site offline 4-7 Feb Stephen Smalley Re: Patch to policycoreutils Stephen Smalley Re: Updated version of open_init_pty Stephen Smalley Sunday, 30 January Updated version of open_init_pty Manoj Srivastava Re: Using fuse for AFS/DFS (was Re: [OpenAFS-devel] openafs / opendfs collaboration) Luke Kenneth Casson Leighton Re: Using fuse for AFS/DFS (was Re: [OpenAFS-devel] openafs / opendfs collaboration) Luke Kenneth Casson Leighton Saturday, 29 January Using fuse for AFS/DFS (was Re: [OpenAFS-devel] openafs / opendfs collaboration) Luke Kenneth Casson Leighton Friday, 28 January Re: [ RESEND ] Fedora Rawhide mplayer policy Ivan Gyurdiev Re: [ RESEND ] Fedora Rawhide mplayer policy Daniel J Walsh Re: [ RESEND ] Fedora Rawhide mplayer policy Ivan Gyurdiev Re: [ RESEND ] Fedora Rawhide mplayer policy Daniel J Walsh [ RESEND ] Fedora Rawhide mplayer policy Ivan Gyurdiev Re: Patch to policycoreutils Stephen Smalley Re: Patch to policycoreutils Daniel J Walsh Re: Patch to policycoreutils Stephen Smalley Latest diffs Daniel J Walsh Re: [PATCH 1/2] Rewrite setfiles to use matchpathcon Stephen Smalley [PATCH 2/2] Rewrite setfiles to use matchpathcon Stephen Smalley [PATCH 1/2] Rewrite setfiles to use matchpathcon Stephen Smalley [PATCH 0/2] Rewrite setfiles to use matchpathcon Stephen Smalley Patch to policycoreutils Daniel J Walsh Thursday, 27 January [OT] SELinux symposium BoFs and WiPs Karl MacMillan Re: Updated policy Ivan Gyurdiev Re: Updated policy Daniel J Walsh Re: Updated policy Daniel J Walsh Re: Updated policy Daniel J Walsh Re: Updated policy Stephen Smalley Re: Updated policy Stephen Smalley Re: Updated policy Stephen Smalley Re: Minor genhomedircon patch Stephen Smalley Minor genhomedircon patch Daniel J Walsh Wednesday, 26 January Re: [patch] enhanced MLS support Stephen Smalley Re: users with weird names Stephen Smalley Re: [patch] add new files to policycoreutils.spec Stephen Smalley Re: libselinux rpm_execon should not fail in permissive mode. Stephen Smalley Re: Updated policy Stephen Smalley Re: Updated policy Stephen Smalley Re: Updated policy Ivan Gyurdiev Re: Updated policy Ivan Gyurdiev Re: Updated policy Ivan Gyurdiev Tuesday, 25 January users with weird names steven harp [patch] add new files to policycoreutils.spec Darrel Goeddel Re: [patch] enhanced MLS support Darrel Goeddel Re: Fedora Rawhide mplayer policy Ivan Gyurdiev Re: Updated policy Ivan Gyurdiev Updated policy Daniel J Walsh Re: Change fixfiles to use file_context.local if it exists. Stephen Smalley Re: [PATCH] dpkg helper for libselinux Lorenzo Hernández García-Hierro Re: Problem logging into GDM after SELinux enable Stephen Smalley Re: [PATCH] dpkg helper for libselinux Stephen Smalley Problem logging into GDM after SELinux enable Tom Wesley Monday, 24 January OpenOffice Problems with Strict Policy James Carter Re: libselinux rpm_execon should not fail in permissive mode. Stephen Smalley Re: Sugg. for SELinux enabled Interpreters Stephen Smalley Re: libselinux rpm_execon should not fail in permissive mode. Daniel J Walsh Re: libselinux rpm_execon should not fail in permissive mode. Stephen Smalley Re: [patch] dpkg.fc James Carter Re: [patch] ddclient James Carter libselinux rpm_execon should not fail in permissive mode. Daniel J Walsh Re: Man pages added to policy file. James Carter Sugg. for SELinux enabled Interpreters Jochen Schmitt RE: [patch] enhanced MLS support Chad Hanson Re: Change fixfiles to use file_context.local if it exists. Daniel J Walsh Re: [patch] enhanced MLS support Stephen Smalley Re: [patch] enhanced MLS support Casey Schaufler Re: Change fixfiles to use file_context.local if it exists. Stephen Smalley Change fixfiles to use file_context.local if it exists. Daniel J Walsh Re: [patch] enhanced MLS support Stephen Smalley Sunday, 23 January Re: [patch] enhanced MLS support Casey Schaufler Re: [patch] enhanced MLS support James Morris Re: Fedora Rawhide mplayer policy Russell Coker Saturday, 22 January Re: [Fwd: New policy patch] Russell Coker Fedora Rawhide mplayer policy Ivan Gyurdiev Friday, 21 January [patch] ddclient Greg Norris Re: [Fwd: New policy patch] James Carter Re: run_init and interactive scripts Stephen Smalley Re: run_init and interactive scripts Manoj Srivastava Re: run_init and interactive scripts Stephen Smalley Re: Change of restorecon and setfiles to not modify context if only_user_section changed Stephen Smalley Re: run_init and interactive scripts Stephen Smalley Re: run_init and interactive scripts Stephen Smalley Re: run_init and interactive scripts Manoj Srivastava Change of restorecon and setfiles to not modify context if only_user_section changed Daniel J Walsh Re: [patch] enhanced MLS support Stephen Smalley Re: [patch] enhanced MLS support Stephen Smalley Thursday, 20 January Man pages added to policy file. Daniel J Walsh Friday, 21 January Re: run_init and interactive scripts Manoj Srivastava Thursday, 20 January Re: Multiple contexts Ivan Gyurdiev Re: plicycoreutils: genhomedircon man page Stephen Smalley Re: run_init and interactive scripts Stephen Smalley Re: run_init and interactive scripts Stephen Smalley Re: Manual Page for audit2allow Stephen Smalley PA Security Conference Eric Andreychek quota files oddity... Valdis.Kletnieks_at_vt.edu Re: Error building libsepol with gcc 4.0 Stephen Smalley Re: Added is_context_configurable function Stephen Smalley Re: Added is_context_configurable function Stephen Smalley Re: run_init and interactive scripts Stephen Smalley plicycoreutils: genhomedircon man page Manoj Srivastava Wednesday, 19 January run_init and interactive scripts Manoj Srivastava Manual Page for audit2allow Manoj Srivastava Keynote speaker announced for SELinux symposium Frank Mayer Re: Changing context with UID - doubt Russell Coker Tuesday, 18 January [patch] dpkg.fc Greg Norris Re: audit ... denied messages Russell Coker Re: Java and SELinux Stephen Smalley Re: How SELinux label packet by default? Stephen Smalley Re: Java and SELinux Albretch Mueller Re: Role transition error Stephen Smalley Re: Java and SELinux Stephen Smalley Re: Getting default context Stephen Smalley Monday, 17 January Re: [patch] enhanced MLS support Darrel Goeddel Tuesday, 18 January Re: lots of execmem failures with 2.6.10 Stephen Smalley How SELinux label packet by default? Park Lee Monday, 17 January Re: lots of execmem failures with 2.6.10 Greg Norris [patch] enhanced MLS support Darrel Goeddel Role transition error Steve Brueckner Re: kernel error Russell Coker Getting default context Bartlomiej Balcerek Sunday, 16 January Java and SELinux Albretch Mueller Saturday, 15 January Re: lots of execmem failures with 2.6.10 Greg Norris Friday, 14 January [PATCH][SELINUX] Fix setting of loaded policy version Stephen Smalley Re: Multiple contexts Ivan Gyurdiev Thursday, 13 January Re: Multiple contexts Thomas Bleher Re: SELinux Policy Editor and CAP_SYS_BOOT Stephen Smalley Re: SELinux Policy Editor and CAP_SYS_BOOT Nick Re: SELinux Policy Editor and CAP_SYS_BOOT Stephen Smalley SELinux Policy Editor and CAP_SYS_BOOT Nick Re: Multiple contexts Luke Kenneth Casson Leighton [PATCH][SELINUX] Fix error handling code for policy load Stephen Smalley Why root:sysadm_r:pam_t is invalid? Park Lee Re: Multiple contexts Stephen Smalley Re: Multiple contexts Stephen Smalley Re: Multiple contexts Luke Kenneth Casson Leighton Re: Multiple contexts Luke Kenneth Casson Leighton Re: Multiple contexts Stephen Smalley Re: Multiple contexts Stephen Smalley Re: Multiple contexts Luke Kenneth Casson Leighton Re: Multiple contexts Luke Kenneth Casson Leighton Re: Multiple contexts Stephen Smalley Re: Multiple contexts Stephen Smalley Re: Multiple contexts Stephen Smalley Re: Multiple contexts Stephen Smalley Re: Multiple contexts Stephen Smalley Re: Added is_context_configurable function Daniel J Walsh Re: Added is_context_configurable function Colin Walters Re: Added is_context_configurable function Daniel J Walsh Re: Added is_context_configurable function Daniel J Walsh Re: Multiple contexts James Carter Wednesday, 12 January Re: Added is_context_configurable function Colin Walters Re: lots of execmem failures with 2.6.10 Greg Norris Error building libsepol with gcc 4.0 Manoj Srivastava Re: Multiple contexts Luke Kenneth Casson Leighton Re: Multiple contexts Ivan Gyurdiev Re: Multiple contexts Luke Kenneth Casson Leighton Re: Multiple contexts Luke Kenneth Casson Leighton Re: Multiple contexts Luke Kenneth Casson Leighton Re: [patch] allow users of tmp_domain to read /usr/tmp Colin Walters Re: root and change of passwords Stephen Smalley Re: Added is_context_configurable function Stephen Smalley Re: Multiple contexts Stephen Smalley Re: Multiple contexts Stephen Smalley Re: [patch] allow users of tmp_domain to read /usr/tmp Stephen Smalley Re: Add a new class Stephen Smalley Re: Multiple contexts Stephen Smalley Re: Multiple contexts Stephen Bennett [patch] allow users of tmp_domain to read /usr/tmp Colin Walters Re: Multiple contexts Ivan Gyurdiev Re: Starting applications from initrc in a user's context? Russell Coker Re: Add a new class Park Lee Re: SELinux with IPSec - something going on ? petre rodan Re: Multiple contexts Luke Kenneth Casson Leighton [Fwd: New policy patch] Daniel J Walsh Re: [patch] types.fc James Carter Re: [patch] screen_macros.te James Carter Re: [patch] logrotate James Carter Re: [patch] types.fc James Carter Re: Multiple contexts Luke Kenneth Casson Leighton Re: Added is_context_configurable function Colin Walters Re: Multiple contexts Stephen Smalley Re: Added is_context_configurable function Luke Kenneth Casson Leighton Re: Multiple contexts Luke Kenneth Casson Leighton Re: kernel error Stephen Smalley Re: SELinux with IPSec - something going on ? Park Lee Re: Starting applications from initrc in a user's context? Stephen Smalley Re: transition denied Stephen Smalley Re: kernel error Stephen Smalley Re: Added is_context_configurable function Colin Walters Re: Added is_context_configurable function Daniel J Walsh Re: Added is_context_configurable function Daniel J Walsh Re: Unionfs and Selinux Stephen Smalley Re: Multiple contexts Stephen Smalley Re: lots of execmem failures with 2.6.10 Stephen Smalley Re: Added is_context_configurable function Daniel J Walsh Re: Multiple contexts Luke Kenneth Casson Leighton Re: Added is_context_configurable function Stephen Smalley Re: Multiple contexts Stephen Smalley lots of execmem failures with 2.6.10 Greg Norris Re: Unionfs and Selinux Luke Kenneth Casson Leighton Unionfs and Selinux Jaspreet Singh Tuesday, 11 January Re: Added is_context_configurable function Casey Schaufler Re: Added is_context_configurable function Colin Walters Re: Added is_context_configurable function Colin Walters Re: Multiple contexts Luke Kenneth Casson Leighton Re: Added is_context_configurable function Daniel J Walsh Re: Added is_context_configurable function Stephen Smalley Re: Added is_context_configurable function Daniel J Walsh Re: Multiple contexts Stephen Smalley Re: Multiple contexts Stephen Smalley Re: Added is_context_configurable function Stephen Smalley Re: TE Policy Modules for SELinux policies Serge Hallyn pppd Patch for PPTPClient Alex Ackerman Re: Added is_context_configurable function Daniel J Walsh Re: root and change of passwords Daniel J Walsh Re: root and change of passwords Stephen Smalley Re: root and change of passwords Christopher J. PeBenito Re: Added is_context_configurable function Stephen Smalley Re: Multiple contexts Stephen Smalley Re: Changing context with UID - doubt Stephen Smalley Re: root and change of passwords Stephen Smalley Monday, 10 January TE Policy Modules for SELinux policies Serge Hallyn Re: audit ... denied messages Lee Re: Multiple contexts Luke Kenneth Casson Leighton Re: Multiple contexts Luke Kenneth Casson Leighton Added is_context_configurable function Daniel J Walsh Multiple contexts Ivan Gyurdiev Re: audit ... denied messages Timothy Wood Re: SElinux - FC3 Daniel J Walsh audit ... denied messages Lee SElinux - FC3 Jayendren Anand Maduray kernel error Russell Coker Sunday, 9 January transition denied Milus János Changing context with UID - doubt Bartlomiej Balcerek Saturday, 8 January [PATCH] Security-Enhanced Linux back port for 2.4 rev.0.3 (20050108) Lorenzo Hernández García-Hierro Friday, 7 January Re: [patch] logrotate Greg Norris There are several file_contexts that users might want to set in order to share data. Daniel J Walsh Updated SELinux Release Stephen Smalley root and change of passwords DeadManMoving FYI: A couple of Interesting updates to Userspace in Fedora Rawhide Daniel J Walsh Re: BUG in security_context_to_sid() ? Park Lee Re: BUG in security_context_to_sid() ? Stephen Smalley Re: BUG in security_context_to_sid() ? Park Lee Re: BUG in security_context_to_sid() ? Stephen Smalley Re: Architectural doubts Stephen Smalley Re: Architectural doubts Jaspreet Singh BUG in security_context_to_sid() ? Park Lee Thursday, 6 January Re: Architectural doubts Juan González Re: Architectural doubts Stephen Smalley Architectural doubts Juan González Re: Problem with SELinux and Squid+Winbind+Samba Russell Coker Re: [patch] screen_macros.te Daniel J Walsh Re: passwd using getprevcon() for enforcement Stephen Smalley Re: passwd using getprevcon() for enforcement Stephen Smalley passwd using getprevcon() for enforcement Joshua Brindle Re: [patch] types.fc Russell Coker Re: [patch] screen_macros.te Russell Coker Re: [patch] logrotate Russell Coker Monday, 3 January Re: Updated SELinux Release Lorenzo Hernández García-Hierro Wednesday, 5 January Re: gentoo diff for arpwatch James Carter Re: policy James Carter Re: policy patches James Carter Re: iptables and assertions James Carter New type cert_t? Daniel J Walsh Re: [patch] screen_macros.te Daniel J Walsh Tuesday, 4 January Re: [patch] screen_macros.te Greg Norris [patch] screen_macros.te Greg Norris Re: policy patches James Carter Re: modules needed to be compiled in for selinux to work Stephen Smalley Re: [patch] types.fc Greg Norris Re: modules needed to be compiled in for selinux to work Richard Troth Re: modules needed to be compiled in for selinux to work Russell Coker Re: [patch] types.fc Russell Coker Re: Starting applications from initrc in a user's context? Russell Coker Re: tty files, console login on debian Luke Kenneth Casson Leighton Re: tty files, console login on debian Russell Coker RE: SE-Linux File server Jayendren Anand Maduray Monday, 3 January [patch] logrotate Greg Norris [patch] types.fc Greg Norris Re: proc_net_t and mail servers James Carter Re: udev policy James Carter Re: howl and modutil James Carter Re: cpuspeed and powernow James Carter Re: modules needed to be compiled in for selinux to work Luke Kenneth Casson Leighton Re: Two machines, two differenct conditions. Russell Coker Tuesday, 28 December Latest patch Daniel J Walsh Monday, 3 January Re: Roles (FC3) Stephen Smalley Re: Newrole in targeted mode Stephen Smalley Re: modules needed to be compiled in for selinux to work Stephen Smalley Re: Add a new class Stephen Smalley Re: Issue on labeling a packet? (was Re: Issue on getting security context of socket and message) Stephen Smalley Re: SE-Linux File server Stephen Smalley Re: Updated SELinux Release Russell Coker Roles (FC3) Jaros³aw Nozderko Re: Newrole in targeted mode Jaspreet Singh Sunday, 2 January Re: modules needed to be compiled in for selinux to work Luke Kenneth Casson Leighton Re: modules needed to be compiled in for selinux to work Richard Troth Re: modules needed to be compiled in for selinux to work Luke Kenneth Casson Leighton Re: modules needed to be compiled in for selinux to work Richard Troth policy Russell Coker policy patches Russell Coker Re: Newrole in targeted mode Karsten Wade modules needed to be compiled in for selinux to work Luke Kenneth Casson Leighton Re: Add a new class Park Lee Saturday, 1 January Re: Newrole in targeted mode Matthew Leinhos Thursday, 30 December Re: Issue on labeling a packet? (was Re: Issue on getting security context of socket and message) Park Lee Re: Overlay Filesystem and SELinux Dale Amon Re: Newrole in targeted mode Jaspreet Singh SE-Linux File server Jayendren Anand Maduray Wednesday, 29 December Re: gentoo policies for daemontools, ucspi-tcp, publicfile, djbdns, clockspeed petre rodan Re: pam_selinux when selinux is disabled Daniel J Walsh Re: system auditing or event logging facilities Steve G Re: pam_selinux when selinux is disabled Jaspreet Singh Tuesday, 28 December RE: system auditing or event logging facilities Robert Potter system auditing or event logging facilities Nick Gray Re: pam_selinux when selinux is disabled Stephen Smalley Re: pam_selinux when selinux is disabled Stephen Smalley pam_selinux when selinux is disabled Luke Kenneth Casson Leighton Re: [patch] disable policycoreutils locale option Stephen Smalley Re: Proposed change to install Stephen Smalley Re: Newrole in targeted mode Stephen Smalley Re: Proposed change to install Stephen Smalley Newrole in targeted mode Nick Gray Re: Proposed change to install Daniel J Walsh Re: Issue on labeling a packet? (was Re: Issue on getting security context of socket and message) Stephen Smalley Thursday, 29 July Re: IDEA: /etc/pam.d// Steve Langasek Sunday, 30 May Re: SE/Linux patch - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=249499 Luke Kenneth Casson Leighton Tuesday, 28 December Re: Issue on labeling a packet? (was Re: Issue on getting security context of socket and message) Park Lee Re: Proposed change to install Stephen Smalley Re: Proposed change to install Karsten Wade Monday, 27 December Re: Yee-HAH! 'smartd' issues 70 avc's when it tries to send mail... Russell Coker Re: Proposed change to install Stephen Smalley Re: About security field in struct sk_buff Stephen Smalley Re: [PATCH] Updated & fixed patch for Linux-PAM 0.78 Stephen Smalley Re: [PATCH] Fixed & updated SELinux support patch for coreutils 5.2.1 Stephen Smalley Re: Where is the SID stored in file system and process respectively? Stephen Smalley Proposed change to install Daniel J Walsh Re: fedora core 3, httpd and PHP exec() Daniel J Walsh Re: Overlay Filesystem and SELinux Jaspreet Singh Sunday, 26 December Re: Overlay Filesystem and SELinux Jaspreet Singh Re: Overlay Filesystem and SELinux Dale Amon r_dir_file() and sym-links Russell Coker Re: Overlay Filesystem and SELinux Jaspreet Singh Saturday, 25 December Re: fedora core 3, httpd and PHP exec() Russell Coker Re: gentoo diff for arpwatch Russell Coker Re: fedora core 3, httpd and PHP exec() Russell Coker Friday, 24 December fedora core 3, httpd and PHP exec() Zia Syed Re: adds for latest policy...cups.te, udev.te? Tom London Re: adds for latest policy...cups.te, udev.te? Russell Coker About security field in struct sk_buff Park Lee proc_net_t and mail servers Russell Coker udev policy Russell Coker iptables and assertions Russell Coker howl and modutil Russell Coker Thursday, 23 December Starting applications from initrc in a user's context? Mike Anderson cpuspeed and powernow Russell Coker Re: [patch] misc. policy updates Russell Coker [PATCH] Fixed & updated SELinux support patch for coreutils 5.2.1 Lorenzo Hernández García-Hierro Where is the SID stored in file system and process respectively? Park Lee Wednesday, 22 December Latest patches Daniel J Walsh Re: paranoid FC3 setup: banning all login access (!) Luke Kenneth Casson Leighton Tuesday, 21 December Re: paranoid FC3 setup: banning all login access (!) Valdis.Kletnieks_at_vt.edu Eclipse and Java with SELinux Strict Policy Alex Ackerman Re: [patch] selinux_capget() Valdis.Kletnieks_at_vt.edu Re: User Space Auditing Stephen Smalley Monday, 20 December Re: User Space Auditing Linux Re: paranoid FC3 setup: banning all login access (!) Luke Kenneth Casson Leighton Re: [patch] misc. policy updates James Carter Re: Latest patch James Carter Re: patch: policy for powernowd James Carter Fedora Targeted List grows on Rawhide. Daniel J Walsh Re: User Space Auditing Stephen Smalley Re: paranoid FC3 setup: banning all login access (!) David Caplan Two machines, two differenct conditions. Nick Gray paranoid FC3 setup: banning all login access (!) Luke Kenneth Casson Leighton Sunday, 19 December Re: [patch] selinux_capget() Casey Schaufler [patch] disable policycoreutils locale option Chris PeBenito Re: [patch] selinux_capget() Russell Coker Re: [patch] selinux_capget() Russell Coker Re: [patch] misc. policy updates Russell Coker Saturday, 18 December User Space Auditing Linux Re: Question regarding port usage in respect to the tomcat policy Daniel J Walsh Friday, 17 December Re: setting boolean values Greg Norris Question regarding port usage in respect to the tomcat policy Nick Gray Re: Tomcat policy Nick Gray Re: Tomcat policy Stephen Smalley Re: Tomcat policy Nick Gray Re: setting boolean values Stephen Smalley Thursday, 16 December setting boolean values Greg Norris [patch] misc. policy updates Greg Norris Re: Tomcat policy Stephen Smalley Re: Tomcat policy Colin Walters Re: Tomcat policy Stephen Smalley Tomcat policy Nick Gray Experimental Version of Dump available. Daniel J Walsh Latest patch Daniel J Walsh Wednesday, 15 December Re: patch: add policy for gpg helpers James Carter Re: dhcpc.te patch James Carter Re: gentoo policies for daemontools, ucspi-tcp, publicfile, djbdns, clockspeed James Carter Re: Tripwire policy? Valdis.Kletnieks_at_vt.edu Re: ANN: SELinux Policy Server Project Joshua Brindle Re: ANN: SELinux Policy Server Project Steve G Tuesday, 14 December Tripwire policy? Mike Anderson Re: [patch] selinux_capget() Casey Schaufler Re: [patch] selinux_capget() Stephen Smalley Re: [patch] selinux_capget() Darrel Goeddel Re: [patch] selinux_capget() Stephen Smalley Re: [patch] selinux_capget() Stephen Smalley Re: [patch] selinux_capget() James Morris Monday, 13 December Re: [patch] selinux_capget() Casey Schaufler Re: [patch] selinux_capget() James Morris dhcpc.te patch Russell Coker [patch] selinux_capget() Darrel Goeddel Re: [patch] typeattribute statements Karl MacMillan Re: [patch] typeattribute statements Stephen Smalley Re: [patch] typeattribute statements Darrel Goeddel ANN: SELinux Policy Server Project Joshua Brindle Re: [patch] typeattribute statements Stephen Smalley Re: [patch] typeattribute statements Darrel Goeddel [patch] typeattribute statements Darrel Goeddel Re: Single home directory type for all roles. Russell Coker Re: Single home directory type for all roles. Daniel J Walsh Re: Single home directory type for all roles. Russell Coker Re: can_network patch. David Caplan Friday, 10 December Re: can_network patch. Russell Coker [owner@bugs.debian.org: Bug#271030 acknowledged by developer (Bug#271030: fixed in xfree86 4.3.0.dfsg.1-9)] Luke Kenneth Casson Leighton Re: Single home directory type for all roles. Luke Kenneth Casson Leighton Re: can_network patch. Valdis.Kletnieks_at_vt.edu Re: Adding a new user domain Nick Gray Re: can_network patch. Valdis.Kletnieks_at_vt.edu Re: can_network patch. James Carter Re: patch: tags Makefile target James Carter Re: patch: various stuff James Carter Re: patch: stricter /tmp handling James Carter Re: Some more fixes James Carter Re: [PATCH] packages specs Stephen Smalley Re: Mailing list archive? Stephen Smalley Re: can_network patch. Thomas Bleher [PATCH] packages specs Miguel Bolanos [PATCH] polgen spec Miguel Bolanos Mailing list archive? Miguel Bolanos Re: Manipulating user roles without policy-sources installed Stephen Smalley Re: can_network patch. Daniel J Walsh Re: can_network patch. Russell Coker Re: Manipulating user roles without policy-sources installed Daniel J Walsh Re: can_network patch. Stephen Smalley Re: can_network patch. Daniel J Walsh Re: Single home directory type for all roles. Casey Schaufler Re: can_network patch. Stephen Smalley Re: Single home directory type for all roles. Stephen Smalley Re: can_network patch. Daniel J Walsh Re: Single home directory type for all roles. Valdis.Kletnieks_at_vt.edu Re: Manipulating user roles without policy-sources installed Stephen Smalley Re: Single home directory type for all roles. Casey Schaufler Re: Single home directory type for all roles. Colin Walters Manipulating user roles without policy-sources installed Daniel J Walsh Re: Single home directory type for all roles. Casey Schaufler Re: can_network patch. Stephen Smalley Re: Single home directory type for all roles. Colin Walters Re: Single home directory type for all roles. Colin Walters SELinux symposium Karl MacMillan Re: Single home directory type for all roles. Valdis.Kletnieks_at_vt.edu Re: Single home directory type for all roles. Stephen Smalley Re: Single home directory type for all roles. Daniel J Walsh Re: Adding a new user domain Stephen Smalley Re: Single home directory type for all roles. Stephen Smalley Re: Single home directory type for all roles. Russell Coker Thursday, 9 December Re: Single home directory type for all roles. Russell Coker Re: Single home directory type for all roles. Russell Coker Re: Single home directory type for all roles. Russell Coker Re: Single home directory type for all roles. Russell Coker Re: Single home directory type for all roles. Colin Walters Re: Adding a new user domain Nick Gray Re: Single home directory type for all roles. Colin Walters Re: Single home directory type for all roles. Thomas Bleher Re: Single home directory type for all roles. Thomas Bleher Re: Adding a new user domain Stephen Smalley Re: Single home directory type for all roles. Valdis.Kletnieks_at_vt.edu Re: Single home directory type for all roles. Daniel J Walsh Adding a new user domain Nick Gray Re: Single home directory type for all roles. Russell Coker Re: Single home directory type for all roles. Daniel J Walsh Re: Single home directory type for all roles. Russell Coker Re: Single home directory type for all roles. Russell Coker Re: Single home directory type for all roles. Stephen Smalley Re: Single home directory type for all roles. Daniel J Walsh Re: Single home directory type for all roles. Stephen Smalley Re: Single home directory type for all roles. Casey Schaufler Re: Single home directory type for all roles. Daniel J Walsh Re: Single home directory type for all roles. Daniel J Walsh RE: Single home directory type for all roles. Russell Coker Re: Single home directory type for all roles. Russell Coker Re: Single home directory type for all roles. Russell Coker Re: Single home directory type for all roles. Thomas Bleher Re: Single home directory type for all roles. Stephen Smalley RE: Single home directory type for all roles. Alex Ackerman Re: patch: policy for powernowd Thomas Bleher Re: Some more fixes Thomas Bleher Re: patch: policy for powernowd Christopher J. PeBenito Re: Single home directory type for all roles. Stephen Smalley patch: tags Makefile target Thomas Bleher Re: Single home directory type for all roles. Russell Coker patch: various stuff Thomas Bleher Re: Single home directory type for all roles. Russell Coker Re: Single home directory type for all roles. Stephen Smalley Re: Single home directory type for all roles. Russell Coker patch: add policy for gpg helpers Thomas Bleher Re: Single home directory type for all roles. Stephen Smalley patch: policy for powernowd Thomas Bleher Re: Single home directory type for all roles. Colin Walters Re: Single home directory type for all roles. Stephen Smalley patch: stricter /tmp handling Thomas Bleher Single home directory type for all roles. Daniel J Walsh Some more fixes Daniel J Walsh Wednesday, 8 December Re: getfilecon() and friends in libselinux Stephen Smalley Re: getfilecon() and friends in libselinux Casey Schaufler Re: patch: add can_create() macro, allow file_type_auto_trans(a,b,c, { file dir }) James Carter Re: patch: suse stuff James Carter Re: patch: debian stuff James Carter Re: patch: proc cleanup James Carter Re: patch: general cleanup James Carter Re: (ANN: SELinux Policy Modules) announcement dealy Joshua Brindle announcement dealy Joshua Brindle Re: [2.6 patch] selinux: possible cleanups Stephen Smalley Re: patch: general cleanup Thomas Bleher Tuesday, 7 December Re: Yee-HAH! 'smartd' issues 70 avc's when it tries to send mail... Valdis.Kletnieks_at_vt.edu Wednesday, 8 December Re: patch: general cleanup James Carter RES: RES: Problem with SELinux and Squid+Winbind+Samba Luis Fernando C. Talora Re: getfilecon() and friends in libselinux Stephen Smalley getfilecon() and friends in libselinux Joshua Brindle Re: RES: Problem with SELinux and Squid+Winbind+Samba Colin Walters [PATCH] Eliminate unaligned accesses by SELinux policy loading code Stephen Smalley Re: RES: Problem with SELinux and Squid+Winbind+Samba Daniel J Walsh RES: Problem with SELinux and Squid+Winbind+Samba Luis Fernando C. Talora Tuesday, 7 December Re: Problem with SELinux and Squid+Winbind+Samba Luke Kenneth Casson Leighton Re: Yee-HAH! 'smartd' issues 70 avc's when it tries to send mail... Valdis.Kletnieks_at_vt.edu Re: Yee-HAH! 'smartd' issues 70 avc's when it tries to send mail... Daniel J Walsh Problem with SELinux and Squid+Winbind+Samba Luis Fernando C. Talora Monday, 6 December patch: add can_create() macro, allow file_type_auto_trans(a,b,c, { file dir }) Thomas Bleher Re: patch: general cleanup Thomas Bleher patch: suse stuff Thomas Bleher patch: debian stuff Thomas Bleher patch: general cleanup Thomas Bleher patch: proc cleanup Thomas Bleher Re: SELinux port for 2.4.28 (and incoming backport from 2.6) released. Stephen Smalley Re: SELinux port for 2.4.28 (and incoming backport from 2.6) released. Lorenzo Hernandez Garcia-Hierro Re: SELinux port for 2.4.28 (and incoming backport from 2.6) released. Stephen Smalley JFS filesystem support for SELinux ..... kernel patch included Jerone Young Re: patch: misc policy additions Russell Coker Saturday, 4 December SELinux port for 2.4.28 (and incoming backport from 2.6) released. Lorenzo Hernandez Garcia-Hierro Re: dynamic context transitions Russell Coker Friday, 3 December Yee-HAH! 'smartd' issues 70 avc's when it tries to send mail... Valdis.Kletnieks_at_vt.edu Re: [2.6 patch] selinux: possible cleanups Stephen Smalley Re: Latest patch James Carter Thursday, 2 December Latest patch Daniel J Walsh Re: Reissue previous patch Daniel J Walsh Re: Reissue previous patch James Carter Re: Reissue previous patch Stephen Smalley Re: proc_net_t policy James Carter Re: Reissue previous patch Daniel J Walsh Re: Reissue previous patch James Carter Wednesday, 1 December Re: dynamic context transitions Russell Coker debian kernel 2.6.9 with selinux enabled! Luke Kenneth Casson Leighton Re: [RFC][PATCH] Control ability to have a writable executable mapping Stephen Smalley Tuesday, 30 November Reissue previous patch Daniel J Walsh Re: New regression test suite for hardened environments & Hardened Debian proposals Lorenzo Hernandez Garcia-Hierro Re: New regression test suite for hardened environments & Hardened Debian proposals Luke Kenneth Casson Leighton Re: libselinux fails to build on mips and mipsel machines, patch included Stephen Smalley Re: dynamic context transitions Stephen Smalley Re: Problem with Conference Registration Greg Norris Problem with Conference Registration Alex Ackerman Re: dynamic context transitions Stephen Smalley Re: policy patch Daniel J Walsh Re: dynamic context transitions Stephen Smalley Re: dynamic context transitions Darrel Goeddel Re: dynamic context transitions Stephen Smalley proc_net_t policy Russell Coker Monday, 29 November Re: anyone attending the SELinux Symposium? Greg Norris Re: dynamic context transitions Darrel Goeddel Re: policy patch Daniel J Walsh Re: dynamic context transitions Stephen Smalley New regression test suite for hardened environments & Hardened Debian proposals Lorenzo Hernandez Garcia-Hierro Re: cups-config-daemon ? James Carter Re: gentoo policy for dante James Carter Re: $1_file_type policy patch James Carter Re: policy patch James Carter Re: [2.6 patch] selinux: possible cleanups Stephen Smalley Re: [2.6 patch] selinux: possible cleanups James Morris Re: gentoo policy for dante Daniel J Walsh Re: Issue on getting security context of socket and message Stephen Smalley Re: dynamic context transitions Darrel Goeddel Re: patch: misc policy additions Stephen Smalley Re: Still getting random execute permissions on shared libraries. Stephen Smalley Re: cups-config-daemon ? Russell Coker Sunday, 28 November Re: patch: misc policy additions Thomas Bleher Re: gentoo policy for dante petre rodan Saturday, 27 November Re: patch: misc policy additions Thomas Bleher Re: Still getting random execute permissions on shared libraries. petre rodan Friday, 26 November Re: Still getting random execute permissions on shared libraries. Valdis.Kletnieks_at_vt.edu anyone attending the SELinux Symposium? Greg Norris Re: Still getting random execute permissions on shared libraries. petre rodan Re: dynamic context transitions Valdis.Kletnieks_at_vt.edu Re: dynamic context transitions Valdis.Kletnieks_at_vt.edu Re: Issue on getting security context of socket and message Park Lee Re: can_network patch. Daniel J Walsh Re: Selinux book: based on 2.4 or 2.6? Jaspreet Singh Thursday, 25 November Re: dynamic context transitions Russell Coker Re: dynamic context transitions Luke Kenneth Casson Leighton Re: policy patch Luke Kenneth Casson Leighton Re: dynamic context transitions Russell Coker Re: dynamic context transitions Russell Coker Re: can_network patch. Russell Coker Re: policy patch Russell Coker Re: policy patch Luke Kenneth Casson Leighton $1_file_type policy patch Russell Coker policy patch Russell Coker Re: Selinux book: based on 2.4 or 2.6? Andreas Hasenack Re: xen 2.0 - adding selinux permissions Luke Kenneth Casson Leighton Re: Selinux book: based on 2.4 or 2.6? Jaspreet Singh Wednesday, 24 November Re: xen 2.0 - adding selinux permissions Colin Walters Re: can_network patch. Daniel J Walsh Re: [Xen-devel] protecting xen startup Luke Kenneth Casson Leighton Re: xen 2.0 - adding selinux permissions Luke Kenneth Casson Leighton Re: can_network patch. James Carter Re: xen 2.0 - adding selinux permissions Colin Walters Re: xen 2.0 - adding selinux permissions Luke Kenneth Casson Leighton Re: can_network patch. Daniel J Walsh Re: can_network patch. Stephen Smalley Re: Still getting random execute permissions on shared libraries. Stephen Smalley Re: can_network patch. Daniel J Walsh Re: Still getting random execute permissions on shared libraries. Daniel J Walsh Re: xen 2.0 - adding selinux permissions Stephen Smalley Re: xen 2.0 - adding selinux permissions Luke Kenneth Casson Leighton Re: dynamic context transitions Stephen Smalley Re: dynamic context transitions Darrel Goeddel Re: [Xen-devel] protecting xen startup Luke Kenneth Casson Leighton Re: xen 2.0 - adding selinux permissions Stephen Smalley Re: xen 2.0 - adding selinux permissions Luke Kenneth Casson Leighton Re: xen 2.0 - adding selinux permissions Stephen Smalley Re: Still getting random execute permissions on shared libraries. Stephen Smalley Tuesday, 23 November Re: [Xen-devel] protecting xen startup Luke Kenneth Casson Leighton xen 2.0 - adding selinux permissions Luke Kenneth Casson Leighton Re: gentoo diff for dhcpd James Carter Re: gentoo diff for ntpd, gpm James Carter Re: gentoo policy for dante James Carter Re: Selinux book: based on 2.4 or 2.6? Eric Andreychek Re: can_network patch. Stephen Smalley Re: can_network patch. Daniel J Walsh Re: can_network patch. Stephen Smalley Selinux book: based on 2.4 or 2.6? Andreas Re: can_network patch. James Carter Re: SELinux & ia64 Prarit Bhargava Re: dynamic context transitions Russell Coker Re: http://sf.net/projects/xen Luke Kenneth Casson Leighton SELinux & ia64 Prarit Bhargava Re: MySQL Policy Patch Russell Coker Monday, 22 November Re: Linux Journal Article Russell Coker Re: learning about policies/transitions Russell Coker Re: Ok, I know this has been asked before, but why is there an ls_exec_t? Russell Coker Ok, I know this has been asked before, but why is there an ls_exec_t? Daniel J Walsh Re: idea: setfiles to exclude specific type Daniel J Walsh Re: idea: setfiles to exclude specific type Colin Walters Re: idea: setfiles to exclude specific type Yuichi Nakamura Re: idea: setfiles to exclude specific type Daniel J Walsh idea: setfiles to exclude specific type Yuichi Nakamura Re: gentoo diff for snmpd James Carter Re: http://sf.net/projects/xen Milan P. Stanic Sunday, 21 November gentoo diff for dhcpd petre rodan gentoo policies for daemontools, ucspi-tcp, publicfile, djbdns, clockspeed petre rodan Re: gentoo policy for dante petre rodan Re: gentoo policy for dante Daniel J Walsh Re: gentoo policy for dante Daniel J Walsh Re: gentoo diff for snmpd Daniel J Walsh Saturday, 20 November Re: http://sf.net/projects/xen Luke Kenneth Casson Leighton SELinux enhanced strace patch John D. Ramsdell http://sf.net/projects/xen Luke Kenneth Casson Leighton Friday, 19 November Re: using procmail under SE-Linux Valdis.Kletnieks_at_vt.edu Re: Patches without the can_network patch. James Carter Re: using procmail under SE-Linux Colin Walters Re: using procmail under SE-Linux Valdis.Kletnieks_at_vt.edu Re: gentoo policy for dante James Carter Re: gentoo diff for snmpd James Carter Re: gentoo diff for arpwatch James Carter Re: patch: misc policy additions James Carter Re: using procmail under SE-Linux Stephen Smalley Re: using procmail under SE-Linux Colin Walters Re: using procmail under SE-Linux Valdis.Kletnieks_at_vt.edu Re: dynamic context transitions Stephen Smalley Re: dynamic context transitions Darrel Goeddel gentoo diff for ntpd, gpm petre rodan Re: dynamic context transitions Stephen Smalley Re: dynamic context transitions Joshua D. Guttman Re: gentoo diff for snmpd petre rodan Thursday, 18 November Re: using procmail under SE-Linux Colin Walters using procmail under SE-Linux Greg Norris Re: gentoo policy for dante petre rodan Re: polgen and strace John D. Ramsdell Re: gentoo policy for dante James Carter Re: gentoo policy for stunnel James Carter Re: polgen and strace Steve G Re: Patches without the can_network patch. Thomas Bleher Re: gentoo diff for snort James Carter Re: gentoo diff for snmpd James Carter Re: Patches without the can_network patch. Daniel J Walsh Re: gentoo diff for bind James Carter Re: gentoo diff for postgresql James Carter Re: patch: file_contexts fixes James Carter Re: cleanup patch: fix wrong use of dot in file_contexts James Carter Re: Patches without the can_network patch. Thomas Bleher Agenda announced for Inaugural SELinux Symposium Frank Mayer can_network patch. Daniel J Walsh Re: Patches without the can_network patch. Daniel J Walsh Re: polgen and strace John D. Ramsdell Wednesday, 17 November selinux demo machines Kodungallur Varma Re: Patches without the can_network patch. Kodungallur Varma Re: Patches without the can_network patch. James Carter Re: polgen and strace Manoj Srivastava Tuesday, 16 November SLAT 1.2.4 released John D. Ramsdell Re: polgen and strace John D. Ramsdell Re: gentoo policy for stunnel petre rodan polgen and strace Manoj Srivastava Re: gentoo diff for snmpd petre rodan Re: gentoo policy for dante petre rodan Re: gentoo policy for stunnel Thomas Bleher Re: gentoo diff for snmpd Thomas Bleher libselinux fails to build on mips and mipsel machines, patch included Manoj Srivastava Monday, 15 November Re: learning about policies/transitions Serge Hallyn Re: learning about policies/transitions Stephen Smalley gentoo policy for dante petre rodan Re: learning about policies/transitions Serge Hallyn Re: learning about policies/transitions Stephen Smalley Re: learning about policies/transitions Serge Hallyn gentoo diff for snort petre rodan gentoo diff for snmpd petre rodan gentoo policy for stunnel petre rodan gentoo diff for postgresql petre rodan gentoo diff for bind petre rodan gentoo diff for arpwatch petre rodan Re: dynamic context transitions Stephen Smalley Re: dynamic context transitions Luke Kenneth Casson Leighton Thursday, 11 November cleanup patch: fix wrong use of dot in file_contexts Thomas Bleher Wednesday, 10 November Patches without the can_network patch. Daniel J Walsh Monday, 15 November Re: dynamic context transitions Stephen Smalley Re: dynamic context transitions Stephen Smalley Re: dynamic context transitions Stephen Smalley Re: [RFC][PATCH] Control ability to have a writable executable mapping Russell Coker Sunday, 14 November Re: dynamic context transitions Luke Kenneth Casson Leighton Re: dynamic context transitions Luke Kenneth Casson Leighton Re: dynamic context transitions Luke Kenneth Casson Leighton Re: dynamic context transitions Luke Kenneth Casson Leighton Saturday, 13 November Re: Linux Journal Article Wolfgang Pfeiffer Re: Linux Journal Article Wolfgang Pfeiffer Friday, 12 November Linux Journal Article James Morris Re: dynamic context transitions Valdis.Kletnieks_at_vt.edu Re: dynamic context transitions Amy L Herzog Re: dynamic context transitions Stephen Smalley Thursday, 11 November Re: How come security_get_boolean_pending returns true when a boolean is on. Daniel J Walsh Re: How come security_get_boolean_pending returns true when a boolean is on. Christopher J. PeBenito Re: How come security_get_boolean_pending returns true when a boolean is on. Steve G How come security_get_boolean_pending returns true when a boolean is on. Daniel J Walsh [patch] Improved D-BUS SELinux mediation Colin Walters Wednesday, 10 November Re: SELinux with IPSec - something going on ? Park Lee Re: SELinux with IPSec - something going on ? Trent Jaeger Re: SELinux with IPSec - something going on ? Park Lee Re: Patches without the can_network patch. Thomas Bleher Re: [RFC][PATCH] Control ability to have a writable executable mapping Stephen Smalley Re: [RFC][PATCH] Control ability to have a writable executable mapping Stephen Smalley Re: patch: misc policy additions Thomas Bleher Re: Issue on getting security context of socket and message Park Lee Tuesday, 9 November Re: patch: misc policy additions Colin Walters [patch] libselinux/utils/selinuxconfig.c Chris PeBenito Re: [RFC][PATCH] Control ability to have a writable executable mapping Joshua Brindle Re: can_network patch Daniel J Walsh Re: can_network patch James Carter Re: [RFC][PATCH] Control ability to have a writable executable mapping Stephen Smalley patch: misc policy additions Thomas Bleher patch: file_contexts fixes Thomas Bleher [RFC][PATCH] Control ability to have a writable executable mapping Stephen Smalley tty files, console login on debian Erich Schubert Re: Issue on getting security context of socket and message Stephen Smalley Issue on getting security context of socket and message Park Lee Monday, 8 November Re: gentoo diff for ipsec James Carter Re: cleanup: remove superfluous braces James Carter Re: Small patch to allow pam_console handle /dev/pmu James Carter Re: Remaining changes from my patch excluding can_network changes. James Carter Small patch to allow pam_console handle /dev/pmu Daniel J Walsh Re: filesystems and selinux Luke Kenneth Casson Leighton Re: SELinux with IPSec - something going on ? Trent Jaeger Re: SELinux with IPSec - something going on ? Trent Jaeger Re: dynamic context transitions Russell Coker Re: dynamic context transitions Russell Coker Saturday, 6 November can_network patch Daniel J Walsh Monday, 8 November Re: filesystems and selinux James Carter filesystems and selinux Luke Kenneth Casson Leighton Sunday, 7 November Re: SELinux with IPSec - something going on ? Park Lee Saturday, 6 November Re: Patch to make can_network stronger and remove nscd tunable. Thomas Bleher Re: Adding alternate root patch to restorecon (setfiles?) Thomas Bleher Remaining changes from my patch excluding can_network changes. Daniel J Walsh Friday, 5 November Re: Adding alternate root patch to restorecon (setfiles?) James Carter Re: Patch to make can_network stronger and remove nscd tunable. James Carter Re: patch: arpwatch cleanup James Carter Re: patch: typealias cleanup James Carter Re: patch: add assert statement for syslog James Carter Re: Updated SELinux Release Colin Walters Re: MySQL Policy Patch Jiann-Ming Su Re: setsebool and togglesebool patch Stephen Smalley Re: SELinux with IPSec - something going on ? Trent Jaeger Re: selinux-doc patchset 2 of 2: Quoting attribute values Stephen Smalley Re: [PATCH] checkpolicy - nodecon ordering Stephen Smalley Re: setsebool and togglesebool patch Karl MacMillan RE: dynamic context transitions Stephen Smalley RE: dynamic context transitions Frank Mayer Re: dynamic context transitions Luke Kenneth Casson Leighton Re: dynamic context transitions Stephen Smalley RE: dynamic context transitions Stephen Smalley Re: dynamic context transitions Luke Kenneth Casson Leighton RE: dynamic context transitions Frank Mayer RE: dynamic context transitions Frank Mayer Re: dynamic context transitions Colin Walters Re: Updated SELinux Release Stephen Smalley Re: Updated SELinux Release Luke Kenneth Casson Leighton O'Reilly book Greg Norris Re: dynamic context transitions Stephen Smalley Re: dynamic context transitions Karl MacMillan Re: dynamic context transitions Darrel Goeddel Re: Updated SELinux Release Colin Walters Re: dynamic context transitions Stephen Smalley Re: selinux without sysvinit Alejandro Mery Re: setsebool and togglesebool patch Karl MacMillan Re: Patch to make can_network stronger and remove nscd tunable. Thomas Bleher Re: selinux without sysvinit Stephen Smalley Re: dynamic context transitions Darrel Goeddel Re: Patch to make can_network stronger and remove nscd tunable. Stephen Smalley RE: dynamic context transitions Stephen Smalley RE: dynamic context transitions Stephen Smalley RE: dynamic context transitions Frank Mayer Re: dynamic context transitions Stephen Smalley RE: dynamic context transitions Frank Mayer Re: Updated SELinux Release Stephen Smalley Re: learning about policies/transitions Stephen Smalley Re: Updated SELinux Release Luke Kenneth Casson Leighton Re: SELinux with IPSec - something going on ? Park Lee Re: dynamic context transitions Colin Walters Thursday, 4 November Re: Updated SELinux Release Colin Walters Re: learning about policies/transitions Serge Hallyn selinux-doc patchset 1 of 2: Fixing name tokens to not contain underscores Manoj Srivastava selinux-doc patchset 2 of 2: Quoting attribute values Manoj Srivastava Re: dynamic context transitions James Morris setsebool and togglesebool patch Steve G I would like to move some of the port definitions out of the te files into a separate location. Daniel J Walsh Re: Updated SELinux Release Stephen Smalley Re: Updated SELinux Release Christopher J. PeBenito Re: learning about policies/transitions Stephen Smalley Re: dynamic context transitions Luke Kenneth Casson Leighton Re: dynamic context transitions Stephen Smalley Re: learning about policies/transitions Serge Hallyn Re: Updated SELinux Release Stephen Smalley Re: Updated SELinux Release James Morris Re: selinux without sysvinit Stephen Smalley Re: What policy is the system running? Stephen Smalley Re: Updated SELinux Release Stephen Smalley Re: Updated SELinux Release Stephen Smalley Re: selinux-doc problems Stephen Smalley Re: Updated SELinux Release Stephen Smalley Re: Updated SELinux Release Stephen Smalley Wednesday, 3 November Re: Patch to make can_network stronger and remove nscd tunable. Daniel J Walsh Thursday, 4 November Re: Updated SELinux Release Luke Kenneth Casson Leighton Re: selinux-doc problems Manoj Srivastava Re: Updated SELinux Release Manoj Srivastava Re: Updated SELinux Release Manoj Srivastava Wednesday, 3 November Re: Updated SELinux Release Colin Walters Re: Updated SELinux Release Colin Walters Re: Updated SELinux Release Manoj Srivastava Re: selinux without sysvinit Alejandro Mery Re: Updated SELinux Release Dhruv Gami Re: What policy is the system running? Daniel J Walsh Re: Patch to make can_network stronger and remove nscd tunable. Colin Walters Re: dynamic context transitions Colin Walters Re: SELinux capable UML's (bonus: root_fs creation on Debian) Colin Walters Re: What policy is the system running? Stephen Smalley Re: learning about policies/transitions Stephen Smalley Re: selinux without sysvinit Stephen Smalley Re: What policy is the system running? Steve G Re: Patch to make can_network stronger and remove nscd tunable. Colin Walters Re: What policy is the system running? Karl MacMillan Re: dynamic context transitions Luke Kenneth Casson Leighton Re: selinux-doc problems Manoj Srivastava Re: Updated SELinux Release Karl MacMillan Re: avc: denied with kernel module .. someone help !!! Luke Kenneth Casson Leighton Re: dynamic context transitions Luke Kenneth Casson Leighton RE: dynamic context transitions Chad Hanson Re: selinux-doc problems Stephen Smalley Re: dynamic context transitions Luke Kenneth Casson Leighton selinux-doc problems Manoj Srivastava SELinux capable UML's (bonus: root_fs creation on Debian) Manoj Srivastava Re: dynamic context transitions Luke Kenneth Casson Leighton learning about policies/transitions Serge Hallyn Re: What policy is the system running? Steven Harp Re: Patch to make can_network stronger and remove nscd tunable. Daniel J Walsh Re: Patch to make can_network stronger and remove nscd tunable. Daniel J Walsh Re: dynamic context transitions Stephen Smalley Re: What policy is the system running? Steve G RE: dynamic context transitions Karl MacMillan Re: dynamic context transitions Luke Kenneth Casson Leighton Updated SELinux Release Stephen Smalley RE: dynamic context transitions Chad Hanson Re: dynamic context transitions Luke Kenneth Casson Leighton Re: dynamic context transitions Karl MacMillan selinux without sysvinit Alejandro Mery Re: dynamic context transitions Stephen Smalley Re: Patch to make can_network stronger and remove nscd tunable. Russell Coker Re: Patch to make can_network stronger and remove nscd tunable. Russell Coker Re: Patch to make can_network stronger and remove nscd tunable. Russell Coker Tuesday, 2 November Re: dynamic context transitions - a seteuid parallel Russell Coker Re: What policy is the system running? Chris PeBenito Re: Patch to make can_network stronger and remove nscd tunable. Thomas Bleher Re: What policy is the system running? Karl MacMillan RE: dynamic context transitions Karl MacMillan Re: What policy is the system running? James Morris RE: dynamic context transitions Stephen Smalley Re: dynamic context transitions Karl MacMillan patch: arpwatch cleanup Thomas Bleher patch: typealias cleanup Thomas Bleher Re: Configuring kernel module for labeling ... Stephen Smalley Re: Configuring kernel module for labeling ... Jaspreet Singh Re: dynamic context transitions Valdis.Kletnieks_at_vt.edu What policy is the system running? Daniel J Walsh RE: dynamic context transitions Chad Hanson Re: Configuring kernel module for labeling ... Stephen Smalley Re: Configuring kernel module for labeling ... Stephen Smalley Re: dynamic context transitions Stephen Smalley Re: Configuring kernel module for labeling ... Jaspreet Singh Re: dynamic context transitions Karl MacMillan RE: dynamic context transitions - a seteuid parallel Stephen Smalley Re: Configuring kernel module for labeling ... Russell Coker Re: avc: denied with kernel module Russell Coker Re: Patch to make can_network stronger and remove nscd tunable. Daniel J Walsh Re: Patch to make can_network stronger and remove nscd tunable. Daniel J Walsh Re: avc: denied with kernel module .. someone help !!! Stephen Smalley Re: Patch to make can_network stronger and remove nscd tunable. Russell Coker Re: Patch to make can_network stronger and remove nscd tunable. Russell Coker Re: dynamic context transitions Stephen Smalley RE: dynamic context transitions Chad Hanson Re: avc: denied with kernel module .. someone help !!! Jaspreet Singh Re: dynamic context transitions Colin Walters Re: Patch to make can_network stronger and remove nscd tunable. Daniel J Walsh Re: Patch to make can_network stronger and remove nscd tunable. Daniel J Walsh Re: Patch to make can_network stronger and remove nscd tunable. Stephen Smalley RE: dynamic context transitions Frank Mayer Re: Patch to make can_network stronger and remove nscd tunable. Daniel J Walsh RE: dynamic context transitions Stephen Smalley Re: dynamic context transitions Stephen Smalley Re: dynamic context transitions Karl MacMillan RE: dynamic context transitions Frank Mayer RE: dynamic context transitions Frank Mayer Re: dynamic context transitions Stephen Smalley Re: dynamic context transitions Stephen Smalley Re: dynamic context transitions Stephen Smalley RE: [PATCH] checkpolicy - nodecon ordering Stephen Smalley RE: dynamic context transitions Frank Mayer Re: Patch to make can_network stronger and remove nscd tunable. Russell Coker RE: dynamic context transitions - a seteuid parallel Frank Mayer RE: dynamic context transitions - a seteuid parallel Frank Mayer Re: set/getxattrs - I am badly struck .. Luke Kenneth Casson Leighton Re: Configuring kernel module for labeling ... Luke Kenneth Casson Leighton Re: set/getxattrs - I am badly struck .. Luke Kenneth Casson Leighton Re: dynamic context transitions Luke Kenneth Casson Leighton Configuring kernel module for labeling ... Jaspreet Singh Monday, 1 November Re: dynamic context transitions Colin Walters Re: dynamic context transitions - a seteuid parallel Karl MacMillan Re: dynamic context transitions Karl MacMillan RE: dynamic context transitions - a seteuid parallel James Morris Re: dynamic context transitions Karl MacMillan Re: dynamic context transitions Luke Kenneth Casson Leighton RE: dynamic context transitions - a seteuid parallel Chad Hanson Re: dynamic context transitions Luke Kenneth Casson Leighton Re: avc: denied with kernel module Jaspreet Singh avc: denied with kernel module Jaspreet Singh Re: dynamic context transitions Luke Kenneth Casson Leighton RE: [PATCH] checkpolicy - nodecon ordering Chad Hanson RE: dynamic context transitions Chad Hanson Re: dynamic context transitions Karl MacMillan RE: dynamic context transitions Chad Hanson Re: [PATCH] checkpolicy - nodecon ordering Karl MacMillan Re: dynamic context transitions Karl MacMillan RE: dynamic context transitions Stephen Smalley Re: dynamic context transitions Stephen Smalley Re: dynamic context transitions Luke Kenneth Casson Leighton Re: dynamic context transitions Luke Kenneth Casson Leighton RE: dynamic context transitions Stephen Smalley sexattr and getxattr Jaspreet Singh Re: dynamic context transitions Stephen Smalley Re: dynamic context transitions Luke Kenneth Casson Leighton Re: dynamic context transitions James Morris RE: dynamic context transitions Frank Mayer dynamic context transitions - a seteuid parallel Luke Kenneth Casson Leighton Re: patch: add assert statement for syslog Valdis.Kletnieks_at_vt.edu Re: dynamic context transitions Luke Kenneth Casson Leighton Re: dynamic context transitions Luke Kenneth Casson Leighton RE: dynamic context transitions Chad Hanson Re: patch: add assert statement for syslog Stephen Smalley Re: [PATCH] checkpolicy - nodecon ordering Stephen Smalley Re: patch: add assert statement for syslog Valdis.Kletnieks_at_vt.edu RE: dynamic context transitions Chad Hanson Re: dynamic context transitions Stephen Smalley Patch to make can_network stronger and remove nscd tunable. Daniel J Walsh Re: dynamic context transitions Colin Walters Re: dynamic context transitions Stephen Smalley Re: dynamic context transitions Darrel Goeddel Re: dynamic context transitions Stephen Smalley RE: dynamic context transitions Chad Hanson Re: dynamic context transitions Luke Kenneth Casson Leighton RE: dynamic context transitions Stephen Smalley Re: dynamic context transitions Stephen Smalley patch: add assert statement for syslog Thomas Bleher Sunday, 31 October RE: dynamic context transitions Frank Mayer Saturday, 30 October Re: dynamic context transitions Luke Kenneth Casson Leighton Friday, 29 October Re: dynamic context transitions James Morris Re: Proposed patch for libselinux -- xdr ??? Nifty Hat Mitch ANN: Setools 1.5 released Karl MacMillan Re: dynamic context transitions Luke Kenneth Casson Leighton Re: make policy complains on file_contexts Colin Walters Re: policy for fetchmail (new) James Carter Re: policy for ddclient (new) James Carter Re: [patch] allow hald to read selinux config James Carter Re: [patch] give userspace_objmgr access to default_context_t James Carter Re: cdrecord patch [was: Re: cdrecord deadlocks linux 2.6.8.1 (problem in setscheduler)] James Carter Re: policy for resmgrd James Carter Re: policy for timidity James Carter Re: Patch: small fix for sudo James Carter Re: screen patch James Carter dynamic context transitions Darrel Goeddel Re: make policy complains on file_contexts Valdis.Kletnieks_at_vt.edu [PATCH] checkpolicy - nodecon ordering Chad Hanson Re: make policy complains on file_contexts Russell Coker Re: make policy complains on file_contexts Stephen Smalley Thursday, 28 October RE: wrong context for ntpd.pid Richard Simpson http://www.ogc.gov.uk/oss/Report-v8c.htm Luke Kenneth Casson Leighton make policy complains on file_contexts Alex Ackerman Re: wrong context for ntpd.pid Thomas Bleher Re: SELinux with IPSec - something going on ? Trent Jaeger Re: SELinux with IPSec - something going on ? Park Lee Finally got around to adding the following patch to policycoreutils Daniel J Walsh wrong context for ntpd.pid Richard Simpson Update policy with tighter can_network as well as elimination of nscd tunables. Daniel J Walsh Re: MySQL Policy Patch Russell Coker Re: Limiting the power of can_network, improving the security of strict policy. Russell Coker Wednesday, 27 October Re: Limiting the power of can_network, improving the security of strict policy. Valdis.Kletnieks_at_vt.edu RE: sysadm_r for Staff Users Richard Simpson Re: sysadm_r for Staff Users Stephen Smalley Re: [PATCH] devpts xattr support James Morris Re: [PATCH] devpts xattr support Darrel Goeddel RE: Limiting the power of can_network, improving the security of strict policy. Jayendren Anand Maduray Re: [PATCH] devpts xattr support Colin Walters sysadm_r for Staff Users Alex Ackerman Re: Limiting the power of can_network, improving the security of strict policy. steven harp Re: Limiting the power of can_network, improving the security of strict policy. Russell Coker Limiting the power of can_network, improving the security of strict policy. Daniel J Walsh Re: screen patch Russell Coker Re: latest diffs. James Carter Re: [PATCH] devpts xattr support James Morris Overlay Filesystem and SELinux Jaspreet Singh Re: [PATCH] devpts xattr support Stephen Smalley Re: SELinux with IPSec - something going on ? Philip Leo Tuesday, 26 October Re: SELinux with IPSec - something going on ? Trent Jaeger Re: [PATCH] devpts xattr support Darrel Goeddel Re: Proposed patch for libselinux Luke Kenneth Casson Leighton Re: [PATCH] devpts xattr support Luke Kenneth Casson Leighton Re: SELinux with IPSec - something going on ? Park Lee dclabs Russell Coker Re: login as sysadm_r remotely Russell Coker Re: SELinux with IPSec - something going on ? Trent Jaeger Re: Proposed patch for libselinux Luke Kenneth Casson Leighton Re: SELinux with IPSec - something going on ? Philip Leo Re: [PATCH] devpts xattr support Stephen Smalley Re: Adding alternate root patch to restorecon (setfiles?) Russell Coker Re: Proposed patch for libselinux Stephen Smalley [PATCH] devpts xattr support Darrel Goeddel Re: Proposed patch for libselinux Luke Kenneth Casson Leighton minor checkpolicy patch Russell Coker screen patch Thomas Bleher Patch: small fix for sudo Thomas Bleher Monday, 25 October latest diffs. Daniel J Walsh Re: Adding alternate root patch to restorecon (setfiles?) Thomas Bleher Re: [patches] SE-DBUS policy revamp [1/2] Colin Walters Re: [patches] SE-DBUS policy revamp [1/2] Havoc Pennington Re: Proposed patch for libselinux Daniel J Walsh Re: SELinux with IPSec - something going on ? Stephen Smalley Re: SELinux with IPSec - something going on ? petre rodan Re: Ask for suggestions Russell Coker Re: Adding alternate root patch to restorecon (setfiles?) Russell Coker Re: Adding alternate root patch to restorecon (setfiles?) Russell Coker Re: Proposed patch for libselinux Colin Walters Re: SELinux with IPSec - something going on ? Trent Jaeger Re: Proposed patch for libselinux Stephen Smalley Re: SELinux with IPSec - something going on ? Stanislas Rusinsky Sunday, 24 October Re: mv and cp behavior. Nifty Hat Mitch Re: login as sysadm_r remotely Rene Cunningham Re: login as sysadm_r remotely Ryan Graham Re: SELinux with IPSec - something going on ? Luke Kenneth Casson Leighton Re: SELinux with IPSec - something going on ? Park Lee Saturday, 23 October Re: [patch] allow hald to read selinux config Luke Kenneth Casson Leighton [patches] SE-DBUS policy revamp [1/2] Colin Walters [patch] allow hald to read selinux config Colin Walters [patch] give userspace_objmgr access to default_context_t Colin Walters login as sysadm_r remotely Rene Cunningham Ask for suggestions Philip Leo Re: Latest diffs Russell Coker Friday, 22 October Re: Proposed patch for libselinux Daniel J Walsh Re: Proposed patch for libselinux Daniel J Walsh Re: Proposed patch for libselinux Daniel J Walsh Re: issue on confidentiality Stephen Smalley Re: What's the relationship between existing mls files? Stephen Smalley Re: issue on confidentiality Park Lee Re: What's the relationship between existing mls files? Park Lee Re: issue on confidentiality Stephen Smalley issue on confidentiality Park Lee Re: Proposed patch for libselinux Luke Kenneth Casson Leighton Re: What's the relationship between existing mls files? Stephen Smalley What's the relationship between existing mls files? Park Lee Re: Proposed patch for libselinux Stephen Smalley Re: Proposed patch for libselinux Daniel J Walsh Re: Proposed patch for libselinux Daniel J Walsh Re: Proposed patch for libselinux Stephen Smalley Re: Proposed patch for libselinux Stephen Smalley Re: Proposed patch for libselinux Daniel J Walsh Re: Proposed patch for libselinux Stephen Smalley Re: Proposed patch for libselinux Daniel J Walsh Re: Proposed patch for libselinux Stephen Smalley Thursday, 21 October Proposed patch for libselinux Daniel J Walsh Re: ANN: imsep 0.6 Colin Walters ANN: imsep 0.6 Colin Walters Wednesday, 20 October Re: cdrecord deadlocks linux 2.6.8.1 (problem in setscheduler) Chris Wright Re: cdrecord deadlocks linux 2.6.8.1 (problem in setscheduler) Stephen Smalley Re: Latest diffs Colin Walters Re: cdrecord deadlocks linux 2.6.8.1 (problem in setscheduler) Chris Wright Re: Virtualization and SELinux Luke Kenneth Casson Leighton [PATCH][SELINUX] Add DAC check for setxattr(security.selinux) Stephen Smalley Re: cdrecord deadlocks linux 2.6.8.1 (problem in setscheduler) Chris Wright Re: cdrecord deadlocks linux 2.6.8.1 (problem in setscheduler) Stephen Smalley Latest diffs Daniel J Walsh Re: Virtualization and SELinux Luke Kenneth Casson Leighton Re: cdrecord deadlocks linux 2.6.8.1 (problem in setscheduler) Stephen Smalley Re: cdrecord deadlocks linux 2.6.8.1 (problem in setscheduler) Stephen Smalley Virtualization and SELinux Jaspreet Singh Tuesday, 19 October Re: cdrecord deadlocks linux 2.6.8.1 (problem in setscheduler) Chris Wright Re: cdrecord deadlocks linux 2.6.8.1 (problem in setscheduler) James Morris Re: cdrecord deadlocks linux 2.6.8.1 (problem in setscheduler) Stephen Smalley Re: Adding alternate root patch to restorecon (setfiles?) Luke Kenneth Casson Leighton Re: cdrecord deadlocks linux 2.6.8.1 (problem in setscheduler) Stephen Smalley Re: unified_type patch for apache. Colin Walters unified_type patch for apache. Daniel J Walsh Re: cdrecord deadlocks linux 2.6.8.1 (problem in setscheduler) Chris Wright Re: cdrecord deadlocks linux 2.6.8.1 (problem in setscheduler) Stephen Smalley Re: cdrecord deadlocks linux 2.6.8.1 (problem in setscheduler) Chris Wright Re: cdrecord deadlocks linux 2.6.8.1 (problem in setscheduler) Stephen Smalley Re: cdrecord deadlocks linux 2.6.8.1 (problem in setscheduler) Chris Wright Re: cdrecord deadlocks linux 2.6.8.1 (problem in setscheduler) James Morris Re: Adding alternate root patch to restorecon (setfiles?) Stephen Smalley Re: cdrecord deadlocks linux 2.6.8.1 (problem in setscheduler) Chris Wright Re: Adding alternate root patch to restorecon (setfiles?) Luke Kenneth Casson Leighton Re: cdrecord deadlocks linux 2.6.8.1 (problem in setscheduler) Stephen Smalley Re: MySQL Policy Patch Stephen Smalley Re: MySQL Policy Patch Jiann-Ming Su Re: insmod James Carter Re: More patches for policy. James Carter Re: cdrecord deadlocks linux 2.6.8.1 (problem in setscheduler) Chris Wright Re: Adding alternate root patch to restorecon (setfiles?) Daniel J Walsh Re: More patches for policy. Daniel J Walsh Re: cdrecord deadlocks linux 2.6.8.1 (problem in setscheduler) Stephen Smalley Monday, 18 October Ping [was: Re: policy for resmgrd] Thomas Bleher cdrecord patch [was: Re: cdrecord deadlocks linux 2.6.8.1 (problem in setscheduler)] Thomas Bleher Re: kernel oops Thomas Bleher Re: More patches for policy. Thomas Bleher Re: Adding alternate root patch to restorecon (setfiles?) Thomas Bleher Re: mv and cp behavior. Colin Walters Re: Adding alternate root patch to restorecon (setfiles?) Daniel J Walsh Re: Adding alternate root patch to restorecon (setfiles?) Stephen Smalley More patches for policy. Daniel J Walsh Adding alternate root patch to restorecon (setfiles?) Daniel J Walsh Adding alternate root patch to restorecon (setfiles?) Daniel J Walsh Re: cdrecord deadlocks linux 2.6.8.1 (problem in setscheduler) Chris Wright Re: cdrecord deadlocks linux 2.6.8.1 (problem in setscheduler) Chris Wright Re: cdrecord deadlocks linux 2.6.8.1 (problem in setscheduler) Stephen Smalley Re: mv and cp behavior. Erich Schubert Re: mv and cp behavior. Colin Walters Re: Not sure the best way to handle this one. Stephen Smalley Re: mv and cp behavior. Stephen Smalley Re: MySQL Policy Patch Stephen Smalley Re: mv and cp behavior. Colin Walters MySQL Policy Patch Alex Ackerman RE: writing rules to disallow a domain to read particular files Karl MacMillan Re: cdrecord deadlocks linux 2.6.8.1 (problem in setscheduler) James Morris Re: cdrecord deadlocks linux 2.6.8.1 (problem in setscheduler) Luke Kenneth Casson Leighton Re: cdrecord deadlocks linux 2.6.8.1 (problem in setscheduler) Stephen Smalley Re: writing rules to disallow a domain to read particular files Stephen Smalley Re: mv and cp behavior. Stephen Smalley Re: writing rules to disallow a domain to read particular files Colin Walters cdrecord deadlocks linux 2.6.8.1 (problem in setscheduler) Thomas Bleher squid policy Russell Coker nscd policy Russell Coker Re: writing rules to disallow a domain to read particular files Jaspreet Singh Re: writing rules to disallow a domain to read particular files Jaspreet Singh Sunday, 17 October [patch] add D-BUS service context mapping Colin Walters Re: writing rules to disallow a domain to read particular files Chris Kuethe Re: writing rules to disallow a domain to read particular files Colin Walters Re: Not sure the best way to handle this one. Russell Coker Re: writing rules to disallow a domain to read particular files Luke Kenneth Casson Leighton Re: gentoo merge for postfix Russell Coker Re: writing rules to disallow a domain to read particular files Jaspreet Singh Re: writing rules to disallow a domain to read particular files Luke Kenneth Casson Leighton Re: SELinux Testing Software/Scripts Luke Kenneth Casson Leighton Re: kernel oops Erich Schubert Re: gentoo merge for postfix Chris PeBenito Re: writing rules to disallow a domain to read particular files Jaspreet Singh kernel oops Thomas Bleher Re: gentoo merge for postfix Thomas Bleher Saturday, 16 October Re: SELinux Testing Software/Scripts Erich Schubert Re: mv and cp behavior. Luke Kenneth Casson Leighton Re: writing rules to disallow a domain to read particular files Luke Kenneth Casson Leighton Re: SELinux Testing Software/Scripts Luke Kenneth Casson Leighton Re: writing rules to disallow a domain to read particular files Colin Walters gentoo merge for postfix petre rodan writing rules to disallow a domain to read particular files Jaspreet Singh Re: SELinux Testing Software/Scripts Daniel J Walsh Re: Not sure the best way to handle this one. Daniel J Walsh mv and cp behavior. Daniel J Walsh SELinux Testing Software/Scripts Alex Ackerman Re: policy compile fixes Russell Coker Re: Not sure the best way to handle this one. Russell Coker insmod Russell Coker Friday, 15 October Re: Asterisk on SELinux James Carter Re: New Patches James Carter Not sure the best way to handle this one. Daniel J Walsh Fwd: Awesome job Russell Coker Re: Asterisk on SELinux Russell Coker Thursday, 14 October Re: policy compile fixes Thomas Bleher Re: cups policy James Carter Re: policy compile fixes James Carter Re: Agressive Trimming of types.fc James Carter Re: cleanup: domain self references James Carter Re: policy compile fixes Kodungallur Varma cups policy Russell Coker policy compile fixes Thomas Bleher Wednesday, 13 October New Patches Daniel J Walsh Re: More SELinux fixes. James Carter Re: howl James Carter Re: udev policy James Carter Re: policy patch James Carter Re: More SELinux fixes. James Carter Re: vsftpd and chrooted home directories David A. Cafaro Re: More SELinux fixes. Russell Coker howl Russell Coker udev policy Russell Coker policy patch Russell Coker Tuesday, 12 October vsftpd and chrooted home directories Ryan Graham Re: More SELinux fixes. Daniel J Walsh Re: Asterisk on SELinux Erich Schubert cleanup: remove superfluous braces Thomas Bleher Re: need advice for ld_so_cache_t errors Stephen Smalley Re: PostgreSQL Fun Jim McCullough Monday, 11 October Re: PostgreSQL Fun Richard Hally PostgreSQL Fun Alex Ackerman Re: Where to find libselinux-devel-1.11.4-1.src.rpm ? Wolfgang Pfeiffer Re: cleanup: domain self references Thomas Bleher Re: Asterisk on SELinux Erich Schubert Asterisk on SELinux Erich Schubert Re: Agressive Trimming of types.fc Thomas Bleher cleanup: domain self references Thomas Bleher mailman Russell Coker Re: postfix policy question Russell Coker Sunday, 10 October Where to find libselinux-devel-1.11.4-1.src.rpm ? Park Lee Re: policy patches Russell Coker Re: More SELinux fixes. Russell Coker Saturday, 9 October Re: More SELinux fixes. Daniel J Walsh Re: More SELinux fixes. Russell Coker Friday, 8 October Re: More SELinux fixes. Russell Coker Re: need advice for ld_so_cache_t errors Daniel J Walsh Re: More SELinux fixes. Daniel J Walsh Re: More SELinux fixes. James Carter Re: fuse + setfilecon - need some userspace / libselinux1 assistance Stephen Smalley Re: fuse + setfilecon - need some userspace / libselinux1 assistance Luke Kenneth Casson Leighton Re: More SELinux fixes. James Carter Re: fuse + setfilecon - need some userspace / libselinux1 assistance Stephen Smalley Re: gentoo diff for ntpd James Carter Re: gentoo diff for mysqld James Carter Re: fuse Stephen Smalley Re: fuse Stephen Smalley Re: need advice for ld_so_cache_t errors Stephen Smalley [PATCH][SELINUX] Retain ptracer SID across fork Stephen Smalley Re: gentoo diff for ntpd petre rodan Re: More SELinux fixes. Russell Coker Re: .fonts-cache being created as user_home_dir_t Erich Schubert Re: .fonts-cache being created as user_home_dir_t Colin Walters Re: 2.6.9-rc2-mm4-VP-S7 - ksoftirq and selinux oddity Luke Kenneth Casson Leighton Re: 2.6.9-rc2-mm4-VP-S7 - ksoftirq and selinux oddity Stephen Smalley Re: .fonts-cache being created as user_home_dir_t Russell Coker Re: .fonts-cache being created as user_home_dir_t Luke Kenneth Casson Leighton Re: 2.6.9-rc2-mm4-VP-S7 - ksoftirq and selinux oddity Luke Kenneth Casson Leighton Thursday, 7 October Looking for contact info of NSA sponsor person for the selinux project Philippe Ombredanne More SELinux fixes. Daniel J Walsh Re: libsepol+mls compile failure Stephen Smalley Re: libsepol+mls compile failure Stephen Smalley Agressive Trimming of types.fc James Carter AVC Seqlock vs. RCU experiment results Kylene J Hall Re: 2.6.9-rc2-mm4-VP-S7 - ksoftirq and selinux oddity Stephen Smalley 2.6.9-rc2-mm4-VP-S7 - ksoftirq and selinux oddity Valdis.Kletnieks_at_vt.edu postfix policy question petre rodan gentoo diff for ipsec petre rodan Re: gentoo diff for ntpd Russell Coker Re: gentoo diff for mysqld Russell Coker Re: [PATCH] security/selinux/netif.c has a serious problem James Morris Re: [PATCH] security/selinux/netif.c has a serious problem James Morris Wednesday, 6 October Re: .fonts-cache being created as user_home_dir_t Russell Coker Re: [PATCH] security/selinux/netif.c has a serious problem Kaigai Kohei Re: [PATCH] security/selinux/netif.c has a serious problem Kaigai Kohei libsepol+mls compile failure Chris PeBenito Updated release of setools-1.4.1 Don Patterson Re: Today's Diffs. James Carter Re: [PATCH] security/selinux/netif.c has a serious problem Stephen Smalley Re: [PATCH] security/selinux/netif.c has a serious problem James Morris Re: [PATCH] security/selinux/netif.c has a serious problem James Morris Re: [PATCH] security/selinux/netif.c has a serious problem Stephen Smalley Re: [PATCH] security/selinux/netif.c has a serious problem James Morris Re: Shouldn't this avc message be dontaudited? Luke Kenneth Casson Leighton Re: Shouldn't this avc message be dontaudited? Daniel J Walsh Re: Shouldn't this avc message be dontaudited? Stephen Smalley Today's Diffs. Daniel J Walsh Re: [PATCH] security/selinux/netif.c has a serious problem Stephen Smalley Re: ReiserFS Stephen Smalley Shouldn't this avc message be dontaudited? Daniel J Walsh Re: [PATCH] security/selinux/netif.c has a serious problem James Morris Re: [PATCH] security/selinux/netif.c has a serious problem James Morris Re: [PATCH] security/selinux/netif.c has a serious problem James Morris RE: LVM/PostgreSQL/Sendmail AVC Messages Richard Simpson Re: policy patches Daniel J Walsh Re: policy patches Luke Kenneth Casson Leighton Re: policy patches Daniel J Walsh Re: policy patches James Carter Re: policy patches Erich Schubert Re: gentoo diff for mysqld petre rodan Re: gentoo diff for ntpd petre rodan Re: policy patches Luke Kenneth Casson Leighton [PATCH] security/selinux/netif.c has a serious problem Kaigai Kohei Tuesday, 5 October Re: [patch] jabberd file-context update Greg Norris LVM/PostgreSQL/Sendmail AVC Messages Alex Ackerman Re: need advice for ld_so_cache_t errors Greg Norris Re: Patch to restorecon to add -R switch Luke Kenneth Casson Leighton Re: A couple of patches to setfiles. Stephen Smalley Re: ssh_macros diff James Carter Re: policy patches James Carter Re: A couple of patches to setfiles. Daniel J Walsh Re: A couple of patches to setfiles. Stephen Smalley Re: gentoo diff for mysqld Erich Schubert Re: A couple of patches to setfiles. Stephen Smalley Re: policy patches James Carter Re: Patch to restorecon to add -R switch Daniel J Walsh Re: Patch to restorecon to add -R switch Stephen Smalley Re: policy patches James Carter Re: gentoo diff for mysqld petre rodan Re: gentoo diff for mysqld Valdis.Kletnieks_at_vt.edu Re: policy patches Daniel J Walsh Re: gentoo diff for ntpd Joshua Brindle Re: Add a new class Stephen Smalley translation Russell Coker .fonts-cache being created as user_home_dir_t Luke Kenneth Casson Leighton gentoo diff for mysqld petre rodan gentoo diff for ntpd petre rodan Monday, 4 October Re: need advice for ld_so_cache_t errors Tom London Filesystem Labeling article online James Morris (no subject) Valdis.Kletnieks_at_vt.edu Re: need advice for ld_so_cache_t errors Greg Norris Re: Add a new class Joshua Brindle Re: need advice for ld_so_cache_t errors Greg Norris Re: Add a new class Luke Kenneth Casson Leighton Add a new class Trent Jaeger Re: policy patches James Carter RE: SELinux Doesn't Complete Initialization Alex Ackerman index selinux Pratik Mehta RE: SELinux Doesn't Complete Initialization Stephen Smalley RE: SELinux Doesn't Complete Initialization Alex Ackerman Re: bug in 2.6.8.1 scsi_block.c for CDROM "get configuration" ioctl Luke Kenneth Casson Leighton Re: BUG: looks like net contexts is being ignored Luke Kenneth Casson Leighton Re: where is the modified login program's source code Stephen Smalley Re: Patch to restorecon to add -R switch Daniel J Walsh Re: Patch to restorecon to add -R switch Stephen Smalley Re: BUG: looks like net contexts is being ignored Stephen Smalley Re: patch: correct default policy type Stephen Smalley Re: SELinux Doesn't Complete Initialization Stephen Smalley Re: Role questions Stephen Smalley bug in 2.6.8.1 scsi_block.c for CDROM "get configuration" ioctl Luke Kenneth Casson Leighton Sunday, 3 October Re: need advice for ld_so_cache_t errors Greg Norris Re: purpose of the staff_r role? Wolfgang Pfeiffer Re: need advice for ld_so_cache_t errors Russell Coker Saturday, 2 October ssh_macros diff Chris PeBenito Re: Additional rule files Erich Schubert SELinux talk Colin Walters autofs - forcing an autofs4 module to have a context Luke Kenneth Casson Leighton Re: policy patches Russell Coker Re: policy patches Russell Coker fuse + selinux Luke Kenneth Casson Leighton Re: need advice for ld_so_cache_t errors Greg Norris RE: bash_profile: Permission denied Erich Schubert A couple of patches to setfiles. Daniel J Walsh Re: /usr/sbin/fstab-sync from HAL Luke Kenneth Casson Leighton Re: policy patches Daniel J Walsh Re: policy patches Daniel J Walsh Re: purpose of the staff_r role? Tom Anderson Re: need advice for ld_so_cache_t errors Greg Norris Friday, 1 October RE: bash_profile: Permission denied Richard Simpson Re: need advice for ld_so_cache_t errors Russell Coker Re: purpose of the staff_r role? Russell Coker Re: need advice for ld_so_cache_t errors Greg Norris Re: purpose of the staff_r role? Tom Anderson Re: need advice for ld_so_cache_t errors Russell Coker Re: bash_profile: Permission denied Russell Coker Re: policy patches Russell Coker Re: policy patches Russell Coker Re: bash_profile: Permission denied Greg Norris need advice for ld_so_cache_t errors Greg Norris Re: bash_profile: Permission denied Erich Schubert Re: policy patches Daniel J Walsh Re: Patch to restorecon to add -R switch Valdis.Kletnieks_at_vt.edu Re: Patch to restorecon to add -R switch Daniel J Walsh Re: Patch to restorecon to add -R switch Valdis.Kletnieks_at_vt.edu Re: Today's diffs Russell Coker Re: policy patches Russell Coker Re: policy patches James Carter Re: Today's diffs Russell Coker Re: sulogin.te James Carter Re: rpcd.te patch James Carter Re: Today's diffs Daniel J Walsh Re: Today's diffs Russell Coker Re: /usr/sbin/fstab-sync from HAL Russell Coker where should network context additions go? Greg Norris Re: Access to xdm_t Russell Coker Re: Access to xdm_t Luke Kenneth Casson Leighton Re: purpose of the staff_r role? Park Lee Thursday, 30 September Re: Representing releasibilities in SELinux Joe Nall Today's diffs Daniel J Walsh Re: Access to xdm_t Colin Walters Re: purpose of the staff_r role? Kodungallur Varma RE: apol suggestions Karl MacMillan Re: purpose of the staff_r role? Russell Coker Re: Access to xdm_t Russell Coker Re: Out of curiosity looking for suid apps without special context on FC3 Russell Coker Re: Out of curiosity looking for suid apps without special context on FC3 Thomas Bleher Re: apol suggestions Russell Coker Re: Access to xdm_t Russell Coker Re: purpose of the staff_r role? Tom Anderson Re: Access to xdm_t Luke Kenneth Casson Leighton Re: Representing releasibilities in SELinux Russell Coker Re: where is the modified login program's source code Miguel Bolanos Re: New policy diff James Carter Re: New policy diff Daniel J Walsh Out of curiosity looking for suid apps without special context on FC3 Daniel J Walsh Re: New policy diff James Carter RE: apol suggestions Karl MacMillan Re: Access to xdm_t Colin Walters Re: Access to xdm_t Thomas Bleher Re: Updated version of setools-1.4.1 James Carter where is the modified login program's source code Park Lee Re: policy for resmgrd Thomas Bleher Re: policy for timidity Thomas Bleher Re: purpose of the staff_r role? Colin Walters Re: purpose of the staff_r role? Carsten P. Gehrke Re: purpose of the staff_r role? Eric Andreychek Wednesday, 29 September Re: Access to xdm_t Colin Walters purpose of the staff_r role? Tom Anderson apol suggestions Russell Coker sulogin.te Russell Coker Re: Access to xdm_t Luke Kenneth Casson Leighton Re: policy patches Russell Coker Re: ReiserFS Russell Coker ReiserFS Russell Coker Re: Patch to restorecon to add -R switch James Carter Re: selinux tmpfs udev Russell Coker Representing releasibilities in SELinux Joe Nall Re: Access to xdm_t Russell Coker Re: policy patches Thomas Bleher Access to xdm_t Thomas Bleher Re: Problems with fixfiles and setfiles. Daniel J Walsh Re: Problems with fixfiles and setfiles. Russell Coker Re: New policy diff Daniel J Walsh Re: New policy diff Russell Coker policy patches Russell Coker New policy diff Daniel J Walsh please remove devfsd policy Russell Coker Re: postfix, spamd, cupsd all attempting name_bind to 25, 893 etc. as "reserved_port_t" Russell Coker Re: policy for timidity Russell Coker Re: policy for resmgrd Russell Coker Re: Patch for strict policy Russell Coker Tuesday, 28 September rpcd.te patch Russell Coker fuse and selinux Luke Kenneth Casson Leighton Re: Problems with fixfiles and setfiles. Luke Kenneth Casson Leighton Re: [patch] types.fc Colin Walters fuse and selinux Luke Kenneth Casson Leighton Problems with fixfiles and setfiles. Daniel J Walsh Re: Patch to restorecon to add -R switch Luke Kenneth Casson Leighton fuse + setfilecon - need some userspace / libselinux1 assistance Luke Kenneth Casson Leighton Re: [patch] types.fc Daniel J Walsh Re: dhclient from hotplug James Carter Re: [patch] jabberd file-context update James Carter Re: sendmail and cron policy James Carter Re: policy patches needed for Fedora James Carter Re: [patch] policy update for dnsmasq James Carter Re: [patch] types.fc James Carter Re: [patch] types.fc James Carter RE: Updated version of setools-1.4.1 Karl MacMillan Updated version of setools-1.4.1 Don Patterson Re: fuse - how to "mirror" user_t file access rights? Russell Coker Monday, 27 September Re: Patch for strict policy Thomas Bleher Re: Patch for strict policy James Carter RE: bash_profile: Permission denied James R. Marcus Patch to restorecon to add -R switch Daniel J Walsh Re: Patch for strict policy Daniel J Walsh Re: Patch for strict policy James Carter Sunday, 26 September fuse - how to "mirror" user_t file access rights? Luke Kenneth Casson Leighton BUG: looks like net contexts is being ignored Luke Kenneth Casson Leighton Re: reconnecting USB p rinter Russell Coker Re: postfix, spamd, cupsd all attempting name_bind to 25, 893 etc. as "reserved_port_t" Luke Kenneth Casson Leighton policy for resmgrd Thomas Bleher policy for timidity Thomas Bleher /usr/sbin/fstab-sync from HAL Luke Kenneth Casson Leighton Re: postfix, spamd, cupsd all attempting name_bind to 25, 893 etc. as "reserved_port_t" Thomas Bleher selinux tmpfs udev Luke Kenneth Casson Leighton postfix, spamd, cupsd all attempting name_bind to 25, 893 etc. as "reserved_port_t" Luke Kenneth Casson Leighton Re: udev_uses_tmpfs Luke Kenneth Casson Leighton Re: udev_uses_tmpfs Luke Kenneth Casson Leighton Re: udev_uses_tmpfs Russell Coker Re: Remove unrestricted_admin Russell Coker Re: reconnecting USB p rinter Russell Coker udev_uses_tmpfs Luke Kenneth Casson Leighton Re: Remove unrestricted_admin Luke Kenneth Casson Leighton Re: Remove unrestricted_admin Russell Coker Re: Remove unrestricted_admin Dale Amon Saturday, 25 September Re: Remove unrestricted_admin Joshua Brindle Re: Remove unrestricted_admin Joe Nall Re: Remove unrestricted_admin Dale Amon SELinux and Fedora talk at OhioLinux conference Colin Walters Re: hald - r/w access to /dev/usb/lp0? Russell Coker Re: hald - r/w access to /dev/usb/lp0? Russell Coker Re: Remove unrestricted_admin Russell Coker Re: Remove unrestricted_admin Chris PeBenito Re: Patch for strict policy Russell Coker Re: Remove unrestricted_admin Russell Coker dhclient from hotplug Russell Coker Re: Remove unrestricted_admin Christopher J. PeBenito Re: Remove unrestricted_admin Luke Kenneth Casson Leighton Re: Remove unrestricted_admin Russell Coker Friday, 24 September [patch] jabberd file-context update Greg Norris [patch] policy update for dnsmasq Greg Norris Re: Remove unrestricted_admin Luke Kenneth Casson Leighton sendmail and cron policy Russell Coker Re: Remove unrestricted_admin Russell Coker Re: Remove unrestricted_admin Christopher J. PeBenito Re: Remove unrestricted_admin Joshua Brindle Re: Remove unrestricted_admin Russell Coker Re: Remove unrestricted_admin Christopher J. PeBenito Re: patch: clean up vmware James Carter test Shyaam Sundhar Rajamadam Srinivasan Re: start_udev Russell Coker Re: SELinux policy discussion. Russell Coker Re: Remove unrestricted_admin Russell Coker test Miguel Bolanos Patch for strict policy Daniel J Walsh Re: Regarding Project in SELinux James Carter Re: file context patches Christopher J. PeBenito Regarding Project in SELinux shishir randive Re: file context patches Luke Kenneth Casson Leighton Re: bash_profile: Permission denied Russell Coker file context patches Mark Huth Thursday, 23 September [patch] types.fc Chris PeBenito Re: bash_profile: Permission denied Luke Kenneth Casson Leighton Re: start_udev Luke Kenneth Casson Leighton Re: bash_profile: Permission denied Russell Coker Re: bash_profile: Permission denied Russell Coker Re: hald.te James Carter Re: patch needed by latest rawhide James Carter Re: [RFC] Upstream policy handling Russell Coker Re: Remove unrestricted_admin James Carter Re: bash_profile: Permission denied Daniel J Walsh RE: bash_profile: Permission denied James R. Marcus start_udev Russell Coker policy patches needed for Fedora Russell Coker Re: bash_profile: Permission denied Daniel J Walsh Re: [RFC] Upstream policy handling Daniel J Walsh hald.te Russell Coker patch needed by latest rawhide Russell Coker patch: correct default policy type Timothy Wood bash_profile: Permission denied James R. Marcus Re: Role questions Artur M. Piwko Remove unrestricted_admin Daniel J Walsh Re: patch: clean up vmware Russell Coker Re: More fixes for nscd in targeted policy Russell Coker Re: SELinux Doesn't Complete Initialization Luke Kenneth Casson Leighton Wednesday, 22 September RE: SELinux Doesn't Complete Initialization Alex Ackerman Re: SELinux Doesn't Complete Initialization Luke Kenneth Casson Leighton Re: File types that are not sysadmfiles... James Carter Re: Policy patches James Carter Re: file.te and tmpfs James Carter mail servers and SE Linux Russell Coker Re: fuse Luke Kenneth Casson Leighton SELinux Doesn't Complete Initialization Alex Ackerman Re: fuse Russell Coker Re: fuse Luke Kenneth Casson Leighton Re: fuse Valdis.Kletnieks_at_vt.edu Role questions Artur M. Piwko Tuesday, 21 September fuse Luke Kenneth Casson Leighton Policy patches Daniel J Walsh Re: File types that are not sysadmfiles... Colin Walters Re: File types that are not sysadmfiles... Russell Coker Re: File types that are not sysadmfiles... Colin Walters Re: File types that are not sysadmfiles... Colin Walters SELinux Symposium Call for Presentation Proposals (Second Announcement) Frank Mayer file.te and tmpfs Russell Coker Re: File types that are not sysadmfiles... Russell Coker Monday, 20 September File types that are not sysadmfiles... Daniel J Walsh Re: Policy patches James Carter Re: [PATCH] Gentoo-specific initrc James Carter Re: policy patch: some misc additions James Carter Re: Important fix for targeted policy James Carter Re: [RFC] Upstream policy handling Colin Walters Re: [RFC] Upstream policy handling Thomas Bleher Re: [RFC] Upstream policy handling Russell Coker Re: [PATCH] Gentoo-specific initrc Christopher J. PeBenito Re: [RFC] Upstream policy handling Luke Kenneth Casson Leighton Re: [RFC] Upstream policy handling Christopher J. PeBenito Re: Policy patches Daniel J Walsh Re: [RFC] Upstream policy handling Daniel J Walsh Re: [RFC] Upstream policy handling Luke Kenneth Casson Leighton Sunday, 19 September Re: [RFC] Upstream policy handling Colin Walters Re: [RFC] Upstream policy handling Colin Walters Re: [RFC] Upstream policy handling Joshua Brindle Re: [PATCH] Gentoo-specific initrc Chris PeBenito Re: [RFC] Upstream policy handling Joshua Brindle Re: [RFC] Upstream policy handling Colin Walters Re: [RFC] Upstream policy handling Russell Coker Re: [RFC] Upstream policy handling Joshua Brindle Re: [PATCH] Gentoo-specific initrc Russell Coker Re: [RFC] Upstream policy handling Luke Kenneth Casson Leighton Re: [RFC] Upstream policy handling Russell Coker Re: Basic problems with roles and domains Luke Kenneth Casson Leighton Re: [RFC] Upstream policy handling Luke Kenneth Casson Leighton [RFC] Upstream policy handling Joshua Brindle Basic problems with roles and domains Robert Kot Re: [PATCH] Gentoo-specific initrc Chris PeBenito Re: atsar system stats Russell Coker Re: Additional rule files Russell Coker Re: [PATCH] Gentoo-specific initrc Russell Coker Saturday, 18 September Re: SELinux policy discussion. Dax Kelson Re: Strange Associate bug Colin Walters Friday, 17 September Re: policy patch: some misc additions Thomas Bleher patch: clean up vmware Thomas Bleher Re: Policy patches James Carter Re: Boolean utilities segv's Stephen Smalley Re: policy patch: some misc additions James Carter Re: Strange Associate bug Stephen Smalley Re: Boolean utilities segv's Valdis.Kletnieks_at_vt.edu Re: Boolean utilities segv's Stephen Smalley Strange Associate bug Daniel J Walsh Boolean utilities segv's George C. Wilson Re: SELinux policy discussion. Valdis.Kletnieks_at_vt.edu Important fix for targeted policy Daniel J Walsh Re: Policy patches Russell Coker Re: SELinux policy discussion. Luke Kenneth Casson Leighton Thursday, 16 September policy for ddclient (new) Greg Norris policy for fetchmail (new) Greg Norris [PATCH] Gentoo-specific initrc Chris PeBenito Re: SELinux policy discussion. Colin Walters Policy patches Daniel J Walsh Re: SELinux policy discussion. Daniel J Walsh Re: SELinux policy discussion. Ivan Gyurdiev KDE Volume Manager + D-Bus + HAL + Debian Luke Kenneth Casson Leighton Re: hald fix James Carter Re: SELinux policy discussion. Colin Walters Re: hald fix Stephen Smalley Re: hald fix Daniel J Walsh Re: hald fix James Carter Small fixes for Firefox/Mozilla Daniel J Walsh Re: hald fix Stephen Smalley Re: SELinux policy discussion. Stephen Smalley Re: SELinux policy discussion. Daniel J Walsh hald fix Russell Coker Re: SELinux policy discussion. Colin Walters Re: SELinux policy discussion. Colin Walters Wednesday, 15 September Re: SELinux policy discussion. Colin Walters Re: Patch: Kill duplicate permissions James Carter Re: [patch] add proc_fs attribute James Carter SELinux policy discussion. Daniel J Walsh Re: More fixes for nscd in targeted policy James Carter Re: [patch] don't relabel sub-subdirectories of /mnt, /media by default Luke Kenneth Casson Leighton Re: [patch] don't relabel sub-subdirectories of /mnt, /media by default Colin Walters Re: [patch] don't relabel sub-subdirectories of /mnt, /media by default Stephen Smalley Re: [patch] don't relabel sub-subdirectories of /mnt, /media by default Colin Walters Patch: Kill duplicate permissions Thomas Bleher Re: More fixes for nscd in targeted policy Stephen Smalley Re: More fixes for nscd in targeted policy Daniel J Walsh Re: More fixes for nscd in targeted policy Stephen Smalley Tuesday, 14 September policy update for dnsmasq Greg Norris Re: More fixes for nscd in targeted policy Colin Walters [patch] add proc_fs attribute Colin Walters More fixes for nscd in targeted policy Daniel J Walsh Re: policy patch against latest CVS James Carter Re: policy patch against latest CVS Daniel J Walsh Monday, 13 September Re: policy patch against latest CVS Luke Kenneth Casson Leighton Re: [patch] don't relabel sub-subdirectories of /mnt, /media by default Luke Kenneth Casson Leighton atsar system stats Erich Schubert Re: Additional rule files Erich Schubert Re: [patch] don't relabel sub-subdirectories of /mnt, /media by default James Carter Re: policy patch against latest CVS James Carter Re: ssh policy James Carter Re: checkpolicy-1.16 multiple compile job fix Stephen Smalley Re: process:share condition on 2.6.x kernel Stephen Smalley Re: ssh policy Daniel J Walsh Re: Type or domain for module utility? Stephen Smalley Re: ssh policy Daniel J Walsh Re: policy patch: some misc additions Thomas Bleher process:share condition on 2.6.x kernel Kaigai Kohei Sunday, 12 September Re: policy patch: some misc additions Russell Coker Saturday, 11 September Re: PAM in suse9.1 (Re: SuSE 9.1 SELinux) Thomas Bleher Re: PAM in suse9.1 (Re: SuSE 9.1 SELinux) Russell Coker Re: initscripts sysv se2 Luke Kenneth Casson Leighton Re: policy patch against latest CVS Luke Kenneth Casson Leighton Re: initscripts sysv se2 Russell Coker Re: at last: info regarding boot problems on multiple partitions Russell Coker Type or domain for module utility? Park Lee how to understand the defense-in-depth and ease of assurance of Flask security architecture? Park Lee Re: policy patch against latest CVS Russell Coker policy patch: some misc additions Thomas Bleher Re: policy patch against latest CVS Luke Kenneth Casson Leighton policy patch against latest CVS Russell Coker Re: ssh policy Russell Coker Re: tmpfs /dev Russell Coker Friday, 10 September checkpolicy-1.16 multiple compile job fix Chris PeBenito Re: Unexpected behaviour with SELinux. Stephen Smalley Unexpected behaviour with SELinux. Daniel J Walsh initscripts sysv se2 Luke Kenneth Casson Leighton Re: ssh policy Luke Kenneth Casson Leighton Re: ssh policy Daniel J Walsh Re: ssh policy Stephen Smalley [patch] don't relabel sub-subdirectories of /mnt, /media by default Colin Walters Re: ssh policy Daniel J Walsh Re: tmpfs /dev Luke Kenneth Casson Leighton Re: tmpfs /dev Russell Coker Thursday, 9 September Re: at last: info regarding boot problems on multiple partitions Luke Kenneth Casson Leighton Re: ssh policy James Carter Re: dev_filesystem policy James Carter Re: New policy to allow strict to run X again with tmpfs on /dev James Carter Re: Patch to make udev/tmpfs work and changes from colin walters for dbus. James Carter Re: tmpfs /dev Daniel J Walsh tmpfs /dev Russell Coker cryptsetup Russell Coker Re: at last: info regarding boot problems on multiple partitions Luke Kenneth Casson Leighton Re: Patch to make udev/tmpfs work and changes from colin walters for dbus. Colin Walters Re: at last: info regarding boot problems on multiple partitions Luke Kenneth Casson Leighton Re: at last: info regarding boot problems on multiple partitions Luke Kenneth Casson Leighton Re: domains/local/.te file_contexts/local/.fc Russell Coker Re: Proposed Hardware File Context file. Daniel J Walsh Re: at last: info regarding boot problems on multiple partitions Russell Coker Wednesday, 8 September New policy to allow strict to run X again with tmpfs on /dev Daniel J Walsh Thursday, 9 September Re: at last: info regarding boot problems on multiple partitions Luke Kenneth Casson Leighton Re: Patch to make udev/tmpfs work and changes from colin walters for dbus. James Carter Re: at last: info regarding boot problems on multiple partitions Stephen Smalley Re: PAM in suse9.1 (Re: SuSE 9.1 SELinux) Stephen Smalley Re: for bootsplash to operate correctly... Luke Kenneth Casson Leighton Re: PAM in suse9.1 (Re: SuSE 9.1 SELinux) Takuya Mishina Wednesday, 8 September Re: for bootsplash to operate correctly... Chris PeBenito at last: info regarding boot problems on multiple partitions Luke Kenneth Casson Leighton for bootsplash to operate correctly... Luke Kenneth Casson Leighton Re: Patch to make udev/tmpfs work and changes from colin walters for dbus. Luke Kenneth Casson Leighton Re: dpkg and selinux Luke Kenneth Casson Leighton Re: domains/local/.te file_contexts/local/.fc Erich Schubert dev_filesystem policy Russell Coker ssh policy Russell Coker Re: Patch to make udev/tmpfs work and changes from colin walters for dbus. Daniel J Walsh Re: Patch to make udev/tmpfs work and changes from colin walters for dbus. Stephen Smalley Re: Patch to make udev/tmpfs work and changes from colin walters for dbus. Daniel J Walsh Re: dpkg and selinux Russell Coker Re: domains/local/.te file_contexts/local/.fc Russell Coker RE: Users writting to home directory Don Patterson Re: PAM in suse9.1 (Re: SuSE 9.1 SELinux) Stephen Smalley Re: Patch to make udev/tmpfs work and changes from colin walters for dbus. Stephen Smalley Tuesday, 7 September Re: PAM in suse9.1 (Re: SuSE 9.1 SELinux) Takuya Mishina Re: Patch to make udev/tmpfs work and changes from colin walters for dbus. Luke Kenneth Casson Leighton SELinux article in eWeek Frank Mayer SELinux Symposium Call for Presentation Proposals Frank Mayer (no subject) Frank Mayer Patch to make udev/tmpfs work and changes from colin walters for dbus. Daniel J Walsh Re: Please review openssh patch for selinux Stephen Smalley Re: hald and kudzu policy patch James Carter Re: crontab -u James Carter Re: PAM in suse9.1 (Re: SuSE 9.1 SELinux) Yuichi Nakamura Re: Please review openssh patch for selinux Nigel Kukard Saturday, 4 September Re: [OT] SELinux vs. other systems [was Re: [idea] udev + selinux] Russell Coker Tuesday, 7 September Re: SuSE 9.1 SELinux Stephen Smalley Re: domains/local/.te file_contexts/local/.fc Erich Schubert Re: dpkg and selinux Luke Kenneth Casson Leighton Re: dpkg and selinux Russell Coker Re: dpkg and selinux Russell Coker Re: dpkg and selinux Russell Coker Re: domains/local/.te file_contexts/local/.fc Russell Coker Re: fedora-selinux-list Digest, Vol 7, Issue 1 Russell Coker Re: SuSE 9.1 SELinux Dale Amon Monday, 6 September Re: PAM in suse9.1 (Re: SuSE 9.1 SELinux) Takuya Mishina KDE_FORK_SLAVES Luke Kenneth Casson Leighton Re: Please review openssh patch for selinux Nigel Kukard Re: Additional rule files Erich Schubert domains/local/.te file_contexts/local/.fc Erich Schubert PAM in suse9.1 (Re: SuSE 9.1 SELinux) Yuichi Nakamura Re: SuSE 9.1 SELinux Stefano Zanarini Re: SuSE 9.1 SELinux Chris PeBenito Re: SuSE 9.1 SELinux Yuichi Nakamura Re: SuSE 9.1 SELinux Stefano Zanarini hald and kudzu policy patch Russell Coker Sunday, 5 September SuSE 9.1 SELinux Takuya Mishina Re: Additional rule files Luke Kenneth Casson Leighton Re: Additional rule files Erich Schubert Re: Additional rule files Luke Kenneth Casson Leighton Re: Additional rule files Erich Schubert Re: Is anyone using Selinux for VOIP applications? Russell Coker crontab -u Russell Coker Re: log file names (was Additional rule files) Russell Coker Re: Additional rule files Russell Coker Re: Additional rule files Russell Coker Re: Additional rule files Russell Coker Saturday, 4 September Re: [idea] file contexts "alternate" keyword Erich Schubert Re: [idea] file contexts "alternate" keyword Luke Kenneth Casson Leighton Re: [idea] file contexts "alternate" keyword Erich Schubert Re: [idea] file contexts "alternate" keyword Luke Kenneth Casson Leighton Re: [idea] file contexts "alternate" keyword Erich Schubert Re: Guide to replace root as sysadm for machine Erich Schubert Re: Please review openssh patch for selinux Daniel J Walsh Re: Guide to replace root as sysadm for machine Luke Kenneth Casson Leighton Re: [idea] file contexts "alternate" keyword Russell Coker Friday, 3 September Guide to replace root as sysadm for machine Stephen torri Additional rule files Erich Schubert Re: [idea] file contexts "alternate" keyword Erich Schubert Re: reiferfs in SUSE9.1 Yuichi Nakamura Re: [idea] file contexts "alternate" keyword Luke Kenneth Casson Leighton ANN: binary policy modules initial prototype Karl MacMillan Re: [idea] file contexts "alternate" keyword Erich Schubert Re: Proposed Hardware File Context file. Luke Kenneth Casson Leighton [idea] file contexts "alternate" keyword Luke Kenneth Casson Leighton Re: Proposed Hardware File Context file. Stephen Smalley Re: Proposed Hardware File Context file. Luke Kenneth Casson Leighton Thursday, 2 September Re: [OT] SELinux vs. other systems [was Re: [idea] udev + selinux] Linas Vepstas Friday, 3 September Re: reiferfs in SUSE9.1 Stephen Smalley automatic copying files between machines Erich Schubert reiferfs in SUSE9.1 Yuichi Nakamura Re: Proposed Hardware File Context file. Stephen Smalley Re: Proposed Hardware File Context file. Luke Kenneth Casson Leighton Re: Please review openssh patch for selinux Stephen Smalley Re: Proposed Hardware File Context file. Stephen Smalley Thursday, 2 September Re: Proposed Hardware File Context file. Colin Walters Re: Proposed Hardware File Context file. Luke Kenneth Casson Leighton Re: Proposed Hardware File Context file. Luke Kenneth Casson Leighton Re: Proposed Hardware File Context file. Daniel J Walsh Re: Latest Patches Luke Kenneth Casson Leighton Please review openssh patch for selinux Daniel J Walsh Re: Proposed Hardware File Context file. Stephen Smalley Re: Proposed Hardware File Context file. Daniel J Walsh Re: Proposed Hardware File Context file. Stephen Smalley Re: Lomac questions [was Re: [OT] SELinux vs. other systems] Luke Kenneth Casson Leighton Re: Proposed Hardware File Context file. Daniel J Walsh Re: Proposed Hardware File Context file. Daniel J Walsh Re: Proposed Hardware File Context file. Luke Kenneth Casson Leighton Re: Latest Patches Daniel J Walsh Re: Proposed Hardware File Context file. Stephen Smalley Re: Latest Patches Luke Kenneth Casson Leighton Re: [OT] SELinux vs. other systems [was Re: [idea] udev + selinux] Luke Kenneth Casson Leighton Re: Latest Patches Luke Kenneth Casson Leighton Re: what to do with matchpathcon on S_IFCHR, S_IFBLK, hard links and fifos Luke Kenneth Casson Leighton LD_DEBUG issue Joshua Brindle Re: Latest Patches James Carter Re: fedora-selinux-list Digest, Vol 7, Issue 1 Stanley A. Klein Re: Latest Patches Daniel J Walsh Lomac questions [was Re: [OT] SELinux vs. other systems] Linas Vepstas Re: Latest Patches Stephen Smalley Re: Latest Patches Stephen Smalley Re: Latest Patches Stephen Smalley Re: Latest Patches Joshua Brindle Re: [OT] SELinux vs. other systems [was Re: [idea] udev + selinux] Stephen Smalley Re: Latest Patches Daniel J Walsh Proposed Hardware File Context file. Daniel J Walsh Re: Latest Patches Stephen Smalley Re: Latest Patches Daniel J Walsh Re: Latest Patches Daniel J Walsh [patch] Role Dominance Ordering Chad Hanson Re: Latest Patches Stephen Smalley Re: what to do with matchpathcon on S_IFCHR, S_IFBLK, hard links and fifos Stephen Smalley Re: Latest Patches Russell Coker Re: what to do with matchpathcon on S_IFCHR, S_IFBLK, hard links and fifos Luke Kenneth Casson Leighton Re: Latest Patches Russell Coker Re: Latest Patches Stephen Smalley Re: Latest Patches Stephen Smalley Latest Patches Daniel J Walsh Re: [OT] SELinux vs. other systems [was Re: [idea] udev + selinux] Russell Coker Re: what to do with matchpathcon on S_IFCHR, S_IFBLK, hard links and fifos Stephen Smalley Re: /dev entries which also need to be /.?u?dev'd Luke Kenneth Casson Leighton Re: /dev entries which also need to be /.?u?dev'd Russell Coker Wednesday, 1 September Re: udev policy Russell Coker Re: dpkg and selinux Scott James Remnant Re: dpkg and selinux Luke Kenneth Casson Leighton SE Linux and /proc files Albert Cahalan Re: dpkg and selinux Scott James Remnant what to do with matchpathcon on S_IFCHR, S_IFBLK, hard links and fifos Luke Kenneth Casson Leighton Re: dpkg and selinux Luke Kenneth Casson Leighton Re: dpkg and selinux Luke Kenneth Casson Leighton Re: DBus session bus -> separate security class? Stephen Smalley Re: DBus session bus -> separate security class? Colin Walters Re: Previous patch broken. Daniel J Walsh Re: dpkg and selinux Scott James Remnant Tuesday, 31 August Re: dpkg and selinux Scott James Remnant Wednesday, 1 September Re: udev policy Stephen Smalley Re: Interpret security context Stephen Smalley Re: DBus session bus -> separate security class? Stephen Smalley DBus session bus -> separate security class? Colin Walters Re: Previous patch broken. James Carter Interpret security context Park Lee Re: [OT] SELinux vs. other systems [was Re: [idea] udev + selinux] Colin Walters Re: [OT] SELinux vs. other systems [was Re: [idea] udev + selinux] Richard Troth Re: automount policy Joshua Brindle Re: Progress! .532 boots! -- but dbus/hotplug/udev problems remain? Stephen Smalley Re: Progress! .532 boots! -- but dbus/hotplug/udev problems remain? Stephen Smalley Re: dpkg and selinux Luke Kenneth Casson Leighton Re: automount policy Luke Kenneth Casson Leighton Re: automount policy Russell Coker udev policy Russell Coker Re: Progress! .532 boots! -- but dbus/hotplug/udev problems remain? Russell Coker Re: policy patch for tunable "/dev/hdc is removable drive" Russell Coker Re: hald/hal-hotplug-map Russell Coker Tuesday, 31 August Re: automount policy Joshua Brindle automount policy Russell Coker dpkg and selinux Luke Kenneth Casson Leighton Re: [idea] udev + selinux Luke Kenneth Casson Leighton Re: [idea] udev + selinux Jim McCullough Re: [idea] udev + selinux Luke Kenneth Casson Leighton Re: [idea] udev + selinux Stephen Smalley Re: [idea] udev + selinux Luke Kenneth Casson Leighton Re: banning copying of binaries (e.g. mozilla etc). Stephen Smalley Re: banning copying of binaries (e.g. mozilla etc). Joshua Brindle Re: banning copying of binaries (e.g. mozilla etc). Stephen Smalley Re: [idea] udev + selinux Nigel Kukard Re: banning copying of binaries (e.g. mozilla etc). Joshua Brindle Re: [PATCH]SELinux performance improvement by RCU (Re: RCU issue with SELinux) Paul E. McKenney Re: [idea] udev + selinux Luke Kenneth Casson Leighton Re: [PATCH]SELinux performance improvement by RCU (Re: RCU issue with SELinux) James Morris Re: banning copying of binaries (e.g. mozilla etc). Stephen Smalley Re: banning copying of binaries (e.g. mozilla etc). Luke Kenneth Casson Leighton Re: banning copying of binaries (e.g. mozilla etc). Stephen Smalley Re: [idea] udev + selinux Luke Kenneth Casson Leighton Re: banning copying of binaries (e.g. mozilla etc). Luke Kenneth Casson Leighton Re: banning copying of binaries (e.g. mozilla etc). Stephen Smalley Re: [idea] udev + selinux Luke Kenneth Casson Leighton Re: [idea] udev + selinux Nigel Kukard Re: /dev entries which also need to be /.?u?dev'd Luke Kenneth Casson Leighton /dev entries which also need to be /.?u?dev'd Luke Kenneth Casson Leighton Re: [idea] udev + selinux Luke Kenneth Casson Leighton Re: banning copying of binaries (e.g. mozilla etc). Luke Kenneth Casson Leighton Re: [idea] udev + selinux Nigel Kukard Re: [PATCH]SELinux performance improvement by RCU (Re: RCU issue with SELinux) Kaigai Kohei Monday, 30 August Re: banning copying of binaries (e.g. mozilla etc). Joshua Brindle banning copying of binaries (e.g. mozilla etc). Luke Kenneth Casson Leighton Re: Progress! .532 boots! -- but dbus/hotplug/udev problems remain? James Carter Re: policy patch James Carter Re: Latest Diffs. James Carter Re: Progress! .532 boots! -- but dbus/hotplug/udev problems remain? Luke Kenneth Casson Leighton Re: [idea] udev + selinux Luke Kenneth Casson Leighton Previous patch broken. Daniel J Walsh Latest diffs from our pool Daniel J Walsh Re: Cleaned up udev-selinux patch Luke Kenneth Casson Leighton Re: Progress! .532 boots! -- but dbus/hotplug/udev problems remain? Daniel J Walsh Re: Progress! .532 boots! -- but dbus/hotplug/udev problems remain? Daniel J Walsh [idea] udev + selinux Nigel Kukard bug in presently-developed selinux patch to udev: no acknowledgement received Luke Kenneth Casson Leighton Re: [PATCH]SELinux performance improvement by RCU (Re: RCU issue with SELinux) Paul E. McKenney Re: Latest Diffs. Stephen Smalley Re: [PATCH]SELinux performance improvement by RCU (Re: RCU issue with SELinux) Stephen Smalley Re: Fwd: OpenSSH 3.9 released Stephen Smalley Re: Latest Diffs. Daniel J Walsh [PATCH]SELinux performance improvement by RCU (Re: RCU issue with SELinux) Kaigai Kohei Re: selinux and kde Luke Kenneth Casson Leighton Re: selinux and kde Luke Kenneth Casson Leighton rpm policy Russell Coker Sunday, 29 August Re: selinux and kde Russell Coker Re: selinux and kde Andreas Schuldei Re: Progress! .532 boots! -- but dbus/hotplug/udev problems remain? Colin Walters Re: Progress! .532 boots! -- but dbus/hotplug/udev problems remain? Tom London Re: Progress! .532 boots! -- but dbus/hotplug/udev problems remain? Tom London Re: selinux and kde Russell Coker Re: selinux and kde Russell Coker Re: policy patch for tunable "/dev/hdc is removable drive" Colin Walters Re: patches for xdm.te for kdm 3.3 Luke Kenneth Casson Leighton Re: patches for xdm.te for kdm 3.3 Russell Coker /tmp/.font-unix debian bug raised Luke Kenneth Casson Leighton Re: Progress! .532 boots! -- but dbus/hotplug/udev problems remain? Luke Kenneth Casson Leighton Re: rpc.mountd failure... Luke Kenneth Casson Leighton Re: mount accessing /dev/cdrom as a symlink Luke Kenneth Casson Leighton Re: patches for xdm.te for kdm 3.3 Luke Kenneth Casson Leighton Re: rpc.mountd failure... Russell Coker Re: Progress! .532 boots! -- but dbus/hotplug/udev problems remain? Russell Coker Re: patches for xdm.te for kdm 3.3 Russell Coker Re: mount accessing /dev/cdrom as a symlink Russell Coker Saturday, 28 August mount accessing /dev/cdrom as a symlink Luke Kenneth Casson Leighton ah ha, very funny: autofs causing grief on make relabel Luke Kenneth Casson Leighton kde 3.3 (kdm) issues Luke Kenneth Casson Leighton patches for xdm.te for kdm 3.3 Luke Kenneth Casson Leighton Re: kde 3.3's kdm creating /var/run/xdmctl Luke Kenneth Casson Leighton Re: policy patch for tunable "/dev/hdc is removable drive" Russell Coker Re: policy patch Russell Coker Re: more policy patches Russell Coker Re: Latest Diffs. Russell Coker Re: Latest Diffs. Russell Coker Re: contributing to Selinux samuel desseaux Re: contributing to Selinux Russell Coker Re: more policy patches Stephen torri Friday, 27 August Re: more policy patches Russell Coker Re: Trouble building Policy-1.16 Luke Kenneth Casson Leighton Re: patch for firefox James Carter Re: file_contexts/types.fc James Carter Re: admin.te James Carter Re: latest hald policy patch James Carter Re: more policy patches James Carter Re: policy patch James Carter contributing to Selinux samuel desseaux Re: file_contexts/types.fc Russell Coker Re: Trouble building Policy-1.16 Dale Amon Re: file_contexts/types.fc Dale Amon Re: file_contexts/types.fc Russell Coker Re: Cleaned up udev-selinux patch James Morris Re: Cleaned up udev-selinux patch Luke Kenneth Casson Leighton Re: file_contexts/types.fc Dale Amon Re: Cleaned up udev-selinux patch Luke Kenneth Casson Leighton Re: Trouble building Policy-1.16 Luke Kenneth Casson Leighton Re: Latest Diffs. James Carter Re: Cleaned up udev-selinux patch Daniel J Walsh file_contexts/types.fc Russell Coker latest hald policy patch Russell Coker iptables device nodes Russell Coker Re: RCU issue with SELinux (Re: SELINUX performance issues) Kaigai Kohei Thursday, 26 August RE: Users writting to home directory David A. Cafaro RE: Users writting to home directory David A. Cafaro Re: Trouble building Policy-1.16 Justin Friel Re: Cleaned up udev-selinux patch Greg KH Re: Cleaned up udev-selinux patch Luke Kenneth Casson Leighton Re: Cleaned up udev-selinux patch Luke Kenneth Casson Leighton Re: Trouble building Policy-1.16 Luke Kenneth Casson Leighton RE: Users writting to home directory James R. Marcus Re: Cleaned up udev-selinux patch Greg KH RE: Users writting to home directory James R. Marcus Re: Cleaned up udev-selinux patch Daniel J Walsh Wednesday, 25 August Re: Trouble building Policy-1.16 Justin Friel Thursday, 26 August Re: Cleaned up udev-selinux patch Daniel J Walsh Re: Trouble building Policy-1.16 Stephen Smalley Re: Req: patches against vanilla source Stephen Smalley Re: Trouble building Policy-1.16 Justin Friel Req: patches against vanilla source Laurens Blankers Re: Trouble building Policy-1.16 James Morris Re: Fedora and udev Joshua Brindle Re: Fedora and udev Daniel J Walsh Re: RCU issue with SELinux (Re: SELINUX performance issues) Stephen Smalley Re: Trouble building Policy-1.16 Stephen Smalley Re: policy mods for xfs (to support xfstt and xfs-xtt) Luke Kenneth Casson Leighton Re: policy patch for tunable "/dev/hdc is removable drive" Luke Kenneth Casson Leighton Re: RCU issue with SELinux (Re: SELINUX performance issues) Kaigai Kohei Re: policy for scponly - need help Stefan SF Wednesday, 25 August Re: policy patch for tunable "/dev/hdc is removable drive" Russell Coker Re: policy mods for xfs (to support xfstt and xfs-xtt) Erich Schubert Re: RCU issue with SELinux (Re: SELINUX performance issues) James Morris Re: RCU issue with SELinux (Re: SELINUX performance issues) Paul E. McKenney Re: policy patch for tunable "/dev/hdc is removable drive" Colin Walters Re: prelink on debian Luke Kenneth Casson Leighton Latest Diffs. Daniel J Walsh Re: RCU issue with SELinux (Re: SELINUX performance issues) Stephen Smalley Re: policy patch for tunable "/dev/hdc is removable drive" Luke Kenneth Casson Leighton Re: RCU issue with SELinux (Re: SELINUX performance issues) Stephen Smalley Re: policy patch for tunable "/dev/hdc is removable drive" Russell Coker Re: prelink on debian Russell Coker Re: policy patch for tunable "/dev/hdc is removable drive" Luke Kenneth Casson Leighton Re: policy mods for xfs (to support xfstt and xfs-xtt) Luke Kenneth Casson Leighton Re: prelink on debian Luke Kenneth Casson Leighton Re: prelink on debian Russell Coker Re: policy patch for tunable "/dev/hdc is removable drive" Russell Coker Re: policy patch for tunable "/dev/hdc is removable drive" Thomas Bleher Re: policy mods for xfs (to support xfstt and xfs-xtt) Russell Coker Re: patch to automount Russell Coker Re: patch for ssh-agent Russell Coker Re: RCU issue with SELinux (Re: SELINUX performance issues) Kaigai Kohei Re: RCU issue with SELinux (Re: SELINUX performance issues) Kaigai Kohei [PATCH]atomic_inc_return() for i386/x86_64 (Re: RCU issue with SELinux) Kaigai Kohei Re: RCU issue with SELinux (Re: SELINUX performance issues) Kaigai Kohei Re: named policy Russell Coker Re: hald Russell Coker Re: constraints and subtraction Russell Coker initrc.te Russell Coker admin.te Russell Coker hotplug policy Russell Coker hald Russell Coker Tuesday, 24 August Re: Users writting to home directory Karl MacMillan Re: selinux and kde Erich Schubert Re: RCU issue with SELinux (Re: SELINUX performance issues) Paul E. McKenney Re: kde 3.3's kdm creating /var/run/xdmctl Luke Kenneth Casson Leighton Re: selinux and kde Luke Kenneth Casson Leighton Re: Fedora and udev Luke Kenneth Casson Leighton Re: selinux and kde Luke Kenneth Casson Leighton Re: Policy changes James Carter Trouble building Policy-1.16 Justin Friel Re: constraints and subtraction Valdis.Kletnieks_at_vt.edu RE: Users writting to home directory James R. Marcus Re: named policy Stephen Smalley Re: policy patch Russell Coker Re: named policy Russell Coker Re: selinux and kde Andreas Schuldei Re: patch for fsadm Luke Kenneth Casson Leighton Re: Fedora and udev Luke Kenneth Casson Leighton Re: selinux and kde Luke Kenneth Casson Leighton Re: running make relabel from a cronjob Luke Kenneth Casson Leighton Re: patch for ssh-agent Luke Kenneth Casson Leighton Re: policy patch for tunable "/dev/hdc is removable drive" Luke Kenneth Casson Leighton Re: RCU issue with SELinux (Re: SELINUX performance issues) Stephen Smalley Re: patch for fsadm Russell Coker Policy changes Daniel J Walsh Re: policy patch for tunable "/dev/hdc is removable drive" Luke Kenneth Casson Leighton Re: Fedora and udev Luke Kenneth Casson Leighton Re: constraints and subtraction Stephen Smalley RE: Users writting to home directory Karl MacMillan Re: RCU issue with SELinux (Re: SELINUX performance issues) James Morris Re: Users writting to home directory Christopher J. PeBenito Re: Users writting to home directory Stephen Smalley Re: policy patch Stephen Smalley Re: policy patch for tunable "/dev/hdc is removable drive" Valdis.Kletnieks_at_vt.edu Re: named policy Stephen Smalley Re: running make relabel from a cronjob Stephen Smalley Re: patch for freshclam (live update) Russell Coker Re: Fedora and udev Stephen Smalley Re: patch for firefox Russell Coker Re: patch for ssh-agent Stephen Smalley Re: policy patch for tunable "/dev/hdc is removable drive" Stephen Smalley Re: kde 3.3's kdm creating /var/run/xdmctl Stephen Smalley running make relabel from a cronjob Luke Kenneth Casson Leighton Re: Fedora and udev Russell Coker Re: Fedora and udev Luke Kenneth Casson Leighton more policy patches Russell Coker Re: Fedora and udev Luke Kenneth Casson Leighton file_contexts in kernel Luke Kenneth Casson Leighton Re: policy patch for tunable "/dev/hdc is removable drive" Thomas Bleher Re: selinux and kde Thomas Bleher named policy Russell Coker policy patch Russell Coker Re: RCU issue with SELinux (Re: SELINUX performance issues) Kaigai Kohei Re: RCU issue with SELinux (Re: SELINUX performance issues) Kaigai Kohei Re: RCU issue with SELinux (Re: SELINUX performance issues) Kaigai Kohei Re: Fedora and udev Russell Coker Monday, 23 August Users writting to home directory James R. Marcus Re: policy patch for tunable "/dev/hdc is removable drive" Luke Kenneth Casson Leighton selinux and kde Luke Kenneth Casson Leighton policy mods for xfs (to support xfstt and xfs-xtt) Luke Kenneth Casson Leighton prelink on debian Luke Kenneth Casson Leighton Re: Fedora and udev Joshua Brindle patch to automount Luke Kenneth Casson Leighton patch for ssh-agent Luke Kenneth Casson Leighton patch for firefox Luke Kenneth Casson Leighton patch for fsadm Luke Kenneth Casson Leighton patch for freshclam (live update) Luke Kenneth Casson Leighton policy patch for tunable "/dev/hdc is removable drive" Luke Kenneth Casson Leighton constraints and subtraction Joshua Brindle kde 3.3's kdm creating /var/run/xdmctl Luke Kenneth Casson Leighton Re: [patch] libselinux MLS category bug Stephen Smalley Re: [patch] libselinux malloc return value checking Stephen Smalley Re: Now that SELinux supports booleans should we replace tunables with booleans? Daniel J Walsh Re: conflict between libselinux and libsepol Colin Walters Re: conflict between libselinux and libsepol Stephen Smalley [patch] libselinux MLS category bug Chad Hanson [patch] libselinux malloc return value checking Chad Hanson Re: conflict between libselinux and libsepol Stephen Smalley Re: conflict between libselinux and libsepol Colin Walters Re: conflict between libselinux and libsepol Stephen Smalley Re: Fedora and udev Stephen Smalley Re: conflict between libselinux and libsepol Stephen Smalley Re: Fedora and udev Luke Kenneth Casson Leighton Re: Fedora and udev Luke Kenneth Casson Leighton Sunday, 22 August Re: deleting all files in /var/log Russell Coker Re: Fedora and udev James Morris Re: Fedora and udev Russell Coker deleting all files in /var/log Luke Kenneth Casson Leighton Re: Fedora and udev Luke Kenneth Casson Leighton Re: Fedora and udev Luke Kenneth Casson Leighton Re: Fedora and udev Joshua Brindle Re: Fedora and udev Joshua Brindle Re: Fedora and udev Luke Kenneth Casson Leighton Re: dbus policy Colin Walters dbus policy Russell Coker logrotate policy Russell Coker Fedora and udev Russell Coker Friday, 20 August Re: conflict between libselinux and libsepol Colin Walters Re: conflict between libselinux and libsepol Joshua Brindle Re: conflict between libselinux and libsepol Colin Walters Re: conflict between libselinux and libsepol Colin Walters Re: RCU issue with SELinux (Re: SELINUX performance issues) James Morris Re: policy patches Stephen Smalley Re: conflict between libselinux and libsepol Stephen Smalley Re: RCU issue with SELinux (Re: SELINUX performance issues) James Morris Re: distro.tun Stephen Smalley Re: RCU issue with SELinux (Re: SELINUX performance issues) Luke Kenneth Casson Leighton little libselinux patch to display errno Colin Walters Re: policy for scponly - need help Stefan SF Re: policy for scponly - need help Stefan SF Re: conflict between libselinux and libsepol Stephen Smalley Re: RCU issue with SELinux (Re: SELINUX performance issues) James Morris Re: conflict between libselinux and libsepol Colin Walters RE: policy for scponly - need help Stephen Smalley Re: restorecon Russell Coker Re: policy for scponly - need help Colin Walters Re: RCU issue with SELinux (Re: SELINUX performance issues) Kaigai Kohei mozilla with macromedia flash plugin 6 Luke Kenneth Casson Leighton RE: policy for scponly - need help Richard Simpson genhomedircon Russell Coker Re: distro.tun Stephen Smalley Re: distro.tun Russell Coker Re: distro.tun Stephen Smalley Re: conflict between libselinux and libsepol Stephen Smalley Re: restorecon Stephen Smalley restorecon Russell Coker Re: policy for scponly - need help Stefan SF Re: distro.tun Russell Coker Re: tmpfs xattrs and stuff James Morris Fwd: OpenSSH 3.9 released Russell Coker Thursday, 19 August conflict between libselinux and libsepol Colin Walters Re: policy for scponly - need help Colin Walters Updated SELinux release Stephen Smalley policy for scponly - need help Stefan SF distro.tun Russell Coker policy patches Russell Coker Re: Information about execute_no_trans permission Russell Coker Re: idea - running setfiles out of inetd! Russell Coker Wednesday, 18 August RE: [patch] newrole and libselinux Chad Hanson Re: policy for k3b (and cdrecord) Luke Kenneth Casson Leighton Re: removed lpd.te, kept cups.te Luke Kenneth Casson Leighton Re: mozilla 0.9.3-2 crashing with tunables read and write homedir OFF Luke Kenneth Casson Leighton Re: idea - running setfiles out of inetd! Luke Kenneth Casson Leighton Information about execute_no_trans permission Carlos Anísio Monteiro Re: Port Binding Being Allowed Eric Andreychek Re: mozilla 0.9.3-2 crashing with tunables read and write homedir OFF Luke Kenneth Casson Leighton Re: [patch] setting default role from ssh Russell Coker Re: mozilla 0.9.3-2 crashing with tunables read and write homedir OFF Stephen Smalley Re: removed lpd.te, kept cups.te Russell Coker Re: policy for k3b (and cdrecord) Russell Coker Re: mozilla 0.9.3-2 crashing with tunables read and write homedir OFF Russell Coker Re: idea - running setfiles out of inetd! Russell Coker Re: bug in policy (1.14-3+?) with apache.te unused Luke Kenneth Casson Leighton Re: bug in policy (1.14-3+?) with apache.te unused Russell Coker Re: [patch] setting default role from ssh Russell Coker Tuesday, 17 August Re: hald Erich Schubert Re: mozilla 0.9.3-2 crashing with tunables read and write homedir OFF Erich Schubert Re: hald Luke Kenneth Casson Leighton Re: Port Binding Being Allowed Steven Harp Port Binding Being Allowed Eric Andreychek idea - running setfiles out of inetd! Luke Kenneth Casson Leighton mozilla 0.9.3-2 crashing with tunables read and write homedir OFF Luke Kenneth Casson Leighton k3b finding files Luke Kenneth Casson Leighton policy for k3b (and cdrecord) Luke Kenneth Casson Leighton hald Russell Coker Re: [patch] setting default role from ssh Toby Dickenson Re: Policy flexibility & multiple Policy issue Park Lee Re: [patch] setting default role from ssh Timothy Wood Re: Policy flexibility & multiple Policy issue Park Lee Re: how does this port binding happen? Stephen Smalley Re: udev and capabilities Stephen Smalley removed lpd.te, kept cups.te Luke Kenneth Casson Leighton bug in policy (1.14-3+?) with apache.te unused Luke Kenneth Casson Leighton Re: how does this port binding happen? Luke Kenneth Casson Leighton Re: how does this port binding happen? Russell Coker Re: how does this port binding happen? Luke Kenneth Casson Leighton Re: how does this port binding happen? Russell Coker Re: how does this port binding happen? James Morris Monday, 16 August how does this port binding happen? Russell Coker udev and capabilities Russell Coker Re: Bug#265920 acknowledged by developer (Re: Bug#265920: kdm 3.3 is deleting /var/run/xdmctl (causes problem under selinux)) Luke Kenneth Casson Leighton [owner@bugs.debian.org: Bug#265920 acknowledged by developer (Re: Bug#265920: kdm 3.3 is deleting /var/run/xdmctl (causes problem under selinux))] Luke Kenneth Casson Leighton Re: [patch] setting default role from ssh Stephen Smalley Re: [patch] setting default role from ssh Joshua Brindle Re: [patch] setting default role from ssh Colin Walters Re: RCU issue with SELinux (Re: SELINUX performance issues) James Morris Re: [patch] setting default role from ssh Stephen Smalley RCU issue with SELinux (Re: SELINUX performance issues) Kaigai Kohei Sunday, 15 August kdm 3.3 is deleting and recreating /var/run/xdmctl Luke Kenneth Casson Leighton udev script does NOT mount /dev/pts as claimed by debian maintainer Luke Kenneth Casson Leighton udev (0.030) doesn't remount devpts Luke Kenneth Casson Leighton Saturday, 14 August [patch] setting default role from ssh Colin Walters Friday, 13 August RE: vsftpd and security labels James R. Marcus RE: vsftpd and security labels James R. Marcus RE: vsftpd and security labels James R. Marcus RE: vsftpd and security labels James R. Marcus Preliminary Announce: First SELinux Symposium Frank Mayer Re: vsftpd and security labels Stephen Smalley vsftpd and security labels James R. Marcus Thursday, 12 August Re: device types Stephen Smalley Re: net_contexts Stephen Smalley Re: Lemuria Mirror Colin Walters Re: net_contexts Park Lee Lemuria Mirror Tom Re: [patch] newrole and libselinux Stephen Smalley Re: network object Stephen Smalley Wednesday, 11 August tmpfs xattrs and stuff Luke Kenneth Casson Leighton Re: network auditing James Morris Bug in SE-coreutils=5.0.91-2.new.se1 ? Wolfgang Pfeiffer server-based system for file context restoration Luke Kenneth Casson Leighton network auditing Russell Coker Tuesday, 10 August network object Alexis Wagner Re: Now that SELinux supports booleans should we replace tunableswith booleans? Stephen Smalley Re: Now that SELinux supports booleans should we replace tunableswith booleans? Timothy Wood RE: Now that SELinux supports booleans should we replace tunableswith booleans? Karl MacMillan RE: Now that SELinux supports booleans should we replace tunableswith booleans? Stephen Smalley Re: Now that SELinux supports booleans should we replace tunableswith booleans? Daniel J Walsh RE: Now that SELinux supports booleans should we replace tunableswith booleans? Karl MacMillan Re: Now that SELinux supports booleans should we replace tunableswith booleans? Daniel J Walsh Re: different selinux file-context root Luke Kenneth Casson Leighton Re: lots of allow xxx_device_t device_t:filesystem { associate } Luke Kenneth Casson Leighton Re: Now that SELinux supports booleans should we replace tunableswith booleans? Russell Coker Re: lots of allow xxx_device_t device_t:filesystem { associate } Russell Coker device types Russell Coker Monday, 9 August Re: Now that SELinux supports booleans should we replace tunableswith booleans? Stephen Smalley Re: different selinux file-context root Stephen Smalley different selinux file-context root Luke Kenneth Casson Leighton Re: lots of allow xxx_device_t device_t:filesystem { associate } Luke Kenneth Casson Leighton Re: lots of allow xxx_device_t device_t:filesystem { associate } Luke Kenneth Casson Leighton Re: lots of allow xxx_device_t device_t:filesystem { associate } Stephen Smalley Re: lots of allow xxx_device_t device_t:filesystem { associate } Luke Kenneth Casson Leighton Re: lots of allow xxx_device_t device_t:filesystem { associate } Stephen Smalley lots of allow xxx_device_t device_t:filesystem { associate } Luke Kenneth Casson Leighton Saturday, 7 August [patch] newrole and libselinux Chad Hanson Monday, 9 August Re: udev Luke Kenneth Casson Leighton Re: net_contexts Russell Coker Sunday, 8 August net_contexts Alexis Wagner udev Luke Kenneth Casson Leighton Saturday, 7 August Re: matchfilecon (the program) vs matchfilecon (the libselinux1 fn) Luke Kenneth Casson Leighton Thursday, 5 August Re: SE Linux and Fedora training Luke Kenneth Casson Leighton Sunday, 8 August Error: Re: Build error pam on ppc Wolfgang Pfeiffer Re: Build error pam on ppc Wolfgang Pfeiffer Friday, 6 August Re: Build error pam on ppc Wolfgang Pfeiffer SELinux policy development course Joshua Brindle Re: Now that SELinux supports booleans should we replace tunableswith booleans? Stephen Smalley Re: Now that SELinux supports booleans should we replace tunableswith booleans? Karl MacMillan Re: Now that SELinux supports booleans should we replace tunables with booleans? kmacmillan_at_tresys.com Re: Now that SELinux supports booleans should we replace tunables with booleans? Stephen Smalley Re: Now that SELinux supports booleans should we replace tunables with booleans? Stephen Smalley Re: Now that SELinux supports booleans should we replace tunables with booleans? Daniel J Walsh Re: Now that SELinux supports booleans should we replace tunables with booleans? Daniel J Walsh Re: Now that SELinux supports booleans should we replace tunables with booleans? Stephen Smalley RE: Now that SELinux supports booleans should we replace tunables with booleans? Stephen Smalley Re: Now that SELinux supports booleans should we replace tunables with booleans? Joshua Brindle RE: Now