Top NSA Banner

Top Navigation Menus

Research Menu

Research Security Enhanced Linux What's New Frequently Asked Questions Background Documents License Download Participating Mail List Archives Remaining Work Contributors Related Work Press Releases Information Assurance Research NIARL In-house Research Areas Mathematical Sciences Program Sabbaticals Computer & Information Sciences Research Technology Transfer Advanced Computing Advanced Mathematics Communications & Networking Information Processing Microelectronics Other Technologies Technology Fact Sheets Publications Related Links

Skip Search Box Searchbox SELinux Mailing List Wednesday, 22 July Re: Policy database Stephen Smalley  Re: Policy database Stefano Carucci  Re: Policy database Stephen Smalley  Re: [PATCH -v2 1/2] VM/SELinux: require CAP_SYS_RAWIO for all mmap_zero operations James Morris  Policy database Stefano Carucci  Re: mmap_min_addr and your local LSM (ok, just SELinux) James Morris  Re: [PATCH -v2 1/2] VM/SELinux: require CAP_SYS_RAWIO for all mmap_zero operations James Morris  Tuesday, 21 July [PATCH -v2 2/2] Security/SELinux: seperate lsm specific mmap_min_addr Eric Paris  [PATCH -v2 1/2] VM/SELinux: require CAP_SYS_RAWIO for all mmap_zero operations Eric Paris  Re: adding human understandable, and translatable description support to selinux Joshua Brindle  Re: [PATCH] Security/sysfs: Enable security xattrs to be set on sysfs files, directories, and symlinks. David P. Quigley  Re: [PATCH 1/2] VM/SELinux: require CAP_SYS_RAWIO for all mmap_zero operations Eric Paris  Re: [PATCH] Security/sysfs: Enable security xattrs to be set on sysfs files, directories, and symlinks. Greg KH  Re: [PATCH] Security/sysfs: Enable security xattrs to be set on sysfs files, directories, and symlinks. David P. Quigley  Re: [PATCH] Security/sysfs: Enable security xattrs to be set on sysfs files, directories, and symlinks. David P. Quigley  Re: [PATCH 1/2] VM/SELinux: require CAP_SYS_RAWIO for all mmap_zero operations Eric Paris  Re: [PATCH 1/2] VM/SELinux: require CAP_SYS_RAWIO for all mmap_zero operations Eric Paris  Re: mmap_min_addr and your local LSM (ok, just SELinux) James Carter  [PATCH 1/2] VM/SELinux: require CAP_SYS_RAWIO for all mmap_zero operations Eric Paris  [PATCH 2/2] SELinux: selinux_file_mmap always enforce mapping the 0 page Eric Paris  Re: mmap_min_addr and your local LSM (ok, just SELinux) Daniel J Walsh  Monday, 20 July Re: mmap_min_addr and your local LSM (ok, just SELinux) James Morris  Re: mmap_min_addr and your local LSM (ok, just SELinux) Christopher Pardy  mmap_min_addr and your local LSM (ok, just SELinux) Eric Paris  Re: adding human understandable, and translatable description support to selinux Daniel J Walsh  Re: adding human understandable, and translatable description support to selinux Christopher Pardy  Re: adding human understandable, and translatable description support to selinux Christopher J. PeBenito  RE: adding human understandable, and translatable description support to selinux Remmolt G. Zwartsenberg  adding human understandable, and translatable description support to selinux Christopher Pardy  Sunday, 19 July Trying to cause a denial with rsync and SELinux Scott Radvan  Friday, 17 July Re: [RFC] Common Intermediary Language James Carter  Re: [RFC] Common Intermediary Language James Carter  [PATCH -v2] policycoreutils: get setfiles to skip mounts without seclabel Thomas Liu  Re: Patch to semanage Daniel J Walsh  Wednesday, 15 July RE: /etc/selinux/ directory structure... Hasan Rezaul-CHR010  Re: [RFC] Common Intermediary Language Caleb Case  Thursday, 16 July Re: Patch to semanage Chad Sellers  Wednesday, 15 July Re: [refpolicy] refpolicy moved to git Justin P. Mattock  RE: /etc/selinux/ directory structure... Dominick Grift  RE: /etc/selinux/ directory structure... Dominick Grift  RE: /etc/selinux/ directory structure... Hasan Rezaul-CHR010  Re: /etc/selinux/ directory structure... Daniel J Walsh  Re: /etc/selinux/ directory structure... Dominick Grift  /etc/selinux/ directory structure... Hasan Rezaul-CHR010  Re: [PATCH] Security/sysfs: Enable security xattrs to be set on sysfs files, directories, and symlinks. David P. Quigley  Re: [PATCH] Security/sysfs: Enable security xattrs to be set on sysfs files, directories, and symlinks. David P. Quigley  libsemanage patch Daniel J Walsh  [PATCH] Security/sysfs: Enable security xattrs to be set on sysfs files, directories, and symlinks. David P. Quigley  Tuesday, 14 July Re: [RFC] Common Intermediary Language James Carter  Re: [PATCH] policycoreutils: get setfiles to skip mounts without seclabel Daniel J Walsh  [RFC] Common Intermediary Language Caleb Case  [PATCH -v3] SELinux: Convert avc_audit to use lsm_audit.h Thomas Liu  Re: [PATCH] policycoreutils: get setfiles to skip mounts without seclabel Thomas Liu  Re: [PATCH] policycoreutils: get setfiles to skip mounts without seclabel Stephen Smalley  RE: [RFC] Install SELinux policies from rpm package header Joshua Brindle  [PATCH] policycoreutils: get setfiles to skip mounts without seclabel Thomas Liu  Re: [RFC] Install SELinux policies from rpm package header Daniel J Walsh  Monday, 13 July Re: request for comments: is this (MLS/SELinux) picture right? Sebastian Pfaff  Re: [RFC] Install SELinux policies from rpm package header Chad Sellers  refpolicy moved to git Christopher J. PeBenito  RE: [RFC] Install SELinux policies from rpm package header Joshua Brindle  Re: [RFC] Install SELinux policies from rpm package header Joe Nall  Re: [RFC] Install SELinux policies from rpm package header Joshua Brindle  Re: [RFC] Install SELinux policies from rpm package header Joe Nall  Re: [RFC] Install SELinux policies from rpm package header Chad Sellers  RE: [RFC] Install SELinux policies from rpm package header James Carter  RE: [RFC] Install SELinux policies from rpm package header James Carter  Re: [RFC] Install SELinux policies from rpm package header Joshua Brindle  request for comments: is this (MLS/SELinux) picture right? Sebastian Pfaff  Sunday, 12 July Re: [PATCH -v2] SELinux: Convert avc_audit to use lsm_audit.h Eric Paris  Re: [PATCH -v2] SELinux: Convert avc_audit to use lsm_audit.h James Morris  Re: [PATCH -v2] SELinux: Convert avc_audit to use lsm_audit.h James Morris  Friday, 10 July Re: [RFC] Install SELinux policies from rpm package header Paul Moore  Re: [RFC] Install SELinux policies from rpm package header max bianco  Re: [PATCH -v2] SELinux: Convert avc_audit to use lsm_audit.h Eric Paris  RE: [RFC] Install SELinux policies from rpm package header Joshua Brindle  Re: [RFC] Install SELinux policies from rpm package header James Carter  Re: [RFC] Install SELinux policies from rpm package header Joshua Brindle  [PATCH -v2] SELinux: Convert avc_audit to use lsm_audit.h Thomas Liu  Re: Fixfiles has a bug when looking at btrfs file systems. Joshua Brindle  Thursday, 9 July Re: [PATCH 3/3] Wrap SMACK and SELINUX audit data structs in ifdefs James Morris  Re: [PATCH 2/3] Make lsm_priv union in lsm_audit.h anonymous James Morris  Re: [PATCH 1/3] Move variable function in lsm_audit.h into SMACK private space James Morris  Re: [RFC] Install SELinux policies from rpm package header Chad Sellers  Re: [RFC] Install SELinux policies from rpm package header Chad Sellers  Re: [RFC] Install SELinux policies from rpm package header Daniel J Walsh  Re: [PATCH] Convert avc_audit to use lsm_audit.h Eric Paris  [PATCH] Convert avc_audit to use lsm_audit.h Thomas Liu  Patch to semanage Daniel J Walsh  Re: [RFC] Install SELinux policies from rpm package header Paul Howarth  Fixfiles has a bug when looking at btrfs file systems. Daniel J Walsh  [RFC] Install SELinux policies from rpm package header Chad Sellers  Re: [PATCH 1/3] Move variable function in lsm_audit.h into SMACK private space Casey Schaufler  Re: [PATCH 1/3] Move variable function in lsm_audit.h into SMACK private space Eric Paris  Re: [PATCH 1/3] Move variable function in lsm_audit.h into SMACK private space Casey Schaufler  Re: [PATCH 3/3] Wrap SMACK and SELINUX audit data structs in ifdefs Eric Paris  Re: [PATCH 1/3] Move variable function in lsm_audit.h into SMACK private space Eric Paris  Re: [PATCH 2/3] Make lsm_priv union in lsm_audit.h anonymous Eric Paris  [PATCH 3/3] Wrap SMACK and SELINUX audit data structs in ifdefs Thomas Liu  [PATCH 1/3] Move variable function in lsm_audit.h into SMACK private space Thomas Liu  [PATCH 2/3] Make lsm_priv union in lsm_audit.h anonymous Thomas Liu  Wednesday, 8 July removing context Brian Krusic  Re: This patch add seusers support to SELinux Joshua Brindle  Tuesday, 7 July [PATCH 1/2 -v3] Namespacing of security/selinux Thomas Liu  [PATCH 2/2 -v3] Namespacing of security/selinux Thomas Liu  Possible OpenSSH exploit Tracy Reed  Re: libsemanage direct_api can return errors < 0. Joshua Brindle  Re: [Patch 2/2 v7] libsemanage: maintain disable dontaudit state between handle commits Stephen Smalley  RE: [Patch 2/2 v7] libsemanage: maintain disable dontaudit state between handle commits Joshua Brindle  Re: [Patch 2/2 v7] libsemanage: maintain disable dontaudit state between handle commits Stephen Smalley  [PATCH] selinux: Cleanup the socket handling functions Paul Moore  Re: [Patch 2/2 v7] libsemanage: maintain disable dontaudit state between handle commits Stephen Smalley  Re: [Patch 2/2 v7] libsemanage: maintain disable dontaudit state between handle commits Stephen Smalley  Re: [PATCH 1/4 -v2] Namespacing of security/selinux Eric Paris  [Patch 2/2 v7] libsemanage: maintain disable dontaudit state between handle commits Christopher Pardy  Re: [Patch 2/2 v6] libsemanage: maintain disable dontaudit state between handle commits Christopher Pardy  Re: This patch add seusers support to SELinux Daniel J Walsh  Re: This patch add seusers support to SELinux Joshua Brindle  Re: [Patch 2/2 v4] libsemanage: maintain disable dontaudit state between handle commits Stephen Smalley  Matchpathcon patch to print <<none>> when it gets enoent. Daniel J Walsh  Re: This patch add seusers support to SELinux Daniel J Walsh  Re: [Patch 2/2 v4] libsemanage: maintain disable dontaudit state between handle commits Christopher Pardy  Re: This patch add seusers support to SELinux Joshua Brindle  Re: Policy loading problem Joshua Brindle  Re: This patch add seusers support to SELinux Joshua Brindle  Re: [RFC PATCH v2] selinux: Fix a problem with socket labels and the TUN driver Paul Moore  RE: [Patch 2/2 v4] libsemanage: maintain disable dontaudit state between handle commits Joshua Brindle  Re: [Patch 2/2 v4] libsemanage: maintain disable dontaudit state between handle commits Stephen Smalley  Re: [Patch 2/2 v4] libsemanage: maintain disable dontaudit state between handle commits Christopher Pardy  Re: [PATCH v5] setfiles converted to fts Stephen Smalley  Re: [Patch 2/2 v4] libsemanage: maintain disable dontaudit state between handle commits Stephen Smalley  Re: [Patch 2/2 v4] libsemanage: maintain disable dontaudit state between handle commits Christopher Pardy  Re: [Patch 2/2 v3] libsemanage: maintain disable dontaudit state between handle commits Stephen Smalley  Re: [PATCH 1/4 -v2] Namespacing of security/selinux James Morris  Re: [Patch 2/2 v3] libsemanage: maintain disable dontaudit state between handle commits Christopher Pardy  Re: [PATCH 1/4 -v2] Namespacing of security/selinux Stephen Smalley  Re: [RFC PATCH v2] selinux: Fix a problem with socket labels and the TUN driver Stephen Smalley  Re: [Patch 2/2 v3] libsemanage: maintain disable dontaudit state between handle commits Stephen Smalley  Monday, 6 July Re: [RFC PATCH v2] selinux: Fix a problem with socket labels and the TUN driver Eric Paris  Re: [RFC PATCH v2] selinux: Fix a problem with socket labels and the TUN driver Paul Moore  Re: [PATCH 1/4 -v2] Namespacing of security/selinux Paul Moore  Re: [PATCH 1/4 -v2] Namespacing of security/selinux Stephen Smalley  Re: [Patch 2/2 v3] libsemanage: maintain disable dontaudit state between handle commits Stephen Smalley  Re: [Patch 2/2 v3] libsemanage: maintain disable dontaudit state between handle commits Christopher Pardy  [PATCH 2/4 -v2] Namespacing of security/selinux Thomas Liu  [PATCH 3/4 -v2] Namespacing of security/selinux Thomas Liu  [PATCH 1/4 -v2] Namespacing of security/selinux Thomas Liu  [PATCH 4/4 -v2] Namespacing of security/selinux Thomas Liu  Re: [Patch 2/2 v2] libsemanage: maintain disable dontaudit state between handle commits Stephen Smalley  Re: [Patch 2/2 v2] libsemanage: maintain disable dontaudit state between handle commits Stephen Smalley  [Patch 3/2 v2] semodule: maintain old functionality Christopher Pardy  Re: [Patch 3/2] semodule: maintain old functionality Joshua Brindle  [Patch 3/2] semodule: maintain old functionality Christopher Pardy  [Patch 2/2 v2] libsemanage: maintain disable dontaudit state between handle commits Christopher Pardy  Re: [Patch 2/2] libsemanage: maintain disable dontaudit state between handle commits Stephen Smalley  Re: [Patch 2/2] libsemanage: maintain disable dontaudit state between handle commits Christopher Pardy  Re: [Patch 2/2] libsemanage: maintain disable dontaudit state between handle commits Daniel J Walsh  Re: [Patch 2/2] libsemanage: maintain disable dontaudit state between handle commits Stephen Smalley  Re: [PATCH v5] setfiles converted to fts Stephen Smalley  [Patch 2/2] libsemanage: maintain disable dontaudit state between handle commits Christopher Pardy  [Patch 1/2] libsepol: method to check disable dontaudit flag. Christopher Pardy  Re: [Patch 2/2] libsemanage: create a don't audit flag Stephen Smalley  [PATCH v5] setfiles converted to fts Thomas Liu  Re: [Patch 2/2] libsemanage: create a don't audit flag Stephen Smalley  Re: [PATCH 1/4] Namespacing of security/selinux Stephen Smalley  Re: [PATCH 1/4] Namespacing of security/selinux Stephen Smalley  Re: [RFC PATCH v2] selinux: Fix a problem with socket labels and the TUN driver Stephen Smalley  Re: request for review of, and collaboration on SELinux models wiki entry Stephen Smalley  Re: [Patch 2/2] libsemanage: create a don't audit flag Christopher Pardy  Re: [Patch 2/2] libsemanage: create a don't audit flag Christopher Pardy  Re: [PATCH v4] setfiles converted to fts Stephen Smalley  Friday, 3 July Re: Building for Ubuntu 9.04 - too few arguments to heap_create_with_catalog error KaiGai Kohei  Re: Building for Ubuntu 9.04 - too few arguments to heap_create_with_catalog error Shaz  Re: [PATCH] SElinux: Fix some typos. Justin P. Mattock  Re: [PATCH] SElinux: Fix some typos. James Morris  Thursday, 2 July Re: [PATCH] SElinux: Fix some typos. Justin P. Mattock  Re: [PATCH] SElinux: Fix some typos. James Morris  Re: [RFC PATCH v2] selinux: Fix a problem with socket labels and the TUN driver Paul Moore  [PATCH 3/4] Namespacing of security/selinux Thomas Liu  Re: [PATCH 3/4] Namespacing of security/selinux Thomas Liu  [RFC PATCH v2] selinux: Fix a problem with socket labels and the TUN driver Paul Moore  [PATCH 1/4] Namespacing of security/selinux Thomas Liu  [PATCH 2/4] Namespacing of security/selinux Thomas Liu  [PATCH 3/4] Namespacing of security/selinux Thomas Liu  [PATCH 4/4] Namespacing of security/selinux Thomas Liu  Re: request for review of, and collaboration on SELinux models wiki entry Sebastian Pfaff  [PATCH v4] setfiles converted to fts Thomas Liu  [PATCH] SElinux: Fix some typos. Justin P. Mattock  SELinux-Fix-some-typos. Justin P. Mattock  Re: [Patch 2/2] libsemanage: create a don't audit flag Stephen Smalley  Re: request for review of, and collaboration on SELinux models wiki entry Stephen Smalley  Re: [PATCH v3] setfiles converted to fts Stephen Smalley  Re: The problem with TUN/TAP devices Paul Moore  Re: [RFC PATCH v1] There is a problem where packets being sent by the TUN driver are not Paul Moore  Re: request for review of, and collaboration on SELinux models wiki entry Dominick Grift  Re: request for review of, and collaboration on SELinux models wiki entry Dominick Grift  Re: [Patch 2/2] libsemanage: create a don't audit flag Christopher Pardy  [PATCH v3] setfiles converted to fts Thomas Liu  Re: request for review of, and collaboration on SELinux models wiki entry Sebastian Pfaff  Re: request for review of, and collaboration on SELinux models wiki entry Joshua Kramer  [patch v2] libselinux: lazy init Stephen Smalley  Re: request for review of, and collaboration on SELinux models wiki entry Stephen Smalley  Re: request for review of, and collaboration on SELinux models wiki entry Dominick Grift  Re: [Patch 2/2] libsemanage: remember and retrieve dontaudit settings Stephen Smalley  Re: [Patch 2/2] libsemanage: remember and retrieve dontaudit settings Christopher Pardy  Re: request for review of, and collaboration on SELinux models wiki entry Stephen Smalley  Re: [Patch 2/2] libsemanage, libselinux: Get don't audit settings from handle and remember settings after commit. Christopher Pardy  Re: [Patch 2/2] libsemanage: remember and retrieve dontaudit settings Stephen Smalley  Re: [Patch 0/2] libsemanage: remember and retrieve dontaudit settings Christopher Pardy  Re: request for review of, and collaboration on SELinux models wiki entry Stephen Smalley  Re: [Patch 2/2] libsemanage: remember and retrieve dontaudit settings Christopher Pardy  request for review of, and collaboration on SELinux models wiki entry Dominick Grift  Re: [Patch 1/2] libsemanage: remember and retrieve dontaudit settings Christopher Pardy  Re: [Patch 2/2] libsemanage: remember and retrieve dontaudit settings Stephen Smalley  Re: Re:[Patch 0/2] libsemanage: remember and retrieve dontaudit settings Stephen Smalley  Re: [Patch 1/2] libsemanage: remember and retrieve dontaudit settings Stephen Smalley  Re: Re:[Patch 0/2] libsemanage: remember and retrieve dontaudit settings Stephen Smalley  Re: [PATCH v2] setfiles converted to fts Stephen Smalley  Re: [PATCH v2] setfiles converted to fts Stephen Smalley  Re: [PATCH v2] setfiles converted to fts Stephen Smalley  Re: [RFC PATCH v1] There is a problem where packets being sent by the TUN driver are not Stephen Smalley  [PATCH 7/8] SELinux selinuxfs.c non trivial fixes. Justin P. Mattock  [PATCH 8/8] SELinux xfrm.c non trivial fixes. Justin P. Mattock  [PATCH 5/8] SELinux netnode.c non trivial fixes. Justin P. Mattock  [PATCH 6/8] SELinux netport.c non trivial fixes. Justin P. Mattock  [PATCH 4/8] SELinux netlabel.c non trivial fixes. Justin P. Mattock  [PATCH 3/8] SELinux netif.c non trivial fixes. Justin P. Mattock  [PATCH 2/8] SELinux hooks.c non-trivial-fixes. Justin P. Mattock  [PATCH 1/8] SELinux avc.c non-trivial fixes. Justin P. Mattock  SELinux-non-trivial-fixes. Justin P. Mattock  Wednesday, 1 July Re: [Patch 2/2] libsemanage: remember and retrieve dontaudit settings Christopher Pardy  Re: [Patch 1/2] libsemanage: remember and retrieve dontaudit settings Christopher Pardy  Re:[Patch 0/2] libsemanage: remember and retrieve dontaudit settings Christopher Pardy  Re: The problem with TUN/TAP devices James Morris  Re: The problem with TUN/TAP devices Paul Moore  Re: The problem with TUN/TAP devices James Morris  [RFC PATCH v1] There is a problem where packets being sent by the TUN driver are not Paul Moore  [PATCH v2] setfiles converted to fts Thomas Liu  Re: [Fwd: [Patch] libsemanage: remember and retrieve dontaudit settings] Joshua Brindle  [patch] libselinux: lazy init Stephen Smalley  Re: [Fwd: [Patch] libsemanage: remember and retrieve dontaudit settings] Daniel J Walsh  Re: [Fwd: [Patch] libsemanage: remember and retrieve dontaudit settings] Daniel J Walsh  Re: [Fwd: [Patch] libsemanage: remember and retrieve dontaudit settings] Stephen Smalley  Re: [Fwd: [Patch] libsemanage: remember and retrieve dontaudit settings] Stephen Smalley  Re: [Fwd: [Patch] libsemanage: remember and retrieve dontaudit settings] Daniel J Walsh  Re: Problem about PAM-selinux Justin P. Mattock  Re: The problem with TUN/TAP devices Paul Moore  Re: [Fwd: [Patch] libsemanage: remember and retrieve dontaudit settings] Daniel J Walsh  Re: [Fwd: [Patch] libsemanage: remember and retrieve dontaudit settings] Christopher Pardy  Re: The problem with TUN/TAP devices Stephen Smalley  Re: The problem with TUN/TAP devices Paul Moore  Re: The problem with TUN/TAP devices Paul Moore  Re: The problem with TUN/TAP devices Paul Moore  Re: The problem with TUN/TAP devices Stephen Smalley  Re: The problem with TUN/TAP devices Eric Paris  Re: [PATCH] setfiles converted to fts Thomas Liu  Re: [PATCH] setfiles converted to fts Stephen Smalley  Re: [Fwd: [Patch] libsemanage: remember and retrieve dontaudit settings] Stephen Smalley  Re: [Fwd: [Patch] libsemanage: remember and retrieve dontaudit settings] Stephen Smalley  Re: Access control between kernel modules? Stephen Smalley  Re: RBAC with SELinux MCS Stephen Smalley  Re: Problem about PAM-selinux Stephen Smalley  Re: [PATCH] setfiles converted to fts Stephen Smalley  Re: "Policy inclusion" tool ... ? Stephen Smalley  Re: The problem with TUN/TAP devices Stephen Smalley  Re: [PATCH] setfiles converted to fts Stephen Smalley  [Fwd: [Patch] libsemanage: remember and retrieve dontaudit settings] Christopher Pardy  Re: This patch add seusers support to SELinux Daniel J