SELinuxProject/selinux-kernel

Issues

• Missing headers when generating headers

  #71 opened 7 months ago by Fulgurance
  1

• RFE: minimze ebitmap serialization

  #66 opened a year ago by cgzones
  0

• BUG: Double mount silently disables NFSv4 native labeling

  #69 opened 7 months ago by stephensmalley
  0

• BUG: NFSv4 fscontext mount results in an unlabeled directory

  #70 opened 7 months ago by stephensmalley
  0

• SELinux Kernel Subsystem

  #63 opened 2 years ago by Mikksrund
  2

• BUG: memory leaks in selinux_sb_eat_lsm_opts()

  #62 opened 2 years ago by cgzones
  2

• RFE: allow self in typetransition for anon_inode transitions

  #59 opened 3 years ago
  4

• RFE: create object classes for vsock and generic netlink sockets

  #61 opened 3 years ago by Allen-Webb
  2

• RFE: allow name transition rules in conditional statements

  #56 opened 4 years ago by cgzones
  0

• RFE: Enabling SELinux peer labeling

  #60 opened 3 years ago by JayJay-K
  9

• BUG: fsconfig(2) does not work with SELinux context options on btrfs

  #49 opened 5 years ago by stephensmalley
  4

• RFE: improve handling of anonymous inodes

  #47 opened 3 years ago by pcmoore
  3

• RFE: add controls over userfaultfd

  #48 opened 3 years ago by pcmoore
  5

• RFE: add GPRS Tunnelling Protocol (GTP) suppport

  #54 opened 4 years ago by pcmoore
  1

• RFE: introduce LSM specific fanotify flags for the "path_notify" hook

  #53 opened 4 years ago by pcmoore
  0

• RFE: add LSM/SELinux access controls for AF_PACKET sockets

  #19 opened 8 years ago by pcmoore
  9

• BUG: selinuxfs class directory not updated atomically on reload

  #51 opened 4 years ago by stephensmalley
  5

• BUG: selinux policy reload is not atomic wrt selinuxfs

  #52 opened 4 years ago by stephensmalley
  3

• BUG: NFS mount point temporarily unlabeled with NFSv4.2 + security_label

  #50 opened 5 years ago by stephensmalley
  2

• BUG: selinuxfs removes its directory entries in an unsafe way, causing soft lockups when tasks read selinuxfs directories

  #42 opened 5 years ago by WOnder93
  9

• RFE: add LSM/SELinux access controls for cgroups

  #23 opened 5 years ago by pcmoore
  3

• RFE: add MLS support to scripts/selinux/mdp

  #44 opened 5 years ago by pcmoore
  8

• RFE: Add SCM_SECURITY support to IPv6

  #24 opened 8 years ago by stephensmalley
  5

• BUG: selinux-testsuite failes on binder tests in v5.1-rc1

  #46 opened 5 years ago by pcmoore
  9

• RFE: better labeling control over cgroupfs

  #39 opened 6 years ago by pcmoore
  29

• RFE: add LSM/SELinux hooks for bus1

  #16 opened 6 years ago by pcmoore
  1

• RFE: add LSM/SELinux access controls for AF_VSOCK sockets

  #18 opened 6 years ago by pcmoore
  1

• RFE: display bad/deferred file labels in AVC audit records

  #22 opened 6 years ago by pcmoore
  5

• BUG: kernel softlockup due to too many SIDs/contexts

  #37 opened 6 years ago by stephensmalley
  3

• BUG: overlay test failures on v4.20-rc1

  #43 opened 6 years ago by pcmoore
  11

• RFE: add CIL support to scripts/selinux/mdp

  #45 opened 6 years ago by pcmoore
  1

• BUG: policy reload can trigger transient userspace failures with ENOMEM errors

  #38 opened 6 years ago by stephensmalley
  11

• BUG: selinux-testsuite overlayfs failures on v4.19-rc1

  #41 opened 6 years ago by pcmoore
  22

• BUG: calipso_req_setattr() calls into _copy_from_user()

  #40 opened 6 years ago by pcmoore
  12

• RFE: add network addresses to the network port objects

  #21 opened 8 years ago by pcmoore
  9

• BUG: sporadic selinux-testsuite/inet_socket failures in Linux v4.14-rcX kernels

  #36 opened 7 years ago by pcmoore
  35

• RFE: enable changing the number of AVC hash buckets at runtime

  #34 opened 8 years ago by pcmoore
  9

• BUG: NFSv4.2 does not handle context mounts correctly

  #35 opened 8 years ago by stephensmalley
  3

• RFE: add LSM/SELinux support for InfiniBand RDMA

  #25 opened 8 years ago by pcmoore
  1

• RFE: add genfscon support for regex paths

  #29 opened 8 years ago by cgzones
  1

• RFE: log the policy capability state when a new policy is loaded into the kernel

  #32 opened 8 years ago by pcmoore
  1

• BUG: open check can trigger recvfrom denials on sockets

  #33 opened 8 years ago by stephensmalley
  2

• Q: investigate the use of ns_capable_noaudit() in the network bonding driver

  #30 opened 8 years ago by pcmoore
  1

• BUG: False positives on CAP_WAKE_ALARM

  #28 opened 8 years ago by stephensmalley
  2

• RFE: mark the LSM hook structure as read only post-init

  #15 opened 8 years ago by pcmoore
  2

• BUG: Missing checks on prlimit()

  #27 opened 8 years ago by stephensmalley
  1

• RFE: Add finer-grained LSM/SELinux controls for CAP_SYS_ADMIN functionality

  #26 opened 8 years ago by stephensmalley
  2

• RFE: support IP_PASSSEC and SO_PASSSEC on both datagram and stream sockets

  #17 opened 8 years ago by pcmoore
  4

• RFE: Ensure that SELinux is kept in sync with new capability definitions

  #14 opened 8 years ago by stephensmalley
  2

• RFE: add netmasks to the SELinux network node cache

  #20 opened 8 years ago by pcmoore
  0