that SELinux supports booleans should we replace tunables with booleans? Stephen Smalley Re: Now that SELinux supports booleans should we replace tunables with booleans? Stephen Smalley Re: matchfilecon (the program) vs matchfilecon (the libselinux1 fn) Russell Coker Re: problems with selinux-policy-default 1:1.14-2 Andreas Schuldei Re: problems with selinux-policy-default 1:1.14-2 Russell Coker Re: Build error pam on ppc Russell Coker Thursday, 5 August Addendum: Re: SE-Packages for powerpc available Wolfgang Pfeiffer Re: [patch] fix /var/run/console bits Stephen Smalley Re: netifcon Stephen Smalley netifcon Alexis Wagner Build error pam on ppc Wolfgang Pfeiffer Re: How to use other LSM modules Stephen Smalley SE-Packages for powerpc available Wolfgang Pfeiffer Re: How to use other LSM modules Park Lee Re: Now that SELinux supports booleans should we replace tunables with booleans? Daniel J Walsh RE: Now that SELinux supports booleans should we replace tunables with booleans? Stephen Smalley RE: Now that SELinux supports booleans should we replace tunables with booleans? Stephen Smalley Re: make policy Stephen Smalley SE Linux and Fedora training Russell Coker Re: [patch] fix /var/run/console bits Russell Coker Tuesday, 3 August problems with selinux-policy-default 1:1.14-2 Andreas Schuldei Wednesday, 4 August Re: [patch] allow rpm_t to create/relabel device files too Daniel J Walsh [patch] allow rpm_t to create/relabel device files too Colin Walters Re: [patch] fix /var/run/console bits Daniel J Walsh Re: [patch] fix /var/run/console bits Colin Walters Re: [patch] udev-selinux: restores file security context and sets mode in matchpathcon Luke Kenneth Casson Leighton make policy Russell Coker Re: [patch] fix /var/run/console bits Russell Coker Tuesday, 3 August [patch] udev-selinux: restores file security context and sets mode in matchpathcon Luke Kenneth Casson Leighton Wednesday, 4 August Re: [patch] fix /var/run/console bits Luke Kenneth Casson Leighton Tuesday, 3 August [patch] fix /var/run/console bits Colin Walters Re: matchfilecon (the program) vs matchfilecon (the libselinux1 fn) Luke Kenneth Casson Leighton Re: gcc-2.95: checking for va_list assignment copy... configure: error: no Wolfgang Pfeiffer Re: matchfilecon (the program) vs matchfilecon (the libselinux1 fn) Stephen Smalley Re: Bug#263079: udev: missing mknod on ppp Luke Kenneth Casson Leighton Re: Bug#263079: udev: missing mknod on ppp Luke Kenneth Casson Leighton Monday, 2 August postgrey policy Russell Coker Re: Bug#263079: udev: missing mknod on ppp Luke Kenneth Casson Leighton Re: matchfilecon (the program) vs matchfilecon (the libselinux1 fn) Luke Kenneth Casson Leighton Re: matchfilecon (the program) vs matchfilecon (the libselinux1 fn) Luke Kenneth Casson Leighton Re: matchfilecon (the program) vs matchfilecon (the libselinux1 fn) Luke Kenneth Casson Leighton UKUUG tutorial 5th aug (leeds, uk) Luke Kenneth Casson Leighton Re: matchfilecon (the program) vs matchfilecon (the libselinux1 fn) Luke Kenneth Casson Leighton Re: matchfilecon (the program) vs matchfilecon (the libselinux1 fn) Stephen Smalley RE: Now that SELinux supports booleans should we replace tunables with booleans? Stephen Smalley Re: matchfilecon (the program) vs matchfilecon (the libselinux1 fn) Luke Kenneth Casson Leighton Re: user-directory _is_ home directory Luke Kenneth Casson Leighton Re: /etc/qt3/.qt* Luke Kenneth Casson Leighton RE: Now that SELinux supports booleans should we replace tunables with booleans? Stephen Smalley Re: /etc/qt3/.qt* Russell Coker Re: selinux-policy-default 1.14 is missing _stacks_ of stuff Russell Coker Re: /etc/qt3/.qt* Erich Schubert Re: selinux-policy-default 1.14 is missing _stacks_ of stuff Ian Campbell Re: matchfilecon (the program) vs matchfilecon (the libselinux1 fn) Stephen Smalley Re: matchfilecon (the program) vs matchfilecon (the libselinux1 fn) Stephen Smalley Re: matchfilecon (the program) vs matchfilecon (the libselinux1 fn) Luke Kenneth Casson Leighton Sunday, 1 August Re: user-directory _is_ home directory Luke Kenneth Casson Leighton Monday, 2 August Re: hacked Makefile to use 17 instead of 18 Luke Kenneth Casson Leighton Re: lkm rootkitted, or issue with selinux 2.6.7 kernel? Luke Kenneth Casson Leighton Re: /etc/qt3/.qt* Luke Kenneth Casson Leighton Re: user-directory _is_ home directory Stephen Smalley Re: lkm rootkitted, or issue with selinux 2.6.7 kernel? Erich Schubert Re: matchfilecon (the program) vs matchfilecon (the libselinux1 fn) Stephen Smalley Re: selinux-policy-default 1.14 is missing _stacks_ of stuff Russell Coker Re: temporary hack to use udev in selinux Stephen Smalley Re: selinux-policy-default 1.14 is missing _stacks_ of stuff Stephen Smalley Re: lkm rootkitted, or issue with selinux 2.6.7 kernel? Stephen Smalley Re: temporary hack to use udev in selinux Stephen Smalley Re: temporary hack to use udev in selinux Stephen Smalley Re: hacked Makefile to use 17 instead of 18 Stephen Smalley Re: policy version jumped to 18 Stephen Smalley a trivial patch Russell Coker Re: gcc-2.95: checking for va_list assignment copy... configure: error: no Russell Coker Re: gcc-2.95: checking for va_list assignment copy... configure: error: no Wolfgang Pfeiffer Re: hotplug 0.030 not setting selinux permissions on /dev/tty* Russell Coker Re: gcc-2.95: checking for va_list assignment copy... configure: error: no Russell Coker Re: /etc/qt3/.qt* Russell Coker Sunday, 1 August Re: hotplug 0.030 not setting selinux permissions on /dev/tty* Erich Schubert Re: user-directory _is_ home directory Erich Schubert Re: user-directory _is_ home directory Erich Schubert Re: /etc/qt3/.qt* Erich Schubert /etc/qt3/.qt* Luke Kenneth Casson Leighton gcc-2.95: checking for va_list assignment copy... configure: error: no Wolfgang Pfeiffer matchfilecon (the program) vs matchfilecon (the libselinux1 fn) Luke Kenneth Casson Leighton Re: selinux-policy-default 1.14 is missing _stacks_ of stuff Luke Kenneth Casson Leighton Re: udev, tmp_t (on tmpfs on /dev), and matchpathcon failing Luke Kenneth Casson Leighton Re: hotplug 0.030 not setting selinux permissions on /dev/tty* Luke Kenneth Casson Leighton hotplug 0.030 not setting selinux permissions on /dev/tty* Luke Kenneth Casson Leighton Re: udev, tmp_t (on tmpfs on /dev), and matchpathcon failing Russell Coker Re: selinux-policy-default 1.14 is missing _stacks_ of stuff Russell Coker user-directory _is_ home directory Luke Kenneth Casson Leighton Re: [Fwd: Re: Building SE-ssh. Result: fakeroot: Permission denied] Wolfgang Pfeiffer Re: selinux-policy-default 1.14 is missing _stacks_ of stuff Luke Kenneth Casson Leighton Re: selinux-policy-default 1.14 is missing _stacks_ of stuff Luke Kenneth Casson Leighton udev, tmp_t (on tmpfs on /dev), and matchpathcon failing Luke Kenneth Casson Leighton Re: selinux-policy-default 1.14 is missing _stacks_ of stuff Russell Coker lkm rootkitted, or issue with selinux 2.6.7 kernel? Luke Kenneth Casson Leighton Re: temporary hack to use udev in selinux Luke Kenneth Casson Leighton Re: temporary hack to use udev in selinux Luke Kenneth Casson Leighton Re: genhomedircon - bugs in sed stuff with unknown { } characters Russell Coker Re: temporary hack to use udev in selinux Russell Coker Re: genhomedircon - bugs in sed stuff with unknown { } characters Luke Kenneth Casson Leighton Re: hacked Makefile to use 17 instead of 18 Luke Kenneth Casson Leighton selinux-policy-default 1.14 is missing _stacks_ of stuff Luke Kenneth Casson Leighton Re: install on new machine fails due to no ln -s on default to current Russell Coker Re: Some ideas and info. Luke Kenneth Casson Leighton Re: Hi. Read below. Russell Coker Re: Some ideas and info. Luke Kenneth Casson Leighton Re: hacked Makefile to use 17 instead of 18 Russell Coker Re: genhomedircon - bugs in sed stuff with unknown { } characters Russell Coker Re: Some ideas and info. Joshua Brindle Some ideas and info. Nikolay Hi. Read below. Nikolay Saturday, 31 July Re: policy version jumped to 18 Luke Kenneth Casson Leighton Re: temporary hack to use udev in selinux Luke Kenneth Casson Leighton Re: policy version jumped to 18 Erich Schubert Re: policy version jumped to 18 Luke Kenneth Casson Leighton Friday, 30 July Re: temporary hack to use udev in selinux Russell Coker Saturday, 31 July [Fwd: Re: Building SE-ssh. Result: fakeroot: Permission denied] Wolfgang Pfeiffer hacked Makefile to use 17 instead of 18 Luke Kenneth Casson Leighton genhomedircon - bugs in sed stuff with unknown { } characters Luke Kenneth Casson Leighton install on new machine fails due to no ln -s on default to current Luke Kenneth Casson Leighton webalizer.fc missing from selinux-policy-default v 1.14-1 Luke Kenneth Casson Leighton policy version jumped to 18 Luke Kenneth Casson Leighton genhomedircon bugs Luke Kenneth Casson Leighton Friday, 30 July Re: Building SE-ssh. Result: fakeroot: Permission denied Luke Kenneth Casson Leighton Re: Building SE-ssh. Result: fakeroot: Permission denied Wolfgang Pfeiffer Re: New or Old SELinux Martin Sarsale Re: Building SE-ssh. Result: fakeroot: Permission denied Colin Walters Re: file_contexts patch Stephen Smalley Re: pear-shaped behaviour after enough make reloads Luke Kenneth Casson Leighton Re: Building SE-ssh. Result: fakeroot: Permission denied Erich Schubert Re: pear-shaped behaviour after enough make reloads Stephen Smalley Re: Building SE-ssh. Result: fakeroot: Permission denied Wolfgang Pfeiffer Building SE-ssh. Result: fakeroot: Permission denied Wolfgang Pfeiffer IBM Technical University Russell Coker Thursday, 29 July Re: pear-shaped behaviour after enough make reloads Luke Kenneth Casson Leighton Re: udev has had udev_selinux removed - argh! Luke Kenneth Casson Leighton Re: temporary hack to use udev in selinux Luke Kenneth Casson Leighton Re: temporary hack to use udev in selinux Valdis.Kletnieks_at_vt.edu Re: temporary hack to use udev in selinux Valdis.Kletnieks_at_vt.edu Re: udev has had udev_selinux removed - argh! Luke Kenneth Casson Leighton Re: udev and .dev... Luke Kenneth Casson Leighton Re: temporary hack to use udev in selinux Stephen Smalley Re: udev and .dev... Luke Kenneth Casson Leighton Re: udev and .dev... Luke Kenneth Casson Leighton Re: temporary hack to use udev in selinux Luke Kenneth Casson Leighton Re: Dominance rules Stephen Smalley Re: Dominance rules Stephen Smalley Re: temporary hack to use udev in selinux Stephen Smalley Re: temporary hack to use udev in selinux James Morris Re: temporary hack to use udev in selinux James Morris Re: udev and .dev... Stephen Smalley Re: temporary hack to use udev in selinux Stephen Smalley Re: udev and .dev... Erich Schubert Re: temporary hack to use udev in selinux Stephen Smalley Re: temporary hack to use udev in selinux Luke Kenneth Casson Leighton Re: udev and .dev... Ian Campbell Re: temporary hack to use udev in selinux Luke Kenneth Casson Leighton Re: temporary hack to use udev in selinux Luke Kenneth Casson Leighton Re: pear-shaped behaviour after enough make reloads Luke Kenneth Casson Leighton Re: udev and .dev... Luke Kenneth Casson Leighton Re: temporary hack to use udev in selinux Luke Kenneth Casson Leighton Re: temporary hack to use udev in selinux Luke Kenneth Casson Leighton Re: temporary hack to use udev in selinux Stephen Smalley Re: temporary hack to use udev in selinux Stephen Smalley Re: temporary hack to use udev in selinux Stephen Smalley Re: udev and .dev... Joshua Brindle Re: pear-shaped behaviour after enough make reloads Dale Amon udev and .dev... Luke Kenneth Casson Leighton Re: modifications to cups policy (maybe debian specific) Luke Kenneth Casson Leighton Re: no access to /var/backups/infodir.bak (?) Luke Kenneth Casson Leighton Re: no access to /var/backups/infodir.bak (?) Russell Coker Re: New or Old SELinux Russell Coker Re: modifications to cups policy (maybe debian specific) Russell Coker Wednesday, 28 July Re: temporary hack to use udev in selinux Luke Kenneth Casson Leighton Re: temporary hack to use udev in selinux Luke Kenneth Casson Leighton Re: [idea] multiple contexts. Luke Kenneth Casson Leighton Re: temporary hack to use udev in selinux Luke Kenneth Casson Leighton Re: temporary hack to use udev in selinux Joshua Brindle Re: [idea] multiple contexts. Erich Schubert temporary hack to use udev in selinux Luke Kenneth Casson Leighton Re: pear-shaped behaviour after enough make reloads Luke Kenneth Casson Leighton SSH needs to signal itself Erich Schubert Re: SeLinux packages compiled smoothly on ppc (after some help ..) Wolfgang Pfeiffer pear-shaped behaviour after enough make reloads Luke Kenneth Casson Leighton Dominance rules Dhruv Gami Re: file_contexts patch Stephen Smalley Re: [idea] multiple contexts. Luke Kenneth Casson Leighton Re: Problem: myscript, crontab and policy rules for this Tanel Kokk Re: Problem: myscript, crontab and policy rules for this Stephen Smalley modifications to cups policy (maybe debian specific) Luke Kenneth Casson Leighton Re: [idea] multiple contexts. David Caplan Problem: myscript, crontab and policy rules for this Tanel Kokk no access to /var/backups/infodir.bak (?) Luke Kenneth Casson Leighton Re: New or Old SELinux Milan P. Stanic Addendum: SeLinux packages compiled smoothly on ppc (after some help ..) Wolfgang Pfeiffer Re: umount fails on shutdown: causes next boot to fail Luke Kenneth Casson Leighton umount fails on shutdown: causes next boot to fail Luke Kenneth Casson Leighton Re: SeLinux packages compiled smoothly on ppc (after some help ..) Russell Coker Re: file_contexts patch Russell Coker Re: New or Old SELinux Russell Coker Tuesday, 27 July Re: file_contexts patch Russell Coker SeLinux packages compiled smoothly on ppc (after some help ..) Wolfgang Pfeiffer Re: [idea] multiple contexts. Luke Kenneth Casson Leighton Re: [idea] multiple contexts. Valdis.Kletnieks_at_vt.edu Re: [idea] multiple contexts. Luke Kenneth Casson Leighton Re: distcc policy Colin Walters Re: [idea] multiple contexts. Valdis.Kletnieks_at_vt.edu New or Old SELinux Martin Sarsale Re: Selinux possible on Debian-Linux/ppc? Luke Kenneth Casson Leighton Re: [idea] multiple contexts. Luke Kenneth Casson Leighton Re: [idea] multiple contexts. Stephen Smalley Re: file_contexts patch Valdis.Kletnieks_at_vt.edu Re: [idea] multiple contexts. Luke Kenneth Casson Leighton Re: Selinux possible on Debian-Linux/ppc? Wolfgang Pfeiffer Re: file_contexts patch Stephen Smalley Re: Selinux possible on Debian-Linux/ppc? Christopher J. PeBenito Re: Selinux possible on Debian-Linux/ppc? Jim McCullough Monday, 26 July Re: file_contexts patch Valdis.Kletnieks_at_vt.edu Re: file_contexts patch Thomas Bleher Re: file_contexts patch Stephen Smalley Re: [idea] multiple contexts. Stephen Smalley Sunday, 25 July Re: [patch] openvpn policy Colin Walters Re: Selinux possible on Debian-Linux/ppc? Russell Coker Re: [patch] openvpn policy Russell Coker [patch] openvpn policy Colin Walters [patch] actually label /dev/net Colin Walters Re: Selinux possible on Debian-Linux/ppc? Joerg Hoh Selinux possible on Debian-Linux/ppc? Wolfgang Pfeiffer kdeinit Luke Kenneth Casson Leighton Re: what is kdeinit for? Luke Kenneth Casson Leighton IDEA: /etc/pam.d// Luke Kenneth Casson Leighton Saturday, 24 July Re: [idea] multiple contexts. Russell Coker [idea] multiple contexts. Luke Kenneth Casson Leighton Re: file_contexts patch Thomas Bleher Thursday, 22 July Re: running interpreted scripts in different domains Luke Kenneth Casson Leighton Re: running interpreted scripts in different domains Daniel J Walsh Re: running interpreted scripts in different domains Luke Kenneth Casson Leighton Re: Skype (for Linux) Luke Kenneth Casson Leighton Wednesday, 21 July Re: Skype (for Linux) Erich Schubert Re: running interpreted scripts in different domains Thomas Bleher Skype (for Linux) Luke Kenneth Casson Leighton Tuesday, 20 July Re: running interpreted scripts in different domains Joshua Brindle Re: running interpreted scripts in different domains Luke Kenneth Casson Leighton Re: running interpreted scripts in different domains Joshua Brindle Re: running interpreted scripts in different domains James Carter Re: running interpreted scripts in different domains Joshua Brindle Re: running interpreted scripts in different domains James Carter Re: Troubles with etc/passwd being relabeled to shadow_t upon useradd/usermod Luke Kenneth Casson Leighton Re: Troubles with etc/passwd being relabeled to shadow_t upon useradd/usermod Russell Coker Re: SELinux Policy patches Russell Coker Troubles with etc/passwd being relabeled to shadow_t upon useradd/usermod Erich Schubert Monday, 19 July Re: SELinux Policy patches Erich Schubert genhomedircon Russell Coker Re: running interpreted scripts in different domains Joshua Brindle Re: running interpreted scripts in different domains Russell Coker Re: running interpreted scripts in different domains Luke Kenneth Casson Leighton Sunday, 18 July Re: file_contexts patch Russell Coker running interpreted scripts in different domains Joshua Brindle Re: file_contexts patch Thomas Bleher Saturday, 17 July dri Russell Coker Re: file_contexts patch Russell Coker Re: file_contexts patch Thomas Bleher Re: file_contexts patch Thomas Bleher Re: installing openoffice.org-mimelnk gives access error to /tmp Russell Coker installing openoffice.org-mimelnk gives access error to /tmp Luke Kenneth Casson Leighton Re: file_contexts patch Luke Kenneth Casson Leighton Friday, 16 July Re: file_contexts patch Russell Coker Re: nfs policy fixes Russell Coker Re: file_contexts patch Thomas Bleher Re: file_contexts patch Russell Coker Re: SELinux Policy patches Russell Coker small policy fixes Thomas Bleher file_contexts patch Thomas Bleher nfs policy fixes Thomas Bleher Re: SELinux Policy patches Stephen Smalley Re: SELinux Policy patches Erich Schubert Re: SELinux Policy patches Erich Schubert Re: SELinux Policy patches Russell Coker Re: SELinux Policy patches Luke Kenneth Casson Leighton Re: SELinux Policy patches Russell Coker Re: SELinux Policy patches Luke Kenneth Casson Leighton Thursday, 15 July Fwd: Fw: Horoscope bob davis Re: SELinux Policy patches Russell Coker SELinux Policy patches Erich Schubert Ottawa Linux Symposium Stephen Smalley Tuesday, 13 July Re: Bug#254153 acknowledged by developer (Bug#254153: fixed in cupsys 1.1.20final+rc1-1) Luke Kenneth Casson Leighton Re: vsftpd with SELinux Joshua Brindle Re: [SE/Linux] warning about debian hotplug package 20040329-9! Luke Kenneth Casson Leighton Re: vsftpd with SELinux Russell Coker RE: vsftpd with SELinux James R. Marcus RE: vsftpd with SELinux James R. Marcus Monday, 12 July Re: vsftpd with SELinux Russell Coker udev.te Russell Coker vsftpd with SELinux James R. Marcus Re: [SE/Linux] warning about debian hotplug package 20040329-9! Chris Babcock Re: policy patch Luke Kenneth Casson Leighton Re: Bug#258725: Location of net.agent Luke Kenneth Casson Leighton policy patch Russell Coker macros patch Russell Coker Re: small dhcpc.fc patch Stephen Smalley Re: device_type vs file_type Stephen Smalley Re: policy to allow upgrade of nfs-utils Stephen Smalley Re: policy patch Stephen Smalley Re: initrc.te Stephen Smalley Re: init.te Stephen Smalley Re: device_type vs file_type Russell Coker Re: policy to allow upgrade of nfs-utils Russell Coker Re: device_type vs file_type Stephen Smalley Re: policy to allow upgrade of nfs-utils Stephen Smalley Re: Policy flexibility & multiple Policy issue Stephen Smalley Re: Bug#258725: Location of net.agent Russell Coker Re: Bug#258725: Location of net.agent Luke Kenneth Casson Leighton Sunday, 11 July [SE/Linux] warning about debian hotplug package 20040329-9! Luke Kenneth Casson Leighton Re: warning about debian hotplug package 20040329-9! Luke Kenneth Casson Leighton Re: warning about debian hotplug package 20040329-9! Russell Coker Re: warning about debian hotplug package 20040329-9! Luke Kenneth Casson Leighton Re: warning about debian hotplug package 20040329-9! Russell Coker Policy flexibility & multiple Policy issue Park Lee Re: policy to allow upgrade of nfs-utils Russell Coker device_type vs file_type Russell Coker Friday, 9 July warning about debian hotplug package 20040329-9! Luke Kenneth Casson Leighton Sunday, 11 July policy patch Russell Coker initrc.te Russell Coker init.te Russell Coker Re: small dhcpc.fc patch Russell Coker Saturday, 10 July small dhcpc.fc patch Greg Norris Friday, 9 July Re: An SELinux policy for Red Hat 9 Valdis.Kletnieks_at_vt.edu Re: policy to allow upgrade of nfs-utils Stephen Smalley Re: An SELinux policy for Red Hat 9 Stephen Smalley Re: An SELinux policy for Red Hat 9 Bradley Chapman Re: policy to allow upgrade of nfs-utils Russell Coker Re: An SELinux policy for Red Hat 9 Stephen Smalley Re: An SELinux policy for Red Hat 9 Bradley Chapman Re: An SELinux policy for Red Hat 9 Russell Coker Thursday, 8 July An SELinux policy for Red Hat 9 Bradley Chapman Re: userhelper_t vs sysadm_userhelper_t Stephen Smalley Re: userhelper_t vs sysadm_userhelper_t Stephen Smalley Re: policy to allow upgrade of nfs-utils Stephen Smalley /halt and /.autofsck Russell Coker Re: SELinux on Debian (Sid), second try Russell Coker userhelper_t vs sysadm_userhelper_t Russell Coker Re: cifs_t Russell Coker Wednesday, 7 July Re: cifs_t Luke Kenneth Casson Leighton comment change in attrib.te Russell Coker Makefile and /etc/passwd Russell Coker policy to allow upgrade of nfs-utils Russell Coker [ANN] setools 1.4.1 release Karl MacMillan Re: New SE-DBUS patch Stephen Smalley Re: dnsmasq policy advice Stephen Smalley Re: latest LVM policy Stephen Smalley Re: policy patch Stephen Smalley Re: Serviceusers File Question? Stephen Smalley Re: New SE-DBUS patch Colin Walters Re: Question Stephen Smalley Re: cifs_t Stephen Smalley Re: Compiling error - sysvinit Stephen Smalley Re: SELinux on Debian (Sid), second try Stephen Smalley Tuesday, 6 July Serviceusers File Question? Joseph M.Kusmiss Monday, 5 July Re: dnsmasq policy advice Russell Coker Re: cifs_t Luke Kenneth Casson Leighton Re: dnsmasq policy advice Greg Norris Question Christopher Soghoian cifs_t Russell Coker Sunday, 4 July latest LVM policy Russell Coker Re: dnsmasq policy advice Greg Norris policy patch Russell Coker Re: dnsmasq policy advice Russell Coker Saturday, 3 July Re: dnsmasq policy advice Greg Norris Re: Bug#254153: cupsys: SE/Linux required to give user permission to read /var/spool/cups/certs/0 Luke Kenneth Casson Leighton Re: dnsmasq policy advice Russell Coker Friday, 2 July dnsmasq policy advice Greg Norris Re: Compiling error - sysvinit Jan Gehring Re: Compiling error - sysvinit Luke Kenneth Casson Leighton Re: Compiling error - sysvinit Chris PeBenito Re: Compiling error - sysvinit Jan Gehring [patch] policy for gpg-agent Thomas Bleher Re: Compiling error - sysvinit Luke Kenneth Casson Leighton Re: Compiling error - sysvinit Luke Kenneth Casson Leighton Compiling error - sysvinit Jan Gehring Thursday, 1 July Re: apache rule to make it write in directory Pascal Hahn [Fwd: additions to strict policy] Richard Hally Re: avc denied from postgresql Richard Hally Wednesday, 30 June Re: policy help Greg Norris Re: SELinux on Debian (Sid), second try Valdis.Kletnieks_at_vt.edu Re: apache rule to make it write in directory Russell Coker Re: apache rule to make it write in directory Pascal Hahn Re: apache rule to make it write in directory Pascal Hahn Re: SELinux on Debian (Sid), second try Magnus Therning Tuesday, 29 June Re: policy help Russell Coker policy help Greg Norris Updated Release Howard Holm Re: SELinux on Debian (Sid), second try Magnus Therning Re: SELinux on Debian (Sid), second try Russell Coker Monday, 28 June runscript_selinux Chris PeBenito Re: SELinux on Debian (Sid), second try Magnus Therning Re: assertions Stephen Smalley Re: SELinux on Debian (Sid), second try Russell Coker Re: r_file_perms and ioctl Stephen Smalley Re: SELinux on Debian (Sid), second try Magnus Therning Re: r_file_perms and ioctl Russell Coker assertions Russell Coker r_file_perms and ioctl Russell Coker Sunday, 27 June whoops! apt-get dist-upgrade fun and games Luke Kenneth Casson Leighton Re: Policy for webalizer Yuichi Nakamura Re: Policy for webalizer Russell Coker Policy for webalizer Yuichi Nakamura Re: fsck deleting extended attributes Luke Kenneth Casson Leighton Re: fsck deleting extended attributes Russell Coker Re: is there a way to express permission to access any tcp or udp socket? Luke Kenneth Casson Leighton is there a way to express permission to access any tcp or udp socket? Luke Kenneth Casson Leighton Saturday, 26 June fsck deleting extended attributes Luke Kenneth Casson Leighton [DEBIAN] module-init-tools 3.1-pre2 WATCH OUT - write permission requested! Luke Kenneth Casson Leighton Friday, 25 June Re: SELinux on Debian (Sid), second try Russell Coker Re: apache rule to make it write in directory Russell Coker Re: apache rule to make it write in directory Pascal Hahn Thursday, 24 June SELinux on Debian (Sid), second try Magnus Therning Re: apache rule to make it write in directory Russell Coker apache rule to make it write in directory Pascal Hahn ANN: slat 1.2.1 released John D. Ramsdell Wednesday, 23 June Re: generic pam authentication Colin Walters ANN: slat 1.2 released John D. Ramsdell Tuesday, 22 June Re: generic pam authentication Russell Coker kerberos policy Colin Walters Re: saslauthd policy, dovecot patches Colin Walters Re: generic pam authentication Colin Walters Re: generic pam authentication Dean Anderson Re: generic pam authentication Colin Walters generic pam authentication Colin Walters Monday, 21 June Re: sched_setscheduler() James Morris Re: sched_setscheduler() Stephen Smalley Re: Fedora Core 2 setools RPM John D. Ramsdell RE: Fedora Core 2 setools RPM Frank Mayer RE: Fedora Core 2 setools RPM Frank Mayer Re: Fedora Core 2 setools RPM Joshua D. Guttman RE: Fedora Core 2 setools RPM Frank Mayer RE: Fedora Core 2 setools RPM Frank Mayer RE: Fedora Core 2 setools RPM Frank Mayer Re: sched_setscheduler() James Morris Sunday, 20 June saslauthd policy, dovecot patches Colin Walters Re: weird issue: double reboot required with errors on multi-partition system Russell Coker weird issue: double reboot required with errors on multi-partition system Luke Kenneth Casson Leighton Saturday, 19 June sched_setscheduler() Russell Coker Re: Fedora Core 2 setools RPM Serge E. Hallyn Re: Fedora Core 2 setools RPM Russell Coker realtime LSM Russell Coker Friday, 18 June Re: Fedora Core 2 setools RPM Stephen Smalley Re: Fedora Core 2 setools RPM Joshua D. Guttman Re: SELinux on Debian (Sid) Luke Kenneth Casson Leighton Re: kde (users) requires read permission to /var/spool/cups(/certs/0) Luke Kenneth Casson Leighton Re: [SE/Linux] status / progress report 13jun2004 Luke Kenneth Casson Leighton Re: se-samba Luke Kenneth Casson Leighton Re: Fedora Core 2 setools RPM Stephen Smalley Re: Fedora Core 2 setools RPM Joshua D. Guttman Re: Fedora Core 2 setools RPM Stephen Smalley Re: Fedora Core 2 setools RPM Joshua D. Guttman Re: Questions on SID, TYPE_CHANGE, and user transitions Stephen Smalley Questions on SID, TYPE_CHANGE, and user transitions Charles M. Schmidt Re: Fedora Core 2 setools RPM Stephen Smalley Re: Fedora Core 2 setools RPM John D. Ramsdell Re: Fedora Core 2 setools RPM John D. Ramsdell Re: toggle_bool Chris PeBenito Thursday, 17 June toggle_bool Chris PeBenito RE: Fedora Core 2 setools RPM Karl MacMillan Re: Fedora Core 2 setools RPM John D. Ramsdell RE: Fedora Core 2 setools RPM Stephen Smalley RE: Fedora Core 2 setools RPM Karl MacMillan (no subject) bmcmurphy_at_dor.state.ma.us Re: CONFIG_SECURITY_NETWORK required? Stephen Smalley SE Linux enhanced strace for Fedora Core 2 John D. Ramsdell Wednesday, 16 June Re: RBAC with Unix Groups/GUIDs Russell Coker CONFIG_SECURITY_NETWORK required? Tom Anderson RBAC with Unix Groups/GUIDs bmcmurphy_at_dor.state.ma.us Re: Question about selinux & the new kernel crash exploit Stephen Smalley Question about selinux & the new kernel crash exploit Bryan Zeigler Re: Fedora Core 2 setools RPM Daniel J Walsh Tuesday, 15 June [SELINUX][PATCH 1/4] Fine-grained Netlink support - SELinux headers update James Morris Wednesday, 16 June Re: Fedora Core 2 setools RPM Stephen Smalley RE: Fedora Core 2 policy source Kratzer, James R. genhomedircon Russell Coker Tuesday, 15 June Re: [SELINUX][PATCH 1/4] Fine-grained Netlink support - SELinux headers update James Morris [SELINUX][PATCH 4/4] Fine-grained Netlink support - SELinux changes James Morris [SELINUX][PATCH 3/4] Fine-grained Netlink support - add sk to netlink_send hook James Morris [SELINUX][PATCH 2/4] Fine-grained Netlink support - move security_netlink_send() hook. James Morris [SELINUX][PATCH 0/4] Fine-grained Netlink support James Morris Re: Fedora Core 2 policy source John D. Ramsdell Re: Fedora Core 2 policy source John D. Ramsdell Fedora Core 2 setools RPM John D. Ramsdell dnsmasq policy? Greg Norris Fedora Core 2 policy source Kratzer, James R. Monday, 14 June Re: se-samba Matthew Keller Re: too many sysadmfile? Valdis.Kletnieks_at_vt.edu Re: [SE/Linux] status / progress report 13jun2004 James Morris apache tunables Russell Coker Re: [SE/Linux] status / progress report 13jun2004 James Morris Re: SELinux on Debian (Sid) Greg Norris Re: too many sysadmfile? Russell Coker Re: SELinux on Debian (Sid) Russell Coker Re: too many sysadmfile? Chris PeBenito Re: [SE/Linux] status / progress report 13jun2004 Russell Coker Re: kde (users) requires read permission to /var/spool/cups(/certs/0) Russell Coker Sunday, 13 June Re: SELinux on Debian (Sid) Greg Norris Re: too many sysadmfile? Valdis.Kletnieks_at_vt.edu Re: SELinux on Debian (Sid) Greg Norris RAID and postfix patches Colin Walters you get a break Luke Kenneth Casson Leighton Re: SELinux on Debian (Sid) Luke Kenneth Casson Leighton Re: SELinux on Debian (Sid) Greg Norris Re: SELinux on Debian (Sid) Greg Norris [SE/Linux] status / progress report 13jun2004 Luke Kenneth Casson Leighton debian font manager (defoma) and true-type fonts Luke Kenneth Casson Leighton kde (users) requires read permission to /var/spool/cups(/certs/0) Luke Kenneth Casson Leighton Re: SELinux on Debian (Sid) Luke Kenneth Casson Leighton Saturday, 12 June Re: SELinux on Debian (Sid) Greg Norris Re: SELinux on Debian (Sid) Russell Coker Re: SELinux on Debian (Sid) Greg Norris quickie additions to allow kde desktop to mount cdrom Luke Kenneth Casson Leighton Re: Regular Expression Problem Russell Coker Re: SELinux on Debian (Sid) Russell Coker Re: SELinux on Debian (Sid) Luke Kenneth Casson Leighton Re: SELinux on Debian (Sid) Luke Kenneth Casson Leighton Re: Regular Expression Problem Luke Kenneth Casson Leighton Regular Expression Problem Park Lee Friday, 11 June Re: [debian] postfix chroot setup from /etc/init.d/postfix isn't working. Russell Coker Re: SELinux on Debian (Sid) Russell Coker Re: SELinux on Debian (Sid) Greg Norris Re: [debian] postfix chroot setup from /etc/init.d/postfix isn't working. Luke Kenneth Casson Leighton Re: [debian] - installation of mysqld requires chfn Luke Kenneth Casson Leighton Re: [debian] - installation of mysqld requires chfn Luke Kenneth Casson Leighton Re: [debian] postfix chroot setup from /etc/init.d/postfix isn't working. Luke Kenneth Casson Leighton Re: se-samba - a possible way to get round no seteuid Luke Kenneth Casson Leighton Re: SELinux on Debian (Sid) Luke Kenneth Casson Leighton Re: too many sysadmfile? Chris PeBenito Re: too many sysadmfile? Chris PeBenito Re: too many sysadmfile? Russell Coker Re: SELinux on Debian (Sid) Russell Coker Thursday, 10 June Re: se-samba - a possible way to get round no seteuid Russell Coker Re: [PATCH] Kernel panic on IA-64 Linux with SELinux Kaigai Kohei Re: [debian] postfix chroot setup from /etc/init.d/postfix isn't working. Russell Coker Re: [debian] - installation of mysqld requires chfn Russell Coker Re: [debian] - installation of mysqld requires chfn Russell Coker Re: [debian] postfix chroot setup from /etc/init.d/postfix isn't working. Russell Coker Re: What is dnl Russell Coker RE: [debian] postfix chroot setup from /etc/init.d/postfix isn't working. Ed Street Re: [debian] postfix chroot setup from /etc/init.d/postfix isn't working. Luke Kenneth Casson Leighton Re: [debian] postfix chroot setup from /etc/init.d/postfix isn't working. Luke Kenneth Casson Leighton Re: SELinux on Debian (Sid) Luke Kenneth Casson Leighton Re: SELinux on Debian (Sid) Luke Kenneth Casson Leighton Re: SELinux on Debian (Sid) Luke Kenneth Casson Leighton Re: What is dnl Luke Kenneth Casson Leighton Re: What is dnl Luke Kenneth Casson Leighton Re: [debian] postfix chroot setup from /etc/init.d/postfix isn't working. Luke Kenneth Casson Leighton Re: [debian] postfix chroot setup from /etc/init.d/postfix isn't working. Luke Kenneth Casson Leighton Re: [debian] postfix chroot setup from /etc/init.d/postfix isn't working. Luke Kenneth Casson Leighton RE: [debian] postfix chroot setup from /etc/init.d/postfix isn't working. Ed Street re: [PATCH] Kernel panic on IA-64 Linux with SELinux James Morris Re: [debian] postfix chroot setup from /etc/init.d/postfix isn't working. Luke Kenneth Casson Leighton Re: [debian] - installation of mysqld requires chfn Luke Kenneth Casson Leighton RE: [debian] postfix chroot setup from /etc/init.d/postfix isn't working. Ed Street Re: [debian] - installation of mysqld requires chfn Luke Kenneth Casson Leighton Re: [debian] postfix chroot setup from /etc/init.d/postfix isn't working. Luke Kenneth Casson Leighton Re: [debian] postfix chroot setup from /etc/init.d/postfix isn't working. Luke Kenneth Casson Leighton Re: se-samba - a possible way to get round no seteuid Luke Kenneth Casson Leighton RE: [debian] postfix chroot setup from /etc/init.d/postfix isn't working. Stephen Smalley Re: Issue on the security context of inode & filesystem Stephen Smalley RE: [debian] postfix chroot setup from /etc/init.d/postfix isn't working. Ed Street Re: Restrict File creation types Stephen Smalley Re: too many sysadmfile? Stephen Smalley Restrict File creation types Kenny too many sysadmfile? Chris PeBenito Re: What is dnl Ian Campbell Re: What is dnl Park Lee Re: What is dnl Russell Coker Re: SELinux on Debian (Sid) Russell Coker What is dnl Park Lee Re: [debian] postfix chroot setup from /etc/init.d/postfix isn't working. Russell Coker Re: SELinux on Debian (Sid) Magnus Therning Re: SELinux on Debian (Sid) Magnus Therning RE: [debian] postfix chroot setup from /etc/init.d/postfix isn't working. Ed Street Issue on the security context of inode & filesystem Park Lee Re: SELinux on Debian (Sid) Russell Coker Re: SELinux on Debian (Sid) Russell Coker Re: se-samba - a possible way to get round no seteuid Russell Coker Re: issue with SE/Linux - sshd not giving access to /dev/pts/[n] Russell Coker Re: [debian] postfix chroot setup from /etc/init.d/postfix isn't working. Russell Coker Wednesday, 9 June RE: [debian] postfix chroot setup from /etc/init.d/postfix isn't working. Ed Street Re: [debian] - installation of mysqld requires chfn Russell Coker RE: [debian] postfix chroot setup from /etc/init.d/postfix isn't working. Ed Street Re: [debian] postfix chroot setup from /etc/init.d/postfix isn't working. Luke Kenneth Casson Leighton Re: [debian] postfix chroot setup from /etc/init.d/postfix isn't working. Thomas Bleher [debian] - installation of mysqld requires chfn Luke Kenneth Casson Leighton [debian] postfix chroot setup from /etc/init.d/postfix isn't working. Luke Kenneth Casson Leighton Re: too many sysadmfile? Valdis.Kletnieks_at_vt.edu Re: SELinux on Debian (Sid) Luke Kenneth Casson Leighton Re: issue with SE/Linux - sshd not giving access to /dev/pts/[n] Daniel J Walsh too many sysadmfile? Chris PeBenito How to read and understand m4 macros Park Lee SELinux on Debian (Sid) Magnus Therning Re: How to handle tmpfiles under /home ? Thomas Bleher se-samba - a possible way to get round no seteuid Luke Kenneth Casson Leighton Re: How to handle tmpfiles under /home ? Russell Coker [PATCH] Kernel panic on IA-64 Linux with SELinux B\ Tuesday, 8 June Re: support for fireflight reading /proc/NNN/fd and /proc/NNN/exe Luke Kenneth Casson Leighton Re: support for fireflight reading /proc/NNN/fd and /proc/NNN/exe Stephen Smalley Re: How to handle tmpfiles under /home ? Stephen Smalley Re: dpkg fails on installing nvidia-glx because /etc/init.d/nvidia-glx start is run Luke Kenneth Casson Leighton Re: dpkg fails on installing nvidia-glx because /etc/init.d/nvidia-glx start is run Valdis.Kletnieks_at_vt.edu Re: Is SIDs no longer used? Stephen Smalley Re: support for fireflight reading /proc/NNN/fd and /proc/NNN/exe Luke Kenneth Casson Leighton Re: dpkg fails on installing nvidia-glx because /etc/init.d/nvidia-glx start is run Luke Kenneth Casson Leighton Is SIDs no longer used? Park Lee Monday, 7 June Re: dpkg fails on installing nvidia-glx because /etc/init.d/nvidia-glx start is run Valdis.Kletnieks_at_vt.edu How to handle tmpfiles under /home ? Thomas Bleher Re: support for fireflight reading /proc/NNN/fd and /proc/NNN/exe Thomas Bleher dpkg fails on installing nvidia-glx because /etc/init.d/nvidia-glx start is run Luke Kenneth Casson Leighton Re: support for fireflight reading /proc/NNN/fd and /proc/NNN/exe Luke Kenneth Casson Leighton Re: Access to the postgresql data files Russell Coker RE: Access to the postgresql data files Stephen Smalley support for fireflight reading /proc/NNN/fd and /proc/NNN/exe Luke Kenneth Casson Leighton Re: Access to the postgresql data files Russell Coker Sunday, 6 June Re: fireflier (cool firewall program) policy files Russell Coker fireflier (cool firewall program) policy files Luke Kenneth Casson Leighton Re: [patch] Russell Coker Re: successful cupsys admin: advantages of running pam_selinux Luke Kenneth Casson Leighton Re: [patch] Luke Kenneth Casson Leighton Re: patches to debian 1.12 policy (including new "discover" policy) Luke Kenneth Casson Leighton Re: successful cupsys admin: advantages of running pam_selinux Luke Kenneth Casson Leighton Re: successful cupsys admin: advantages of running pam_selinux Russell Coker Re: patches to debian 1.12 policy (including new "discover" policy) Russell Coker Re: [patch] Russell Coker Saturday, 5 June successful cupsys admin: advantages of running pam_selinux Luke Kenneth Casson Leighton kdm 3.2.2 patch looks like it _is_ required Luke Kenneth Casson Leighton [patch] Luke Kenneth Casson Leighton exim4 patches and policy Luke Kenneth Casson Leighton patches to debian 1.12 policy (including new "discover" policy) Luke Kenneth Casson Leighton Friday, 4 June RE: Access to the postgresql data files Stephen Smalley RE: Access to the postgresql data files Igor Borisovsky Re: Access to the postgresql data files Stephen Smalley Access to the postgresql data files Igor Borisovsky Re: issue with SE/Linux - sshd not giving access to /dev/pts/[n] Stephen Smalley Re: Summary of Informal SELinux Meeting on May 6, 2004 Stephen Smalley Re: Summary of Informal SELinux Meeting on May 6, 2004 Russell Coker Re: issue with SE/Linux - sshd not giving access to /dev/pts/[n] Russell Coker Re: Summary of Informal SELinux Meeting on May 6, 2004 Stephen Smalley Re: Summary of Informal SELinux Meeting on May 6, 2004 Luke Kenneth Casson Leighton Re: Summary of Informal SELinux Meeting on May 6, 2004 Russell Coker Thursday, 3 June Re: se-samba Luke Kenneth Casson Leighton [fedora-selinux-list-bounces@redhat.com: Your message to fedora-selinux-list awaits moderator approval] Luke Kenneth Casson Leighton Re: samba Luke Kenneth Casson Leighton Re: Summary of Informal SELinux Meeting on May 6, 2004 Luke Kenneth Casson Leighton Re: samba Luke Kenneth Casson Leighton mysqld Russell Coker mysqld Russell Coker Re: issue with SE/Linux - sshd not giving access to /dev/pts/[n] Stephen Smalley Re: issue with SE/Linux - sshd not giving access to /dev/pts/[n] Stephen Smalley samba Russell Coker Re: issue with SE/Linux - sshd not giving access to /dev/pts/[n] Russell Coker Wednesday, 2 June RE: issue on binary & source compatibility Ed Street Summary of Informal SELinux Meeting on May 6, 2004 Karl MacMillan [ANNOUNCE] Setools version 1.4 released Karl MacMillan Re: issue on binary & source compatibility Valdis.Kletnieks_at_vt.edu Re: issue with SE/Linux - sshd not giving access to /dev/pts/[n] Stephen Smalley Re: Debian / SE/Linux - libselinux1 needs to be set priority "important" or "required" Stephen Smalley Re: se-samba Luke Kenneth Casson Leighton Re: issue on binary & source compatibility Stephen Smalley Re: exim4 / selinux (passwd) clash Luke Kenneth Casson Leighton Re: se-samba Luke Kenneth Casson Leighton Sunday, 30 May Re: Debian / SE/Linux - libselinux1 needs to be set priority "important" or "required" Florian Weimer Wednesday, 2 June Re: XP as a base for NetTop Luke Kenneth Casson Leighton Re: dpkg-reconfigure xserver-xfree86 Russell Coker Re: issue with SE/Linux - sshd not giving access to /dev/pts/[n] Russell Coker Re: XP as a base for NetTop Richard Sharpe Re: apache under debian Russell Coker Re: dpkg-reconfigure xserver-xfree86 Jim McCullough Tuesday, 1 June Re: issue with SE/Linux - sshd not giving access to /dev/pts/[n] Luke Kenneth Casson Leighton exim4 / selinux (passwd) clash Luke Kenneth Casson Leighton dpkg-reconfigure xserver-xfree86 Luke Kenneth Casson Leighton Re: exim (running from cron) attempting to write to logs under system_cron_t Luke Kenneth Casson Leighton Re: progress! ssh. Luke Kenneth Casson Leighton exim (running from cron) attempting to write to logs under system_cron_t Luke Kenneth Casson Leighton issue on binary & source compatibility Park Lee issue with SE/Linux - sshd not giving access to /dev/pts/[n] Luke Kenneth Casson Leighton Re: progress! ssh. Luke Kenneth Casson Leighton Re: XP as a base for NetTop Luke Kenneth Casson Leighton Re: installing x-window-system on my loovely minimalist system Luke Kenneth Casson Leighton Re: se-samba Luke Kenneth Casson Leighton /var/tmp/kdecache-username Luke Kenneth Casson Leighton issue on binary & source compatibility Park Lee ACLs and Capabilities Luke Kenneth Casson Leighton Monday, 31 May Re: corruption of ext2 filesystem (extended attributes get deleted) Russell Coker apache under debian Ed Street Tuesday, 1 June Re: Debian / SE-Linux - status report 29may2004 Stephen Smalley Re: moving to /etc/security/selinux and impact on .deb build Stephen Smalley Re: latest cvs: policy appears to have different specs for apt-get Stephen Smalley Re: XP as a base for NetTop Stephen Smalley [PATCH][SELINUX] Check processed security context length Stephen Smalley Saturday, 29 May Debian / SE-Linux - status report 29may2004 Luke Kenneth Casson Leighton Re: FW: XP as a base for NetTop Luke Kenneth Casson Leighton Debian / SE/Linux packages: "Pre-Depends". Luke Kenneth Casson Leighton moving to /etc/security/selinux and impact on .deb build Luke Kenneth Casson Leighton latest cvs: policy appears to have different specs for apt-get Luke Kenneth Casson Leighton Re: se-samba Luke Kenneth Casson Leighton Re: XP as a base for NetTop kris carlier Re: se-samba Luke Kenneth Casson Leighton Re: XP as a base for NetTop Luke Kenneth Casson Leighton Thursday, 27 May Re: XP as a base for NetTop Joshua Brindle Friday, 28 May Re: XP as a base for NetTop Luke Kenneth Casson Leighton Thursday, 27 May Re: FW: XP as a base for NetTop Stephen Smalley Re: XP as a base for NetTop Dr. Eugene D. Myers Re: XP as a base for NetTop Dr. Eugene D. Myers hint for patching debian shadow tools/useradd Dave Gilbert (Home) Re: Security contexts for the contexts directory? Stephen Smalley Re: Security contexts for the contexts directory? Daniel J Walsh Re: Security contexts for the contexts directory? Stephen Smalley Security contexts for the contexts directory? Daniel J Walsh Re: FW: XP as a base for NetTop Luke Kenneth Casson Leighton Wednesday, 26 May Re: New design for policy on disk allowing multiple policy rpms to be simultaniously installed. Jeff Johnson Re: FW: XP as a base for NetTop Chris Babcock FW: XP as a base for NetTop Frank Mayer Re: New design for policy on disk allowing multiple policy rpms to be simultaniously installed. Stephen Smalley Re: mysql issues... Stephen Smalley Re: mysql issues... Valdis.Kletnieks_at_vt.edu Re: X policy classes Stephen Smalley Re: X policy classes Stephen Smalley Re: [PATCH][RFC] Allow administrator control over per-user default_contexts Stephen Smalley Re: 32bit / 64bit support Joshua Brindle Re: mysql issues... Russell Coker Tuesday, 25 May Re: 32bit / 64bit support Miguel Bolanos 32bit / 64bit support Chris Babcock Re: New design for policy on disk allowing multiple policy rpms to be simultaniously installed. Daniel J Walsh Re: New design for policy on disk allowing multiple policy rpms to be simultaniously installed. Jeff Johnson Re: New design for policy on disk allowing multiple policy rpms to be simultaniously installed. Jeff Johnson New design for policy on disk allowing multiple policy rpms to be simultaniously installed. Daniel J Walsh Re: [PATCH][RFC] Allow administrator control over per-user default_contexts Daniel J Walsh Re: SELOPT vs. DSI Stephen Smalley Re: [PATCH][RFC] Allow administrator control over per-user default_contexts Stephen Smalley Re: [PATCH][RFC] Allow administrator control over per-user default_contexts Stephen Smalley merging of SuSE stuff into sf.net cvs Luke Kenneth Casson Leighton Re: [patch] policy for nrpe Thomas Bleher Re: [PATCH][RFC] Allow administrator control over per-user default_contexts Luke Kenneth Casson Leighton SELOPT vs. DSI amine.baina_at_ensi-bourges.fr Monday, 24 May Re: [patch] policy for nrpe Russell Coker Re: [patch] policy for nrpe Russell Coker Re: [PATCH][RFC] Allow administrator control over per-user default_contexts Stephen Smalley Re: [PATCH][RFC] Allow administrator control over per-user default_contexts Valdis.Kletnieks_at_vt.edu Re: Bootup problems Stephen Smalley Re: [PATCH][RFC] Allow administrator control over per-user default_contexts Stephen Smalley Re: [PATCH][RFC] Allow administrator control over per-user default_contexts Timothy Re: [PATCH][RFC] Allow administrator control over per-user default_contexts Timothy Re: [PATCH][RFC] Allow administrator control over per-user default_contexts Stephen Smalley Re: [patch] policy for nrpe Thomas Bleher Sunday, 23 May Re: [patch] policy for nrpe Russell Coker [patch] policy for nrpe Thomas Bleher policy for suse Thomas Bleher Re: [PATCH][RFC] Allow administrator control over per-user default_contexts Russell Coker Bootup problems Thomas Bleher Friday, 21 May Re: [PATCH][RFC] Allow administrator control over per-user default_contexts Valdis.Kletnieks_at_vt.edu Re: Loadable Policy Modules and a Generic MAC Policy Language Valdis.Kletnieks_at_vt.edu [PATCH][RFC] Allow administrator control over per-user default_contexts Stephen Smalley Re: Fixfiles "undocumented feature" Stephen Smalley Re: Loadable Policy Modules and a Generic MAC Policy Language Stephen Smalley Thursday, 20 May Loadable Policy Modules and a Generic MAC Policy Language K Vikram uw-imapd policy Ed Street Fixfiles "undocumented feature" Mike Perry Re: se-samba Luke Kenneth Casson Leighton Re: se-samba Luke Kenneth Casson Leighton Re: Bug#193644: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=193644 (cron upstream patch) Luke Kenneth Casson Leighton se-samba Joshua Brindle Re: start of patch to dpkg's start-stop-daemon Russell Coker Re: FAM uses seteuid and setegid Russell Coker Re: is this pretty much it (to patch kdm 3.2.2)? Russell Coker Re: FAM uses seteuid and setegid Russell Coker file_contexts changes Russell Coker Wednesday, 19 May Re: Policy compiler issues. Russell Coker Thursday, 20 May Re: start of patch to dpkg's start-stop-daemon Luke Kenneth Casson Leighton Re: Bug#193644: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=193644 (cron upstream patch) Russell Coker RE: Policy compiler issues. Frank Mayer Re: is this pretty much it (to patch kdm 3.2.2)? Luke Kenneth Casson Leighton Re: is this pretty much it (to patch kdm 3.2.2)? Luke Kenneth Casson Leighton Re: is this pretty much it (to patch kdm 3.2.2)? Luke Kenneth Casson Leighton Re: FAM uses seteuid and setegid Stephen Smalley Re: FAM uses seteuid and setegid Luke Kenneth Casson Leighton Re: is this pretty much it (to patch kdm 3.2.2)? Stephen Smalley Re: start of patch to dpkg's start-stop-daemon Luke Kenneth Casson Leighton RE: Policy compiler issues. Stephen Smalley Re: is this pretty much it (to patch kdm 3.2.2)? Luke Kenneth Casson Leighton RE: Policy compiler issues. Bush, Daniel Re: Bug#193644: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=193644 (cron upstream patch) Steve Greenland Re: start of patch to dpkg's start-stop-daemon Russell Coker updated - but irrelevant (with pam enabled) - SE/Linux patch Luke Kenneth Casson Leighton Re: is this pretty much it (to patch kdm 3.2.2)? Luke Kenneth Casson Leighton Re: FAM uses seteuid and setegid Stephen Smalley Re: FAM uses seteuid and setegid Stephen Smalley Re: Bug#193644: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=193644 (cron upstream patch) Luke Kenneth Casson Leighton Re: FAM uses seteuid and setegid Luke Kenneth Casson Leighton Re: is this pretty much it (to patch kdm 3.2.2)? Stephen Smalley Re: FAM uses seteuid and setegid Stephen Smalley Re: Bug#193644: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=193644 (cron upstream patch) Luke Kenneth Casson Leighton FAM uses seteuid and setegid Luke Kenneth Casson Leighton Re: Policy compiler issues. Stephen Smalley Re: is this pretty much it (to patch kdm 3.2.2)? Thomas Bleher Re: Bug#193644: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=193644 (cron upstream patch) Stephen Smalley Re: Bug#193644: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=193644 (cron upstream patch) Stephen Smalley Re: something up with use of setfiles Luke Kenneth Casson Leighton something up with use of setfiles Luke Kenneth Casson Leighton start of patch to dpkg's start-stop-daemon Luke Kenneth Casson Leighton Re: policy questions and bugs Luke Kenneth Casson Leighton Re: Bug#193644: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=193644 (cron upstream patch) Luke Kenneth Casson Leighton Re: Bug#193644: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=193644 (cron upstream patch) Luke Kenneth Casson Leighton Re: Policy compiler issues. Luke Kenneth Casson Leighton Wednesday, 19 May Policy compiler issues. Bush, Daniel Re: Bug#193644: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=193644 (cron upstream patch) Steve Greenland Re: policy questions and bugs Russell Coker Re: Bug#193644: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=193644 (cron upstream patch) Russell Coker Re: SE-X available Charles R Martin Re: Bug#193644: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=193644 (cron upstream patch) Luke Kenneth Casson Leighton Re: Bug#193644: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=193644 (cron upstream patch) Russell Coker Re: policy questions and bugs Chris Grier Re: Bug#193644: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=193644 (cron upstream patch) Steve Greenland Re: adduser script Luke Kenneth Casson Leighton Re: kdm 3.2.2 and kernel image 2.6.6 selinux .debs available Luke Kenneth Casson Leighton kdm 3.2.2 and kernel image 2.6.6 selinux .debs available Luke Kenneth Casson Leighton Tuesday, 18 May updated patch to kde 3.2.2 for kdm (build in progress...) Luke Kenneth Casson Leighton Wednesday, 19 May RE: adduser script Frank Mayer Re: adduser script Luke Kenneth Casson Leighton Re: adduser script Luke Kenneth Casson Leighton Re: is this pretty much it (to patch kdm 3.2.2)? Luke Kenneth Casson Leighton Re: adduser script Luke Kenneth Casson Leighton Re: adduser script Luke Kenneth Casson Leighton Re: is this pretty much it (to patch kdm 3.2.2)? Russell Coker Re: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=193644 (cron upstream patch) Luke Kenneth Casson Leighton RE: adduser script Ed Street Re: adduser script Luke Kenneth Casson Leighton Re: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=193644 (cron upstream patch) Stephen Smalley Re: is this pretty much it (to patch kdm 3.2.2)? Luke Kenneth Casson Leighton Re: is this pretty much it (to patch kdm 3.2.2)? Stephen Smalley Re: Suse Thorsten Kukuk Re: is this pretty much it (to patch kdm 3.2.2)? Stephen Smalley RE: adduser script Ed Street RE: adduser script Frank Mayer Re: is this pretty much it (to patch kdm 3.2.2)? Luke Kenneth Casson Leighton Re: is this pretty much it (to patch kdm 3.2.2)? Thomas Bleher adduser script Luke Kenneth Casson Leighton http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=193644 (cron upstream patch) Luke Kenneth Casson Leighton is this pretty much it (to patch kdm 3.2.2)? Luke Kenneth Casson Leighton Re: avc messages occuring that aren't getting into dmesg or syslog Russell Coker Tuesday, 18 May Re: audit2allow successfully got rid of the avc errors Russell Coker Re: list of permissions created by allow2audit: what do i do now? Luke Kenneth Casson Leighton patch for wdm /var/lib access Luke Kenneth Casson Leighton Re: [PATCH] some file_contexts for SuSE, binfmt_misc, small cleanup (was: Re: Suse) Luke Kenneth Casson Leighton avc messages occuring that aren't getting into dmesg or syslog Luke Kenneth Casson Leighton audit2allow successfully got rid of the avc errors Luke Kenneth Casson Leighton Re: list of permissions created by allow2audit: what do i do now? Luke Kenneth Casson Leighton Re: list of permissions created by allow2audit: what do i do now? Russell Coker Re: list of permissions created by allow2audit: what do i do now? Luke Kenneth Casson Leighton Re: [PATCH] some file_contexts for SuSE, binfmt_misc, small cleanup (was: Re: Suse) Russell Coker Re: list of permissions created by allow2audit: what do i do now? Stephen Smalley Re: suggestion to help transition to selinux: dynamic loading of libselinux Russell Coker Re: list of permissions created by allow2audit: what do i do now? Luke Kenneth Casson Leighton Re: suggestion to help transition to selinux: dynamic loading of libselinux Luke Kenneth Casson Leighton Re: list of permissions created by allow2audit: what do i do now? Luke Kenneth Casson Leighton Monday, 17 May [PATCH] some file_contexts for SuSE, binfmt_misc, small cleanup (was: Re: Suse) Thomas Bleher Tuesday, 18 May Re: list of permissions created by allow2audit: what do i do now? Russell Coker Re: list of permissions created by allow2audit: what do i do now? Stephen Smalley Re: suggestion to help transition to selinux: dynamic loading of libselinux Stephen Smalley Re: list of permissions created by allow2audit: what do i do now? Valdis.Kletnieks_at_vt.edu Re: list of permissions created by allow2audit: what do i do now? Luke Kenneth Casson Leighton Re: list of permissions created by allow2audit: what do i do now? Luke Kenneth Casson Leighton Re: list of permissions created by allow2audit: what do i do now? Luke Kenneth Casson Leighton Re: suggestion to help transition to selinux: dynamic loading of libselinux Russell Coker Re: list of permissions created by allow2audit: what do i do now? Russell Coker Re: suggestion to help transition to selinux: dynamic loading of libselinux Chris Babcock Re: list of permissions created by allow2audit: what do i do now? Luke Kenneth Casson Leighton Re: [latest cvs]: build error on printer_device_t not recognised Luke Kenneth Casson Leighton Re: suggestion to help transition to selinux: dynamic loading of libselinux Russell Coker Re: list of permissions created by allow2audit: what do i do now? Russell Coker Re: [latest cvs]: build error on printer_device_t not recognised Russell Coker Re: suggestion to help transition to selinux: dynamic loading of libselinux Russell Coker Re: list of permissions created by allow2audit: what do i do now? Stephen Smalley Re: list of permissions created by allow2audit: what do i do now? Stephen Smalley Re: list of permissions created by allow2audit: what do i do now? Stephen Smalley Re: list of permissions created by allow2audit: what do i do now? Stephen Smalley Re: list of permissions created by allow2audit: what do i do now? Luke Kenneth Casson Leighton Re: list of permissions created by allow2audit: what do i do now? Luke Kenneth Casson Leighton Re: list of permissions created by allow2audit: what do i do now? Stephen Smalley Re: suggestion to help transition to selinux: dynamic loading of libselinux Luke Kenneth Casson Leighton Re: suggestion to help transition to selinux: dynamic loading of libselinux Stephen Smalley list of permissions created by allow2audit: what do i do now? Luke Kenneth Casson Leighton Re: [latest cvs]: build error on printer_device_t not recognised Luke Kenneth Casson Leighton [latest cvs]: build error on printer_device_t not recognised Luke Kenneth Casson Leighton Re: suggestion to help transition to selinux: dynamic loading of libselinux Les Bell Re: error on build of latest cvs (head) selinux-usr/policy Luke Kenneth Casson Leighton Re: suggestion to help transition to selinux: dynamic loading of libselinux Chris Babcock Monday, 17 May Re: suggestion to help transition to selinux: dynamic loading of libselinux Valdis.Kletnieks_at_vt.edu Re: suggestion to help transition to selinux: dynamic loading of libselinux Russell Coker Re: suggestion to help transition to selinux: dynamic loading of libselinux Russell Coker Re: error on build of latest cvs (head) selinux-usr/policy Russell Coker Re: suggestion to help transition to selinux: dynamic loading of libselinux Luke Kenneth Casson Leighton Re: suggestion to help transition to selinux: dynamic loading of libselinux Luke Kenneth Casson Leighton error on build of latest cvs (head) selinux-usr/policy Luke Kenneth Casson Leighton SE-X available Eamon Walsh Re: suggestion to help transition to selinux: dynamic loading of libselinux Russell Coker Saturday, 15 May suggestion to help transition to selinux: dynamic loading of libselinux Luke Kenneth Casson Leighton Monday, 17 May Re: Linux 2.6.6-rc3-mm2 and SELinux support of stacked modules Stephen Smalley RE: Suse Stephen Smalley RE: Suse Ed Street Sunday, 16 May Re: Suse Russell Coker RE: Suse Ed Street Saturday, 15 May RE: Suse Ed Street Re: Suse Thomas Bleher Re: policy questions and bugs Russell Coker Re: policy questions and bugs Colin Walters Friday, 14 May policy questions and bugs Chris Grier RE: Suse Ed Street Re: X policy classes Stephen Smalley Re: X policy classes Joshua Brindle Re: X policy classes Chris PeBenito selinuxfs patch Karl MacMillan Re: X policy classes Stephen Smalley Re: X policy classes Joshua Brindle Re: Updated Release Stephen Smalley Re: Suse Stephen Smalley RE: Suse Stephen Smalley RE: Suse Ed Street Re: Suse Stephen Smalley Re: X policy classes Stephen Smalley RE: Suse Jaroslaw Nozderko X policy classes Joshua Brindle Thursday, 13 May Updated Release Howard Holm Suse Ed Street Re: Linux 2.6.6-rc3-mm2 and SELinux support of stacked modules Valdis.Kletnieks_at_vt.edu Re: Linux 2.6.6-rc3-mm2 and SELinux support of stacked modules Joshua Brindle Re: Linux 2.6.6-rc3-mm2 and SELinux support of stacked modules Stephen Smalley Wednesday, 12 May RE: presentation results Stephen Smalley Tuesday, 11 May RE: presentation results Ed Street Re: Japanese Documentation(Re: presentation results) Valdis.Kletnieks_at_vt.edu Re: selopt & dsi James Morris Re: selopt & dsi Stephen Smalley RE: Japanese Documentation(Re: presentation results) Wade Mr Robert C Re: Japanese Documentation(Re: presentation results) Tom Monday, 10 May selopt & dsi ÀîÀöÆ¼ presentation results Ed Street Japanese Documentation(Re: presentation results) Yuichi Nakamura Re: Linux 2.6.6-rc3-mm2 and SELinux support of stacked modules Valdis.Kletnieks_at_vt.edu Re: Linux 2.6.6-rc3-mm2 and SELinux support of stacked modules Valdis.Kletnieks_at_vt.edu Re: Linux 2.6.6-rc3-mm2 and SELinux support of stacked modules Stephen Smalley Re: Linux 2.6.6-rc3-mm2 and SELinux support of stacked modules Serge Hallyn Re: SELinux and SMP Stephen Smalley Sunday, 9 May Linux 2.6.6-rc3-mm2 and SELinux support of stacked modules Valdis.Kletnieks_at_vt.edu Monday, 10 May SELinux and SMP George C. Wilson Re: patches Stephen Smalley patches maxence.bernard_at_ensi-bourges.fr patches amine.baina_at_ensi-bourges.fr Re: presentation results todd glassey patches amine.baina_at_ensi-bourges.fr Re: Depend on CONFIG_AUDIT? Stephen Smalley Depend on CONFIG_AUDIT? Thomas Bleher Re: presentation results Tom Sunday, 9 May presentation results Ed Street Friday, 7 May Re: [PATCH][SELINUX] 2/2 sock_create_lite() James Morris Re: [PATCH][SELINUX] 2/2 sock_create_lite() James Morris [PATCH][SELINUX] 1/2 sock_create_kern() James Morris [PATCH][SELINUX] 2/2 sock_create_lite() James Morris Thursday, 6 May Re: Russell Coker Presentation Michael Pender Wednesday, 5 May Setools 1.3.1 released Karl MacMillan Tuesday, 4 May Label for /.autofsck Tom Mitchell Re: [PATCH][SELINUX] Re-open descriptors closed on exec by SELinux to /dev/null Stephen Smalley Re: Tinydns Policy Files Chris Babcock Re: Tinydns Policy Files Chris Babcock Monday, 3 May Re: Tinydns Policy Files Russell Coker Re: Policy file for 'aide' and/or 'tripwire'? Russell Coker Re: Tinydns Policy Files Valdis.Kletnieks_at_vt.edu Re: Policy file for 'aide' and/or 'tripwire'? Valdis.Kletnieks_at_vt.edu [patch] Add devnull initial SID to policy Stephen Smalley [PATCH][SELINUX] Re-open descriptors closed on exec by SELinux to /dev/null Stephen Smalley Re: Tinydns Policy Files Milan P. Stanic Re: Tinydns Policy Files Milan P. Stanic Re: build script problem : sed command error Stephen Smalley Re: selinux + pb : libselinux.so.1 not found Stephen Smalley selinux + pb : libselinux.so.1 not found amine.baina_at_ensi-bourges.fr Re: Tinydns Policy Files Chris Babcock build script problem : sed command error maxence.bernard_at_ensi-bourges.fr Re: Tinydns Policy Files Russell Coker Re: Tinydns Policy Files Milan P. Stanic Re: preserving user-set contexts kris-selinux_at_sisgroup.com.au Sunday, 2 May Re: Tinydns Policy Files Matthew J. Fanto Re: Tinydns Policy Files Russell Coker Daemontools Policy Files Matthew J. Fanto Dnscache Policy Files Matthew J. Fanto Tinydns Policy Files Matthew J. Fanto Re: Policy file for 'aide' and/or 'tripwire'? Russell Coker Friday, 30 April Re: I thought we decided that root was root Stephen Smalley Thursday, 29 April I thought we decided that root was root Nick Gray Wednesday, 28 April type for less trusted files Russell Coker Re: preserving user-set contexts Colin Walters Re: Adding user accounts Stephen Smalley Re: preserving user-set contexts Stephen Smalley Re: preserving user-set contexts Stephen Smalley Re: preserving user-set contexts Joshua Brindle Tuesday, 27 April Re: preserving user-set contexts Colin Walters Re: mkinitrd on Debian Dale Amon Re: mkinitrd on Debian Russell Coker RE: mkinitrd on Debian CDSelle_at_missi.ncsc.mil RE: /etc/passwd labeling issues Ed Street Adding user accounts Nick Gray Policy file for 'aide' and/or 'tripwire'? Valdis.Kletnieks_at_vt.edu Re: /etc/passwd labeling issues Stephen Smalley Re: SELinux security in the face of single bit errors Dale Amon [PATCH] Fix exec ptrace checking flaw in SELinux Stephen Smalley Monday, 26 April Re: /etc/passwd labeling issues Russell Coker RE: /etc/passwd labeling issues Ed Street Re: preserving user-set contexts Stephen Smalley Sunday, 25 April Re: sshd, devpts, unix_chkpwd Russell Coker Russell Coker Presentation Michael Pender Re: /etc/passwd labeling issues Russell Coker /etc/passwd labeling issues Ed Street RE: sshd, devpts, unix_chkpwd Ed Street Re: chfn/passwd Russell Coker Saturday, 24 April Re: sshd, devpts, unix_chkpwd Russell Coker Friday, 23 April preserving user-set contexts Colin Walters Re: Oddness with password aging and related.. Daniel J Walsh Re: chfn/passwd Colin Walters Re: Local LUG Presentation Edin Dizdarevic RE: Local LUG Presentation Ed Street Re: Policy backward compatibility John D. Ramsdell Re: Local LUG Presentation Edin Dizdarevic chfn/passwd keen_at_internode.on.net Local LUG Presentation Ed Street Thursday, 22 April RE: Object class and permissions documentation Karl MacMillan Re: Object class and permissions documentation Stephen Smalley Object class and permissions documentation Karl MacMillan Wednesday, 21 April Re: SELinux security in the face of single bit errors Tom Brown arch archive of SELinux policy Thomas Bleher RE: Now that SELinux supports booleans should we replace tunables with booleans? Karl MacMillan Re: exim4 policy Dale Amon Tuesday, 20 April [PATCH][SELINUX] Remove hardcoded policy assumption from