Walsh  Re: Problem about PAM-selinux Daniel J Walsh  Re: RBAC with SELinux MCS Justin P. Mattock  Access control between kernel modules? Shaz  Re: RBAC with SELinux MCS Shaz  Re: RBAC with SELinux MCS Justin P. Mattock  Re: RBAC with SELinux MCS Shaz  Re: RBAC with SELinux MCS Justin P. Mattock  Re: SELinux Developer Summit 2009: CfP ends TODAY Justin P. Mattock  RBAC with SELinux MCS Shaz  Re: SELinux Developer Summit 2009: CfP ends TODAY James Morris  Re: Problem about PAM-selinux Justin P. Mattock  Problem about PAM-selinux Andy  Sunday, 28 June Re: Can RHEL 5 set Context of Threads? KaiGai Kohei  Can RHEL 5 set Context of Threads? Joshua Kramer  Saturday, 27 June Re: SELinux and no capabilities Justin P. Mattock  Re: SELinux and no capabilities Serge E. Hallyn  Thursday, 25 June Re: [PATCH 1/1] cr: lsm: restore LSM contexts for ipc objects Stephen Smalley  Re: [PATCH 1/1] cr: lsm: restore LSM contexts for ipc objects Serge E. Hallyn  Re: [PATCH] c/r: tighten ptrace checking for checkpoint to PTRACE_MODE_ATTACH Serge E. Hallyn  Re: [PATCH 1/1] cr: lsm: restore LSM contexts for ipc objects Stephen Smalley  Re: This patch add seusers support to SELinux Stephen Smalley  Wednesday, 24 June Re: [PATCH -v2] selinux: clean up avc node cache when disabling selinux James Morris  Re: [PATCH -v2] selinux: clean up avc node cache when disabling selinux Eric Paris  Re: [PATCH 1/1] cr: lsm: restore LSM contexts for ipc objects Serge E. Hallyn  [PATCH -v2] selinux: clean up avc node cache when disabling selinux Thomas Liu  Re: [PATCH] selinux: clean up avc node cache when disabling selinux Eric Paris  [PATCH] selinux: clean up avc node cache when disabling selinux Thomas Liu  Re: This patch add seusers support to SELinux Joshua Brindle  Re: [PATCH libselinux] check /proc/filesystems before /proc/mounts for selinuxfs Stephen Smalley  [PATCH libselinux] check /proc/filesystems before /proc/mounts for selinuxfs Eric Paris  Re: Failure to build policycoreutils from git Joshua Brindle  Re: Failure to build policycoreutils from git Daniel J Walsh  Re: [PATCH 1/1] cr: lsm: restore LSM contexts for ipc objects Stephen Smalley  Tuesday, 23 June Re: [PATCH 1/1] cr: lsm: restore LSM contexts for ipc objects Serge E. Hallyn  Re: Failure to build policycoreutils from git Joshua Brindle  Re: [PATCH 1/1] cr: lsm: restore LSM contexts for ipc objects Serge E. Hallyn  Failure to build policycoreutils from git Manoj Srivastava  Re: [PATCH 1/1] cr: lsm: restore LSM contexts for ipc objects Stephen Smalley  [ANN] CDS Framework 3.6 Dave Sugar  Re: SELinux context patch Joshua Brindle  Re: Problems with freeing thread local storage in libselinux Joshua Brindle  Re: setfiles will only put out a "*" if > 1000 files are fixed. Joshua Brindle  Re: Add btrfs to fixfiles. Joshua Brindle  Re: chcat fixes Joshua Brindle  Monday, 22 June Re: [PATCH 1/1] cr: lsm: restore LSM contexts for ipc objects Casey Schaufler  Re: [patch] selinux: restore optimization to selinux_file_permission James Morris  Re: [patch] selinux: restore optimization to selinux_file_permission Eric Paris  Re: [patch] selinux: restore optimization to selinux_file_permission Paul Moore  [patch] selinux: restore optimization to selinux_file_permission Stephen Smalley  Re: [PATCH 1/1] cr: lsm: restore LSM contexts for ipc objects Stephen Smalley  Re: [PATCH 1/1] cr: lsm: restore LSM contexts for ipc objects Serge E. Hallyn  Re: [PATCH 1/1] cr: lsm: restore LSM contexts for ipc objects Serge E. Hallyn  Re: This patch add seusers support to SELinux Joshua Brindle  Re: [PATCH 1/1] cr: lsm: restore LSM contexts for ipc objects Stephen Smalley  Re: chcat fixes Stephen Smalley  Re: [PATCH 1/1] cr: lsm: restore LSM contexts for ipc objects James Morris  Friday, 19 June [PATCH 1/1] cr: lsm: restore LSM contexts for ipc objects Serge E. Hallyn  SELinux and no capabilities Justin Mattock  Re: This patch add seusers support to SELinux Chris PeBenito  Re: This patch add seusers support to SELinux Daniel J Walsh  Re: This patch add seusers support to SELinux Chris PeBenito  Re: This patch add seusers support to SELinux Daniel J Walsh  Re: This patch add seusers support to SELinux Joshua Brindle  Re: This patch add seusers support to SELinux Daniel J Walsh  Re: This patch add seusers support to SELinux Daniel J Walsh  Re: This patch add seusers support to SELinux Joshua Brindle  Re: This patch add seusers support to SELinux Daniel J Walsh  Re: This patch add seusers support to SELinux Joshua Brindle  Re: chcat fixes Joshua Brindle  Re: This patch add seusers support to SELinux Daniel J Walsh  Re: This patch add seusers support to SELinux Joshua Brindle  Re: This patch add seusers support to SELinux Daniel J Walsh  Thursday, 18 June Re: This patch add seusers support to SELinux Joshua Brindle  Re: This patch fixes the exception handling in libselinux-python bindings Daniel J Walsh  Re: This patch add seusers support to SELinux Daniel J Walsh  Re: This patch add seusers support to SELinux Daniel J Walsh  Setting Context of Threads Joshua Kramer  Re: This patch fixes the exception handling in libselinux-python bindings Joshua Brindle  Re: type bounds audit messages James Morris  Re: This patch add seusers support to SELinux Joshua Brindle  Re: This patch add seusers support to SELinux Joshua Brindle  Re: type bounds audit messages Stephen Smalley  Re: type bounds audit messages Stephen Smalley  Re: Possible bug with fd class? Stephen Smalley  Re: [PATCH] cleanup in ss/services.c James Morris  Re: type bounds audit messages KaiGai Kohei  [PATCH] cleanup in ss/services.c KaiGai Kohei  Re: type bounds audit messages KaiGai Kohei  Wednesday, 17 June Re: Possible bug with fd class? Stephen Smalley  Re: Possible bug with fd class? Stephen Smalley  Re: Possible bug with fd class? Jason Johnson  Re: type bounds audit messages Daniel J Walsh  Re: type bounds audit messages Stephen Smalley  Re: Possible bug with fd class? Stephen Smalley  Re: type bounds audit messages KaiGai Kohei  Tuesday, 16 June Reminder: SELinux Developer Summit CfP closes 1st July James Morris  Re: Possible bug with fd class? Jason Johnson  Re: Possible bug with fd class? Stephen Smalley  Re: Possible bug with fd class? Jason Johnson  Re: type bounds audit messages Stephen Smalley  Re: type bounds audit messages Eric Paris  Re: type bounds audit messages Daniel J Walsh  Re: type bounds audit messages Steve Grubb  Re: type bounds audit messages Daniel J Walsh  Re: type bounds audit messages Eric Paris  Re: type bounds audit messages Steve Grubb  Re: type bounds audit messages Eric Paris  Re: Possible bug with fd class? KaiGai Kohei  Possible bug with fd class? Jason Johnson  Monday, 15 June Re: type bounds audit messages KaiGai Kohei  Re: type bounds audit messages Eric Paris  Re: type bounds audit messages Steve Grubb  Re: type bounds audit messages Stephen Smalley  Re: type bounds audit messages Eric Paris  Re: type bounds audit messages KaiGai Kohei  Re: [refpolicy] problem when compiling svn policy Justin Mattock  Friday, 12 June Re: [refpolicy] problem when compiling svn policy Justin Mattock  Thursday, 11 June Re: [refpolicy] problem when compiling svn policy Justin Mattock  Re: Problems with freeing thread local storage in libselinux Chad Sellers  Re: [refpolicy] problem when compiling svn policy Justin Mattock  Re: [refpolicy] problem when compiling svn policy Justin Mattock  Re: [refpolicy] problem when compiling svn policy Christopher J. PeBenito  Wednesday, 10 June problem when compiling svn policy Justin Mattock  Re: [PATCH 09/10] cr: restore LSM credentials Serge E. Hallyn  Re: [PATCH 10/10] cr: lsm: restore file->f_security Stephen Smalley  Re: [PATCH 09/10] cr: restore LSM credentials Stephen Smalley  Re: [PATCH 10/10] cr: lsm: restore file->f_security Serge E. Hallyn  Tuesday, 9 June Re: [PATCH 10/10] cr: lsm: restore file->f_security Casey Schaufler  Re: [PATCH 09/10] cr: restore LSM credentials Casey Schaufler  [PATCH 10/10] cr: lsm: restore file->f_security Serge E. Hallyn  [PATCH 09/10] cr: restore LSM credentials Serge E. Hallyn  Monday, 8 June libsemanage spelling mistake in error code. Daniel J Walsh  libsemanage direct_api can return errors < 0. Daniel J Walsh  Friday, 5 June Re: SELinux context patch Christopher J. PeBenito  Re: SELinux context patch Christopher J. PeBenito  Thursday, 4 June Re: SELinux context patch Daniel J Walsh  Re: SELinux context patch Chad Sellers  Re: SELinux context patch Daniel J Walsh  Re: SELinux context patch Chad Sellers  Re: SELinux context patch Caleb Case  Tuesday, 2 June Re: [PATCH] SELinux: define audit permissions for audit tree netlink messages James Morris  [PATCH] SELinux: define audit permissions for audit tree netlink messages Eric Paris  A little more sctp and selinux Nigel Rumens  Monday, 1 June Re: SuSE 11 Stephen Smalley  SuSE 11 Rouse, Alan  Re: [refpolicy] libjackserver.so file context Christopher J. PeBenito  Re: [refpolicy] libjackserver.so file context Daniel J Walsh  Saturday, 30 May [refpolicy] libjackserver.so file context Stefan Schulze Frielinghaus  Friday, 29 May RE: [Clip] Unexpected role change from custom role back to user_r SOLVED West, Gary-P55389  Thursday, 28 May Re: Problem with SELinux and glusterfs when trying to allow memprotect/mmap_zero Eric Paris  [ANN] 2009 SELinux Developer Summit Call for Participation James Morris  RE: [Clip] Unexpected role change from custom role back to user_r West, Gary-P55389  Re: I am a beginner,can you recommand me some website? Dominick Grift  I am a beginner,can you recommand me some website? sixiaolin0  Wednesday, 27 May [ANN] Apache/SELinux plus release KaiGai Kohei  RE: [Clip] Unexpected role change from custom role back to user_r West, Gary-P55389  RE: [Clip] Unexpected role change from custom role back to user_r Stephen Smalley  RE: [Clip] Unexpected role change from custom role back to user_r West, Gary-P55389  Re: selinux and sctp Paul Moore  Re: Unexpected role change from custom role back to user_r Stephen Smalley  Unexpected role change from custom role back to user_r West, Gary-P55389  Re: selinux and sctp Nigel Rumens  Re: selinux and sctp Nigel Rumens  Re: selinux and sctp James Morris  Re: selinux and sctp Stephen Smalley  Re: Problem with SELinux and glusterfs when trying to allow memprotect/mmap_zero Daniel J Walsh  Problem with SELinux and glusterfs when trying to allow memprotect/mmap_zero Ioannis Aslanidis  Tuesday, 26 May Re: selinux and sctp Paul Moore  Re: Introducing SELinux Sanbox Justin Mattock  Re: Introducing SELinux Sanbox Daniel J Walsh  Re: Introducing SELinux Sanbox Justin Mattock  Re: Introducing SELinux Sanbox Daniel J Walsh  Introducing SELinux Sanbox Daniel J Walsh  Re: selinux and sctp Stephen Smalley  Re: selinux and sctp Daniel J Walsh  Monday, 25 May Re: selinux and sctp Mark Webb  Re: selinux and sctp Nigel Rumens  Re: selinux and sctp Daniel J Walsh  Sunday, 24 May Re: SELinux acl's options Justin Mattock  Re: SELinux acl's options Dominick Grift  SELinux acl's options Justin Mattock  Friday, 22 May Re: [refpolicy] [RFC] Security policy reworks for SE-PostgreSQL Christopher J. PeBenito  Thursday, 21 May Re: avc: denied null Dominick Grift  Re: Incorrect avc logs for the packet object class Paul Moore  Re: Incorrect avc logs for the packet object class Paul Moore  Re: Incorrect avc logs for the packet object class Stephen Smalley  Re: Incorrect avc logs for the packet object class Stephen Smalley  Re: Incorrect avc logs for the packet object class Paul Moore  Re: Incorrect avc logs for the packet object class Stephen Smalley  Re: avc: denied null Dominick Grift  Re: chcat fixes Daniel J Walsh  Re: [refpolicy] [RFC] Security policy reworks for SE-PostgreSQL Christopher J. PeBenito  Re: [refpolicy] [RFC] Security policy reworks for SE-PostgreSQL Christopher J. PeBenito  Re: chcat fixes Christopher J. PeBenito  Wednesday, 20 May Re: avc: denied null Eamon Walsh  Re: Policy loading problem Paul Howarth  Add btrfs to fixfiles. Daniel J Walsh  chcat fixes Daniel J Walsh  Incorrect avc logs for the packet object class Marshall Miller  setfiles will only put out a "*" if > 1000 files are fixed. Daniel J Walsh  Re: Policy loading problem Stephen Smalley  Re: SELinux context patch Chad Sellers  Re: Policy loading problem Dennis Wronka  Re: Policy loading problem Dennis Wronka  policycoreutils-po is F11 policycoreutils translations patch Daniel J Walsh  Re: Policy loading problem Stephen Smalley  Re: Policy loading problem Stephen Smalley  Re: Policy loading problem Dennis Wronka  Re: Policy loading problem Stephen Smalley  Re: Policy loading problem Dennis Wronka  Re: Policy loading problem Stephen Smalley  Re: Policy loading problem Stephen Smalley  Re: Policy loading problem Dennis Wronka  Re: Policy loading problem Stephen Smalley  Re: Policy loading problem Dennis Wronka  Re: selinux policy for gedit Justin Mattock  Re: selinux policy for gedit Daniel J Walsh  Re: Sources for SELinux GConf ?? James Carter  Re: Policy loading problem Stephen Smalley  Re: avc: denied null Dominick Grift  selinux policy for gedit hechao55429  Policy loading problem Dennis Wronka  Tuesday, 19 May Re: avc: denied null Eamon Walsh  Re: [PATCH] SELinux: BUG in SELinux compat_net code Paul Moore  Re: [PATCH] SELinux: BUG in SELinux compat_net code Eric Paris  SELinux tools list Joshua Brindle  Re: This patch fixes the exception handling in libselinux-python bindings Daniel J Walsh  Sources for SELinux GConf ?? Joshua Kramer  Re: This patch fixes the exception handling in libselinux-python bindings Chad Sellers  Re: Minor issue with reading selinuxfs booleans. James Morris  Re: Minor issue with reading selinuxfs booleans. Stephen Smalley  Minor issue with reading selinuxfs booleans. Eamon Walsh  Monday, 18 May Re: daemons and MCS categories KaiGai Kohei  Re: [PATCH] SELinux: move SELINUX_MAGIC into magic.h James Morris  Re: avc: denied null Eamon Walsh  This patch add seusers support to SELinux Daniel J Walsh  This patch outputs <<none>> from the matchpathcon command when it gets enoent Daniel J Walsh  SELinux context patch Daniel J Walsh  This patch fixes the exception handling in libselinux-python bindings Daniel J Walsh  Re: Authorization Workflow for Message Queueing Platform Joshua Kramer  Re: We have moved matchpathcon to /sbin from /usr/sbin Joshua Brindle  Re: Patch to getdefaultcon to print just the correct match and add verbose option Joshua Brindle  Re: Memory leak in libselinux/src/label_file.c Joshua Brindle  Re: patch to policycoreutils Joshua Brindle  Re: sepolgen typo fix Joshua Brindle  Re: Help with python seobject.loginRecords Joshua Brindle  Re: Patch matchpathcon to eliminate file "/" Joshua Brindle  [PATCH] SELinux: move SELINUX_MAGIC into magic.h Eric Paris  Re: Authorization Workflow for Message Queueing Platform Stephen Smalley  Re: threads and context Stephen Smalley  threads and context Xavier Toth  Re: avc: denied null Dominick Grift  Re: daemons and MCS categories Joe Nall  Re: avc: denied null Stephen Smalley  Re: Dropping SELinux privileges Stephen Smalley  avc: denied null Dominick Grift  Re: Dropping SELinux privileges selinux_at_udmvt.ru  Re: daemons and MCS categories KaiGai Kohei  Saturday, 16 May Re: write selinux policy Dominick Grift  Re: daemons and MCS categories Joe Nall  Re: write selinux policy Joshua Brindle  write selinux policy hechao55429  Friday, 15 May Re: Dropping SELinux privileges Joshua Brindle  Dropping SELinux privileges Sebastien Raveau  Thursday, 14 May Re: Patch to getdefaultcon to print just the correct match and add verbose option Chad Sellers  Re: make: *** No rule to make target with latest svn Justin Mattock  make: *** No rule to make target with latest svn Justin Mattock  Re: the problem about install refpolicy Stephen Smalley  the problem about install refpolicy hechao55429  Wednesday, 13 May Re: daemons and MCS categories KaiGai Kohei  Tuesday, 12 May Authorization Workflow for Message Queueing Platform Joshua Kramer  Re: Nodecon configuration question [solved] Thomas  Re: Nodecon configuration question Stephen Smalley  Re: Nodecon configuration question Thomas  Monday, 11 May Re: daemons and MCS categories KaiGai Kohei  Re: [refpolicy] how to enable gconf(arole_dbus_t errors) and all of the gnome goodies Justin P. Mattock  Re: [refpolicy] how to enable gconf(arole_dbus_t errors) and all of the gnome goodies Christopher J. PeBenito  Re: [refpolicy] how to enable gconf(arole_dbus_t errors) and all of the gnome goodies Justin Mattock  Re: Nodecon configuration question Stephen Smalley  Nodecon configuration question Thomas Bludau  Re: [refpolicy] how to enable gconf(arole_dbus_t errors) and all of the gnome goodies Christopher J. PeBenito  Re: EOF missing newline bug in squid.fc / toolchain Christopher J. PeBenito  Re: daemons and MCS categories Christopher J. PeBenito  Re: [PATCH] Fix ltp selinux testsuite for rhel5 Subrata Modak  Re: [PATCH] Update ltp selinux testsuite README Subrata Modak  Re: [PATCH] Update selinux ioctl test Subrata Modak  Re: [PATCH] Update ltp selinux test script and policy Subrata Modak  Re: [PATCH] Fix MLS handling in selinux tests Subrata Modak  Re: [LTP] Fwd: [PATCH] Create $SELINUXTMPDIR in each of the tests Subrata Modak  Re: daemons and MCS categories KaiGai Kohei  Friday, 8 May EOF missing newline bug in squid.fc / toolchain Eamon Walsh  how to enable gconf(arole_dbus_t errors) and all of the gnome goodies Justin P. Mattock  Re: SELinux and access(2), we want to know. Casey Schaufler  Re: SELinux and access(2), we want to know. Serge E. Hallyn  Re: SELinux and access(2), we want to know. Stephen Smalley  Re: does this picture reflect the basics of the current selinux architecture? Sebastian Pfaff  Re: SELinux and access(2), we want to know. Stephen Smalley  Re: SELinux and access(2), we want to know. Daniel J Walsh  Re: SELinux and access(2), we want to know. Stephen Smalley  Re: does this picture reflect the basics of the current selinux architecture? Stephen Smalley  does this picture reflect the basics of the current selinux architecture? Sebastian Pfaff  [PATCH] An interface to allow web-apps minimum privileges (Re: [RFC] mod_selinux security policy) KaiGai Kohei  Re: SELinux and access(2), we want to know. max  Re: SELinux and access(2), we want to know. Eamon Walsh  Re: [refpolicy] [RFC] Security policy reworks for SE-PostgreSQL KaiGai Kohei  Re: [refpolicy] [RFC] Security policy reworks for SE-PostgreSQL KaiGai Kohei  Thursday, 7 May Re: [refpolicy] [RFC] Security policy reworks for SE-PostgreSQL KaiGai Kohei  Re: SELinux and access(2), we want to know. Casey Schaufler  Re: SELinux and access(2), we want to know. Serge E. Hallyn  Re: SELinux and access(2), we want to know. Eric Paris  Re: We have moved matchpathcon to /sbin from /usr/sbin Chad Sellers  Re: SELinux and access(2), we want to know. Serge E. Hallyn  Re: [PATCH] libsemanage: Add Ruby Bindings Stephen Smalley  Re: Memory leak in libselinux/src/label_file.c Chad Sellers  SELinux and access(2), we want to know. Eric Paris  Re: [PATCH] libsemanage: Add Ruby Bindings Daniel J Walsh  Re: [PATCH] libsemanage: Add Ruby Bindings Stephen Smalley  Re: Fixes for libselinux/matchpathcon Daniel J Walsh  Re: [PATCH] libsemanage: Add Ruby Bindings Daniel J Walsh  Re: Fixes for libselinux/matchpathcon Chad Sellers  Re: [PATCH] libsemanage: Add Ruby Bindings David P. Quigley  Re: [PATCH] libsemanage: Add Ruby Bindings Joshua Brindle  [PATCH] libsemanage: Add Ruby Bindings David P. Quigley  Re: [refpolicy] [RFC] Security policy reworks for SE-PostgreSQL Christopher J. PeBenito  Re: [refpolicy] [RFC] Security policy reworks for SE-PostgreSQL Christopher J. PeBenito  Re: Some ideas in SE-PostgreSQL enhancement (Re: The status of SE-PostgreSQL) KaiGai Kohei  Wednesday, 6 May Re: [refpolicy] [RFC] mod_selinux security policy KaiGai Kohei  Re: Some ideas in SE-PostgreSQL enhancement (Re: The status of SE-PostgreSQL) KaiGai Kohei  Re: [PATCH 2/2] x86-64: seccomp: fix 32/64 syscall hole (fwd) James Morris  [PATCH] Update ltp selinux testsuite README Stephen Smalley  Re: policy development library documentation Stephen Smalley  Re: policy as configuration data Stephen Smalley  Re: policy development library documentation Daniel J Walsh  Re: policy as configuration data Daniel J Walsh  policy development library documentation Mark Webb  Re: policy as configuration data Joshua Brindle  Re: policy as configuration data Stephen Smalley  Re: Problems with freeing thread local storage in libselinux Tomas Mraz  Problems with freeing thread local storage in libselinux Manoj Srivastava  Tuesday, 5 May policy as configuration data Caleb Case  Re: Using interfaces defined elsewhere Bandan Das  Re: Using interfaces defined elsewhere Daniel J Walsh  [PATCH] Fix ltp selinux testsuite for rhel5 Stephen Smalley  SETRANS + libavg = SIGSEGV on Hardy Caleb Case  Using interfaces defined elsewhere Bandan Das  [PATCH] Update selinux ioctl test Stephen Smalley  [PATCH] Update ltp selinux test script and policy Stephen Smalley  Re: [LTP] Fwd: [PATCH] Create $SELINUXTMPDIR in each of the tests Stephen Smalley  Re: [PATCH] selinux: Fix send_sigiotask hook David Howells  Monday, 4 May [PATCH] selinux: Fix send_sigiotask hook Stephen Smalley  Friday, 1 May Re: [LTP] Fwd: [PATCH] Create $SELINUXTMPDIR in each of the tests Stephen Smalley  Re: Some ideas in SE-PostgreSQL enhancement (Re: The status of SE-PostgreSQL) Eamon Walsh  Re: labeled network aware kernel Justin Mattock  Re: labeled network aware kernel Mark Webb  Thursday, 30 April Re: labeled network aware kernel Mark Webb  Re: labeled network aware kernel Justin Mattock  [PATCH] Fix MLS handling in selinux tests Stephen Smalley  Re: [LTP] Fwd: [PATCH] Create $SELINUXTMPDIR in each of the tests Stephen Smalley  Re: labeled network aware kernel Stephen Smalley  Re: labeled network aware kernel Mark Webb  Re: [LTP] LTP SELinux policy error Subrata Modak  Wednesday, 29 April Re: labeled network aware kernel Justin P. Mattock  Re: labeled network aware kernel Mark Webb  SELinux managing-confined-services guide - call for review Scott Radvan  Re: [PATCH] SELinux: drop secondary_ops->sysctl James Morris  Re: load_policy.c:351:1: error: "MNT_DETACH" redefined Justin Mattock  Re: [LTP] Fwd: [PATCH] Create $SELINUXTMPDIR in each of the tests Stephen Smalley  Re: [LTP] Fwd: [PATCH] Create $SELINUXTMPDIR in each of the tests Stephen Smalley  Re: [LTP] Fwd: [PATCH] Create $SELINUXTMPDIR in each of the tests Stephen Smalley  Re: [LTP] [PATCH] Fix running of the selinux tests Stephen Smalley  Re: [LTP] LTP SELinux policy error Stephen Smalley  Re: load_policy.c:351:1: error: "MNT_DETACH" redefined Stephen Smalley  Re: [PATCH] SELinux: drop secondary_ops->sysctl Stephen Smalley  [PATCH] SELinux: drop secondary_ops->sysctl Eric Paris  Re: load_policy.c:351:1: error: "MNT_DETACH" redefined Justin Mattock  Re: load_policy.c:351:1: error: "MNT_DETACH" redefined Stephen Smalley  load_policy.c:351:1: error: "MNT_DETACH" redefined Justin Mattock  Tuesday, 28 April Re: the system can't be started after I configure the Daniel J Walsh  the system can't be started after I configure the sixiaolin0  Re: [LTP] [PATCH] Fix running of the selinux tests Stephen Smalley  [RFC] mod_selinux security policy KaiGai Kohei  Monday, 27 April Re: SELinux managing-confined-services guide - call for review Scott Radvan  Re: [LTP] [PATCH] Fix running of the selinux tests Serge E. Hallyn  Re: is it possible to use type_transition with every class? Stephen Smalley  Re: is it possible to use type_transition with every class? Stephen Smalley  Friday, 24 April Re: labeled network aware kernel Joy Latten  is it possible to use type_transition with every class? Sebastian Pfaff  Thursday, 23 April Re: patch to policycoreutils Chad Sellers  Re: labeled network aware kernel Paul Moore  Re: SELinux managing-confined-services guide - call for review Sebastian Pfaff  Re: [refpolicy] runcon cant really run(constraint issue?) Justin Mattock  Re: [refpolicy] runcon cant really run(constraint issue?) Christopher J. PeBenito  Re: runcon cant really run(constraint issue?) Daniel J Walsh  Re: Problems related to using SELinux Serge E. Hallyn  Wednesday, 22 April Re: labeled network aware kernel Mark Webb  Re: labeled network aware kernel Mark Webb  Re: patch to policycoreutils Daniel J Walsh  Re: labeled network aware kernel Chad Sellers  Re: labeled network aware kernel Paul Moore  Re: patch to policycoreutils Chad Sellers  Re: sepolgen typo fix Chad Sellers  Re: Help with python seobject.loginRecords Chad Sellers  runcon cant really run(constraint issue?) Justin Mattock  Re: labeled network aware kernel Xavier Toth  Re: libselinux behavior in permissive mode wrt invalid domains Colin Walters  Re: access(2) vs. SELinux Alexey S  Re: access(2) vs. SELinux selinux_at_udmvt.ru  labeled network aware kernel Mark Webb  Re: daemons and MCS categories KaiGai Kohei  Tuesday, 21 April Re: Some ideas in SE-PostgreSQL enhancement (Re: The status of SE-PostgreSQL) KaiGai Kohei  Re: Some ideas in SE-PostgreSQL enhancement (Re: The status of SE-PostgreSQL) Eamon Walsh  Re: libselinux behavior in permissive mode wrt invalid domains Eamon Walsh  Re: libselinux behavior in permissive mode wrt invalid domains Stephen Smalley  Re: libselinux behavior in permissive mode wrt invalid domains Joshua Brindle  Re: newrole and pam.d/* Justin Mattock  Re: genhomedircon errors with NIS Bandan Das  Re: newrole and pam.d/* Justin Mattock  Re: genhomedircon errors with NIS Daniel J Walsh  Re: newrole and pam.d/* Stephen Smalley  Re: genhomedircon errors with NIS Alexey S  Re: [LTP] Fwd: [PATCH] Fix an errorneous using of a different return value in selinux_entrypoint test Subrata Modak  Monday, 20 April Re: [refpolicy] [RFC] Security policy reworks for SE-PostgreSQL KaiGai Kohei  Re: daemons and MCS categories KaiGai Kohei  Re: [refpolicy] [RFC] Security policy reworks for SE-PostgreSQL KaiGai Kohei  Re: [RFC PATCH] access(2) vs. SELinux Eric Paris  newrole and pam.d/* Justin Mattock  Re: [RFC PATCH] access(2) vs. SELinux Eric Paris  Re: access(2) vs. SELinux James Carter  Re: [refpolicy] [RFC] Security policy reworks for SE-PostgreSQL Christopher J. PeBenito  Re: genhomedircon errors with NIS Daniel J Walsh  Re: access(2) vs. SELinux Eric Paris  Re: [RFC PATCH] access(2) vs. SELinux Stephen Smalley  Re: genhomedircon errors with NIS Bandan Das  Re: access(2) vs. SELinux James Carter  Re: genhomedircon errors with NIS Daniel J Walsh  Re: access(2) vs. SELinux Eric Paris  Re: access(2) vs. SELinux James Carter  genhomedircon errors with NIS Bandan Das  Re: SELinux: unrecognized netlink message Justin Mattock  [RFC PATCH] access(2) vs. SELinux Eric Paris  Re: access(2) vs. SELinux Chad Sellers  Re: access(2) vs. SELinux Eric Paris  Re: SELinux: unrecognized netlink message Paul Moore  Re: access(2) vs. SELinux Joshua Brindle  RE: can't access problem a file with a given range (mls policy) West, Gary-P55389  Re: access(2) vs. SELinux Eric Paris  Re: access(2) vs. SELinux Joshua Brindle  Re: [LTP] Fwd: [PATCH] Create $SELINUXTMPDIR in each of the tests Serge E. Hallyn  Re: Policy building and loading problems Shaz  Re: daemons and MCS categories KaiGai Kohei  Sunday, 19 April Re: [LTP] Fwd: [PATCH] Create $SELINUXTMPDIR in each of the tests Serge E. Hallyn  Re: [LTP] Fwd: [PATCH] Create $SELINUXTMPDIR in each of the tests Serge E. Hallyn  Re: [LTP] Fwd: [PATCH] Fix an errorneous using of a different return value in selinux_entrypoint test Serge E. Hallyn  can't access problem a file with a given range (mls policy) Sebastian Pfaff  Saturday, 18 April Fwd: [LTP] [PATCH] Fix an errorneous using of a different return value in selinux_entrypoint test Subrata Modak  Fwd: [LTP] [PATCH] Create $SELINUXTMPDIR in each of the tests Subrata Modak  Friday, 17 April SELinux: unrecognized netlink message Justin Mattock  Re: libselinux behavior in permissive mode wrt invalid domains Stephen Smalley  Thursday, 16 April Re: libselinux behavior in permissive mode wrt invalid domains Eamon Walsh  Re: Patch matchpathcon to eliminate file "/" Chad Sellers  Re: access(2) vs. SELinux Chad Sellers  Re: access(2) vs. SELinux Eric Paris  Re: access(2) vs. SELinux Stephen Smalley  Re: access(2) vs. SELinux Stephen Smalley  Re: access(2) vs. SELinux Alexey S  Wednesday, 15 April Re: access(2) vs. SELinux Stephen Smalley  Re: access(2) vs. SELinux Eric Paris  access(2) vs. SELinux Stephen Smalley  Re: libselinux behavior in permissive mode wrt invalid domains Stephen Smalley  Re: dynamic context transitions from kernel space Stephen Smalley  Re: Policy building and loading problems Stephen Smalley  Re: libselinux behavior in permissive mode wrt invalid domains Stephen Smalley  Re: libselinux behavior in permissive mode wrt invalid domains Daniel J Walsh  dynamic context transitions from kernel space Fedor Sakharov  Policy building and loading problems Shaz  Tuesday, 14 April Re: Problems related to the policy language Tim  libselinux behavior in permissive mode wrt invalid domains Colin Walters  Re: [nfsv4] my thoughts on how Labeled NFSv4 draft should move forward Nicolas Williams  Re: [nfsv4] my thoughts on how Labeled NFSv4 draft should move forward Nicolas Williams  Re: [nfsv4] my thoughts on how Labeled NFSv4 draft should move forward David P. Quigley  Re: Policy infrastructure problems and improvement James Carter  Re: [nfsv4] my thoughts on how Labeled NFSv4 draft should move forward Casey Schaufler  Monday, 13 April Re: [nfsv4] my thoughts on how Labeled NFSv4 draft should move forward Nicolas Williams  Flask Policy Parser (FPP) support for merge_type, clone_type, and add and remove blocks James Carter  Re: Policies for Devices? Stephen Smalley  Re: [nfsv4] my thoughts on how Labeled NFSv4 draft should move forward Stephen Smalley  Re: strange semanage user|login errors Daniel J Walsh  Re: Policy infrastructure problems and improvement Daniel J Walsh  Re: Policy infrastructure problems and improvement Alexey S.  Re: Policy infrastructure problems and improvement Alexey S  Sunday, 12 April Re: [refpolicy] [RFC] Security policy reworks for SE-PostgreSQL KaiGai Kohei  Saturday, 11 April Re: strange semanage user|login errors Sebastian Pfaff  strange semanage user|login errors Sebastian Pfaff  Re: Policies for Devices? Justin Mattock  Friday, 10 April Policies for Devices? Robert Mykland  Re: Policy infrastructure problems and improvement Casey Schaufler  Re: [nfsv4] my thoughts on how Labeled NFSv4 draft should move forward Nicolas Williams  Re: [nfsv4] my thoughts on how Labeled NFSv4 draft should move forward Nicolas Williams  Re: [nfsv4] my thoughts on how Labeled NFSv4 draft should move forward David P. Quigley  Re: my thoughts on how Labeled NFSv4 draft should move forward David P. Quigley  Re: Policy infrastructure problems and improvement Joe Nall  Re: Policy infrastructure problems and improvement James Carter  Re: Policy infrastructure problems and improvement Joe Nall  Re: Policy infrastructure problems and improvement Joe Nall  Re: Policy infrastructure problems and improvement Xavier Toth  Thursday, 9 April Re: Problems related to the policy language Mike Edenfield  Friday, 10 April Re: Policy infrastructure problems and improvement Stephen Smalley  Re: Policy infrastructure problems and improvement Alexey S  Re: Policy infrastructure problems and improvement James Carter  Re: Problems related to the policy language Daniel J Walsh  Re: Problems related to the whole policy infrastructure Kirill Novikov  Re: Policy infrastructure problems and improvement Casey Schaufler  Thursday, 9 April Re: Problems related to the policy management infrastructure Dominick Grift  git dbus not seeing selinux Justin Mattock  Problems related to using SELinux James Carter  Problems related to the policy language James Carter  Problems related to customizing policy James Carter  Problems related to the policy management infrastructure James Carter  Problems related to the whole policy infrastructure James Carter  Policy infrastructure problems and improvement James Carter  Wednesday, 8 April Re: Running snmpd in a different domain Bandan Das  Re: Running snmpd in a different domain Stephen Smalley  Re: Running snmpd in a different domain Daniel J Walsh  Tuesday, 7 April Re: [ANN] SELinux userspace release Eamon Walsh  Running snmpd in a different domain Bandan Das  Re: [nfsv4] [Labeled-nfs] New MAC label support Internet Draft posted to IETF website Paul Moore  Re: SELinux userpace compile errors Justin Mattock  Re: SELinux userpace compile errors Stephen Smalley  Re: SELinux userpace compile errors Stephen Smalley  SELinux userpace compile errors Justin Mattock  Re: nc -l does not need permission name_bind to bind to a port!? Sebastian Pfaff  Re: diff between name_bind,bind and node_bind Stephen Smalley  Re: nc -l does not need permission name_bind to bind to a port!? Stephen Smalley  Re: Is there strict policy for fedora 10? Daniel J Walsh  Re: Is there strict policy for fedora 10? Dominick Grift  Is there strict policy for fedora 10? sixiaolin0  Re: diff between name_bind,bind and node_bind Sebastian Pfaff  Re: nc -l does not need permission name_bind to bind to a port!? Daniel J Walsh  Re: [ANN] SELinux userspace release KaiGai Kohei  Re: diff between name_bind,bind and node_bind Stephen Smalley  Re: nc -l does not need permission name_bind to bind to a port!? Stephen Smalley  diff between name_bind,bind and node_bind Sebastian Pfaff  Monday, 6 April Re: Interoperation with SELinux Casey Schaufler  Re: [nfsv4] my thoughts on how Labeled NFSv4 draft should move forward Nicolas Williams  my thoughts on how Labeled NFSv4 draft should move forward Jarrett Lu  Re: SELinux packages version (svn2950)... Joshua Brindle  RE: SELinux packages version (svn2950)... Hasan Rezaul-CHR010  Re: SELinux packages version (svn2950)... Joshua Brindle  RE: SELinux packages version (svn2950)... Hasan Rezaul-CHR010  Re: SELinux packages version (svn2950)... Joshua Brindle  SELinux packages version (svn2950)... Hasan Rezaul-CHR010  Re: request for review of httpd-related Boolean definitions Daniel J Walsh  Re: request for review of httpd-related Boolean definitions Daniel J Walsh  Re: [saag] Common labeled security (comment on CALIPSO, labeled NFSv4) Nicolas Williams  Re: [ANN] SELinux userspace release Joshua Brindle  Re: [saag] Common labeled security (comment on CALIPSO, labeled NFSv4) Nicolas Williams  Re: [saag] Common labeled security (comment on CALIPSO, labeled NFSv4) Nicolas Williams  Sunday, 5 April Re: [refpolicy] [RFC] Security policy reworks for SE-PostgreSQL KaiGai Kohei  Re: [PATCH 08/14] NFSv4: Add label recommended attribute and NFSv4 flags James Morris  nc -l does not need permission name_bind to bind to a port!? Sebastian Pfaff  Saturday, 4 April Re: [ANN] SELinux userspace release KaiGai Kohei  Re: [refpolicy] [RFC] Security policy reworks for SE-PostgreSQL KaiGai Kohei  Friday, 3 April Re: [saag] Common labeled security (comment on CALIPSO, labeled NFSv4) Nicolas Williams  Re: [saag] Common labeled security (comment on CALIPSO, labeled NFSv4) Nicolas Williams  Re: [saag] Common labeled security (comment on CALIPSO, labeled NFSv4) Nicolas Williams  Re: [nfsv4] [Labeled-nfs] New MAC label support Internet Draft posted to IETF website Joy Latten  Re: [refpolicy] [RFC] Security policy reworks for SE-PostgreSQL Joshua Brindle  [ANN] SELinux userspace release Joshua Brindle  Re: [saag] Common labeled security (comment on CALIPSO, labeled NFSv4) Nicolas Williams  Re: [saag] Common labeled security (comment on CALIPSO, labeled NFSv4) Nicolas Williams  Re: [PATCH 08/14] NFSv4: Add label recommended attribute and NFSv4 flags David P. Quigley  Re: [PATCH 08/14] NFSv4: Add label recommended attribute and NFSv4 flags James Morris  Re: [PATCH 08/14] NFSv4: Add label recommended attribute and NFSv4 flags David P. Quigley  Re: [PATCH 08/14] NFSv4: Add label recommended attribute and NFSv4 flags David P. Quigley  Re: [PATCH 08/14] NFSv4: Add label recommended attribute and NFSv4 flags James Morris  Re: [nfsv4] [Labeled-nfs] New MAC label support Internet Draft posted to IETF website Nicolas Williams  Memory leak in libselinux/src/label_file.c Hiroshi Shinji  Thursday, 2 April Re: [nfsv4] [Labeled-nfs] New MAC label support Internet Draft posted to IETF website Jarrett Lu  Re: [refpolicy] [RFC] Security policy reworks for SE-PostgreSQL KaiGai Kohei  Re: [refpolicy] [RFC] Security policy reworks for SE-PostgreSQL KaiGai Kohei  Re: [nfsv4] [Labeled-nfs] New MAC label support Internet Draft posted to IETF website Jarrett Lu  Re: [nfsv4] [Labeled-nfs] New MAC label support Internet Draft posted to IETF website Paul Moore  Re: xine_init() causes segfault in libselinux Joshua Brindle  Common labeled security (comment on CALIPSO, labeled NFSv4) Nicolas Williams  Re: [nfsv4] [Labeled-nfs] New MAC label support Internet Draft posted to IETF website Nicolas Williams  Re: [refpolicy] [RFC] Security policy reworks for SE-PostgreSQL Christopher J. PeBenito  Re: [refpolicy] [RFC] Security policy reworks for SE-PostgreSQL Joshua Brindle  Re: [refpolicy] [RFC] Security policy reworks for SE-PostgreSQL KaiGai Kohei  Wednesday, 1 April Re: Correct manner to handler undefined classes/permissions? (Re: Some ideas in SE-PostgreSQL enhancement) KaiGai Kohei  Re: [PATCH] Permissive domain in userspace object manager James Morris  Re: [PATCH] Permissive domain in userspace object manager Eric Paris  Re: [nfsv4] [Labeled-nfs] New MAC label support Internet Draft posted to IETF website Nicolas Williams  Re: [RFC] Security policy reworks for SE-PostgreSQL Joshua Brindle  Re: [nfsv4] [Labeled-nfs] New MAC label support Internet Draft posted to IETF website Paul Moore  We have moved matchpathcon to /sbin from /usr/sbin Daniel J Walsh  Fixes for libselinux/matchpathcon Daniel J Walsh  patch to policycoreutils Daniel J Walsh  Re: Correct manner to handler undefined classes/permissions? (Re: Some ideas in SE-PostgreSQL enhancement) Stephen Smalley  Re: [PATCH] Permissive domain in userspace object manager Stephen Smalley  Re: [Labeled-nfs] [nfsv4] New MAC label support Internet Draft posted to IETF website James Morris  Re: [Labeled-nfs] [nfsv4] New MAC label support Internet Draft posted to IETF website Jarrett Lu  Re: [nfsv4] [Labeled-nfs] New MAC label support Internet Draft posted to IETF website Jarrett Lu  Correct manner to handler undefined classes/permissions? (Re: Some ideas in SE-PostgreSQL enhancement) KaiGai Kohei  Re: [Labeled-nfs] [nfsv4] New MAC label support Internet Draft posted to IETF website James Morris  Tuesday, 31 March Re: [nfsv4] [Labeled-nfs] New MAC label support Internet Draft posted to IETF website Casey Schaufler  Re: [nfsv4] [Labeled-nfs] New MAC label support Internet Draft posted to IETF website Jarrett Lu  Re: [PATCH] Permissive domain in userspace object manager KaiGai Kohei  [PATCH] Permissive domain in userspace object manager KaiGai Kohei  Re: [RFC] Security policy reworks for SE-PostgreSQL KaiGai Kohei  Re: [RFC] Security policy reworks for SE-PostgreSQL Andy Warner  Re: [RFC] Security policy reworks for SE-PostgreSQL Joshua Brindle  Re: [RFC] Security policy reworks for SE-PostgreSQL Andy Warner  Re: [RFC] Security policy reworks for SE-PostgreSQL KaiGai Kohei  sepolgen typo fix Marshall Miller  Re: [nfsv4] [Labeled-nfs] New MAC label support Internet Draft posted to IETF website Nicolas Williams  Re: [nfsv4] [Labeled-nfs] New MAC label support Internet Draft posted to IETF website Nicolas Williams  Re: [PATCH] Permissive domain in userspace (Re: Some ideas in SE-PostgreSQL enhancement) Stephen Smalley  Re: [RFC] Security policy reworks for SE-PostgreSQL Andy Warner  Re: [nfsv4] [Labeled-nfs] New MAC label support Internet Draft posted to IETF website Paul Moore  Re: request for review of httpd-related Boolean definitions m  Re: [RFC] Security policy reworks for SE-PostgreSQL KaiGai Kohei  Re: request for review of httpd-related Boolean definitions Dominick Grift  Re: [RFC] Security policy reworks for SE-PostgreSQL Andy Warner  setools make error sixiaolin0  [RFC] Security policy reworks for SE-PostgreSQL KaiGai Kohei  Re: [nfsv4] [Labeled-nfs] New MAC label support Internet Draft posted to IETF website Jarrett Lu  request for review of httpd-related Boolean definitions Scott Radvan  Monday, 30 March Re: [nfsv4] [Labeled-nfs] New MAC label support Internet Draft posted to IETF website Casey Schaufler  Re: [PATCH] Permissive domain in userspace (Re: Some ideas in SE-PostgreSQL enhancement) KaiGai Kohei  Re: [nfsv4] [Labeled-nfs] New MAC label support Internet Draft posted to IETF website Stephen Smalley  Re: [Labeled-nfs] [nfsv4] New MAC label support Internet Draft posted to IETF website Nicolas Williams  Re: [nfsv4] [Labeled-nfs] New MAC label support Internet Draft posted to IETF website Nicolas Williams  Re: [nfsv4] [Labeled-nfs] New MAC label support Internet Draft posted to IETF website Nicolas Williams  Re: [nfsv4] [Labeled-nfs] New MAC label support Internet Draft posted to IETF website Jarrett Lu  Re: [nfsv4] [Labeled-nfs] New MAC label support Internet Draft posted to IETF website Stephen Smalley  Re: [Labeled-nfs] [nfsv4] New MAC label support Internet Draft posted to IETF website Stephen Smalley  Re: Some ideas in SE-PostgreSQL enhancement (Re: The status of SE-PostgreSQL) KaiGai Kohei  Re: xine_init() causes segfault in libselinux Daniel J Walsh  Re: Some ideas in SE-PostgreSQL enhancement (Re: The status of SE-PostgreSQL) Andy Warner  Re: Some ideas in SE-PostgreSQL enhancement (Re: The status of SE-PostgreSQL) Andy Warner  Re: Some ideas in SE-PostgreSQL enhancement (Re: The status of SE-PostgreSQL) KaiGai Kohei  Re: [PATCH] Expose avc_netlink_loop() for applications (Re: Some ideas in SE-PostgreSQL enhancement) KaiGai Kohei  Sunday, 29 March Re: [PATCH] Permissive domain in userspace (Re: Some ideas in SE-PostgreSQL enhancement) KaiGai Kohei  Re: Some ideas in SE-PostgreSQL enhancement (Re: The status of SE-PostgreSQL) KaiGai Kohei  xine_init() causes segfault in libselinux Vikram Noel Ambrose  Saturday, 28 March Re: [PATCH 0/6] Labeled networking patches for 2.6.30 Paul Moore  Re: Some ideas in SE-PostgreSQL enhancement (Re: The status of SE-PostgreSQL) Andy Warner  Re: [Labeled-nfs] [nfsv4] New MAC label support Internet Draft posted to IETF website