1. 88c79c6 libsepol: Refactor match_any_class_permissions() to be clearer by James Carter · 2 years, 10 months ago
  2. 3b71e51 libsepol: Make use of previously created ebitmap when checking self by James Carter · 2 years, 10 months ago
  3. cfdf4ec libsepol: Move assigning outer loop index out of inner loop by James Carter · 2 years, 10 months ago
  4. 8f64382 libsepol: Remove unnessesary check for matching class by James Carter · 2 years, 10 months ago
  5. 68d32d2 libsepol: Use (rc < 0) instead of (rc) when calling ebitmap functions by James Carter · 2 years, 10 months ago
  6. 7312d3c libsepol: Create function check_assertion_self_match() and use it by James Carter · 2 years, 10 months ago
  7. d4456cb libsepol: Move check of target types to before check for self by James Carter · 2 years, 10 months ago
  8. a9d5688 libsepol: Use consistent return checking style by James Carter · 2 years, 10 months ago
  9. 18e1ae1 libsepol: Check for error from check_assertion_extended_permissions() by James Carter · 2 years, 10 months ago
  10. a700e42 libsepol: Remove uneeded error messages in assertion checking by James Carter · 2 years, 10 months ago
  11. c2af893 libsepol: Change label in check_assertion_avtab_match() by James Carter · 2 years, 10 months ago
  12. 521e6ad libsepol: Return an error if check_assertion() returns an error. by James Carter · 2 years, 10 months ago
  13. 4be0e2e checkpolicy: allow wildcard permissions in constraints by Christian Göttsche · 2 years, 9 months ago
  14. ff25475 libsepol: validate several flags by Christian Göttsche · 2 years, 9 months ago
  15. 9bee80d libsepol: more strict constraint validation by Christian Göttsche · 2 years, 9 months ago
  16. 496002e libsepol: use correct error type to please UBSAN by Christian Göttsche · 2 years, 9 months ago
  17. 2d08c5d semodule: add command-line option to detect module changes by Ondrej Mosnacek · 2 years, 9 months ago
  18. 286a679 libsemanage: optionally rebuild policy when modules are changed externally by Ondrej Mosnacek · 2 years, 9 months ago
  19. df9f71a libsemanage: clean up semanage_direct_commit() a bit by Ondrej Mosnacek · 2 years, 9 months ago
  20. d01ec02 libsemanage: move compressed file handling into a separate object by Ondrej Mosnacek · 2 years, 9 months ago
  21. 67e6201 semodule,libsemanage: move module hashing into libsemanage by Ondrej Mosnacek · 2 years, 9 months ago
  22. 6f9e771 libsemanage: add missing include to boolean_record.c by Ondrej Mosnacek · 2 years, 9 months ago
  23. 86cdb9f libsepol/cil: Ensure that the class in a classcommon is a kernel class by James Carter · 2 years, 10 months ago
  24. f0823bb libsepol/cil: Do not resolve names to declarations in abstract blocks by James Carter · 2 years, 10 months ago
  25. 6d783e5 libsepol/cil: Mark as abstract all sub-blocks of an abstract block by James Carter · 2 years, 10 months ago
  26. e642996 libsepol/cil: Do not copy blockabstracts when inheriting a block by James Carter · 2 years, 10 months ago
  27. 58443a0 libsepol: do not add gaps to string list by Christian Göttsche · 2 years, 10 months ago
  28. 9229f8b policycoreutils: handle argument counter of zero by Christian Göttsche · 2 years, 10 months ago
  29. 7385004 libsepol: invert only valid range of role bitmap by Christian Göttsche · 2 years, 10 months ago
  30. 42a8dc4 libsepol: handle type gaps by Christian Göttsche · 2 years, 10 months ago
  31. b8cba27 libsepol: drop trailing newlines in log messages by Christian Göttsche · 2 years, 10 months ago
  32. f52f5e2 libsepol: return failure on saturated class name length by Christian Göttsche · 2 years, 10 months ago
  33. c3d52a6 libsepol: check for saturated class name length by Christian Göttsche · 2 years, 10 months ago
  34. b8004f0 policycoreutils: Improve error message when selabel_open fails by Vit Mojzis · 2 years, 10 months ago
  35. ad2ff8a ci: run the tests under ASan/UBsan on GHActions by Evgeny Vereshchagin · 3 years ago
  36. b78560f libsepol: check for valid sensitivity before lookup by Christian Göttsche · 2 years, 11 months ago
  37. b2ba721 libsepol/cil: bail out on snprintf failure by Christian Göttsche · 2 years, 11 months ago
  38. 5e6e516 libsepol: validate class default targets by Christian Göttsche · 3 years ago
  39. 24618ad libsepol: validate fsuse types by Christian Göttsche · 3 years ago
  40. 8a7215c libsepol: validate categories by Christian Göttsche · 3 years ago
  41. 80b9441 libsepol: validate policy properties by Christian Göttsche · 3 years ago
  42. 2c4da50 libsepol: validate permissive types by Christian Göttsche · 3 years ago
  43. 88e280a libsepol: validate genfs contexts by Christian Göttsche · 3 years ago
  44. 8628133 libsepol: validate ocontexts by Christian Göttsche · 3 years ago
  45. 5f81623 libsepol: validate type of avtab type rules by Christian Göttsche · 3 years ago
  46. 8c59d61 libsepol: validate constraint expression operators and attributes by Christian Göttsche · 3 years ago
  47. 312eac1 libsepol: validate avtab and avrule types by Christian Göttsche · 3 years ago
  48. ba6d822 libsepol: resolve log message mismatch by Christian Göttsche · 3 years ago