get_user_sids logic Stephen Smalley [PATCH][SELINUX] Add runtime disable for SELinux Stephen Smalley [PATCH][SELINUX] Change context_to_sid handling for no-policy case Stephen Smalley Re: exim4 policy Russell Coker exim4 policy Peter Gervai Sunday, 18 April sshd, devpts, unix_chkpwd mizu Saturday, 17 April RE: SELinux security in the face of single bit errors Ed Street Re: Problems with 2.4.24 Thomas Bleher Re: SELinux security in the face of single bit errors Dale Amon Friday, 16 April Oddness with password aging and related.. Valdis.Kletnieks_at_vt.edu Re: SELinux security in the face of single bit errors Tom Brown RE: SELinux security in the face of single bit errors Ed Street Thursday, 15 April SELinux security in the face of single bit errors tdbrown_at_uiuc.edu Re: pam_selinux.so question Thomas Bleher RE: Setools 1.2.1 broken after upgrading to NSA release 2.6.5 Karl MacMillan ANN: Tresys Setools 1.3 Karl MacMillan Setools 1.2.1 broken after upgrading to NSA release 2.6.5 Mark Shakespeare Re: Now that SELinux supports booleans should we replace tunables with booleans? Valdis.Kletnieks_at_vt.edu Re: extra secondary_ops for digsig Stephen Smalley extra secondary_ops for digsig Joshua Brindle Re: Fedora Core 2 Test 2 Wesley Parish Re: Now that SELinux supports booleans should we replace tunables with booleans? Russell Coker Re: Logo Artwork for SELinux? Russell Coker Wednesday, 14 April pam_selinux.so question Thorsten Sauter RE: Two questions about SELinux Ed Street Re: Now that SELinux supports booleans should we replace tunables with booleans? James Morris Re: Now that SELinux supports booleans should we replace tunables with booleans? James Morris Re: Now that SELinux supports booleans should we replace tunables with booleans? Valdis.Kletnieks_at_vt.edu RE: Now that SELinux supports booleans should we replace tunables with booleans? Karl MacMillan Re: Now that SELinux supports booleans should we replace tunables with booleans? Russell Coker Re: Now that SELinux supports booleans should we replace tunableswith booleans? Russell Coker Two questions about SELinux Park Lee RE: Now that SELinux supports booleans should we replace tunables with booleans? Karl MacMillan RE: Now that SELinux supports booleans should we replace tunableswith booleans? Karl MacMillan Re: Logo Artwork for SELinux? todd glassey Re: Now that SELinux supports booleans should we replace tunables with booleans? Russell Coker RE: Now that SELinux supports booleans should we replace tunables with booleans? Stephen Smalley RE: Now that SELinux supports booleans should we replace tunables with booleans? Karl MacMillan RE: Now that SELinux supports booleans should we replace tunables with booleans? Karl MacMillan Re: Logo Artwork for SELinux? Tom Re: Logo Artwork for SELinux? Tom Re: Fedora Core 2 Test 2 Tom SSH not relabeling "user_u" pts's properly Fernando Luis Vázquez Cao Tuesday, 13 April Re: Now that SELinux supports booleans should we replace tunables with booleans? Russell Coker Re: Policy backward compatibility Russell Coker Re: courier mods for Debian Russell Coker RE: courier mods for Debian Ed Street Re: Now that SELinux supports booleans should we replace tunables with booleans? Tom Mitchell RE: Policy backward compatibility Karl MacMillan Re: Now that SELinux supports booleans should we replace tunables with booleans? Chris PeBenito RE: Logo Artwork for SELinux? Dowd, Alan S Re: udevd domain Russell Coker Re: Logo Artwork for SELinux? todd glassey RE: Problems with 2.4.24 Stephen Smalley RE: Problems with 2.4.24 JarosÅ,aw Nozderko Now that SELinux supports booleans should we replace tunables with booleans? Daniel J Walsh Re: Problems with 2.4.24 Russell Coker Re: Policy backward compatibility Stephen Smalley Re: Policy backward compatibility James Morris Re: Policy backward compatibility Stephen Smalley Re: Policy backward compatibility Stephen Smalley Re: Problems with 2.4.24 Stephen Smalley Re: apache-ssl mods for Debian Russell Coker Problems with 2.4.24 Jaros³aw Nozderko Monday, 12 April Re: Logo Artwork for SELinux? Michael Pender Re: Logo Artwork for SELinux? Tom Mitchell RE: apache-ssl mods for Debian Ed Street Re: Logo Artwork for SELinux? todd glassey Re: LSM caps issue, selinux affected? Stephen Smalley LSM caps issue, selinux affected? Joshua Brindle Re: Logo Artwork for SELinux? Russell Coker Re: sys_admin cap breakup Stephen Smalley Re: Logo Artwork for SELinux? Stephen Smalley Re: Logo Artwork for SELinux? Elvedin Trnjanin Re: Logo Artwork for SELinux? Dale Amon Re: Logo Artwork for SELinux? Elvedin Trnjanin Re: Sepcut Relabel problem Russell Coker Re: sys_admin cap breakup Colin Walters RE: apache-ssl mods for Debian Ed Street Re: Logo Artwork for SELinux? Dean Anderson Re: booting in enforcing mode Russell Coker Re: Policy backward compatibility Russell Coker Re: Fedora Core 2 Test 2 Russell Coker Re: booting in enforcing mode Rogelio Serrano Re: booting in enforcing mode Russell Coker Re: apache-ssl mods for Debian Russell Coker Re: Problems finding working kernel/user land combination Bill McCarty Sunday, 11 April sys_admin cap breakup Joshua Brindle Re: booting in enforcing mode Rogelio Serrano apache-ssl mods for Debian Ed Street Re: booting in enforcing mode Rogelio Serrano Re: booting in enforcing mode Rogelio Serrano Re: audio-entropyd policy Joshua Brindle Re: booting in enforcing mode Russell Coker Re: booting in enforcing mode Russell Coker Re: Problems finding working kernel/user land combination Milan P. Stanic Saturday, 10 April Re: Problems finding working kernel/user land combination Bill McCarty Re: Logo Artwork for SELinux? Russell Coker audio-entropyd policy Joshua Brindle Re: Logo Artwork for SELinux? Dale Amon Re: booting in enforcing mode Rogelio Serrano Re: Logo Artwork for SELinux? Matthew J. Fanto Re: booting in enforcing mode Rogelio Serrano Re: booting in enforcing mode Russell Coker Re: Logo Artwork for SELinux? Russell Coker booting in enforcing mode Rogelio Serrano udevd domain Rogelio Serrano Friday, 9 April Re: Problems finding working kernel/user land combination Milan P. Stanic Re: Problems finding working kernel/user land combination Tomas Hoger Re: Fedora Core 2 Test 2 Daniel J Walsh Re: Problems finding working kernel/user land combination Tom Netwosix- Selinux Vincenzo Ciaglia Re: initial load_policy problem Rogelio Serrano Re: initial load_policy problem Stephen Smalley Re: initial load_policy problem Rogelio Serrano Re: Fedora Core 2 Test 2 Stephen Smalley initial load_policy problem Rogelio Serrano Re: Problems finding working kernel/user land combination Bill McCarty Thursday, 8 April Re: Fedora Core 2 Test 2 John Reuning Re: Fedora Core 2 Test 2 Kerry Thompson Fedora Core 2 Test 2 Nick Gray Re: Policy backward compatibility Valdis.Kletnieks_at_vt.edu Re: strange labeling problem Stephen Smalley Re: strange labeling problem Colin Walters Re: Policy backward compatibility Stephen Smalley Re: Policy backward compatibility Valdis.Kletnieks_at_vt.edu Updated Release Howard Holm RE: Logo Artwork for SELinux? Dan Thomsen Re: strange labeling problem Stephen Smalley Re: strange labeling problem Stephen Smalley Policy backward compatibility Stephen Smalley Wednesday, 7 April Re: Logo Artwork for SELinux? Michael Pender strange labeling problem Colin Walters Re: Problems finding working kernel/user land combination Koen Vervloesem Re: Sepcut Relabel problem David Caplan Re: Problems finding working kernel/user land combination Bill McCarty Re: Sepcut Relabel problem Valdis.Kletnieks_at_vt.edu Re: Logo Artwork for SELinux? Dale Amon Re: Problems finding working kernel/user land combination Peter Gervai Re: Problems finding working kernel/user land combination Bill McCarty Re: Problems finding working kernel/user land combination Tom Re: Logo Artwork for SELinux? Bill Laut Re: Logo Artwork for SELinux? Bill Laut Re: Logo Artwork for SELinux? Douglas Williams Re: role of pax Rogelio Serrano Tuesday, 6 April Re: Logo Artwork for SELinux? Douglas Williams Re: Logo Artwork for SELinux? Joshua Brindle Re: Problems finding working kernel/user land combination Bill McCarty Sepcut Relabel problem Mark Shakespeare RE: Logo Artwork for SELinux? Dan Thomsen Monday, 5 April Re: Logo Artwork for SELinux? Dean Anderson Tuesday, 6 April Re: Logo Artwork for SELinux? Michael Pender Monday, 5 April Re: Logo Artwork for SELinux? Bill Laut Re: Logo Artwork for SELinux? Joshua Brindle RE: role of pax Ed Street Re: Logo Artwork for SELinux? Bill McCarty Re: Logo Artwork for SELinux? Kerry Thompson Re: Logo Artwork for SELinux? Bill Laut RE: Logo Artwork for SELinux? Frank Mayer Re: Logo Artwork for SELinux? Valdis.Kletnieks_at_vt.edu Re: role of pax Stephen Smalley role of pax Rogelio Serrano Sunday, 4 April Re: Logo Artwork for SELinux? Chris Logo Artwork for SELinux? Bill Laut Re: [SELINUX] Add IPv6 support James H. Cloos Jr. [SELINUX] Add IPv6 support James Morris Saturday, 3 April Logging in SElinux. Hemal Fedora in the news Russell Coker Wednesday, 31 March Re: Problems to compile the src.rpm packages on Red Hat Linux 9.0 Valdis.Kletnieks_at_vt.edu Re: Problems to compile the src.rpm packages on Red Hat Linux 9.0 Stephen Smalley Re: Problems to compile the src.rpm packages on Red Hat Linux 9.0 Valdis.Kletnieks_at_vt.edu Re: minor structure usage bug Stephen Smalley Re: Problems to compile the src.rpm packages on Red Hat Linux 9.0 Stephen Smalley Tuesday, 30 March Re: Problems to compile the src.rpm packages on Red Hat Linux 9.0 Valdis.Kletnieks_at_vt.edu Problems to compile the src.rpm packages on Red Hat Linux 9.0 lcvleo_at_ig.com.br minor structure usage bug Chad Hanson Re: IPv6 support available James Morris Re: IPv6 support available Andreas Schuldei IPv6 support available James Morris Sunday, 28 March Re: make relabel: invalid context Koen Vervloesem Monday, 29 March libselinux/policyvers Chris PeBenito Sunday, 28 March new ps changes for SE Linux Albert Cahalan Monday, 29 March Re: make relabel: invalid context Thomas Bleher Re: make relabel: invalid context Karl MacMillan killall Russell Coker Sunday, 28 March Re: make relabel: invalid context Thomas Bleher Re: how to write and understand a patch file? Martin Stricker RE: how to write and understand a patch file? Ed Street how to write and understand a patch file? Park Lee Saturday, 27 March distcc policy Chris PeBenito Friday, 26 March Re: make relabel: invalid context Valdis.Kletnieks_at_vt.edu Re: make relabel: invalid context Valdis.Kletnieks_at_vt.edu Re: status tool Chris PeBenito make relabel: invalid context Koen Vervloesem Re: status tool Stephen Smalley Thursday, 25 March synaptics touchpad fixes Colin Walters status tool Chris PeBenito Wednesday, 24 March minor logwatch avc denial fix Colin Walters Re: I would like to suggest a new file attribute like usersafe. Stephen Smalley I would like to suggest a new file attribute like usersafe. Daniel J Walsh New Debian (SID) test box online Ed Street Re: patch for libselinux1 Russell Coker Re: patch for libselinux1 Russell Coker Tuesday, 23 March Re: IP connection restrictions James Morris Re: patch for libselinux1 Stephen Smalley patch for libselinux1 Russell Coker Monday, 22 March IP connection restrictions Jaroslav Kucera SELinux on Cebit report Tom Friday, 19 March Re: Oracle 10g Database Russell Coker Oracle 10g Database Mark Shakespeare Thursday, 18 March Introduction to policy writing HOWTO Faye Coker Wednesday, 17 March hipaa Ed Street Re: newrole failed in enforcing mode Russell Coker Re: newrole failed in enforcing mode Stephen Smalley Re: newrole failed in enforcing mode Russell Coker Re: newrole failed in enforcing mode Stephen Smalley Re: newrole failed in enforcing mode Carsten Grohmann Tuesday, 16 March Re: newrole failed in enforcing mode Stephen Smalley Re: newrole failed in enforcing mode Carsten Grohmann SELinux web site Howard Holm Re: Updated Release James Carter Re: macros/vi Russell Coker Re: grsecurity / LSM issue Russell Coker macros/vi keen_at_internode.on.net Monday, 15 March Re: grsecurity / LSM issue Douglas Williams Sunday, 14 March Newrole drops aliases Ed Street Re: grsecurity / LSM issue Russell Coker Saturday, 13 March policy for INN Faye Coker Friday, 12 March Re: policy booleans Karl MacMillan Re: Brad Spender and Debian play machine Russell Coker Updated Release Howard Holm Re: Process Transition David Caplan Re: Process Transition Stephen Smalley Re: grsecurity / LSM issue Bill McCarty [Fwd: Re: [Fwd: Re: genhomedircon is causing policycoreutils and matchpathcon to fail]] Karl MacMillan Thursday, 11 March Process Transition Chad Hanson Re: client and server identification Stephen Smalley Wednesday, 10 March client and server identification liliping Tuesday, 9 March Re: XFS and SE Linux Nathan Scott Wednesday, 10 March Re: blocking security xattr changes when policy is not loaded Stephen Smalley Re: blocking security xattr changes when policy is not loaded Thorsten Kukuk newrole failed in enforcing mode Carsten Grohmann Re: blocking security xattr changes when policy is not loaded Stephen Smalley Re: blocking security xattr changes when policy is not loaded Arkadiusz Miskiewicz Re: blocking security xattr changes when policy is not loaded Stephen Smalley Re: grsecurity / LSM issue James de Lurker Tuesday, 9 March blocking security xattr changes when policy is not loaded Arkadiusz Miskiewicz Brad Spender and Debian play machine Thomas J Ziebro Re: XFS and SE Linux Russell Coker Re: can_ypbind() Stephen Smalley Re: XFS and SE Linux Stephen Smalley XFS and SE Linux Russell Coker can_ypbind() Russell Coker Monday, 8 March Re: system_r and sysadm_r roles Stephen Smalley Re: Proposed patch to policy file_contexts Stephen Smalley Re: system_r and sysadm_r roles Stephen Smalley Re: system_r and sysadm_r roles Carlos AnÃsio Monteiro Re: Proposed patch to policy file_contexts Russell Coker Re: Proposed patch to policy file_contexts Karl MacMillan Re: system_r and sysadm_r roles Stephen Smalley system_r and sysadm_r roles Carlos Anísio Monteiro Sunday, 7 March Brad Spender and Debian play machine Russell Coker Friday, 5 March Re: Proposed patch to policy file_contexts Stephen Smalley A problem with the copy of the SELinux/Flask vs. DTE comparison Park Lee Thursday, 4 March Running SeLinux on RHEL3 with kernel 2.6.3-2.1.229 Mark Shakespeare Wednesday, 3 March Re: Proposed patch to policy file_contexts Karl MacMillan Re: Proposed patch to policy file_contexts Stephen Smalley RE: [Announce][Patch] Enhanced MLS support Chad Hanson RE: [Announce][Patch] Enhanced MLS support Stephen Smalley Re: [Announce][Patch] Enhanced MLS support Stephen Smalley policy booleans Russell Coker RE: [patch] policydb - MLS Stephen Smalley Re: Proposed patch to policy file_contexts Karl MacMillan RE: [Announce][Patch] Enhanced MLS support Chad Hanson Re: [Announce][Patch] Enhanced MLS support Stephen Smalley RE: [patch] policydb - MLS Karl MacMillan Re: [Announce][Patch] Enhanced MLS support James Morris Tuesday, 2 March RE: [patch] policydb - MLS Chad Hanson RE: [Announce][Patch] Enhanced MLS support Chad Hanson Re: [Announce][Patch] Enhanced MLS support Stephen Smalley Re: [patch] policydb - MLS Stephen Smalley [Announce][Patch] Enhanced MLS support Chad Hanson Network Polyinstantation Chad Hanson [patch] policydb - MLS Chad Hanson Re: TE vs. DTE Dhruv Gami Re: Proposed patch to policy file_contexts Daniel J Walsh Re: TE vs. DTE Mario Olimpio de Menezes Monday, 1 March Re: TE vs. DTE Stephen Smalley Re: Attn Colin: Overhelpful /usr/sbin/policy-remove-unwanted Dale Amon Re: Attn Colin: Overhelpful /usr/sbin/policy-remove-unwanted Colin Walters Sunday, 29 February TE vs. DTE Park Lee Re: Attn Colin: Overhelpful /usr/sbin/policy-remove-unwanted Russell Coker Re: Attn Colin: Overhelpful /usr/sbin/policy-remove-unwanted Dale Amon Saturday, 28 February Re: Attn Colin: Overhelpful /usr/sbin/policy-remove-unwanted Russell Coker Re: Attn Colin: Overhelpful /usr/sbin/policy-remove-unwanted Dale Amon Re: Attn Colin: Overhelpful /usr/sbin/policy-remove-unwanted Dale Amon Re: Attn Colin: Overhelpful /usr/sbin/policy-remove-unwanted Russell Coker Attn Colin: Overhelpful /usr/sbin/policy-remove-unwanted Dale Amon Re: PaX + selinux integration update Joshua Brindle Friday, 27 February Re: accessing files under Linux and SELinux Russell Coker Re: Proposed patch to policy file_contexts Karl MacMillan Re: Proposed patch to policy file_contexts Stephen Smalley Re: SELinux and NFS --- a bit of a fight! Stephen C. Tweedie Re: SELinux and NFS --- a bit of a fight! Stephen Smalley SELinux and NFS --- a bit of a fight! Stephen C. Tweedie Re: accessing files under Linux and SELinux Stephen Smalley accessing files under Linux and SELinux Mario Olimpio de Menezes Thursday, 26 February Re: Proposed patch to policy file_contexts Dale Amon Proposed patch to policy file_contexts Daniel J Walsh Re: Patch for auditing framework Rik Faith Re: PaX + selinux integration update Thomas Bleher Re: [patch] etc type naming Russell Coker Wednesday, 25 February Re: Patch for auditing framework Rik Faith Patch for auditing framework Rik Faith Re: [selinux] Re: identity Rik Faith PaX + selinux integration update Joshua Brindle Re: Suggested change to setfiles interface. Stephen Smalley Re: Suggested change to setfiles interface. Stephen Smalley Suggested change to setfiles interface. Daniel J Walsh Re: I/O Redirect? Russell Coker I/O Redirect? keen_at_internode.on.net Tuesday, 24 February Re: identity Russell Coker Re: [selinux] Re: identity Joshua Brindle Re: odd segfault in checkpolicy Stephen Smalley Re: odd segfault in checkpolicy Colin Walters Re: [selinux] Re: identity Stephen Smalley Re: [selinux] Re: identity Magosányi Árpád Re: Su(1) flaws (was: identity) Stephen Smalley Su(1) flaws (was: identity) Rafal Wojtczuk Re: identity Stephen Smalley Re: identity James Morris Re: odd segfault in checkpolicy Stephen Smalley Re: identity Russell Coker Monday, 23 February Re: identity Russell Coker Re: identity Russell Coker Re: identity Russell Coker Re: identity Russell Coker Updated Release Howard Holm odd segfault in checkpolicy Colin Walters Re: identity Stephen Smalley Re: identity Joshua Brindle Re: identity Joshua Brindle Re: identity Joseph Pingenot Re: identity Stephen Smalley Re: identity Stephen Smalley Re: identity Russell Coker [Patch] avc ipaddr patches Joshua Brindle Re: identity Joseph Pingenot Sunday, 22 February identity Russell Coker Friday, 20 February Re: Questions about security object classes and access vectors. Stephen Smalley Questions about security object classes and access vectors. Park Lee Re: Announce: SELinux conditional policy extensions John D. Ramsdell RE: Announce: SELinux conditional policy extensions Frank Mayer Re: Announce: SELinux conditional policy extensions Stephen Smalley Re: Announce: SELinux conditional policy extensions John D. Ramsdell Announce: Slat 1.1.0 with policy deconditionalizer John D. Ramsdell Thursday, 19 February Re: Backing out SeLinux on 2.4 Stephen Smalley Wednesday, 18 February Re: [SELINUX] Event notifications via Netlink Chris Wright Re: [SELINUX] Event notifications via Netlink James Morris Re: [SELINUX] Event notifications via Netlink Chris Wright Re: [SELINUX] Event notifications via Netlink James Morris Re: genfscon problem Stephen Smalley genfscon problem Magosányi Árpád Re: pam_selinux and selinuxfs questions Stephen Smalley Re: file context questions Stephen Smalley pam_selinux and selinuxfs questions Magosányi Árpád file context questions Magosányi Árpád [SELINUX] Event notifications via Netlink James Morris Re: setfiles vs getfilecon Stephen Smalley Re: Anybody working on SuSE 9.0 support? Carsten Grohmann setfiles vs getfilecon Magosányi Árpád Tuesday, 17 February [Announce][Patch] PaX support in SELinux Joshua Brindle Anybody working on SuSE 9.0 support? Thomas Bleher Is there an SELinux version for the TI OMAP processors? CNGUYEN Re: Logging the target? Stephen Smalley Re: Something seems to be self-contradictory Stephen Smalley Re: Questions about extended attributes Stephen Smalley Re: setfiles sorting Stephen Smalley Re: Of applications and separating configuration systems Karl MacMillan Re: setfiles sorting Stephen Smalley Monday, 16 February RE: Announce: SELinux conditional policy extensions Frank Mayer Re: SE/Linux Article on Cryptonomicon.Net Russell Coker Re: Something seems to be self-contradictory Russell Coker Re: Announce: SELinux conditional policy extensions Joshua D. Guttman Re: Something seems to be self-contradictory Park Lee Re: StrongArm port Robert Connolly SE/Linux Article on Cryptonomicon.Net Matthew Hamrick Re: StrongArm port Russell Coker Re: Something seems to be self-contradictory Russell Coker Logging the target? Magosányi Árpád Re: StrongArm port Robert Connolly SELinux support for Fedora Core 2 Nick Something seems to be self-contradictory Park Lee Re: StrongArm port Russell Coker Sunday, 15 February StrongArm port Douglas Williams Re: Policy configuration question Ignacio Tripodi Re: Of applications and separating configuration systems Russell Coker Re: Policy configuration question Colin Walters Re: Of applications and separating configuration systems Dr. David Alan Gilbert Policy configuration question Ignacio Tripodi Saturday, 14 February Re: Problem with defaulting answers to selinux-policy-default Dale Amon Re: Problem with defaulting answers to selinux-policy-default Russell Coker Questions about extended attributes Park Lee Re: Problem with defaulting answers to selinux-policy-default Dale Amon Re: [Fwd: Bug#231561: setfiles ignores patterns beginning with a meta-character] Russell Coker [Fwd: Bug#231561: setfiles ignores patterns beginning with a meta-character] Colin Walters setfiles sorting Colin Walters Friday, 13 February Re: Of applications and separating configuration systems Russell Coker Re: Announce: SELinux conditional policy extensions Russell Coker Fw: Of applications and separating configuration systems Douglas Williams Re: SELinux and SystemImager Russell Coker Of applications and separating configuration systems Dr. David Alan Gilbert Re: SELinux and SystemImager R N RE: Announce: SELinux conditional policy extensions Frank Mayer RE: Announce: SELinux conditional policy extensions Frank Mayer Re: SELinux and SystemImager Russell Coker avc_has_perm gives no useful output in permissive mode Joshua Brindle Re: polyinstantiation support in fs? Stephen Smalley Re: Fwd: MLS Kconfig Patch James Morris Re: Patched userland packages Stephen Smalley Re: Patched userland packages Stephen Smalley Re: Patched userland packages Joerg Hoh Re: Patched userland packages Russell Coker SELinux and SystemImager R N Re: 2.4-based SELinux Stephen Smalley Patched userland packages Stephen Smalley Re: Fwd: MLS Kconfig Patch Stephen Smalley Re: Announce: SELinux conditional policy extensions Stephen Smalley Re: Up-to date docs on flask controls? Stephen Smalley Re: polyinstantiation support in fs? Stephen Smalley Fwd: MLS Kconfig Patch Russell Coker Up-to date docs on flask controls? Magosányi Árpád Re: Announce: SELinux conditional policy extensions Colin Walters Thursday, 12 February Re: Announce: SELinux conditional policy extensions Joshua D. Guttman polyinstantiation support in fs? Magosányi Árpád Wednesday, 11 February Re: dumb auditdeny question David Caplan Re: dumb auditdeny question Faye Coker dumb auditdeny question Magosányi Árpád Tuesday, 10 February Re: 2.4-based SELinux Stephen Smalley Re: 2.4-based SELinux Andreas Schuldei Re: 2.4-based SELinux Miguel Bolanos 2.4-based SELinux Stephen Smalley Re: Announce: Updated SELinux conditional policy extensions Stephen Smalley Re: Issues relabeling filesystems Stephen Smalley Monday, 9 February Re: Issues relabeling filesystems Ignacio Tripodi libuser Timothy Wood Re: Problem with defaulting answers to selinux-policy-default Dale Amon Re: XFS security namespace Stephen Smalley Re: Issues relabeling filesystems Stephen Smalley Re: Problem with defaulting answers to selinux-policy-default Russell Coker Sunday, 8 February Problem with defaulting answers to selinux-policy-default Dale Amon Saturday, 7 February A new kernel with FS patch available. Daniel J Walsh Friday, 6 February Disregard the policy question Ignacio Tripodi [RELEASE] Setools 1.2.1 Karl MacMillan Re: Issues relabeling filesystems Ignacio Tripodi XFS security namespace Chris PeBenito Re: fork and security context transitions Stephen Smalley Re: selinux-policy-default Daniel J Walsh Re: Issues relabeling filesystems Stephen Smalley Re: Issues relabeling filesystems Ignacio Tripodi Conference News from Germany Tom Re: selinux-policy-default Russell Coker Re: selinux-policy-default Russell Coker Re: Issues relabeling filesystems Russell Coker Re: Problems finding working kernel/user land combination Dave Gilbert (Home) Re: fork and security context transitions Russell Coker Re: selinux-policy-default Tomas Hoger Re: fork and security context transitions Fernando Luis Vázquez Cao selinux-policy-default Eric Estabrooks Issues relabeling filesystems Ignacio Tripodi Thursday, 5 February Re: Trouble with installation of lsm kernel patch and SE linux Packages on Debian Russell Coker Re: make relabel error Stephen C. Tweedie Re: Problems finding working kernel/user land combination Brian May [RELEASE] Setools version 1.2 Karl MacMillan Re: Trouble with installation of lsm kernel patch and SE linux Packages on Debian Chris Wright make relabel error keen Re: Problems finding working kernel/user land combination Dave Gilbert (Home) Wednesday, 4 February Re: [selinux] Re: FS crash Magosányi Árpád Re: glibc AT_SECURE auxv Stephen Smalley glibc AT_SECURE auxv Kratzer, James R. Re: FS crash Stephen C. Tweedie Re: FS crash Magosányi Árpád Re: [PATCH] (2/3) SELinux context mount support - NFS Stephen Smalley [PATCH] (3/3) SELinux context mount support - SELinux changes. James Morris [PATCH] (2/3) SELinux context mount support - NFS James Morris [PATCH] (1/3) SELinux context mount support - LSM/FS James Morris [patch] Fix block device inode list corruptions Stephen C. Tweedie Re: FS crash Stephen C. Tweedie Re: FS crash Stephen C. Tweedie Re: FS crash Dale Amon Re: FS crash Stephen C. Tweedie Re: FS crash Stephen C. Tweedie Re: FS crash Stephen C. Tweedie Re: FS crash Dale Amon Re: Problems finding working kernel/user land combination Russell Coker Tuesday, 3 February Re: Problems finding working kernel/user land combination Brian May Wednesday, 4 February Re: Problems finding working kernel/user land combination Brian May Re: Problems finding working kernel/user land combination Dave Gilbert (Home) Tuesday, 3 February Re: FS crash Stephen C. Tweedie selUpgrade RPMs Tim Ebringer Re: Problems finding working kernel/user land combination Russell Coker Announcement: new tool 'SELinux/Aid' by Hitachi Soft UENO Shuichi Problems finding working kernel/user land combination Dave Gilbert (Home) Re: fork and security context transitions Stephen Smalley Re: fork and security context transitions Russell Coker Re: fork and security context transitions Fernando Luis Vázquez Cao Sunday, 1 February SELinux Talk in Hamburg, Germany Tom Saturday, 31 January SELinux Workshop in Chemnitz, Germany Carsten Grohmann Re: Gentoo SELinux LiveCD Chris PeBenito Re: Gentoo SELinux LiveCD Carsten Grohmann Friday, 30 January SELinux auditing - proposal Leigh Purdie Re: [PATCH][RFC] Security mount data & sb_copy_data hook. James Morris Re: fork and security context transitions Stephen Smalley FYI: Arjan Kernel does not support SELinux Daniel J Walsh Thursday, 29 January fork and security context transitions Fernando Luis Vázquez Cao 2.6.2-rc2 kernel...more comments Mark Shakespeare Re: making progress...a few comments.. Karl MacMillan Re: making progress...a few comments.. Stephen Smalley Re: making progress...a few comments.. Karl MacMillan Re: making progress...a few comments.. Karl MacMillan Re: Problem with selinux configuration Stephen Smalley Re: Problem with selinux configuration Keen Re: Compiling a 2.6 UML kernel Stephen Smalley Re: Problem with selinux configuration Russell Coker Wednesday, 28 January Compiling a 2.6 UML kernel Ignacio Tripodi Re: Problem with selinux configuration keen_at_internode.on.net making progress...a few comments.. Mark Shakespeare Thanks for Re: Must SELinux have a initrd image and... Park Lee Re: Problem with selinux configuration Stephen Smalley Re: Must SELinux have a initrd image and RAM disk when it boots up? and... Stephen Smalley Re: Problem with selinux configuration Russell Coker Must SELinux have a initrd image and RAM disk when it boots up? and... Park Lee Re: libselinux/getpeercon/compiler warning on 64bit Archs Stephen Smalley Re: Problem with selinux configuration Stephen Smalley Re: login roles Stephen Smalley Problem with selinux configuration keen_at_internode.on.net libselinux/getpeercon/compiler warning on 64bit Archs Thorsten Kukuk Tuesday, 27 January Re: Has something changed on Dan Walsh's site? Tom Ziebro Re: Has something changed on Dan Walsh's site? Daniel J Walsh login roles Timothy Wood Monday, 26 January Gentoo SELinux LiveCD Chris PeBenito Has something changed on Dan Walsh's site? Mark Shakespeare Saturday, 24 January [PATCH][RFC] Security mount data & sb_copy_data hook. James Morris Friday, 23 January Re: [PATCH] Add users.fc to policy Russell Coker Re: [PATCH] Add users.fc to policy Stephen Smalley Re: [PATCH] Add users.fc to policy Stephen Smalley [PATCH] Add users.fc to policy Karl MacMillan Re: sepcut is broken Karl MacMillan RE: transition failure Stephen Smalley RE: transition failure Kratzer, James R. Re: libselinux upgrade from 1.4-1 to 1.4-6 broke installwatch.so Stephen Smalley libselinux upgrade from 1.4-1 to 1.4-6 broke installwatch.so Ville Herva Thursday, 22 January Re: sepcut is broken Stephen Smalley Re: sepcut is broken Karl MacMillan Re: sepcut is broken Stephen Smalley Re: sepcut is broken Karl MacMillan RE: transition failure Stephen Smalley RE: transition failure Kratzer, James R. Re: transition failure Russell Coker Wednesday, 21 January transition failure Kratzer, James R. sepcut is broken Mark Shakespeare Re: Debian and 2.6 selinux Stephen Smalley Re: threads Stephen Smalley Re: Debian and 2.6 selinux Chris Babcock Re: Debian and 2.6 selinux Russell Coker Re: Debian and 2.6 selinux Chris Babcock Re: Debian and 2.6 selinux Russell Coker Debian and 2.6 selinux Chris Babcock (no subject) kamal.r nair Re: threads Russell Coker Tuesday, 20 January Re: threads Albert Cahalan Re: Announce: Updated SELinux conditional policy extensions Karl MacMillan Re: Announce: Updated SELinux conditional policy extensions Stephen Smalley Re: Capabilities in SELinux Russell Coker Capabilities in SELinux Carlos Anísio Monteiro Re: Samba and NFSv4 user-space server Russell Coker Re: Samba and NFSv4 user-space server Brian May Sunday, 18 January Re: RHEL 3 policy and policy-sources RPMs Bill McCarty Re: RHEL 3 policy and policy-sources RPMs Daniel J Walsh ipsec network labeling/network management Gavin O' Gorman Saturday, 17 January RHEL 3 policy and policy-sources RPMs Bill McCarty Friday, 16 January Re: Trival relabel Problem Stephen Smalley Trival relabel Problem Thomas DuBuisson Re: specifying groups of types Stephen Smalley Re: specifying groups of types Karl MacMillan Re: specifying groups of types Stephen Smalley Re: specifying groups of types Karl MacMillan Thursday, 15 January Re: run_init Colin Walters Re: run_init Thomas Bleher run_init Carlos Anísio Monteiro Re: aliases Stephen Smalley Re: specifying groups of types Stephen Smalley Re: Samba and NFSv4 user-space server Russell Coker Wednesday, 14 January Re: FS crash Russell Coker Announce: Updated SELinux conditional policy extensions Karl MacMillan Re: [patch] Change libselinux to use getpwnam_r Stephen Smalley Re: [patch] Change libselinux to use getpwnam_r Thorsten Kukuk Tuesday, 13 January LCA 2004 Russell Coker Re: [PATCH][SELINUX] 6/7 Add SO_PEERSEC socket option and getpeersec LSM hook. James Morris Re: [PATCH][SELINUX] 2/2 Add SEND_MSG and RECV_MSG controls James Morris [PATCH][SELINUX] 2/2 Add SEND_MSG and RECV_MSG controls James Morris [PATCH][SELINUX] 1/1 Improve skb audit logging James Morris Eliminating run_init Stephen Smalley FS crash Magosányi Árpád [patch] Change libselinux to use getpwnam_r Stephen Smalley Re: Samba and NFSv4 user-space server James Carter Re: Samba and NFSv4 user-space server Brian May Monday, 12 January Samba and NFSv4 user-space server Russell Coker rssh pass two - secure GNU arch committers Colin Walters Re: compilation queries Howard Holm Re: Questions about install SELinux in Fedora Core Stephen Smalley Sunday, 11 January Re: Module problems after 2.4 upgrade PORTER,CHRISTOPHER B Re: Module problems after 2.4 upgrade Thomas Bleher Module problems after 2.4 upgrade PORTER,CHRISTOPHER B Re: rshd Kerry Thompson Re: Questions about install SELinux in Fedora Core Timothy Wood Re: compilation queries kamal.r nair Re: OOPs Carsten Grohmann Re: Questions about install SELinux in Fedora Core Arkadiusz Miskiewicz Re: Questions about install SELinux in Fedora Core Russell Coker Saturday, 10 January Re: Questions about install SELinux in Fedora Core Park Lee Re: Questions about install SELinux in Fedora Core Russell Coker Questions about install SELinux in Fedora Core Park Lee Re: GDM for RHEL 3 Bill McCarty Re: GDM for RHEL 3 Daniel J Walsh GDM for RHEL 3 Bill McCarty Friday, 9 January Re: [PATCH][SELINUX] 2/7 Add netif controls James Morris Re: [PATCH][SELINUX] 2/7 Add netif controls Stephen Smalley Fwd: using Resin instead of Apache Mark Shakespeare [PATCH][SELINUX] 7/7 Add dname to audit output when a path cannot be generated. James Morris [PATCH][SELINUX] 6/7 Add SO_PEERSEC socket option and getpeersec LSM hook. James Morris [PATCH][SELINUX] 5/7 socket_has_perm cleanup James Morris [PATCH][SELINUX] 4/7 Add node_bind control James Morris [PATCH][SELINUX] 3/7 Add node controls James Morris [PATCH][SELINUX] 2/7 Add netif controls James Morris [PATCH][SELINUX] 1/7 Add resource limit control to SELinux (resend) James Morris using Resin instead of Apache Mark Shakespeare Re: aliases Stephen Smalley Re: load_policy atomicity Stephen Smalley aliases Russell Coker Thursday, 8 January Re: [patch] etc type naming Chris PeBenito Re: Kerberos Brian May load_policy atomicity Tim Ebringer Re: [patch] etc type naming Stephen Smalley Re: post_create: setxattr failed, rc=122 (dev=09:03 ino=992086) Stephen Smalley Re: post_create: setxattr failed, rc=122 (dev=09:03 ino=992086) Russell Coker Re: post_create: setxattr failed, rc=122 (dev=09:03 ino=992086) Stephen Smalley Re: post_create: setxattr failed, rc=122 (dev=09:03 ino=992086) Russell Coker Re: post_create: setxattr failed, rc=122 (dev=09:03 ino=992086) Stephen Smalley rshd Russell Coker Re: Kerberos Russell Coker Re: Kerberos Brian May Re: Kerberos Russell Coker Re: Kerberos Brian May Re: Kerberos Russell Coker Wednesday, 7 January Re: Kerberos Brian May Re: Kerberos Russell Coker Re: Kerberos Brian May Kerberos Russell Coker post_create: setxattr failed, rc=122 (dev=09:03 ino=992086) Russell Coker Re: Questions about install SELinux Stephen Smalley Questions about install SELinux Park Lee Trouble with Selinux package cheng weifang I have trouble with selinux packages cheng weifang Tuesday, 6 January Re: modification of vixie-cron patch to get crond working in permissive mode Stephen Smalley Monday, 5 January OOPs Nick (no subject) Nick Re: UML support Russell Coker Announcement: Tresys Setools 1.1.1 Karl MacMillan Thursday, 1 January Re: [fcron announce] Fcron 2.9.4 - a replacement for Vixie cron and anacron Russell Coker Monday, 5 January UML support Ignacio Tripodi Re: API man pages Stephen Smalley Sunday, 4 January /dev/random Russell Coker Thursday, 1 January Re: vim selinux syntax file Thomas Bleher Supported filesystems Carsten Grohmann Re: modification of vixie-cron patch to get crond working in permissive mode Arkadiusz Miskiewicz modification of vixie-cron patch to get crond working in permissive mode Arkadiusz Miskiewicz API man pages Russell Coker Re: [fcron announce] Fcron 2.9.4 - a replacement for Vixie cron and anacron Russell Coker Monday, 29 December RE: non-Linux behavior Albert Cahalan RE: non-Linux behavior Loughry, Joe Re: threads Stephen Smalley Sunday, 28 December procps and other updates Russell Coker Friday, 26 December [patch] etc type naming Chris PeBenito threads Albert Cahalan non-Linux behavior Albert Cahalan Thursday, 25 December audit2allow script name Carsten Grohmann Tuesday, 23 December Re: Information flow models Trent Jaeger Re: Apache on FedoraCore1(Was Re: log_domain macro) Russell Coker Re: Apache on FedoraCore1(Was Re: log_domain macro) Yuichi Nakamura Monday, 22 December Re: Apache on FedoraCore1(Was Re: log_domain macro) Russell Coker Sun/Cobalt SE Linux support Russell Coker Re: Apache on FedoraCore1(Was Re: log_domain macro) Yuichi Nakamura Announce: SELinux conditional policy extensions Karl MacMillan Re: Announcement: setools version 1.1 Karl MacMillan [patch] linux-2.4 Ext2/3 compatibility problem with EAs on symlinks Stephen C. Tweedie Re: Announcement: setools version 1.1 John D. Ramsdell Re: DoS and DDoS attacks Tom Re: Apache on FedoraCore1(Was Re: log_domain macro) Daniel J Walsh DoS and DDoS attacks Carlos Anísio Monteiro Re: sshd subsystems Chris PeBenito Sunday, 21 December Re: var_run_domain enhancement Russell Coker Re: sshd subsystems Russell Coker var_run_domain enhancement Chris PeBenito Re: sshd subsystems Chris PeBenito Re: Apache on FedoraCore1(Was Re: log_domain macro) Joerg Hoh Re: question about remote login Kerry Thompson Re: Apache on FedoraCore1(Was Re: log_domain macro) Kerry Thompson Re: sshd subsystems Russell Coker Saturday, 20 December sshd subsystems Chris PeBenito Re: question about remote login Bastian Blank Re: question about remote login lky Friday, 19 December Re: question about remote login Russell Coker Re: question about remote login Stephen Smalley question about remote login lky Re: Domain Transitions (or the Exim4 policy) David A. Caplan Apache on FedoraCore1(Was Re: log_domain macro) Yuichi Nakamura Re: Domain Transitions (or the Exim4 policy) Russell Coker Re: Domain Transitions (or the Exim4 policy) Russell Coker Thursday, 18 December Domain Transitions (or the Exim4 policy) Shane Wegner Announcement: setools version 1.1 Karl MacMillan Re: [patch] Change libselinux to discover selinuxfs mount point via /proc/mounts (Was: Re: Information about selinuxfs) Stephen Smalley Wednesday, 17 December Re: changing root to default to sysadm_r Stephen Smalley Re: policy problem with nfs mounting Stephen Smalley Re: [patch] add source line numbers to checkpolicy Stephen Smalley Tuesday, 16 December Re: slat makefiles John D. Ramsdell Re: slat makefiles John D. Ramsdell slat makefiles Carsten Grohmann Monday, 15 December Re: log_domain macro Yuichi Nakamura Re: [patch] add source line numbers to checkpolicy Colin Walters Re: log_domain macro Stephen Smalley Re: log_domain macro Stephen Smalley Re: [patch] add source line numbers to checkpolicy Stephen Smalley Re: Information Daniel J Walsh Re: Information Stephen Smalley Re: Information Russell Coker Information Carlos Anísio Monteiro log_domain macro Yuichi Nakamura [patch] add source line numbers to checkpolicy Colin Walters Sunday, 14 December audit2allow Ed Street Friday, 12 December Re: Tomcat or SOAP Russell Coker Tomcat or SOAP Nick RE: syslog() Richard Troth RE: syslog() Stephen Smalley RE: syslog() Ed Street Re: newrules script Stephen Smalley newrules script Mark Shakespeare [patch] Change is_selinux_enabled() Stephen Smalley [patch] Change libselinux to discover selinuxfs mount point via /proc/mounts (Was: Re: Information about selinuxfs) Stephen Smalley Re: syslog() Stephen Smalley syslog() Ed Street Re: Information about selinuxfs Russell Coker Re: Information about selinuxfs Stephen Smalley Information about selinuxfs Carlos Anísio Monteiro Thursday, 11 December Installing SELinux under Debian (resend) M. Pender Re: Information flow models Stephen Smalley Re: Information flow models Karl MacMillan Re: Information flow models Stephen Smalley Re: Information flow models Stephen Smalley Re: Information flow models Joshua D. Guttman Re: Information flow models Karl MacMillan Re: Information flow models John D. Ramsdell Wednesday, 10 December Re: changing root to default to sysadm_r Nick Re: changing root to default to sysadm_r Russell Coker Re: changing root to default to sysadm_r forrest whitcher changing root to default to sysadm_r Nick Re: Information flow models Karl MacMillan Re: Information flow models Joshua D. Guttman Re: Information flow models Karl MacMillan Re: Information flow models John D. Ramsdell Re: Information flow models Karl MacMillan Re: Information flow models John D. Ramsdell Re: Questions: (was Updated Release) Russell Coker Tuesday, 9 December Questions: (was Updated Release) Nick Re: the /etc/selinux problem Dale Amon Re: Policy in arch/tla Brian May Re: relabel python script. Karl MacMillan Re: More on selinux-default policy install probs Dale Amon More on selinux-default policy install probs Dale Amon RE: Basic question on policy design Frank Mayer Re: Basic question on policy design Timothy Wood Policy in arch/tla Tom Monday, 8 December Re: policy problem with nfs mounting Russell Coker Re: Installing SELinux under Debian Russell Coker Installing SELinux under Debian M. Pender Re: policy problem with nfs mounting Chris PeBenito Re: policy problem with nfs mounting Stephen Smalley Re: Information flow models Karl MacMillan policy problem with nfs mounting Chris PeBenito Sunday, 7 December Re: policy under version control Tom Re: policy under version control Tom Re: policy under version control Russell Coker Re: policy under version control Andreas Schuldei Re: policy under version control Tom Saturday, 6 December Re: setfiles - should not fail on ro fs Russell Coker Re: policy under version control Colin Walters setfiles - should not fail on ro fs Bastian Blank Re: ssh policy Russell Coker Tuesday, 2 December Re: policy under version control Brian May Friday, 5 December Re: new to the list Stephen Re: new to the list Stephen Information flow models John D. Ramsdell Updated Release Howard Holm Re: new to the list Stephen Smalley new to the list Mark Shakespeare Re: RFC Kernel interface to conditional policy Karl MacMillan Re: Problems loading policy Dale Amon Security contexts in strace John D. Ramsdell SLAT: SE Linux policy file analysis. John D. Ramsdell relabel python script. Daniel J Walsh Problems loading policy Stephen Re: Debian servers attacks Tom RE: "new" SELinux 2.4.22 UML kernel patch + sample Debian filesystem Colin Walters Re: RFC Kernel interface to conditional policy James Morris Debian servers attacks Carlos Anísio Monteiro Re: Debian Servers Russell Coker RE: "new" SELinux 2.4.22 UML kernel patch + sample Debian filesystem samwun Re: Debian Servers Stephen vim selinux syntax file carstengrohmann_at_gmx.de Thursday, 4 December Re: FAQ updates Kerry Thompson FAQ updates Russell Coker Re: ssh policy Russell Coker (no subject) Nick Re: Basic question on policy design Russell Coker Re: RFC Kernel interface to conditional policy Karl MacMillan Re: RFC Kernel interface to conditional policy James Morris Re: RFC Kernel interface to conditional policy Karl MacMillan Re: Basic question on policy design Diyab Re: RFC Kernel interface to conditional policy Stephen Smalley Re: RFC Kernel interface to conditional policy Stephen Smalley Re: Policy error of the day Stephen Smalley Re: Policy error of the day Russell Coker Re: RFC Kernel interface to conditional policy James Morris RE: Basic question on policy design Frank Mayer Re: Policy error of the day Dale Amon Re: Policy error of the day Dale Amon RE: Debian Servers Pisupati, Ajay Wednesday, 3 December Re: "new" SELinux 2.4.22 UML kernel patch + sample Debian filesystem Tom Re: "new" SELinux 2.4.22 UML kernel patch + sample Debian filesystem Colin Walters Re: Basic question on policy design Stephen Smalley Basic question on policy design Dhruv Gami RFC Kernel interface to conditional policy Karl MacMillan Re: Debian Servers Joerg Hoh Debian Servers Pisupati, Ajay Re: policy under version control Serge E. Hallyn Re: policy under version control Karl MacMillan question about booting webmin as different users lky Re: policy under version control Tom Re: the /etc/selinux problem Dale Amon Re: machine check exception Stephen Smalley Re: machine check exception Russell Coker Re: selinux-policy-default Chris Vanden Berghe machine check exception Nicholas Mucci Re: What causes this?? Dale Amon the /etc/selinux problem Tom latest djb policies Petre Rodan Tuesday, 2 December Re: Debian Investigation Report after Server Compromises (fwd) Colin Walters Re: Debian Investigation Report after Server Compromises (fwd) Tom Re: selinux-policy-default Tom Re: policy under version control Tom Re: selinux-policy-default Russell Coker ftp://people.redhat.com:dwalsh/SELinux/Fedora is a Yum repository. Daniel J Walsh Debian Investigation Report after Server Compromises (fwd) joshmccormack_at_travelersdiary.com Re: What causes this?? Stephen Smalley Re: selinux-policy-default Chris Vanden Berghe Re: selinux-policy-default Tom Re: What causes this?? Russell Coker Re: wdm now has SELinux support out-of-the-box Russell Coker Re: selinux-policy-default Dale Amon Re: policy under version control Colin Walters Re: selinux-policy-default Russell Coker Re: Future of selinux/lsm Stephen Smalley Re: policy problems James Carter Re: What causes this?? Nick Re: xattr James Carter Re: xattr James Carter Re: selinux-policy-default Chris Vanden Berghe Re: selinux-policy-default Tom Re: wdm now has SELinux support out-of-the-box Tom Re: What causes this?? Dale Amon selinux-policy-default Chris Vanden Berghe Re: wdm now has SELinux support out-of-the-box Russell Coker wdm now has SELinux support out-of-the-box Tom Re: policy under version control Tom "new" SELinux 2.4.22 UML kernel patch + sample Debian filesystem Colin Walters Re: Future of selinux/lsm selinux_at_servalens.com What causes this?? Nick Monday, 1 December 2.4.23 Russell Coker Re: What causes this?? Russell Coker Re: policy under version control Russell Coker Re: Future of selinux/lsm Russell Coker Re: setfiles and non-SE systems Dale Amon Re: policy under version control Dale Amon Future of selinux/lsm selinux_at_servalens.com Re: patched wdm (new API) Manoj Srivastava Re: policy problems Bastian Blank Re: Installation of packages Carlos AnÃsio Monteiro Status of my work on XFree86 Eamon Walsh Re: libselinux-3 (reviewed) Stephen Smalley Re: [PATCH] checkpolicy-5 Stephen Smalley Re: policy under version control Tom Re: setfiles and non-SE systems Stephen Smalley Re: setfiles and non-SE systems Dale Amon Re: policy problems James Carter Re: policy under version control Stephen Smalley Re: setfiles and non-SE systems Stephen Smalley Re: patch Stephen Smalley Re: Policy error of the day Dale Amon Re: Policy error of the day Stephen Smalley Re: Policy error of the day Stephen Smalley Re: policy problems Stephen Smalley (no subject) Stephen Smalley Re: More mkinitrd setup script problems Stephen Smalley Re: Installation of packages Stephen Smalley setfiles and non-SE systems Russell Coker patch Diyab Sunday, 30 November Re: Still no authentication from new debian packages Dale Amon Re: Policy error of the day Dale Amon Re: Policy error of the day Dale Amon Re: Policy error of the day Dale Amon Re: Policy error of the day Dale Amon Re: policy problems Russell Coker Re: Policy error of the day Russell Coker Re: Policy error of the day Russell Coker Re: Still no authentication from new debian packages Manoj Srivastava policy problems Bastian Blank Re: Policy error of the day Dale Amon Saturday, 29 November (no subject) Russell Coker (no subject) Nick Re: policy under version control Russell Coker Friday, 28 November [PATCH] checkpolicy-5 Bastian Blank libselinux-3 (reviewed) Bastian Blank Saturday, 29 November Re: policy under version control Tom Re: policies for DJ Bernstein tools Petre Rodan Re: policies for DJ Bernstein tools Russell Coker policy under version control Andreas Schuldei Re: policies for DJ Bernstein tools Petre Rodan Re: Information about packages Tom Policy error of the day Dale Amon Re: policies for DJ Bernstein tools Brian Hatch Re: policies for DJ Bernstein tools Russell Coker Re: uCLinux &/or Snapgear Linux Russell Coker Friday, 28 November Re: uCLinux &/or Snapgear Linux Chris PeBenito Re: uCLinux &/or Snapgear Linux Russell Coker uCLinux &/or Snapgear Linux Josh McCormack policies for DJ Bernstein tools Petre Rodan HOWTO for the new SE Linux Faye Coker Re: Information about packages Russell Coker Re: More mkinitrd setup script problems Dale Amon Re: More mkinitrd setup script problems Dale Amon Re: More mkinitrd setup script problems Russell Coker Information about packages Carlos Anísio Monteiro More mkinitrd setup script problems Dale Amon glibc Diyab Thursday, 27 November Policy error of the day Dale Amon Re: BSD Secure levels for linux Russell Coker Re: BSD Secure levels for linux Tom Re: BSD Secure levels for linux Roberto Nibali Re: grsecurity's random numbers Dale Amon Re: BSD Secure levels for linux Diyab grsecurity's random numbers carstengrohmann_at_gmx.de Installation of packages Carlos Anísio Monteiro Wednesday, 26 November Re: mkinitrd setup script problem Russell Coker Re: BSD Secure levels for linux Russell Coker Re: Type attributes Russell Coker BSD Secure levels for linux Diyab Re: fs_use and genfscon Russell Coker mkinitrd setup script problem Dale Amon fs_use and genfscon Carlos Anísio Monteiro Re: Problems with /dev/tty on reboot. Tom Re: Problems with /dev/tty on reboot. Daniel J Walsh Re: Problems with /dev/tty on reboot. Stephen Smalley Re: Problems with /dev/tty on reboot. Daniel J Walsh Re: Type attributes Stephen Smalley Re: Problems with /dev/tty on reboot. Stephen Smalley [patch] 2.6.0-test10-selinux1 (Was: Re: Network security contexts) Stephen Smalley Problems with /dev/tty on reboot. Daniel J Walsh Re: Network security contexts Stephen Smalley Re: genfs_contexts file Stephen Smalley Type attributes Carlos Anísio Monteiro Re: genfs_contexts file Daniel J Walsh Re: genfs_contexts file Stephen Smalley (no subject) Stephen Smalley Network security contexts Carlos Anísio Monteiro Re: Still no authentication from new debian packages Dale Amon Tuesday, 25 November jabber policy Colin Walters (no subject) Nick Re: Still no authentication from new debian packages Russell Coker Re: genfs_contexts file Russell Coker Re: Still no authentication from new debian packages Dale Amon Re: Still no authentication from new debian packages Dale Amon genfs_contexts file Carlos Anísio Monteiro Re: Still no authentication from new debian packages Dale Amon Re: Kernel panic: No init found with SE patched kernel 2.6.0-test6 Stephen C. Tweedie Still no authentication from new debian packages Dale Amon Monday, 24 November Re: How to handle lots of executables buried in /usr Daniel J Walsh Re: smart cards Sead Muftic Re: smart cards Miguel Guirao question about permissions for process execution Scott Stoller Re: How to handle lots of executables buried in /usr Stephen Smalley Re: smart cards Sead Muftic How to handle lots of executables buried in /usr Daniel J Walsh Sunday, 23 November Re: Policy error of the day Russell Coker Re: Policy error of the day Dale Amon Saturday, 22 November smart cards Russell Coker Re: Kernel panic: No init found with SE patched kernel 2.6.0-test6 Dale Amon Friday, 21 November Re: First attempt at "Configuring the SELinux Policy" - I Think I got it ! Russell Coker First attempt at "Configuring the SELinux Policy" - I Think I got it ! Nick Re: Kernel panic: No init found with SE patched kernel 2.6.0-test6 John Hayward RE: Kernel panic: No init found with SE patched kernel 2.6.0-test6 Don Patterson Re: Kernel panic: No init found with SE patched kernel 2.6.0-test6 Russell Coker Thursday, 20 November Kernel panic: No init found with SE patched kernel 2.6.0-test6 Achanta, Venkata Phani Re: calling Bill Laut Bill Laut Re: initrd image Russell Coker initrd image Carlos Anísio Monteiro Re: calling Bill Laut Dale Amon Wednesday, 19 November Re: where to download LSM-patched 2.4 Russell Coker RE: where to download LSM-patched 2.4 samwun Re: calling Bill Laut Bill Laut Re: Extended attributes and ACLs in SELinux James Morris Re: Extended attributes and ACLs in SELinux Stephen Smalley Re: newrole and serial console Stephen Smalley Re: igmp_packet_t in system_r Stephen Smalley RE: where to download LSM-patched 2.4 Stephen Smalley RE: setools Frank Mayer Extended attributes and ACLs in SELinux Carlos Anísio Monteiro calling Bill Laut Russell Coker Re: Policy error of the day Russell Coker Policy error of the day Dale Amon Re: where to download LSM-patched 2.4 Russell Coker RE: where to download LSM-patched 2.4 samwun setools Russell Coker igmp_packet_t in system_r Russell Coker Re: SELinux with IPSec - something going on ? Rusinsky Stanislas Herman W. A. policycoreutils/po Russell Coker Tuesday, 18 November policycoreutils patch Russell Coker newrole and serial console Russell Coker Re: new PAM and policy to match Dale Amon Re: capabilities and 2.4 vs 2.6 Stephen Smalley Monday, 17 November capabilities and 2.4 vs 2.6 Russell Coker Re: new PAM and policy to match Dale Amon Re: relabelling processes Stephen Smalley relabelling processes Andrew Reisse Re: SELinux with IPSec - something going on ? Stephen Smalley Re: SELinux with IPSec - something going on ? Sead Muftic Re: policy bug Dale Amon Sunday, 16 November Re: policy bug Russell Coker Re: policy bug Russell Coker Re: policy bug Dale Amon SELinux with IPSec - something going on ? Rusinsky Stanislas Herman W. A. Specific details of the policy ERR Dale Amon initrd package problem fixed Dale Amon policy bug Dale Amon Saturday, 15 November Installation problems and a web based set of instructions. Nick Re: SELinux slides by Frank Michael Reilly Re: SELinux for 2.4.20 kernel? John Hayward Re: SELinux for 2.4.20 kernel? Bill Laut Friday, 14 November Re: unix_chkpwd Stephen C. Tweedie Re: Verify the integrity of downloads Howard Holm Re: Verify the integrity of downloads Dean Anderson Re: unix_chkpwd Russell Coker Re: GNU Coding Standards Russell Coker Re: insmod Stephen Smalley Re: insmod Russell Coker Re: problem about boot Stephen Smalley Re: insmod Stephen Smalley Re: problem about boot Nick Re: GNU Coding Standards gndeva_at_ispwest.com Re: GNU Coding Standards (was: Setools 1.0.1 released) Karl MacMillan Re: unix_chkpwd Daniel J Walsh GNU Coding Standards (was: Setools 1.0.1 released) John D. Ramsdell Re: Do we break POSIX? Jakob Oestergaard Re: unix_chkpwd James Morris Re: unix_chkpwd Stephen C. Tweedie unix_chkpwd Russell Coker Thursday, 13 November Re: selinux directory Stephen Smalley selinux directory Carlos Anísio Monteiro Wednesday, 12 November Re: Verify the integrity of downloads Howard Holm Re: Verify the integrity of downloads Russell Coker Re: AVC messages Dale Amon Re: AVC messages Stephen Smalley Re: Oops in old SELinux + 2.4.21 Stephen Smalley Re: Patched GDM? Stephen Smalley SELinux for 2.4.20 kernel? Carsten P. Gehrke Re: questions about sysadm lky AVC messages Carlos Anisio Monteiro Monday, 10 November Re: Verify the integrity of downloads Dean Anderson Wednesday, 12 November Re: Authentication failure Dale Amon Tuesday, 11 November Re: Authentication failure Russell Coker Re: new PAM and policy to match Russell Coker Authentication failure Dale Amon Re: questions about sysadm Russell Coker questions about sysadm lky Re: Tokio Presentation Dale Amon Policy error report for Russ Dale Amon Re: Patched GDM? Tom Monday, 10 November Re: Do we break POSIX? James Morris Re: Do we break POSIX? James Morris Re: Do we break POSIX? Thorsten Kukuk Patched GDM? Kratzer, James R. Oops in old SELinux + 2.4.21 Paul Dwerryhouse RE: Do we break POSIX? Miner, Jonathan W Re: [selinux] Do we break POSIX? Magosányi Árpád Re: Do we break POSIX? Richard Troth Re: Community Wiki for SELinux resources Jonathan Stanton Re: Invalid Security Context error Stephen Smalley Re: stripped static binaries Stephen Smalley Re: Do we break POSIX? Stephen Smalley Do we break POSIX? Tom Tokio Presentation Tom Re: Invalid Security Context error Carlos Anisio Monteiro Sunday, 9 November new PAM and policy to match Russell Coker stripped static binaries Carsten Grohmann Invalid Security Context error Dhruv Gami Saturday, 8 November Re: Verify the integrity of downloaded archives Russell Coker Re: Verify the integrity of downloads Russell Coker Thursday, 6 November Re: Question concerning proftpd exploit Russell Coker Monday, 3 November ACM tech news Russell Coker Tuesday, 4 November insmod Russell Coker Saturday, 8 November owlsm.h get_empty_inode in 2.4.22 Stephen Friday, 7 November util-linux-2.11y and kernel 2.6-test9 Shaun Savage Re: Setools 1.0.1 released Dale Amon Re: SELinux kernel RPMs for SuSE. Carsten Grohmann Re: Verify the integrity of downloaded archives Bill Laut Community Wiki for SELinux resources Jonathan Stanton Re: Setools 1.0.1 released Karl MacMillan Re: Setools 1.0.1 released Dale Amon SELinux kernel RPMs for SuSE. Paul Dwerryhouse RE: Verify the integrity of downloads Operations Staff Thursday, 6 November Re: Verify the integrity of downloaded archives Brian May Re: Verify the integrity of downloaded archives James de Lurker Re: Verify the integrity of downloaded archives Dean Anderson Re: XWindows, trust, EROS Eamon Walsh Re: XWindows, trust, EROS Bill Laut Re: SELinux slides by Frank David Caplan RE: SELinux slides by Frank Jenkins, Steven Re: SELinux slides by Frank James A. Hamilton SELinux slides by Frank Miguel Guirao Re: Question concerning proftpd exploit Dean Anderson Re: Verify the integrity of downloaded archives Stephen Smalley Re: Question concerning proftpd exploit Stephen Smalley Question concerning proftpd exploit sMoTo Can't get the right debian packages to load Dale Amon XWindows, trust, EROS Brian May Re: Verify the integrity of downloaded archives Bill Laut Re: What's "name_bind " permission and difference with "bind" permission? James Morris Wednesday, 5 November Verify the integrity of downloaded archives sMoTo Re: util-linux patching Dhruv Gami Re: can't use ACL with 2.4 SELinux lky Re: util-linux patching Stephen Smalley Tuesday, 4 November util-linux patching Dhruv Gami Re: default policy package Dale Amon Re: can't use ACL with 2.4 SELinux James Carter [patch] 2.6.0-test9-selinux1, new inheritance controls Stephen Smalley Re: Setools 1.0.1 released Karl MacMillan Re: selinux/2.6 on knoppix 3.3 Stephen Smalley Re: selinux/2.6 on knoppix 3.3 Dale Amon Monday, 3 November Re: GDM and PAM problems? Daniel J Walsh GDM and PAM problems? Richard Herbert Wanner selinux/2.6 on knoppix 3.3 Dhruv Gami Setools 1.0.1 released Karl MacMillan Re: default policy package Howard Holm Re: default policy package Howard Holm Re: default policy package Colin Walters Re: default policy package Dale Amon Re: default policy package Stephen Smalley Re: default policy package Stephen Smalley Re: default policy package Dale Amon Re: default policy package Dale Amon Re: default policy package Diyab Re: specifying groups of types David Caplan Re: specifying groups of types Stephen Smalley Re: default policy package Diyab default policy package Dale Amon Sunday, 2 November can't use ACL with 2.4 SELinux lky Re: specifying groups of types Chris PeBenito Re: policycoreutils Dale Amon Saturday, 1 November Re: policycoreutils Russell Coker Re: policycoreutils Dale Amon Friday, 31 October ACM CCS conference tutorial slides Frank Mayer Re: user's access to files in their own home directory Russell Coker Re: successfull loaded policy on s390, 64bit Bastian Blank Re: successfull loaded policy on s390, 64bit Stephen Smalley Re: successfull loaded policy on s390, 64bit Bastian Blank Re: attr_copy_file() Stephen Smalley Re: successfull loaded policy on s390, 64bit Stephen Smalley Re: successfull loaded policy on s390, 64bit Bastian Blank Re: user's access to files in their own home directory Tom Thursday, 30 October Re: successfull loaded policy on s390, 64bit Richard Troth Re: user's access to files in their own home directory Brian May attr_copy_file() Russell Coker Re: user's access to files in their own home directory Tom user's access to files in their own home directory Russell Coker Re: root login with enforcing on Stephen Smalley Re: Diamond Rio 500 and other device nodes Russell Coker Re: Diamond Rio 500 and other device nodes Stephen Smalley Re: Diamond Rio 500 and other device nodes Russell Coker Re: When to use SEL kernel Carsten P. Gehrke Wednesday, 29 October Re: Diamond Rio 500 and other device nodes Diyab Sunday, 26 October Re: When to use SEL kernel Russell Coker Monday, 27 October Re: question about pam_selinux multiple option Russell Coker Re: question about su and passwd Russell Coker Wednesday, 29 October Re: Melbourne SE Linux group Ben McGinnes Re: root login with enforcing on Russell Coker types.fc patch Russell Coker Diamond Rio 500 and other device nodes Russell Coker Re: [PATCH] policy-1 Russell Coker Re: question about 2.6 modules lky Tuesday, 28 October Re: question about 2.6 modules Eric Estabrooks question about 2.6 modules lky Monday, 27 October Re: question about su and passwd Diyab Re: question about pam_selinux multiple option Daniel J Walsh Re: question about pam_selinux multiple option Chris PeBenito Re: question about su and passwd Stephen Smalley Re: question about su and passwd lky Re: question about su and passwd lky Re: question about pam_selinux multiple option Stephen Smalley Re: question about su and passwd Stephen Smalley Re: question about pam_selinux multiple option Daniel J Walsh Re: question about su and passwd Stephen Smalley RE: root login with enforcing on Kratzer, James R. Sunday, 26 October RPM filelist as basis for policy definitions? Dean Anderson Saturday, 25 October installation problems about apol and seuser lky Re: question about su and passwd lky Re: question about su and passwd Diyab Friday, 24 October question about su and passwd lky Saturday, 25 October question about pam_selinux multiple option Yuichi Nakamura Friday, 24 October When to use SEL kernel Carsten P. Gehrke Re: [PATCH] libselinux-2 Stephen Smalley Re: [PATCH] libselinux-3 Stephen Smalley successfull loaded policy on s390, 64bit Bastian Blank Re: root login with enforcing on Stephen Smalley root login with enforcing on Kratzer, James R. Re: [PATCH] libselinux-3 Bastian Blank Re: problem about boot James Morris Re: [PATCH] checkpolicy/policy_scan.y Stephen Smalley Thursday, 23 October Re: problem about boot Eamon Walsh [PATCH] libselinux-3 Bastian Blank [PATCH] libselinux-2 Bastian Blank Wednesday, 22 October Re: problem about boot lky Thursday, 23 October Re: [PATCH] checkpolicy/policy_scan.y Bastian Blank Re: selinux, openssh and users Stephen Smalley [PATCH] policy-1 Bastian Blank selinux, openssh and users Ignacio Tripodi Re: problem about boot Stephen Smalley Re: problem about boot Eamon Walsh Re: problem about boot Richard Herbert Wanner Wednesday, 22 October problem about boot lky Re: init patch for loading policy Russell Coker Re: init patch for loading policy Joubert Berger Re: [PATCH] checkpolicy/policy_scan.y Stephen Smalley Re: [PATCH] libselinux-1 Stephen Smalley Re: [PATCH] checkpolicy/policy_scan.y Stephen Smalley Re: [PATCH] checkpolicy/policy_scan.y Joerg Hoh Re: [PATCH] checkpolicy/policy_scan.y Stephen Smalley Re: [PATCH] checkpolicy/policy_scan.y Joerg Hoh Re: [PATCH] checkpolicy/policy_scan.y Stephen Smalley [PATCH] checkpolicy/policy_scan.y Joerg Hoh Re: [Patch] checkpolicy (3) Stephen Smalley Re: questions about EA/ACL James Carter Tuesday, 21 October questions about EA/ACL lky Re: [Patch] checkpolicy (3) Joerg Hoh Capital Area SELinux Users Group Meeting Tomorrow 10/23 Jonathan Stanton Re: init patch for loading policy Bastian Blank Re: [Patch] checkpolicy (3) Stephen Smalley Re: [Patch] checkpolicy (3) Joerg Hoh Re: init patch for loading policy Stephen Smalley Re: [Patch] checkpolicy (3) Stephen Smalley Re: chcon Stephen Smalley Re: init patch for loading policy Stephen Smalley Re: chcon Daniel J Walsh Re: init patch for loading policy Daniel J Walsh Re: init patch for loading policy Bastian Blank Re: init patch for loading policy Daniel J Walsh Re: init patch for loading policy Daniel J Walsh Re: init patch for loading policy Russell Coker Re: [Patch] checkpolicy (3) Joerg Hoh