Casey Schaufler  Re: [Labeled-nfs] [nfsv4] New MAC label support Internet Draft posted to IETF website Glenn Faden  Re: [PATCH 0/6] Labeled networking patches for 2.6.30 James Morris  Friday, 27 March Re: [Labeled-nfs] [nfsv4] New MAC label support Internet Draft posted to IETF website Casey Schaufler  Re: [PATCH 6/6] smack: Add a new '-CIPSO' option to the network address label configuration Casey Schaufler  Re: [PATCH 5/6] netlabel: Cleanup the Smack/NetLabel code to fix incoming TCP connections Casey Schaufler  Re: [PATCH 2/6] netlabel: Label incoming TCP connections correctly in SELinux Casey Schaufler  Re: [PATCH] Permissive domain in userspace (Re: Some ideas in SE-PostgreSQL enhancement) Eamon Walsh  Re: [PATCH] Expose avc_netlink_loop() for applications (Re: Some ideas in SE-PostgreSQL enhancement) KaiGai Kohei  Re: [PATCH 0/6] Labeled networking patches for 2.6.30 James Morris  Re: [PATCH] Expose avc_netlink_loop() for applications (Re: Some ideas in SE-PostgreSQL enhancement) Eamon Walsh  Re: Some ideas in SE-PostgreSQL enhancement (Re: The status of SE-PostgreSQL) KaiGai Kohei  Re: [Labeled-nfs] [nfsv4] New MAC label support Internet Draft posted to IETF website Nicolas Williams  Re: [nfsv4] [Labeled-nfs] New MAC label support Internet Draft posted to IETF website Nicolas Williams  [PATCH 6/6] smack: Add a new '-CIPSO' option to the network address label configuration Paul Moore  [PATCH 5/6] netlabel: Cleanup the Smack/NetLabel code to fix incoming TCP connections Paul Moore  [PATCH 4/6] lsm: Remove the socket_post_accept() hook Paul Moore  [PATCH 3/6] selinux: Remove the "compat_net" compatibility code Paul Moore  [PATCH 2/6] netlabel: Label incoming TCP connections correctly in SELinux Paul Moore  [PATCH 1/6] lsm: Relocate the IPv4 security_inet_conn_request() hooks Paul Moore  [PATCH 0/6] Labeled networking patches for 2.6.30 Paul Moore  Re: [PATCH 1/6] lsm: Relocate the IPv4 security_inet_conn_request() hooks Paul Moore  [PATCH 1/6] lsm: Relocate the IPv4 security_inet_conn_request() hooks Paul Moore  Re: Some ideas in SE-PostgreSQL enhancement (Re: The status of SE-PostgreSQL) Andy Warner  Re: Some ideas in SE-PostgreSQL enhancement (Re: The status of SE-PostgreSQL) Joshua Brindle  Re: [nfsv4] [Labeled-nfs] New MAC label support Internet Draft posted to IETF website Jarrett Lu  Re: Some ideas in SE-PostgreSQL enhancement (Re: The status of SE-PostgreSQL) Andy Warner  Re: Some ideas in SE-PostgreSQL enhancement (Re: The status of SE-PostgreSQL) Joshua Brindle  Re: [nfsv4] [Labeled-nfs] New MAC label support Internet Draft posted to IETF website Nicolas Williams  Re: Some ideas in SE-PostgreSQL enhancement (Re: The status of SE-PostgreSQL) Andy Warner  Re: Some ideas in SE-PostgreSQL enhancement (Re: The status of SE-PostgreSQL) Joshua Brindle  Re: [Labeled-nfs] [nfsv4] New MAC label support Internet Draft posted to IETF website Jarrett Lu  Re: Some ideas in SE-PostgreSQL enhancement (Re: The status of SE-PostgreSQL) Andy Warner  Re: Some ideas in SE-PostgreSQL enhancement (Re: The status of SE-PostgreSQL) Joshua Brindle  Re: Patch to python bindings Xavier Toth  Re: Patch to python bindings Xavier Toth  Re: [Labeled-nfs] [nfsv4] New MAC label support Internet Draft posted to IETF website Stephen Smalley  Re: [Labeled-nfs] [nfsv4] New MAC label support Internet Draft posted to IETF website Stephen Smalley  Re: [Fwd: [idea] web-application security powered by SELinux] Daniel J Walsh  Re: [PATCH] Policy rework for SE-PostgreSQL (Re: Some ideas in SE-PostgreSQL enhancement) KaiGai Kohei  Re: [PATCH] Policy rework for SE-PostgreSQL (Re: Some ideas in SE-PostgreSQL enhancement) Andy Warner  Re: [PATCH] Policy rework for SE-PostgreSQL (Re: Some ideas in SE-PostgreSQL enhancement) KaiGai Kohei  Re: [PATCH] Policy rework for SE-PostgreSQL (Re: Some ideas in SE-PostgreSQL enhancement) Andy Warner  [PATCH] Policy rework for SE-PostgreSQL (Re: Some ideas in SE-PostgreSQL enhancement) KaiGai Kohei  Thursday, 26 March Re: [Fwd: [idea] web-application security powered by SELinux] KaiGai Kohei  Re: [PATCH] database audit integration (Re: Some ideas in SE-PostgreSQL enhancement) KaiGai Kohei  Re: [nfsv4] New MAC label support Internet Draft posted to IETF website Nicolas Williams  Re: [PATCH] Expose avc_netlink_loop() for applications (Re: Some ideas in SE-PostgreSQL enhancement) KaiGai Kohei  Re: [PATCH] Expose avc_netlink_loop() for applications (Re: Some ideas in SE-PostgreSQL enhancement) Eamon Walsh  Re: [PATCH] Expose avc_netlink_loop() for applications (Re: Some ideas in SE-PostgreSQL enhancement) Eamon Walsh  Re: [nfsv4] New MAC label support Internet Draft posted to IETF website Jarrett Lu  Re: [nfsv4] New MAC label support Internet Draft posted to IETF website Nicolas Williams  Re: /usr/bin/firefox not mozilla_exec_t, why? Xavier Toth  /usr/bin/firefox not mozilla_exec_t, why? Xavier Toth  Re: [Fwd: [idea] web-application security powered by SELinux] Jan-Frode Myklebust  Re: [nfsv4] New MAC label support Internet Draft posted to IETF website Jarrett Lu  [PATCH] Permissive domain in userspace (Re: Some ideas in SE-PostgreSQL enhancement) KaiGai Kohei  [PATCH] database audit integration (Re: Some ideas in SE-PostgreSQL enhancement) KaiGai Kohei  [PATCH] Expose avc_netlink_loop() for applications (Re: Some ideas in SE-PostgreSQL enhancement) KaiGai Kohei  Wednesday, 25 March Re: Some ideas in SE-PostgreSQL enhancement (Re: The status of SE-PostgreSQL) KaiGai Kohei  Re: Some ideas in SE-PostgreSQL enhancement (Re: The status of SE-PostgreSQL) Andy Warner  Re: Some ideas in SE-PostgreSQL enhancement (Re: The status of SE-PostgreSQL) Joshua Brindle  Re: [nfsv4] New MAC label support Internet Draft posted to IETF website Nicolas Williams  Re: Some ideas in SE-PostgreSQL enhancement (Re: The status of SE-PostgreSQL) Andy Warner  Re: Some ideas in SE-PostgreSQL enhancement (Re: The status of SE-PostgreSQL) KaiGai Kohei  Tuesday, 24 March [Fwd: [idea] web-application security powered by SELinux] KaiGai Kohei  Wednesday, 25 March Re: Some ideas in SE-PostgreSQL enhancement (Re: The status of SE-PostgreSQL) Andy Warner  Re: New MAC label support Internet Draft posted to IETF website Jarrett Lu  Re: Some ideas in SE-PostgreSQL enhancement (Re: The status of SE-PostgreSQL) KaiGai Kohei  Re: Some ideas in SE-PostgreSQL enhancement (Re: The status of SE-PostgreSQL) Andy Warner  Some ideas in SE-PostgreSQL enhancement (Re: The status of SE-PostgreSQL) KaiGai Kohei  Monday, 23 March Re: The status of SE-PostgreSQL KaiGai Kohei  Re: The status of SE-PostgreSQL KaiGai Kohei  Re: The status of SE-PostgreSQL Stephen Smalley  Re: The status of SE-PostgreSQL Andy Warner  Re: The status of SE-PostgreSQL Shaz  Re: The status of SE-PostgreSQL Shaz  Re: installing setools errors Daniel J Walsh  JLS2009: How does the security folks? KaiGai Kohei  The status of SE-PostgreSQL KaiGai Kohei  Saturday, 21 March Re: installing setools errors Dominick Grift  installing setools errors sixiaolin0  Friday, 20 March Re: How safe are ncurses apps? Stephen John Smoogen  How safe are ncurses apps? justinmattock_at_gmail.com  Wednesday, 18 March [ANN] CLIP v3.1.0 for RHEL 5.3 Brandon Whalen  Re: Policy Access Control Joshua Brindle  Re: Ответ: VFS, NFS security bug? Should CAP_MKNOD and CAP_LINUX_IMMUTABLE be added to CAP_FS_MASK? Serge E. Hallyn  Re: Ответ: VFS, NFS security bug? Should CAP_MKNOD and CAP_LINUX_IMMUTABLE be added to CAP_FS_MASK? Serge E. Hallyn  Re: ?????: VFS, NFS security bug? Should CAP_MKNOD and CAP_LINUX_IMMUTABLE be added to CAP_FS_MASK? Serge E. Hallyn  Re: Ответ: VFS, NFS security bug? Should CAP_MKNOD and CAP_LINUX_IMMUTABLE be added to CAP_FS_MASK? Stephen Smalley  Re: ?????: VFS, NFS security bug? Should CAP_MKNOD and CAP_LINUX_IMMUTABLE be added to CAP_FS_MASK? Casey Schaufler  Re: adding LANG and XMODIFIER to newrole minimal environment Stephen Smalley  [PATCH] libsepol: fix boolean state smashing Joshua Brindle  [ANN] CDS Framework 3.3 Dave Sugar  Tuesday, 17 March Re: Ответ: VFS, NFS security bug? Should CAP_MKNOD and CAP_LINUX_IMMUTABLE be added to CAP_FS_MASK? Serge E. Hallyn  Re: Ответ: VFS, NFS security bug? Should CAP_MKNOD and CAP_LINUX_IMMUTABLE be added to CAP_FS_MASK? Stephen Smalley  Re: Ответ: VFS, NFS security bug? Should CAP_MKNOD and CAP_LINUX_IMMUTABLE be added to CAP_FS_MASK? Serge E. Hallyn  RE: Unable to disable SELinux Paul Cocker  Re: Ответ: VFS, NFS security bug? Should CAP_MKNOD and CAP_LINUX_IMMUTABLE be added to CAP_FS_MASK? Stephen Smalley  Monday, 16 March Re: Ответ: VFS, NFS security bug? Should CAP_MKNOD and CAP_LINUX_IMMUTABLE be added to CAP_FS_MASK? Serge E. Hallyn  Re: Ответ: VFS, NFS security bug? Should CAP_MKNOD and CAP_LINUX_IMMUTABLE be added to CAP_FS_MASK? Serge E. Hallyn  Re: Ответ: VFS, NFS security bug? Should CAP_MKNOD and CAP_LINUX_IMMUTABLE be added to CAP_FS_MASK? Stephen Smalley  Re: Ответ: VFS, NFS security bug? Should CAP_MKNOD and CAP_LINUX_IMMUTABLE be added to CAP_FS_MASK? Serge E. Hallyn  Re: Ответ: VFS, NFS security bug? Should CAP_MKNOD and CAP_LINUX_IMMUTABLE be added to CAP_FS_MASK? Stephen Smalley  Re: adding LANG and XMODIFIER to newrole minimal environment Xavier Toth  Re: adding LANG and XMODIFIER to newrole minimal environment Stephen Smalley  Re: questions Shaz  Re: questions Russell Coker  Re: questions Shaz  Sunday, 15 March Re: [refpolicy] dbus/lvm read domain state Russell Coker  Re: adding LANG and XMODIFIER to newrole minimal environment Xavier Toth  [refpolicy] dbus/lvm read domain state Martin Orr  Saturday, 14 March Re: Unable to disable SELinux Justin Mattock  Re: Unable to disable SELinux Russell Coker  Re: Unable to disable SELinux Justin Mattock  Re: questions Russell Coker  adding LANG and XMODIFIER to newrole minimal environment Xavier Toth  Re: questions Shaz  Friday, 13 March Re: Unable to disable SELinux Martin Orr  Re: Unable to disable SELinux Russell Coker  Re: [RFC PATCH v1 1/3] lsm: Relocate the IPv4 security_inet_conn_request() hooks Paul Moore  Re: Ответ: VFS, NFS security bug? Should CAP_MKNOD and CAP_LINUX_IMMUTABLE be added to CAP_FS_MASK? Serge E. Hallyn  Re: Unable to disable SELinux Stephen Smalley  Unable to disable SELinux Paul Cocker  Re: questions Russell Coker  Thursday, 12 March Re: New MAC label support Internet Draft posted to IETF website Peter Staubach  [RFC PATCH v1 3/3] netlabel: Label incoming TCP connections correctly in Smack Paul Moore  [RFC PATCH v1 2/3] netlabel: Label incoming TCP connections correctly in SELinux Paul Moore  [RFC PATCH v1 1/3] lsm: Relocate the IPv4 security_inet_conn_request() hooks Paul Moore  [RFC PATCH v1 0/3] Fix a problem with incoming TCP connections and NetLabel Paul Moore  Re: New MAC label support Internet Draft posted to IETF website David P. Quigley  Re: questions Daniel J Walsh  Re: questions Christopher J. PeBenito  Re: Significance of the level on a port configuration Paul Moore  Re: Significance of the level on a port configuration Stephen Smalley  questions sixiaolin0  Re: Significance of the level on a port configuration Paul Moore  Re: Help with python seobject.loginRecords Daniel J Walsh  Wednesday, 11 March Re: [PATCH -v2] libselinux: cache avc_compute_create results in the avc Eamon Walsh  Re: Help with python seobject.loginRecords Joe Nall  Re: Help with python seobject.loginRecords Stephen Smalley  Re: Help with python seobject.loginRecords Daniel J Walsh  Re: Help with python seobject.loginRecords Joe Nall  Re: Help with python seobject.loginRecords Daniel J Walsh  Re: Help with python seobject.loginRecords Joe Nall  Re: Help with python seobject.loginRecords Daniel J Walsh  Re: Significance of the level on a port configuration Stephen Smalley  Significance of the level on a port configuration Andy Warner  Help with python seobject.loginRecords Joe Nall  libsemanage.semanage_commit: Will not commit because caller does not have a tranaction lock yet. Joe Nall  Tuesday, 10 March Re: [PATCH -v2] libselinux: cache avc_compute_create results in the avc Eamon Walsh  Adam Jackson Patch to accellerate X Windows/SELinux stuff. Daniel J Walsh  [PATCH -v2] libselinux: cache avc_compute_create results in the avc Eric Paris  [ANN] CLIP mail list Brandon Whalen  Re: PHP/SELinux: libselinux wrappers KaiGai Kohei  Monday, 9 March Re: [PATCH] libselinux: cache avc_compute_create results in the avc Eric Paris  Re: [PATCH] libselinux: cache avc_compute_create results in the avc Eamon Walsh  Re: [PATCH] SELinux: inode_doinit_with_dentry drop no dentry printk James Morris  [PATCH] SELinux: inode_doinit_with_dentry drop no dentry printk Eric Paris  Sunday, 8 March Re: [PATCH] SELinux: make inode_doinit_with_dentry printk debug James Morris  Friday, 6 March Re: Talking to Nalin today about the path substitution semanage problem, and he came up with a great idea. Russell Coker  Talking to Nalin today about the path substitution semanage problem, and he came up with a great idea. Daniel J Walsh  Re: I have not used the selabel interface replacement for matchpathcon, that much Daniel J Walsh  [PATCH] SELinux: make inode_doinit_with_dentry printk debug Eric Paris  Re: I have not used the selabel interface replacement for matchpathcon, that much Stephen Smalley  I have not used the selabel interface replacement for matchpathcon, that much Daniel J Walsh  Thursday, 5 March Re: [PATCH] SELinux: new permission between tty audit and audit socket James Morris  Re: [PATCH] SELinux: open perm for sock files James Morris  Re: [PATCH] SELinux: new permission between tty audit and audit socket Stephen Smalley  Re: [PATCH] SELinux: open perm for sock files Stephen Smalley  [PATCH] SELinux: new permission between tty audit and audit socket Eric Paris  [PATCH] SELinux: open perm for sock files Eric Paris  Re: PAM, GNOME, etc Stephen Smalley  Re: PAM, GNOME, etc Daniel J Walsh  PAM, GNOME, etc Russell Coker  Wednesday, 4 March Patch to getdefaultcon to print just the correct match and add verbose option Daniel J Walsh  Patch matchpathcon to eliminate file "/" Daniel J Walsh  Patch to python bindings Daniel J Walsh  Patch to libselinux to add svirt/virtual_domain context files. Daniel J Walsh  Re: dbus reading /proc/X/cmdline Daniel J Walsh  Re: dbus reading /proc/X/cmdline Stephen Smalley  Re: dbus reading /proc/X/cmdline Daniel J Walsh  Re: dbus reading /proc/X/cmdline Stephen Smalley  Re: gnome and dbus Stephen Smalley  dbus reading /proc/X/cmdline Russell Coker  Re: gnome and dbus Russell Coker  gnome and dbus Russell Coker  Monday, 2 March Re: PHP/SELinux: libselinux wrappers KaiGai Kohei  [PATCH] Xorg: always use raw contexts in the xserver Eric Paris  [PATCH] libselinux: cache avc_compute_create results in the avc Eric Paris  Re: [RFC] X+SELinux performance work Eric Paris  Re: [PATCH] selinux: Fix a panic in selinux_netlbl_inode_permission() Paul Moore  Re: [refpolicy] [PATCH v2] refpolicy: Add missing network related MLS constraints Christopher J. PeBenito  Sunday, 1 March Re: [PATCH] selinux: Fix a panic in selinux_netlbl_inode_permission() James Morris  Saturday, 28 February Re: Patch to libsemanage to remove labeling of /root Dominick Grift  Re: Patch to libsemanage to remove labeling of /root Daniel J Walsh  Re: Patch to libsemanage to remove labeling of /root Daniel J Walsh  Re: Patch to libsemanage to remove labeling of /root Dominick Grift  Friday, 27 February Re: Patch to libsemanage to remove labeling of /root Russell Coker  Re: Patch to libsemanage to remove labeling of /root Daniel J Walsh  Re: [RFC] X+SELinux performance work Eamon Walsh  [PATCH] selinux: Fix a panic in selinux_netlbl_inode_permission() Paul Moore  Re: [RFC] X+SELinux performance work Daniel J Walsh  Re: PHP/SELinux: libselinux wrappers Daniel J Walsh  Re: [RFC] X+SELinux performance work Xavier Toth  Re: refpolicy compilation issue Stephen Smalley  Re: [RFC] X+SELinux performance work Eric Paris  Re: [RFC] X+SELinux performance work Joe Nall  [RFC] X+SELinux performance work Eric Paris  Re: refpolicy compilation issue Kirill \  Re: refpolicy compilation issue Stephen Smalley  refpolicy compilation issue Kirill \  Re: PHP/SELinux: libselinux wrappers KaiGai Kohei  Thursday, 26 February Re: PHP/SELinux: libselinux wrappers KaiGai Kohei  Re: PHP/SELinux: libselinux wrappers KaiGai Kohei  Re: Patch to libsemanage to remove labeling of /root Russell Coker  Re: PHP/SELinux: libselinux wrappers KaiGai Kohei  Re: PHP/SELinux: libselinux wrappers KaiGai Kohei  RE: PHP/SELinux: libselinux wrappers Joshua Brindle  Re: /selinux/create + X windows = performance limiter Eric Paris  Re: /selinux/create + X windows = performance limiter Stephen Smalley  Re: PHP/SELinux: libselinux wrappers Daniel J Walsh  Re: PHP/SELinux: libselinux wrappers Stephen Smalley  Re: PHP/SELinux: libselinux wrappers KaiGai Kohei  Wednesday, 25 February Re: /selinux/create + X windows = performance limiter Joe Nall  Re: /selinux/create + X windows = performance limiter Eric Paris  Re: /selinux/create + X windows = performance limiter Eamon Walsh  Re: /selinux/create + X windows = performance limiter Eric Paris  Re: /selinux/create + X windows = performance limiter Stephen Smalley  /selinux/create + X windows = performance limiter Eric Paris  Tuesday, 24 February Re: [refpolicy] [PATCH v2] refpolicy: Add missing network related MLSconstraints Christopher J. PeBenito  Re: [refpolicy] [PATCH v2] refpolicy: Add missing network related MLSconstraints Paul Moore  RE: [refpolicy] [PATCH v2] refpolicy: Add missing network related MLSconstraints chanson_at_TrustedCS.com  RE: LCA 2009 Nayak Debabrata-a22788  Re: LCA 2009 Shintaro Fujiwara  Re: LCA 2009 James Morris  Monday, 23 February LCA 2009 Russell Coker  Re: semanage fcontext --list doesn't list contexts which include HOME_DIR Stephen Smalley  Re: semanage fcontext --list doesn't list contexts which include HOME_DIR Xavier Toth  Re: semanage fcontext --list doesn't list contexts which include HOME_DIR Joe Nall  semanage fcontext --list doesn't list contexts which include HOME_DIR Xavier Toth  Re: [refpolicy] [PATCH] refpolicy: Add missing network related MLS constraints Paul Moore  Saturday, 21 February Re: ext3 security labels missing Justin Mattock  Re: ext3 security labels missing Justin Mattock  Re: ext3 security labels missing Dennis Wronka  Friday, 20 February Re: [refpolicy] [PATCH] refpolicy: Add missing network related MLS constraints Joe Nall  Re: ext3 security labels missing Justin Mattock  [PATCH v2] refpolicy: Add missing network related MLS constraints Paul Moore  [PATCH 2/2] selinux: Fix the NetLabel glue code for setsockopt() Paul Moore  [PATCH 1/2] cipso: Fix documentation comment Paul Moore  [PATCH 0/2] Fixes for 2.6.29 Paul Moore  Re: Application-level Access Management Stephen Smalley  Re: ext3 security labels missing Dennis Wronka  Re: ext3 security labels missing Justin Mattock  Re: ext3 security labels missing Stephen Smalley  Re: ext3 security labels missing Dennis Wronka  ext3 security labels missing Justin Mattock  Thursday, 19 February Re: VMware-server 2.0 and selinux Paul Howarth  VMware-server 2.0 and selinux Bill Chimiak  test(don't respond) Bill Chimiak  Application-level Access Management Joshua Kramer  Wednesday, 18 February Re: Patch to libsemanage to remove labeling of /root Joshua Brindle  Re: Several fixes to restorecond Daniel J Walsh  Re: Patch to libsemanage to remove labeling of /root Daniel J Walsh  Re: [PATCH] aliases for the boundry format Joshua Brindle  Re: sepolgen patch Joshua Brindle  Re: Add btrfs to fixfiles Joshua Brindle  Re: Several fixes to restorecond Joshua Brindle  Re: Make removing of a module a warning rather then an error. Joshua Brindle  Re: policycoreutils_semanage.patch Joshua Brindle  Re: policycoreutils_restorecond.patch Joshua Brindle  Re: audit2allow patch Joshua Brindle  Re: Patch to libsemanage to remove labeling of /root Joshua Brindle  Re: Patch to libsemanage to remove labeling of /root Daniel J Walsh  Re: Patch to libsemanage to remove labeling of /root Joshua Brindle  [ANNOUNCE] Flask Policy Parser (FPP) James Carter  Re: Patch to libsemanage to remove labeling of /root Daniel J Walsh  Re: Patch to libsemanage to remove labeling of /root Daniel J Walsh  Re: Patch to libsemanage to remove labeling of /root Joshua Brindle  Re: Patch to libsemanage to remove labeling of /root Daniel J Walsh  Re: Patch to libsemanage to remove labeling of /root Joshua Brindle  Tuesday, 17 February Re: Patch to libsemanage to remove labeling of /root Daniel J Walsh  Re: Patch to libsemanage to remove labeling of /root Joshua Brindle  Re: Patch to libsemanage to remove labeling of /root Daniel J Walsh  Re: Patch to libsemanage to remove labeling of /root Joshua Brindle  Re: Patch to libsemanage to remove labeling of /root Daniel J Walsh  Re: Patch to libsemanage to remove labeling of /root Joshua Brindle  Re: [nfsv4] [Labeled-nfs] New MAC label support Internet Draft posted to IETF website Nicolas Williams  Re: [nfsv4] [Labeled-nfs] New MAC label support Internet Draft posted to IETF website David P. Quigley  Removing a module that does not exist should not be an error. Daniel J Walsh  Add missing --level option to semanage Daniel J Walsh  Add