- 88c79c6 libsepol: Refactor match_any_class_permissions() to be clearer by James Carter · 2 years, 10 months ago
- 3b71e51 libsepol: Make use of previously created ebitmap when checking self by James Carter · 2 years, 10 months ago
- cfdf4ec libsepol: Move assigning outer loop index out of inner loop by James Carter · 2 years, 10 months ago
- 8f64382 libsepol: Remove unnessesary check for matching class by James Carter · 2 years, 10 months ago
- 68d32d2 libsepol: Use (rc < 0) instead of (rc) when calling ebitmap functions by James Carter · 2 years, 10 months ago
- 7312d3c libsepol: Create function check_assertion_self_match() and use it by James Carter · 2 years, 10 months ago
- d4456cb libsepol: Move check of target types to before check for self by James Carter · 2 years, 10 months ago
- a9d5688 libsepol: Use consistent return checking style by James Carter · 2 years, 10 months ago
- 18e1ae1 libsepol: Check for error from check_assertion_extended_permissions() by James Carter · 2 years, 10 months ago
- a700e42 libsepol: Remove uneeded error messages in assertion checking by James Carter · 2 years, 10 months ago
- c2af893 libsepol: Change label in check_assertion_avtab_match() by James Carter · 2 years, 10 months ago
- 521e6ad libsepol: Return an error if check_assertion() returns an error. by James Carter · 2 years, 10 months ago
- 4be0e2e checkpolicy: allow wildcard permissions in constraints by Christian Göttsche · 2 years, 9 months ago
- ff25475 libsepol: validate several flags by Christian Göttsche · 2 years, 9 months ago
- 9bee80d libsepol: more strict constraint validation by Christian Göttsche · 2 years, 9 months ago
- 496002e libsepol: use correct error type to please UBSAN by Christian Göttsche · 2 years, 9 months ago
- 2d08c5d semodule: add command-line option to detect module changes by Ondrej Mosnacek · 2 years, 9 months ago
- 286a679 libsemanage: optionally rebuild policy when modules are changed externally by Ondrej Mosnacek · 2 years, 9 months ago
- df9f71a libsemanage: clean up semanage_direct_commit() a bit by Ondrej Mosnacek · 2 years, 9 months ago
- d01ec02 libsemanage: move compressed file handling into a separate object by Ondrej Mosnacek · 2 years, 9 months ago
- 67e6201 semodule,libsemanage: move module hashing into libsemanage by Ondrej Mosnacek · 2 years, 9 months ago
- 6f9e771 libsemanage: add missing include to boolean_record.c by Ondrej Mosnacek · 2 years, 9 months ago
- 86cdb9f libsepol/cil: Ensure that the class in a classcommon is a kernel class by James Carter · 2 years, 10 months ago
- f0823bb libsepol/cil: Do not resolve names to declarations in abstract blocks by James Carter · 2 years, 10 months ago
- 6d783e5 libsepol/cil: Mark as abstract all sub-blocks of an abstract block by James Carter · 2 years, 10 months ago
- e642996 libsepol/cil: Do not copy blockabstracts when inheriting a block by James Carter · 2 years, 10 months ago
- 58443a0 libsepol: do not add gaps to string list by Christian Göttsche · 2 years, 10 months ago
- 9229f8b policycoreutils: handle argument counter of zero by Christian Göttsche · 2 years, 10 months ago
- 7385004 libsepol: invert only valid range of role bitmap by Christian Göttsche · 2 years, 10 months ago
- 42a8dc4 libsepol: handle type gaps by Christian Göttsche · 2 years, 10 months ago
- b8cba27 libsepol: drop trailing newlines in log messages by Christian Göttsche · 2 years, 10 months ago
- f52f5e2 libsepol: return failure on saturated class name length by Christian Göttsche · 2 years, 10 months ago
- c3d52a6 libsepol: check for saturated class name length by Christian Göttsche · 2 years, 10 months ago
- b8004f0 policycoreutils: Improve error message when selabel_open fails by Vit Mojzis · 2 years, 10 months ago
- ad2ff8a ci: run the tests under ASan/UBsan on GHActions by Evgeny Vereshchagin · 3 years ago
- b78560f libsepol: check for valid sensitivity before lookup by Christian Göttsche · 2 years, 11 months ago
- b2ba721 libsepol/cil: bail out on snprintf failure by Christian Göttsche · 2 years, 11 months ago
- 5e6e516 libsepol: validate class default targets by Christian Göttsche · 3 years ago
- 24618ad libsepol: validate fsuse types by Christian Göttsche · 3 years ago
- 8a7215c libsepol: validate categories by Christian Göttsche · 3 years ago
- 80b9441 libsepol: validate policy properties by Christian Göttsche · 3 years ago
- 2c4da50 libsepol: validate permissive types by Christian Göttsche · 3 years ago
- 88e280a libsepol: validate genfs contexts by Christian Göttsche · 3 years ago
- 8628133 libsepol: validate ocontexts by Christian Göttsche · 3 years ago
- 5f81623 libsepol: validate type of avtab type rules by Christian Göttsche · 3 years ago
- 8c59d61 libsepol: validate constraint expression operators and attributes by Christian Göttsche · 3 years ago
- 312eac1 libsepol: validate avtab and avrule types by Christian Göttsche · 3 years ago
- ba6d822 libsepol: resolve log message mismatch by Christian Göttsche · 3 years ago