Re: init patch for loading policy Stephen Smalley Re: init patch for loading policy Russell Coker Re: init patch for loading policy Russell Coker Re: chcon Stephen Smalley chcon Russell Coker Re: init patch for loading policy Stephen Smalley Re: old SE Linux patch for procps 3.1.12 Stephen Smalley Re: init patch for loading policy Stephen Smalley Re: init patch for loading policy Stephen Smalley Re: [Patch] checkpolicy (3) Stephen Smalley Monday, 20 October Re: process context Russell Coker Re: old SE Linux patch for procps 3.1.12 Russell Coker Re: init patch for loading policy Russell Coker Re: init patch for loading policy Russell Coker [Patch] checkpolicy (3) Joerg Hoh [PATCH] libselinux-1 Bastian Blank Re: [Patch] checkpolicy Stephen Smalley Re: init patch for loading policy Daniel J Walsh Re: init patch for loading policy Bastian Blank Re: init patch for loading policy Stephen Smalley Re: init patch for loading policy Daniel J Walsh [Patch] checkpolicy Joerg Hoh Re: [PATCH] Warnings and 64bit Stephen Smalley Re: libselinux.so.1 and some utils shouldn't be in /usr Stephen Smalley Re: init patch for loading policy Stephen Smalley Re: [PATCH] Warnings and 64bit Joerg Hoh Re: libselinux.so.1 and some utils shouldn't be in /usr Bastian Blank Re: [PATCH] Warnings and 64bit Stephen Smalley Re: libselinux.so.1 and some utils shouldn't be in /usr Stephen Smalley Re: libselinux.so.1 and some utils shouldn't be in /usr Thorsten Kukuk Re: checkpolicy patch Stephen Smalley Re: process context Daniel J Walsh Re: process context Carlos Anisio Monteiro Re: Number of roles reported by checkpolicy David Caplan Re: Number of roles reported by checkpolicy Stephen Smalley Re: old SE Linux patch for procps 3.1.12 Stephen Smalley Re: libselinux.so.1 and some utils shouldn't be in /usr Stephen Smalley Re: libselinux.so.1 and some utils shouldn't be in /usr Tom Number of roles reported by checkpolicy Faye Coker Re: init patch for loading policy Carsten Grohmann Sunday, 19 October init patch for loading policy Russell Coker procps 3.1.12 patch for new SE Linux Russell Coker new SE Linux policy Russell Coker Re: new SE Linux debian repository Colin Walters Re: libselinux.so.1 and some utils shouldn't be in /usr Bastian Blank Re: libselinux.so.1 and some utils shouldn't be in /usr Russell Coker Re: libselinux.so.1 and some utils shouldn't be in /usr Bastian Blank File labeling in a chrooted loopback Dale Amon pam_selinux patch Russell Coker Re: (Capital Area) SE Linux user group Dale Amon RE: (Capital Area) SE Linux user group Robert Potter new SE Linux debian repository Russell Coker old SE Linux patch for procps 3.1.12 Russell Coker runcon/chcon patch Russell Coker Saturday, 18 October Re: (Capital Area) SE Linux user group Bill Laut Re: libselinux.so.1 and some utils shouldn't be in /usr Russell Coker Re: (Capital Area) SE Linux user group Russell Coker libselinux.so.1 and some utils shouldn't be in /usr Bastian Blank (Capital Area) SE Linux user group M. Pender Re: checkpolicy patch Bastian Blank checkpolicy patch Bastian Blank Re: Yet another question - newrole and xterm's Russell Coker Re: Yet another question - newrole and xterm's Michael Reilly Friday, 17 October Re: Yet another question - newrole and xterm's Michael Reilly RE: Sample config Inger, Slav (S.B.) Re: Sample config Stephen Smalley Sample config Inger, Slav (S.B.) Re: Symlinks with wrong context after copy Stephen Smalley Re: Symlinks with wrong context after copy Thorsten Kukuk Re: Symlinks with wrong context after copy Stephen Smalley Symlinks with wrong context after copy Thorsten Kukuk Re: process context Stephen Smalley Re: process context Stephen Smalley Re: process context Russell Coker Re: process context kamal Re: process context Russell Coker Thursday, 16 October Re: Yet another question - newrole and xterm's Russell Coker Re: process context Russell Coker process context Carlos Anisio Monteiro Re: Yet another question - newrole and xterm's Michael Reilly Re: Yet another question - newrole and xterm's Michael Reilly Re: genfscon and /boot Russell Coker Re: Yet another question - newrole and xterm's Stephen Smalley Re: Yet another question - newrole and xterm's Russell Coker Re: genfscon and /boot Dale Amon Re: can't start X window in enforce mode Russell Coker Re: [Fwd: Re: avc_toggle and avc_enforcing] Russell Coker Re: genfscon and /boot Russell Coker Washington Area Users Group Meeting October 23 Jonathan Stanton Re: genfscon and /boot Stephen Smalley Re: genfscon and /boot Russell Coker RE: can't start X window in enforce mode Kratzer, James R. Re: selinux documentation Stephen Smalley selinux documentation Carlos Anisio Monteiro [Fwd: Re: avc_toggle and avc_enforcing] Daniel J Walsh Re: genfscon and /boot Stephen Smalley Re: setfiles and /home labeling Stephen Smalley Re: Yet another question - newrole and xterm's Stephen Smalley genfscon and /boot Russell Coker Re: setfiles and /home labeling Michael Reilly Re: specifying groups of types Chris PeBenito Wednesday, 15 October Re: can't start X window in enforce mode Russell Coker Yet another question - newrole and xterm's Michael Reilly Re: setfiles and /home labeling Diyab Re: Anyone run mozilla in enforce mode? Michael Reilly Re: setfiles and /home labeling Michael Reilly Re: can't start X window in enforce mode Michael Reilly Re: setfiles and /home labeling Russell Coker setfiles and /home labeling Michael Reilly Re: More 2.4 Build problems on RH 9.0 Stephen Smalley More 2.4 Build problems on RH 9.0 Richard Herbert Wanner Re: avc_toggle and avc_enforcing Bastian Blank Re: enforce mode problems Carlos AnÃsio Monteiro Re: Question about chsh/chfn/passwd patches Stephen Smalley Re: Question about chsh/chfn/passwd patches Thorsten Kukuk Re: Question about chsh/chfn/passwd patches Stephen Smalley Re: Question about chsh/chfn/passwd patches Thorsten Kukuk Re: Question about chsh/chfn/passwd patches Stephen Smalley Re: Filesystem problems Stephen Smalley Re: Filesystem problems Thorsten Kukuk Re: Question about chsh/chfn/passwd patches Thorsten Kukuk Re: Filesystem problems Stephen Smalley Re: enforce mode problems Stephen Smalley Re: A new kid on the SELinux block!! Stephen Smalley Re: Question about chsh/chfn/passwd patches Stephen Smalley RE: Compile/build problem in Red Hat 9.0 Stephen Smalley Re: avc_toggle and avc_enforcing Stephen Smalley Re: Filesystem problems Ignacio Tripodi Tuesday, 14 October Question about chsh/chfn/passwd patches Thorsten Kukuk Wednesday, 15 October enforce mode problems Carlos Anísio Monteiro A new kid on the SELinux block!! Miguel Guirao Re: Filesystem problems James Morris Re: Filesystem problems Thorsten Kukuk Filesystem problems Ignacio Tripodi Tuesday, 14 October RE: Compile/build problem in Red Hat 9.0 Richard Herbert Wanner Re: Compile/build problem in Red Hat 9.0 Kerry Thompson Re: Anyone run mozilla in enforce mode? Michael Reilly Re: can't start X window in enforce mode Michael Reilly RE: trusted vs untrusted packages Robert Potter Re: can't start X window in enforce mode Russell Coker Re: Anyone run mozilla in enforce mode? Russell Coker Compile/build problem in Red Hat 9.0 Richard Herbert Wanner Re: trusted vs untrusted packages Diyab Trust Basics Robert Potter Re: avc_toggle and avc_enforcing Kerry Thompson Re: [Fwd: Re: trusted vs untrusted packages] Stephen Smalley [Fwd: Re: trusted vs untrusted packages] Chris PeBenito Re: selinux from user POV Thorsten Kukuk Anyone run mozilla in enforce mode? Michael Reilly Re: can't start X window in enforce mode Michael Reilly Re: specifying groups of types David Caplan Re: trusted vs untrusted packages Jeff Johnson Re: trusted vs untrusted packages Jeff Johnson Re: trusted vs untrusted packages Jeff Johnson Re: avc_toggle and avc_enforcing Dale Amon Re: avc_toggle and avc_enforcing Stephen Smalley Re: Users are not assigned correct security context on login Stephen Smalley Re: can't start X window in enforce mode Stephen Smalley Re: questions about policy for webmin Stephen Smalley Re: [patch] 2.6.0-test7-selinux1 Stephen Smalley Re: selinux from user POV Stephen Smalley avc_toggle and avc_enforcing Carlos Anísio Monteiro Re: specifying groups of types Stephen Smalley Re: trusted vs untrusted packages James Morris Re: trusted vs untrusted packages Carsten Grohmann Monday, 13 October trusted vs untrusted packages Russell Coker Re: avc: denied messages Russell Coker Updated packages available on people. Daniel J Walsh avc: denied messages Carlos Anísio Monteiro Re: login process Russell Coker login process Carlos Anísio Monteiro Re: Users are not assigned correct security context on login Russell Coker Re: Users are not assigned correct security context on login Erlend Aasland Re: Users are not assigned correct security context on login Russell Coker Users are not assigned correct security context on login Erlend Aasland Re: can't start X window in enforce mode Russell Coker Sunday, 12 October questions about policy for webmin lky Re: can't start X window in enforce mode lky Re: [patch] 2.6.0-test7-selinux1 James de Lurker Re: can't start X window in enforce mode Michael Reilly Re: How to get Xfree86 to run - old API Michael Reilly Re: can't start X window in enforce mode Russell Coker can't start X window in enforce mode lky Re: [selinux] Re: autoconf/libtool for libselinux Bastian Blank Re: selinux from user POV Russell Coker Re: selinux from user POV Brian May Saturday, 11 October Re: selinux from user POV Brian May Sunday, 12 October Re: How to get Xfree86 to run - old API Russell Coker How to get Xfree86 to run - old API Michael Reilly Saturday, 11 October Re: selinux from user POV Russell Coker selinux from user POV Joshua Brindle Time to package file types with rpm, suggestions please Jeff Johnson newrules.pl's -l option patch (Was: Re: newrules.pl -o option) Yuichi Nakamura specifying groups of types Russell Coker Friday, 10 October login process Carlos Anísio Monteiro Re: Custom domains Stephen Smalley Custom domains Kratzer, James R. Re: 2.6.0-test6 login/avc denied Stephen Smalley 2.6.0-test6 login/avc denied Carlos Anísio Monteiro Re: newrules.pl -o option Dale Amon Re: login messages James Morris patched vim WATASE Jumpei Re: newrules.pl -o option Stephen Smalley Re: newrules.pl -o option Russell Coker Re: newrules.pl -o option Stephen Smalley Re: [selinux] Re: autoconf/libtool for libselinux Stephen Smalley Re: newrules.pl -o option Russell Coker Re: newrules.pl -o option Dale Amon Re: newrules.pl -o option Yuichi Nakamura Re: newrules.pl -o option Dale Amon Re: policy configuration problems Russell Coker Re: newrules.pl -o option Russell Coker Re: [selinux] Re: autoconf/libtool for libselinux Magosányi Árpád Re: login messages Russell Coker Re: init Russell Coker Thursday, 9 October Re: policy configuration problems lky Re: newrules.pl -o option Yuichi Nakamura Re: login messages Stephen Smalley Re: policy configuration problems lky Re: autoconf/libtool for libselinux Stephen Smalley [patch] 2.6.0-test7-selinux1 Stephen Smalley Wednesday, 8 October newrules.pl -o option Yuichi Nakamura Thursday, 9 October Re: init Stephen Smalley Broke libselinux into two packages Daniel J Walsh Re: Policy patch: /dev/input devices Russell Coker Wednesday, 8 October SE Linux User Group Brian L. Simonin Re: [selinux] SElinux and chroot Magosányi Árpád Re: policy configuration problems Tom Re: Policy patch: /dev/input devices Tom Re: [PATCH] Warnings and 64bit Joerg Hoh RE: A few clarifications - SID, Precondition functions Frank Mayer policy configuration problems lky Re: 2.6.0-test6 boot process failures Chris PeBenito Re: 2.6.0-test6 boot process failures Chris PeBenito Re: [PATCH] Warnings and 64bit James Morris Re: A few clarifications - SID, Precondition functions Stephen Smalley Re: 2.6.0-test6 boot process failures Stephen Smalley Re: 2.6.0-test6 boot process failures Stephen Smalley Re: [PATCH] Warnings and 64bit Stephen Smalley Re: Policy patch: /dev/input devices Russell Coker Re: [selinux] init Stephen Smalley Re: patched wdm (new API) Stephen Smalley Policy patch: /dev/input devices Tom Re: 2.6.0-test6 boot process failures Russell Coker SElinux and chroot Artur M. Piwko Re: A few clarifications - SID, Precondition functions Vikram K Re: 2.6.0-test6 boot process failures Tom Re: 2.6.0-test6 boot process failures Tom Re: patched wdm (new API) Tom Re: [selinux] init Russell Coker Re: [selinux] init Magosányi Árpád Re: Version mismatch in selinux-usr? Russell Coker Re: patched wdm (new API) Russell Coker Re: [selinux] init Russell Coker Tuesday, 7 October Re: 2.6.0-test6 boot process failures Russell Coker Re: 2.6.0-test6 boot process failures Russell Coker Re: patched wdm (new API) Peter Simons Version mismatch in selinux-usr? Alex Re: 2.6.0-test6 boot process failures Chris PeBenito Re: [PATCH] Warnings and 64bit Joerg Hoh 2.6.0-test6 boot process failures Tom Re: [selinux] init Magosányi Árpád Re: A few clarifications - SID, Precondition functions James Morris Re: [PATCH] Warnings and 64bit Stephen Smalley Re: A few clarifications - SID, Precondition functions Stephen Smalley Re: [PATCH] Warnings and 64bit Thorsten Kukuk RE: Problems applying SELinux patch to util-linux-2.11y Kratzer, James R. A few clarifications - SID, Precondition functions Vikram K Re: [selinux] Re: [PATCH] Warnings and 64bit Magosányi Árpád Re: /selinux/enforce permissions Russell Coker Re: login messages Russell Coker Re: /selinux/enforce permissions Stephen Smalley Re: /selinux/enforce permissions Russell Coker init Russell Coker Re: /selinux/enforce permissions Stephen Smalley /selinux/enforce permissions Russell Coker Re: login messages Stephen Smalley Melbourne SE Linux group Russell Coker mkinitrd on Debian Russell Coker Re: libselinux-1.2 and const usage Stephen Smalley Re: Problems applying SELinux patch to util-linux-2.11y Stephen Smalley Problems applying SELinux patch to util-linux-2.11y Erlend Aasland Re: login messages Russell Coker Re: libselinux-1.2 and const usage Thorsten Kukuk Monday, 6 October Re: libselinux-1.2 and const usage Russell Coker [PATCH][SELINUX] add policyvers to selinuxfs James Morris autoconf/libtool for libselinux Thorsten Kukuk Re: libselinux-1.2 and const usage Thorsten Kukuk RE: login messages Kratzer, James R. Re: [PATCH] Warnings and 64bit Stephen Smalley Re: login messages Tom Re: Updated Release Tom Saturday, 4 October [PATCH] Warnings and 64bit Joerg Hoh Monday, 6 October RE: SELinux meetings?? Frank Mayer Re: login messages Stephen Smalley Saturday, 4 October Re: serial devices James Morris Monday, 6 October login messages Kratzer, James R. Re: Updated Release Stephen Smalley Saturday, 4 October Re: Updated Release Andreas Schuldei Re: Question about policy files and users Dale Amon Re: serial devices Brian May Re: Security Officer and System Administrator Separation of Duties Russell Coker Re: Question about policy files and users Russell Coker Re: Fedora Project and SELinux Russell Coker serial devices Russell Coker Question about policy files and users Michael Reilly Friday, 3 October Re: SELinux meetings?? Tony Stanco Re: Fedora Project and SELinux James Morris Re: libselinux-1.2 and const usage Stephen Smalley Re: Security Officer and System Administrator Separation of Duties Tom Re: Updated Release Daniel J Walsh Re: Updated Release Stephen Smalley Re: Security Officer and System Administrator Separation of Duties Stephen Smalley Re: Security Officer and System Administrator Separation of Duties Russell Coker Re: Security Officer and System Administrator Separation of Duties Tom Re: SELinux Certification Tony Stanco Re: Security Officer and System Administrator Separation of Duties Russell Coker Re: Updated Release Andreas Schuldei libselinux-1.2 and const usage Thorsten Kukuk Thursday, 2 October SELinux meetings?? (in West Michigan) Bill Laut Re: Security Officer and System Administrator Separation of Duties Tom OneBase TCB - SELinux and IPSec Kerry Thompson Security Officer and System Administrator Separation of Duties Fleischman, Eric Re: [selinux] Re: X Windows discussion Bill Laut RE: SELinux meetings?? M. Pender Re: SELinux Certification Terry S. Arnold Updated Release Howard Holm Re: assertions in kernel Stephen Smalley patched wdm (new API) Tom Re: assertions in kernel James Morris setfiles performance Russell Coker Wednesday, 1 October Re: [selinux] Re: SELinux Certification Terry S. Arnold Re: SE-X and Crypto Discussions Bill Laut Re: [selinux] Re: X Windows discussion Magosányi Árpád Re: [selinux] Re: SELinux Certification Magosányi Árpád Re: SELinux Certification Tony Stanco Re: file_labels_t Russell Coker Tuesday, 30 September SELinux Certification Terry S. Arnold Wednesday, 1 October Re: assertions in kernel James Morris Fedora Project and SELinux Kratzer, James R. Re: glibc check errors Stephen Smalley Re: assertions in kernel Russell Coker Re: shlib_t vs lib_t for symbolic links Russell Coker Re: assertions in kernel Stephen Smalley Re: file_labels_t Stephen Smalley Re: makemap Russell Coker Re: shlib_t vs lib_t for symbolic links Stephen Smalley Re: makemap Stephen Smalley assertions in kernel Russell Coker shlib_t vs lib_t for symbolic links Russell Coker 2.6 install guide Tom makemap Russell Coker new setfiles patch Russell Coker Re: X Windows discussion Bill Laut Re: X Windows discussion Russell Coker Re: SE-X and Crypto Discussions Russell Coker file_labels_t Chris PeBenito Tuesday, 30 September SE-X and Crypto Discussions Bill Laut Re: glibc check errors Diyab Re: X Windows discussion Bill Laut RE: glibc check errors Stephen Smalley RE: glibc check errors Kratzer, James R. Re: glibc check errors Stephen Smalley glibc check errors Kratzer, James R. Re: SELinux & UML FAQ Russell Coker Monday, 29 September X Windows discussion Eamon Walsh Re: SELinux & UML FAQ Stephen Smalley Re: SELinux meetings?? Robert Watson SELinux & UML FAQ Nick Davis new policy Russell Coker Re: unlabeled_t and assert.te Stephen Smalley Re: is_selinux_enabled in fileutils Russell Coker Re: is_selinux_enabled in fileutils Stephen Smalley Re: selinux and 64 bit hardware Stephen Smalley Re: is_selinux_enabled in fileutils Stephen Smalley Re: is_selinux_enabled in fileutils Daniel J Walsh Saturday, 27 September Re: SELinux meetings?? Juan Bocanegra Re: SELinux meetings?? Tony Stanco Sunday, 28 September is_selinux_enabled in fileutils Joshua Brindle Re: Emacs major mode for policy editing Bill Laut Mirror for 2.6.x packages Tom Re: SELinux in Japan Tom Re: SELinux in Japan WATASE Jumpei Re: Emacs major mode for policy editing Bill Laut Re: SELinux meetings?? Russell Coker Saturday, 27 September Re: SELinux meetings?? McDonald Patrick Re: Emacs major mode for policy editing Russell Coker Re: ssh policy hassles Dale Amon Re: Emacs major mode for policy editing Bill Laut Re: unlabeled_t and assert.te Russell Coker Re: selinux and 64 bit hardware Howard Holm selinux and 64 bit hardware Joerg Hoh Re: unlabeled_t and assert.te Howard Holm Re: SELinux meetings?? Tony Stanco Re: SELinux meetings?? Timmy Jones Re: ssh policy hassles Russell Coker unlabeled_t and assert.te Russell Coker Re: ssh policy hassles Dale Amon Re: Emacs major mode for policy editing Russell Coker Friday, 26 September Re: Emacs major mode for policy editing Bill Laut Re: SELinux meetings?? McDonald Patrick Re: SELinux meetings?? K Rob Re: Emacs major mode for policy editing Bill Laut Re: policy language extensions Stephen Smalley Re: policy language extensions David Caplan sourceforge selinux CVS tree updated Stephen Smalley Re: policy language extensions Dale Amon Re: SELinux meetings?? Dale Amon Thursday, 25 September Re: ssh policy hassles Russell Coker Re: ssh policy hassles Diyab Re: policy language extensions David Caplan policy language extensions David Caplan RE: SELinux meetings?? Michael Pender Re: Emacs major mode for policy editing Chris PeBenito SELinux in Japan Tom Re: SELinux meetings?? Howard Holm Re: ssh policy hassles Russell Coker Attached File Eamon Walsh Emacs major mode for policy editing Eamon Walsh Re: ssh policy hassles Dale Amon Re: ssh policy hassles Diyab Re: ssh policy hassles Stephen Smalley Re: ssh policy hassles Russell Coker Re: ssh policy hassles Dale Amon Re: ssh policy hassles Dale Amon Re: ssh policy hassles Dale Amon Re: ssh policy hassles Dale Amon Re: ssh policy hassles Dale Amon Re: ssh policy hassles Russell Coker Re: ssh policy hassles Tom Wednesday, 24 September Re: ssh policy hassles Russell Coker Re: ssh policy hassles Diyab Re: Sample SELinux policy that's equivalent to standard root? Brian May Re: ssh policy hassles Dale Amon Re: ssh policy hassles Dale Amon RE: ssh policy hassles Inger, Slav (S.B.) Re: ssh policy hassles Kerry Thompson ssh policy hassles Dale Amon Re: Sample SELinux policy that's equivalent to standard root? Russell Coker [patch] Fix bug in SELinux convert_context Stephen Smalley Re: Some minor thoughts on syntax/semantics Dale Amon RE: Sample SELinux policy that's equivalent to standard root? Inger, Slav (S.B.) Re: Some minor thoughts on syntax/semantics Russell Coker Re: Sample SELinux policy that's equivalent to standard root? Russell Coker Tuesday, 23 September postfix virtual delivery patch Diyab Re: Some minor thoughts on syntax/semantics Brian May Sample SELinux policy that's equivalent to standard root? Inger, Slav (S.B.) Re: setfiles performance patch Stephen C. Tweedie Some minor thoughts on syntax/semantics Dale Amon please delete kcheckpass.te Russell Coker Re: setfiles performance patch Russell Coker Re: setfiles performance patch Russell Coker setfiles performance patch Russell Coker Monday, 22 September Re: New release of setools Joshua D. Guttman New release of setools Frank Mayer default_contexts question Magosányi Árpád Re: Boot time avc messages Dale Amon SELinux meetings?? Subba Rao Re: Boot time avc messages Dale Amon ssh: UseLogin yes Russell Coker Thursday, 18 September privsep in ssh Russell Coker Friday, 19 September /dev/tty Russell Coker Saturday, 20 September run_init patch Chris PeBenito Re: Boot time avc messages Dale Amon Re: Boot time avc messages Dale Amon Re: Boot time avc messages Russell Coker Re: Boot time avc messages Russell Coker Re: Boot time avc messages Dale Amon Re: Boot time avc messages Dale Amon Re: Boot time avc messages Russell Coker Friday, 19 September Re: Boot time avc messages Dale Amon Thursday, 18 September Re: Boot time avc messages Russell Coker ssh problems etc Russell Coker Re: Boot time avc messages Dale Amon Re: Installation Problem lky Re: Installation Problem Russell Coker Wednesday, 17 September how to update openssh WATASE Jumpei Hurricane Isabel Howard Holm Re: Installation Problem James Carter Installation Problem lky Re: Trivial debian bootscript for selinuxfs on 2.6 Dale Amon Re: Trivial debian bootscript for selinuxfs on 2.6 Dale Amon Re: Boot time avc messages Russell Coker Re: Trivial debian bootscript for selinuxfs on 2.6 Russell Coker Re: Boot time avc messages Dale Amon Re: Policy source and initial ramdisk Stephen Smalley Re: Trivial debian bootscript for selinuxfs on 2.6 Dale Amon Re: Trivial debian bootscript for selinuxfs on 2.6 Dale Amon Re: Trivial debian bootscript for selinuxfs on 2.6 Russell Coker Re: Policy source and initial ramdisk Russell Coker Re: Mod to Makefile for reiserfs Russell Coker Re: Boot time avc messages Russell Coker Re: Boot time avc messages Russell Coker Re: Policy source and initial ramdisk Dale Amon Tuesday, 16 September Re: Policy source and initial ramdisk Diyab More on reiserfs Dale Amon 2.6.0 selinux reiserfs labeling Dale Amon Mod to Makefile for reiserfs Dale Amon Policy source and initial ramdisk Karl MacMillan Re: Trivial debian bootscript for selinuxfs on 2.6 Dale Amon Trivial debian bootscript for selinuxfs on 2.6 Dale Amon policy model Magosányi Árpád Re: Boot time avc messages Dale Amon Saturday, 13 September IEEE Begins Standard to Create Baseline for More Secure Operating Systems Tracy R Reed Monday, 15 September Re: SELinux project Trent Jaeger Re: SELinux project kamal Re: SELinux project Trent Jaeger Re: Problem relabeling journalfile Colin Walters Re: Problem relabeling journalfile Stephen Smalley Re: Problem relabeling journalfile Russell Coker RE: SELinux project Frank Mayer Re: Installation of policy source Karl MacMillan Re: Problem relabeling journalfile Stephen Smalley Re: Problem relabeling journalfile Dale Amon Re: Installation of policy source Stephen Smalley Re: Installation of policy source Karl MacMillan Re: Problem relabeling journalfile Stephen Smalley Problem relabeling journalfile Dale Amon Re: Installation of policy source Stephen Smalley Re: booting selinux rh9 Stephen Smalley Re: SELinux project Stephen Smalley Sunday, 14 September Re: New Potential Research Area for SELinux Bill Laut Monday, 15 September booting selinux rh9 Jason Sunday, 14 September Using Colin's Debian archive Dale Amon Re: New Potential Research Area for SELinux Russell Coker New Potential Research Area for SELinux Joseph Pingenot Saturday, 13 September Re: Debian package: how to relabel Dale Amon Re: Debian package: how to relabel Colin Walters Re: Debian package: how to relabel Russell Coker Re: Debian package: how to relabel Dale Amon Re: Debian package: how to relabel Dale Amon Re: Debian package: how to relabel Russell Coker Debian package: how to relabel Dale Amon Re: Another small SE presentation Dale Amon Re: rfs xattr's, mkinitrd and other stories Dale Amon SELinux project kamal Friday, 12 September Re: Installation of policy source Diyab Re: rfs xattr's, mkinitrd and other stories Russell Coker Re: Installation of policy source Stephen Smalley Installation of policy source Karl MacMillan Re: rfs xattr's, mkinitrd and other stories Dale Amon Re: rfs xattr's, mkinitrd and other stories Dale Amon RE: NISPOM Chaper 8 Requirements McFadden, Ken Re: rfs xattr's, mkinitrd and other stories Russell Coker Re: rfs xattr's, mkinitrd and other stories Dale Amon Thursday, 11 September Re: How about future of MLS? Karl MacMillan RE: Patching SRPM utilities produces rejects on RH9 Stephen Smalley RE: Patching SRPM utilities produces rejects on RH9 Kratzer, James R. Mail list reliability Howard Holm Re: Patching SRPM utilities produces rejects on RH9 Stephen Smalley Patching SRPM utilities produces rejects on RH9 Kratzer, James R. Re: update www.securityenhancedlinux.de Carsten Grohmann Re: update www.securityenhancedlinux.de joshmccormack_at_travelersdiary.com Re: rfs xattr's, mkinitrd and other stories Russell Coker update www.securityenhancedlinux.de carstengrohmann_at_gmx.de Re: rfs xattr's, mkinitrd and other stories Stephen Smalley Re: rfs xattr's, mkinitrd and other stories Stephen Smalley Wednesday, 10 September watchdog policy Russell Coker Re: rfs xattr's, mkinitrd and other stories Russell Coker Re: installing rh9 latest Russell Coker Thursday, 11 September Installation question - RH9.0 2.4.21-selinux kernel jason anderssen Wednesday, 10 September Re: rfs xattr's, mkinitrd and other stories Dale Amon Re: rfs xattr's, mkinitrd and other stories Dale Amon Re: Another small SE presentation Russell Coker Re: rfs xattr's, mkinitrd and other stories Dale Amon Re: rfs xattr's, mkinitrd and other stories Dale Amon Re: rfs xattr's, mkinitrd and other stories Colin Walters Thursday, 11 September installing rh9 latest jason anderssen Wednesday, 10 September Re: rfs xattr's, mkinitrd and other stories Dale Amon Re: rfs xattr's, mkinitrd and other stories Chris PeBenito Re: rfs xattr's, mkinitrd and other stories Stephen Smalley Re: rfs xattr's, mkinitrd and other stories Dale Amon Re: rfs xattr's, mkinitrd and other stories Chris PeBenito Re: System hangup after installing glibc-rpms Stephen Smalley System hangup after installing glibc-rpms sMoTo Re: rfs xattr's, mkinitrd and other stories Stephen Smalley Re: rfs xattr's, mkinitrd and other stories Dale Amon Re: rfs xattr's, mkinitrd and other stories Stephen Smalley rfs xattr's, mkinitrd and other stories Dale Amon Re: Another small SE presentation Tom Re: Another small SE presentation James de Lurker Tuesday, 9 September uml Russell Coker Re: Another small SE presentation Dale Amon Another small SE presentation Tom NISPOM Chaper 8 Requirements Miner, Jonathan W Re: How about future of MLS? Stephen Smalley Re: how to add a user with rights to login via ssh on selinux? Tom RE: how to add a user with rights to login via ssh on selinux? Romix RE: how to add a user with rights to login via ssh on selinux? Romix Re: how to add a user with rights to login via ssh on selinux? Faye Coker Re: how to add a user with rights to login via ssh on selinux? Russell Coker RE: how to add a user with rights to login via ssh on selinux? Romix Re: how to add a user with rights to login via ssh on selinux? Russell Coker RE: how to add a user with rights to login via ssh on selinux? Romix Re: how to add a user with rights to login via ssh on selinux? Russell Coker how to add a user with rights to login via ssh on selinux? Romix Monday, 8 September Re: How about future of MLS? Wu Yanjun Re: How about future of MLS? Stephen Smalley Re: SE Linux packages for SuSE 8.2 Stephen Smalley Sunday, 7 September How about future of MLS? Wu Yanjun SE Linux packages for SuSE 8.2 Paul Dwerryhouse Saturday, 6 September Enterprise Linux and SELinux presentation Subba Rao Thursday, 4 September Re: libselinux.so: cannot open shared object file Brian May Re: libselinux.so: cannot open shared object file Diyab Workshop SELinux in Dresden Carsten Grohmann Re: libselinux.so: cannot open shared object file Colin Walters Re: libselinux.so: cannot open shared object file Russell Coker Re: Enable SELinux via boot parameter Russell Coker Wednesday, 3 September libselinux.so: cannot open shared object file max barwell make check failure on glibc using rh9 tyronne-nash_at_utulsa.edu Re: Enable SELinux via boot parameter Chris PeBenito Re: Enable SELinux via boot parameter Tom Re: Enable SELinux via boot parameter James Morris Re: Data type changed? Stephen Smalley Re: Data type changed? Karl MacMillan Re: Enable SELinux via boot parameter Chris PeBenito Re: Enable SELinux via boot parameter Tom Re: Enable SELinux via boot parameter Stephen Smalley Re: glibc rpm install error Stephen Smalley Re: Data type changed? Stephen Smalley Re: Enable SELinux via boot parameter Stephen Smalley Re: Data type changed? James Morris Re: Enable SELinux via boot parameter Tom Re: Enable SELinux via boot parameter Brian May Re: Type background of SELinux Russell Coker Re: glibc rpm install error Russell Coker Tuesday, 2 September Re: Enable SELinux via boot parameter Chris PeBenito Data type changed? Wu Yanjun Enable SELinux via boot parameter James Morris RE: Type background of SELinux Stephen Smalley RE: Type background of SELinux Jenkins, Steven Re: Q on Internals & Data Structures Stephen Smalley RE: Type background of SELinux Stephen Smalley Re: new SE Linux and avc messages Stephen Smalley Re: glibc rpm install error Stephen Smalley glibc rpm install error Nick Davis Re: ls --context of /selinux Daniel J Walsh Re: ls --context of /selinux Stephen Smalley Re: new SE Linux and avc messages Stephen Smalley Re: getting sids Stephen Smalley ls --context of /selinux Russell Coker new SE Linux and avc messages Russell Coker Saturday, 30 August getting sids Diyab Re: Q on Internals & Data Structures Bill Laut Re: Type background of SELinux Russell Coker Friday, 29 August Re: Type background of SELinux Bill Laut RE: Type background of SELinux Jenkins, Steven Re: Type background of SELinux Stephen Smalley Type background of SELinux Jenkins, Steven Re: Q on Internals & Data Structures Stephen Smalley Q on Internals & Data Structures Bill Laut Re: Package install probs Dale Amon Thursday, 28 August Re: Package install probs Colin Walters Re: Package install probs Russell Coker Re: Package install probs Stephen Smalley Re: Package install probs Dale Amon Re: SElinux vs. Grsecruity vs. RSBAC (vs. TrustedBSD?) Justin Smith Re: Package install probs Dale Amon Re: Package install probs Russell Coker Package install probs Dale Amon Re: init, checkpolicy manpage and labeling questions Stephen Smalley init, checkpolicy manpage and labeling questions Magosányi Árpád Re: About mkinitrd ... Stephen Smalley Wednesday, 27 August Re: About mkinitrd ... UENO Shuichi About mkinitrd ... Ripin Natani setfiles patch Russell Coker Re: my Debian packages Dale Amon patch for is_selinux_enabled() Russell Coker Tuesday, 26 August Re: general security lib (was: 2.6.0-test3) Russell Coker first pass at pam_selinux.so Daniel J Walsh Re: general security lib (was: 2.6.0-test3) Stephen Smalley Re: Redhat 9 Karl MacMillan Re: [selinux] Re: SElinux vs. Grsecruity vs. RSBAC (vs. TrustedBSD?) Stephen Smalley Re: [selinux] Re: SElinux vs. Grsecruity vs. RSBAC (vs. TrustedBSD?) Stephen Smalley Re: SElinux vs. Grsecruity vs. RSBAC Stephen Smalley Re: [selinux] Re: SElinux vs. Grsecruity vs. RSBAC (vs. TrustedBSD?) Russell Coker Re: [selinux] Re: SElinux vs. Grsecruity vs. RSBAC (vs. TrustedBSD?) Magosányi Árpád Monday, 25 August Re: SElinux vs. Grsecruity Russell Coker RE: questions Stephen Smalley Re: 2.6.0-test3 Dale Amon Re: Redhat 9 Stephen Smalley Re: SElinux vs. Grsecruity vs. RSBAC Bennett Todd Redhat 9 Karl MacMillan RE: questions Art Wilson Re: initrd vs initramfs Stephen Smalley SElinux vs. Grsecruity Pisupati, Ajay Re: warning and question: e2fsck Stephen Smalley warning and question: e2fsck Magosányi Árpád Re: questions David Caplan Sunday, 24 August initrd vs initramfs Brian May Monday, 25 August Re: 2.6.0-test4 is released Stephen Smalley RE: questions Kevin Carr Sunday, 24 August Re: 2.6.0-test3 Colin Walters Re: 2.6.0-test3 Dale Amon Monday, 25 August my Debian packages Russell Coker Sunday, 24 August Re: 2.6.0-test3 Dale Amon Re: 2.6.0-test3 Colin Walters Suse xattr patches Dale Amon Re: questions James Morris Saturday, 23 August questions Magosányi Árpád Re: general security lib (was: 2.6.0-test3) Russell Coker Re: general security lib (was: 2.6.0-test3) Brian May Re: general security lib (was: 2.6.0-test3) Brian May 2.6.0-test4 is released Russell Coker Re: general security lib (was: 2.6.0-test3) Russell Coker Re: general security lib (was: 2.6.0-test3) Russell Coker Friday, 22 August David Gathright Russell Coker Re: 2.6.0-test3 Russell Coker Re: 2.6.0-test3 Dale Amon Re: general security lib (was: 2.6.0-test3) Stephen Smalley Re: general security lib (was: 2.6.0-test3) Colin Walters Re: 2.6.0-test3 Colin Walters Re: general security lib (was: 2.6.0-test3) Daniel J Walsh Re: general security lib (was: 2.6.0-test3) Stephen Smalley Re: 2.6.0-test3 Russell Coker Re: 2.6.0-test3 Russell Coker Re: 2.6.0-test3 Stephen Smalley Re: general security lib (was: 2.6.0-test3) Russell Coker Re: general security lib (was: 2.6.0-test3) Stephen Smalley Re: 2.6.0-test3 Russell Coker Re: 2.6.0-test3 Dale Amon Re: 2.6.0-test3 Stephen Smalley Re: general security lib (was: 2.6.0-test3) Stephen Smalley general security lib (was: 2.6.0-test3) Magosányi Árpád Thursday, 21 August Re: 2.6.0-test3 Russell Coker Re: 2.6.0-test3 Brian May Friday, 22 August Re: 2.6.0-test3 Russell Coker Re: 2.6.0-test3 Russell Coker Re: 2.6.0-test3 Brian May Thursday, 21 August Re: 2.6.0-test3 Russell Coker Re: 2.6.0-test3 Stephen Smalley Re: 2.6.0-test3 Colin Walters Re: 2.6.0-test3 Dale Amon Re: 2.6.0-test3 Russell Coker 2.6.0-test3 Magosányi Árpád Wednesday, 20 August Re: "Unable to mount root fs on unknown-block(0,0)" Russell Coker Tuesday, 19 August Re: "Unable to mount root fs on unknown-block(0,0)" Ripin Natani Re: "Unable to mount root fs on unknown-block(0,0)" Ripin Natani Wednesday, 20 August Re: "Unable to mount root fs on unknown-block(0,0)" Russell Coker Tuesday, 19 August Re: "Unable to mount root fs on unknown-block(0,0)" Ripin Natani Wednesday, 20 August Re: "Unable to mount root fs on unknown-block(0,0)" Ripin Natani Tuesday, 19 August setools patch Frank Mayer Re: Q on the Constrain verb Stephen Smalley Q on the Constrain verb Bill Laut Monday, 18 August Re: "Unable to mount root fs on unknown-block(0,0)" Russell Coker "Unable to mount root fs on unknown-block(0,0)" Ripin Natani Re: SELinux on Slackware 9 with PAM Diyab Re: SELinux on Slackware 9 with PAM Diyab Re: lilo and initrd Stephen Smalley Re: SELinux on Slackware 9 with PAM Russell Coker Sunday, 17 August Re: 2.6 error Russell Coker Re: SELinux on Slackware 9 with PAM Kerry Thompson my policy tree Russell Coker 2.6 error Timmy Jones first policy patch for 2.6 Russell Coker updated setfiles altroot patch Chris PeBenito coreutils Russell Coker Saturday, 16 August Re: lilo and initrd Russell Coker Re: lilo and initrd Brian May lilo and initrd Carsten Grohmann Re: iso image and smallest partition questions ... Russell Coker Friday, 15 August iso image and smallest partition questions ... Ripin Natani Re: 2.6.0-test3 and UML Stephen Smalley Depends: Russell Coker Thursday, 14 August Re: Updated Release James Carter Re: Updated Release Chris PeBenito Updated Release Howard Holm 2.6.0-test3 and UML Russell Coker Wednesday, 13 August Re: Fwd: [JS] Suse on IBM eServer achieves EAL2+ security Jakob Oestergaard OT: Re: Linux Wipe Disk Utility James Griffin Re: Linux Wipe Disk Utility Russell Coker Re: Linux Wipe Disk Utility Dan Anderson Re: Linux Wipe Disk Utility Joseph A Nagy Jr RE: Linux Wipe Disk Utility Tomás Palmer Linux Wipe Disk Utility Lugg William H Civ OO-ALC /MASFE Policy problem Marcin Wasilewski Re: Installation Problem Russell Coker Installation Problem shravan kumar Tuesday, 12 August SELinux on Slackware 9 with PAM Diyab Building the policy Marcin Wasilewski Monday, 11 August slides for presentation Tom User Guidance Document Timmy Jones Saturday, 9 August Fwd: Linux kernel 2.6.0-test3 released Russell Coker Monday, 11 August SELinux at the CCC Tom Re: SELinux network issue. Russell Coker SELinux network issue. Timmy Jones Sunday, 10 August Re: execute_no_trans James Morris Saturday, 9 August postfix policy Carsten Grohmann Friday, 8 August execute_no_trans Diyab Re: X-Windows and Client-side Buffer Overruns Florian Weimer Re: X-Windows and Client-side Buffer Overruns Florian Weimer Re: Fw: [ISN] IBM earns Linux certification Tom Thursday, 7 August Update - libsecure build failure Glen Boyd Fw: [ISN] IBM earns Linux certification David Eaves Re: Fw: [ISN] IBM earns Linux certification Florian Weimer Re: Fwd: [JS] Suse on IBM eServer achieves EAL2+ security Casey Schaufler Fw: [ISN] IBM earns Linux certification David Eaves Fwd: [ISN] IBM earns Linux certification Russell Coker Wednesday, 6 August Re: oops on policy load (PPC) Chris PeBenito Re: Fwd: [JS] Suse on IBM eServer achieves EAL2+ security Florian Weimer Re: attribute definitions David Caplan Re: Fwd: [JS] Suse on IBM eServer achieves EAL2+ security Tom Re: libsecure Compilation Failure Carsten Grohmann Re: [patch] initrd Makefile target Russell Coker Re: libsecure Compilation Failure Kerry Thompson Re: oops on policy load (PPC) Chris PeBenito Tuesday, 5 August libsecure Compilation Failure Glen Boyd [patch] initrd Makefile target Chris PeBenito Fwd: [JS] Suse on IBM eServer achieves EAL2+ security Russell Coker Re: attribute definitions Stephen Smalley attribute definitions Diyab Re: oops on policy load (PPC) Stephen Smalley Monday, 4 August oops on policy load (PPC) Chris PeBenito Re: SELinux-2.6-PPC Stephen Smalley Re: SELinux-2.6-PPC Chris PeBenito Re: SELinux-2.6-PPC Stephen Smalley Sunday, 3 August SELinux-2.6-PPC Chris PeBenito Friday, 1 August SE Linux merged in 2.6.0 Russell Coker RE: X-Windows and Client-side Buffer Overruns (was Re: Updated Re lease) Tomás Palmer SELinux Database Admin David Walter Re: X-Windows and Client-side Buffer Overruns (was Re: Updated Release) Bill Laut Re: Query about LSM and RSBAC Stephen Smalley Query about LSM and RSBAC Hemal Namdev Rathod thanks.txt Russell Coker Thursday, 31 July splitting global_macros.te Russell Coker Re: macro about network Yuichi Nakamura RE: Error while installing: Kerry Thompson new policy patch Russell Coker Re: X-Windows and Client-side Buffer Overruns (was Re: Updated Release) Russell Coker Re: SELinux Workshop at CCC Russell Coker Re: Error while installing: Russell Coker RE: Error while installing: Hariharan Gopalan Re: Error while installing: Stephen Smalley Re: Searchable archive Stephen Smalley Error while installing: Hariharan Gopalan Searchable archive Hariharan Gopalan Re: Problems compiling libsecure Don Mills Re: Problems compiling libsecure Stephen Smalley Problems compiling libsecure Don Mills Re: X-Windows and Client-side Buffer Overruns (was Re: Updated Release) Bill Laut SELinux Workshop at CCC Tom Re: X-Windows and Client-side Buffer Overruns (was Re: Updated Release) Tom Re: X-Windows and Client-side Buffer Overruns (was Re: Updated Release) Russell Coker Re: macro about network Stephen Smalley Re: Updated Release Stephen Smalley Re: macro about network Russell Coker Wednesday, 30 July Re: writing a java policy file Colin Walters Re: Updated Release Bill Laut Re: X-Windows and Client-side Buffer Overruns (was Re: Updated Release) Tom writing a java policy file Michael Luu X-Windows and Client-side Buffer Overruns (was Re: Updated Release) Bill Laut Re: Question about development Stephen Smalley Question about development Miguel Bolanos Monday, 28 July per-user tmpdir Russell Coker Re: proposal: per-user temporary directories on by default? Russell Coker Wednesday, 30 July Re: [patch] policy metadata Stephen Smalley Tuesday, 29 July macro about network Yuichi Nakamura Monday, 28 July Re: [PATCH] 2.5 / 2.6 merge (fixed) Stephen Smalley Re: [PATCH] 2.5 / 2.6 merge (fixed) Colin Walters Re: Linuxfromscratch.org Tom Sunday, 27 July Re: Linuxfromscratch.org Tom Re: Linuxfromscratch.org Colin Walters Re: experimental SEDebian 2.5 packages Tom Friday, 25 July [PATCH] 2.5 / 2.6 merge (fixed) Miguel Bolanos [PATCH] Merge 2.5 / 2.6 Miguel Bolanos Sunday, 27 July Re: experimental SEDebian 2.5 packages Colin Walters Re: Linuxfromscratch.org Tom Saturday, 26 July se_procmail Colin Walters Re: 2003071106 on RH 7.2 Kerry Thompson Friday, 25 July Re: 2003071106 on RH 7.2 Russell Coker Thursday, 24 July 2003071106 on RH 7.2 Paul L. Allen SeLinux Azeem Gopalani RE: grub/boot redhat9 problem Stephen Reese Fwd: [ols-announce] Proceedings. Russell Coker RE: can't log into machine w/ ssh Dean Anderson Re: Linuxfromscratch.org Russell Coker Re: Linuxfromscratch.org Dean Anderson RE: can't log into machine w/ ssh Michael Luu Re: can't log into machine w/ ssh Russell Coker Re: can't log into machine w/ ssh Russell Coker Re: Linuxfromscratch.org Colin Walters RE: can't log into machine w/ ssh Michael Luu Slides from Red Hat webcast on SELinux Daniel J Walsh Re: grub/boot redhat9 problem Russell Coker USENIX Security SELinux BoF -- Time Change Trent Jaeger RE: can't log into machine w/ ssh Michael Luu Re: Linuxfromscratch.org Dale Amon Re: Linuxfromscratch.org Dale Amon Re: Linuxfromscratch.org Dale Amon Wednesday, 23 July Re: can't log into machine w/ ssh Russell Coker Thursday, 24 July Re: Linuxfromscratch.org Dale Amon Wednesday, 23 July Re: Linuxfromscratch.org Dean Anderson Re: Linuxfromscratch.org Dean Anderson Thursday, 24 July Re: Linuxfromscratch.org Brian May Wednesday, 23 July Re: Linuxfromscratch.org Dale Amon Re: Linuxfromscratch.org karlm_at_mit.edu Re: Linuxfromscratch.org Lukasz Luzar Re: Linuxfromscratch.org Dale Amon Re: Linuxfromscratch.org Russell Coker Re: Linuxfromscratch.org Carsten P. Gehrke Tuesday, 22 July Re: grub/boot redhat9 problem Russell Coker Re: hidden files and se linux? Dean Anderson Re: Linuxfromscratch.org Dean Anderson Wednesday, 23 July RE: grub/boot redhat9 problem Stephen Reese Tuesday, 22 July can't log into machine w/ ssh Michael Luu Linuxfromscratch and the SE Kernel Charlie Watts Re: Linuxfromscratch.org Carsten P. Gehrke grub/boot redhat9 problem Stephen Reese Re: Few questions related to Selinux on Redhat 8.0 Rakesh Tripathi Re: Linuxfromscratch.org Russell Coker Re: hidden files and se linux? Russell Coker Re: Few questions related to Selinux on Redhat 8.0 Russell Coker Re: Red Hat webcast on SELinux Daniel J Walsh Re: Red Hat webcast on SELinux Joubert Berger Fw: BoF for upcoming USENIX Security Trent Jaeger Re: hidden files and se linux? coUnt3r_at_gmx.net Monday, 21 July Re: hidden files and se linux? Kerry Thompson Re: make quickinstall redhat9 problem Lamont R. Peterson RE: make quickinstall redhat9 problem Kerry Thompson RE: make quickinstall redhat9 problem Stephen Reese Re: make quickinstall redhat9 problem pipes Linuxfromscratch.org Charlie Watts Re: make quickinstall redhat9 problem Kerry Thompson make quickinstall redhat9 problem Stephen Reese hidden files and se linux? Tobias Few questions related to Selinux on Redhat 8.0 Rakesh Tripathi Re: selinux and redhat9 Kerry Thompson selinux and redhat9 Stephen Reese Red Hat webcast on SELinux Daniel J Walsh Sunday, 20 July Re: Policy for Kerberos Kerry Thompson Saturday, 19 July Re: debian and initrd with selinux on 2.6.0-test1 Colin Walters my SELinux 2.5 policy tree Colin Walters experimental SEDebian 2.5 packages Colin Walters debian and initrd with selinux on 2.6.0-test1 max barwell Friday, 18 July Re: [patch] policy regression tester and various fixes Colin Walters ipc_owner Russell Coker [patch] null byte pad for contexts in libselinux Stephen Smalley Re: patching 2.6.0-test1 Stephen Smalley Thursday, 17 July patching 2.6.0-test1 max barwell Re: [patch] policy metadata Colin Walters Re: [patch] policy metadata Brian May [patch] policy metadata Colin Walters Wednesday, 16 July Re: first pass at a spamassassin/spamc/spamd policy Russell Coker Re: first pass at a spamassassin/spamc/spamd policy Colin Walters [patch] policy regression tester and various fixes Colin Walters Re: [patch] a few small new macros for global_macros.te Colin Walters Tuesday, 15 July Re: first pass at a spamassassin/spamc/spamd policy Russell Coker Re: Policy for Kerberos Russell Coker Re: [patch] a few small new macros for global_macros.te Russell Coker Policy for Kerberos Kerry Thompson Re: [patch] pass linker soname flag for libselinux, autotools Stephen Smalley Re: [patch] updated chcon.c Stephen Smalley Re: [patch] various fixes for libselinux Stephen Smalley Re: [patch] uninitialized values in setfiles/psid.c Stephen Smalley Re: another patch for the new release Stephen Smalley Re: patch for new release Stephen Smalley [patch] a few small new macros for global_macros.te Colin Walters [patch] Re: enforcement and initrds Colin Walters spamassassin file context files Colin Walters first pass at a spamassassin/spamc/spamd policy Colin Walters Re: another patch for the new release Stephen Smalley Re: lsm-2.4-selinux-2003071106 compile problem Stephen Smalley Re: crash with 2.5.74 while loading policy Stephen Smalley Re: enforcement and initrds Stephen Smalley Re: crash with 2.5.74 while loading policy Colin Walters lsm-2.4-selinux-2003071106 compile problem M E Robbins Re: crash with 2.5.74 while loading policy James Morris crash with 2.5.74 while loading policy Colin Walters Article about the grant Russell Coker Monday, 14 July Re: enforcement and initrds Colin Walters Re: enforcement and initrds Russell Coker Re: enforcement and initrds Colin Walters Re: another patch for the new release Russell Coker Re: another patch for the new release Stephen Smalley Re: a few questions about selinux, update on progress Russell Coker Re: enforcement and initrds Stephen Smalley memory leak on SE Linux Russell Coker Re: Russell Coker is recognized for his contributions to the SELinux project Russell Coker Re: [patch] uninitialized values in setfiles/psid.c Stephen Smalley Re: patch for new release Stephen Smalley Re: Updated Release Stephen Smalley Re: a few questions about selinux, update on progress max barwell [patch] pass linker soname flag for libselinux, autotools Colin Walters Sunday, 13 July enforcement and initrds Colin Walters [patch] updated chcon.c Colin Walters [patch] various fixes for libselinux Colin Walters [patch] uninitialized values in setfiles/psid.c Colin Walters Saturday, 12 July Question about MACs Subba Rao another patch for the new release Russell Coker patch for new release Russell Coker Friday, 11 July Re: Updated Release Christopher J. PeBenito Updated Release Howard Holm Re: port of procps patch to acahalan procps Colin Walters Re: Russell Coker is recognized for his contributions to the SELinux project Bill Laut Re: Russell Coker is recognized for his contributions to the SELinux project Jason Anderssen Thursday, 10 July Russell Coker is recognized for his contributions to the SELinux project James Griffin port of util-linux login patch to shadow-utils login.c Colin Walters Re: Your policy Russell Coker Re: a few questions about selinux Tom Re: SELinux, KDE, and honeypots Bill Laut Re: SELinux, KDE, and honeypots Bill Laut Your policy Carsten Grohmann Re: a few questions about selinux Russell Coker Wednesday, 9 July a few questions about selinux max barwell Re: SELinux, KDE, and honeypots Russell Coker Re: SELinux, KDE, and honeypots Tracy R Reed port of procps patch to acahalan procps Colin Walters Re: context trouble with 2.5 bits Colin Walters Re: SELinux, KDE, and honeypots Bill Laut Re: context trouble with 2.5 bits Stephen Smalley Re: context trouble with 2.5 bits Colin Walters Re: SELinux, KDE, and honeypots Joshua Brindle Re: libsecure fails to compile Howard Holm Re: context trouble with 2.5 bits Stephen Smalley Re: context trouble with 2.5 bits Stephen Smalley Re: context trouble with 2.5 bits Stephen Smalley Re: SELinux, KDE, and honeypots Russell Coker Re: SELinux, KDE, and honeypots Russell Coker Re: context trouble with 2.5 bits Russell Coker Re: SELinux, KDE, and honeypots Tom Re: libsecure fails to compile Colin Walters Tuesday, 8 July SELinux, KDE, and honeypots Bill Laut Re: context trouble with 2.5 bits Colin Walters Re: context trouble with 2.5 bits Russell Coker context trouble with 2.5 bits Colin Walters Re: Q on nonuniform "recvfrom" avc message Bill Laut Re: Q on nonuniform "recvfrom" avc message Stephen Smalley Re: libsecure fails to compile Stephen Smalley Q on nonuniform "recvfrom" avc message Bill Laut libsecure fails to compile Jonathan_Axisa_at_nai.com August Linux Journal Russell Coker Monday, 7 July Re: Newbie Q on "disappearing" boot dialog Russell Coker Re: rssh.{te,fc} Colin Walters Newbie Q on "disappearing" boot dialog Bill Laut Re: rssh.{te,fc} Tom Re: rssh.{te,fc} Russell Coker rssh.{te,fc} Colin Walters Friday, 4 July Re: build patches for checkpolicy, libselinux, policycoreutils Colin Walters Re: Policies.. but where there are? Tom Re: Policies.. but where there are? Mauro Chiarugi Re: Policies.. but where there are? Russell Coker Re: Policies.. but where there are? Mauro Chiarugi Thursday, 3 July busybox Russell Coker Re: Policies.. but where there are? Howard Holm Re: Policies.. but where there are? Russell Coker build patches for checkpolicy, libselinux, policycoreutils Colin Walters Policies.. but where there are? Mauro Chiarugi Policies.. but where there are? Mauro Chiarugi [Fwd: [PATCH] Add SELinux module to 2.5.74-bk1] Stephen Smalley Wednesday, 2 July SE Linux mentioned in large Australian newspaper website Faye Kallsyms patch Scarlata, Vincent R Tuesday, 1 July Familiar ARM patches Russell Coker Monday, 30 June Re: improvements to chcon.c Colin Walters Re: improvements to chcon.c Colin Walters Re: improvements to chcon.c Stephen Smalley Re: improvements to chcon.c Russell Coker RE: biometric codecs / hardware signed blackbox-capable interconn ecti ve system-resources Rottura, Steven Re: improvements to chcon.c Stephen Smalley Sunday, 29 June Re: screen.te zsh fixes Russell Coker Saturday, 28 June Re: screen.te zsh fixes Bart Mallio Re: screen.te zsh fixes Colin Walters Re: screen.te zsh fixes Russell Coker screen.te zsh fixes Colin Walters improvements to chcon.c Colin Walters Friday, 27 June Re: biometric codecs / hardware signed blackbox-capable interconnecti ve system-resources Russell Coker Re: biometric codecs / hardware signed blackbox-capable interconnecti ve system-resources Brian May biometric codecs / hardware signed blackbox-capable interconnecti ve system-resources Rottura, Steven Re: abusive dnsbl's Dean Anderson Re: various policy fixes: suexec and user content, apache2 reload, mount and locales Russell Coker Re: various policy fixes: suexec and user content, apache2 reload, mount and locales Colin Walters Re: abusive dnsbl's Howard Holm Re: various policy fixes: suexec and user content, apache2 reload, mount and locales Russell Coker various policy fixes: suexec and user content, apache2 reload, mount and locales Colin Walters Thursday, 26 June Re: abusive dnsbl's Russell Coker abusive dnsbl's Dean Anderson Re: List archives are broken. Howard Holm Re: small passwd.te zsh fixes Colin Walters Wednesday, 25 June Re: small passwd.te zsh fixes Russell Coker small passwd.te zsh fixes Colin Walters List archives are broken. Dean Anderson Re: local policy changes, /var/lib access, syslogd Colin Walters Re: local policy changes, /var/lib access, syslogd Russell Coker Re: local policy changes, /var/lib access, syslogd Colin Walters Re: local policy changes, /var/lib access, syslogd Russell Coker Re: local policy changes, /var/lib access, syslogd Colin Walters Tuesday, 24 June Re: local policy changes, /var/lib access, syslogd Russell Coker local policy changes, /var/lib access, syslogd Colin Walters Re: proftpd Dean Anderson Re: proftpd Russell Coker Re: Macro flags Russell Coker proftpd Dean Anderson Macro flags Dean Anderson Friday, 20 June Re: how usable is selinux in lsm-2.5? Andreas Schuldei Thursday, 19 June Re: rules uptimed Russell Coker Re: rules uptimed Carsten Grohmann Re: how usable is selinux in lsm-2.5? Stephen Smalley Wednesday, 18 June Re: rules uptimed Russell Coker Re: how usable is selinux in lsm-2.5? Russell Coker how usable is selinux in lsm-2.5? Andreas Schuldei rules uptimed Carsten Grohmann Enabling glibc secure mode for role/domain transitions Stephen Smalley UML Russell Coker Monday, 16 June Re: GUI Policy Editors (other than Tresys's setools) Yuichi Nakamura Friday, 13 June Re: Status of selinux on IBM mainframe Russell Coker [patch] newrole tty relabeling fix Stephen Smalley Re: Status of selinux on IBM mainframe Stephen Smalley Re: Status of selinux on IBM mainframe Russell Coker GUI Policy Editors (other than Tresys's setools) Gwyer, Megan Status of selinux on IBM mainframe Michael Lambert Thursday, 12 June update selinux rpms Carsten Grohmann Wednesday, 11 June Re: Policy transport, management, application installation, etc Howard Holm Fwd: [ISN] Industrial security gets a [SE]Linux lock Russell Coker Re: Policy transport, management, application installation, etc Tom Re: VMWare GSX Server under SELinux Russell Coker Tuesday, 10 June Policy transport, management, application installation, etc Joshua Brindle VMWare GSX Server under SELinux Curtis.Bowman_at_atl.frb.org Re: Weird problem using latest kernel. Kurt Roeckx new release of setools Frank Mayer Monday, 9 June Re: LinuxTag 2003 - Workshop/BOF SELinux Tom Re: LinuxTag 2003 - Workshop/BOF SELinux Russell Coker LinuxTag 2003 - Workshop/BOF SELinux Carsten Grohmann Re: selinux kernel patch in bitkeeper, somewhere? Stephen Smalley Re: A vulnerability in SELinux Stephen Smalley Re: A vulnerability in SELinux (fwd) Stephen Smalley Sunday, 8 June SE Linux talk at Linux World Expo Russell Coker Re: Weird problem using latest kernel. Russell Coker Weird problem using latest kernel. Kurt Roeckx policy changes and versioning Tom Saturday, 7 June Filtering duplicate message-ID's with procmail Dean Anderson Re: LSM/SELinux 2.4.x on a production machine Dean Anderson selinux kernel patch in bitkeeper, somewhere? Andreas Schuldei Re: A vulnerability in SELinux Russell Coker Re: A vulnerability in SELinux Jack Re: LSM/SELinux 2.4.x on a production machine David B Harris SE Linux questions Russell Coker Friday, 6 June Re: A vulnerability in SELinux (fwd) Brian May Re: A vulnerability in SELinux (fwd) Tom Re: A vulnerability in SELinux (fwd) Russell Coker Re: A vulnerability in SELinux (fwd) Rafal Wojtczuk Re: A vulnerability in SELinux Stephen Smalley Security Guide for Linux Tusson, Mr. John R. Re: A vulnerability in SELinux (fwd) Russell Coker Re: A vulnerability in SELinux (fwd) Carsten Grohmann Re: A vulnerability in SELinux (fwd) Brian May Re: A vulnerability in SELinux (fwd) Brian May Re: postfix rules Carsten Grohmann Re: A vulnerability in SELinux (fwd) Wayne Salamon Re: A vulnerability in SELinux (fwd) Wayne Salamon Thursday, 5 June Re: executing /dev/zero Jack Wednesday, 4 June Gentoo Selinux demo machine Joshua Brindle executing /dev/zero Russell Coker Re: file labels during init process Russell Coker Re: file labels during init process Stephen Smalley Re: postfix rules Russell Coker postfix rules Carsten Grohmann file labels during init process Carsten Grohmann Tuesday, 3 June Re: Compaq DL-360 John Wolff Re: Compaq DL-360 Russell Coker Re: Compaq DL-360 John Wolff Re: Default Policy question? Tom Re: Default Policy question? Russell Coker Re: Default Policy question? Stephen Smalley Re: some policy feedback Tom Re: Default Policy question? Tom Monday, 2 June Re: some policy feedback Russell Coker Re: How to get rid of avc denied messages Russell Coker Re: Default Policy question? Russell Coker Play machine online again! Russell Coker binary policy patch tools Frank Mayer Re: Default Policy question? Tom RE: Default Policy question? Frank Mayer Re: Default Policy question? Tom Re: Default Policy question? Stephen Smalley How to get rid of avc denied messages Paul Loo Re: some policy feedback Tom Default Policy question? Daniel J Walsh Re: some policy feedback Stephen Smalley Sunday, 1 June Re: some policy feedback Russell Coker Re: Compaq DL-360 Brian May some policy feedback Tom Re: Compaq DL-360 Tom Friday, 30 May Re: sparc support Dave Dodge Re: Compaq DL-360 Russell Coker Compaq DL-360 John Wolff Thursday, 29 May RE: Usenix Security Symposium in August CNGUYEN Re: Usenix Security Symposium in August Trent Jaeger Re: Usenix Security Symposium in August Stephen Smalley Re: sparc support Paul Dwerryhouse Wednesday, 28 May Re: Has anyone had or seen a SELinux system approved for classified use? Howard Holm Re: Has anyone had or seen a SELinux system approved for classified use? Jakob Oestergaard Wednesday, 21 May Re: patched wdm (success) Tom Wednesday, 28 May Re: Usenix Security Symposium in August Trent Jaeger Tuesday, 27 May sparc support Joshua Brindle Usenix Security Symposium in August Tusson, Mr. John R. updated patches Tom bbwrap Russell Coker Monday, 26 May gpe-login patch Russell Coker Sunday, 25 May web_client_domain Russell Coker Saturday, 24 May Re: some policy patches Russell Coker Re: some policy patches Tom Re: some policy patches Tom Re: some policy patches Russell Coker Re: some policy patches Russell Coker some policy patches Tom latest busybox patch Russell Coker Friday, 23 May Re: about security contexts for objects Stephen Smalley Re: about security contexts for objects Giorgio Zanin Re: pxe, tftpd and rsync policies Tom busybox patch for SE Linux Russell Coker Thursday, 22 May Re: about security contexts for objects Stephen Smalley Re: pxe, tftpd and rsync policies Russell Coker Re: about security contexts for objects Russell Coker about security contexts for objects Giorgio Zanin pxe, tftpd and rsync policies Tom Re: run_init woes Tom Re: run_init woes Tom Re: run_init woes Russell Coker Re: run_init woes Stephen Smalley run_init woes Tom Wednesday, 21 May Re: matrix [NOW FreeS/WAN vs sshd] Jack patched wdm (success) Tom Re: Policy for exim and/ or tiger? Russell Coker Re: matrix Torsten Knodt Re: Policy for exim and/ or tiger? Peter Gervai Tuesday, 20 May Re: matrix Jack Re: xdm (not kdm) policy ? Torsten Knodt Re: xdm (not kdm) policy ? Tom Re: matrix Torsten Knodt Re: xdm (not kdm) policy ? Tom Re: xdm (not kdm) policy ? Russell Coker Re: matrix Russell Coker Re: matrix Torsten Knodt xdm (not kdm) policy ? Tom Re: Policy for exim and/ or tiger? Russell Coker Re: matrix Peter Gervai Re: Policy for exim and/ or tiger? Peter Gervai Re: matrix Russell Coker Monday, 19 May [PATCH] NON PAM Makefile newrole Jack Re: matrix Torsten Knodt busybox patch for SE Linux Russell Coker Re: Thinking about an extension to the cron patch Torsten Knodt RE: matrix Guerra, Kamuela D. Re: slow application of contexts in devfs? Christopher J. PeBenito Re: rw_sem_perms() etc Russell Coker Re: rw_sem_perms() etc Russell Coker matrix Russell Coker Re: slow application of contexts in devfs? Russell Coker Re: slow application of contexts in devfs? Stephen Smalley Re: rw_sem_perms() etc Stephen Smalley Re: Creating a new lsm function Stephen Smalley Re: Thinking about an extension to the cron patch Stephen Smalley Re: slow application of contexts in devfs? Stephen Smalley rw_sem_perms() etc Russell Coker Sunday, 18 May Re: Compile Error of libsecure on Redhat9.0 Yuichi Nakamura Re: Compile Error of libsecure on Redhat9.0 James Griffin Re: Compile Error of libsecure on Redhat9.0 Christopher J. PeBenito Compile Error of libsecure on Redhat9.0 Yuichi Nakamura Re: Creating a new lsm function Russell Coker Creating a new lsm function Torsten Knodt Thinking about an extension to the cron patch Torsten Knodt Re: slow application of contexts in devfs? Christopher J. PeBenito Saturday, 17 May Re: slow application of contexts in devfs? Russell Coker Re: slow application of contexts in devfs? Christopher J. PeBenito Friday, 16 May Re: [work] Re: Has anyone had or seen a SELinux system approved for classifieduse? Francois Leclerc Re: Has anyone had or seen a SELinux system approved for classified use? Jon Holstrom Re: Has anyone had or seen a SELinux system approved for classified use? Dean Anderson Re: about type_change and type_transition Stephen Smalley Re: slow application of contexts in devfs? Stephen Smalley about type_change and type_transition Giorgio Zanin Re: slow application of contexts in devfs? Russell Coker Thursday, 15 May Re: slow application of contexts in devfs? Christopher J. PeBenito Re: slow application of contexts in devfs? Russell Coker Policy for exim and/ or tiger? Torsten Knodt Re: Has anyone had or seen a SELinux system approved for classified use? Howard Holm Re: slow application of contexts in devfs? Stephen Smalley slow application of contexts in devfs? Christopher J. PeBenito RE: Has anyone had or seen a SELinux system approved for classifi ed use? Rottura, Steven Re: memory used by SE Linux Russell Coker RE: memory used by SE Linux CNGUYEN Re: memory used by SE Linux Russell Coker Re: Has anyone had or seen a SELinux system approved for classified use? Dean Anderson Re: about the safety problem in SELinux Stephen Smalley memory used by SE Linux Russell Coker Re: Process Transition Stephen Smalley Wednesday, 14 May RE: Process Transition Frank Mayer RE: Process Transition Frank Mayer Process Transition selinux_at_netgps.net Has anyone had or seen a SELinux system approved for classified use? Douglas Phillipson about the safety problem in SELinux selinux list Debian SELinux Mirror Tom Tuesday, 13 May Re: SE Linux talk for LUV on 3rd of June Tracy R Reed /etc/magic Russell Coker Monday, 12 May OLS Russell Coker Re: kernel patches Stephen Smalley Re: SE Linux talk for LUV on 3rd of June Russell Coker Re: kernel patches Russell Coker kernel patches Chris Babcock Re: SE Linux talk for LUV on 3rd of June Chris Babcock SE Linux talk for LUV on 3rd of June Russell Coker Sunday, 11 May Re: kernel crashes Brian May Friday, 9 May [BETTER PATCH] support for altroot in setfiles Joshua Brindle Re: [PATCH] setfiles support for altroot Stephen Smalley Re: Step 19 of install Carsten Grohmann Thursday, 8 May Re: Step 19 of install Kerry Thompson [PATCH] setfiles support for altroot Joshua Brindle Step 19 of install Christopher Carney Fw: SELinux and LFS ccallen Source MAC Address DoS jiade Re: Fw: SELinux and LFS Lamont R. Peterson Wednesday, 7 May Fw: SELinux and LFS ccallen Re: SELinux and LFS ccallen Re: SELinux and LFS Richard Troth Re: /dev/pts/* denials w/devfs Stephen Smalley RE: SELinux and LFS Keith Bottner Re: /dev/pts/* denials w/devfs Russell Coker Re: SELinux and LFS Russell Coker /dev/pts/* denials w/devfs Christopher J. PeBenito SELinux and LFS Nick Gray Re: Questions about arp storm. Joshua Brindle Tuesday, 6 May Questions about arp storm. jiade Monday, 5 May Re: Support for XWindows ? Stephen Smalley Re: strange avc messages on oom Stephen Smalley Re: strange avc messages on oom Russell Coker