btrfs to fixfiles Daniel J Walsh  Several fixes to restorecond Daniel J Walsh  Remove bogus audit2allow option Daniel J Walsh  Monday, 16 February run_init Russell Coker  Re: sysvinit doesnt see libselinux/libsepol (LFS system); Justin Mattock  Re: sysvinit doesnt see libselinux/libsepol (LFS system); Russell Coker  RE: [refpolicy] [PATCH] refpolicy: Add missing network related MLSconstraints chanson_at_TrustedCS.com  Re: sysvinit doesnt see libselinux/libsepol (LFS system); Justin Mattock  Re: sysvinit doesnt see libselinux/libsepol (LFS system); Justin Mattock  Sunday, 15 February Re: sysvinit doesnt see libselinux/libsepol (LFS system); Russell Coker  Saturday, 14 February sysvinit doesnt see libselinux/libsepol (LFS system); Justin Mattock  Friday, 13 February Re: [refpolicy] [PATCH] refpolicy: Add missing network related MLSconstraints Casey Schaufler  Re: What happened to http://www.nsa.gov/selinux/ ???? Russell Coker  RE: [refpolicy] [PATCH] refpolicy: Add missing network related MLSconstraints chanson_at_TrustedCS.com  Re: [PATCH -v2 2/3] SELinux: call capabilities code directory hmarti2_at_umbc.edu  Re: [refpolicy] [PATCH] refpolicy: Add missing network related MLSconstraints Paul Moore  Re: [refpolicy] [PATCH] refpolicy: Add missing network related MLSconstraints Paul Moore  Re: [PATCH 5/5] SELinux: convert the avc cache hash list to an hlist James Morris  Re: [PATCH 3/5] SELinux: remove unused av.decided field James Morris  Re: [PATCH 4/5] SELinux: code readability with avc_cache James Morris  Re: [PATCH 2/5] SELinux: more careful use of avd in avc_has_perm_noaudit James Morris  Re: [PATCH 1/5] SELinux: remove the unused ae.used James Morris  Re: [PATCH 2/2] SELinux: check seqno when updating an avc_node James Morris  Re: [PATCH 1/2] SELinux: NULL terminate al contexts from disk James Morris  Re: [PATCH -v2 3/3] SELinux: better printk when file with invalid label found James Morris  Re: [PATCH -v2 2/3] SELinux: call capabilities code directory James Morris  Re: [refpolicy] [PATCH] refpolicy: Add missing network related MLSconstraints Glenn Faden  RE: [refpolicy] [PATCH] refpolicy: Add missing network related MLSconstraints chanson_at_TrustedCS.com  Re: [refpolicy] [PATCH] refpolicy: Add missing network related MLSconstraints Paul Moore  Re: [refpolicy] [PATCH] refpolicy: Add missing network related MLSconstraints Glenn Faden  Re: [refpolicy] [PATCH] refpolicy: Add missing network related MLSconstraints Paul Moore  Re: [PATCH -v2 3/3] SELinux: better printk when file with invalid label found Stephen Smalley  Re: [PATCH -v2 2/3] SELinux: call capabilities code directory Stephen Smalley  Re: [PATCH 2/2] SELinux: check seqno when updating an avc_node Stephen Smalley  Re: [PATCH 2/2] SELinux: check seqno when updating an avc_node Stephen Smalley  RE: [refpolicy] [PATCH] refpolicy: Add missing network related MLSconstraints chanson_at_TrustedCS.com  Re: [PATCH -v2 1/3] SELinux: fix selinux to safely handle any bugs even when not CONFIG_BUG Stephen Smalley  Re: [PATCH] aliases for the boundry format Daniel J Walsh  Re: [PATCH 3/5] SELinux: remove unused av.decided field Stephen Smalley  Re: [PATCH] aliases for the boundry format Joshua Brindle  Re: [PATCH 2/2] SELinux: check seqno when updating an avc_node Eric Paris  Re: [PATCH 2/5] SELinux: more careful use of avd in avc_has_perm_noaudit Stephen Smalley  Re: [PATCH 1/5] SELinux: remove the unused ae.used Stephen Smalley  Re: [PATCH 2/2] SELinux: check seqno when updating an avc_node Stephen Smalley  Re: [PATCH 1/2] SELinux: NULL terminate al contexts from disk Stephen Smalley  Re: [PATCH 1/5] SELinux: remove the unused ae.used KaiGai Kohei  Thursday, 12 February Re: [PATCH 1/3] SELinux: fix selinux to safely handle any bugs even when not CONFIG_BUG James Morris  Re: cron sys_admin Russell Coker  Re: SELinux blocking Samba share mounting? Daniel J Walsh  [PATCH] refpolicy: Add missing network related MLS constraints Paul Moore  Re: SELinux blocking Samba share mounting? Paul Howarth  Re: [PATCH 1/2] SELinux: NULL terminate al contexts from disk Paul Moore  Re: [nfsv4] [Labeled-nfs] New MAC label support Internet Draft posted to IETF website Nicolas Williams  Re: [PATCH 5/5] SELinux: convert the avc cache hash list to an hlist Paul Moore  Re: [PATCH 4/5] SELinux: code readability with avc_cache Paul Moore  Re: [PATCH 3/5] SELinux: remove unused av.decided field Paul Moore  Re: [PATCH 2/5] SELinux: more careful use of avd in avc_has_perm_noaudit Paul Moore  Re: [PATCH 1/5] SELinux: remove the unused ae.used Eric Paris  Re: [PATCH 1/5] SELinux: remove the unused ae.used Paul Moore  Re: [nfsv4] [Labeled-nfs] New MAC label support Internet Draft posted to IETF website David P. Quigley  [PATCH -v2 2/3] SELinux: call capabilities code directory Eric Paris  [PATCH -v2 3/3] SELinux: better printk when file with invalid label found Eric Paris  [PATCH -v2 1/3] SELinux: fix selinux to safely handle any bugs even when not CONFIG_BUG Eric Paris  [DO NOT COMMIT PATCH 2/2] SELinux: make avc_cache per cpu - DO NOT COMMIT Eric Paris  [DO NOT COMMIT PATCH 1/2] SELinux: place avc_cache hlist and lock together - DO NOT COMMIT!!! Eric Paris  [PATCH 5/5] SELinux: convert the avc cache hash list to an hlist Eric Paris  [PATCH 4/5] SELinux: code readability with avc_cache Eric Paris  [PATCH 3/5] SELinux: remove unused av.decided field Eric Paris  [PATCH 2/5] SELinux: more careful use of avd in avc_has_perm_noaudit Eric Paris  [PATCH 2/2] SELinux: check seqno when updating an avc_node Eric Paris  [PATCH 1/2] SELinux: NULL terminate al contexts from disk Eric Paris  [PATCH 1/5] SELinux: remove the unused ae.used Eric Paris  Re: [Labeled-nfs] New MAC label support Internet Draft posted to IETF website David P. Quigley  SELinux blocking Samba share mounting? Steven Stromer  Re: [nfsv4] [Labeled-nfs] New MAC label support Internet Draft posted to IETF website Nicolas Williams  Re: [nfsv4] New MAC label support Internet Draft posted to IETF website Nicolas Williams  Re: cron sys_admin Stephen Smalley  cron sys_admin Russell Coker  Wednesday, 11 February Re: [Labeled-nfs] New MAC label support Internet Draft posted to IETF website James Morris  Re: New MAC label support Internet Draft posted to IETF website David P. Quigley  Re: mdadm failure in MLS Enforcing Stephen Smalley  Re: mdadm failure in MLS Enforcing Joe Nall  Re: Question about su Casey Schaufler  Re: mdadm failure in MLS Enforcing Stephen Smalley  Re: mdadm failure in MLS Enforcing Joe Nall  Re: mdadm failure in MLS Enforcing Stephen Smalley  Re: Question about su Dominick Grift  Re: Question about su Dennis Wronka  Re: Question about su Dominick Grift  Question about su Dennis Wronka  Tuesday, 10 February mdadm failure in MLS Enforcing Joe Nall  Re: problem with capabilities inheritance and auditing in python Serge E. Hallyn  Re: problem with capabilities inheritance and auditing in python Xavier Toth  Re: problem with capabilities inheritance and auditing in python Serge E. Hallyn  Re: problem with capabilities inheritance and auditing in python Stephen Smalley  Re: problem with capabilities inheritance and auditing in python Serge E. Hallyn  Re: problem with capabilities inheritance and auditing in python Xavier Toth  Re: problem with capabilities inheritance and auditing in python Serge E. Hallyn  Re: problem with capabilities inheritance and auditing in python Stephen Smalley  Re: problem with capabilities inheritance and auditing in python Stephen Smalley  Re: problem with capabilities inheritance and auditing in python Xavier Toth  [PATCH] aliases for the boundry format Caleb Case  Re: problem with capabilities inheritance and auditing in python Stephen Smalley  Re: problem with capabilities inheritance and auditing in python Xavier Toth  [Fwd: Re: bind-mounted homedirs] Daniel J Walsh  Re: problem with capabilities inheritance and auditing in python Serge E. Hallyn  SATISH MADRAGE sent you a Friend Request on Yaari SATISH MADRAGE  Re: problem with capabilities inheritance and auditing in python Xavier Toth  Monday, 9 February Re: problem with capabilities inheritance and auditing in python Serge E. Hallyn  Tuesday, 10 February Re: [PATCH 1/3] SELinux: fix selinux to safely handle any bugs even when not CONFIG_BUG Paul Moore  Re: [PATCH 1/3] SELinux: fix selinux to safely handle any bugs even when not CONFIG_BUG Stephen Smalley  Re: [PATCH 3/3] SELinux: better printk when file with invalid label found Stephen Smalley  Re: [PATCH 1/3] SELinux: fix selinux to safely handle any bugs even when not CONFIG_BUG James Morris  Re: [PATCH 1/3] SELinux: fix selinux to safely handle any bugs even when not CONFIG_BUG Eric Paris  Re: [PATCH 2/3] SELinux: call capabilities code directory Eric Paris  Re: [PATCH 3/3] SELinux: better printk when file with invalid label found Eric Paris  Re: [PATCH 3/3] SELinux: better printk when file with invalid label found Stephen Smalley  Re: [PATCH 2/3] SELinux: call capabilities code directory Stephen Smalley  Re: [PATCH 1/3] SELinux: fix selinux to safely handle any bugs even when not CONFIG_BUG Stephen Smalley  Monday, 9 February Re: New MAC label support Internet Draft posted to IETF website Peter Staubach  [PATCH 3/3] SELinux: better printk when file with invalid label found Eric Paris  [PATCH 2/3] SELinux: call capabilities code directory Eric Paris  [PATCH 1/3] SELinux: fix selinux to safely handle any bugs even when not CONFIG_BUG Eric Paris  Re: problem with capabilities inheritance and auditing in python Stephen Smalley  Re: problem with capabilities inheritance and auditing in python Xavier Toth  RE: odd policy behavior chanson_at_TrustedCS.com  Re: security_compute_av_raw confusion Christopher J. PeBenito  Re: problem with capabilities inheritance and auditing in python Stephen Smalley  Friday, 6 February Re: problem with capabilities inheritance and auditing in python Xavier Toth  Re: security_compute_av_raw confusion Xavier Toth  Re: I need your new version of mcs with color incoding in Rawhide now... Joe Nall  Re: security_compute_av_raw confusion Stephen Smalley  Re: security_compute_av_raw confusion Joe Nall  Re: security_compute_av_raw confusion Christopher J. PeBenito  Re: security_compute_av_raw confusion Stephen Smalley  security_compute_av_raw confusion Joe Nall  Thursday, 5 February Re: problem with capabilities inheritance and auditing in python Stephen Smalley  Re: Base module, modules.conf Stephen Smalley  problem with capabilities inheritance and auditing in python Xavier Toth  Re: [RFC PATCH v1] selinux: Remove the "compat_net" compatibility code Paul Moore  Wednesday, 4 February Re: [RFC PATCH v1] selinux: Remove the "compat_net" compatibility code James Morris  Re: Base module, modules.conf Dominick Grift  [RFC PATCH v1] selinux: Remove the "compat_net" compatibility code Paul Moore  Re: Base module, modules.conf Cheyenne Solo  Re: odd policy behavior James W. Hoeft  Re: odd policy behavior Joe Nall  Re: odd policy behavior Daniel J Walsh  Re: odd policy behavior Daniel J Walsh  Re: odd policy behavior Stephen Smalley  Re: filesystem mount AVC denial Stephen Smalley  Re: odd policy behavior Daniel J Walsh  Re: How do Netlink work? Stephen Smalley  How do Netlink work? xing li  Re: Security context of symbolic links on ubifs Stephen Smalley  Re: odd policy behavior Stephen Smalley  Tuesday, 3 February Re: Security context of symbolic links on ubifs Tim  Re: filesystem mount AVC denial James Morris  Re: odd policy behavior Xavier Toth  Re: odd policy behavior Xavier Toth  Re: odd policy behavior Stephen Smalley  Re: odd policy behavior Xavier Toth  RE: filesystem mount AVC denial Clarkson, Mike R \(US SSA\)  Re: odd policy behavior Stephen Smalley  odd policy behavior Xavier Toth  I need your new version of mcs with color incoding in Rawhide now... Daniel J Walsh  Re: Security context of symbolic links on ubifs Stephen Smalley  Re: [LTP] LTP SELinux policy error Chris PeBenito  Re: LTP SELinux policy error Chris PeBenito  Re: filesystem mount AVC denial Stephen Smalley  Monday, 2 February Security context of symbolic links on ubifs Tim  Re: filesystem mount AVC denial Daniel J Walsh  Re: filesystem mount AVC denial Daniel J Walsh  Re: filesystem mount AVC denial Daniel J Walsh  Re: filesystem mount AVC denial Stephen Smalley  Re: [LTP] LTP SELinux policy error Subrata Modak  Sunday, 1 February Re: [LTP] LTP SELinux policy error Serge E. Hallyn  Re: LTP SELinux policy error Serge E. Hallyn  Friday, 30 January filesystem mount AVC denial Clarkson, Mike R \(US SSA\)  Re: [LTP] LTP SELinux policy error Chris PeBenito  Re: LTP SELinux policy error Chris PeBenito  Re: [LTP] LTP SELinux policy error Serge E. Hallyn  Re: LTP SELinux policy error Serge E. Hallyn  Re: [PATCH][RFC] selinux: remove hooks which simply defer to capabilities Stephen Smalley  RE: What happened to http://www.nsa.gov/selinux/ ???? Stephen Smalley  Thursday, 29 January Re: What happened to http://www.nsa.gov/selinux/ ???? Casey Schaufler  [PATCH][RFC] selinux: remove hooks which simply defer to capabilities James Morris  Re: [PATCH 13/13] selinux: remove secondary ops call to file_mprotect James Morris  Re: What happened to http://www.nsa.gov/selinux/ ???? Justin P. Mattock  Re: LTP SELinux policy error Stephen Smalley  Re: [PATCH][RFC] selinux: remove noop secondary_ops calls Stephen Smalley  Re: [PATCH][RFC] selinux: remove noop secondary_ops calls Stephen Smalley  Re: [PATCH][RFC] selinux: remove noop secondary_ops calls Stephen Smalley  Re: What happened to http://www.nsa.gov/selinux/ ???? Stephen Smalley  Re: [PATCH][RFC] selinux: remove noop secondary_ops calls Serge E. Hallyn  Re: [PATCH 13/13] selinux: remove secondary ops call to file_mprotect Serge E. Hallyn  Re: What happened to http://www.nsa.gov/selinux/ ???? Daniel J Walsh  Re: LTP SELinux policy error Christopher J. PeBenito  Re: What happened to http://www.nsa.gov/selinux/ ???? Stephen Smalley  Re: What happened to http://www.nsa.gov/selinux/ ???? Daniel J Walsh  Re: What happened to http://www.nsa.gov/selinux/ ???? Daniel J Walsh  Re: [PATCH 09/18] selinux: remove secondary ops call to inode_follow_link James Morris  Re: LTP SELinux policy error Christopher J. PeBenito  Re: [PATCH][RFC] selinux: remove noop secondary_ops calls Eric Paris  Re: [PATCH 09/18] selinux: remove secondary ops call to inode_follow_link Eric Paris  LTP SELinux policy error James Morris  Wednesday, 28 January [PATCH 17/18] selinux: remove secondary ops call to unix_stream_connect James Morris  [PATCH 16/18] selinux: remove secondary ops call to task_kill James Morris  [PATCH 09/18] selinux: remove secondary ops call to inode_follow_link James Morris  [PATCH 03/18] selinux: remove secondary ops call to bprm_committed_creds James Morris  [PATCH 06/18] selinux: remove secondary ops call to inode_link James Morris  [PATCH 15/18] selinux: remove secondary ops call to task_setrlimit James Morris  [PATCH 08/18] selinux: remove secondary ops call to inode_mknod James Morris  [PATCH 18/18] selinux: remove secondary ops call to shm_shmat James Morris  [PATCH][RFC] selinux: remove noop secondary_ops calls James Morris  [PATCH 13/13] selinux: remove secondary ops call to file_mprotect James Morris  [PATCH 11/18] selinux: remove secondary ops call to inode_setattr James Morris  [PATCH 07/18] selinux: remove secondary ops call to inode_unlink James Morris  [PATCH 10/18] selinux: remove secondary ops call to inode_permission James Morris  [PATCH 13/18] selinux: remove secondary ops call to task_create James Morris  [PATCH 04/18] selinux: remove secondary ops call to sb_mount James Morris  [PATCH 01/18] selinux: remove unused bprm_check_security hook James Morris  [PATCH 14/18] selinux: remove unused cred_commit hook James Morris  [PATCH 05/18] selinux: remove secondary ops call to sb_umount James Morris  [PATCH 02/18] selinux: remove secondary ops call to bprm_committing_creds James Morris  [PATCH 12/18] selinux: remove secondary ops call to file_mprotect James Morris  Re: What happened to http://www.nsa.gov/selinux/ ???? Bryan Kropf  Re: What happened to http://www.nsa.gov/selinux/ ???? Justin P. Mattock  Re: What happened to http://www.nsa.gov/selinux/ ???? Joshua Kramer  What happened to http://www.nsa.gov/selinux/ ???? Daniel J Walsh  Re: [DSE-Dev] [libsemanage] Also check for the uppoer bound on user ids in /etc/login.defs selinux_at_udmvt.ru  Re: O'Rielly SELinux Book (2005) Justin P. Mattock  Re: O'Rielly SELinux Book (2005) Shaz  Tuesday, 27 January Re: [Labeled-nfs] [nfsv4] New MAC label support Internet Draft posted to IETF website Jarrett Lu  Re: (forw) [bruce@momjian.us: [ANNOUNCE] Need help on possible PG 8.4 security features] KaiGai Kohei  Re: Enabling the "noatime" option on filesystems... James Morris  Re: (forw) [bruce@momjian.us: [ANNOUNCE] Need help on possible PG 8.4 security features] James Morris  Enabling the "noatime" option on filesystems... Hasan Rezaul-CHR010  Re: O'Rielly SELinux Book (2005) Sutton, Harry (MSE)  O'Rielly SELinux Book (2005) Joshua Kramer  Re: Mitigating SQL injection attacks with access-control Sanjai Narain  Re: (forw) [bruce@momjian.us: [ANNOUNCE] Need help on possible PG 8.4 security features] KaiGai Kohei  SE-PostgreSQL to be considered for upstream in PostgreSQL Jacques Thomas  Re: (forw) [bruce@momjian.us: [ANNOUNCE] Need help on possible PG 8.4 security features] James Morris  Re: (forw) [bruce@momjian.us: [ANNOUNCE] Need help on possible PG 8.4 security features] KaiGai Kohei  Monday, 26 January Re: Mitigating SQL injection attacks with access-control Stephen Frost  Mitigating SQL injection attacks with access-control Sanjai Narain  (forw) [bruce@momjian.us: [ANNOUNCE] Need help on possible PG 8.4 security features] Stephen Frost  Re: 3.6.3 policy on fc10 and kerneloops Stephen Smalley  Re: 3.6.3 policy on fc10 and kerneloops Xavier Toth  Re: 3.6.3 policy on fc10 and kerneloops Stephen Smalley  3.6.3 policy on fc10 and kerneloops Xavier Toth  Friday, 23 January Re: [nfsv4] New MAC label support Internet Draft posted to IETF website Glenn Faden  Re: [refpolicy] [PATCH] Add a new permission to db_procedure Christopher J. PeBenito  RE: [Labeled-nfs] [nfsv4] New MAC label support Internet Draft posted to IETF website Kevin L. Smith  More MLS fun Daniel J Walsh  Re: [nfsv4] New MAC label support Internet Draft posted to IETF website Peter Staubach  Thursday, 22 January Re: [refpolicy] [PATCH] Add a new permission to db_procedure KaiGai Kohei  Re: [refpolicy] [PATCH] Add a new permission to db_procedure Joshua Brindle  New MAC label support Internet Draft posted to IETF website David P. Quigley  Wednesday, 21 January Re: [refpolicy] [PATCH] Add a new permission to db_procedure KaiGai Kohei  Re: run_init confusion Justin P. Mattock  Policy Access Control Joshua Brindle  Re: run_init confusion Justin P. Mattock  Re: run_init confusion Joe Nall  run_init confusion Justin P. Mattock  Tuesday, 20 January Re: [IPsec] IPsec Security Context drafts Paul Moore  Re: Base module, modules.conf Jacques Thomas  Re: Base module, modules.conf Stephen Smalley  Re: netstat -Z Paul Moore  Re: Base module, modules.conf Joe Nall  Re: [refpolicy] [PATCH] Add a new permission to db_procedure KaiGai Kohei  Re: [refpolicy] [PATCH] Add a new permission to db_procedure Christopher J. PeBenito  Re: Base module, modules.conf Stephen Smalley  Monday, 19 January LCA 2010 security mini-conf Russell Coker  Re: Base module, modules.conf Jacques Thomas  Re: Customizable types Daniel J Walsh  Re: netstat -Z Justin P. Mattock  Re: netstat -Z Justin P. Mattock  Re: netstat -Z KaiGai Kohei  Sunday, 18 January netstat -Z Russell Coker  Re: [RFC v4]Provide a method for detecting labeling support on a file system James Morris  Re: netlabel: UNLABELED ath9k not denying unlabeled traffic Justin P. Mattock  Re: netlabel: UNLABELED ath9k not denying unlabeled traffic Eric Paris  Re: [PATCH 3/3] SELinux: Unify context mount and genfs behavior Eric Paris  Re: [PATCH 2/3] SELinux: Add new security mount option to indicate security label support. Eric Paris  Re: [PATCH 1/3] SELinux: Condense super block security structure flags and cleanup necessary code. Eric Paris  Friday, 16 January Customizable types Martin Orr  Re: Base module, modules.conf Stephen Smalley  Re: Base module, modules.conf Dominick Grift  Re: Base module, modules.conf Stephen Smalley  Re: Announce: RSBAC 1.4.0 released Justin P. Mattock  Base module, modules.conf Cheyenne Solo  Re: Announce: RSBAC 1.4.0 released Justin P. Mattock  Re: netlabel: UNLABELED ath9k not denying unlabeled traffic Justin P. Mattock  Re: netlabel: UNLABELED ath9k not denying unlabeled traffic Paul Moore  [PATCH 1/3] SELinux: Condense super block security structure flags and cleanup necessary code. David P. Quigley  [PATCH 2/3] SELinux: Add new security mount option to indicate security label support. David P. Quigley  [PATCH 3/3] SELinux: Unify context mount and genfs behavior David P. Quigley  [RFC v4]Provide a method for detecting labeling support on a file system David P. Quigley  Re: Announce: RSBAC 1.4.0 released Joshua Brindle  Problem with the previous libsemanage patch. Daniel J Walsh  Re: Announce: RSBAC 1.4.0 released