- e39cf0a libsepol: validate permission count of classes by Christian Göttsche · 3 years ago
- fffb160 libsepol: validate expanded user range and level by Christian Göttsche · 3 years ago
- 8fdb3eb libsepol: validate MLS levels by Christian Göttsche · 3 years ago
- e2e60d9 libsepol: split validation of datum array gaps and entries by Christian Göttsche · 3 years ago
- 691e6af libsepol: do not create a string list with initial size zero by Christian Göttsche · 3 years ago
- 35ef9b9 libsepol: use correct size for initial string list by Christian Göttsche · 3 years ago
- 7315402 libsepol: do not crash on user gaps by Christian Göttsche · 3 years ago
- b76eda5 libsepol: do not crash on class gaps by Christian Göttsche · 3 years ago
- c12b7d9 libsepol: do not underflow on short format arguments by Christian Göttsche · 3 years ago
- 47c3d96 libsepol: use size_t for indexes in strs helpers by Christian Göttsche · 3 years ago
- 8565e2c libsepol: zero member before potential dereference by Christian Göttsche · 3 years ago
- 1b4979c libsepol: reject invalid filetrans source type by Christian Göttsche · 3 years ago
- 8750fb6 libsepol: reject abnormal huge sid ids by Christian Göttsche · 3 years ago
- f571438 libsepol: clean memory on conditional insertion failure by Christian Göttsche · 3 years ago
- 2331dca libsepol: enforce avtab item limit by Christian Göttsche · 3 years ago
- 97af65f libsepol: add checks for read sizes by Christian Göttsche · 3 years ago
- f0a5f6e libsepol: use reallocarray wrapper to avoid overflows by Christian Göttsche · 3 years ago
- 18303c8 libsepol: use mallocarray wrapper to avoid overflows by Christian Göttsche · 3 years ago
- 852f14d libsepol: use logging framework in ebitmap.c by Christian Göttsche · 3 years ago
- 5c178f9 libsepol: use logging framework in conditional.c by Christian Göttsche · 3 years ago
- 5139433 libsepol/fuzz: limit element sizes for fuzzing by Christian Göttsche · 3 years ago
- 8243834 libsepol: add libfuzz based fuzzer for reading binary policies by Christian Göttsche · 3 years ago
- e0ba116 libsepol/fuzz: silence secilc-fuzzer by Christian Göttsche · 3 years ago
- bf5ff1a cifuzz: use the default runtime of 600 seconds by Christian Göttsche · 3 years ago
- 01ce791 cifuzz: enable report-unreproducible-crashes by Christian Göttsche · 3 years ago
- 01b88ac checkpolicy: warn on bogus IP address or netmask in nodecon statement by Christian Göttsche · 3 years ago
- 413518a libsepol/cil: support IPv4/IPv6 address embedding by Christian Göttsche · 3 years ago
- 4ffe2df Replace PCRE with PCRE2 build dependencies by Christian Göttsche · 3 years ago
- e0da140 libselinux: use PCRE2 by default by Christian Göttsche · 3 years ago
- 647909c mcstrans: port to new PCRE2 from end-of-life PCRE by Christian Göttsche · 3 years ago
- a46ade3 libsepol: Write out genfscon file type when writing out CIL policy by James Carter · 3 years ago
- 03b1dca secilc/docs: Document the optional file type for genfscon rules by James Carter · 3 years ago
- 3677af8 libsepol/cil: Allow optional file type in genfscon rules by James Carter · 3 years ago
- c9ed552 libsepol/cil: Refactor filecon file type handling by James Carter · 3 years ago
- 55e6748 libsepol: Add support for file types in writing out policy.conf by James Carter · 3 years ago
- 1cbce56 Modified Russian and English man pages to fix typo; REQUIREUSERS -> REQUIRESEUSERS by Cutright Jacob · 3 years ago
- 4bafb8e libselinux: Fix selinux_restorecon_parallel symbol version by Petr Lautrbach · 3 years ago
- c28763c semodule: Don't forget to munmap() data by Petr Lautrbach · 3 years ago
- f37b3e9 semodule: Fix lang_ext column index by Petr Lautrbach · 3 years ago
- ed4813b semodule: add -m | --checksum option by Petr Lautrbach · 3 years ago
- 93902fc setfiles/restorecon: support parallel relabeling by Ondrej Mosnacek · 3 years, 1 month ago
- 02f302f selinux_restorecon: introduce selinux_restorecon_parallel(3) by Ondrej Mosnacek · 3 years, 1 month ago
- a578d1c selinux_restorecon: add a global mutex to synchronize progress output by Ondrej Mosnacek · 3 years, 1 month ago
- 78bdce9 libselinux: make is_context_customizable() thread-safe by Ondrej Mosnacek · 3 years, 1 month ago
- a3516ec libselinux: make selinux_log() thread-safe by Ondrej Mosnacek · 3 years, 1 month ago
- 4642705 selinux_restorecon: protect file_spec list with a mutex by Ondrej Mosnacek · 3 years, 1 month ago
- 43dc50f selinux_restorecon: simplify fl_head allocation by using calloc() by Ondrej Mosnacek · 3 years, 1 month ago
- abe410a label_file: fix a data race by Ondrej Mosnacek · 3 years, 1 month ago
- f7ec4b4 libsemanage: add extern prototype for legacy function by Christian Göttsche · 3 years ago
- 35273aa libsemanage: include paired header for prototypes by Christian Göttsche · 3 years ago
- 1927c1d libsemanage: mark local functions static by Christian Göttsche · 3 years ago
- 0fd5d05 mcstrans: avoid missing prototypes by Christian Göttsche · 3 years ago