Sunday, 4 May Re: strange avc messages on oom Brian May Re: strange avc messages on oom Russell Coker strange avc messages on oom Russell Coker Re: ssh/login Russell Coker Re: ssh/login Brian May Re: SE Linux on Familiar Russell Coker Re: SE Linux on Familiar Russell Coker Cyber Security Policy and Research Institute at George Washington University Russell Coker Saturday, 3 May Re: SE Linux on Familiar Richard Troth Re: SE Linux on Familiar Tom Re: Support for XWindows ? Russell Coker SE Linux on Familiar Russell Coker Friday, 2 May Re: Support for XWindows ? Wesley Parish Saturday, 3 May Re: Support for XWindows ? Russell Coker Re: kernel crashes Russell Coker Friday, 2 May Support for XWindows ? Akshay Gangam Re: kernel crashes Brian May Re: Trusted Operating System? Russell Coker Re: Trusted Operating System? forrest whitcher Re: kernel crashes Stephen Smalley Re: SELinux Compilation Error on Redhat 8.0 with LSM 2.5 Stephen Smalley Re: Configure: error: *** libwrap missing Stephen Smalley Thursday, 1 May Re: Configure: error: *** libwrap missing Russell Coker A small addition to Makefile Akshay Gangam Re: kernel crashes Brian May SELinux Compilation Error on Redhat 8.0 with LSM 2.5 Rakesh Tripathi RE: Trusted Operating System? Frank Mayer Configure: error: *** libwrap missing Christopher Carney [RFC] SELinux security module Stephen Smalley Trusted Operating System? Petty, Clint E Re: ssh/login Stephen Smalley Re: Kernel Patch 2.4.20 Stephen Smalley Re: SUDO package Russell Coker Wednesday, 30 April Kernel Patch 2.4.20 Brian May ssh/login Brian May Re: Redhat 8.0 Akshay Gangam Re: SUDO package Stephen Smalley Re: SUDO package Daniel J Walsh Re: SUDO package Stephen Smalley Re: SUDO package Daniel J Walsh Re: SUDO package Francois Leclerc Re: SUDO package Daniel J Walsh Re: SUDO package Russell Coker Re: SUDO package Stephen Smalley Re: truncate(2) and setattr Stephen Smalley Re: SUDO package Daniel J Walsh Re: truncate(2) and setattr Russell Coker Re: truncate(2) and setattr Stephen Smalley Re: truncate(2) and setattr Stephen Smalley Tuesday, 29 April truncate(2) and setattr Russell Coker Redhat 8.0 Tusson, Mr. John R. NSA SELinux BOF at OLS Stephen Smalley Monday, 28 April busybox wrapper rough design Russell Coker Sunday, 27 April Re: broad domains Brian May Re: broad domains Russell Coker Re: busybox ls Robert Bihlmeyer Re: broad domains Robert Bihlmeyer Saturday, 26 April busybox ls Russell Coker file_contexts tiny patch Russell Coker policy patches Russell Coker Friday, 25 April Re: SUDO package Howard Holm Re: portability patch for char signedness Dave Dodge Thursday, 24 April Re: role orthogonality Russell Coker Re: broad domains Russell Coker Microsoft's Balmer on CNBC today Lamont R. Peterson Re: role orthogonality Stephen Smalley Re: broad domains Stephen Smalley Re: [selinux] broad domains Magosányi Árpád Sunday, 20 April broad domains Robert Bihlmeyer role orthogonality Robert Bihlmeyer Thursday, 24 April Re: SUDO package Russell Coker Re: SUDO package Stephen Smalley Re: please offer your good advices / new policies: exim, dovecot, maradns, (aptitude) Stephen Smalley Re: please offer your good advices / new policies: exim, dovecot, maradns, (aptitude) Stephen Smalley Re: several wee things about exim and macros (was: please offer your good advices...) Russell Coker several wee things about exim and macros (was: please offer your good advices...) Peter Gervai Wednesday, 23 April Re: please offer your good advices / new policies: exim, dovecot, maradns, (aptitude) Russell Coker Re: portability patch for char signedness Russell Coker Re: please offer your good advices / new policies: exim, dovecot, maradns, (aptitude) Russell Coker Re: please offer your good advices / new policies: exim, dovecot, maradns, (aptitude) Russell Coker Re: patch libsecure Russell Coker Re: portability patch for char signedness Dave Dodge Re: please offer your good advices / new policies: exim, dovecot, maradns, (aptitude) Andreas Schuldei patch libsecure Carsten Grohmann RE: A different view of the Theo de Raadt funding question Rottura, Steven please offer your good advices / new policies: exim, dovecot, maradns, (aptitude) Peter Gervai Re: selinux programming: security_get_sids Stephen Smalley RE: Help for setools 0.8 david caplan Re: A different view of the Theo de Raadt funding question Dale Amon Trusted OS survey Russell Coker Re: A different view of the Theo de Raadt funding question Howard Holm Re: A different view of the Theo de Raadt funding question Matthew S. Hamrick selinux programming: security_get_sids Carsten Grohmann Re: SUDO package Russell Coker Re: A different view of the Theo de Raadt funding question Russell Coker Tuesday, 22 April Re: A different view of the Theo de Raadt funding question Joshua Brindle Re: A different view of the Theo de Raadt funding question ccallen RAID arrays Meldrum, Matthew S FWD: A different view of the Theo de Raadt funding question Matthew S. Hamrick Re: kmod_t v. kernel_t Stephen Smalley Re: Fwd: Bug#189251: oops, cosmetics Stephen Smalley Re: important patch for init.te Stephen Smalley Re: SUDO package Stephen Smalley Re: patch makefiles Stephen Smalley Monday, 21 April Re: kmod_t v. kernel_t Russell Coker kmod_t v. kernel_t david caplan Re: SELinux ISO... Russell Coker Re: SELinux ISO... Joshua Brindle Re: SELinux ISO... Russell Coker Re: SELinux ISO... Joshua Brindle Sunday, 20 April Re: OLS BOFs etc Brian May Re: SELinux ISO... Russell Coker Re: OLS BOFs etc Russell Coker Re: SELinux ISO... adf--at--Code511.com Re: OLS BOFs etc Dale Amon SELinux ISO... Luís Miguel Silva Friday, 18 April SUDO package Daniel J Walsh Re: uses_shlib() and device_t Stephen Smalley Re: auditallow Stephen Smalley Re: update question Russell Coker Thursday, 17 April Re: auditallow Russell Coker Wednesday, 16 April uses_shlib() and device_t Russell Coker Thursday, 17 April Re: installing SELinux on Trustix Lamont R. Peterson Wednesday, 16 April Re: logging messages Stephen Smalley Thursday, 17 April Re: logging messages Daniel J Walsh Wednesday, 16 April Re: installing SELinux on Trustix Stephen Smalley RE: Help for setools 0.8 Keisuke Inoue Tuesday, 15 April installing SELinux on Trustix Christof Rath Wednesday, 16 April RE: Help for setools 0.8 david caplan Re: Frame Pointer build error Stephen Smalley Fwd: Bug#189251: oops, cosmetics Russell Coker Re: update question Stephen Smalley Re: SELinux version of sudo Russell Coker Re: SELinux version of sudo Daniel J Walsh update question ccallen Frame Pointer build error ccallen Re: SELinux version of sudo Russell Coker Tuesday, 15 April Re: SELinux version of sudo Daniel J Walsh Re: SELinux version of sudo Stephen Smalley Help for setools 0.8 Keisuke Inoue RE: strange errors Stephen Smalley Re: strange errors Stephen Smalley Re: OLS BOFs etc Stephen Smalley SELinux version of sudo Daniel J Walsh Re: auditallow Stephen Smalley Re: tcpdump Stephen Smalley Re: strange errors Russell Coker RE: strange errors Westerman, Mark strange errors Russell Coker Re: OLS BOFs etc Russell Coker Monday, 14 April OLS BOFs etc Russell Coker Re: auditallow Russell Coker Re: auditallow Brian May auditallow Russell Coker portability patch for char signedness Russell Coker bug fix for devfsd makefile Russell Coker df and getattr Russell Coker Sunday, 13 April Re: Hello ! Russell Coker tcpdump Russell Coker important patch for init.te Russell Coker Hello ! Akshay Gangam Saturday, 12 April every_domain Russell Coker Friday, 11 April Re: setools, version 0.8 Stephen Smalley Re: setools, version 0.8 Mauro Chiarugi Re: setools, version 0.8 Andreas Schuldei Re: setools, version 0.8 Stephen Smalley Re: setools, version 0.8 Stephen Smalley Re: setools, version 0.8 Stephen Smalley Re: setools, version 0.8 Mauro Chiarugi Re: setools, version 0.8 Russell Coker Re: setools, version 0.8 Mauro Chiarugi Re: Unlabeled files Russell Coker Re: setools, version 0.8 Russell Coker Thursday, 10 April RE: Unlabeled files - followup Stephen Smalley RE: Unlabeled files - followup Matthew R. Singer Re: setools, version 0.8 Mauro Chiarugi setools, version 0.8 Frank Mayer Wednesday, 9 April Re: Default_Contexts Russell Coker Default_Contexts Matthew R. Singer Default_Contexts Matthew R. Singer Tuesday, 8 April Re: ptrace flaw Russell Coker Re: Unlabeled files Stephen Smalley Unlabeled files Matthew R. Singer Re: Updated Release Stephen Smalley Re: ptrace flaw Stephen Smalley Re: NTFS / bitkeeper problem Stephen Smalley Re: ipv6 tunnel problem. Stephen Smalley Re: openssh 3.6 patch Stephen Smalley Monday, 7 April NTFS / bitkeeper problem ccallen RE: usermod/group* patch david caplan Prism wlan-ng device operation on SEL forrest whitcher Updated Release Howard Holm RE: coreutils-5 Frank Mayer boot error (lsm-2.5) ccallen Sunday, 6 April Re: screen problem. Kurt Roeckx Re: screen problem. Kurt Roeckx Re: screen problem. Russell Coker Saturday, 5 April screen problem. Kurt Roeckx ipv6 tunnel problem. Kurt Roeckx coreutils-5 Joshua Brindle Re: sshd problem. Kurt Roeckx Re: sshd problem. Russell Coker sshd problem. Kurt Roeckx Friday, 4 April Re: spassword Russell Coker spassword Matthew R. Singer Thursday, 3 April Re: policy Russell Coker Re: policy Stephen D. Smalley Re: latest policy patches Stephen D. Smalley Re: usermod/group* patch Stephen D. Smalley policy Russell Coker Re: SELinux programming question Stephen D. Smalley SuSE 8.1 packages published Carsten Grohmann SELinux programming question Carsten Grohmann Re: Motif for selinux? Russell Coker Re: Motif for selinux? ccallen Wednesday, 2 April Re: Possible bug in build for scsi Lamont R. Peterson Re: Motif for selinux? Russell Coker Re: Motif for selinux? ccallen Possible bug in build for scsi L. Dean Risinger Jr. Re: Motif for selinux? Howard Holm openssh 3.6 patch Joshua Brindle Re: Motif for selinux? Russell Coker Monday, 31 March Motif for selinux? ccallen Latest policy changes Kelly_Djahandari_at_nai.com Re: Using kernel SID (kernel_t domain) in reparent_to_init Stephen D. Smalley Saturday, 29 March latest policy patches Russell Coker Friday, 28 March usermod/group* patch david caplan Using kernel SID (kernel_t domain) in reparent_to_init Stephen D. Smalley RE: general policy stuff Kelly_Djahandari_at_nai.com Re: kernel compile failure Stephen D. Smalley Thursday, 27 March Re: SE Linux on ARM Russell Coker kernel compile failure Christopher J. PeBenito RE: policy patches Kelly_Djahandari_at_nai.com Wednesday, 26 March DHCP server and client Andreas Schuldei RE: policy patches Kelly_Djahandari_at_nai.com Tuesday, 25 March Re: usermod Russell Coker usermod david caplan updated core policy files on sourceforge Kelly_Djahandari_at_nai.com Re: essential patches Russell Coker Re: essential patches Chris Vance Monday, 24 March SE Linux on ARM Russell Coker Re: Important fix for init.te Stephen D. Smalley Re: policy patches Wayne Salamon Re: general policy stuff Russell Coker Re: essential patches Russell Coker Re: Important fix for init.te Russell Coker Re: Important fix for init.te Stephen D. Smalley Re: essential patches Chris Vance Re: general policy stuff Chris Vance Important fix for init.te Russell Coker RE: setfiles.c minor change Kelly_Djahandari_at_nai.com Sunday, 23 March setfiles.c minor change Russell Coker essential patches Russell Coker patch makefiles Carsten Grohmann Saturday, 22 March Re: ping problems. Russell Coker policy patches Russell Coker policy patches Russell Coker ping problems. Kurt Roeckx Friday, 21 March Re: SE-Linux and 2.4.20 Brian May executables under /usr/share Russell Coker Re: SE-Linux and 2.4.20 Stephen D. Smalley Re: Opinions on installing SeLinux on different distros Russell Coker Thursday, 20 March RE: Opinions on installing selinux on different distros, second try Leslie J. French SELinux List Administrative Notes Howard Holm Re: Opinions on installing SeLinux on different distros Howard Holm Re: selinux Howard Holm Opinions on installing selinux on different distros, second try Douglas Phillipson Opinions on installing SeLinux on different distros Douglas Phillipson Re: SE-Linux and 2.4.20 Thor Kristoffersen about policy configuration language grammar Giorgio Zanin Re: SE-Linux and 2.4.20 Dale Amon Wednesday, 19 March selinux Menon, Sunanda R SE-Linux and 2.4.20 Brian May Tuesday, 18 March file_type_auto_trans(initrc_t, etc_t, etc_runtime_t) Russell Coker Monday, 17 March ptrace flaw Stephen D. Smalley Re: [OpenAFS] selinux afs domain v 0.2 Russell Coker Re: [OpenAFS] selinux afs domain v 0.2 forrest whitcher RE: general policy stuff Frank Mayer more policy updates on sourceforge Kelly_Djahandari_at_nai.com RE: new snort policy Kelly_Djahandari_at_nai.com Re: Apache policy Ask Holme Sunday, 16 March general policy stuff Russell Coker new snort policy Russell Coker Apache policy Russell Coker Friday, 14 March updated setfiles on sourceforge Kelly_Djahandari_at_nai.com Re: Which module is "best"? Stephen D. Smalley Re: Sendmail tcp_socket denial Russell Coker TR: logging messages Grégory Vanuxem Thursday, 13 March Re: 2 problems inetd & run_init --- Stephen D. Smalley Re: Which module is "best"? Russell Coker logging messages Russell Coker Re: Re: Fwd: [ols-announce] Accepting Proposals for BOFS, Tutorials, and Meetings. Stephen D. Smalley Sunday, 9 March SE-Linux debian-installer Brian May Friday, 7 March Re: selinux play machine Russell Coker selinux play machine Joshua Brindle Tuesday, 4 March Core policy on Sourceforge Wayne Salamon RE: definition of domain transition permission Stephen D. Smalley RE: definition of domain transition permission Frank Mayer Re: definition of domain transition permission Stephen D. Smalley Re: SE play machine Jesse Pollard Monday, 3 March Re: SE play machine Brian May definition of domain transition permission Frank Mayer Re: Core policy, third pass Tom Re: Core policy, third pass Russell Coker Re: Core policy, third pass Stephen D. Smalley Re: SE play machine Russell Coker Re: SE play machine Jesse Pollard Re: Core policy, third pass Stephen D. Smalley Re: Core policy, third pass Stephen D. Smalley Re: Core policy, third pass Stephen D. Smalley Re: Core policy, third pass Russell Coker Core policy, third pass Wayne Salamon Fwd: Re: SE play machine Russell Coker Re: SE play machine Stephen D. Smalley Re: SELinux and ReiserFS Stephen D. Smalley Saturday, 1 March SE play machine Russell Coker Re: SELinux and ReiserFS Russell Coker Re: SELinux and ReiserFS forrest whitcher Re: SELinux and ReiserFS Russell Coker Friday, 28 February SELinux and ReiserFS Sherman Boyd RE: version 0.7 of setools (large patch file) Wayne Salamon Thursday, 27 February Re: Fwd: [ols-announce] Accepting Proposals for BOFS, Tutorials, and Meetings. Russell Coker Re: Core policy and TCB Trent Jaeger Re: Core policy, second pass Stephen D. Smalley Re: Fwd: [ols-announce] Accepting Proposals for BOFS, Tutorials, and Meetings. Stephen D. Smalley RE: version 0.7 of setools (large patch file) Frank Mayer version 0.7 of setools Frank Mayer Re: about the configuration language grammar Stephen D. Smalley Re: Core policy, second pass Stephen D. Smalley RE: Core policy, second pass Frank Mayer RE: sendmail policy david caplan sendmail policy Russell Coker Re: Core policy, second pass Carsten Grohmann Wednesday, 26 February Fwd: [ols-announce] Accepting Proposals for BOFS, Tutorials, and Meetings. Russell Coker Re: Core policy, second pass Wayne Salamon Re: Core policy, second pass Wayne Salamon Re: Core policy, second pass Russell Coker Re: Core policy, second pass Russell Coker RE: Core policy Leslie J. French Re: Core policy Wayne Salamon Core policy, second pass Wayne Salamon Re: Core policy Wayne Salamon about the configuration language grammar Giorgio Zanin Tuesday, 25 February Re: Core policy and TCB Russell Coker Re: Core policy Russell Coker RE: convention for disabled/unused policy modules Frank Mayer Re: Core policy and TCB Trent Jaeger RE: convention for disabled/unused policy modules Wayne Salamon RE: convention for disabled/unused policy modules Frank Mayer Re: Core policy Stephen D. Smalley Re: Core policy Russell Coker Re: Core policy Wayne Salamon Re: Core policy Stephen D. Smalley Re: Core policy Stephen D. Smalley Re: Core policy Jesse Pollard convention for disabled/unused policy modules Frank Mayer RE: Core policy Frank Mayer RE: Core policy Frank Mayer RE: policy Makefile patch Kelly_Djahandari_at_nai.com RE: Core policy Wayne Salamon Re: Core policy Tom Re: Core policy Russell Coker Monday, 24 February Re: Core policy Brian May Re: Core policy Tom Re: some random policy observations Russell Coker Re: Core policy Dale Amon posting of policy dev course slides Frank Mayer some random policy observations Frank Mayer RE: Core policy Frank Mayer Re: Core policy Russell Coker Re: Core policy Clem Skorupka Re: Core policy Russell Coker RE: Core policy Westerman, Mark Core policy Wayne Salamon Re: Errors While Installing On Redhat 8.0 Stephen D. Smalley Re: Errors While Installing On Redhat 8.0 Russell Coker RE: policy Makefile patch Frank Mayer Saturday, 22 February Errors While Installing On Redhat 8.0 S. Patel Monday, 24 February xserver policy Russell Coker Re: Cover Story in Linux Journal Carsten Grohmann Sunday, 23 February Re: XML ACL standard ratified Gerald E char signedness Russell Coker Friday, 21 February Re: XML ACL standard ratified Brian May policy Makefile patch Frank Mayer Re: Making OPIE/QTOPIA aware of SELinux Russell Coker XML ACL standard ratified Joshua Brindle RE: Making OPIE/QTOPIA aware of SELinux CNGUYEN Re: Making OPIE/QTOPIA aware of SELinux Lamont R. Peterson Re: Making OPIE/QTOPIA aware of SELinux Tom Thursday, 20 February RE: Making OPIE/QTOPIA aware of SELinux CNGUYEN Re: Making OPIE/QTOPIA aware of SELinux Russell Coker Making OPIE/QTOPIA aware of SELinux CNGUYEN Re: Switching Security Policies Stephen D. Smalley Switching Security Policies CNGUYEN Wednesday, 19 February Re: Cover Story in Linux Magazine John Zaitz Re: Cover Story in Linux Magazine Russell Coker Re: Cover Story in Linux Magazine not Linux Journal! Russell Coker Re: Apache policy Russell Coker Re: Apache policy Wayne Salamon Re: passwd, sysadm_t access shadow_t:file Russell Coker Re: Ok what am I doing wrong? Russell Coker Cover Story in Linux Journal Russell Coker Ok what am I doing wrong? Daniel J Walsh passwd, sysadm_t access shadow_t:file Ask Holme Re: Apache policy Russell Coker Re: Apache policy Wayne Salamon Tuesday, 18 February I'm in for OLS 2003 Russell Coker Apache policy Russell Coker Monday, 17 February Re: spasswd.c Russell Coker Re: Re: kayo Re: spasswd.c kayo Re: user transparent encryption Dale Amon Re: user transparent encryption w9ya patch libsecure and tar Carsten Lehr Re: user transparent encryption Tom Re: user transparent encryption Russell Coker Re: user transparent encryption Carsten Grohmann Re: user transparent encryption Thomas Walcott Re: user transparent encryption Joshua Brindle Re: user transparent encryption kayo Sunday, 16 February Re: user transparent encryption Brian May user transparent encryption kayo Re: spasswd.c Russell Coker Re: spasswd.c Dusty Hall Re: spasswd.c Russell Coker spasswd.c Dusty Hall Saturday, 15 February NetSaint Russell Coker patch makefiles Carsten Grohmann Friday, 14 February Re: Transitivity in role dominance relation Stephen D. Smalley Thursday, 13 February RE: patch to sepcut tool Frank Mayer RE: File labeling issue Kelly_Djahandari_at_nai.com RE: regular expressions Kelly_Djahandari_at_nai.com RE: patch for new domains Kelly_Djahandari_at_nai.com RE: inetd and login Kelly_Djahandari_at_nai.com RE: patch to sepcut tool Kelly_Djahandari_at_nai.com Wednesday, 12 February Re: Simple question Russell Coker Transitivity in role dominance relation Kim Hyung Chan Re: Simple question Howard Holm Re: Simple question j.logsdon_at_lancaster.ac.uk RE: Selinux on smp Westerman, Mark Re: Simple question Russell Coker Re: Selinux on smp Russell Coker Selinux on smp Curtis Greer Re: Simple question Jesse Pollard Simple question j.logsdon_at_lancaster.ac.uk SELinux patent issue Pete Loscocco Tuesday, 11 February Re: SELinux newbie question Russell Coker SELinux newbie question Daniel J Walsh Monday, 10 February Re: SE Linux presentation at Open Source Security in Warsaw Russell Coker Re: FOSDEM report Russell Coker Re: question about role dominance relation.... Stephen D. Smalley Re: FOSDEM report Stephen D. Smalley Re: File labeling issue Stephen D. Smalley File labeling issue Kelly_Djahandari_at_nai.com Sunday, 9 February FOSDEM report Russell Coker Monday, 10 February Re: question about role dominance relation ... Kim Hyung Chan question about role dominance relation ... Kim Hyung Chan question about role dominance relation.... Kim Hyung Chan Thursday, 6 February The patent problem rears it's ugly head again Russell Coker Wednesday, 5 February arm Russell Coker Re: FOSDEM Russell Coker FOSDEM Russell Coker Tuesday, 4 February Re: tmpfs_t Stephen D. Smalley RE: SELinux question? Frank Mayer Re: SELinux question? Stephen D. Smalley Re: SELinux question? Russell Coker Re: linux version question Stephen D. Smalley Re: SELinux question? Daniel J Walsh Re: SELinux question? Tom SELinux question? Daniel J Walsh linux version question ccallen Saturday, 1 February Re: tmpfs_t Russell Coker Thursday, 30 January W4L anyone? j.logsdon_at_lancaster.ac.uk Re: tcb for debian? Russell Coker Re: Debian Kernel Images Brian May Re: Debian Kernel Images Brian May Wednesday, 29 January Updated policy available at sourceforge Chris Vance Tuesday, 28 January Re: NSA and GPL? Tracy R Reed Re: Performance Metrics Stephen D. Smalley Performance Metrics Tusson, Mr. John R. Re: run_init policy Stephen D. Smalley Re: run_init policy Russell Coker run_init policy Wayne Salamon Re: Some questions ... Russell Coker Re: Some questions ... Tom Some questions ... j.logsdon_at_lancaster.ac.uk Re: NSA and GPL? Russell Coker Re: tcb for debian? Russell Coker Monday, 27 January Re: NSA and GPL? Brad Chapman NSA and GPL? Tracy R Reed RE: C&A Russell Coker SE Linux presentation at Open Source Security in Warsaw Russell Coker Re: C&A Russell Coker RE: last policy patch for the evening Kelly_Djahandari_at_nai.com C&A Tusson, Mr. John R. Re: tmpfs_t Stephen D. Smalley TCB - separating /etc/shadow into different files Russell Coker Re: tmpfs_t Carsten Grohmann Re: box is back Russell Coker Sunday, 26 January Re: box is back Jakob Oestergaard propolice and other stack-smashing protections Russell Coker UML Russell Coker Re: Getting closer all the time ... Russell Coker Getting closer all the time ... j.logsdon_at_lancaster.ac.uk Saturday, 25 January RE: Cambridge Security Group talk selinux+Steven.Murdoch_at_cl.cam.ac.uk Re: relabel ... Russell Coker UML and SE Linux Russell Coker relabel ... j.logsdon_at_lancaster.ac.uk tmpfs_t Russell Coker Thursday, 23 January Re: Information required Jesse Pollard Re: process share permission Stephen D. Smalley process share permission Frank Mayer Information required Rashmi Agrawal Good news and bad news with the NSA version j.logsdon_at_lancaster.ac.uk Wednesday, 22 January Re: gcc problem Russell Coker policy development primer course material Frank Mayer gcc problem j.logsdon_at_lancaster.ac.uk patch to sepcut tool Frank Mayer Re: Apache/mysql policy status ? Tom Re: Apache/mysql policy status ? Russell Coker Re: Apache/mysql policy status ? Wayne Salamon Re: Apache/mysql policy status ? Russell Coker Re: Apache/mysql policy status ? Wayne Salamon Re: Accounting ... Russell Coker my SE Linux web pages Russell Coker Accounting ... j.logsdon_at_lancaster.ac.uk Tuesday, 21 January Re: Cambridge Security Group talk Russell Coker Re: Apache/mysql policy status ? Tom Re: Apache/mysql policy status ? Tom Re: Apache/mysql policy status ? Russell Coker Re: Problems compiling selinux release (2003011510) for 2.4.20 kernel Stephen D. Smalley Re: Cambridge Security Group talk Russell Coker Re: Apache/mysql policy status ? Stephen D. Smalley Re: Cambridge Security Group talk Stephen D. Smalley Re: Cambridge Security Group talk Stephen D. Smalley spasswd Russell Coker box is back Russell Coker Monday, 20 January Re: Root-only systems Russell Coker Re: selinux afs domain v 0.2 Russell Coker selinux afs domain v 0.2 forrest whitcher Root-only systems forrest whitcher Re: regular expressions Carsten Grohmann Re: SUSE Carsten Grohmann Re: PHP and other CGI stuff Russell Coker Re: PHP and other CGI stuff Tom Re: PHP and other CGI stuff Russell Coker Re: Debian Kernel Images Russell Coker Re: Apache/mysql policy status ? Russell Coker PHP and other CGI stuff Tom Debian Kernel Images Tom Re: version mismatch in Debian packages Tom Apache/mysql policy status ? Tom Sunday, 19 January Re: Selinux on the "Lunar" linux distribution. Russell Coker last policy patch for the evening Russell Coker inetd and login Russell Coker patch for new domains Russell Coker Re: regular expressions Russell Coker Re: patch for new domains Russell Coker SUSE Russell Coker Re: afs domain development under the selinux kernel Russell Coker Selinux on the "Lunar" linux distribution. forrest whitcher afs domain development under the selinux kernel forrest whitcher regular expressions Carsten Grohmann Re: KDM login trouble Russell Coker Re: Cambridge Security Group talk Russell Coker Saturday, 18 January GLLUG Russell Coker Sunday, 19 January RE: Cambridge Security Group talk Florian Hines Saturday, 18 January Re: Cambridge Security Group talk Brian May Re: Cambridge Security Group talk Brian May Friday, 17 January Re: Cambridge Security Group talk Tom Re: version mismatch in Debian packages Russell Coker Cambridge Security Group talk Russell Coker Re: Problems compiling selinux release (2003011510) for 2.4.20 kernel Stephen D. Smalley Re: version mismatch in Debian packages Brian May Problems compiling selinux release (2003011510) for 2.4.20 kernel azeredo_at_qmc.ufsc.br Re: KDM login trouble Stephen D. Smalley KDM login trouble Tom Re: version mismatch in Debian packages Tom Thursday, 16 January Re: version mismatch in Debian packages Brian May Re: RH 7.3 compile problem Stephen D. Smalley RH 7.3 compile problem j.logsdon_at_lancaster.ac.uk Re: Updated Release Stephen D. Smalley Updated Release Howard Holm version mismatch in Debian packages Tom Wednesday, 15 January setools 0.6.1 patch Frank Mayer Re: SELinux To Do list Tom Re: SELinux To Do list Faye Sunday, 12 January UML policy Russell Coker Saturday, 11 January new strace patch Russell Coker Friday, 10 January Re: 2.4.20 stability issues Russell Coker Re: 2.4.20 stability issues Brian May Re: 2.4.20 stability issues Russell Coker Thursday, 9 January 2.4.20 stability issues Brian May SE Linux article on newsforge Russell Coker SE Linux talk at Next GLLUG Meeting Saturday 18th January 2003 Russell Coker Fwd: Verano gets real-time with SELinux Russell Coker SuSE 8.1 RPMs Carsten Grohmann Wednesday, 8 January Re: Policy Language Russell Coker RE: Policy Language Stephen D. Smalley RE: Policy Language Frank Mayer RE: Policy Language Westerman, Mark Tuesday, 7 January Re: Trusted BSD is selinux compatible? Chris Vance SE Linux talk in Cambridge on Jan 17 Russell Coker auditallow and { sbin_t bin_t } Russell Coker Monday, 6 January RE: Policy Language Stephen D. Smalley RE: Policy Language Westerman, Mark Re: Policy Language Stephen D. Smalley Re: kerberos and selinux Stephen D. Smalley Sunday, 5 January Trusted BSD is selinux compatible? Joshua Brindle Friday, 3 January Policy Language Mark Westerman Saturday, 4 January (no subject) Mark Westerman kerberos and selinux ian.willis_at_sge.net Friday, 3 January Re: XML Policy Files Brian May possible rlinetd security issue Russell Coker Thursday, 2 January Re: automake gone? Brian May Re: SELinux To Do list Stephen D. Smalley Re: SELinux To Do list Stephen D. Smalley Wednesday, 1 January latest policy patch Russell Coker Tuesday, 31 December Re: SELinux To Do list Russell Coker Re: SELinux To Do list Kerry Thompson Monday, 30 December Re: SELinux To Do list Paul Greene Re: SELinux To Do list Faye Re: SELinux To Do list Stephen D. Smalley SE Linux people in the UK Russell Coker SELinux To Do list Guerra, Kamuela D. Re: Mandrake and Slackware Distros forrest whitcher Re: automake gone? Joshua Brindle Re: automake gone? Brian May automake gone? Joshua Brindle Friday, 27 December Re: Mandrake and Slackware Distros Russell Coker Mandrake and Slackware Distros Ben Ritter [patch] Re: new kernel patch Stephen D. Smalley Re: SELinux SuSE 8.1 RPMs Russell Coker Tuesday, 24 December test Ed Street Re: avc: denied Russell Coker Re: avc: denied Subba Rao Monday, 23 December XML Policy Files Mark Westerman Sunday, 22 December RE: Freeswan breaks lsm kernel build Paul Krumviede RE: Freeswan breaks lsm kernel build Ed Street Re: Freeswan breaks lsm kernel build Brian May Re: Freeswan breaks lsm kernel build Russell Coker Freeswan breaks lsm kernel build Ed Street Re: avc: denied Russell Coker avc: denied Subba Rao Saturday, 21 December Error message - BSD lib required Subba Rao Re: Domain transition -- enabling user_r in eklogin Russell Coker Re: [ISN] Music file flaws could threaten traders Russell Coker Friday, 20 December Re: [ISN] Music file flaws could threaten traders Brian May Re: nfsd kernel NULL pointer dereference Stephen D. Smalley Re: Domain transition -- enabling user_r in eklogin Jesse Pollard nfsd kernel NULL pointer dereference Martin Robb Re: Domain transition -- enabling user_r in eklogin Russell Coker Re: Domain transition -- enabling user_r in eklogin Jesse Pollard Re: [ISN] Music file flaws could threaten traders Tom Re: [ISN] Music file flaws could threaten traders Russell Coker Re: [ISN] Music file flaws could threaten traders Russell Coker Thursday, 19 December Re: [ISN] Music file flaws could threaten traders Brian May Re: Domain transition -- enabling user_r in eklogin Russell Coker Re: [ISN] Music file flaws could threaten traders Paul Krumviede Re: [ISN] Music file flaws could threaten traders Russell Coker new and updated setools Frank Mayer Re: Domain transition -- enabling user_r in eklogin Jesse Pollard Re: Domain transition -- enabling user_r in eklogin Russell Coker Wednesday, 18 December Re: Domain transition -- enabling user_r in eklogin Brian May Tuesday, 17 December SE-Linux Debian woody archive Brian May Wednesday, 18 December Re: Domain transition -- enabling user_r in eklogin Russell Coker Tuesday, 17 December New selinux-small with automake? Joshua Brindle Re: Domain transition -- enabling user_r in eklogin Brian May Re: Domain transition -- enabling user_r in eklogin forrest whitcher Re: Domain transition Brian May Re: Domain transition -- enabling user_r in eklogin Stephen D. Smalley Re: Domain transition -- enabling user_r in eklogin forrest whitcher Re: Domain transition -- enabling user_r in eklogin Stephen D. Smalley Re: Domain transition -- enabling user_r in eklogin forrest whitcher Re: Domain transition Russell Coker Re: Domain transition Justin Smith Re: Domain transition Russell Coker Re: Domain transition Brian May Re: Domain transition Russell Coker Monday, 16 December Re: Domain transition Brian May Re: Domain transition Russell Coker Re: Domain transition Stephen D. Smalley Re: Domain transition Tom Re: new kernel patch Russell Coker Domain transition Richard Mayo Re: new kernel patch Stephen D. Smalley [patch] Synchronize lsm-2.5 with lsm-2.5-bk Stephen D. Smalley policy patch for 2002121210 Russell Coker Re: Updated Release Stephen D. Smalley Sunday, 15 December Contributors Mark Westerman Saturday, 14 December Re: new Debian packages Les Bell Re: new Debian packages Brian May Re: new Debian packages Les Bell Re: new Debian packages Brian May Re: new Debian packages Russell Coker Re: new Debian packages Russell Coker Friday, 13 December Re: new Debian packages Brian May Re: new Debian packages Tom new Debian packages Russell Coker new kernel patch Russell Coker Updated Release Howard Holm Thursday, 12 December RE: policy administration Frank Mayer Wednesday, 11 December Re: SELinux (in) Clusters Russell Coker Tuesday, 10 December SELinux (in) Clusters Subba Rao RedHat 8.0 src.rpms now up Shaun Savage Re: ia64 Stephen D. Smalley Monday, 9 December Re: Basic Question Brian May ia64 Russell Coker Re: Another Question Russell Coker Re: Basic Question Russell Coker Re: Basic Question Tom Another Question Richard Mayo Basic Question Richard Mayo Re: new policy Stephen D. Smalley Debian package building on multiple architectures Russell Coker selinux-small/module/Makefile Russell Coker Sunday, 8 December debian-installer Brian May Re: other architectures Brian May other architectures Russell Coker new coreutils package Russell Coker Saturday, 7 December Re: new policy Brian May Re: syscall numbers Russell Coker patch for warnings in test programs Russell Coker Friday, 6 December Re: new policy Russell Coker Re: new policy Wayne Salamon Re: new policy Russell Coker Re: new policy Wayne Salamon Re: new policy Russell Coker Re: new policy Wayne Salamon Thursday, 5 December Re: SE Linux Auditing Russell Coker Re: new policy Russell Coker Re: new policy Chris Vance GDM Redhat 8.0 Mark Westerman RE: SE Linux Auditing Richard Mayo Wednesday, 4 December Re: SGI Challenge XL Casey Schaufler Re: Kernel Oops from afsd under the selinux kernel Stephen D. Smalley Re: Remove types from policy and filesystem Stephen D. Smalley Remove types from policy and filesystem Carsten Grohmann Tuesday, 3 December Re: Kernel Oops from afsd under the selinux kernel forrest whitcher Re: SELinux on CD Carsten Grohmann Re: Kernel Oops from afsd under the selinux kernel Stephen D. Smalley Odd fork/vfork failure / hang running selinux kerenel in slackware - current forrest whitcher Kernel Oops from afsd under the selinux kernel forrest whitcher Re: SELinux on CD Carsten Grohmann Re: Systrace Russell Coker Re: get_ordered_sid_list Russell Coker Re: automake Joshua Brindle Re: Systrace Stephen D. Smalley Re: get_ordered_sid_list Stephen D. Smalley Systrace Justin Smith Re: SELinux on CD Russell Coker get_ordered_sid_list Westerman, Mark Re: tcp_send errors Stephen D. Smalley Re: RH 8.1 Russell Coker Re: tcp_send errors Russell Coker SELinux on CD Tom new policy Russell Coker Re: RH 8.1 Shaun Savage tcp_send errors Timothy Wood Re: policy patch Stephen D. Smalley Re: expect Russell Coker Monday, 2 December Re: expect Tom Re: Errors in SELinux compile Stephen D. Smalley Re: expect Russell Coker Re: Errors in SELinux compile Russell Coker Errors in SELinux compile Michael Alexander S Contr OO-ALC/YPVS Re: expect Tom Re: SGI Challenge XL Russell Coker Re: RH 8.1 Stephen D. Smalley Re: SELinux compile errors Stephen D. Smalley Re: automake Stephen D. Smalley Re: expect Russell Coker Re: SELinux compile errors Jesse Pollard Re: expect Jesse Pollard SGI Challenge XL egoodwin_at_unimatrix.com Sunday, 1 December automake Joshua Brindle SE Linux and Cobalt Qube Russell Coker Re: expect Russell Coker Re: executing a sock_file Russell Coker Saturday, 30 November Re: SELinux compile errors Subba Rao Re: Re: SELinux compile errors Subba Rao Re: Re: SELinux compile errors Russell Coker Re: SELinux compile errors Russell Coker Re: RH 8.1 Russell Coker RH 8.1 Subba Rao policy administration Serge E. Hallyn Friday, 29 November Re: label transitions Stephen D. Smalley Re: Building SELinux - System requirement and 'warning' messages Subba Rao SELinux compile errors Subba Rao Re: Building SELinux - System requirement and 'warning' messages Stephen D. Smalley Re: executing a sock_file Stephen D. Smalley Re: 2.4.20 Stephen D. Smalley Re: expect Stephen D. Smalley expect Russell Coker label transitions Giorgio Zanin Attn: Howard Russell Coker Re: Building SELinux - System requirement and 'warning' messages Subba Rao Re: Building SELinux - System requirement and 'warning' messages Russell Coker 2.4.20 Russell Coker Building SELinux - System requirement and 'warning' messages Subba Rao policy patch Russell Coker Thursday, 28 November Re: Production servers? Tom Re: Production servers? Russell Coker Production servers? Subba Rao executing a sock_file Russell Coker Wednesday, 27 November Re: network operations Stephen D. Smalley network operations Russell Coker Re: role dominance Stephen D. Smalley Re: role dominance Joshua D. Guttman Re: role dominance Stephen D. Smalley Tuesday, 26 November Re: RH8.0 Install problems Stephen D. Smalley RH8.0 Install problems Michael Alexander S Contr OO-ALC/YPVS Monday, 25 November Re: Patch for selinux automake Brian May Patch for selinux automake Joshua Brindle LinuxBIOS and secure booting Russell Coker Saturday, 23 November Re: SELinux distro building Joshua Brindle Thursday, 21 November security enhanced linux disto Joshua Brindle RE: login (new default_contexts, run-time detection) Frank Mayer RE: login (new default_contexts, run-time detection) Stephen D. Smalley RE: login (new default_contexts, run-time detection) Frank Mayer RE: login (new default_contexts, run-time detection) Stephen D. Smalley RE: login (new default_contexts, run-time detection) Frank Mayer Wednesday, 20 November Re: conflicting header files Stephen D. Smalley Re: SELinux distro building Brian May Re: conflicting header files Brian May Re: SELinux distro building Joshua Brindle Re: multiple dontaudit rules Stephen D. Smalley multiple dontaudit rules Carsten Grohmann Re: conflicting header files Stephen D. Smalley Re: allow a_domain_t fs_t:filesystem getattr; Stephen D. Smalley Re: allow a_domain_t fs_t:filesystem getattr; Tom Tuesday, 19 November conflicting header files Brian May Re: SELinux distro building Brian May allow a_domain_t fs_t:filesystem getattr; Russell Coker Re: Still problems with RedHat8.0 Russell Coker Re: Still problems with RedHat8.0 Brian May Re: Still problems with RedHat8.0 Russell Coker Still problems with RedHat8.0 azeredo_at_qmc.ufsc.br RE: login (new default_contexts) Stephen D. Smalley nsd - the RIPE name server Russell Coker Re: login (new default_contexts) Russell Coker RE: login (new default_contexts) Frank Mayer Re: login Stephen D. Smalley Re: login Russell Coker login Koichi ONOUE login Koichi ONOUE Monday, 18 November Re: SELinux distro building Brian May Re: XML based file structure for SE-Linux Brian May Re: Re: SELinux compile errors Subba Rao RE: cvs sourceforge Tusson, Mr. John R. cvs sourceforge david caplan Re: XML based file structure for SE-Linux Joshua Brindle Sunday, 17 November Re: XML based file structure for SE-Linux Brian May Re: SELinux compile errors Kerry Thompson Re: SELinux compile errors Kerry Thompson Saturday, 16 November SELinux compile errors Subba Rao Friday, 15 November Re: SE Linux training Ben McGinnes RE: Security Enhanced Linux distro Joshua Brindle Re: Security Enhanced Linux distro Russell Coker RE: Security Enhanced Linux distro Mark Westerman (no subject) Mark Westerman Security Enhanced Linux distro Russell Coker Re: SE Linux training Russell Coker Thursday, 14 November Re: SE Linux training Ben McGinnes cron/fcron policy Russell Coker Wednesday, 13 November Re: SELinux and Tomcat web server Russell Coker Re: SELinux distro building Brian May Tuesday, 12 November Re: SELinux distro building Joshua Brindle Re: SELinux distro building Brian May Re: SELinux distro building Brad Chapman Re: SELinux distro building Joshua Brindle Re: SELinux distro building Russell Coker Re: SELinux and Tomcat web server Russell Coker Re: SELinux and Tomcat web server Tom SELinux distro building Joshua Brindle Update SuSE-Rules Carsten Grohmann SELinux and Tomcat web server K VAMSHI KRISHNA SELinux and Tomcat web server K VAMSHI KRISHNA SELinux and Tomcat web server K VAMSHI KRISHNA Monday, 11 November SELinux distro building Joshua Brindle SELinux distro building Joshua Brindle Sunday, 10 November Update SuSE-Rules Carsten Grohmann Thursday, 7 November Re: SE Linux training James Morris Re: SE Linux training James Morris Re: selinux in RH8 Russell Coker selinux in RH8 azeredo_at_qmc.ufsc.br (no subject) azeredo_at_qmc.ufsc.br Re: Kernet panic VFS: Unable to mount root fs Russell Coker Re: default_context file Russell Coker Re: can_network() Russell Coker Berlin Russell Coker Kernet panic VFS: Unable to mount root fs Paul Loo Re: type transition Stephen D. Smalley Re: default_context file Stephen D. Smalley Re: default_context file Stephen D. Smalley Re: can_network() Stephen D. Smalley Re: SELinux source Ying-Hung Chen Re: SE Linux training Pete Loscocco Re: SELinux source Stephen D. Smalley SELinux source Subba Rao Re: IOCTL from rm Stephen D. Smalley Re: Re: SELinux and security tools? Russell Coker SE Linux training Russell Coker Re: Re: SELinux and security tools? Tom Re: Re: SELinux and security tools? Subba Rao Wednesday, 6 November Re: SELinux and security tools? Russell Coker IOCTL from rm Russell Coker rw_dir_perms vs r_dir_perms Russell Coker Re: SELinux and security tools? Wayne Salamon SELinux and security tools? Subba Rao Tuesday, 5 November Re: Selinux on RH8 Russell Coker Re: Selinux on RH8 Brad Chapman Selinux on RH8 azeredo_at_qmc.ufsc.br Re: type transition Wayne Salamon Monday, 4 November type transition Giorgio Zanin Re: kde rules Russell Coker Re: kde rules Russell Coker Fwd: expect problem Russell Coker Re: can_network() Tom policy patches Russell Coker can_network() Russell Coker Re: When should I upgrade SELinux? Brad Chapman Re: default_context file Russell Coker Re: default_context file carstengrohmann_at_gmx.de Sunday, 3 November Re: When should I upgrade SELinux? Russell Coker When should I upgrade SELinux? Brad Chapman Re: default_context file Russell Coker default_context file Carsten Grohmann Friday, 1 November Fwd: [ols-announce] OLS2003: Call for Papers Russell Coker Re: Problems with policy in RH8 Russell Coker Re: MLS Wayne Salamon Re: Problems with policy in RH8 Russell Coker RE: Problems with policy in RH8 Westerman, Mark RE: Problems with policy in RH8 Westerman, Mark Re: Problems with policy in RH8 Russell Coker Re: Problems with policy in RH8 Wayne Salamon Problems with policy in RH8 azeredo_at_qmc.ufsc.br Thursday, 31 October MLS Koichi ONOUE Wednesday, 30 October new ssh and login packages Russell Coker Thursday, 31 October Re: strange problem Russell Coker Re: strange problem Stephen Smalley Re: SELinux Kernel Oops Stephen Smalley Re: SELinux Kernel Oops Stephen Smalley strange problem Russell Coker Wednesday, 30 October Re: SELinux Kernel Oops Chris Wright Re: the new default_contexts file Russell Coker Re: kernel warning Stephen Smalley Re: the new default_contexts file Stephen Smalley the new default_contexts file Russell Coker Re: SELinux Kernel Oops Stephen Smalley Network configuration tool Eric Gingras (LMC) SELinux Kernel Oops James W Carter Re: kernel warning Russell Coker Re: kernel warning Stephen Smalley Re: kernel warning Brian May new packages Russell Coker Re: kernel warning Brian May Re: kernel warning Russell Coker Re: kernel warning Stephen Smalley Re: kernel warning Stephen Smalley Re: kernel warning Kerry Thompson Re: kernel warning Russell Coker Re: mysql policy Tom Re: kernel warning Stephen Smalley Re: mysql policy Tom Re: mysql policy Tom Tuesday, 29 October Re: kernel warning Brian May Keep up the good work NSA!!! Douglas Phillipson Re: font paths Russell Coker Re: mysql policy Stephen Smalley Re: New configuration scheme Stephen Smalley Re: mysql policy Tom New configuration scheme Westerman, Mark Re: run_init Stephen Smalley Re: font paths Stephen Smalley Re: mysql policy Stephen Smalley Re: New Apache policy Tom Re: New Apache policy Russell Coker Re: recovery docs starter Russell Coker Re: New Apache policy Tom sulogin_exec_t Russell Coker Re: sulogin_exec_t Stephen Smalley Re: New Apache policy Stephen Smalley Re: New Apache policy Tom Re: New Apache policy Stephen Smalley Re: patches to policy question Russell Coker Re: patches to policy question Stephen Smalley Re: patches to policy question Tom Re: patches to policy question Tom Re: patches to policy question Stephen Smalley Re: patches to policy question Russell Coker recovery docs starter Tom patches to policy question Tom Monday, 28 October Re: run_init Russell Coker Re: kernel warning Brian May Re: kernel warning Russell Coker Re: run_init Stephen Smalley Re: newrules.pl Stephen Smalley Re: patch to install libsecure man pages Stephen Smalley Re: patch for latest release Stephen Smalley Re: mysql policy Tom Re: mysql policy Tom font paths Russell Coker Re: mysql policy Russell Coker Re: dontaudit Tom Re: kernel warning Stephen Smalley Re: mysql policy Tom Re: dontaudit Russell Coker Re: mysql policy Russell Coker dontaudit Tom mysql policy Tom Sunday, 27 October expect Russell Coker kernel warning Brian May Saturday, 26 October Re: expect Russell Coker Re: expect Russell Coker Re: expect Chris Albert expect Russell Coker fcron Russell Coker Friday, 25 October run_init Russell Coker Re: New Apache policy Tom Thursday, 24 October Re: New Apache policy Tom Re: New Apache policy Russell Coker New Apache policy Tom [patch] Remove __exit attribute from selopt functions Stephen Smalley Re: patch to install libsecure man pages Carsten Grohmann Re: apache 2 patch Tom Re: apache 2 patch Russell Coker apache 2 patch Tom Re: patch to install libsecure man pages Russell Coker (no subject) Carsten Grohmann Wednesday, 23 October Re: Updated Release Stephen Smalley patch for latest release Russell Coker Re: ssh policy Stephen Smalley ssh policy Russell Coker Re: kernel compile error with latest ver Stephen Smalley kernel compile error with latest ver Russell Coker newrules.pl Carsten Grohmann Updated Release Howard Holm Sunday, 20 October strace Russell Coker logrotate Russell Coker Friday, 18 October Re: kde rules Russell Coker kde rules Brian Fegler Re: rule analyzer Russell Coker Re: rule analyzer Brian Fegler Re: a silly question Stephen Smalley a silly question Giorgio Zanin rule analyzer Brian Fegler Re: latest policy patch Russell Coker Re: latest policy patch Tom Thursday, 17 October Re: latest policy patch Brian May procps package Russell Coker Re: latest policy patch Russell Coker Re: latest policy patch Stephen Smalley Re: latest policy patch Tom Compilation error Silakhdar Krikeb Re: latest policy patch Russell Coker Re: latest policy patch Tom Wednesday, 16 October latest policy patch Russell Coker RE: initrd kernel panic Westerman, Mark RE: initrd kernel panic Stephen Smalley RE: where to find archieves Westerman, Mark where to find archieves hariharanjayaraman RE: initrd kernel panic Stephen Smalley RE: initrd kernel panic Westerman, Mark RE: initrd kernel panic Westerman, Mark Re: initrd kernel panic Stephen Smalley initrd kernel panic Westerman, Mark Tuesday, 15 October Re: Sockets permissions Stephen Smalley Sockets permissions Eric Gingras (LMC) RE: terminals permissions Eric Gingras (LMC) default user role Russell Coker Re: terminals permissions Stephen Smalley terminals permissions Eric Gingras (LMC) Monday, 14 October Re: $1_cupsd_spool_t in lpr_macros.te Russell Coker Re: $1_cupsd_spool_t in lpr_macros.te Stephen Smalley Saturday, 12 October Re: $1_cupsd_spool_t in lpr_macros.te Russell Coker Friday, 11 October Re: $1_cupsd_spool_t in lpr_macros.te Carsten Grohmann Thursday, 10 October Re: another policy patch Stephen Smalley another policy patch Russell Coker Re: yacc problem Stephen Smalley yacc problem Russell Coker Wednesday, 9 October Re: Apache 2 file contexts Russell Coker Re: Apache 2 file contexts Tom Re: What to do next? Stephen Smalley Re: What to do next? Russell Coker Re: Apache 2 file contexts Tom Re: /proc woes Tom Tuesday, 8 October Re: Apache 2 file contexts Russell Coker Re: /proc woes Russell Coker Re: What to do next? Kerry Thompson Re: /proc woes Tom What to do next? luiztizei Re: /proc woes Stephen Smalley Re: /proc woes Tom Re: /proc woes Stephen Smalley Re: /proc file context Tom /proc file context Tom Re: /proc file context Stephen Smalley /proc woes Tom Apache 2 file contexts Tom (no subject) hariharanjayaraman Saturday, 5 October Re: RH8 policy support Russell Coker Friday, 4 October Re: RH8 policy support Brad Chapman Re: RH8 policy support Russell Coker RH8 policy support Brad Chapman [patch] Fix omissions in SELinux-patched fileutils Stephen Smalley Wednesday, 2 October Re: SE Linux on Debian Brian May Re: SE Linux on Debian Russell Coker Re: SE Linux on Debian Brian May Tuesday, 1 October Re: SE Linux on Debian Tracy R Reed Re: SE Linux on Debian Russell Coker Wednesday, 2 October Re: postfix Carsten Grohmann attributes for roles? Russell Coker Re: SE Linux on Debian Russell Coker Re: SE Linux on Debian Russell Coker Re: SE Linux on Debian Russell Coker Re: SE Linux on Debian Russell Coker Re: SE Linux on Debian Tom Re: SE Linux on Debian Tracy R Reed Re: SE Linux on Debian Tom Re: SE Linux on Debian Tracy R Reed Re: SE Linux on Debian Tracy R Reed Re: SE Linux on Debian Brian May Re: SE Linux on Debian Tom Re: SE Linux on Debian Tracy R Reed Tuesday, 1 October Re: SE Linux on Debian Brian May SE Linux on Debian Tracy R Reed Re: new policy Stephen Smalley Re: new policy Russell Coker Re: Bug in selinux_task_reparent_to_init (?) Stephen Smalley Re: new policy Stephen Smalley Re: new policy Russell Coker Bug in selinux_task_reparent_to_init (?) ml-selinux_at_unpatched.net Re: new policy Stephen Smalley Re: patch for home_root_t Stephen Smalley Re: rlogin policy patch Stephen Smalley Re: new policy patch Stephen Smalley Re: apache Stephen Smalley Re: policy version Tom Re: policy version Russell Coker Re: SE-Linux packages Russell Coker Re: policy version Tom Re: Editing crontabs Russell Coker Re: policy version Stephen Smalley Re: policy version Tom Re: policy version Stephen Smalley Re: policy version Tom Re: /dev/pty* Russell Coker Re: Editing crontabs Russell Coker Re: /dev/pty* Stephen Smalley Re: SE-Linux packages Stephen Smalley Re: Editing crontabs Stephen Smalley Re: trivial logging bug Stephen Smalley Re: /dev/pty* Stephen Smalley Re: policy version Stephen Smalley policy version Tom rlogin policy patch Russell Coker /dev/pty* Russell Coker Re: SE-Linux packages Tom Monday, 30 September Re: Editing crontabs Russell Coker RE: [patch] label /home directory, create suserdel david caplan Re: $1_cupsd_spool_t in lpr_macros.te Russell Coker Re: trivial logging bug Russell Coker Re: trivial logging bug Stephen Smalley Re: $1_cupsd_spool_t in lpr_macros.te Carsten Grohmann Re: limiting types on a file system Russell Coker trivial logging bug Russell Coker Thursday, 26 September Re: limiting types on a file system Bennett Todd Monday, 30 September Re: $1_cupsd_spool_t in lpr_macros.te Russell Coker Re: $1_cupsd_spool_t in lpr_macros.te Carsten Grohmann Re: SE Linux and UML compile problems... Russell Coker Re: [patch] label /home directory, create suserdel Stephen Smalley Re: patch for home_root_t Russell Coker Re: [patch] label /home directory, create suserdel Russell Coker Re: $1_cupsd_spool_t in lpr_macros.te Russell Coker Re: $1_cupsd_spool_t in lpr_macros.te Stephen Smalley Re: new policy Tom Re: [patch] label /home directory, create suserdel Stephen Smalley Sunday, 29 September new policy Russell Coker Monday, 30 September Re: patch for home_root_t Stephen Smalley RE: SE Linux and UML compile problems... pasi.kivikangas_at_nokia.com Re: $1_cupsd_spool_t in lpr_macros.te Russell Coker Re: $1_cupsd_spool_t in lpr_macros.te Carsten Grohmann Sunday, 29 September Re: Indentifying SE-Linux version Kerry Thompson Re: Indentifying SE-Linux version Russell Coker Indentifying SE-Linux version Brian May missed a bit from the last message Russell Coker Re: [patch] label /home directory, create suserdel Russell Coker [patch] label /home directory, create suserdel Chris Vance Re: postfix Russell Coker Re: $1_cupsd_spool_t in lpr_macros.te Russell Coker Re: $1_cupsd_spool_t in lpr_macros.te Carsten Grohmann postfix Carsten Grohmann Re: $1_cupsd_spool_t in lpr_macros.te Russell Coker (no subject) Carsten Grohmann Saturday, 28 September new psmisc Russell Coker Friday, 27 September patch for home_root_t Russell Coker new policy patch Russell Coker apache Russell Coker RE: checkpolicy and login names [patch] Stephen Smalley Re: patch to remove initrd support Stephen Smalley Re: big patch Stephen Smalley Re: losing type information under high load Russell Coker Re: losing type information under high load Stephen Smalley FW: checkpolicy and login names [patch] Frank Mayer RE: SE Linux and UML compile problems... pasi.kivikangas_at_nokia.com losing type information under high load Russell Coker Re: SE-Linux packages Russell Coker Re: SE-Linux packages Brian May Re: SE-Linux packages Brian May Thursday, 26 September New release of setools Frank Mayer RE: checkpolicy and login names [patch] Frank Mayer RE: checkpolicy and login names [patch] Frank Mayer RE: checkpolicy and login names [patch] Frank Mayer RE: checkpolicy and login names [patch] Frank Mayer big patch Russell Coker SE Linux and UML compile problems... Russell Coker RE: SELinux on UML Stephen Smalley RE: SELinux on UML pasi.kivikangas_at_nokia.com patch to remove initrd support Russell Coker Re: SELinux on UML Stephen Smalley RE: SELinux on UML pasi.kivikangas_at_nokia.com Wednesday, 25 September Re: limiting types on a file system Russell Coker Re: limiting types on a file system Brian May Re: SELinux on UML Russell Coker Re: [patch] Fix bug in pivot_root handling Stephen Smalley limiting types on a file system Russell Coker Re: SELinux on UML Tom SELinux on UML pasi.kivikangas_at_nokia.com Re: checkpolicy and login names Russell Coker Tuesday, 24 September [patch] Add signull permission, remove obsolete permissions Stephen Smalley [patch] Check sys_tty_config for KDSKB(S)?ENT ioctls (e.g. loadkeys) Stephen Smalley [patch] Fix bug in persistent label mapping code Stephen Smalley [patch] Fix bug in extsocket_sendmsg Stephen Smalley [patch] Fix bug in pivot_root handling Stephen Smalley RE: checkpolicy and login names david caplan checkpolicy and login names david caplan Re: checkpolicy and login names Russell Coker Re: Problems compiling selinux in Mandrake 8.1 Stephen Smalley Re: checkpolicy and login names Stephen Smalley Problems compiling selinux in Mandrake 8.1 azeredo_at_qmc.ufsc.br Re: SE-Linux packages Russell Coker Re: SE-Linux packages Russell Coker Monday, 23 September Re: SE-Linux packages Brian May Tuesday, 24 September RE: SElinux newbie seeks starter paper(s) Frank Mayer Re: directory permissions Stephen Smalley directory permissions Carsten Grohmann Monday, 23 September ioctl on a directory? Russell Coker german SELinux discussion list Carsten Grohmann Re: SElinux newbie seeks starter paper(s) Tom Re: sigchld for sshd_t Stephen Smalley Re: SElinux newbie seeks starter paper(s) Stephen Smalley Re: mta patch Stephen Smalley Re: setuid/setgid capability Stephen Smalley Deutsche Liste Michael Zimmermann Re: SElinux newbie seeks starter paper(s) Carsten Grohmann Re: SElinux newbie seeks starter paper(s) Tom Re: SElinux newbie seeks starter paper(s) Michael Zimmermann Sunday, 22 September setuid/setgid capability Russell Coker Re: SElinux newbie seeks starter paper(s) Russell Coker Re: SElinux newbie seeks starter paper(s) Carsten Grohmann sigchld for sshd_t Russell Coker SElinux newbie seeks starter paper(s) Michael Zimmermann Saturday, 21 September policy files for chroot and mailman Russell Coker Re: SE-Linux packages Anton Emmerfors new policy Russell Coker policy patch Russell Coker mta patch Russell Coker var_t Russell Coker Friday, 20 September Re: bind9 policy patch Stephen Smalley Re: some missing printer devices Stephen Smalley Re: some patches Stephen Smalley Re: pppd and net_context Stephen Smalley Re: policy patches Stephen Smalley Re: freeswan IP sec patch Stephen Smalley Re: spasswd Stephen Smalley Re: SE-Linux packages Russell Coker Thursday, 19 September SE-Linux packages Brian May Re: logging error Stephen Smalley Re: setfiles buglet Stephen Smalley Re: privfd attribute Russell Coker Re: privfd attribute Carsten Grohmann logging error Russell Coker Wednesday, 18 September setfiles buglet Russell Coker Re: privfd attribute Russell Coker Tuesday, 17 September privfd attribute Carsten Grohmann Re: macro for run_init etc Chris Vance Re: /var/lock Russell Coker Re: Fwd: Re: Any assured channel work for Linux Stephen Smalley Re: /var/lock Stephen Smalley Re: http domain Stephen Smalley Monday, 16 September Fwd: Re: Any assured channel work for Linux Russell Coker Re: Any assured channel work for Linux Russell Coker Re: SELinux and kernel module compatibility Russell Coker SELinux and kernel module compatibility Femitha Majeed Sunday, 15 September bind9 policy patch Russell Coker Re: some patches Carsten Grohmann Re: some patches Russell Coker Re: some missing printer devices Russell Coker some missing printer devices Carsten Grohmann some patches Carsten Grohmann Re: pppd and net_context Carsten Grohmann Saturday, 14 September [OFT] Minor DOD security issue Dale Amon Friday, 13 September /var/lock Russell Coker sysadm_devpts_t access for daemons Russell Coker Re: uml policy Tom Re: lsm on ac kernel Russell Coker Re: apache configuration etc Russell Coker Re: Another newbie question... Russell Coker Re: uml policy Russell Coker Re: uml policy Tom Thursday, 12 September lsm on ac kernel Rogelio M. Serrano Jr. Re: uml policy Russell Coker Re: Problems compiling selinux on SuSe 7.2 Russell Coker Re: apache configuration etc Brian May Re: Problems compiling selinux on SuSe 7.2 Brian May Re: uml policy Tom Another newbie question... Eric Gingras (LMC) apache configuration etc Russell Coker Re: http domain Russell Coker Re: uml policy Russell Coker Re: uml policy Russell Coker uml policy Tom Re: http domain Russell Coker Re: redhat.te and suse.te (was Re: pppd with ipppd) Russell Coker Wednesday, 11 September new login Debian package Russell Coker Thursday, 12 September Re: redhat.te and suse.te (was Re: pppd with ipppd) Carsten Grohmann http domain Ryan Washington Re: redhat.te and suse.te (was Re: pppd with ipppd) Russell Coker http domain Ryan Washington Re: Problems compiling selinux on SuSe 7.2 Russell Coker Wednesday, 11 September Re: Problems compiling selinux on SuSe 7.2 Brian May Re: macro for run_init etc Russell Coker chroot Russell Coker Re: can_exec_read macro Stephen Smalley Re: macro for run_init etc Stephen Smalley Re: Problems compiling selinux on SuSe 7.2 Russell Coker Dialup connection jj012a1662 Problems compiling selinux on SuSe 7.2 azeredo_at_qmc.ufsc.br RE: IBM's Multics paper (let's not confuse assurance and mandatory security) Frank Mayer Re: redhat.te and suse.te (was Re: pppd with ipppd) Carsten Grohmann Re: IBM's Multics paper Russell Coker Re: IBM's Multics paper Pawe³ Krawczyk Tuesday, 10 September Re: IBM's Multics paper Russell Coker Monday, 9 September policy patches Russell Coker Tuesday, 10 September Re: IBM's Multics paper Trent Jaeger Re: IBM's Multics paper Trent Jaeger Re: IBM's Multics paper Trent Jaeger Re: IBM's Multics paper Russell Coker Re: redhat.te and suse.te (was Re: pppd with ipppd) Russell Coker Re: IBM's Multics paper Trent Jaeger Re: IBM's Multics paper Stephen Smalley redhat.te and suse.te (was Re: pppd with ipppd) Carsten Grohmann Re: IBM's Multics paper Russell Coker Monday, 9 September IBM's Multics paper Tracy R Reed Linux Kongress paper Russell Coker Re: Linux Kongress tutorial Tom Re: pppd with ipppd Russell Coker Linux Kongress tutorial Russell Coker Re: nsa/selinux/policy/domains/program mta.te,1.2,1.3 procmail.te,1.2,1.3 sendmail.te,1.6,1.7 tmpreaper.te,1.3,1.4 (fwd) Russell Coker Re: pppd with ipppd Carsten Grohmann [patch] Fix constraint evaluation Stephen Smalley [patch] Fix audit output for name_bind permission check Stephen Smalley mailing lists Russell Coker Sunday, 8 September spasswd Russell Coker Re: pppd with ipppd Russell Coker Re: pppd with ipppd Carsten Grohmann Re: pppd with ipppd Russell Coker Friday, 6 September Re: Kernel panic: VFS: Unable to mount root fs ljf_at_semandex.net RE: Kernel panic: VFS: Unable to mount root fs Westerman, Mark SELinux Mailing List Howard Holm pppd with ipppd Carsten Grohmann Kernel panic: VFS: Unable to mount root fs Ryan Washington new login Debian package Russell Coker Kernel panic: VFS: Unable to mount root fs Ryan Washington Re: route Russell Coker Thursday, 5 September Re: route Carsten Grohmann Re: route Russell Coker Re: isdn and script problem Stephen Smalley Re: bug in SE Linux / LSM Stephen Smalley Re: Buildproblems Stephen Smalley Re: Looking for User Support Stephen Smalley Re: Cant get linksys network card to work! jj012a1662 bug in SE Linux / LSM Russell Coker Wednesday, 4 September Looking for User Support Chris Willis Re: Buildproblems Trent Jaeger isdn and script problem Carsten Grohmann route Carsten Grohmann Re: Buildproblems Stephen Smalley Buildproblems Magnus Johansson Tuesday, 3 September Cant get linksys network card to work! jj012a1662 Re: can_exec_read macro Russell Coker can_exec_read macro Carsten Grohmann SE Linux work Russell Coker macro for run_init etc Russell Coker Monday, 2 September psmisc Russell Coker Friday, 30 August SELinux 2002082308 RPM Package Westerman, Mark Thursday, 29 August Re: devfs change, trivial patches, netscape & x patches Brian May Re: (no subject) Stephen Smalley RE: david caplan (no subject) Russell Coker (no subject) Eric Gingras (LMC) Re: Direct logins (via local and ssh) as httpd_admin_r? Russell Coker Re: kernel daemons runs in init_t Russell Coker Re: kernel daemons runs in init_t Russell Coker Re: makefile patch Russell Coker Re: building libsecure.a advice Stephen Smalley Re: makefile patch Stephen Smalley Re: more patches, another small patch Stephen Smalley Re: new rules for amanda Stephen Smalley Re: kernel daemons runs in init_t Stephen Smalley Re: Direct logins (via local and ssh) as httpd_admin_r? Russell Coker logrotate-3.6.5. Russell Coker Re: Direct logins (via local and ssh) as httpd_admin_r? Mark Müller sh-utils_2.0.15 Russell Coker fileutils_4.1.11 Russell Coker Wednesday, 28 August Re: building libsecure.a advice M. H. Re: IP Networking Support Stephen Smalley Re: kernel daemons runs in init_t Carsten Grohmann Re: building libsecure.a advice Stephen Smalley Re: kernel daemons runs in init_t Stephen Smalley Re: ssh and fs relabel (new release) Stephen Smalley Re: ipsec access to { sysadm_tty_device_t sysadm_devpts_t } Stephen Smalley Re: Direct logins (via local and ssh) as httpd_admin_r? Stephen Smalley Re: Direct logins (via local and ssh) as httpd_admin_r? Stephen Smalley Re: building libsecure.a advice Russell Coker building libsecure.a advice M. H. what happended to nettop Michael Atighetchi Re: kernel daemons runs in init_t Russell Coker Re: ssh and fs relabel (new release) Russell Coker kernel daemons runs in init_t Carsten Grohmann Re: success story Russell Coker Re: success story Tom makefile patch Russell Coker Re: ssh and fs relabel (new release) Russell Coker Re: success story Russell Coker another small patch Russell Coker Re: Direct logins (via local and ssh) as httpd_admin_r? Russell Coker ssh and fs relabel (new release) Timothy Wood freeswan IP sec patch Russell Coker Re: ipsec access to { sysadm_tty_device_t sysadm_devpts_t } Jesse Pollard RE: ipsec access to { sysadm_tty_device_t sysadm_devpts_t } Jesse Pollard Re: ipsec access to { sysadm_tty_device_t sysadm_devpts_t } Russell Coker Direct logins (via local and ssh) as httpd_admin_r? Mark Müller success story Tom RE: ipsec access to { sysadm_tty_device_t sysadm_devpts_t } Westerman, Mark Re: ipsec access to { sysadm_tty_device_t sysadm_devpts_t } Jesse Pollard Tuesday, 27 August ipsec access to { sysadm_tty_device_t sysadm_devpts_t } Russell Coker Re: new rules for amanda Carsten Grohmann Re: new rules for amanda Russell Coker more patches Russell Coker (no subject) Carsten Grohmann Re: FYI: woody startup messages Russell Coker Re: FYI: woody startup messages Tom Re: devfs change, trivial patches, netscape & x patches Russell Coker Re: FYI: woody startup messages Russell Coker Re: FYI: woody startup messages Stephen Smalley Re: FYI: woody startup messages Stephen Smalley Re: FYI: woody startup messages Tom Re: FYI: woody startup messages Russell Coker Re: devfs change, trivial patches, netscape & x patches Stephen Smalley Monday, 26 August Re: sec. context max size James Morris sec. context max size M. H. Re: devfs change Russell Coker Re: devfs change Brad Chapman Re: devfs change Russell Coker Re: devfs change Brad Chapman netscape & x patches Russell Coker trivial patches Russell Coker devfs change Russell Coker Re: openssh (run_init messages) Stephen Smalley [patch] chkpwd