Justin P. Mattock  Thursday, 15 January Article in Itwire Russell Coker  Re: netlabel: UNLABELED ath9k not denying unlabeled traffic Justin Mattock  Re: netlabel: UNLABELED ath9k not denying unlabeled traffic Paul Moore  Re: netlabel: UNLABELED ath9k not denying unlabeled traffic Justin Mattock  Re: netlabel: UNLABELED ath9k not denying unlabeled traffic Paul Moore  Re: netlabel: UNLABELED ath9k not denying unlabeled traffic Paul Moore  Wednesday, 14 January Re: netlabel: UNLABELED ath9k not denying unlabeled traffic Justin P. Mattock  Re: netlabel: UNLABELED ath9k not denying unlabeled traffic Justin P. Mattock  Re: IPsec Security Context drafts posted to IETF Paul Moore  Re: netlabel: UNLABELED ath9k not denying unlabeled traffic Paul Moore  Re: netlabel: UNLABELED ath9k not denying unlabeled traffic Justin P. Mattock  Re: netlabel: UNLABELED ath9k not denying unlabeled traffic Paul Moore  Re: netlabel: UNLABELED ath9k not denying unlabeled traffic Paul Moore  Re: netlabel: UNLABELED ath9k not denying unlabeled traffic Paul Moore  Re: netlabel: UNLABELED ath9k not denying unlabeled traffic Justin P. Mattock  Re: netlabel: UNLABELED ath9k not denying unlabeled traffic Stephen Smalley  Re: netlabel: UNLABELED ath9k not denying unlabeled traffic Paul Moore  Re: netlabel: UNLABELED ath9k not denying unlabeled traffic Justin P. Mattock  Tuesday, 13 January sepolgen patch Daniel J Walsh  Make removing of a module a warning rather then an error. Daniel J Walsh  policycoreutils_semanage.patch Daniel J Walsh  policycoreutils_restorecond.patch Daniel J Walsh  audit2allow patch Daniel J Walsh  Patch to libsemanage to remove labeling of /root Daniel J Walsh  Monday, 12 January Re: semodule patch to use new semanage interfaces Joshua Brindle  Re: Problem in sepolgen Joshua Brindle  Re: chcat patch. Joshua Brindle  Re: Small fixes for audit2allow Joshua Brindle  Re: Add restorecon and install methods for libselinux python bindings. Joshua Brindle  Re: Now that F11 has started, I am putting in the compression support. Joshua Brindle  IPsec Security Context drafts posted to IETF Joy Latten  Re: Add restorecon and install methods for libselinux python bindings. Daniel J Walsh  Re: Now that F11 has started, I am putting in the compression support. Daniel J Walsh  Re: Now that F11 has started, I am putting in the compression support. Joshua Brindle  Re: Add restorecon and install methods for libselinux python bindings. Joshua Brindle  Re: Now that F11 has started, I am putting in the compression support. Daniel J Walsh  Friday, 9 January Re: Now that F11 has started, I am putting in the compression support. Joshua Brindle  Re: Now that F11 has started, I am putting in the compression support. Joshua Brindle  Thursday, 8 January Re: [DSE-Dev] [libsemanage] Also check for the uppoer bound on user ids in /etc/login.defs Daniel J Walsh  Re: [DSE-Dev] [libsemanage] Also check for the uppoer bound on user ids in /etc/login.defs Manoj Srivastava  Wednesday, 7 January Re: Reference policy: fc_sort bug (or feature?) Tim  Re: [libsemanage] Also check for the uppoer bound on user ids in /etc/login.defs Daniel J Walsh  Re: [libsemanage] Also check for the uppoer bound on user ids in /etc/login.defs Manoj Srivastava  Re: Reference policy: fc_sort bug (or feature?) Christopher J. PeBenito  Re: [libsemanage] Also check for the uppoer bound on user ids in /etc/login.defs Stephen Smalley  Re: Postfix with domain keys Martin Spinassi  Tuesday, 6 January Re: [libsemanage] Also check for the uppoer bound on user ids in /etc/login.defs Manoj Srivastava  Re: Postfix with domain keys Russell Coker  Re: "denied null" AVCs from qemu-kvm with latest rawhide policy Eamon Walsh  Re: Add restorecon and install methods for libselinux python bindings. Daniel J Walsh  Re: [libsemanage] Also check for the uppoer bound on user ids in /etc/login.defs Daniel J Walsh  "denied null" AVCs from qemu-kvm with latest rawhide policy Tom London  Re: Add restorecon and install methods for libselinux python bindings. Joshua Brindle  Re: [libsemanage] Also check for the uppoer bound on user ids in /etc/login.defs Stephen Smalley  Re: [libsemanage] Also check for the uppoer bound on user ids in /etc/login.defs Daniel J Walsh  Re: [libsemanage] Also check for the uppoer bound on user ids in /etc/login.defs Daniel J Walsh  Re: Add restorecon and install methods for libselinux python bindings. Daniel J Walsh  Re: Add restorecon and install methods for libselinux python bindings. Daniel J Walsh  Re: [libsemanage] Also check for the uppoer bound on user ids in /etc/login.defs Stephen Smalley  Re: Postfix with domain keys Martin Spinassi  Re: Add restorecon and install methods for libselinux python bindings. Joshua Brindle  Re: [libsemanage] Also check for the uppoer bound on user ids in /etc/login.defs Manoj Srivastava  Re: Postfix with domain keys Stephen Smalley  Re: Postfix with domain keys Martin Spinassi  Re: Postfix with domain keys Stephen Smalley  Re: Postfix with domain keys Stephen Smalley  Re: Postfix with domain keys Martin Spinassi  Re: Postfix with domain keys Martin Spinassi  Re: Postfix with domain keys Stephen Smalley  Re: Postfix with domain keys Stephen Smalley  Re: [libsemanage] Also check for the uppoer bound on user ids in /etc/login.defs Daniel J Walsh  Postfix with domain keys Martin Spinassi  Monday, 5 January Re: [libsemanage] Also check for the uppoer bound on user ids in /etc/login.defs Manoj Srivastava  Re: [libsemanage] Also check for the uppoer bound on user ids in /etc/login.defs Daniel J Walsh  Re: [RFC] Add color translation support to mcstransd Daniel J Walsh  [libsemanage] Also check for the uppoer bound on user ids in /etc/login.defs Manoj Srivastava  ANN: netlabel_tools version 0.19 Paul Moore  Re: semodule patch to use new semanage interfaces Joshua Brindle  Re: semodule patch to use new semanage interfaces Joshua Brindle  Re: semodule patch to use new semanage interfaces Daniel J Walsh  Re: semodule patch to use new semanage interfaces Joshua Brindle  Re: limitations of CONTEXT__CONTAINS interface Xavier Toth  Re: [PATCH 2/3] SELinux: Add new security mount option to indicate security label support. Eric Paris  Re: transition policy/logic for shell-, perl- and python-scripts Stephen Smalley  Re: [PATCH 2/3] SELinux: Add new security mount option to indicate security label support. David P. Quigley  Re: limitations of CONTEXT__CONTAINS interface Stephen Smalley  Re: [PATCH] SELinux: shrink sizeof av_inhert selinux_class_perm and context James Morris  Re: [PATCH 2/3] SELinux: Add new security mount option to indicate security label support. James Morris  Saturday, 3 January Re: [PATCH 2/3] SELinux: Add new security mount option to indicate security label support. Eric Paris  Friday, 2 January Debian SE Linux package dependencies Russell Coker  [PATCH] SELinux: shrink sizeof av_inhert selinux_class_perm and context Eric Paris  [PATCH 3/3] SELinux: Unify context mount and genfs behavior David P. Quigley  [RFC v3]Provide a method for detecting labeling support on a file system. David P. Quigley  [PATCH 1/3] SELinux: Condense super block security structure flags and cleanup necessary code. David P. Quigley  [PATCH 2/3] SELinux: Add new security mount option to indicate security label support. David P. Quigley  atd Russell Coker  Thursday, 1 January Re: Where can i find the source code of Userspace Packages with modifications for SELinux? Russell Coker  Wednesday, 31 December Re: [RFC] Add color translation support to mcstransd Eamon Walsh  Tuesday, 30 December Reference policy: fc_sort bug (or feature?) Tim  Re: class kernel_service not defined in policy Justin P. Mattock  Re: class kernel_service not defined in policy Eric Paris  Re: class kernel_service not defined in policy Justin P. Mattock  Re: class kernel_service not defined in policy David P. Quigley  [PATCH] Policy:setrans.te - Re: [RFC] Add color translation support to mcstransd Xavier Toth  class kernel_service not defined in policy Justin Mattock  Monday, 29 December Re: Where can i find the source code of Userspace Packages with modifications for SELinux? Daniel J Walsh  Re: Where can i find the source code of Userspace Packages with modifications for SELinux? Daniel J Walsh  Re: Where can i find the source code of Userspace Packages with modifications for SELinux? xing li  Sunday, 28 December Re: Protect Firefox Keyboard Mappings and Font Settings xing li  Saturday, 27 December Re: Alternative location of policy files Tim  Re: Alternative location of policy files Tom London  Re: Alternative location of policy files Tim  Protect Firefox Keyboard Mappings and Font Settings Dave Feustel  Re: Alternative location of policy files Tim  Re: transition policy/logic for shell-, perl- and python-scripts Stefan Schulze Frielinghaus  Re: FC10 MLS policy problems Xavier Toth  Re: Alternative location of policy files Daniel J Walsh  Where can i find the source code of Userspace Packages with modifications for SELinux? xing li  Re: when and how the selinux label all file system according to "file_contexts"? xing li  Re: Alternative location of policy files Tim  Re: Alternative location of policy files Daniel J Walsh  Re: Alternative location of policy files Tim  Re: when and how the selinux label all file system according to "file_contexts"? Daniel J Walsh  Re: FC10 MLS policy problems Daniel J Walsh  Re: transition policy/logic for shell-, perl- and python-scripts Daniel J Walsh  Re: Alternative location of policy files Daniel J Walsh  transition policy/logic for shell-, perl- and python-scripts Stefan Schulze Frielinghaus  Re: when and how the selinux label all file system according to "file_contexts"? Justin P. Mattock  when and how the selinux label all file system according to "file_contexts"? xing li  Re: Alternative location of policy files xing li  Friday, 26 December Re: Alternative location of policy files Tim  Thursday, 25 December Re: Alternative location of policy files Justin P. Mattock  Re: Alternative location of policy files Tim  Re: Alternative location of policy files Justin P. Mattock  Wednesday, 24 December Re: [RFC] Add color translation support to mcstransd Xavier Toth  Re: FC10 MLS policy problems Xavier Toth  Re: Alternative location of policy files Justin P. Mattock  Re: Alternative location of policy files Paul Howarth  Re: Alternative location of policy files Justin P. Mattock  Re: Alternative location of policy files Justin P. Mattock  Re: Question about SELinux userspace library and scripts? Justin P. Mattock  Alternative location of policy files Tim  Re: Question about SELinux userspace library and scripts? Atsushi SAKAI  Re: Question about SELinux userspace library and scripts? Justin P. Mattock  Question about SELinux userspace library and scripts? Atsushi SAKAI  Monday, 22 December Re: FC10 MLS policy problems David P. Quigley  FC10 MLS policy problems Xavier Toth  Friday, 19 December Re: limitations of CONTEXT__CONTAINS interface Xavier Toth  Re: ath9k capability=16 won't compile into policy Justin P. Mattock  Re: [RFC] Add color translation support to mcstransd Xavier Toth  Thursday, 18 December Re: [RFC] Add color translation support to mcstransd Eamon Walsh  Re: [refpolicy] ath9k capability=16 won't compile into policy Justin P. Mattock  Re: [refpolicy] ath9k capability=16 won't compile into policy Daniel J Walsh  Re: Avc denies while running in Permissive mode... Stephen Smalley  Re: Avc denies while running in Permissive mode... Eric Paris  Re: Avc denies while running in Permissive mode... Stephen Smalley  Wednesday, 17 December Re: Avc denies while running in Permissive mode... James Morris  Re: Avc denies while running in Permissive mode... Eric Paris  Re: Avc denies while running in Permissive mode... Eric Paris  Re: Avc denies while running in Permissive mode... Stephen Smalley  Avc denies while running in Permissive mode... Hasan Rezaul-CHR010  Re: [RFC] Add color translation support to mcstransd Xavier Toth  Re: ath9k capability=16 won't compile into policy Justin P. Mattock  Tar problems when restoring polyinstantiated directories Nick Gray  Re: ath9k capability=16 won't compile into policy Stephen Smalley  Tuesday, 16 December ath9k capability=16 won't compile into policy Justin Mattock  Sunday, 14 December Re: [RFC] sVirt 0.20 James Morris  Thursday, 11 December Re: [RFC] Add color translation support to mcstransd Eamon Walsh  Re: [RFC] sVirt 0.20 Daniel P. Berrange  [RFC] sVirt 0.20 James Morris  Wednesday, 10 December ANN: Reference Policy Release Christopher J. PeBenito  Re: Non root user cannot execute semanage, semodule Justin Mattock  Non root user cannot execute semanage, semodule Rahul Jain  Re: [PATCH] SELinux: open perms on sockets, AF_UNIX Daniel J Walsh  Re: Non root user cannot execute semanage, semodule Casey Schaufler  Re: [PATCH] SELinux: open perms on sockets, AF_UNIX Eric Paris  Re: Non root user cannot execute semanage, semodule Stephen Smalley  Re: Troubles with loading modular reference policy Stephen Smalley  Re: [PATCH] SELinux: open perms on sockets, AF_UNIX Stephen Smalley  Re: Non root user cannot execute semanage, semodule Justin P. Mattock  Re: Non root user cannot execute semanage, semodule Casey Schaufler  Tuesday, 9 December Troubles with loading modular reference policy Tymur Korkishko  Re: [PATCH] SELinux: open perms on sockets, AF_UNIX James Morris  [PATCH] SELinux: open perms on sockets, AF_UNIX Eric Paris  Re: Non root user cannot execute semanage, semodule Daniel J Walsh  Re: Non root user cannot execute semanage, semodule Stephen Smalley  Non root user cannot execute semanage, semodule Rahul Jain  Monday, 8 December Re: immutable X windows Eamon Walsh  Re: [RFC] Add color translation support to mcstransd Eamon Walsh  immutable X windows Xavier Toth  Re: limitations of CONTEXT__CONTAINS interface Stephen Smalley  Sunday, 7 December Re: [PATCH 2/3] SELinux: Add new security mount option to indicate security label support. James Morris  Re: [PATCH 2/3] SELinux: Add new security mount option to indicate security label support. James Morris  Saturday, 6 December blip.tv and similar services Russell Coker  Friday, 5 December Re: [RFC] Add color translation support to mcstransd Russell Coker  Re: [RFC] Add color translation support to mcstransd Eamon Walsh  limitations of CONTEXT__CONTAINS interface Eamon Walsh  Re: [RFC] Add color translation support to mcstransd Eamon Walsh  Re: [RFC] Add color translation support to mcstransd Xavier Toth  [PATCH 3/3] SELinux: Unify context mount and genfs behavior David P. Quigley  [PATCH 1/3] SELinux: Condense super block security structure flags and cleanup necessary code. David P. Quigley  [PATCH 2/3] SELinux: Add new security mount option to indicate security label support. David P. Quigley  [RFC] Provide a method for detecting labeling support on a file system(Take 2). David P. Quigley  Re: [PATCH 03/14] LSM/SELinux: inode_{get,set,notify}secctx hooks to access LSM security context information. David P. Quigley  Re: [PATCH 03/14] LSM/SELinux: inode_{get,set,notify}secctx hooks to access LSM security context information. David P. Quigley  Re: [PATCH 2/3] SELinux: Add new security mount option to indicate security label support. David P. Quigley  Re: [PATCH 14/14] NFSD: Server implementation of MAC Labeling James Morris  Re: [PATCH 03/14] LSM/SELinux: inode_{get,set,notify}secctx hooks to access LSM security context information. James Morris  Re: [PATCH 12/14] NFS: Client implementation of Labeled-NFS James Morris  Re: [PATCH 10/14] NFS: Introduce lifecycle management for label attribute. James Morris  Thursday, 4 December Re: [PATCH 09/14] NFS: Add security_label text mount option and handling code to NFS James Morris  Re: [PATCH 08/14] NFSv4: Add label recommended attribute and NFSv4 flags James Morris  Re: [PATCH 3/3] SELinux: Unify context mount and genfs behavior James Morris  Re: [PATCH 2/3] SELinux: Add new security mount option to indicate security label support. James Morris  Re: [PATCH 1/3] SELinux: Condense super block security structure flags and cleanup necessary code. James Morris  [PATCH 1/3] SELinux: Condense super block security structure flags and cleanup necessary code. David P. Quigley  [PATCH 2/3] SELinux: Add new security mount option to indicate security label support. David P. Quigley  [PATCH 3/3] SELinux: Unify context mount and genfs behavior David P. Quigley  [RFC] Provide a method for detecting labeling support on a file system. David P. Quigley  Re: I think it is time for us to put the attributes back into policy file. Daniel J Walsh  Re: I think it is time for us to put the attributes back into policy file. Stephen Smalley  Re: Policy for Konqueror Russell Coker  Wednesday, 3 December Re: I think it is time for us to put the attributes back into policy file. Joe Nall  I think it is time for us to put the attributes back into policy file. Daniel J Walsh  Tuesday, 2 December Re: [refpolicy] the new way of newrole Christopher J. PeBenito  Re: Context transition error Stephen Smalley  Re: Context transition error Vince Le Port  Re: Use of optional_policy in templates (compiler bug or feature?) Stephen Smalley  Re: Use of optional_policy in templates (compiler bug or feature?) Joe Nall  Monday, 1 December ERROR 'syntax error' at token 'typeattribute' Justin P. Mattock  Re: [PATCH] selinux: deprecate and schedule the removal of the the compat_net functionality Paul Moore  Re: [PATCH] selinux: deprecate and schedule the removal of the the compat_net functionality James Morris  the new way of newrole Justin P. Mattock  Re: [PATCH] selinux: deprecate and schedule the removal of the the compat_net functionality Paul Moore  Re: [PATCH] selinux: deprecate and schedule the removal of the the compat_net functionality Stephen Smalley  [PATCH] selinux: deprecate and schedule the removal of the the compat_net functionality Paul Moore  Small fixes for audit2allow Daniel J Walsh  Problem in sepolgen Daniel J Walsh  Wednesday, 26 November [PATCH 10/14] NFS: Introduce lifecycle management for label attribute. David P. Quigley  [PATCH 12/14] NFS: Client implementation of Labeled-NFS David P. Quigley  [PATCH 14/14] NFSD: Server implementation of MAC Labeling David P. Quigley  [PATCH 06/14] SELinux: Add new labeling type native labels David P. Quigley  [PATCH 03/14] LSM/SELinux: inode_{get,set,notify}secctx hooks to access LSM security context information. David P. Quigley  [PATCH 05/14] Security: Add Hook to test if the particular xattr is part of a MAC model. David P. Quigley  [PATCH 04/14] Security: Add hook to calculate context based on a negative dentry. David P. Quigley  [PATCH 13/14] NFS: Extend NFS xattr handlers to accept the security namespace David P. Quigley  [PATCH 08/14] NFSv4: Add label recommended attribute and NFSv4 flags David P. Quigley  [PATCH 11/14] NFSv4: Introduce new label structure David P. Quigley  [PATCH 02/14] VFS: Factor out part of vfs_setxattr so it can be called from the SELinux hook for inode_setsecctx. David P. Quigley  [PATCH 09/14] NFS: Add security_label text mount option and handling code to NFS David P. Quigley  [PATCH 01/14] patch fix_use_before_init_in_nfsd4_list_rec_dir David P. Quigley  [Labeled-nfs] [RFC v4] Security Label Support for NFSv4 David P. Quigley  [PATCH 07/14] KConfig: Add KConfig entries for Labeled NFS David P. Quigley  Monday, 1 December Re: Policy for Konqueror Dave Feustel  Re: Policy for Konqueror Daniel J Walsh  Re: Extracting constraints and MLS constraints from policy Christopher J. PeBenito  Sunday, 30 November Re: PAM _pam_load_conf_file: unable to open /etc/pam.d/system-auth Justin P. Mattock  Re: PAM _pam_load_conf_file: unable to open /etc/pam.d/system-auth Justin P. Mattock  Re: PAM _pam_load_conf_file: unable to open /etc/pam.d/system-auth Xavier Toth  Saturday, 29 November PAM _pam_load_conf_file: unable to open /etc/pam.d/system-auth Justin P. Mattock  Re: SELinux User Guide: weekly report 20081128 Murray McAllister  Re: SELinux User Guide: weekly report 20081128 Stephen John Smoogen  AttributeError: RoleTypeSet instance has no attribute 'roles Justin P. Mattock  Friday, 28 November SELinux Group on LinkedIn Joshua Kramer  Policy for Konqueror Dave Feustel  SELinux User Guide: weekly report 20081128 Murray McAllister  Re: [refpolicy] [RE:] pull request: wireless-2.6 2008-11-25 Daniel J Walsh  Re: user guide draft: "Booleans for Users Executing Applications" Daniel J Walsh  Re: [RFC] Testing Support for deferred mapping of contexts & enable processes with mac_admin to get the raw inode contexts James Morris  [RFC] Testing Support for deferred mapping of contexts & enable processes with mac_admin to get the raw inode contexts Subrata Modak  Thursday, 27 November user guide draft: "Booleans for Users Executing Applications" Murray McAllister  Wednesday, 26 November Extracting constraints and MLS constraints from policy Sanjai Narain  Re: SELinux on NFS. David P. Quigley  [RE:] pull request: wireless-2.6 2008-11-25 Justin P. Mattock  Tuesday, 25 November Re: Polyinstantiation in cron Joe Nall  Re: Polyinstantiation in cron Stephen Smalley  Monday, 24 November Polyinstantiation in cron Joe