  49. e39cf0a libsepol: validate permission count of classes by Christian Göttsche · 3 years ago
  50. fffb160 libsepol: validate expanded user range and level by Christian Göttsche · 3 years ago
  51. 8fdb3eb libsepol: validate MLS levels by Christian Göttsche · 3 years ago
  52. e2e60d9 libsepol: split validation of datum array gaps and entries by Christian Göttsche · 3 years ago
  53. 691e6af libsepol: do not create a string list with initial size zero by Christian Göttsche · 3 years ago
  54. 35ef9b9 libsepol: use correct size for initial string list by Christian Göttsche · 3 years ago
  55. 7315402 libsepol: do not crash on user gaps by Christian Göttsche · 3 years ago
  56. b76eda5 libsepol: do not crash on class gaps by Christian Göttsche · 3 years ago
  57. c12b7d9 libsepol: do not underflow on short format arguments by Christian Göttsche · 3 years ago
  58. 47c3d96 libsepol: use size_t for indexes in strs helpers by Christian Göttsche · 3 years ago
  59. 8565e2c libsepol: zero member before potential dereference by Christian Göttsche · 3 years ago
  60. 1b4979c libsepol: reject invalid filetrans source type by Christian Göttsche · 3 years ago
  61. 8750fb6 libsepol: reject abnormal huge sid ids by Christian Göttsche · 3 years ago
  62. f571438 libsepol: clean memory on conditional insertion failure by Christian Göttsche · 3 years ago
  63. 2331dca libsepol: enforce avtab item limit by Christian Göttsche · 3 years ago
  64. 97af65f libsepol: add checks for read sizes by Christian Göttsche · 3 years ago
  65. f0a5f6e libsepol: use reallocarray wrapper to avoid overflows by Christian Göttsche · 3 years ago
  66. 18303c8 libsepol: use mallocarray wrapper to avoid overflows by Christian Göttsche · 3 years ago
  67. 852f14d libsepol: use logging framework in ebitmap.c by Christian Göttsche · 3 years ago
  68. 5c178f9 libsepol: use logging framework in conditional.c by Christian Göttsche · 3 years ago
  69. 5139433 libsepol/fuzz: limit element sizes for fuzzing by Christian Göttsche · 3 years ago
  70. 8243834 libsepol: add libfuzz based fuzzer for reading binary policies by Christian Göttsche · 3 years ago
  71. e0ba116 libsepol/fuzz: silence secilc-fuzzer by Christian Göttsche · 3 years ago
  72. bf5ff1a cifuzz: use the default runtime of 600 seconds by Christian Göttsche · 3 years ago
  73. 01ce791 cifuzz: enable report-unreproducible-crashes by Christian Göttsche · 3 years ago
  74. 01b88ac checkpolicy: warn on bogus IP address or netmask in nodecon statement by Christian Göttsche · 3 years ago
  75. 413518a libsepol/cil: support IPv4/IPv6 address embedding by Christian Göttsche · 3 years ago
  76. 4ffe2df Replace PCRE with PCRE2 build dependencies by Christian Göttsche · 3 years ago
  77. e0da140 libselinux: use PCRE2 by default by Christian Göttsche · 3 years ago
  78. 647909c mcstrans: port to new PCRE2 from end-of-life PCRE by Christian Göttsche · 3 years ago
  79. a46ade3 libsepol: Write out genfscon file type when writing out CIL policy by James Carter · 3 years ago
  80. 03b1dca secilc/docs: Document the optional file type for genfscon rules by James Carter · 3 years ago
  81. 3677af8 libsepol/cil: Allow optional file type in genfscon rules by James Carter · 3 years ago
  82. c9ed552 libsepol/cil: Refactor filecon file type handling by James Carter · 3 years ago
  83. 55e6748 libsepol: Add support for file types in writing out policy.conf by James Carter · 3 years ago
  84. 1cbce56 Modified Russian and English man pages to fix typo; REQUIREUSERS -> REQUIRESEUSERS by Cutright Jacob · 3 years ago
  85. 4bafb8e libselinux: Fix selinux_restorecon_parallel symbol version by Petr Lautrbach · 3 years ago
  86. c28763c semodule: Don't forget to munmap() data by Petr Lautrbach · 3 years ago
  87. f37b3e9 semodule: Fix lang_ext column index by Petr Lautrbach · 3 years ago
  88. ed4813b semodule: add -m | --checksum option by Petr Lautrbach · 3 years ago
  89. 93902fc setfiles/restorecon: support parallel relabeling by Ondrej Mosnacek · 3 years, 1 month ago
  90. 02f302f selinux_restorecon: introduce selinux_restorecon_parallel(3) by Ondrej Mosnacek · 3 years, 1 month ago
  91. a578d1c selinux_restorecon: add a global mutex to synchronize progress output by Ondrej Mosnacek · 3 years, 1 month ago
  92. 78bdce9 libselinux: make is_context_customizable() thread-safe by Ondrej Mosnacek · 3 years, 1 month ago
  93. a3516ec libselinux: make selinux_log() thread-safe by Ondrej Mosnacek · 3 years, 1 month ago
  94. 4642705 selinux_restorecon: protect file_spec list with a mutex by Ondrej Mosnacek · 3 years, 1 month ago
  95. 43dc50f selinux_restorecon: simplify fl_head allocation by using calloc() by Ondrej Mosnacek · 3 years, 1 month ago
  96. abe410a label_file: fix a data race by Ondrej Mosnacek · 3 years, 1 month ago
  97. f7ec4b4 libsemanage: add extern prototype for legacy function by Christian Göttsche · 3 years ago
  98. 35273aa libsemanage: include paired header for prototypes by Christian Göttsche · 3 years ago
  99. 1927c1d libsemanage: mark local functions static by Christian Göttsche · 3 years ago
  100. 0fd5d05 mcstrans: avoid missing prototypes by Christian Göttsche · 3 years ago