domain Stephen Smalley Re: patch Stephen Smalley Re: mrtg patch Stephen Smalley Re: patch Stephen Smalley Re: cardmgr.te patch Stephen Smalley Re: RADIUS and SNMP patch Stephen Smalley Re: postfix patch Stephen Smalley Re: openssh Timothy Wood openssh (run_init messages) Timothy Wood Re: devfs_t vs device_t Russell Coker Re: openssh Stephen Smalley openssh Timothy Wood Re: Updated Release Stephen Smalley Re: devfs_t vs device_t Stephen Smalley Re: SRCINSTALLDIR Stephen Smalley Re: kernel patches from new release Stephen Smalley Sunday, 25 August patch Russell Coker mrtg patch Russell Coker RADIUS and SNMP patch Russell Coker (no subject) Russell Coker postfix patch Russell Coker devfs_t vs device_t Russell Coker Saturday, 24 August Re: kernel patches from new release Russell Coker SRCINSTALLDIR Russell Coker Updated Release Howard Holm kernel patches from new release Russell Coker Friday, 23 August ipop3d policy david caplan Re: new file contexts Timothy Wood rox file contexts Timothy Wood Re: new file contexts Russell Coker Re: new file contexts Stephen Smalley Re: new file contexts Timothy Wood Re: new file contexts Russell Coker Re: new file contexts Stephen Smalley Re: Obj.: Microsoft knick-knack business : Can we stop this ? (We must !) Russell Coker new file contexts Timothy Wood Obj.: Microsoft knick-knack business : Can we stop this ? (We must !) Robert Schoeni Thursday, 22 August Re: restrict access by user identity Brian May Re: Correct order to become sysadm_r Russell Coker Re: Correct order to become sysadm_r Brad Chapman Re: Correct order to become sysadm_r Russell Coker Correct order to become sysadm_r Brad Chapman Re: restrict access by user identity Russell Coker Re: restrict access by user identity Russell Coker Re: restrict access by user identity Russell Coker Re: RE: NSA moving away from SELinux????? Ed Street Re: New to SELinux M. H. patch for svipw etc Russell Coker Re: restrict access by user identity Stephen Smalley restrict access by user identity M. H. RE: NSA moving away from SELinux????? Wagner, Grant Tuesday, 20 August Re: Latest release Stephen Smalley Re: Latest release Stephen Smalley Re: stripped mount point Stephen Smalley stripped mount point Timothy Wood Latest release A F A 1 W I Re: tcp_socket messages Wayne Salamon RE: New to SELinux Stephen Smalley Re: tcp_socket messages Stephen Smalley Re: Changing the default role/type of a user Russell Coker Re: New to SELinux Stephen Smalley Monday, 19 August Re: Changing the default role/type of a user Brad Chapman Re: type_change rules Brian May Re: Changing the default role/type of a user Russell Coker Changing the default role/type of a user Brad Chapman RE: New to SELinux Westerman, Mark Re: New to SELinux Russell Coker New to SELinux Jeremy Kusnetz tcp_socket messages Russell Coker Re: type_change rules Russell Coker Re: ptrace permissions Stephen Smalley Re: type_change rules Stephen Smalley Re: psidfiles_init errors Stephen Smalley Re: type_change rules Russell Coker Re: type_change rules Stephen Smalley Re: entrypoint permission Stephen Smalley Re: psidfiles_init errors Russell Coker Re: psidfiles_init errors Stephen Smalley Re: psidfiles_init errors Stephen Smalley Re: psidfiles_init errors Russell Coker directory access Russell Coker Re: shadow_t Russell Coker Re: shadow_t Stephen Smalley Sunday, 18 August Re: psidfiles_init errors Russell Coker psidfiles_init errors Brad Chapman type_change rules Russell Coker user_crond_domain attribute Russell Coker Saturday, 17 August Re: entrypoint permission Russell Coker entrypoint permission Brad Chapman Friday, 16 August shadow_t Russell Coker Re: NSA moving away from SELinux????? Russell Coker NSA moving away from SELinux????? Steve Tate Re: Needing some direction jbyrd_at_vspacegroup.com Re: Needing some direction jbyrd_at_vspacegroup.com Re: what is "null" access? Stephen Smalley RE: proposed patch: policy management Stephen Smalley Re: CVS install error Stephen Smalley Re: Needing some direction jbyrd_at_vspacegroup.com Re: Needing some direction jbyrd_at_vspacegroup.com Re: /bin/login Russell Coker Re: /bin/login Stephen Smalley Re: /bin/login Stephen Smalley Thursday, 15 August /bin/login Russell Coker Re: policy file management Russell Coker Re: mysqld rules Russell Coker Re: policy file management Brian May mysqld rules Carsten Grohmann Re: Errors from your policy Russell Coker Errors from your policy Brad Chapman pump.te Russell Coker Needing some direction ... jbyrd_at_vspacegroup.com policy file management Russell Coker RE: proposed patch: policy management Frank Mayer Re: security_t:security compute_av Stephen Smalley Re: SE Linux talk Tom Wednesday, 14 August relabel of socket fails somehow. any ideas? M. H. Problem solved: socket relabel fails M. H. security_t:security compute_av Carsten Grohmann Re: socket_secure fails with "Function not implemented" Wayne Salamon Re: socket_secure fails with "Function not implemented" M. H. logcheck Russell Coker Tuesday, 13 August Re: socket_secure fails with "Function not implemented" Wayne Salamon woody packages, chroot, etc Russell Coker socket_secure fails with "Function not implemented" M. H. ptrace permissions Russell Coker Re: Swollen su_macros.te file Russell Coker Re: Swollen su_macros.te file Brad Chapman Re: Swollen su_macros.te file Russell Coker Monday, 12 August Re: Swollen su_macros.te file Brian May experimental new policy for mail Russell Coker Re: Swollen su_macros.te file Brad Chapman changing open mode of file handle Russell Coker sendmail policy Russell Coker Re: Swollen su_macros.te file Russell Coker Re: depmod errors Russell Coker Re: depmod errors James Morris Saturday, 10 August depmod errors Russell Coker Monday, 12 August Re: Swollen su_macros.te file Brad Chapman Re: security context for temporalily mounted filesystems Carsten Grohmann Re: Swollen su_macros.te file Brian May Re: security context for temporalily mounted filesystems Brian May Sunday, 11 August Re: security context for temporalily mounted filesystems Russell Coker Re: security context for temporalily mounted filesystems Carsten Grohmann SCC Patent David Friedman Re: Swollen su_macros.te file Brad Chapman Re: Swollen su_macros.te file Russell Coker Re: Swollen su_macros.te file Brad Chapman Re: Swollen su_macros.te file Russell Coker Re: Swollen su_macros.te file Brad Chapman Re: Swollen su_macros.te file Russell Coker Swollen su_macros.te file Brad Chapman Re: New Debian packages david kelman Re: security context for temporalily mounted filesystems Russell Coker Re: security context for temporalily mounted filesystems Carsten Grohmann Saturday, 10 August Re: security context for temporalily mounted filesystems Brian May fingerd policy Russell Coker conditional compilation Russell Coker Friday, 9 August Re: A 'Statement of Assurance' on SELinux patents Ben McGinnes ioctl on a pty device Russell Coker Re: problems with fd Russell Coker RE: problems with fd Ryan Bergauer Re: problems with fd Russell Coker RE: problems with fd Ryan Bergauer problems with fd Ryan Bergauer Re: Help required Russell Coker policy patches Russell Coker Help required Samarth Sharma policy_scan.l Russell Coker libsecure/test/Makefile Russell Coker security context for temporalily mounted filesystems Carsten Grohmann (no subject) david caplan (no subject) Samarth Sharma (no subject) Rajesh Joseph (no subject) Rajesh Joseph Thursday, 8 August Re: A 'Statement of Assurance' on SELinux patents Rik van Riel Gentle Reminder Howard Holm Re: A 'Statement of Assurance' on SELinux patents Edward J. Huff chroot policy Russell Coker Re: Console typing frequency authentication Jesse Pollard Console typing frequency authentication Jesse D. Walters Re: Install setfiles manpage Chris Vance Re: A 'Statement of Assurance' on SELinux patents Joshua D. Guttman Re: A 'Statement of Assurance' on SELinux patents Russell Coker (no subject) Russell Coker Re: A 'Statement of Assurance' on SELinux patents Ben McGinnes Re: policy for new user? Russell Coker Re: policy for new user? Wayne Salamon Re: your mail Wayne Salamon RE: adduser?? Frank Mayer policy for new user? Samarth Sharma (no subject) Samarth Sharma Re: new policy Russell Coker new policy Russell Coker Wednesday, 7 August Re: A 'Statement of Assurance' on SELinux patents JW Re: adduser?? Russell Coker RE: adduser?? Frank Mayer Re: A 'Statement of Assurance' on SELinux patents James Griffin RE: adduser?? david caplan Re: adduser?? Russell Coker adduser?? Samarth Sharma Tuesday, 6 August Re: A 'Statement of Assurance' on SELinux patents Ben McGinnes SE Linux talk Russell Coker Re: A 'Statement of Assurance' on SELinux patents Shaun Savage RE: A 'Statement of Assurance' on SELinux patents Ed Street Re: A 'Statement of Assurance' on SELinux patents Russell Coker Re: 2.4.19 lsm kernel patch Russell Coker Re: A 'Statement of Assurance' on SELinux patents Dale Amon Re: New Debian packages Russell Coker Re: A 'Statement of Assurance' on SELinux patents Russell Coker RE: A 'Statement of Assurance' on SELinux patents Ed Street Re: A 'Statement of Assurance' on SELinux patents Russell Coker Monday, 5 August RE: A 'Statement of Assurance' on SELinux patents Ed Street A 'Statement of Assurance' on SELinux patents Erich Allewohl Re: 2.4.19 lsm kernel patch Russell Coker RE: CVS tree make error Westerman, Mark Re: CVS tree make error david caplan CVS tree make error Ryan Bergauer CVS install error Ryan Bergauer RE: updated setools Frank Mayer Re: what is "null" access? Chris Vance Re: what is "null" access? Russell Coker New Debian packages Russell Coker Re: what is "null" access? Chris Vance Re: Security settings for fcron Russell Coker Re: Special directories and links Russell Coker updated setools Frank Mayer Re: Security settings for fcron Carsten Grohmann Special directories and links Carsten Grohmann what is "null" access? Russell Coker Security settings for fcron Russell Coker Saturday, 3 August Re: cups Russell Coker Friday, 2 August Re: postmaster/postgres policy files Russell Coker Re: file_t or root_t Russell Coker postmaster/postgres policy files A Almeida (no subject) Carsten Grohmann Re: rw_dir_file and similar macros Russell Coker file_t or root_t Carsten Grohmann Re: system_r and apm_t Carsten Grohmann (no subject) Richard Mayo rw_dir_file and similar macros Carsten Grohmann symlinks under /tmp Russell Coker Re: system_r and apm_t Russell Coker Re: New SuSE rules -- opt file type Russell Coker Re: New SuSE rules -- opt file type Carsten Grohmann Re: system_r and apm_t Carsten Grohmann Re: system_r and apm_t Russell Coker system_r and apm_t Carsten Grohmann Thursday, 1 August Re: More Samba Russell Coker Re: More Samba Russell Coker RE: More Samba Ryan Bergauer Re: More Samba Russell Coker More Samba Ryan Bergauer Re: New SuSE rules Russell Coker RE: proposed patch: policy management Frank Mayer Re: New SuSE rules Carsten Grohmann Re: New SuSE rules Russell Coker Re: PROBLEM PATCHING THE KERNEL Wayne Salamon Fwd: Re: [SAGE-AU] FW: openssh-3.4p1.tar.gz trojaned Russell Coker New SuSE rules Carsten Grohmann Wednesday, 31 July Re: sshd mods Brian May PROBLEM PATCHING THE KERNEL Nigel Clarke new Debian packages Russell Coker ssh policy Russell Coker sshd mods Russell Coker Problem with install Nigel Clarke anyone using fcron? Russell Coker Tuesday, 30 July RE: proposed patch: policy management Frank Mayer Re: proposed patch: policy management Stephen Smalley Re: proposed patch: policy management Stephen Smalley Re: Message from Secure Computing Tom Monday, 29 July Re: Fwd: Bug#153238: newrole: should be able to run any command, not just shell Brian May RE: building the kernel Menon, Sunanda R Install setfiles manpage Carsten Grohmann Re: building the kernel Stephen Smalley Re: SCC Clint Byrum RE: proposed patch: policy management Frank Mayer proposed patch: policy management Frank Mayer building the kernel Menon, Sunanda R Re: security context of kapmd and others Stephen Smalley security context of kapmd and others Carsten Grohmann Re: Apache on SELinux Michelle Gosselin Re: Apache on SELinux Stephen Smalley SCC Westerman, Mark Re: How to make sftp work? Stephen Smalley Re: run_init Stephen Smalley Re: fileutils Stephen Smalley Re: Fwd: Bug#153238: newrole: should be able to run any command, not just shell Stephen Smalley Re: Apache on SELinux Russell Coker Apache on SELinux giovanni Sunday, 28 July RE: Message from Secure Computing Shaun Savage Re: Message from Secure Computing Edward J. Huff Re: Message from Secure Computing Edward J. Huff Re: Secure Computing statement of assurance Edward J. Huff RE: Re: Secure Computing statement of assurance Westerman, Mark Fwd: Re: Secure Computing statement of assurance Russell Coker Re: Message from Secure Computing Russell Coker RE: Message from Secure Computing Westerman, Mark Re: Message from Secure Computing Edward J. Huff Re: How to make sftp work? Mark Müller Re: IDENTIFIER Brian May Re: Message from Secure Computing Brian May Re: Message from Secure Computing Edward J. Huff Saturday, 27 July Re: Message from Secure Computing Brian May Re: Policy questions Brian May RE: Message from Secure Computing Westerman, Mark Re: Message from Secure Computing Russell Coker Re: Message from Secure Computing david kelman Re: Message from Secure Computing Dale Amon Re: Message from Secure Computing Dale Amon Fwd: Re: SE Linux and patents Russell Coker Re: How to make sftp work? Russell Coker How to make sftp work? Mark Müller Re: Message from Secure Computing Russell Coker Re: Message from Secure Computing Shaun Savage psmisc Russell Coker fileutils Russell Coker Re: Secure Computing statement of assurance Ben McGinnes Re: Secure Computing statement of assurance Russell Coker Re: run_init Russell Coker Re: Secure Computing statement of assurance Ben McGinnes run_init Carsten Grohmann Re: Policy questions Russell Coker Re: Policy questions Russell Coker Re: Policy questions Russell Coker Re: Message from Secure Computing Russell Coker Re: Policy questions Brian May Re: Policy questions Brian May Friday, 26 July Re: Policy questions Brian May Re: more thoughts on the ssh policy Brian May Re: rules debuging Brian May Re: IDENTIFIER Brian May Re: Secure Computing statement of assurance Edward J. Huff Re: Message from Secure Computing Shaun Savage Re: Secure Computing statement of assurance Russell Coker Message from Secure Computing SCC more thoughts on the ssh policy Russell Coker [patch] Re: Policy questions Stephen Smalley [patch] Re: segmentation fault in /tmp Stephen Smalley rules debuging Carsten Grohmann Re: Policy questions Russell Coker Re: Policy changes for policy management Russell Coker RE: Policy changes for policy management Frank Mayer Re: Policy questions Stephen Smalley Re: Attributes vs Macro Stephen Smalley Re: Policy questions Russell Coker Re: Policy changes for policy management Stephen Smalley can_exec_any Russell Coker Re: Policy questions Russell Coker Re: IDENTIFIER Russell Coker Thursday, 25 July Attributes vs Macro Brian May IDENTIFIER Brian May Re: Policy changes for policy management Brian May Policy questions Brian May I know it's a bit off-topic but it should be interesting to you. Russell Coker Policy changes for policy management Frank Mayer Re: directory write denied messages Stephen Smalley Re: default_context Stephen Smalley default_context Russell Coker Re: type_transition init_t xxx_exec_t:process xxx_t Stephen Smalley directory write denied messages Russell Coker type_transition init_t xxx_exec_t:process xxx_t Carsten Grohmann Wednesday, 24 July Re: Fwd: Bug#153238: newrole: should be able to run any command, not just shell Brian May Limited Access to Devices Brian May RE: Ed Street Re: var_log_ksyms_t Stephen Smalley Re: your mail Stephen Smalley (no subject) Russell Coker Re: var_log_ksyms_t Carsten Grohmann (no subject) Richard Mayo Re: Fwd: Bug#153238: newrole: should be able to run any command, not just shell Stephen Smalley Tuesday, 23 July Re: user mount permissions Brian May Re: busybox policy and multicall binaries Rogelio M. Serrano Jr. Re: selinux question Brian May Re: selinux question Russell Coker Fwd: Bug#153238: newrole: should be able to run any command, not just shell Russell Coker Re: busybox policy and multicall binaries Russell Coker Re: SELinux Configuration Question Stephen Smalley SELinux Configuration Question Richard Mayo Re: busybox policy and multicall binaries Rogelio M. Serrano Jr. Re: selinux question Russell Coker Re: selinux question Stephen Smalley Re: selinux question Russell Coker Re: var_log_ksyms_t Stephen Smalley Re: busybox policy and multicall binaries Stephen Smalley Re: busybox policy and multicall binaries Russell Coker Re: user mount permissions Russell Coker Re: policy_src_t Russell Coker busybox policy and multicall binaries Rogelio M. Serrano Jr. Re: Installation question Russell Coker Re: inetd and tcpd services Russell Coker Monday, 22 July var_log_ksyms_t Carsten Grohmann Re: [patch] Re: chattr Stephen Smalley Re: can't log in Stephen Smalley can't log in Stan Osborne Re: [patch] Re: chattr Russell Coker Re: Installation question Stephen Smalley Re: policy_src_t Stephen Smalley Re: default context files Stephen Smalley Re: booting problem Stephen Smalley Re: tripwire Stephen Smalley Sunday, 21 July Installation question Natr Brazell Saturday, 20 July segmentation fault in /tmp Ed Street Friday, 19 July Re: booting problem Charles R. Fuller default context files Frank Mayer policy_src_t Frank Mayer Thursday, 18 July RE: tripwire Ed Street Re: tripwire Shaun Savage tripwire Ryan Bergauer [patch] Re: chattr Stephen Smalley Wednesday, 17 July Re: user mount permissions Stephen Smalley Re: cant gain sysadm_r via ssh Stephen Smalley Re: inetd and tcpd services Stephen Smalley Tuesday, 16 July Re: inetd and tcpd services Rogelio M. Serrano Jr. Re: inetd and tcpd services Paul Krumviede inetd and tcpd services Rogelio M. Serrano Jr. Re: cant gain sysadm_r via ssh Rogelio M. Serrano Jr. user mount permissions Ryan Bergauer Re: Creating Permissions for New Software Stephen Smalley Re: cant gain sysadm_r via ssh Stephen Smalley Creating Permissions for New Software Richard Mayo cant gain sysadm_r via ssh Rogelio M. Serrano Jr. testing sandboxes Shaya Potter Re: XDM with SE Linux Stephen Smalley Re: netfilter Stephen Smalley Monday, 15 July XDM with SE Linux Ryan Emge netfilter Ed Street Re: Fwd: locales Simon Han Re: Fwd: locales Stephen Smalley Re: revising the su decision Jesse Pollard Re: revising the su decision Natr Brazell [patch] general_file_read_access Stephen Smalley Re: Fwd: locales Stephen Smalley Re: currupt policy.11 file Stephen Smalley Re: Compiling a simple policy Stephen Smalley Fwd: locales Russell Coker Re: shellutils Russell Coker Re: currupt policy.11 file Russell Coker Sunday, 14 July RE: shellutils Ed Street shellutils Russell Coker fileutils Russell Coker minor bugfix for vmware.te Russell Coker Saturday, 13 July Re: selinux-policy Brad Chapman Re: selinux-policy Russell Coker Compiling a simple policy Belch Re: revising the su decision] Tom Basic LSM and SE Linux support for Strace Russell Coker Re: revising the su decision Russell Coker Friday, 12 July Re: revising the su decision Russell Coker Re: revising the su decision Russell Coker Re: revising the su decision Dale Amon [patch] file contexts RE fix Stephen Smalley Re: sshd Stephen Smalley sshd Simon Han Re: revising the su decision Tom Re: revising the su decision Natr Brazell Re: [PATCH] atuomatic type transitions for pts in devfs Stephen Smalley Re: chattr Stephen Smalley Re: revising the su decision Jesse Pollard Re: chattr Russell Coker Re: chattr Stephen Smalley chattr Russell Coker Re: revising the su decision Russell Coker Re: revising the su decision Brad Chapman Re: revising the su decision Stephen Smalley Re: revising the su decision Stephen Smalley Re: /etc/resolv.conf Stephen Smalley Re: revising the su decision Simon Han Thursday, 11 July home directory mangling Russell Coker revising the su decision Russell Coker Re: /etc/resolv.conf Russell Coker Re: minilogd.te Russell Coker minilogd.te Brad Chapman web stats Russell Coker Re: RH util build bug? Stephen Smalley RE: dhcpc_t Ed Street RE: sysadm_tty_device_t Stephen Smalley RE: sysadm_tty_device_t Stephen Smalley RE: sysadm_tty_device_t Timothy Wood RH util build bug? David Caplan RE: sysadm_tty_device_t Ed Street RE: sysadm_tty_device_t Timothy Wood Test Post Richard Mayo Re: dhcpc_t Stephen Smalley RE: sysadm_tty_device_t Stephen Smalley RE: sysadm_tty_device_t Ed Street Re: sysadm_tty_device_t Timothy Wood RE: sysadm_tty_device_t Stephen Smalley RE: sysadm_tty_device_t Ed Street dhcpc_t Simon Han RE: sysadm_tty_device_t Ed Street RE: sysadm_tty_device_t Stephen Smalley Re: sysadm_tty_device_t Stephen Smalley RE: sysadm_tty_device_t Ed Street sysadm_tty_device_t Ed Street Re: automatic type transitions for pts in devfs Stephen Smalley Re: automatic type transitions for pts in devfs Debian User Re: automatic type transitions for pts in devfs Stephen Smalley SE play machine Russell Coker Wednesday, 10 July automatic type transitions for pts in devfs Debian User Re: [PATCH] atuomatic type transitions for pts in devfs Stephen Smalley [PATCH] atuomatic type transitions for pts in devfs Debian User Re: audit bug in fd handling Russell Coker Re: Wierdness with lsm 2.5 Stephen Smalley Re: cleaning psidfiles database Russell Coker Wierdness with lsm 2.5 Timothy Wood RE: cleaning psidfiles database Stephen Smalley RE: cleaning psidfiles database Ed Street Re: audit bug in fd handling Stephen Smalley RE: audit bug in fd handling Ed Street Re: audit bug in fd handling Stephen Smalley Re: cleaning psidfiles database Stephen Smalley cleaning psidfiles database Russell Coker audit bug in fd handling Russell Coker Tuesday, 9 July RE: Trivial question bout EXTRAVERSION and install destination Ed Street Re: Trivial question bout EXTRAVERSION and install destination Russell Coker Re: quota and ampd Russell Coker RE: quota and ampd (and one more thing) Stephen Smalley RE: quota and ampd (and one more thing) Ryan Bergauer Re: Is make relabel suposed to be run from policy or or setfiles? JW Monday, 8 July Re: IRC? Russell Coker Re: Make errors from newrole in utils Russell Coker Tuesday, 9 July Re: automatic type transitions for pts in devfs Debian User Re: comparison between SELinux and chroot Jesse Pollard Re: automatic type transitions for pts in devfs Debian User Re: automatic type transitions for pts in devfs Debian User Re: automatic type transitions for pts in devfs Stephen Smalley RE: lsm3 notes Stephen Smalley Re: automatic type transitions for pts in devfs Debian User Re: automatic type transitions for pts in devfs Stephen Smalley RE: lsm3 notes Ed Street Re: automatic type transitions for pts in devfs Debian User Re: automatic type transitions for pts in devfs Stephen Smalley Re: comparison between SELinux and chroot Dale Amon Re: sshd_devpts_t Debian User Re: sshd_devpts_t Stephen Smalley Re: Make relabel problems with rsync and localtime Stephen Smalley automatic type transitions for pts in devfs Debian User Re: lsm3 notes Stephen Smalley Re: comparison between SELinux and chroot Stephen Smalley Re: Is make relabel suposed to be run from policy or or setfiles? Stephen Smalley sshd_devpts_t Debian User Re: quota and ampd Stephen Smalley Re: Names of files in policy/file_contexts/program/ Stephen Smalley comparison between SELinux and chroot Carsten Grohmann Make relabel problems with rsync and localtime JW lsm3 notes Ed Street SOLVED Re: Problems with some of the SuSE-specific settings: Re: contrib branch by way of JW Re: Is make relabel suposed to be run from policy or or setfiles? JW Monday, 8 July Problems with some of the SuSE-specific settings: Re: contrib branch JW Is make relabel suposed to be run from policy or or setfiles? JW RE: quota and ampd Ed Street Trivial question bout EXTRAVERSION and install destination JW Names of files in policy/file_contexts/program/ JW krb.h vs krb5.h JW quota and ampd Ryan Bergauer Re: new LSM ver Stephen Smalley Re: new LSM ver Timothy Wood Sunday, 7 July Re: new packages Russell Coker Monday, 8 July Re: new LSM ver Stephen Smalley Re: new LSM ver Timothy Wood Re: [patch] Re: problem with "-" in libraries Debian User [patch] Re: problem with "-" in libraries Stephen Smalley Re: New user question Stephen Smalley Re: problem with "-" in libraries Stephen Smalley Re: ReiserFS, ext3 and other file systems Stephen Smalley Re: /tmp and others Stephen Smalley Re: new LSM ver Stephen Smalley Re: "Additional Documentation for..." -- where are these? Stephen Smalley (no subject) Carsten Grohmann Well, Make errors for real this time -- in text-utils JW Oops, solved Re: Make errors from newrole in utils by way of JW Make errors from newrole in utils JW New user question JW IRC? JW Sunday, 7 July RE: poweroff problem? Leslie J. French Re: fingerd (was new packages) Russell Coker RE: fingerd (was new packages) Ed Street RE: new packages Ed Street Re: new packages Russell Coker Re: new LSM ver Russell Coker RE: new packages Ed Street Re: type_transition_rule Simon Han Saturday, 6 July RE: new packages Ed Street RE: /tmp and others Ed Street new packages Russell Coker Friday, 5 July Re: TE/DTE Patent issues? Russell Coker Re: type_transition_rule Russell Coker Re: This does not look correct.... Russell Coker Thursday, 4 July Re: /tmp and others Russell Coker Re: named pt2 Russell Coker Saturday, 6 July poweroff problem? Leslie J. French Re: ReiserFS, ext3 and other file systems Carsten Grohmann ReiserFS, ext3 and other file systems JW problem with "-" in libraries Debian User Friday, 5 July "Additional Documentation for..." -- where are these? JW new LSM ver Timothy Wood Re: contrib branch Stephen Smalley [patch] run_init.fc Stephen Smalley contrib branch Carsten Grohmann Re: Re: This does not look correct.... Brad Chapman Re: This does not look correct.... Stephen Smalley Re: Updated Release Stephen Smalley Re: Updated Release Stephen Smalley Re: using genfs_context and cramfs Stephen Smalley Re: type_transition_rule Stephen Smalley Re: Updated Release Stephen Smalley Re: named pt2 Stephen Smalley Sunday, 30 June Re: OLS: Packaging NSA SELinux for Debian Russell Coker Thursday, 4 July BOUNCE selinux@tycho.nsa.gov: Admin request of type /\bchange\b.\baddress\b/ at line 7 owner-selinux_at_tycho.nsa.gov* Re: Re: This does not look correct.... gdsmarshall_at_hushmail.com Re: This does not look correct.... Brad Chapman Re: Updated Release Brad Chapman This does not look correct.... gdsmarshall_at_hushmail.com Re: Updated Release Brad Chapman Re: Updated Release Grant Bayley Re: Updated Release Grant Bayley cramfs policy Debian User using genfs_context and cramfs Debian User Wednesday, 3 July /tmp and others Ed Street type_transition_rule Simon Han named pt2 Timothy Wood named. Timothy Wood Updated Release Howard Holm Re: udp receive Stephen Smalley Re: udp receive Timothy Wood Re: udp receive Stephen Smalley Re: udp receive Stephen Smalley udp receive Timothy Wood Re: IP nfs server in policy/net_contexts Stephen Smalley IP nfs server in policy/net_contexts Carsten Grohmann Tuesday, 2 July Re: SELinux fresh out of the box problems... Stephen Smalley SELinux fresh out of the box problems... Warren Lerner Re: ssh Stephen Smalley ssh Timothy Wood Re: problems with mount Stephen Smalley Monday, 1 July RE: TE/DTE Patent issues? Ed Street RE: TE/DTE Patent issues? Clint Byrum RE: problems with mount Boyne, Patrick J problems with mount Ryan Bergauer RE: TE/DTE Patent issues? Scott Shealy RE: TE/DTE Patent issues? Westerman, Mark Re: /dev/mem error starting X11 Stephen Smalley TE/DTE Patent issues? Clint Byrum /dev/mem error starting X11 Timothy Wood Saturday, 29 June Re: SE Linux patch Russell Coker Re: Major reduction in errors Brad Chapman Re: Major reduction in errors Russell Coker Re: Major reduction in errors Brad Chapman Friday, 28 June Re: Updated OpenSSH Enterprise Internet Solutions LLC Re: Configuration issues on a new installation Stephen Smalley Re: Configuration issues on a new installation Russell Coker Re: Updated OpenSSH Stephen Smalley Re: Updated OpenSSH Stephen Smalley Updated OpenSSH Justin Smith RE: Configuration issues on a new installation Ryan Bergauer Thursday, 27 June Re: initctl create denied Russell Coker Re: Configuration issues on a new installation Russell Coker initctl create denied Debian User RE: Configuration issues on a new installation Ryan Bergauer Re: Configuration issues on a new installation Russell Coker RE: Configuration issues on a new installation Ryan Bergauer Re: Major reduction in errors Russell Coker Re: Major reduction in errors Brad Chapman Re: Major reduction in errors Russell Coker Re: modifying utilities to use libselinux Russell Coker Re: Configuration issues on a new installation Russell Coker Re: errors installing..... Russell Coker Re: Major reduction in errors Brad Chapman RE: Configuration issues on a new installation Stephen Smalley Re: Major reduction in errors Russell Coker Re: Configuration issues on a new installation Russell Coker Re: Configuration issues on a new installation Russell Coker Major reduction in errors Brad Chapman errors installing..... gdsmarshall_at_hushmail.com Re: Configuration issues on a new installation Brad Chapman Re: Configuration issues on a new installation Brad Chapman RE: System.te ? Stephen Smalley RE: System.te ? Michael Nyika Re: Configuration issues on a new installation Russell Coker RE: System.te ? Stephen Smalley RE: System.te ? Michael Nyika Re: Configuration issues on a new installation Russell Coker Re: Re: file system support Russell Coker Re: Type Attribute Declarations Stephen Smalley Re: Configuration issues on a new installation Brad Chapman Re: Type Attribute Declarations Michael Nyika RE: Object Security Classes Stephen Smalley Re: Object Security Classes Stephen Smalley Re: modifying utilities to use libselinux Stephen Smalley RE: Object Security Classes Westerman, Mark Re: Configuration issues on a new installation Dale Amon Re: Object Security Classes Michael Nyika RE: modifying utilities to use libselinux Ed Street Re: modifying utilities to use libselinux Debian User RE: modifying utilities to use libselinux Ed Street Re: Configuration issues on a new installation Tom Re: Re: file system support gdsmarshall_at_hushmail.com RE: Configuration issues on a new installation Ryan Bergauer modifying utilities to use libselinux Debian User Wednesday, 26 June Re: Configuration issues on a new installation Brad Chapman Re: Configuration issues on a new installation Russell Coker Re: Configuration issues on a new installation Brad Chapman Re: sshd bugs etc Stephen Smalley Fwd: Re: OpenSSH 3.3p1 - not functioning as advertised. Russell Coker Re: Configuration issues on a new installation Russell Coker Re: file system support Russell Coker Re: SE Linux loading procedure. Russell Coker RE: SE Linux loading procedure. Oren Abe-P27525 RE: SE Linux loading procedure. Ed Street Re: Configuration issues on a new installation Warren Lerner Re: Configuration issues on a new installation Michael Nyika Re: Configuration issues on a new installation Brad Chapman Re: Configuration issues on a new installation Stephen Smalley Re: Configuration issues on a new installation Michael Nyika Re: Configuration issues on a new installation Brad Chapman Re: SE Linux loading procedure. Russell Coker Re: Configuration issues on a new installation Brad Chapman Tuesday, 25 June Re: SE Linux loading procedure. Russell Coker Wednesday, 26 June Re: Configuration issues on a new installation Stephen Smalley Re: Question Stephen Smalley Re: Configuration issues on a new installation Michael Nyika Tuesday, 25 June Re: SE Linux loading procedure. david kelman Configuration issues on a new installation Brad Chapman RE: file system support Ryan Bergauer file system support Ed Street Question Boyne, Patrick J Re: Latest patches Russell Coker Latest patches Russell Coker sshd bugs etc Russell Coker Re: Default policy under debian Russell Coker Re: libsecure fails to compile Russell Coker Re: macros like dir_file_class_set Stephen Smalley Re: libsecure fails to compile (fwd) Stephen Smalley macros like dir_file_class_set Russell Coker libsecure fails to compile gdsmarshall_at_hushmail.com Monday, 24 June Re: ichsid Stephen Smalley Re: ichsid Stephen Smalley Re: SE Linux loading procedure. Stephen Smalley Re: ichsid Stephen Smalley Re: compressed policy DB Stephen Smalley Re: Default policy under debian Stephen Smalley Re: role allow rules Stephen Smalley policy update script Russell Coker Friday, 21 June Default policy under debian Ed Street Re: role allow rules Russell Coker SE Linux loading procedure. Oren Abe-P27525 Re: error Stephen Smalley Re: error Stephen Smalley Re: error Russell Coker error Russell Coker Re: selinux cramfs Debian User Re: selinux cramfs Russell Coker Re: selinux cramfs Debian User Re: selinux cramfs Stephen Smalley Re: selinux cramfs Stephen Smalley Re: selinux cramfs Russell Coker Re: selinux cramfs Debian User Re: uclibc and selinux Russell Coker Re: selinux cramfs Russell Coker selinux cramfs Debian User Thursday, 20 June Re: uclibc and selinux Admissions Office Re: uclibc and selinux Russell Coker Re: new macro in users.te Stephen Smalley Re: new macro in users.te Russell Coker Re: TR: MLS changes (isn't understandable) Stephen Smalley Re: uclibc and selinux Stephen Smalley Re: new macro in users.te Stephen Smalley Re: fd use rules Stephen Smalley Re: iptables Stephen Smalley new macro in users.te Russell Coker Re: new policy changes Russell Coker Wednesday, 19 June Re: new policy changes Gregory Ade Re: RH 7.3 and NSA Secure Linux Florin Andrei Re: new policy changes Russell Coker Re: new policy changes Stephen Smalley Re: new policy changes Russell Coker new policy changes Russell Coker irc.openprojects.net Russell Coker Re: oops Russell Coker Tuesday, 18 June Re: oops Russell Coker iptables Russell Coker Re: oops Eric Johnson Re: oops Russell Coker Re: General Linux Help Needed Thomas Sjögren Monday, 17 June I think this is SCC patent if anyone is interested in reading it... Scott Shealy Re: AVC Messages Russell Coker Re: General Linux Help Needed Hans Reiser Re: AVC Messages Russell Coker Re: AVC Messages Stephen Smalley RE: Patent Ryan Bergauer Re: oops Russell Coker RE: Regarding the Type Enforcement Licensing Discussion Westerman, Mark Re: General Linux Help Needed Noah silva AVC Messages Warren Lerner Re: To confusing.... Admissions Office Re: Patent Russell Coker General Linux Help Needed Betz, John TR: MLS changes (isn't understandable) Vanuxem gregory Sunday, 16 June RE: MLS changes Vanuxem gregory oops Russell Coker fd use rules Russell Coker Re: grsec Russell Coker Friday, 14 June Re: What is the story on patents and SELinux? richard offer Re: What is the story on patents and SELinux? Russell Coker Going OT (was Re: What is the story on patents and SELinux?) James Griffin Re: What is the story on patents and SELinux? Russell Coker Patent ? Tom What is the story on patents and SELinux? Robert Hartley uclibc and selinux Debian User Thursday, 13 June ichsid Russell Coker Re: XFS and LSM Russell Coker Re: XFS and LSM Russell Coker Re: XFS and LSM Stephen Smalley Re: XFS and LSM Stephen Smalley Re: XFS and LSM Russell Coker Tuesday, 8 July Re: XFS and LSM Ryan Emge Thursday, 13 June RE: IGMP being blocked Ed Street Re: IGMP being blocked Stephen Smalley Re: Are there any problems? Stephen Smalley Re: XFS and LSM Stephen Smalley Re: XFS and LSM Russell Coker IGMP being blocked Russell Coker Are there any problems? giovanni Wednesday, 12 June Re: mingetty on SuSE Carsten Grohmann Monday, 10 June RE: auditing etc Boyne, Patrick J Re: BUGS for mlstrusted* Russell Coker Re: mingetty on SuSE Stephen Smalley Re: auditing etc Stephen Smalley Re: multiple user roles/domains Stephen Smalley Re: BUGS for mlstrusted* Stephen Smalley mingetty on SuSE Carsten Grohmann Sunday, 9 June RE: auditing etc Westerman, Mark RE: auditing etc Leslie J. French auditing etc Russell Coker multiple user roles/domains Russell Coker Saturday, 8 June SE Linux tutorial offer for Linux Kongress Russell Coker /boot Russell Coker Re: Announce: Project to port SE Linux to SuSE 8.0 Russell Coker Friday, 7 June Re: Regarding the Type Enforcement Licensing Discussion Kylus BUGS for mlstrusted* Vanuxem grégory Re: Regarding the Type Enforcement Licensing Discussion Don Marti RE: Regarding the Type Enforcement Licensing Discussion Westerman, Mark RE: Regarding the Type Enforcement Licensing Discussion Westerman, Mark Re: SELinux to GPL or not to GPL forrest whitcher Re: SE Linux & Education Russell Coker Thursday, 6 June RE: Sorry, read this one: Re: SELinux Dumb Questions David Caplan amanda.te and amanda.fc Carsten Grohmann Re: [patch] Re: 2 checkpolicy bugs Stephen Smalley Re: [patch] Re: auditdeny is painful Stephen Smalley Re: Announce: Project to port SE Linux to SuSE 8.0 Tom Wednesday, 5 June Re: [patch] Re: 2 checkpolicy bugs Russell Coker Re: [patch] Re: auditdeny is painful Russell Coker Re: Announce: Project to port SE Linux to SuSE 8.0 Russell Coker Re: Open Question to the NSA & The List John Summerfield Re: sendmail.fc and RH 7.3 John Summerfield Re: Sorry, read this one: Re: SELinux Dumb Questions Ben McGinnes Re: Open Question to the NSA & The List Admissions Office RE: Sorry, read this one: Re: SELinux Dumb Questions McFadden, Ken RE: Sorry, read this one: Re: SELinux Dumb Questions Answered Westerman, Mark Re: Open Question to the NSA & The List Dale Amon RE: Sorry, read this one: Re: SELinux Dumb Questions McFadden, Ken RE: Sorry, read this one: Re: SELinux Dumb Questions Justin Smith Re: Sorry, read this one: Re: SELinux Dumb Questions Tom re:Open Question to the NSA & The List Admissions Office RE: Sorry, read this one: Re: SELinux Dumb Questions McFadden, Ken sendmail.fc and RH 7.3 Justin Smith Re: Sorry, read this one: Re: SELinux Dumb Questions John Summerfield [patch] Re: mini policy for initrd Stephen Smalley Re: new LSM release Stephen Smalley Re: [patch] Re: auditdeny is painful Justin Smith Re: RH 7.3 and NSA Secure Linux Justin Smith Re: Sorry, read this one: Re: SELinux Dumb Questions Tom Re: Sorry, read this one: Re: SELinux Dumb Questions Tom Re: Outside observer comments Tom Re: Outside Observer Comments Paul Wolfson Friday, 4 July SE Linux & Education Ryan Emge Wednesday, 5 June Re: Outside observer comments Russell Coker RE: SELinux Dumb Questions Ed Street new LSM release Russell Coker Re: Outside observer comments JW Tuesday, 4 June Re: SELinux to GPL or not to GPL Admissions Office Re: Sorry, read this one: Re: SELinux Dumb Questions Admissions Office Re: Outside observer comments Russell Coker Re: Sorry, read this one: Re: SELinux Dumb Questions Russell Coker Outside observer comments Paul Wolfson Re: SELinux Dumb Questions Admissions Office Re: Sorry, read this one: Re: SELinux Dumb Questions Admissions Office Re: SELinux Dumb Questions Dale Amon RE: SELinux Dumb Questions Roland.Jones_at_nokia.com RE: Sorry, read this one: Re: SELinux Dumb Questions McFadden, Ken RE: Sorry, read this one: Re: SELinux Dumb Questions McFadden, Ken Re: Sorry, read this one: Re: SELinux Dumb Questions Admissions Office Re: Sorry, read this one: Re: SELinux Dumb Questions Russell Coker Re: SELinux Dumb Questions Russell Coker Sorry, read this one: Re: SELinux Dumb Questions by way of JW Re: SELinux Dumb Questions JW [patch] Re: auditdeny is painful Stephen Smalley RE: SELinux RPMs + Red Hat installer Florin Andrei RE: SELinux RPMs + Red Hat installer Westerman, Mark Re: MLS changes Stephen Smalley MLS changes Vanuxem gregory RE: SELinux RPMs + Red Hat installer Westerman, Mark Re: auditdeny is painful Russell Coker Re: Your debain install Russell Coker Re: auditdeny is painful Stephen Smalley Re: Mini-cd's Russell Coker Monday, 3 June Mini-cd's Ed Street SELinux RPMs + Red Hat installer Florin Andrei Re: Updated Release Russell Coker auditdeny is painful Russell Coker Re: Mirror Offer Admissions Office Re: Mirror Offer Stephen Smalley Re: Mirror Offer Russell Coker Mirror Offer Admissions Office LinuxTag Russell Coker Re: SELinux Dumb Questions Admissions Office Re: SELinux Dumb Questions Russell Coker Re: Updated Release Stephen Smalley RE: SELinux Dumb Questions Westerman, Mark Re: SELinux Dumb Questions Admissions Office Re: Updated Release Stephen Smalley Re: SE-Linux on SuSE Carsten Grohmann Sunday, 2 June domain_auto_trans_read() macro Russell Coker Saturday, 1 June compressed policy DB Russell Coker Re: Updated Release Russell Coker Re: How to go about mixing kernel patches... Russell Coker Friday, 31 May How to go about mixing kernel patches... JW Announce: Project to port SE Linux to SuSE 8.0 JW Updated Release Howard Holm [patch] Re: 2 checkpolicy bugs Stephen Smalley bind and SE Linux Russell Coker Thursday, 30 May Re: System-wide Access Control: how to go about it Russell Coker Wednesday, 29 May Re: Proposal: install policy.conf Joshua D. Guttman Re: setuid problem Stephen Smalley Re: deficiency in logging in enforcing mode Stephen Smalley deficiency in logging in enforcing mode Russell Coker Tuesday, 28 May Re: setuid problem vishwakarma singh RE: Proposal: install policy.conf Frank Mayer Re: Proposal: install policy.conf Russell Coker Re: devfs mysterious relabelling Stephen Smalley Re: devfs mysterious relabelling (fwd) Stephen Smalley RE: Policy creation RFC Trent Jaeger SE-Linux on SuSE JW Re: setuid problem Stephen Smalley Re: RH cds from RH Linux 7.2 Bible Unlimited Ed. Stephen Smalley RE: Policy creation RFC Stephen Smalley Re: mini policy for initrd Stephen Smalley Re: Proposal: install policy.conf Stephen Smalley Re: strange capability problem Stephen Smalley Saturday, 25 May Re: Proposal: install policy.conf Russell Coker Tuesday, 28 May Re: devfs mysterious relabelling Russell Coker Re: devfs mysterious relabelling Stephen Smalley RE: 2 checkpolicy bugs Stephen Smalley Re: can_tcp_connect_to() macro Stephen Smalley Sunday, 26 May Re: new Debian package Russell Coker Monday, 27 May setuid problem vishwakarma singh tmp_domain() Russell Coker Fwd: kmail socket Russell Coker Sunday, 26 May Re: new Debian package Debian User Re: RH cds from RH Linux 7.2 Bible Unlimited Ed. Tom RH cds from RH Linux 7.2 Bible Unlimited Ed. Thomas G Land Re: can_tcp_connect_to() macro Russell Coker Re: can_tcp_connect_to() macro Tom controlling policy at a high level Russell Coker can_tcp_connect_to() macro Russell Coker Re: new Debian package Russell Coker Saturday, 25 May Re: new Debian package Debian User new Debian package Russell Coker ACPI Russell Coker Friday, 24 May devfs mysterious relabelling Russell Coker Natural representation of policy.conf structures...? Patrick Henry RE: Proposal: install policy.conf Frank Mayer RE: Proposal: install policy.conf Westerman, Mark Re: 2 checkpolicy bugs Stephen Smalley Proposal: install policy.conf Frank Mayer Re: signal permissions Stephen Smalley Re: Is this a module bug? Stephen Smalley Re: Panic on rebooting, Redhat 7.3, 2 May SELinux Stephen Smalley user tool, updated apol Frank Mayer RE: 2 checkpolicy bugs David Caplan mini policy for initrd Russell Coker 2 checkpolicy bugs Russell Coker Thursday, 23 May Re: Is this a module bug? James Morris strange capability problem Russell Coker Redhat 7.3: sendmail.fc Justin Smith Re: boot.msg James Morris boot.msg Carsten Grohmann signal permissions Russell Coker Wednesday, 22 May Re: Is this a module bug? Russell Coker Re: Policy creation RFC Ian Sollars Is this a module bug? Russell Coker Tuesday, 21 May Re: Policy creation RFC Amy L Herzog RE: Policy creation RFC Trent Jaeger Panic on rebooting, Redhat 7.3, 2 May SELinux Justin Smith RedHat 7.3, 2 May 2002 Release of SELinux Justin Smith Redhat 7.3 Justin Smith Monday, 20 May Followup to RedHat 7.3 Justin Smith RedHat 7.3 Justin Smith RE: Policy creation RFC Frank Mayer Re: Policy creation RFC Tom RE: Policy creation RFC Westerman, Mark Policy creation RFC Ian Sollars RedHat 7.3 Vernon Michael Sunday, 19 May Re: .journal Russell Coker Thursday, 16 May [patch] security_get_sids Stephen Smalley Re: enforcing mode Stephen Smalley Wednesday, 15 May Re: avtab: out of memory Carsten Grohmann Re: avtab: out of memory Stephen Smalley Tuesday, 14 May Re: setfiles -q option? Stephen Smalley Re: run_init and chdir() Stephen Smalley Re: avtab: out of memory Stephen Smalley avtab: out of memory Carsten Grohmann Re: 2002050211 Hacko Monday, 13 May Re: .journal Stephen Smalley .journal Carsten Grohmann Friday, 10 May 2002050211 Russell Coker Thursday, 9 May Re: new selinux install Stephen Smalley Re: setfiles -q option? Stephen Smalley Re: new selinux install Stephen Smalley Re: kmod.te Stephen Smalley Re: ppp Stephen Smalley new selinux install Davies, James E Re: ppp Russell Coker Re: kmod.te Russell Coker setfiles -q option? Russell Coker Wednesday, 8 May Re: ppp Stephen Smalley Tuesday, 7 May Re: ppp Russell Coker Re: ppp Stephen Smalley Re: run_init and chdir() Stephen Smalley run_init and chdir() Russell Coker Re: ppp Russell Coker Monday, 6 May Re: ppp John Summerfield Re: devfs systems and no devfsd Russell Coker selinux-small doc/ Russell Coker ppp Russell Coker Re: context for /dev/.devfsd? Stephen Smalley Re: devfs systems and no devfsd Stephen Smalley devfs systems and no devfsd Debian User Re: Would like to load SELinux..... Stephen Smalley Re: preferred way to configure devfs contexts Stephen Smalley Re: Would like to load SELinux..... Stephen Smalley Re: preferred way to configure devfs contexts Russell Coker Sunday, 5 May preferred way to configure devfs contexts Debian User Saturday, 4 May Re: context for /dev/.devfsd? Russell Coker Friday, 3 May Would like to load SELinux..... McFadden, Ken context for /dev/.devfsd? Debian User Re: Updated Release Stephen Smalley Re: kmod.te Stephen Smalley Re: kmod.te Stephen Smalley Re: why is this needed? Stephen Smalley Re: Updated Release Grant Bayley Thursday, 2 May kmod.te Russell Coker why is this needed? Russell Coker Updated Release Howard Holm Policy question Reino Wallin Wednesday, 1 May Installing lsm-2.4 Tho Re: Question about installing LSM-2.4 Stephen Smalley Question about installing LSM-2.4 Tho Re: successfull avc_toggle Stephen Smalley Re: boot messages and mount Stephen Smalley Re: Security Context of nscd_socket Stephen Smalley Re: help: about boot message Stephen Smalley Re: cant login after running avc_toggle Stephen Smalley /usr/bin/checkpolicy ? richard offer Tuesday, 30 April successfull avc_toggle Debian User Re: help: about boot message f980215 cant login after running avc_toggle Debian User RE: help: about boot message Westerman, Mark Security Context of nscd_socket Carsten Grohmann Monday, 29 April boot messages and mount f980215 Saturday, 27 April help: about boot message f980215 Monday, 29 April RE: insmod Stephen Smalley RE: insmod Westerman, Mark Re: insmod Stephen Smalley Re: insmod Stephen Smalley Re: insmod Russell Coker insmod Westerman, Mark Re: how to hide one file or one directory Dale Amon dealing with file SIDs in packages Russell Coker Re: how to hide one file or one directory Stephen Smalley Re: "use" Russell Coker Re: "use" Stephen Smalley Re: selinux system from scratch Russell Coker how to hide one file or one directory f980215 selinux system from scratch Debian User Sunday, 28 April Debian SE Linux support Russell Coker "use" Russell Coker RE: enforcing mode Westerman, Mark Saturday, 27 April Re: enforcing mode Russell Coker Friday, 26 April Re: new SE Linux release Howard Holm RE: enforcing mode Westerman, Mark Re: enforcing mode Stephen Smalley enforcing mode Carsten Grohmann Policy Distribution Program. Westerman, Mark Re: crond_domain() Stephen Smalley new SE Linux release Russell Coker Re: SELinux RPM Version Russell Coker Re: Debian & NSA SELinux Russell Coker Thursday, 25 April crond_domain() Russell Coker RE: newrules Reino Wallin net_contexts Russell Coker A different policy analyzer/browser... Steve Tate Re: SELinux RPM Version John Summerfield RE: newrules Westerman, Mark Re: newrules Russell Coker Firewall Policy - thoughts Reino Wallin RE: newrules Westerman, Mark Re: newrules Russell Coker SELinux RPM Westerman, Mark Re: newrules Russell Coker Re: SELinux RPM Version Reino Wallin Configuring the SELinux Policy Stephen Smalley Re: new Debian package Russell Coker RE: SELinux RPM Version Westerman, Mark Re: new Debian package Stephen Smalley Re: SELinux RPM Version Russell Coker Re: new Debian package Russell Coker RE: Install SELinux RPM Westerman, Mark RE: Install SELinux RPM Westerman, Mark RE: SELinux RPM Version Westerman, Mark RE: Install SELinux RPM Westerman, Mark Re: NSA Web Site - finally available! Robert Hartley Install SELinux RPM f980215 Wednesday, 24 April Re: SELinux RPM Version Russell Coker new Debian package Russell Coker Re: SELinux RPM Version Reino Wallin Re: your mail Stephen Smalley (no subject) Debian User Re: How to fix configuration Russell Coker Re: How to fix configuration Stephen Smalley SELinux RPM Westerman, Mark How to fix configuration Debian User Re: split admins Tom Re: split admins Stephen Smalley Re: split admins Stephen Smalley split admins Tom Re: xserver_domain(xdm) Stephen Smalley RE: SELinux RPM Version Stephen Smalley RE: SELinux RPM Version Westerman, Mark RE: SELinux RPM Version Stephen Smalley Re: iptables err Stephen Smalley RE: SELinux RPM Version Westerman, Mark Re: SELinux RPM Version Russell Coker Re: SELinux RPM Version Russell Coker iptables err Reino Wallin Tuesday, 23 April xserver_domain(xdm) Russell Coker RE: SELinux RPM Version Reino Wallin Re: named.te Russell Coker RE: SELinux RPM Version Westerman, Mark Re: SELinux RPM Version Reino Wallin [patch] avoid deadlock in task_setscheduler Stephen Smalley [patch] alloc_security/free_security locking fix Stephen Smalley Re: boot loader Stephen Smalley Re: boot loader Russell Coker Re: boot loader Tom Re: NSA Web Site - available? Howard Holm named.te Russell Coker Re: boot loader Russell Coker Re: SELinux RPM Version Russell Coker RE: SELinux RPM Version Westerman, Mark Re: NSA Web Site - available? Stephen Smalley Re: boot loader Tom Re: boot loader Russell Coker Re: SELinux RPM Version Dale Amon Re: boot loader Tom Re: boot loader Tom Monday, 22 April Re: SELinux RPM Version Howard Holm Re: NSA Web Site - available? webmaster_at_web-tricks.net Re: boot loader Russell Coker Re: boot loader Stephen Smalley Re: boot loader Russell Coker Re: SELinux RPM Version Russell Coker Re: SELinux RPM Version Russell Coker Re: SELinux RPM Version Russell Coker Re: boot loader Stephen Smalley Re: boot loader Russell Coker NSA Web Site - available? Chad Nantais Re: nested {} Stephen Smalley Re: SELinux RPM Version Tom RE: SELinux RPM Version Westerman, Mark RE: boot loader Westerman, Mark RE: SELinux RPM Version Westerman, Mark Re: boot loader Stephen Smalley Saturday, 20 April Re: boot loader Russell Coker Re: boot loader Ivan Pulleyn boot loader Russell Coker Re: SELinux RPM Version Russell Coker nested {} Russell Coker Friday, 19 April Re: SELinux RPM Version Howard Holm Re: SELinux RPM Version Russell Coker Re: policy "bloat" ? Russell Coker Re: Fwd: Re: setfiles patch Russell Coker Re: db conflict ? Stephen Smalley SELinux RPM Version Westerman, Mark Re: policy "bloat" ? Russell Coker Re: policy "bloat" ? Tom Re: initrc question and initrc+proftpd patch Russell Coker Re: Fwd: Re: setfiles patch Stephen Smalley Re: init and sigchld Russell Coker Re: init and sigchld Stephen Smalley Re: initrc question and initrc+proftpd patch Tom policy "bloat" ? Tom Re: devfsd module Stephen Smalley RE: Generic SELinux Package Westerman, Mark Re: Generic SELinux Package Stephen Smalley Re: policy question Stephen Smalley Re: initrc question and initrc+proftpd patch Stephen Smalley Re: initrc question and initrc+proftpd patch Russell Coker Re: initrc question and initrc+proftpd patch Tom initrc question and initrc+proftpd patch Tom Re: initrc question and initrc+proftpd patch Stephen Smalley Re: policy question Tom Re: policy question Russell Coker Re: policy question Tom Re: policy question Tom Thursday, 18 April Re: policy question Russell Coker Re: policy question Russell Coker Re: policy question Tom Re: policy question Tom Re: policy question Russell Coker Re: policy question Russell Coker updated apol tool with GUI Frank Mayer Re: Generic SELinux Package Russell Coker Re: every.te Stephen Smalley every.te Russell Coker RE: Generic SELinux Package Westerman, Mark Re: policy question Tom Re: policy question Tom Generic SELinux Package Westerman, Mark Re: policy question Russell Coker Re: db conflict ? Russell Coker Re: devfsd module Russell Coker Re: policy question Stephen Smalley Re: policy question Stephen Smalley Re: policy question Tom Re: policy files Stephen Smalley Re: devfsd module Stephen Smalley Re: db conflict ? Stephen Smalley Re: policy question Russell Coker Fwd: Re: setfiles patch Russell Coker Re: setfiles patch Russell Coker Re: init and sigchld Russell Coker Re: init and sigchld Stephen Smalley Re: policy question Tom Re: setfiles patch Stephen Smalley init and sigchld Russell Coker Re: policy question Russell Coker policy question Tom Wednesday, 17 April setfiles patch Russell Coker Re: what's wrong this this rule? Stephen Smalley what's wrong this this rule? Russell Coker Tuesday, 16 April Re: Fwd: Re: addition for xdm.te Russell Coker Re: Fwd: Re: addition for xdm.te Russell Coker Re: Fwd: Re: addition for xdm.te Stephen Smalley Re: idea for run_init Stephen Smalley [patch] Bug fix for AVC Stephen Smalley Fwd: Re: addition for xdm.te Russell Coker policy files Russell Coker devfsd module Russell Coker server ports Russell Coker idea for run_init Russell Coker Monday, 15 April new debian SE Linux packages Russell Coker Re: db conflict ? Dale Amon RE: db conflict ? Westerman, Mark Re: db conflict ? Howard Holm Re: db conflict ? Howard Holm Re: setfiles verbosity Stephen Smalley Re: network policy problems Stephen Smalley Sunday, 14 April network policy problems Russell Coker setfiles verbosity Russell Coker Friday, 12 April Re: db conflict ? Russell Coker RE: db conflict ? Westerman, Mark Re: db conflict ? Howard Holm Re: db conflict ? Howard Holm Re: db conflict ? Russell Coker Re: db conflict ? Russell Coker RE: db conflict ? Stephen Smalley [patch] Re: db conflict ? Stephen Smalley Re: How can I change the rols? Stephen Smalley Re: Stat compile error. Stephen Smalley How can I change the rols? Sung Kim Stat compile error. Sung Kim RE: db conflict ? Westerman, Mark RE: db conflict ? Stephen Smalley Re: db conflict ? Russell Coker Re: db conflict ? Stephen Smalley RE: db conflict ? Westerman, Mark Re: db conflict ? Tom RE: db conflict ? Westerman, Mark RE: db conflict ? Westerman, Mark RE: db conflict ? Stephen Smalley Re: db conflict ? Stephen Smalley Re: db conflict ? Stephen Smalley Re: db conflict ? Russell Coker Re: db conflict ? Howard Holm Re: db conflict ? Tom Re: db conflict ? Stephen Smalley Re: db conflict ? Russell Coker Re: db conflict ? Tom Re: db conflict ? Russell Coker Re: db conflict ? Russell Coker Re: db conflict ? Stephen Smalley Re: db conflict ? Tom Re: db conflict ? Tom Re: db conflict ? Tom Re: db conflict ? Stephen Smalley Re: db conflict ? Russell Coker Re: db conflict ? Russell Coker Re: db conflict ? Stephen Smalley Re: db conflict ? Stephen Smalley Re: db conflict ? Tom Re: db conflict ? Russell Coker Re: db conflict ? Stephen Smalley Re: db conflict ? Russell Coker Re: db conflict ? Russell Coker Re: db conflict ? Stephen Smalley Re: db conflict ? Stephen Smalley Re: Compile error with Download 2.4 LSM-based Prototype (stable, recommended) Stephen Smalley Re: db conflict ? Tom Re: Compile error with Download 2.4 LSM-based Prototype (stable, recommended) Stephen Smalley Re: db conflict ? Russell Coker db conflict ? Tom Re: Compile error with Download 2.4 LSM-based Prototype (stable, recommended) James Morris Thursday, 11 April Compile error with Download 2.4 LSM-based Prototype (stable, recommended) Sung Kim Firewall Policy 0.11 Reino Wallin Tuesday, 9 April Re: policy white papers Stephen Smalley Re: policy white papers Stephen Smalley Monday, 8 April policy white papers David Caplan Re: help: install selinux Stephen Smalley Saturday, 6 April help: install selinux f980215 Monday, 8 April RE: SELinux in VMWare McFarland, David M. RE: SELinux in VMWare Westerman, Mark SELinux in VMWare McFarland, David M. Wednesday, 3 April Re: [Fwd: Re: Policy] Russell Coker [Fwd: Re: Policy] Gregory Ade Re: Policy Russell Coker Re: Policy Dale Amon Re: Policy Howard Holm Re: Policy Russell Coker Re: more man page stuff Stephen Smalley RE: Policy Westerman, Mark Re: Policy Russell Coker Policy Westerman, Mark Tuesday, 2 April GDM Westerman, Mark Re: Problem with newrole && \|\| login.c Stephen Smalley Monday, 1 April Problem with newrole && \|\| login.c belef24_at_ift.ulaval.ca Re: Troubles with 2.4.18 kernel Stephen Smalley Re: Troubles with 2.4.18 kernel Russell Coker Re: Troubles with 2.4.18 kernel Stephen Smalley Sunday, 31 March package selinux is in Debian! Russell Coker Friday, 29 March more man page stuff Russell Coker setfiles(8) Russell Coker dictd and gatekeeper sample policy Russell Coker Thursday, 28 March Re: setfiles - patch Russell Coker Re: Troubles with 2.4.18 kernel Russell Coker setfiles - patch Russell Coker Re: Troubles with 2.4.18 kernel Stephen Smalley Troubles with 2.4.18 kernel Walker, Jason kernel compilation on mandrake John Doe SELinux speakers circuit Tony Stanco Re: Java intragration Jesse Pollard Re: Java intragration Tom Re: LD problems Russell Coker Re: LD problems Stephen Smalley Re: Java intragration Russell Coker Re: SE support in tar 1.3.25? Stephen Smalley Re: Java intragration Stephen Smalley Re: Documentation Standard Stephen Smalley LD problems John Doe Re: Java intragration Tom Documentation Standard John Doe Java intragration R2-Q2 Wednesday, 27 March SE support in tar 1.3.25? Russell Coker Re: Forwarding X connections using ssh Stephen Smalley Forwarding X connections using ssh Justin Smith Re: newrole passwords (Was: Fractal Based Encryption) Stephen Smalley Re: newrole passwords (Was: Fractal Based Encryption) Stephen Smalley Re: Fractal Based Encryption Russell Coker Re: Fractal Based Encryption Stephen Smalley Re: Fractal Based Encryption Russell Coker Fractal Based Encryption R2-Q2 Tuesday, 26 March RE: SMP mode? Stephen Smalley RE: SMP mode? Stephen Smalley Re: bug in checkpolicy Stephen Smalley Re: /dev/null and /dev/zero Stephen Smalley Re: talks about SE Linux Charles Levert (LMC) Re: talks about SE Linux Russell Coker Re: talks about SE Linux Roberto Nibali Monday, 25 March talks about SE Linux Russell Coker multiple programs with the same file (sendmail) Russell Coker RE: SMP mode? Leslie J. French Re: does bin_t vs sbin_t really make sense? Stephen Smalley Re: Mix and Match 2: relabel problems Stephen Smalley Re: Mix and Match 2: relabel problems Dale Amon Re: Location of policy rules Stephen Smalley RE: SMP mode? Stephen Smalley Re: strange failure Stephen Smalley Re: Mix and Match 2: relabel problems Dale Amon Re: Mix and Match 2: relabel problems Russell Coker Sunday, 24 March Re: Mix and Match 2: relabel problems Dale Amon Re: Mix and Match problems Russell Coker macros for UID lookups and login Russell Coker Re: Mix and Match 2: relabel problems Russell Coker /dev/null and /dev/zero Russell Coker ldconfig policy Russell Coker bug in checkpolicy Russell Coker Mix and Match 2: relabel problems Dale Amon Mix and Match problems Dale Amon Saturday, 23 March Location of policy rules Leslie J. French RE: SMP mode? Leslie J. French Friday, 22 March strange failure Russell Coker new macro suggestion Russell Coker sub-domains and chroot Russell Coker gpg te Russell Coker Re: netscape Stephen Smalley Re: netscape Stephen Smalley netscape Russell Coker Re: package configuration (for dpkg - rpm will have the same issues) Russell Coker Re: package configuration (for dpkg - rpm will have the same issues) Stephen Smalley Re: package configuration (for dpkg - rpm will have the same issues) Dale Amon Thursday, 21 March Re: ntp policy Russell Coker does bin_t vs sbin_t really make sense? Russell Coker Re: addition for xdm.te Russell Coker Re: addition for xdm.te Stephen Smalley Re: ntp policy Stephen Smalley Re: addition for xdm.te Stephen Smalley Re: uses_shlib Stephen Smalley Re: Debian file_contexts needed Russell Coker Re: Getdate error Dale Amon Debian file_contexts needed Dale Amon Re: addition for xdm.te Russell Coker Re: addition for xdm.te Stephen Smalley my latest efforts for dhcp client and server Russell Coker my latest effort at a devfsd policy Russell Coker Re: Getdate error Stephen Smalley addition for xdm.te Russell Coker Re: Getdate error Dale Amon te for courier-pop and courier-imap Russell Coker Getdate error Dale Amon Wednesday, 20 March Re: Linux External Security Manager DSL Mail Address Re: uses_shlib Russell Coker Re: ntp policy Russell Coker Re: Linux External Security Manager Russell Coker Re: ntp policy Stephen Smalley Re: ntp policy Stephen Smalley Re: uses_shlib Stephen Smalley RE: SMP mode? Stephen Smalley RE: SMP mode? Westerman, Mark Linux External Security Manager Myers, Robert RE: SMP mode? Leslie J. French Re: SMP mode? Stephen Smalley SMP mode? Leslie J. French Re: package configuration (for dpkg - rpm will have the same issues) Stephen Smalley Re: package configuration (for dpkg - rpm will have the same issues) Russell Coker Re: file_contexts Russell Coker Re: package configuration (for dpkg - rpm will have the same issues) Russell Coker Re: package configuration (for dpkg - rpm will have the same issues) Stephen Smalley Re: kernel Make Stephen Smalley Re: general_file_read_access Stephen Smalley Re: file_contexts Stephen Smalley Re: package configuration (for dpkg - rpm will have the same issues) Shaun Savage Re: package configuration (for dpkg - rpm will have the same issues) Russell Coker ntp policy Russell Coker Re: package configuration (for dpkg - rpm will have the same issues) Shaun Savage Re: package configuration (for dpkg - rpm will have the same issues) Russell Coker Correction: Re: FOSE SELinux Panel Tony Stanco Re: package configuration (for dpkg - rpm will have the same issues) Shaun Savage kernel Make Dale Amon Re: package configuration (for dpkg - rpm will have the same issues) Russell Coker uses_shlib Russell Coker general_file_read_access Russell Coker Tuesday, 19 March Re: package configuration (for dpkg - rpm will have the same issues) Shaun Savage Re: sec rating Howard Holm sec rating Tom Re: file_contexts Russell Coker Re: file_contexts Stephen Smalley Re: file_contexts Stephen Smalley Monday, 18 March file_contexts Russell Coker FOSE SELinux Panel Tony Stanco Re: package configuration (for dpkg - rpm will have the same issues) Stephen Smalley Sunday, 17 March header file issues with 2002031409 Russell Coker Saturday, 16 March RE: checkpolicy dont load policy.conf...oops Vanuxem grégory checkpolicy dont load policy.conf Vanuxem grégory Friday, 15 March Re: package configuration (for dpkg - rpm will have the same issues) Russell Coker Re: stat now supports SE Linux in the upstream Russell Coker Re: Updated Release Stephen Smalley Re: your mail Stephen Smalley Re: Updated Release Stephen Smalley Re: stat now supports SE Linux in the upstream Stephen Smalley Re: package configuration (for dpkg - rpm will have the same issues) Stephen Smalley Thursday, 14 March stat now supports SE Linux in the upstream Russell Coker package configuration (for dpkg - rpm will have the same issues) Russell Coker Updated Release Howard Holm Wednesday, 13 March Re: stat64 Russell Coker Re: stat64 Stephen Smalley stat64 Russell Coker Re: Firewall Policy Russell Coker Tuesday, 12 March Re: Firewall Policy Reino Wallin Re: Firewall Policy Russell Coker Re: Firewall Policy Rik van Riel (no subject) Samarth Sharma Re: Firewall Policy Stephen Smalley Re: Firewall Policy Russell Coker Re: Firewall Policy Stephen Smalley Re: Firewall Policy Russell Coker Monday, 11 March Firewall Policy Reino Wallin Re: New Rease Stephen Smalley Re: Trouble with Selinux install Stephen Smalley Trouble with Selinux install Paul Greene RE: New Rease Westerman, Mark Re: New Rease Russell Coker New Rease Westerman, Mark Re: your mail Stephen Smalley (no subject) Stephen Smalley Sunday, 10 March sed command found Lonnie Cumberland SED Command Lonnie Cumberland (no subject) Russell Coker (no subject) Samarth Sharma Saturday, 9 March Re: automatic type transitions for pts in