Nall  Re: [RFC] Add color translation support to mcstransd Eamon Walsh  Re: externally usable interfaces from 3rd party policy modules Joe Nall  Re: Problem Setting Policy To Enforcing Mode Justin P. Mattock  Problem Setting Policy To Enforcing Mode Rahul Jain  externally usable interfaces from 3rd party policy modules Andy Warner  Re: Problem Setting Policy To Enforcing Mode Stephen Smalley  Sunday, 23 November Re: Use of optional_policy in templates (compiler bug or feature?) Joe Nall  Saturday, 22 November Re: Context transition error Vince Le Port  SE Linux on iPaQ Russell Coker  Re: Problem Setting Policy To Enforcing Mode Justin P. Mattock  Problem Setting Policy To Enforcing Mode Rahul Jain  Friday, 21 November Re: [RFC] Add color translation support to mcstransd Joe Nall  [RFC] Add color translation support to mcstransd Eamon Walsh  Re: Context transition error Stephen Smalley  Re: Problem Setting Policy To Enforcing Mode Daniel J Walsh  Context transition error Vince Le Port  Re: Problem Setting Policy To Enforcing Mode Stephen Smalley  Re: Problem Setting Policy To Enforcing Mode Justin P. Mattock  Problem Setting Policy To Enforcing Mode Rahul Jain  Re: python execv 'self:fd use' AVC for fd to /lib64/ld-2.8.so Stephen Smalley  SELinux User Guide: weekly report 20081121 Murray McAllister  Thursday, 20 November python execv 'self:fd use' AVC for fd to /lib64/ld-2.8.so Xavier Toth  Monday, 17 November Re: Handling labeling on filesystems that don't support SELinux Stephen Smalley  Add restorecon and install methods for libselinux python bindings. Daniel J Walsh  Re: Handling labeling on filesystems that don't support SELinux Stephen Smalley  Re: Handling labeling on filesystems that don't support SELinux Daniel J Walsh  Re: [PATCH] semanage: Use semanage_mls_enabled Stephen Smalley  Re: Introducing mod_privileges for Apache HTTPD KaiGai Kohei  Re: This policy causes checkmodule to segfault. KaiGai Kohei  Sunday, 16 November Re: This policy causes checkmodule to segfault. Joshua Brindle  Friday, 14 November Re: 2.6.26 Debian kernel panic Russell Coker  Re: [PATCH] libselinux: allow shell-style wildcarding in X names Joe Nall  [PATCH] libselinux: allow shell-style wildcarding in X names Eamon Walsh  Re: [PATCH] semanage: Use semanage_mls_enabled Daniel J Walsh  This policy causes checkmodule to segfault. Daniel J Walsh  SELinux User Guide: 20081114 Murray McAllister  user guide draft: "Allowing Access: audit2allow" Murray McAllister  Thursday, 13 November Re: user guide drafts: "Linux Permissions" and "Manual Pages for Services" Stephen Smalley  Re: user guide drafts: "Linux Permissions" and "Manual Pages for Services" Murray McAllister  Wednesday, 12 November Re: [PATCH] semanage: Use semanage_mls_enabled Joshua Brindle  Re: user guide drafts: "Linux Permissions" and "Manual Pages for Services" Stephen Smalley  [PATCH] semanage: Use semanage_mls_enabled Stephen Smalley  Re: Label Translation on Fedora 9 Joe Nall  Re: Label Translation on Fedora 9 Russell Coker  Tuesday, 11 November user guide drafts: "Linux Permissions" and "Manual Pages for Services" Murray McAllister  Re: [PATCH] homedir_template generation skips USER lines Joshua Brindle  Re: Latest policycoreutils package has a minor problem Joshua Brindle  Re: [PATCH] libsemanage: Add semanage_mls_enabled interface Joshua Brindle  Re: [refpolicy] latest svn refpolicy confusion Christopher J. PeBenito  latest svn refpolicy confusion Justin Mattock  [PATCH] homedir_template generation skips USER lines Christopher J. PeBenito  Monday, 10 November Re: [refpolicy] SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 Justin P. Mattock  Re: [refpolicy] SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 Christopher J. PeBenito  SELinux: WARNING: inside open_file_mask_to_av with unknown mode:c1b6 Justin Mattock  [PATCH] libsemanage: Add semanage_mls_enabled interface Stephen Smalley  Re: Label Translation on Fedora 9 Paul Moore  Re: Label Translation on Fedora 9 Xavier Toth  Re: Label Translation on Fedora 9 Paul Moore  Re: Label Translation on Fedora 9 Joe Nall  Re: Label Translation on Fedora 9 Xavier Toth  Re: Label Translation on Fedora 9 Paul Moore  Re: seobject_fcontext patch allows you to modify a preexisting file context. Joshua Brindle  Re: newrole error message corrections. Joshua Brindle  Re: policycoreutils audit2allow patch Joshua Brindle  Re: policycoreutils patch Joshua Brindle  Latest policycoreutils package has a minor problem Daniel J Walsh  Sunday, 9 November Re: Label Translation on Fedora 9 Joe Nall  Saturday, 8 November Re: [PATCH] SELinux: Use unknown perm handling to handle unknown netlink msg types James Morris  Friday, 7 November Re: [PATCH] SELinux: Use unknown perm handling to handle unknown netlink msg types Paul Moore  Re: [PATCH] SELinux: Use unknown perm handling to handle unknown netlink msg types Stephen Smalley  Re: [PATCH] SELinux: Use unknown perm handling to handle unknown netlink msg types Eric Paris  Re: seobject_mls.patch Stephen Smalley  Re: [PATCH -v3 2/4] vm: use new has_capability_noaudit Stephen Smalley  Re: [PATCH -v3 4/4] SELinux: use new cap_noaudit interface Stephen Smalley  Re: seobject_mls.patch Stephen Smalley  [PATCH -v3 1/4] SECURITY: new capable_noaudit interface Eric Paris  [PATCH -v3 3/4] filesystems: use has_capability_noaudit interface for reserved blocks checks Eric Paris  [PATCH -v3 4/4] SELinux: use new cap_noaudit interface Eric Paris  [PATCH -v3 2/4] vm: use new has_capability_noaudit Eric Paris  seobject_fcontext patch allows you to modify a preexisting file context. Daniel J Walsh  seobject_mls.patch Daniel J Walsh  semodule patch to use new semanage interfaces Daniel J Walsh  chcat patch. Daniel J Walsh  newrole error message corrections. Daniel J Walsh  policycoreutils audit2allow patch Daniel J Walsh  Now that F11 has started, I am putting in the compression support. Daniel J Walsh  Re: [RFC] Kernel .config options for building LTP SECURITY TESTS Subrata Modak  Re: user guide draft: "Port Numbers" Jan-Frode Myklebust  SELinux User Guide: weekly report 20081107 Murray McAllister  Thursday, 6 November Re: Restorecond.conf Justin P. Mattock  Re: Restorecond.conf Stephen Smalley  Restorecond.conf Justin P. Mattock  Re: restorecon / matchpathcon LC Bruzenak  Re: restorecon / matchpathcon Daniel J Walsh  Re: restorecon / matchpathcon LC Bruzenak  Re: restorecon / matchpathcon Daniel J Walsh  restorecon / matchpathcon LC Bruzenak  Re: user guide drafts: "Searching for and Viewing Denials" and "Analyzing Denials" Daniel J Walsh  SE-PostgreSQL documentation KaiGai Kohei  user guide draft: "Port Numbers" Murray McAllister  Wednesday, 5 November Re: user guide drafts: "Searching for and Viewing Denials" and "Analyzing Denials" Murray McAllister  Re: using roles with mls policy Justin Mattock  Re: using roles with mls policy Daniel J Walsh  Re: user guide drafts: "Searching for and Viewing Denials" and "Analyzing Denials" Daniel J Walsh  Re: using roles with mls policy Justin P. Mattock  Re: using roles with mls policy Andy Warner  Re: using roles with mls policy Andy Warner  Re: [PATCH] SELinux: Use unknown perm handling to handle unknown netlink msg types Paul Moore  Re: using roles with mls policy Justin Mattock  using roles with mls policy Andy Warner  Re: user guide drafts: "Searching for and Viewing Denials" and "Analyzing Denials" Eric Paris  [PATCH] SELinux: Use unknown perm handling to handle unknown netlink msg types Eric Paris  Re: setroubleshoot var types Stephen Smalley  setroubleshoot var types warner_at_rubix.com  user guide drafts: "Searching for and Viewing Denials" and "Analyzing Denials" Murray McAllister  Tuesday, 4 November Re: [PATCH] SELinux: hold tasklist_lock and siglock while waking wait_chldexit Eric Paris  Re: [PATCH] SELinux: hold tasklist_lock and siglock while waking wait_chldexit James Morris  Re: SELinux on NFS. David P. Quigley  [PATCH] SELinux: hold tasklist_lock and siglock while waking wait_chldexit Eric Paris  Re: SELinux on NFS. David P. Quigley  Re: [PATCH -v2 1/3] SECURITY: new capable_noaudit interface Stephen Smalley  Re: [RFC] Kernel .config options for building LTP SECURITY TESTS Stephen Smalley  [RFC] Kernel .config options for building LTP SECURITY TESTS Subrata Modak  Re: user guide drafts: "What Happens when Access is Denied" and "Top Three Causes of Problems" Murray McAllister  Monday, 3 November user guide drafts: "What Happens when Access is Denied" and "Top Three Causes of Problems" Murray McAllister  SELinux on NFS. Daniel J Walsh  [PATCH -v2 3/3] filesystems: use has_capability_noaudit interface for reserved blocks checks Eric Paris  [PATCH -v2 1/3] SECURITY: new capable_noaudit interface Eric Paris  [PATCH -v2 2/3] vm: use new has_capability_noaudit Eric Paris  Re: Label Translation on Fedora 9 Daniel J Walsh  Re: Label Translation on Fedora 9 Paul Moore  Re: Label Translation on Fedora 9 Stephen Smalley  Re: Label Translation on Fedora 9 Andy Warner  Re: Label Translation on Fedora 9 Stephen Smalley  Label Translation on Fedora 9 Andy Warner  Friday, 31 October [PATCH]SELinux: properly handle empty tty_files list Eric Paris  Re: user guide: troubleshooting chapter Daniel J Walsh  Re: RFC: changing the "+" in ls -l output to be "." or "+" Daniel J Walsh  Re: README in libselinux KaiGai Kohei  SELinux User Guide: weekly report 20081031 Murray McAllister  Thursday, 30 October Re: semanage help LC Bruzenak  Re: SELinux policy parser Sanjai Narain  Re: SELinux policy parser Daniel J Walsh  Re: semanage help Daniel J Walsh  Re: [libvirt] [RFC] sVirt v0.10 - initial prototype Daniel J Walsh  SELinux policy parser Sanjai Narain  Re: README in libselinux Eamon Walsh  Re: README in libselinux Eamon Walsh  Re: semanage help Joshua Brindle  Re: semanage help Daniel J Walsh  [PATCH] libselinux: use message types when logging messages Eamon Walsh  Re: [PATCH -v1 1/3] SECURITY: new capable_noaudit interface Paul Moore  Re: [PATCH -v1 1/3] SECURITY: new capable_noaudit interface Eric Paris  Re: [PATCH -v1 1/3] SECURITY: new capable_noaudit interface Paul Moore  Re: [PATCH -v1 1/3] SECURITY: new capable_noaudit interface Serge E. Hallyn  Re: [PATCH] SELinux: check open perms in dentry_open not inode_permission James Morris  Re: README in libselinux Stephen Smalley  Re: [PATCH] SELinux: check open perms in dentry_open not inode_permission Stephen Smalley  Tuesday, 21 October Re: [RFC] sVirt v0.10 - initial prototype Daniel P. Berrange  Wednesday, 22 October Re: [RFC] sVirt v0.10 - initial prototype Daniel P. Berrange  Re: [RFC] sVirt v0.10 - initial prototype Daniel P. Berrange  Thursday, 30 October Re: [libvirt] [RFC] sVirt v0.10 - initial prototype Atsushi SAKAI  Re: user guide draft: "Examples: Booleans for NFS" Murray McAllister  Re: user guide draft: "Examples: Booleans for NFS" Russell Coker  README in libselinux KaiGai Kohei  Wednesday, 29 October Re: user guide draft: "Examples: Booleans for NFS" Murray McAllister  Re: [RFC] sVirt v0.10 - initial prototype James Morris  [PATCH] SELinux: check open perms in dentry_open not inode_permission Eric Paris  Re: [PATCH -v1 2/3] vm: use new has_capability_noaudit Eric Paris  Re: [PATCH -v1 2/3] vm: use new has_capability_noaudit Stephen Smalley  [PATCH -v1 3/3] filesystems: use has_capability_noaudit interface for reserved blocks checks Eric Paris  [PATCH -v1 1/3] SECURITY: new capable_noaudit interface Eric Paris  [PATCH -v1 2/3] vm: use new has_capability_noaudit Eric Paris  Tuesday, 21 October Re: [RFC] sVirt v0.10 - initial prototype Daniel P. Berrange  Wednesday, 29 October Re: [PATCH 1/2] SELinux: do not check open on dir path walk Stephen Smalley  Re: [PATCH 1/2] SELinux: do not check open on dir path walk Eric Paris  Re: [RFC] sVirt v0.10 - initial prototype David P. Quigley  Re: [PATCH 1/2] SELinux: do not check open on dir path walk Stephen Smalley  [PATCH 2/2] SELinux: do not spam dmesg about unix domain sockets Eric Paris  [PATCH 1/2] SELinux: do not check open on dir path walk Eric Paris  Re: user guide draft: "Examples: Booleans for NFS" Daniel J Walsh  Re: 2.6.26 Debian kernel panic Russell Coker  Re: user guide: troubleshooting chapter Dominick Grift  Tuesday, 28 October user guide: troubleshooting chapter Murray McAllister  Re: user guide drafts: "Mounting File Systems" Daniel J Walsh  Re: [RFC] sVirt v0.10 - initial prototype Paul Moore  Re: [RFC] sVirt v0.10 - initial prototype James Morris  Re: 2.6.26 Debian kernel panic Stephen Smalley  Re: 2.6.26 Debian kernel panic Stephen Smalley  user guide drafts: "Changing the Default Mapping" and "xguest: Kiosk Mode" Murray McAllister  Monday, 27 October 2.6.26 Debian kernel panic Russell Coker  Sunday, 26 October user guide draft: "Examples: Booleans for NFS" Murray McAllister  Re: user guide drafts: "Mounting File Systems" Murray McAllister  Re: RFC: changing the "+" in ls -l output to be "." or "+" Jim Meyering  Re: RFC: changing the "+" in ls -l output to be "." or "+" Russell Coker  Friday, 24 October Re: ext4_has_free_blocks always checks cap_sys_resource and makes SELinux unhappy Stephen Smalley  Re: ext4_has_free_blocks always checks cap_sys_resource and makes SELinux unhappy Eric Paris  Re: ext4_has_free_blocks always checks cap_sys_resource and makes SELinux unhappy Stephen Smalley  ext4_has_free_blocks always checks cap_sys_resource and makes SELinux unhappy Eric Paris  Re: RFC: changing the "+" in ls -l output to be "." or "+" Mike Edenfield  SELinux User Guide: weekly report 20081024 Murray McAllister  Re: RFC: changing the "+" in ls -l output to be "." or "+" Jim Meyering  Thursday, 23 October Re: RFC: changing the "+" in ls -l output to be "." or "+" Vikram Noel Ambrose  Re: semanage help Stephen Smalley  Re: semanage help LC Bruzenak  Re: semanage help Stephen Smalley  Re: semanage help Daniel J Walsh  Re: semanage help Daniel J Walsh  Re: semanage help LC Bruzenak  policycoreutils patch Daniel J Walsh  Re: semanage help Daniel J Walsh  Re: semanage help Stephen Smalley  Re: semanage help Daniel J Walsh  Re: Use of optional_policy in templates (compiler bug or feature?) Stephen Smalley  Re: Use of optional_policy in templates (compiler bug or feature?) Joshua Brindle  Re: Use of optional_policy in templates (compiler bug or feature?) Stephen Smalley  Re: semanage help Stephen Smalley  Re: RFC: changing the "+" in ls -l output to be "." or "+" Jim Meyering  Re: [RFC] sVirt v0.10 - initial prototype Paul Moore  Re: [LTP][PATCH 1/2] Replacement of deprecated interfaces Subrata Modak  Re: [LTP][PATCH 2/2] Add a new test case for bounds types Subrata Modak  Re: [LTP][PATCH 2/2] Add a new test case for bounds types KaiGai Kohei  Re: user guide drafts: "Mounting File Systems" Murray McAllister  Re: user guide drafts: "Mounting File Systems" Murray McAllister  Wednesday, 22 October semanage help LC Bruzenak  Re: user guide drafts: "Mounting File Systems" Daniel J Walsh  Re: Use of optional_policy in templates (compiler bug or feature?) Joshua Brindle  Re: user guide drafts: "Mounting File Systems" Stephen Smalley  Re: Use of optional_policy in templates (compiler bug or feature?) Stephen Smalley  Re: Use of optional_policy in templates (compiler bug or feature?) Stephen Smalley  Re: Use of optional_policy in templates (compiler bug or feature?) Joe Nall  Re: Use of optional_policy in templates (compiler bug or feature?) Stephen Smalley  Re: [LTP][PATCH 2/2] Add a new test case for bounds types Subrata Modak  Re: [RFC] sVirt v0.10 - initial prototype James Morris  Re: [RFC] sVirt v0.10 - initial prototype James Morris  Re: [RFC] sVirt v0.10 - initial prototype James Morris  Re: [RFC] sVirt v0.10 - initial prototype James Morris  Re: user guide drafts: "Mounting File Systems" Murray McAllister  Tuesday, 21 October Re: [RFC] sVirt v0.10 - initial prototype Daniel J Walsh  Re: Conditional Access to Network Resources Paul Moore  Re: [RFC] sVirt v0.10 - initial prototype Daniel J Walsh  Re: Conditional Access to Network Resources Stephen Smalley  Re: Conditional Access to Network Resources Dominick Grift  Conditional Access to Network Resources Chris Kuester  Monday, 20 October [RFC] sVirt v0.10 - initial prototype James Morris  Re: Use of optional_policy in templates (compiler bug or feature?) Eamon Walsh  Re: [PATCH] selinux: new permission for chmod on suid or sgid files James Morris  Re: xend and noatsecure Stephen Smalley  xend and noatsecure Russell Coker  Re: [PATCH] selinux: new permission for chmod on suid or sgid files Stephen Smalley  Re: [PATCH] selinux: new permission for chmod on suid or sgid files Stephen Smalley  Re: [PATCH] selinux: new permission for chmod on suid or sgid files Eric Paris  Re: [PATCH] selinux: new permission for chmod on suid or sgid files Stephen Smalley  Re: Trying to figure out the signature of a screen capture. Daniel J Walsh  Re: [PATCH] selinux: new permission for chmod on suid or sgid files Daniel J Walsh  Re: [PATCH] selinux: new permission for chmod on suid or sgid files Daniel J Walsh  Re: Use of optional_policy in templates (compiler bug or feature?) Joe Nall  Re: Use of optional_policy in templates (compiler bug or feature?) Daniel J Walsh  RE: Re: SELinux blocking disclaimer - help diagnosing Stephen Smalley  RE: [SPAM?] Re: SELinux blocking disclaimer - help diagnosing Paul Cocker  Re: user guide drafts: "Managing Users" Stephen Smalley  Re: user guide drafts: "Managing Users" Stephen Smalley  Re: user guide drafts: "Mounting File Systems" Stephen Smalley  RE: SELinux blocking disclaimer - help diagnosing Paul Cocker  Re: SELinux blocking disclaimer - help diagnosing Stephen Smalley  Re: [PATCH] selinux: new permission for chmod on suid or sgid files Stephen Smalley  Re: [PATCH] selinux: new permission for chmod on suid or sgid files Stephen Smalley  Re: [PATCH] selinux: new permission for chmod on suid or sgid files Stephen Smalley  Re: SELinux blocking disclaimer - help diagnosing Russell Coker  SELinux blocking disclaimer - help diagnosing Paul Cocker  user guide drafts: "Managing Users" Murray McAllister  Sunday, 19 October Re: user guide drafts: "Mounting File Systems" Murray McAllister  Re: user guide drafts: "Mounting File Systems" Murray McAllister  Friday, 17 October Re: [PATCH] selinux: new permission for chmod on suid or sgid files Daniel J Walsh  Re: [PATCH] selinux: new permission for chmod on suid or sgid files Daniel J Walsh  Re: [PATCH] selinux: new permission for chmod on suid or sgid files Eric Paris  Re: [PATCH] selinux: new permission for chmod on suid or sgid files Eric Paris  Re: [PATCH] selinux: new permission for chmod on suid or sgid files Stephen Smalley  Re: [PATCH] selinux: new permission for chmod on suid or sgid files Eric Paris  Re: [PATCH] selinux: new permission for chmod on suid or sgid files Stephen Smalley  Re: Protecting against inadvertent file copy Sanjai Narain  Re: [PATCH] selinux: new permission for chmod on suid or sgid files Daniel J Walsh  Re: [PATCH] selinux: new permission for chmod on suid or sgid files Stephen Smalley  Re: [PATCH] selinux: new permission for chmod on suid or sgid files Daniel J Walsh  Re: [PATCH] selinux: new permission for chmod on suid or sgid files Stephen Smalley  Re: Protecting against inadvertent file copy Stephen Smalley  Re: [PATCH] selinux: new permission for chmod on suid or sgid files Stephen Smalley  Protecting against inadvertent file copy Sanjai Narain  [PATCH] libsepol: add new file setsuid_perms policy capability Eric Paris  [patch] policy: add new permission setsuid to file class Eric Paris  [PATCH] selinux: new permission for chmod on suid or sgid files Eric Paris  Re: Creating new types Stephen Smalley  Re: adding objects classes and permissions to policy Stephen Smalley  Re: adding objects classes and permissions to policy Andy Warner  Creating new types Paul Cocker  Re: adding objects classes and permissions to policy Stephen Smalley  Re: adding objects classes and permissions to policy Andy Warner  Re: adding objects classes and permissions to policy Stephen Smalley  Re: adding objects classes and permissions to policy Andy Warner  Re: [refpolicy] keep getting the same avc denial: tmpfs_t:dir search; Justin Mattock  SELinux User Guide: weekly report 20081017 Murray McAllister  Thursday, 16 October Re: (u|r)bacsep: initial testing Russell Coker  Re: adding objects classes and permissions to policy Stephen Smalley  Re: adding objects classes and permissions to policy Xavier Toth  Re: adding objects classes and permissions to policy Stephen Smalley  Re: adding objects classes and permissions to policy Stephen Smalley  adding objects classes and permissions to policy Andy Warner  Re: (u|r)bacsep: initial testing Christopher J. PeBenito  Re: Re: Genfscon and cramfs issue Stephen Smalley  Re: Use of optional_policy in templates (compiler bug or feature?) Joe Nall  Re: Use of optional_policy in templates (compiler bug or feature?) Joshua Brindle  Re: user guide drafts: "Mounting File Systems" Stephen Smalley  Re: Use of optional_policy in templates (compiler bug or feature?) Joe Nall  Re: Use of optional_policy in templates (compiler bug or feature?) Christopher J. PeBenito  Re: Re: Genfscon and cramfs issue