devfs Russell Coker Friday, 8 March RE: gdm Westerman, Mark Thursday, 7 March devfsd module for SE Linux Russell Coker Re: gdm Russell Coker security_context_to_sid Russell Coker Re: Squid policy for SE Linux Dale Amon Wednesday, 6 March Re: invalid contaxt Russell Coker Re: Squid policy for SE Linux Russell Coker Re: invalid contaxt Stephen Smalley Re: NSA SE enabled devfsd Russell Coker invalid contaxt Russell Coker Re: Squid policy for SE Linux Stephen Smalley Re: suggested policy change Stephen Smalley RE: suggested policy change Westerman, Mark suggested policy change Justin Smith Squid policy for SE Linux Russell Coker Re: automatic type transitions for pts in devfs Stephen Smalley automatic type transitions for pts in devfs Russell Coker Re: NSA SE enabled devfsd Russell Coker Tuesday, 5 March NSA SE enabled devfsd Russell Coker Re: Odd acces denied messages Stephen Smalley Odd acces denied messages Justin Smith Monday, 4 March Re: pppd_t domain Stephen Smalley Sunday, 3 March Re: pppd_t domain Lonnie Cumberland Wednesday, 27 February (no subject) Russell Coker Re: your mail Stephen Smalley (no subject) Metrix Re: straceing SE Linux Russell Coker Re: straceing SE Linux Stephen Smalley thesis subject Johan Camp Re: straceing SE Linux Stephen Smalley Re: your mail Stephen Smalley Re: CHEN Mike (no subject) Metrix straceing SE Linux Russell Coker Tuesday, 26 February Re: pptp and SELinux errors Stephen Smalley Re: pptp and SELinux errors Lonnie Cumberland Re: devfs permissions Russell Coker Monday, 25 February Re: pptp and SELinux errors Lonnie Cumberland Re: pptp and SELinux errors Stephen Smalley pptp and SELinux errors Lonnie Cumberland Re: devfs permissions Stephen Smalley Re: devfs permissions Russell Coker RE: nscd Stephen Smalley Re: devfs permissions Stephen Smalley Re: gdm Russell Coker RE: gdm Westerman, Mark Re: gdm Stephen Smalley Re: nscd Stephen Smalley RE: nscd Westerman, Mark Re: devfs permissions Stephen Smalley RE: gdm Westerman, Mark Re: gdm Russell Coker RE: gdm Westerman, Mark Sunday, 24 February Re: gdm Russell Coker Saturday, 23 February devfs permissions Russell Coker (no subject) Russell Coker Friday, 22 February Re: Re: 2.2 kernel series Stephen Smalley Re: Re: 2.2 kernel series Samarth Sharma Re: Security Policy Analysis Tools status Trent Jaeger Thursday, 21 February RE: SELinux David Caplan Re: SELinux Stephen Smalley Re: Documentation! (Was: Re: activity?) Stephen Smalley Postgres Policy Files Beth Meighan Re: Documentation! (Was: Re: activity?) Stephen Smalley SE Linux patch for kdm Russell Coker SELinux Shaun Savage Wednesday, 20 February Re: Documentation! (Was: Re: activity?) CHEN Mike Re: ftp long time connection Ben McGinnes Documentation! (Was: Re: activity?) Tracy R Reed Re: Security Profile Templates CARDINAL Re: OT: Re: ftp long time connection Ben McGinnes OT: Re: ftp long time connection Ivan Pulleyn Re: Some questions? Stephen Smalley Some questions? Giovanni Mugnai Re: ftp long time connection Lonnie Cumberland RE: Security Policy Analysis Tools status Frank Mayer RE: ftp long time connection Flood Randy Capt AFCA/TCAA RE: ftp long time connection Walker, Jason Re: ftp long time connection Ben McGinnes Re: Security Profile Templates Stephen Smalley Re: 2.2 kernel series Stephen Smalley Re: 2.2 kernel series Stephen Smalley Security Policy Analysis Tools status James Griffin Re: activity? Stephen Smalley Re: 2.2 kernel series Russell Coker Security Profile Templates CARDINAL Tuesday, 19 February Re: 2.2 kernel series George Fouse Re: 2.2 kernel series Dale Amon 2.2 kernel series Metrix Re: ftp long time connection Noah silva Re: activity? Ryan O. Emge Re: ftp long time connection Hacko RE: ftp long time connection Flood Randy Capt AFCA/TCAA Re: ftp long time connection George Fouse Re: activity? Noah silva Re: ftp long time connection Justin Smith ftp long time connection Lonnie Cumberland Re: activity? Stephen Smalley activity? Metrix execve_secure(2) Russell Coker Tuesday, 12 February (no subject) Samarth Sharma (no subject) Samarth Sharma Monday, 11 February Re: USB device labelling Stephen Smalley Re: insmod needs to write to /proc/sys/kernel/tainted Stephen Smalley Re: vixie cron patch and also MLS Stephen Smalley RE: gdm Westerman, Mark Re: run_init - am I missing something? Stephen Smalley Re: changing a process SID Stephen Smalley gdm Russell Coker insmod needs to write to /proc/sys/kernel/tainted Russell Coker Sunday, 10 February vixie cron patch and also MLS Russell Coker SE Debian etc Russell Coker Saturday, 9 February changing a process SID Russell Coker Friday, 8 February run_init(8) Russell Coker USB device labelling Russell Coker run_init - am I missing something? Russell Coker RE: shell history task Hacko RE: shell history task Westerman, Mark shell history task Hacko Re: runas.c line 131 Stephen Smalley Re: stat_secure() Stephen Smalley Re: LVM and devfs_contexts (Was: your mail) Stephen Smalley Thursday, 7 February Re: stat_secure() Russell Coker runas.c line 131 Russell Coker (no subject) Vanuxem Re: USB device files Stephen Smalley Re: stat_secure() Stephen Smalley Wednesday, 6 February stat_secure() Russell Coker USB device files Russell Coker Re: NFS Volumes Stephen Smalley Re: test selinux account Stephen Smalley test selinux account Hacko NFS Volumes Scott Shealy Re: xfs Stephen Smalley Re: Running sshd shells in sysadm_t Stephen Smalley xfs Timothy Wood Tuesday, 5 February Running sshd shells in sysadm_t Justin Smith Re: un-noticed security Stephen Smalley un-noticed security Lonnie Cumberland Monday, 4 February Re: strange audit messages from the dhcpc_t domain Paul Krumviede Re: strange audit messages from the dhcpc_t domain Stephen Smalley Saturday, 2 February strange audit messages from the dhcpc_t domain Paul Krumviede Friday, 1 February Re: Strange behavior of httpd Justin Smith Re: Strange behavior of httpd Jen Schommer Wednesday, 30 January Strange behavior of httpd Justin Smith Tuesday, 29 January Re: Additional permissions that appear to be necessary Stephen Smalley Re: file labeling (was Re: applications and ports) Stephen Smalley Additional permissions that appear to be necessary Justin Smith file labeling (was Re: applications and ports) Paul Krumviede Re: applications and ports Stephen Smalley applications and ports Lonnie Cumberland Monday, 28 January Re: Policy Enforcement Question Stephen Smalley Re: network and module problems Stephen Smalley Sunday, 27 January Policy Enforcement Question Thomas A Langan Re: Backups Chris Crowther Friday, 25 January Re: network and module problems Timothy Wood Re: network and module problems Stephen Smalley Re: Rules for SELinux in a vmware session paul krumviede Re: network and module problems Timothy Wood Re: network and module problems Stephen Smalley Re: network and module problems Paul Krumviede Rules for SELinux in a vmware session Westerman, Mark Re: network and module problems Stephen Smalley Re: network and module problems Stephen Smalley Re: network and module problems Paul Krumviede Re: network and module problems Timothy Wood Re: network and module problems Paul Krumviede Re: network and module problems Stephen Smalley Re: network and module problems Timothy Wood Thursday, 24 January Backups Roger Re: ppp security settings Russell Coker Re: network and module problems Stephen Smalley network and module problems Timothy Wood Re: Shutdown issues Stephen Smalley Re: Shutdown issues Stephen Smalley Re: Shutdown issues Shaun Savage Shutdown issues Justin Smith Wednesday, 23 January Re: devfs_contexts Russell Coker Re: switching between SE Linux utils - kernel versions ? ... also ntp Stephen Smalley Re: switching between SE Linux utils - kernel versions ? ... also ntp forrest whitcher Re: Adding Accounts Stephen Smalley Re: devfs_contexts Stephen Smalley Re: switching between SE Linux utils - kernel versions ? ... also ntp Stephen Smalley Adding Accounts Lonnie Cumberland Tuesday, 22 January Re: devfs_contexts Russell Coker RE: Gdm shut my system down Justin Smith Re: switching between SE Linux utils - kernel versions ? ... also ntp Paul Krumviede Re: restricted guest domain accounts Tom switching between SE Linux utils - kernel versions ? ... also ntp forrest whitcher Re: avc deny messages. Stephen Smalley avc deny messages. Westerman, Mark Re: restricted guest domain accounts Stephen Smalley Re: restricted guest domain accounts Stephen Smalley Re: restricted guest domain accounts Stephen Smalley Re: Gdm shut my system down Stephen Smalley Re: ppp security settings Stephen Smalley Re: starting daemons under Debian Stephen Smalley Monday, 21 January Gdm shut my system down Justin Smith Re: ntp security policy James Griffin ntp security policy Ed Clarke Re: restricted guest domain accounts Lonnie Cumberland Re: restricted guest domain accounts Shaun Savage Re: restricted guest domain accounts Lonnie Cumberland Re: restricted guest domain accounts Tom restricted guest domain accounts Lonnie Cumberland Sunday, 20 January Re: starting daemons under Debian Russell Coker Re: starting daemons under Debian Manoj Srivastava Saturday, 19 January Selopt 0.08 released. James Morris ppp security settings Russell Coker Friday, 18 January Re: Updated Release Grant Bayley Updated Release Howard Holm starting daemons under Debian Russell Coker RE: questions for upcoming article in Information Security Magazi ne Sherwood, John E. (Jack) RE: 2.4.16 release, ipsec, roles and ECHILD errors Paul Krumviede Re: devfs_contexts Stephen Smalley questions for upcoming article in Information Security Magazine Pete Loshin Re: ext3 file system Paul Kronenwetter Re: devfs_contexts Russell Coker Re: devfs_contexts Stephen Smalley devfs_contexts Russell Coker Re: ext3 file system Stephen Smalley Re: ext3 file system Stephen Smalley Re: ext3 file system Noah silva RE: 2.4.16 release, ipsec, roles and ECHILD errors Westerman, Mark snort files and policy Shaun Savage Thursday, 17 January GIG IDS Fermin, Fabricio ext3 file system Justin Smith SE-Debian is almost working! Russell Coker 2.4.16 release, ipsec, roles and ECHILD errors Paul Krumviede Re: klogd_t problem Stephen Smalley klogd_t problem Trent Jaeger Re: 2.4.17 support? Stephen Smalley Re: 2.4.17 support? Russell Coker Re: 2.4.17 support? Stephen Smalley Wednesday, 16 January policydb Russell Coker 2.4.17 support? Russell Coker Re: trace call path Stephen Smalley Re: more info Stephen Smalley Re: GW's CPI and SELinux Donald Kasper Re: GW's CPI and SELinux Donald Kasper Re: GW's CPI and SELinux Donald Kasper more info Shaun Savage Re: RH 7.1 Selinux Install fails in step 7 - /usr/sbin/sshd not found Stephen Smalley RH 7.1 Selinux Install fails in step 7 - /usr/sbin/sshd not found Miara, Richard J. trace call path Shaun Savage Re: /etc/security/default_context vs. /etc/security/default_contexts Shaun Savage Re: Redhat 7.2 + selinux-2001121010.tgz Trent Jaeger Re: Redhat 7.2 + selinux-2001121010.tgz Stephen Smalley GW's CPI and SELinux Tony Stanco Re: /etc/security/default_context vs. /etc/security/default_contexts Stephen Smalley Re: General Users Donald Kasper Tuesday, 15 January Re: General Users Shaun Savage Redhat 7.2 + selinux-2001121010.tgz Bognar Attila Re: General Users Shaun Savage Re: /etc/security/default_context vs. /etc/security/default_contexts Shaun Savage Re: General Users Westerman, Mark Re: Displaying information on Website Donald Kasper Re: General Users Shaun Savage RE: General Users Christopher A. Martin Re: General Users Donald Kasper Re: newrole logging Stephen Smalley newrole logging Shaun Savage Re: General Users Stephen Smalley General Users Westerman, Mark Thursday, 10 January Selinux on Slackware 8.0 Hacko Re: audit policy tag? Stephen Smalley audit policy tag? Shaun Savage Wednesday, 9 January Re: Displaying information on Website Howard Holm Re: Odd problem with lsm-full-2001_12_10 on RH 7.2 Stephen Smalley Re: Odd problem with lsm-full-2001_12_10 on RH 7.2 Stephen Smalley Odd problem with lsm-full-2001_12_10 on RH 7.2 Justin Smith Displaying information on Website Kevin Tuesday, 8 January Re: SELinux on RH7.2 Stephen Smalley SELinux on RH7.2 Giovanni Mugnai Monday, 7 January Re: /etc/security/default_context vs. /etc/security/default_contexts Stephen Smalley /etc/security/default_context vs. /etc/security/default_contexts Charles Levert Re: change login.c Stephen Smalley Saturday, 5 January Policy files for a firewall Reino Wallin change login.c Shaun Savage Friday, 4 January Re: Syntax for users for MLS Stephen Smalley Syntax for users for MLS Christie, Richard Wednesday, 2 January Re Happy New Year!!! --- Srecna Nova Godina!!! Samarth Sharma Monday, 31 December Happy New Year!!! --- Srecna Nova Godina!!! Filip Brcic Thursday, 27 December Re: su etc Stephen Smalley Sunday, 23 December Debian packages of SE Linux update Russell Coker Saturday, 22 December automake for Debian packages Russell Coker su etc Russell Coker Friday, 21 December [PATCH] avc_enforcing (Was: Re: Question) Stephen Smalley Thursday, 20 December Re: Debian SE Linux ? Noah silva Re: Debian SE Linux ? Stephen Smalley Re: Debian SE Linux ? Stephen Smalley Re: Debian SE Linux ? Noah silva [PATCH] Bug fix for ipc_precondition calls Stephen Smalley Re: Japanese Document Noah silva Re: Debian SE Linux ? Stephen Smalley Re: Japanese Document Stephen Smalley Re: setting up new test user domain? Russell Coker Re: Debian SE Linux ? Russell Coker Wednesday, 19 December Japanese Document B $BE/ Re: setting up new test user domain? Stephen Smalley Re: setting up new test user domain? lonnie_at_outstep.com Re: setting up new test user domain? lonnie_at_outstep.com Re: Question Stephen Smalley Question Justin Smith Re: setting up new test user domain? Stephen Smalley Re: setting up new test user domain? Stephen Smalley RE: setting up new test user domain? Flood Randy Capt AFCA/TCAA Re: setting up new test user domain? lonnie_at_outstep.com Re: Debian SE Linux ? Stephen Smalley Debian SE Linux ? Noah silva Re: setting up new test user domain? Gary Lowder Re: setting up new test user domain? Stephen Smalley Re: setting up new test user domain? lonnie_at_outstep.com Tuesday, 18 December Re: setting up new test user domain? lonnie_at_outstep.com Re: setting up new test user domain? lonnie_at_outstep.com Re: setting up new test user domain? Stephen Smalley Re: setting up new test user domain? Stephen Smalley setting up new test user domain? lonnie_at_outstep.com Monday, 17 December rh7.2 xdmcp lonnie_at_outstep.com Re: User Policy Setup lonnie_at_outstep.com Re: Inode persistence generally - was: Re: persistent labelling on afs, jfs, xfs? Russell Coker Re: User Policy Setup lonnie_at_outstep.com Re: User Policy Setup Noah silva Re: persistent labelling on afs, jfs, xfs? - also read-only media??? Stephen Smalley Re: User Policy Setup lonnie_at_outstep.com Re: Fwd: Re: SE Linux packages of login, sshd, tar, stat, findutils, fileutils, and [xkg]dm Russell Coker Re: User Policy Setup Stephen Smalley Re: Inode persistence generally - was: Re: persistent labelling on afs, jfs, xfs? Stephen Smalley Hello Krzysztof Zagrodzki [PATCH] Bug fix for SID table Stephen Smalley Re: persistent labelling on afs, jfs, xfs? - also read-only media??? forrest whitcher Re: iptables.te errors Shaun Savage Inode persistence generally - was: Re: persistent labelling on afs, jfs, xfs? forrest whitcher Re: Fwd: Re: SE Linux packages of login, sshd, tar, stat, findutils, fileutils, and [xkg]dm Dale Amon User Policy Setup lonnie_at_outstep.com New to SELinux question lonnie_at_outstep.com Re: persistent labelling on afs, jfs, xfs? Hans Reiser Re: TR: Trans_domain and MLS (small error) Stephen Smalley TR: Trans_domain and MLS (small error) Vanuxem Re: two different domains from on program Stephen Smalley Re: iptables.te errors Stephen Smalley Re: No consistancy in Make variable names Stephen Smalley Re: iptables.te errors Stephen Smalley Re: persistent labelling on afs, jfs, xfs? Stephen Smalley two different domains from on program Shaun Savage Re: iptables.te errors Shaun Savage Sunday, 16 December Re: No consistancy in Make variable names Dale Amon Re: iptables.te errors Paul Krumviede Can't find libwrap Dale Amon iptables.te errors Shaun Savage Saturday, 15 December No consistancy in Make variable names Dale Amon Re: persistent labelling on afs, jfs, xfs? Hans Reiser Friday, 14 December Re: persistent labelling on afs, jfs, xfs? Stephen Smalley Re: persistent labelling on afs, jfs, xfs? Stephen Smalley persistent labelling on afs, jfs, xfs? forrest whitcher Re: ANN: Labeled IPv4 Networking for SELinux (selopt) v0.06 Stephen Smalley Re: thanks, and new issue Stephen Smalley Re: Strange behavior (?) Stephen Smalley Strange behavior (?) Justin Smith Thursday, 13 December Re: Undefined refs in compile attempt Dale Amon freeswan ipsec, 2.4.16-selinux and pclose Paul Krumviede thanks, and new issue Shaun Savage Re: Admin help, Please Stephen Smalley Wednesday, 12 December Admin help, Please Shaun Savage Re: Undefined refs in compile attempt Stephen Smalley Re: Undefined refs in compile attempt Dale Amon Re: Undefined refs in compile attempt Stephen Smalley ANN: Labeled IPv4 Networking for SELinux (selopt) v0.06 James Morris Tuesday, 11 December Re: Undefined refs in compile attempt James Morris Undefined refs in compile attempt Dale Amon Didn't notice this question Justin Smith Re: Other Architecture Support... Stephen Smalley Other Architecture Support... James Harrison Re: RH72 psmisc patch Stephen Smalley RH72 psmisc patch Shaun Savage [PATCH] Bug fix for util-linux Stephen Smalley [PATCH] Bug fix for selinux_file_send_sigiotask Stephen Smalley Re: problems after installing selinux Stephen Smalley Monday, 10 December Re: Updated release Grant Bayley Re: problems after installing selinux Paul Krumviede Re: problems after installing selinux Johan Camp Re: problems after installing selinux Paul Krumviede problems after installing selinux Johan Camp Re: Updated release Howard Holm Re: New security policy Shaun Savage Re: New security policy Stephen Smalley Re: User Level Security Policies Stephen Smalley Re: New security policy Shaun Savage Re: New security policy Stephen Smalley Re: New security policy Stephen Smalley New security policy Shaun Savage Selecting build target root path Dale Amon Sunday, 9 December User Level Security Policies lonnie_at_outstep.com Wednesday, 5 December Re: have you seen spfx2.c? Russell Coker Tuesday, 4 December Re: OOPS, the earlier script had an error Stephen Smalley Re: Message Stephen Smalley OOPS, the earlier script had an error Justin Smith Message Justin Smith Revised perl script Justin Smith [PATCH] AVC auditing changes Stephen Smalley Re: simple Perl script to converse messages to access rules Stephen Smalley Re: simple Perl script to converse messages to access rules Justin Smith simple Perl script to converse messages to access rules Justin Smith Monday, 3 December Re: have you seen spfx2.c? Dale Amon Re: X windows with i810 chip Stephen Smalley Re: X windows with i810 chip Stephen Smalley Re: X windows with i810 chip Justin Smith Re: use of ps in ipsec shutdown Paul Krumviede Re: SuSe 7.2 Stephen Smalley Re: X windows with i810 chip Stephen Smalley Re: have you seen spfx2.c? Stephen Smalley Re: policy additions needed to make my system run in secure mode Stephen Smalley Re: boot messages Stephen Smalley RE: use of ps in ipsec shutdown Stephen Smalley Re: use of ps in ipsec shutdown Stephen Smalley SuSe 7.2 Lorenzo Rossi Sunday, 2 December Re: X windows with i810 chip Russell Coker X windows with i810 chip Justin Smith Saturday, 1 December Re: have you seen spfx2.c? Grant Bayley have you seen spfx2.c? 0x_at_bk.ru policy additions needed to make my system run in secure mode Justin Smith Re: Fwd: Re: SE Linux packages of login, sshd, tar, stat, findutils, fileutils, and [xkg]dm Jesse Pollard boot messages Justin Smith Re: Fwd: Re: SE Linux packages of login, sshd, tar, stat, findutils, fileutils, and [xkg]dm Russell Coker Friday, 30 November Re: Fwd: Re: SE Linux packages of login, sshd, tar, stat, findutils, fileutils, and [xkg]dm Jesse Pollard Re: Fwd: Re: SE Linux packages of login, sshd, tar, stat, findutils, fileutils, and [xkg]dm Tom RE: use of ps in ipsec shutdown Paul Krumviede RE: use of ps in ipsec shutdown Westerman, Mark Re: Fwd: Re: SE Linux packages of login, sshd, tar, stat, findutils, fileutils, and [xkg]dm Russell Coker use of ps in ipsec shutdown Paul Krumviede Thursday, 29 November Re: Fwd: Re: SE Linux packages of login, sshd, tar, stat, findutils, fileutils, and [xkg]dm Achim D. Brucker Re: Fwd: Re: SE Linux packages of login, sshd, tar, stat, findutils, fileutils, and [xkg]dm Stephen Smalley RE: Fwd: Re: SE Linux packages of login, sshd, tar, stat, findutils, fileutils, and [xkg]dm Jose Nazario RE: Fwd: Re: SE Linux packages of login, sshd, tar, stat, findutils, fileutils, and [xkg]dm Flood Randy Capt AFCA/TCAA Re: Fwd: Re: SE Linux packages of login, sshd, tar, stat, findutils, fileutils, and [xkg]dm Russell Coker Re: Fwd: Re: SE Linux packages of login, sshd, tar, stat, findutils, fileutils, and [xkg]dm Stephen Smalley Re: Fwd: Re: SE Linux packages of login, sshd, tar, stat, findutils, fileutils, and [xkg]dm Russell Coker Wednesday, 28 November Re: access denial,networking in selinux Stephen Smalley Re: Fwd: Re: SE Linux packages of login, sshd, tar, stat, findutils, fileutils, and [xkg]dm Stephen Smalley access denial,networking in selinux Vasantha Harikrishna Tuesday, 27 November Fwd: Re: SE Linux packages of login, sshd, tar, stat, findutils, fileutils, and [xkg]dm Russell Coker Re: lsm-selinux-200111191100.tgz Stephen Smalley lsm-selinux-200111191100.tgz Justin Smith Re: RedHat 7.2 Stephen Smalley RedHat 7.2 Westerman, Mark Re: Errors in building lsm-selinux-200111191100.tgz Stephen Smalley Monday, 26 November PATCH: openssh-3.0.1p1 ...please test it Michael Bischof Re: Errors in building lsm-selinux-200111191100.tgz Justin Smith SELinux on OpenLinux Allan Baker Re: 7.1 installation Stephen Smalley 7.1 installation Jones, Robyn M. Re: kernel oops Stephen Smalley kernel oops Tracy R Reed Re: Configure.help Stephen Smalley Re: selinux, openssh, ipv6 Stephen Smalley Sunday, 25 November kernel-patch-2.4-selinux uploaded to Debian Russell Coker Re: Configure.help Russell Coker Configure.help Russell Coker Saturday, 24 November Re: Security policies change prevention! Stephen Smalley Friday, 23 November selinux, openssh, ipv6 jeff burson Security policies change prevention! Giovanni Mugnai Thursday, 22 November Re: SELinux and non-ext[23] file systems Hans Reiser Wednesday, 21 November Re: SELinux policy configuration tutorial? Stephen Smalley Re: SELinux policy configuration tutorial? Stephen Smalley Re: SELinux policy configuration tutorial? Stephen Smalley Re: SELinux policy configuration tutorial? L. T. Seet Re: SELinux policy configuration tutorial? Tracy R Reed Re: SELinux policy configuration tutorial? Tracy R Reed Tuesday, 20 November Re: Updated release Grant Bayley Re: sendmail config question Stephen Smalley sendmail config question Dan Berberich [PATCH] Bug fix for selinux_inode_delete hook Stephen Smalley Updated release Howard Holm Monday, 19 November Re: SELinux and non-ext[23] file systems Stephen Smalley Re: SELinux and non-ext[23] file systems Harald von Fellenberg - Sun Switzerland Zurich - Technology Strategy Office SELinux and non-ext[23] file systems Harald von Fellenberg - Sun Switzerland Zurich - Technology Strategy Office Re: SELinux and non-ext[23] file systems Stephen Smalley Re: SELinux policy configuration tutorial? Stephen Smalley Friday, 16 November SELinux policy configuration tutorial? Tracy R Reed Wednesday, 14 November Re: Are enhancements back-ported Stephen Smalley Are enhancements back-ported Justin Smith Tuesday, 13 November Re: Cannot build utils on RH7.2 Stephen Smalley Cannot build utils on RH7.2 Tetsuji Rai Saturday, 10 November Re: Kernel Module Paul Krumviede Kernel Module Femitha Majeed Friday, 9 November Re: Problems with pcmcia Stephen Smalley Problems with pcmcia Hugo F. Martinez RE: Linux auditing subsystem Westerman, Mark Linux auditing subsystem Red Phoenix Thursday, 8 November Re: How can i configure this? Stephen Smalley Re: How can i configure this? Stephen Smalley Re: How can i configure this? Hugo F. Martinez Re: How can i configure this? Stephen Smalley How can i configure this? Hugo F. Martinez Re: Just starting out Stephen Smalley Wednesday, 7 November Re: Just starting out Dave Nielsen Thursday, 8 November Just starting out Kevin M. Boland Wednesday, 7 November Re: New SELinux release??? Dave Nielsen Re: New SELinux release??? Yanni Kouskoulas Re: Problem with su program Stephen Smalley Problem with su program Chandrashekar B . Tuesday, 6 November Re: New SELinux release??? Yanni Kouskoulas Re: Flask architecture Stephen Smalley Flask architecture Femitha Majeed Re: New SELinux release??? Stephen Smalley New SELinux release??? Timothy E. Kohler Re: Problem making the kernel w/ the SELinux modules added Stephen Smalley Re: Problem making the kernel w/ the SELinux modules added Stephen Smalley Re: Problem making the kernel w/ the SELinux modules added Ryan Senior Re: Problem making the kernel w/ the SELinux modules added Conan Callen Monday, 5 November Problem making the kernel w/ the SELinux modules added Ryan Senior update policy search/analysis tool Frank Mayer Thursday, 1 November Re: 2.4.13? Russell Coker Re: 2.4.13? Stephen Smalley Wednesday, 31 October 2.4.13? Russell Coker Tuesday, 30 October Re: RedHat 7.2 Stephen Smalley RedHat 7.2 Femitha Majeed [PATCH] Bug fix for load_policy Stephen Smalley Sunday, 28 October RE: Problems with install Conan Callen RE: Problems with install Westerman, Mark Friday, 26 October RE: Problems with install White, Tom (AZ15) RE: Problems with install Stephen Smalley RE: Problems with install White, Tom (AZ15) Thursday, 25 October Re: Problems with install Dave Nielsen Re: [PATCH] Missing getscheduler hook Levi Bard Re: an offer to help with documentation Stephen Smalley an offer to help with documentation randaL Re: Problems with install Stephen Smalley Re: Problems with install Dave Nielsen Wednesday, 24 October Re: Problems with install Dave Nielsen Re: Problems with install Stephen Smalley Re: Problems with install Paul Krumviede Re: Problems with install Stephen Smalley Problems with install White, Tom (AZ15) Monday, 22 October Re: ? Roberto Cescon ? Roberto Cescon Re: Patched SuSE 7.2 openssh-2.9p1 / Policy for SuSE 7.2? R Cescon [PATCH] Missing getscheduler hook Stephen Smalley Re: Patched SuSE 7.2 openssh-2.9p1 / Policy for SuSE 7.2? Stephen Smalley Patched SuSE 7.2 openssh-2.9p1 / Policy for SuSE 7.2? James Bishop Thursday, 18 October [PATCH] Bug fixes for non-PAM newrole and run_init (Was: Re: Updated release) Stephen Smalley Re: Updated release J Wednesday, 17 October Re: Updated release Stephen Smalley Tuesday, 16 October Updated release Howard Holm Monday, 15 October Re: Compiling for SuSE 7.2 James Bishop Thursday, 11 October Re: Security policy analysis - MITRE Trent Jaeger Re: Compiling for SuSE 7.2 James Bishop Wednesday, 10 October RE: Security policy analysis Frank Mayer RE: Security policy analysis Frank Mayer RE: Security policy analysis Frank Mayer Re: Security policy analysis ipv6 Re: Vanilla unix policy Stephen Smalley RE: Security policy analysis Stephen Smalley Re: Security policy analysis Stephen Smalley Re: Problems with eth0 Julien Palardy Re: Security policy analysis Julien Palardy RE: Security policy analysis Frank Mayer Re: Security policy analysis EZ Re: Security policy analysis Jon Crowley Vanilla unix policy Justin R. Smith RE: Security policy analysis Frank Mayer Re: Security policy analysis ipv6 Re: Problems with eth0 Stephen Smalley Problems with eth0 Carl Carpenter Re: Security policy analysis Stephen Smalley Interested in Reserach work Ravi Prakash B.V. Tuesday, 9 October RE: Security policy analysis John Scroggins Security policy analysis Frank Mayer Re: ssh, ad nauseum Stephen Smalley Re: Additions to file_contexts Stephen Smalley Re: SE-Linux versions, features, stability? Stephen Smalley ssh, ad nauseum Justin R. Smith Monday, 8 October Additions to file_contexts Justin R. Smith Re: Compiling for SuSE 7.2 Stephen Smalley Re: Compiling for SuSE 7.2 James Bishop SE-Linux versions, features, stability? forrest whitcher Re: Compiling for SuSE 7.2 Stephen Smalley Re: Compiling for SuSE 7.2 James Bishop Friday, 5 October Re: Cron Stephen Smalley Cron Westerman, Mark RE: Compiling for SuSE 7.2 Westerman, Mark RE: debugging tools Conan Callen Re: Some questions Paul Krumviede Re: Compiling for SuSE 7.2 Stephen Smalley Re: Compiling for SuSE 7.2 Russell Coker Re: Some questions Stephen Smalley Re: Compiling for SuSE 7.2 Stephen Smalley Some questions Justin R. Smith RE: debugging tools Westerman, Mark RE: Compiling for SuSE 7.2 Stephen Smalley Re: Compiling for SuSE 7.2 James Bishop Tuesday, 4 September RE: Compiling for SuSE 7.2 John Scroggins Thursday, 4 October Re: debugging tools Jose Nazario Re: debugging tools Stephen Smalley debugging tools Conan Callen Re: Compiling for SuSE 7.2 Stephen Smalley Re: Compiling for SuSE 7.2 James Bishop Re: Compiling for SuSE 7.2 Russell Coker Re: Question about SELinux Stephen Smalley Question about SELinux sunil Wednesday, 3 October Re: Debian distribution of selinux Russell Coker Re: Debian distribution of selinux Manoj Srivastava [PATCH] Bug fix for the dummy and SELinux netlink_send hooks Stephen Smalley Re: Compiling for SuSE 7.2 Stephen Smalley Compiling for SuSE 7.2 James Bishop Tuesday, 2 October Re: Debian distribution of selinux Stephen Smalley Debian distribution of selinux John S. Gage Re: A notion Russell Coker [PATCH] ssh client domain, miscellaneous changes Stephen Smalley [PATCH] Re: I can ' t use named on LSM-based Prototype. Why? Stephen Smalley Re: Questions Stephen Smalley Re: A notion Stephen Smalley Re: I can ' t use named on LSM-based Prototype. Why? Yuichi Nakamura Monday, 1 October Re: A notion Conan Callen FW: A notion Lon McPhail Re: A notion Javier RE: A notion Tim Hollebeek RE: A notion Phillip H. Zakas RE: A notion Phillip H. Zakas Re: A notion Jose Nazario Tuesday, 2 October A notion Justin R. Smith Questions Justin R. Smith Monday, 1 October Re: distribution of kernel patches Stephen Smalley Re: distribution of kernel patches Russell Coker Re: distribution of kernel patches Steve Smalley Re: Updated release Stephen Smalley Re: distribution of kernel patches Stephen Smalley Sunday, 30 September Re: Updated release Conan Callen Saturday, 29 September Re: distribution of kernel patches Manoj Srivastava Friday, 28 September Re: distribution of kernel patches Russell Coker Re: distribution of kernel patches Russell Coker Re: distribution of kernel patches Jesse Pollard [PATCH] Re: install parameters Stephen Smalley Re: distribution of kernel patches Stephen Smalley Re: install parameters Stephen Smalley distribution of kernel patches Russell Coker install parameters Russell Coker [PATCH] Support for stacking capabilities with SELinux (Was: Re: I can ' t use named on LSM-based Prototype. Why?) Stephen Smalley Re: Updated release Grant Bayley Thursday, 27 September Updated release Howard Holm Re: I can ' t use named on LSM-based Prototype. Why? Chris Vance Wednesday, 26 September RE: Clarification about distribution terms on the software Wagner, Grant Re: Questions on the NSA and use of SELinux Stephen Smalley Tuesday, 25 September Questions on the NSA and use of SELinux Brian L. Simonin Clarification about distribution terms on the software Manoj Srivastava Re: selinux & gnome Conan Callen Re: compiling LSM/SELinux fileutils Stephen Smalley Re: selinux & gnome Stephen Smalley Re: SELinux on embedded devices? Stephen Smalley Re: I can ' t use named on LSM-based Prototype. Why? Stephen Smalley I can ' t use named on LSM-based Prototype. Why? Yuichi Nakamura Friday, 21 September SELinux on embedded devices? Devon Hubbard compiling LSM/SELinux fileutils James J. selinux & gnome Conan Callen Wednesday, 19 September Re: UltraSparc Stephen Smalley Tuesday, 18 September UltraSparc Carlos Cardenas Thursday, 6 September [PATCH] Bug fix for file alloc_security hook call Stephen Smalley [PATCH] safe memory allocation flags James Morris Tuesday, 4 September Re: checkpolicy creates core file Conan Callen Re: checkpolicy creates core file Conan Callen Re: checkpolicy creates core file Howard Holm Summary of posted bug fix and optional patches Stephen Smalley Re: Summary of posted bug fix and optional patches Stephen Smalley [PATCH] Fix for selinux_ip_postroute hook Stephen Smalley RE: Question regarding security policy configuration Paul Rolland Re: Question regarding security policy configuration Stephen Smalley Monday, 3 September checkpolicy creates core file Conan Callen Sunday, 2 September Re: Question regarding security policy configuration Conan Callen Question regarding security policy configuration Paul Rolland Friday, 31 August [PATCH] Performance fix for inode-to-PSID mapping Stephen Smalley Thursday, 30 August Re: Successful install Stephen Smalley RE: Successful install Westerman, Mark Wednesday, 29 August Successful install Conan Callen Re: policy configurations files Stephen Smalley Tuesday, 28 August policy configurations files Westerman, Mark Re: No RAM swapout to disk for "sandbox" run programs Stephen Smalley Re: No RAM swapout to disk for "sandbox" run programs Tom Monday, 27 August No RAM swapout to disk for "sandbox" run programs james_at_spunkysoftware.com of interest -- HP's secure linux Jose Nazario Re: FreeSwan Intergration. Stephen Smalley FreeSwan Intergration. Westerman, Mark RE: Selinux lsm and Free Swan Stephen Smalley Saturday, 25 August Re: Selinux lsm and Free Swan Sandy Harris Friday, 24 August [PATCH] Bug fix for sys_acct Stephen Smalley RE: Selinux lsm and Free Swan Westerman, Mark RE: Selinux lsm and Free Swan Westerman, Mark Re: Selinux lsm and Free Swan Stephen Smalley Re: Selinux lsm and Free Swan Stephen Smalley Selinux lsm and Free Swan Westerman, Mark Updated release Howard Holm [PATCH] minor fix for ip_queue James Morris Thursday, 23 August RE: New Development Site Stephen Smalley FW: New Development Site JohnScroggins FW: New Development Site JohnScroggins Response to questions JohnScroggins FW: New Development Site JohnScroggins Wednesday, 22 August RE: New Development Site Jonathan Day RE: New Development Site Jonathan Day RE: New Development Site Jonathan Day Tuesday, 21 August New Development Site JohnScroggins Sunday, 19 August Re: [Fwd: Partial TOC for Comment] Dale Amon Saturday, 18 August RE: Partial TOC for Comment] Westerman, Mark Re: [Fwd: Partial TOC for Comment] LeRoy Cressy Friday, 17 August Re: Partial TOC for Comment] Dale Amon Re: [Fwd: Partial TOC for Comment] Dale Amon Re: Partial TOC for Comment] John Scroggins Re: Partial TOC for Comment] Conan Callen Re: [Fwd: Partial TOC for Comment] John Scroggins Re: Partial TOC for Comment] John Scroggins Re: [Fwd: Partial TOC for Comment] John Scroggins Re: Partial TOC for Comment] Conan Callen Re: [Fwd: Partial TOC for Comment] Conan Callen Re: [Fwd: Partial TOC for Comment] Benjamin D. Thomas Thursday, 16 August Re: [Fwd: Partial TOC for Comment] Dale Amon Re: [Fwd: Partial TOC for Comment] Dale Amon [Fwd: Partial TOC for Comment] John Scroggins Re: RBAC/Types Hierarchy John Scroggins Re: selinux on freebsd Stephen Smalley Re: selinux on freebsd Jose Nazario Wednesday, 15 August Re: RBAC/Types Hierarchy Dale Amon Thursday, 16 August selinux on freebsd Conan Callen Wednesday, 15 August Re: RBAC/Types Hierarchy John Scroggins Re: RBAC/Types Hierarchy Eric Peters Re: RBAC/Types Hierarchy John Scroggins Re: RBAC/Types Hierarchy Eric Peters Re: RBAC/Types Hierarchy Stephen Smalley RBAC/Types Hierarchy Eric Peters Re: SE Linux II? Eric Peters Re: SE Linux II? Eric Peters Re: SE Linux II? Stephen Smalley Re: Red Hat 6.1 Stephen Smalley Re: SE Linux II? Eric Peters Red Hat 6.1 Jones, Robyn M. Re: patch Stephen Smalley Re: SE Linux II? Stephen Smalley Tuesday, 14 August patch Ryan Senior Re: SE Linux II? Eric Peters Re: SE Linux II? Stephen Smalley Monday, 13 August SE Linux II? Eric Peters Re: problems with checkpolicy.conf and make initinstall Stephen Smalley Friday, 10 August problems with checkpolicy.conf and make initinstall Ryan Senior Thursday, 9 August Re: SELinux II Stephen Smalley Wednesday, 8 August SELinux II Jonathan Day Re: check this project out Howard Holm check this project out Josh Re: selinux and AFS Stephen Smalley selinux and AFS Forrest Whitcher Re: new to list Stephen Smalley Tuesday, 7 August new to list JohnScroggins Tuesday, 31 July Re: seperate kernel modules Dale Amon Re: seperate kernel modules Dale Amon Re: seperate kernel modules king killer Monday, 30 July Re: seperate kernel modules Jonathan Day Re: seperate kernel modules Martin Stricker seperate kernel modules king killer Friday, 27 July SELinux Performance and Scalability analysis Rajan Ravindran Keynote URL Sandy Harris not about SE linux, but relevant. Josh Thursday, 26 July Re: verbose make relabel/RedHat 7.1 install Eric Peters Tuesday, 24 July RE: verbose make relabel/RedHat 7.1 install Smalley, Stephen RE: running programs Smalley, Stephen Re: 8.3 filenames Jose Nazario nice job on SE-Linux! I have something to contribute too Josh verbose make relabel/RedHat 7.1 install Eric Peters Can't do a make relabel... Eric Peters 8.3 filenames Steve Eckmann Re: running programs Steve Eckmann Re: [PATCH] Apache configuration James Morris Monday, 23 July Kerberos configuration?; running <- vmware; running afs < selinux Forrest Whitcher Re: [PATCH] Apache configuration Stephen Smalley Re: running programs Stephen Smalley Sunday, 22 July [PATCH] Apache configuration James Morris Saturday, 21 July running programs Steve Eckmann Tuesday, 17 July Re: Linux and Posix compliance Andrew Josey Re: Linux and Posix compliance Andrew Josey Monday, 16 July Re: Linux and Posix compliance Christoph Hellwig Re: Linux and Posix compliance James A Griffin RE: Linux and Posix compliance Weaver, Mike D (N-CSC) Re: Linux and Posix compliance Ulrich Drepper Re: Linux and Posix compliance Ulrich Drepper Re: Linux and Posix compliance James A Griffin Linux and Posix compliance Ramsey Wally Contr AFRL/IFEB Re: development of SELinux Keith Re: development of SELinux Stephen Smalley Thursday, 12 July Re: development of SELinux James Morris Re: development of SELinux Howard Holm development of SELinux Ying-Hung Chen Monday, 9 July Re: SELinux + Engarde Stephen Smalley Friday, 6 July SELinux + Engarde Randy -Harborside Internet Re: developing. Jose Nazario developing. Thomas Sjogren Re: checkpolicy fails Jan Petranek Thursday, 5 July Re: how to add new user roles Stephen Smalley how to add new user roles Steve Eckmann Re: checkpolicy fails Stephen Smalley Tuesday, 3 July Re: checkpolicy fails Jan Petranek Re: checkpolicy fails - compiler probs Stephen Smalley checkpolicy fails - compiler probs Levi A Bard RE: checkpolicy fails Pranav Saha Re: checkpolicy fails Stephen Smalley Re: checkpolicy fails Jan Petranek Monday, 2 July RE: installation Westerman, Mark Re: installation Stephen Smalley installation Venkatakrishnan VN Re: checkpolicy fails Ying-Hung Chen Re: checkpolicy fails Pranav Saha Re: SELinux "vs" trustedBSD Stephen Smalley Re: checkpolicy fails Stephen Smalley Re: Slackware Stephen Smalley Re: PAM Stephen Smalley SELinux "vs" trustedBSD Jan Petranek checkpolicy fails Jan Petranek Saturday, 30 June (no subject) Matt Jezorek Friday, 29 June PAM Matt Jezorek Thursday, 28 June Re: More install issues Jose Nazario More install issues Pranav Saha LIDS & MAC on Linux Zachary Uram Wednesday, 27 June Re: Slackware cslater_at_wcnet.org Re: SuSE Milos Rancic Re: Slackware john.rh_at_hushmail.com SuSE Milos Rancic RE: Slackware Stephen Smalley RE: Slackware Ward, Robert D Re: Slackware Jeffrey Denton Tuesday, 26 June Slackware john.rh_at_hushmail.com Re: New to Linux - Need help Stephen Smalley Re: New to Linux - Need help Pranav Saha Re: New to Linux - Need help Stephen Smalley New to Linux - Need help Pranav Saha Monday, 25 June Re: SELinux with acl.bestbits.at ext2fs patch Stephen Smalley Saturday, 23 June SELinux with acl.bestbits.at ext2fs patch Darrell McGuire Friday, 22 June Re: [Re: selinux included in new distro] Stephen Smalley Re: [Re: selinux included in new distro] Matt Jezorek Re: selinux included in new distro Stephen Smalley Re: selinux included in new distro Kal Kolberg selinux included in new distro Matt Jezorek Tuesday, 12 June Re: Query on next release Stephen Smalley Query on next release Jonathan Day Monday, 11 June SELinux Performance and Scalability analysis Hubertus Franke Re: setting up selinux Emily Ratliff Re: setting up selinux Hubertus Franke Re: setting up selinux Emily Ratliff Re: Root file system over NFS Stephen Smalley Root file system over NFS Reiner Sailer Re: setting up selinux Stephen Smalley Saturday, 9 June Re: setting up selinux Zachary Uram Friday, 8 June Re: setting up selinux Emily Ratliff Re: setting up selinux Frank Zecca Re: setting up selinux Stephen Smalley RE: hello? Zachary Uram setting up selinux Frank Zecca RE: hello? Jonathan Day Re: hello? Stephen Smalley Thursday, 7 June hello? Zachary Uram Wednesday, 6 June Re: Configuring users Stephen Smalley Re: SeLinux and Loopback Encryption? Stephen Smalley Re: policy Stephen Smalley Configuring users Hugo F. Martinez Monday, 4 June SeLinux and Loopback Encryption? C. Slater Friday, 1 June Re: policy Rajan Ravindran Wednesday, 30 May RE: SELinux on a Workstation Reprise Westerman, Mark Tuesday, 29 May Re: SELinux on a Workstation Reprise Colin Coghill Re: SELinux on a Workstation Reprise Stephen Smalley Re: problem relabel the file system Stephen Smalley SELinux on a Workstation Reprise Jan Petranek Friday, 25 May Avoid Buffer Overflow Simonin, Bradley Thursday, 24 May Re: Compiling Kernel, etc. Benjamin D. Thomas Re: Compiling Kernel, etc. Roger problem relabel the file system Ying-Hung Chen Wednesday, 23 May Re: Compiling Kernel, etc. Jose Nazario Compiling Kernel, etc. Frank Zecca Re: PPC port of SELinux Bob Carver Re: policy Jon Crowley Re: PPC port of SELinux Reiner Sailer Re: Immunity against Buffer Overflows / exploits Jesse Pollard Tuesday, 22 May Re: Immunity against Buffer Overflows / exploits edm_at_tycho.ncsc.mil Re: Immunity against Buffer Overflows / exploits Jesse Pollard RE: Re[2]: SELinux as a desktop / workstation? edm_at_tycho.ncsc.mil Re: Immunity against Buffer Overflows / exploits edm_at_tycho.ncsc.mil policy Hugo F. Martinez Monday, 21 May RE: Re[2]: SELinux as a desktop / workstation? Jesse Pollard RE: Re[2]: SELinux as a desktop / workstation? Stephen Smalley RE: Re[2]: SELinux as a desktop / workstation? Jonathan Day Friday, 18 May Re: Immunity against Buffer Overflows / exploits Jan Petranek Swedish Installation how-to available Thomas Sjogren Re[2]: SELinux as a desktop / workstation? Maksim Otstavnov Re: Immunity against Buffer Overflows / exploits Jesse Pollard Re: Problems compiling: SELinux 200104121417 on Alpha (config/flash.h: No such file or directory) Sean Rolinson Immunity against Buffer Overflows / exploits Jan Petranek Re: SELinux as a desktop / workstation? Jan Petranek RE: Problems compiling: SELinux 200104121417 on Alpha (config/fla sh.h: No such file or directory) Westerman, Mark Re: Problems compiling: SELinux 200104121417 on Alpha (config/flash.h: No such file or directory) Stephen Smalley Thursday, 17 May IDS System Fermin, Fabricio Problems compiling: SELinux 200104121417 on Alpha (config/flash.h: No such file or directory) Sean Rolinson Sunday, 13 May selinux and freeVSD Jonathan Bazemore Saturday, 12 May Re: SELinux as a desktop / workstation? Tom Re: SELinux as a desktop / workstation? Will Dye Re: SELinux as a desktop / workstation? g.montgomery Friday, 11 May Re: SELinux as a desktop / workstation? Bede McCall Re: SELinux as a desktop / workstation? g.montgomery Re: cvs tree Roger Thursday, 10 May cvs tree Roger Wednesday, 9 May Re: Installing selinux on RedHat 7.0 Stephen Smalley Installing selinux on RedHat 7.0 Hugo F. Martinez Tuesday, 8 May kernel security BOF at USENIX tfraser_at_tislabs.com Re: SELinux as a desktop / workstation? Will Dye SELinux as a desktop / workstation? Jan Petranek Monday, 7 May Re: installation problems with checkpolicy Stephen Smalley Re: Installing selinux Stephen Smalley Friday, 4 May Installing selinux Hugo F. Martinez Wednesday, 2 May installation problems with checkpolicy Yanni Kouskoulas Friday, 27 April Re: Sourceforge CVS frenzy_at_frenzy.org Sourceforge CVS Westerman, Mark Saturday, 21 April Re: [BUGTRAQ] Linux patches to solve /tmp race problem Christoph Hellwig Re: [BUGTRAQ] Linux patches to solve /tmp race problem Magosányi Árpád Wednesday, 18 April Re: security enhancements outside of flask model Will Dye Re: [selinux] Re: security enhancements outside of flask model Magosanyi Arpad Re: security enhancements outside of flask model Stephen Smalley Re: security enhancements outside of flask model John S. Gage Tuesday, 17 April Re: Policy configuration errors gawain.lynch_at_felicity-consulting.com.au Updated release Howard Holm Re: security enhancements outside of flask model Stephen Smalley Gnome Display Manager Westerman, Mark security enhancements outside of flask model Michael N. Bernstein Monday, 16 April Re: CC-Evaluation for Flask? Stephen Smalley CC-Evaluation for Flask? Jan Petranek Re: Policy configuration errors Stephen Smalley Policy configuration errors gawain.lynch_at_felicity-consulting.com.au Friday, 13 April Better hooks for higher-security kernels in Linux 2.5 Will Dye Wednesday, 11 April Re: Sourceforge Will Dye Sourceforge Westerman, Mark Re: kernel summit presentation? Pete Loscocco kernel summit presentation? Needham, Douglas Re: Mirror sites Grant Bayley Mirror sites frenzy_at_frenzy.org Tuesday, 10 April Re: I would like to help. Will Dye Re: I would like to help. bcarver2_at_austin.ibm.com Re: I would like to help. Howard Holm Re: I would like to help. bcarver2_at_austin.ibm.com Re: I would like to help. Howard Holm Re: Assorted ramblings Stephen Smalley Re: build-apps trouble. Stephen Smalley Re: build-apps trouble. Howard Holm Monday, 9 April build-apps trouble. Joey Mitchell Comeau Re: I would like to help. Will Dye I would like to help. Joey Mitchell Comeau [Fwd: FC: PGP and NSA link arms to create secure Linux version] Charles Behney Re: Rule Set Based Access Control (RSBAC) Simone Fischer-Hübner Re: Rule Set Based Access Control (RSBAC) Amon Ott Saturday, 7 April RPM spec files gawain.lynch_at_felicity-consulting.com.au Re: Secure? Albert D. Cahalan Friday, 6 April Re: Rule Set Based Access Control (RSBAC) Simone Fischer-Hübner Re: Rule Set Based Access Control (RSBAC) Stephen Smalley Re: Rule Set Based Access Control (RSBAC) Stephen Smalley Re: Rule Set Based Access Control (RSBAC) Amon Ott Re: Rule Set Based Access Control (RSBAC) Stephen Smalley Re: Rule Set Based Access Control (RSBAC) Stephen Smalley Re: Rule Set Based Access Control (RSBAC) Amon Ott Thursday, 5 April Re: Rule Set Based Access Control (RSBAC) Stephen Smalley Re: Rule Set Based Access Control (RSBAC) Amon Ott Re: Rule Set Based Access Control (RSBAC) Amon Ott Wednesday, 4 April Assorted ramblings Jonathan Day Re: Rule Set Based Access Control (RSBAC) Stephen Smalley Re: Rule Set Based Access Control (RSBAC) Amon Ott Kernel summit results? Needham, Douglas Re: Rule Set Based Access Control (RSBAC) Amon Ott Tuesday, 3 April Re: Rule Set Based Access Control (RSBAC) Stephen Smalley Re: Rule Set Based Access Control (RSBAC) Amon Ott Monday, 2 April Re: Rule Set Based Access Control (RSBAC) Stephen Smalley Re: Rule Set Based Access Control (RSBAC) K Mitchell Russell Re: Rule Set Based Access Control (RSBAC) Hubertus Franke Re: Support for multiple SELinux hosts Stephen Smalley Rule Set Based Access Control (RSBAC) Manoj Srivastava Sunday, 1 April Support for multiple SELinux hosts David Chatterton Friday, 30 March Re: Problem in installation... gawain.lynch_at_felicity-consulting.com.au Re: Error in tools/build-apps Kris Odland Re: Error in tools/build-apps Stephen Smalley Error in tools/build-apps Kris Odland Re: SE Linux problems on 7.0 and some other BUGS we found Stephen Smalley SE Linux problems on 7.0 and some other BUGS we found Hubertus Franke Re: Can I compile NSA Linux 2.4.2 kernel the same way I do a the norm al 2.4.2 kernel? Stephen Smalley Thursday, 29 March RE: Can I compile NSA Linux 2.4.2 kernel the same way I do a the norm al 2.4.2 kernel? Bede McCall Re: A New Virus Albert D. Cahalan Can I compile NSA Linux 2.4.2 kernel the same way I do a the norm al 2.4.2 kernel? Simonin, Bradley Re: Context switches Jon Crowley Re: Context switches Stephen Smalley Context switches McFarland, David M. Re: A New Virus Joshua Brindle Re: error while building initial policy Stephen Smalley error while building initial policy Rajan Ravindran Re: Problem in installation... Stephen Smalley A New Virus Kutz, William R Wednesday, 28 March Re: Problem in installation... gawain.lynch_at_felicity-consulting.com.au Re: Problem in installation... Stephen Smalley Problem in installation... Rajan Ravindran Monday, 26 March Re: Transition from RBAC to MLS Stephen Smalley Re: your mail Stephen Smalley Re: your mail Stephen Smalley Saturday, 24 March Re: your mail Hubertus Franke Slashdot Thread Chris Crowther Re: your mail frenzy_at_frenzy.org Friday, 23 March Re: your mail gawain.lynch_at_felicity-consulting.com.au Re: your mail Chris Crowther (no subject) Hubertus Franke Re: Transition from RBAC to MLS Stephen Smalley Transition from RBAC to MLS Marting, Steve Thursday, 22 March Re: [selinux] Re: lids Magosányi Árpád Wednesday, 21 March Re: lids Pedro Rosa Re: lids Stephen Smalley Tuesday, 20 March Re: lids Pedro Rosa Re: lids Pedro Rosa Re: lids Tracy R Reed Re: lids Jose Nazario Re: lids Stephen Smalley Re: lids Pedro Rosa Re: SELinux compatible with XFS? Florin Andrei Re: lids Stephen Smalley Re: SELinux compatible with XFS? Michael Tiemann Monday, 19 March lids Jeff Largent Re: SELinux compatible with XFS? Jose Nazario Re: SELinux compatible with XFS? Howard Holm Sunday, 18 March SELinux compatible with XFS? K Mitchell Russell Friday, 16 March Re: Updated release Grant Bayley Re: Secure? Bennett Todd Re: seLinux and ReiserFS Stephen Smalley seLinux and ReiserFS Mark Lucas Re: Secure? Stephen Smalley Updated release Howard Holm Re: Secure? Pedro Rosa Thursday, 15 March Re: The list is messed up... Repeating threads... John Galt RE: Secure? Ben Breuninger filtering (was Re: Thoughts on the list...) jpelna Secure? Kurth Bemis Wednesday, 14 March securedistros mailing list subscription info [was: Re: Is this mail list dead?] Martin Stricker RE: This list is messed up... -- please kill this thread Bede McCall RE: Is this mail list dead? -- please kill this thread Bede McCall Re: The list is messed up... Repeating threads... Tom Bradford Re: The list is messed up... Repeating threads... Pedro Rosa Re: The list is messed up... Repeating threads... Jose Nazario Re: The list is messed up... Repeating threads... JJohnson Re: The list is messed up... Repeating threads... Mark Bodziony Re: The list is messed up... Repeating threads... Chris Crowther Re: Is this mail list dead? Pedro Rosa Tuesday, 13 March Re: The list is messed up... Repeating threads... Martin Stricker Re: performance questions? gawain.lynch_at_felicity-consulting.com.au Re: Is this mail list dead? Casey Schaufler The list is messed up... Repeating threads... Matt Schroeder Re: Thoughts on the list... Nicholas Bastin RE: 2.4.x porting Needham, Douglas RE: Thoughts on the list... Laverty, James Re: Thoughts on the list... Jeffry Smith Re: performance questions? Pete Loscocco Re: Thoughts on the list... Jim Popovitch Re: How is 2.4.x progressing? Pete Loscocco Re: 2.4.x porting Pete Loscocco performance questions? Needham, Douglas Re: Is this mail list dead? Pedro Rosa Monday, 12 March Re: Is this mail list dead? Chris Re: Is this mail list dead? Tracy R Reed Friday, 9 March 2.4.x porting Justin Ramos FYI: IBM Article Dustin Reyes Re: RedHat 7.0? Wade Hampton How is 2.4.x progressing? Johnathon Day Re: archives? Tracy R Reed RE: RedHat 7.0? Ellis, Wes Re: RedHat 7.0? Michael Tiemann Re: RedHat 7.0? richard offer Re: RedHat 7.0? Wade Hampton RE: RedHat 7.0? Westerman, Mark Thursday, 8 March Re: make errors with policy Chris Crowther make errors with policy Dan DeVries RedHat 7.0? Wade Hampton Wednesday, 7 March Re: Thoughts on the list... Chris Crowther Tuesday, 6 March Re: Thoughts on the list... Joshua Brindle Re: Thoughts on the list... feel free to end this thread Matt Schroeder Re: Thoughts on the list... Jesse Pollard Thoughts on the list... Matt Schroeder Re: archives? Stephen Smalley archives? Tracy R Reed Friday, 2 March Re: Adding users Stephen Smalley Adding users Mark Slagell Wednesday, 28 February RE: Is This a bad thing.... Bede McCall RE: Is This a bad thing.... Pagano, Art Tuesday, 27 February Re: Security approval question Jesse Pollard Security approval question Mark Lucas Monday, 26 February Clusters and SELinux (was Re: New to list) Chuck Watson Re: New to list Howard Holm Re: New to list Jose Nazario New to list Mark Lucas Re: questions... Casey Schaufler Re: Is This a bad thing.... Stephen Smalley Is This a bad thing.... Pagano, Art Friday, 23 February Is This a Bad Thing! Pagano, Art Re: questions... Pete Loscocco Thursday, 22 February Re: questions... Casey Schaufler Re: questions... Stephen Smalley Re: questions... Pete Loscocco Re: questions... Casey Schaufler Re: questions... Stephen Smalley questions... jgko_at_etri.re.kr Wednesday, 21 February Re: Err when ./tools/build-apps Stephen Smalley Err when ./tools/build-apps Dan DeVries RE: compute sid Westerman, Mark Re: compute sid Stephen Smalley compute sid Westerman, Mark Re: scontext/tcontext/tclass Mark Slagell Tuesday, 20 February Re: scontext/tcontext/tclass Stephen Smalley Re: Mailing list archives (was: new B) Stephen Smalley RE: scontext/tcontext/tclass Bede McCall Monday, 19 February new B Shelley Ferguson Re: scontext/tcontext/tclass Jen Salois scontext/tcontext/tclass Mark Slagell Wednesday, 14 February Re: Porting to SELinux Stephen Smalley Re: Redhat 7 Stephen Smalley Re: Redhat 7 Stephen Smalley Redhat 7 Westerman, Mark Tuesday, 13 February Porting to SELinux Robertson Wayne Monday, 12 February Re: hwclock Stephen Smalley hwclock Westerman, Mark Re: SeLinux Question Jen Salois Re: SeLinux Question Stephen Smalley SeLinux Question Westerman, Mark Re: Looking to help with a crypto design Johnathon Day Re: Looking to help with a crypto design Sandy Harris Sunday, 11 February Re: Looking to help with a crypto design Dustin Reyes Looking to help with a crypto design snagnbytz Friday, 9 February Re: Crypto FS Sandy Harris Re: Crypto FS Pete Loscocco Re: First Time SELinux Install Jose Nazario First Time SELinux Install Pagano, Art FW: Cature the flag (was Re: Selinux kernel patches) Ellis, Wes RE: Cature the flag (was Re: Selinux kernel patches) Ellis, Wes Re: Cature the flag (was Re: Selinux kernel patches) Daniel Harrison Re: Cature the flag (was Re: Selinux kernel patches) Jose Nazario RE: Cature the flag (was Re: Selinux kernel patches) John Cordani Re: Cature the flag (was Re: Selinux kernel patches) paul Re: Selinux kernel patches paul Re: Cature the flag (was Re: Selinux kernel patches) paul boot image file Sankar Karvannan Re: Crypto FS Dale Amon Thursday, 8 February Cature the flag (was Re: Selinux kernel patches) Sandy Harris Crypto FS Dustin Reyes Re: Crypto FS Dustin Reyes Re: Selinux kernel patches Christopher McCrory Re: Selinux kernel patches Dale Amon Tuesday, 6 February Re: Selinux kernel patches Pete Loscocco Re: Division of Labor? Howard Holm Re: PPC port of SELinux Howard Holm Selinux kernel patches Joshua Brindle Re: Division of Labor? Johnathon Day Re: PPC port of SELinux Stephen Smalley Re: PPC port of SELinux Stephen Smalley Monday, 5 February PPC port of SELinux Smith, Randall B Re: Division of Labor? Stephen Smalley Saturday, 3 February Re: diagrams for a secure network Andrew Dorsett Division of Labor? Dustin Reyes diagrams for a secure network Jon Bazemore Thursday, 25 January error in fs/attr.c Stephen Smalley Tuesday, 23 January DARPA Research Initiative dmaughan Re: SELinux & Linux-privs projects Casey Schaufler Re: [Linux-privs-discuss] SELinux & Linux-privs projects Robert Watson Monday, 22 January File system security Ron W. Auld Thursday, 18 January Re: porting to 2.4? Stephen Smalley Wednesday, 17 January RE: [Linux-privs-discuss] SELinux & Linux-privs projects Jesse Pollard Tuesday, 16 January RE: [Linux-privs-discuss] SELinux & Linux-privs projects LA Walsh RE: [Linux-privs-discuss] SELinux & Linux-privs projects Jesse Pollard RE: [Linux-privs-discuss] SELinux & Linux-privs projects LA Walsh RE: Ros: Re: enhanced security for Linux, from Stephen Smalley Nelson Rush Re: Goal / Danger: Attack by malicious root Roger Re: Ros: Re: enhanced security for Linux, from Stephen Smalley Casey Schaufler Re: Goal / Danger: Attack by malicious root Stephen Smalley RE: Goal / Danger: Attack by malicious root Matthew Pemble Monday, 15 January Re: Goal / Danger: Attack by malicious root Johnathon Day Re: Goal / Danger: Attack by malicious root Bennett Todd Re: Goal / Danger: Attack by malicious root Robert Hartley Re: Goal / Danger: Attack by malicious root Johnathon Day RE: Goal / Danger: Attack by malicious root Preston L. Bannister Re: Goal / Danger: Attack by malicious root Andi Kleen Re: Goal / Danger: Attack by malicious root Bennett Todd Goal / Danger: Attack by malicious root Jan Petranek Friday, 12 January RE: [selinux] RE: Ros: Re: enhanced security for Linux, from Stephen Smalley Nelson Rush RE: Ros: Re: enhanced security for Linux, from Stephen Smalley Nelson Rush RE: [Linux-privs-discuss] SELinux & Linux-privs projects LA Walsh RE: [Linux-privs-discuss] SELinux & Linux-privs projects Jesse Pollard RE: [Linux-privs-discuss] SELinux & Linux-privs projects LA Walsh Open Source IPSec implementations (was Re: Security enhancements, et al) Bennett Todd Re: Security enhancements, et al Jean-Jacques Bernard-Gundol Thursday, 11 January Re: [Linux-privs-discuss] SELinux & Linux-privs projects Casey Schaufler Re: IPSEC integration (was Re: SELinux and covert channels) Jesse Pollard Re: [selinux] Re: SELinux and covert channels Jesse Pollard Re: [Linux-privs-discuss] SELinux & Linux-privs projects Jesse Pollard Re: SELinux & Linux-privs projects Stephen Smalley Re: IPSEC integration (was Re: SELinux and covert channels) Bennett Todd Re: [selinux] Re: SELinux and covert channels Andi Kleen Re: IPSEC integration (was Re: SELinux and covert channels) Jesse Pollard Re: [Linux-privs-discuss] SELinux & Linux-privs projects Christoph Hellwig Re: [selinux] Re: SELinux and covert channels Jesse Pollard (offtopic) Re: [Linux-privs-discuss] SELinux & Linux-privs projects Andrew Morgan Re: [Linux-privs-discuss] SELinux & Linux-privs projects Stephen Smalley Re: SELinux & Linux-privs projects Huagang Xie Re: [Linux-privs-discuss] SELinux & Linux-privs projects Christoph Hellwig Re: [Linux-privs-discuss] SELinux & Linux-privs projects Christoph Hellwig Re: [Linux-privs-discuss] Re: SELinux & Linux-privs projects Christoph Hellwig Re: Security enhancements, et al RJ Atkinson Re: [Linux-privs-discuss] SELinux & Linux-privs projects Casey Schaufler Re: IPSEC integration (was Re: SELinux and covert channels) Bennett Todd Re: [selinux] Re: SELinux and covert channels Andi Kleen Re: [Linux-privs-discuss] SELinux & Linux-privs projects Stephen Smalley Re: [Linux-privs-discuss] SELinux & Linux-privs projects Stephen Smalley Re: IPSEC integration (was Re: SELinux and covert channels) Jesse Pollard Re: [Linux-privs-discuss] SELinux & Linux-privs projects Stephen Smalley IPSEC integration (was Re: SELinux and covert channels) Bennett Todd Re: SELinux & Linux-privs projects Stephen Smalley SELinux & Linux-privs projects Jeffry Smith Re: [selinux] Re: SELinux and covert channels Bennett Todd Re: [selinux] Re: SELinux and covert channels Stephen Smalley Wednesday, 10 January Re: [selinux] Re: SELinux and covert channels Magosányi Árpád RE: SELinux and covert channels Phillip H. Zakas Responses to administrative issues Howard D. Holm Re: SELinux and covert channels Andi Kleen RE: SELinux and covert channels Jose Nazario Re: SELinux and covert channels Jose Nazario RE: SELinux and covert channels Kutz, William R Re: SELinux and covert channels Andi Kleen RE: SELinux and covert channels Belmonte, Christopher RE: SELinux and covert channels Phillip H. Zakas Re: Ros: Re: enhanced security for Linux, from Stephen Smalley Casey Schaufler Re: [selinux] SELinux and covert channels Magosányi Árpád RE: Security enhancements, et al Stephen Smalley RE: Security enhancements, et al Stephen Smalley RE: Security enhancements, et al Jose Nazario RE: Security enhancements, et al Belmonte, Christopher SELinux and covert channels Belmonte, Christopher RE: Security enhancements, et al Belmonte, Christopher RE: Ros: Re: enhanced security for Linux, from Stephen Smalley Badger, Lee Re: Security enhancements, et al Stephen Smalley Re: Embedded SE Linux Stephen Smalley Re: Embedded SE Linux Johnathon Day Security enhancements, et al Johnathon Day Re: Embedded SE Linux William Sloan Tuesday, 9 January Acceptabilty of Security-enhanced Linux Pete Loscocco Re: Selinux and C2 type audit module Stephen Smalley Selinux and C2 type audit module George Cora Questions ? Sara Spencer Monday, 8 January Re: Comparison with POSIX.1e MAC Stephen Smalley Comparison with POSIX.1e MAC Andrew Morgan Re: Embedded SE Linux Stephen Smalley Re: porting to 2.4? Stephen Smalley Sunday, 7 January Participation chuck Saturday, 6 January Re: Embedded SE Linux Grant Bayley Embedded SE Linux Sara Spencer Thursday, 4 January Australian mirror updated Grant Bayley RE: [selinux] subject prefix? jeffrey.denton_at_hua.army.mil Re: Missing header files Stephen Smalley Missing header files Harald von Fellenberg - Sun Switzerland Zurich - Technology Strategy Office Tuesday, 2 January Updated release Pete Loscocco Monday, 1 January Re: porting to 2.4? Johnathon Day Sunday, 31 December Re: [selinux] subject prefix? Magosányi Árpád subject prefix? Marc Heuse Saturday, 30 December RE: porting to 2.4? Frank Stratton Re: Mirror Site RJ Atkinson Friday, 29 December Re: porting to 2.4? Stephen Smalley Thursday, 28 December Re: Moving new system calls Stephen Smalley Generic Access Control Interface (GACI) discussion list Amon Ott Wednesday, 27 December archive for the selinux list Hank Leininger Moving new system calls Stephen Smalley porting to 2.4? Steven King reiser and lvm Magosanyi Arpad documentation enhancement Magosanyi Arpad Tuesday, 26 December sightly offtopic: mainstream Magosányi Árpád Re: [selinux] Re: Mirror Site richard offer Re: [selinux] Re: Mirror Site Andi Kleen Re: Mirror Site Grant Bayley Re: [selinux] Re: Mirror Site Magosányi Árpád Re: Mirror Site Ben Johnson Re: Mirror Site Douglas Re: Mirror Site richard offer Re: Mirror Site Howard D. Holm Re: questions Stephen Smalley RE: Mirror Site Dabney, NathanX Re: questions Stephen Smalley Mirror Site Ben Johnson questions Magosanyi Arpad Re: Using other Linux distributions Stephen Smalley Using other Linux distributions Stephen Smalley Re: procps patches Stephen Smalley Re: buffer overflow in libsecure/get_default_type.c Stephen Smalley Re: Does this address the setuid() bug? Stephen Smalley Re: anyone out there? Stephen Smalley buffer overflow in libsecure/get_default_type.c Matt Power Sunday, 24 December Re: Linux setuid bug Jacques Richer Re: Linux setuid bug Tom Saturday, 23 December Linux setuid bug Jacques Richer Re: Does this address the setuid() bug? Jeremiah Johnson Does this address the setuid() bug? Bucky Goldstein anyone out there? Jose Nazario Friday, 22 December Re: NSA's Security-enchanced Linux now available Stephen Smalley procps patches Albert D. Cahalan Re: well.. stuff doesnt build. Jeremiah Johnson Re: well.. stuff doesnt build. Stephen Smalley well.. stuff doesnt build. Jeremiah Johnson Re: NSA's Security-enchanced Linux now available ratz NSA's Security-enchanced Linux now available Pete Loscocco Last message date: Tue 2 Dec 2008 - 14:31:30 EST Archived on: Wed 3 Dec 2008 - 08:22:46 EST 28371 messages sort by: [ thread ] [ author ] [ date ] [ subject ] Nearby: [ About this archive ]
	Date Posted: Jan 15, 2009 \| Last Modified: Jan 15, 2009 \| Last Reviewed: Jan 15, 2009

bottom