Stephen Smalley  Wednesday, 15 October Re: user guide drafts: "Mounting File Systems" Murray McAllister  Re: user guide drafts: "Mounting File Systems" Murray McAllister  Re: Re: Genfscon and cramfs issue korkishko Tymur  Re: Re: Genfscon and cramfs issue korkishko Tymur  Re: Trying to figure out the signature of a screen capture. Eamon Walsh  Re: Use of optional_policy in templates (compiler bug or feature?) Joe Nall  Re: Trying to figure out the signature of a screen capture. Daniel J Walsh  Re: Use of optional_policy in templates (compiler bug or feature?) Christopher J. PeBenito  Re: [refpolicy] keep getting the same avc denial: tmpfs_t:dir search; Justin Mattock  Re: Trying to figure out the signature of a screen capture. Eamon Walsh  Trying to figure out the signature of a screen capture. Daniel J Walsh  Use of optional_policy in templates (compiler bug or feature?) Joe Nall  Re: Genfscon 'dash' issue Joshua Brindle  Re: Genfscon and cramfs issue Stephen Smalley  Re: Genfscon and cramfs issue Stephen Smalley  Re: user guide drafts: Maintaining SELinux Labels Stephen Smalley  Tuesday, 14 October keep getting the same avc denial: tmpfs_t:dir search; Justin Mattock  Genfscon and cramfs issue korkishko Tymur  Re: user guide drafts: Maintaining SELinux Labels Murray McAllister  Re: Re: Genfscon 'dash' issue korkishko Tymur  Re: user guide drafts: Maintaining SELinux Labels Stephen Smalley  Re: user guide drafts: Maintaining SELinux Labels Russell Coker  Re: Genfscon 'dash' issue Joshua Brindle  Re: matchpathcon -V does not always work as expected. Joshua Brindle  Re: Yet another man page patch Joshua Brindle  ANN: Reference Policy Release Christopher J. PeBenito  Re: [refpolicy] newrole without even knowing Justin Mattock  Re: Re: Genfscon 'dash' issue Stephen Smalley  Re: [Labeled-nfs] [RFC v3] Security Label Support for NFSv4 David P. Quigley  Re: user guide drafts: Maintaining SELinux Labels Stephen Smalley  Re: user guide drafts: Maintaining SELinux Labels Stephen Smalley  Re: Capabilities audit field Stephen Smalley  Re: [refpolicy] newrole without even knowing Daniel J Walsh  Re: Capabilities audit field James Morris  Re: gdm ubuntu 8.10 Justin Mattock  Monday, 13 October Re: gdm ubuntu 8.10 Russell Coker  Re: gdm ubuntu 8.10 Justin Mattock  Re: Re: Genfscon 'dash' issue korkishko Tymur  Re: [RFC v3] Security Label Support for NFSv4 James Morris  Re: Capabilities audit field Steve Grubb  Re: Capabilities audit field James Morris  newrole without even knowing Justin Mattock  New libsemanage space saving patch. Daniel J Walsh  Re: user guide drafts: Archiving Files with tar/star Daniel J Walsh  Re: Capabilities audit field Steve Grubb  Re: Capabilities audit field James Morris  Sunday, 12 October Re: Capabilities audit field Joshua Brindle  Re: Capabilities audit field James Morris  Re: gdm ubuntu 8.10 Justin Mattock  Re: gdm ubuntu 8.10 Justin Mattock  Capabilities audit field Steve Grubb  Re: gdm ubuntu 8.10 Russell Coker  Re: user guide drafts: Maintaining SELinux Labels Murray McAllister  Saturday, 11 October gdm ubuntu 8.10 Justin Mattock  Re: user guide drafts: Maintaining SELinux Labels Russell Coker  Re: user guide drafts: Maintaining SELinux Labels Murray McAllister  Re: user guide drafts: "Mounting File Systems" Russell Coker  Re: user guide drafts: Maintaining SELinux Labels Russell Coker  Re: user guide drafts: Archiving Files with tar/star Murray McAllister  Re: user guide drafts: Maintaining SELinux Labels Murray McAllister  Friday, 10 October Re: [PATCH v7 01/17] netlabel: Fix some sparse warnings James Morris  Re: per role template confusion Daniel J Walsh  Re: [PATCH 03/14] Security: Add hook to calculate context based on a negative dentry. Serge E. Hallyn  Re: [PATCH 03/14] Security: Add hook to calculate context based on a negative dentry. David P. Quigley  Re: per role template confusion Joe Nall  Re: per role template confusion Christopher J. PeBenito  Re: per role template confusion Joe Nall  Re: user guide drafts: "Mounting File Systems" Stephen Smalley  Re: user guide drafts: "Mounting File Systems" Eric Paris  Re: user guide drafts: "Mounting File Systems" Stephen Smalley  Re: user guide drafts: "Mounting File Systems" Stephen Smalley  Re: per role template confusion Christopher J. PeBenito  Re: user guide drafts: Archiving Files with tar/star Stephen Smalley  Re: user guide drafts: Maintaining SELinux Labels Stephen Smalley  Re: Genfscon 'dash' issue Stephen Smalley  Re: user guide drafts: "Mounting File Systems" Russell Coker  Re: user guide drafts: "Mounting File Systems" Murray McAllister  SELinux User Guide: weekly report 20081010 Murray McAllister  Re: user guide drafts: "Mounting File Systems" Murray McAllister  user guide drafts: "Mounting File Systems" Murray McAllister  Re: Call for representation at the LCA2009 Security Mini-Conf Russell Coker  Genfscon 'dash' issue korkishko Tymur  Call for representation at the LCA2009 Security Mini-Conf Casey Schaufler  Thursday, 9 October Re: user guide drafts: Archiving Files with tar/star Russell Coker  Re: user guide drafts: Archiving Files with tar/star Murray McAllister  Re: user guide drafts: Archiving Files with tar/star Russell Coker  Re: [PATCH 2/3] Thread/Child-Domain Assignment (rev.2) Joshua Brindle  Re: [PATCH 2/3] Thread/Child-Domain Assignment (rev.2) KaiGai Kohei  Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) KaiGai Kohei  Re: user guide drafts: Archiving Files with tar/star Murray McAllister  Re: per role template confusion Joe Nall  Re: building base policy on RHEL5 Dominick Grift  building base policy on RHEL5 Andy Warner  Re: per role template confusion Joshua Brindle  per role template confusion Joe Nall  Re: BUGREPORT: A type alias of invisible primary one Joshua Brindle  Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) Joshua Brindle  Re: [PATCH 2/3] Thread/Child-Domain Assignment (rev.2) Joshua Brindle  Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) Joshua Brindle  Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) Joshua Brindle  Re: user guide drafts: Archiving Files with tar/star Daniel J Walsh  user guide drafts: Archiving Files with tar/star Murray McAllister  Wednesday, 8 October Re: user guide drafts: Maintaining SELinux Labels Murray McAllister  RE: user guide drafts: Maintaining SELinux Labels Clarkson, Mike R \(US SSA\)  Re: user guide drafts: Maintaining SELinux Labels Glenn Faden  Re: user guide drafts: Maintaining SELinux Labels Daniel J Walsh  Re: Customizing SELinux Policy Daniel J Walsh  Re: [refpolicy] Milter Mail Filters Paul Howarth  Tuesday, 7 October user guide drafts: Maintaining SELinux Labels Murray McAllister  Re: typebounds lookup from userspace KaiGai Kohei  Re: typebounds lookup from userspace Eamon Walsh  Re: typebounds lookup from userspace Stephen Smalley  Re: typebounds lookup from userspace Eamon Walsh  permissive domain interface (Re: typebounds lookup from userspace) KaiGai Kohei  Re: typebounds lookup from userspace KaiGai Kohei  Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) KaiGai Kohei  Monday, 6 October Re: [PATCH 02/14] LSM/SELinux: inode_{get,set,notify}secctx hooks to access LSM security context information. David P. Quigley  Re: [PATCH 02/14] LSM/SELinux: inode_{get,set,notify}secctx hooks to access LSM security context information. David P. Quigley  [PATCH v7 17/17] netlabel: Add configuration support for local labeling Paul Moore  [PATCH v7 16/17] cipso: Add support for native local labeling and fixup mapping names Paul Moore  [PATCH v7 15/17] netlabel: Changes to the NetLabel security attributes to allow LSMs to pass full contexts Paul Moore  [PATCH v7 14/17] selinux: Cache NetLabel secattrs in the socket's security struct Paul Moore  [PATCH v7 13/17] selinux: Set socket NetLabel based on connection endpoint Paul Moore  [PATCH v7 11/17] netlabel: Add network address selectors to the NetLabel/LSM domain mapping Paul Moore  [PATCH v7 12/17] netlabel: Add functionality to set the security attributes of a packet Paul Moore  [PATCH v7 10/17] netlabel: Add a generic way to create ordered linked lists of network addrs Paul Moore  [PATCH v7 09/17] netlabel: Replace protocol/NetLabel linking with refrerence counts Paul Moore  [PATCH v7 08/17] smack: Fix missing calls to netlbl_skbuff_err() Paul Moore  [PATCH v7 07/17] selinux: Fix missing calls to netlbl_skbuff_err() Paul Moore  [PATCH v7 06/17] selinux: Fix a problem in security_netlbl_sid_to_secattr() Paul Moore  [PATCH v7 05/17] selinux: Better local/forward check in selinux_ip_postroute() Paul Moore  [PATCH v7 04/17] netlabel: Remove unneeded in-kernel API functions Paul Moore  [PATCH v7 03/17] selinux: Correctly handle IPv4 packets on IPv6 sockets in all cases Paul Moore  [PATCH v7 02/17] selinux: Cleanup the NetLabel glue code Paul Moore  [PATCH v7 01/17] netlabel: Fix some sparse warnings Paul Moore  [PATCH v7 00/17] Labeled networking patches for 2.6.28 Paul Moore  Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) Joshua Brindle  Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) Joshua Brindle  RE: user guide drafts: "Working with SELinux" sections Clarkson, Mike R \(US SSA\)  Re: [refpolicy] Milter Mail Filters Christopher J. PeBenito  Customizing SELinux Policy Alain Reguera Delgado  Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) Stephen Smalley  Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) KaiGai Kohei  Saturday, 4 October Re: [PATCH] capability: WARN when invalid capability is requested rather than BUG/panic Andrew G. Morgan  Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) Joshua Brindle  Friday, 3 October Re: [autotools][patch] AC_INIT VERSION info fix + checkpolicy test Vikram Noel Ambrose  Re: [PATCH] selinux: Fix an uninitialized variable BUG/panic in selinux_secattr_to_sid() James Morris  RE: [autotools][patch] AC_INIT VERSION info fix + checkpolicy test Jason Tang  [PATCH] selinux: Fix an uninitialized variable BUG/panic in selinux_secattr_to_sid() Paul Moore  SELinux User Guide: weekly report 20081003 Murray McAllister  Thursday, 2 October Re: user guide drafts: "Working with SELinux" sections Murray McAllister  Wednesday, 1 October Re: [RFC PATCH v6 15/16] cipso: Add support for native local labeling and fixup mapping names Paul Moore  Re: [RFC PATCH v6 00/16] Labeled networking patches for 2.6.28 James Morris  Re: [RFC PATCH v6 15/16] cipso: Add support for native local labeling and fixup mapping names James Morris  Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) Joshua Brindle  Re: [RFC PATCH v6 15/16] cipso: Add support for native local labeling and fixup mapping names Paul Moore  Re: [RFC PATCH v6 16/16] netlabel: Add configuration support for local labeling Paul Moore  Re: [RFC PATCH v6 11/16] netlabel: Add functionality to set the security attributes of a packet Paul Moore  Re: [RFC PATCH v6 04/16] selinux: Better local/forward check in selinux_ip_postroute() Paul Moore  Re: [RFC PATCH v6 02/16] selinux: Correctly handle IPv4 packets on IPv6 sockets in all cases Paul Moore  Re: [RFC PATCH v6 01/16] selinux: Cleanup the NetLabel glue code Paul Moore  Re: [RFC PATCH v6 00/16] Labeled networking patches for 2.6.28 Paul Moore  Re: [PATCH] capability: WARN when invalid capability is requested rather than BUG/panic Serge E. Hallyn  Re: [PATCH] capability: WARN when invalid capability is requested rather than BUG/panic Eric Paris  Re: [RFC PATCH v6 12/16] selinux: Set socket NetLabel based on connection endpoint Paul Moore  Re: [RFC PATCH v6 12/16] selinux: Set socket NetLabel based on connection endpoint Joe Nall  RE: genhomedircon problems Johnson, Richard  genhomedircon problems Daniel J Walsh  Re: [RFC PATCH v6 16/16] netlabel: Add configuration support for local labeling James Morris  Re: [RFC PATCH v6 15/16] cipso: Add support for native local labeling and fixup mapping names James Morris  Re: [RFC PATCH v6 12/16] selinux: Set socket NetLabel based on connection endpoint James Morris  Re: [RFC PATCH v6 11/16] netlabel: Add functionality to set the security attributes of a packet James Morris  Re: [RFC PATCH v6 10/16] netlabel: Add network address selectors to the NetLabel/LSM domain mapping James Morris  Re: [RFC PATCH v6 09/16] netlabel: Add a generic way to create ordered linked lists of network addrs James Morris  Re: [RFC PATCH v6 08/16] netlabel: Replace protocol/NetLabel linking with refrerence counts James Morris  Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) KaiGai Kohei  user guide drafts: SELinux Modes, Booleans, SELinux Contexts - Labeling Files Murray McAllister  Re: user guide drafts: "Working with SELinux" sections Valdis.Kletnieks_at_vt.edu  Tuesday, 30 September Re: [RFC PATCH v6 04/16] selinux: Better local/forward check in selinux_ip_postroute() James Morris  Re: [RFC PATCH v6 03/16] netlabel: Remove unneeded in-kernel API functions James Morris  Re: [RFC PATCH v6 02/16] selinux: Correctly handle IPv4 packets on IPv6 sockets in all cases James Morris  Re: [RFC PATCH v6 01/16] selinux: Cleanup the NetLabel glue code James Morris  Re: [RFC PATCH v6 00/16] Labeled networking patches for 2.6.28 James Morris  Re: user guide drafts: "Working with SELinux" sections Murray McAllister  Re: [PATCH 06/14] KConfig: Add KConfig entries for Labeled NFS Serge E. Hallyn  Re: [PATCH 02/14] LSM/SELinux: inode_{get,set,notify}secctx hooks to access LSM security context information. Serge E. Hallyn  Re: [PATCH 03/14] Security: Add hook to calculate context based on a negative dentry. Serge E. Hallyn  Re: [PATCH 02/14] LSM/SELinux: inode_{get,set,notify}secctx hooks to access LSM security context information. Serge E. Hallyn  Re: [PATCH 01/14] VFS: Factor out part of vfs_setxattr so it can be called from the SELinux hook for inode_setsecctx. Serge E. Hallyn  Re: [PATCH] capability: WARN when invalid capability is requested rather than BUG/panic Eric Paris  Re: [PATCH] capability: WARN when invalid capability is requested rather than BUG/panic Serge E. Hallyn  Re: [PATCH] capability: WARN when invalid capability is requested rather than BUG/panic Eric Paris  Re: [PATCH] capability: WARN when invalid capability is requested rather than BUG/panic Serge E. Hallyn  Re: [PATCH] capability: WARN when invalid capability is requested rather than BUG/panic Eric Paris  Re: [PATCH] capability: WARN when invalid capability is requested rather than BUG/panic James Morris  Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) Joshua Brindle  [PATCH] capability: WARN when invalid capability is requested rather than BUG/panic Eric Paris  matchpathcon -V does not always work as expected. Daniel J Walsh  Yet another man page patch Daniel J Walsh  Re: sepostgresql.pp conflicts on F9 (Re: How to find SELinux policy type?) Paul Howarth  Re: sepostgresql.pp conflicts on F9 (Re: How to find SELinux policy type?) KaiGai Kohei  Re: sepostgresql.pp conflicts on F9 (Re: How to find SELinux policy type?) Dominick Grift  sepostgresql.pp conflicts on F9 (Re: How to find SELinux policy type?) KaiGai Kohei  Monday, 29 September Re: Some missing man pages from libselinux Joshua Brindle  Re: [autotools] libselinux build system comments Vikram Noel Ambrose  Re: Patch to make libsemanage/selinux policy require less space. Joshua Brindle  Re: user guide drafts: "Working with SELinux" sections Stephen Smalley  [PATCH 12/14] NFS: Client implementation of Labeled-NFS David P. Quigley  [PATCH 09/14] NFS: Introduce lifecycle management for label attribute. David P. Quigley  [PATCH 11/14] NFS/RPC: Add the auth_seclabel security flavor to allow the process label to be sent to the server. David P. Quigley  [PATCH 05/14] SELinux: Add new labeling type native labels David P. Quigley  [PATCH 08/14] NFS: Add security_label text mount option and handling code to NFS David P. Quigley  [RFC v3] Security Label Support for NFSv4 David P. Quigley  [PATCH 06/14] KConfig: Add KConfig entries for Labeled NFS David P. Quigley  [PATCH 01/14] VFS: Factor out part of vfs_setxattr so it can be called from the SELinux hook for inode_setsecctx. David P. Quigley  [PATCH 03/14] Security: Add hook to calculate context based on a negative dentry. David P. Quigley  [PATCH 10/14] NFSv4: Introduce new label structure David P. Quigley  [PATCH 02/14] LSM/SELinux: inode_{get,set,notify}secctx hooks to access LSM security context information. David P. Quigley  [PATCH 04/14] Security: Add Hook to test if the particular xattr is part of a MAC model. David P. Quigley  [PATCH 07/14] NFSv4: Add label recommended attribute and NFSv4 flags David P. Quigley  [PATCH 14/14] NFSD: Server implementation of MAC Labeling David P. Quigley  [PATCH 13/14] NFS: Extend NFS xattr handlers to accept the security namespace David P. Quigley  Re: Patch to make libsemanage/selinux policy require less space. Daniel J Walsh  Re: Patch to make libsemanage/selinux policy require less space. Joshua Brindle  Re: [autotools] libselinux build system comments Joshua Brindle  RE: [autotools] libselinux build system comments Jason Tang  Re: [RFC][PATCH] selinux: use default proc sid on symlinks James Morris  Re: [RFC][PATCH] selinux: use default proc sid on symlinks Stephen Smalley  Sunday, 28 September ipcs Russell Coker  [autotools][patch] AC_INIT macro fixes Vikram Noel Ambrose  Saturday, 27 September Re: [autotools] libselinux build system comments Vikram Noel Ambrose  RE: [autotools] libselinux build system comments Jason Tang  Re: [autotools] libselinux build system comments Vikram Noel Ambrose  Re: How to find SELinux policy type? KaiGai Kohei  Friday, 26 September [autotools] libselinux build system comments Jason Tang  [autotools][patch] libsepol build system comments Jason Tang  Patch to make libsemanage/selinux policy require less space. Daniel J Walsh  Re: How to find SELinux policy type? KaiGai Kohei  Re: How to find SELinux policy type? Dominick Grift  Re: How to find SELinux policy type? KaiGai Kohei  Re: How to find SELinux policy type? Dominick Grift  SELinux User Guide: weekly report 20080926 Murray McAllister  Thursday, 25 September Re: How to find SELinux policy type? KaiGai Kohei  Re: How to find SELinux policy type? Valdis.Kletnieks_at_vt.edu  Re: user guide drafts: "Working with SELinux" sections Valdis.Kletnieks_at_vt.edu  Re: [PATCH][autotools] libselinux/load_policy.o compile error Vikram Noel Ambrose  Re: Fwd: checkmodule: duplicate declaration of type/attribute problem Joshua Brindle  Fwd: checkmodule: duplicate declaration of type/attribute problem Xavier Toth  Re: checkmodule: duplicate declaration of type/attribute problem Joshua Brindle  checkmodule: duplicate declaration of type/attribute problem Xavier Toth  Re: BUGREPORT: A type alias of invisible primary one KaiGai Kohei  Wednesday, 24 September Re: How to find SELinux policy type? Justin P. Mattock  Re: How to find SELinux policy type? Daniel J Walsh  Some missing man pages from libselinux Daniel J Walsh  Re: How to find SELinux policy type? Daniel J Walsh  Tuesday, 23 September apol bugs Russell Coker  Re: How to find SELinux policy type? James Morris  Re: How to find SELinux policy type? KaiGai Kohei  Re: How to find SELinux policy type? Paul Howarth  Re: How to find SELinux policy type? KaiGai Kohei  RE: How to find SELinux policy type? Mike Sweetser - Adhost  How to find SELinux policy type? James Morris  Re: [RFC][PATCH] selinux: use default proc sid on symlinks James Morris  Re: [RFC][PATCH] selinux: use default proc sid on symlinks Stephen Smalley  Re: [RFC][PATCH] selinux: use default proc sid on symlinks James Morris  user guide drafts: "Working with SELinux" sections Murray McAllister  Monday, 22 September Re: BUGREPORT: A type alias of invisible primary one Joshua Brindle  [RFC][PATCH] selinux: use default proc sid on symlinks Stephen Smalley  Re: Latest flask definitions for libselinux. Stephen Smalley  Re: Latest flask definitions for libselinux. Joshua Brindle  Re: Latest flask definitions for libselinux. Daniel J Walsh  Re: Latest flask definitions for libselinux. Joshua Brindle  Man page fixes for libselinux. Daniel J Walsh  Latest flask definitions for libselinux. Daniel J Walsh  Re: [refpolicy] Milter Mail Filters Paul Howarth  Friday, 19 September Re: typebounds lookup from userspace Joshua Brindle  Re: typebounds lookup from userspace Joshua Brindle  Re: typebounds lookup from userspace Stephen Smalley  Re: typebounds lookup from userspace Joshua Brindle  Re: typebounds lookup from userspace Valdis.Kletnieks_at_vt.edu  Re: typebounds lookup from userspace Stephen Smalley  Re: typebounds lookup from userspace Joshua Brindle  Re: typebounds lookup from userspace Stephen Smalley  typebounds lookup from userspace Joshua Brindle  Re: apol and linking Joshua Brindle  Re: apol and linking Stephen Smalley  apol and linking Russell Coker  SELinux User Guide: weekly report 20080919 Murray McAllister  Thursday, 18 September Re: Latest translations of SELinux policoreutils patch Joshua Brindle  Wednesday, 17 September Re: PHP/SELinux: libselinux wrappers KaiGai Kohei  Re: Latest translations of SELinux policoreutils patch Daniel J Walsh  Re: Latest translations of SELinux policoreutils patch Joshua Brindle  Re: user guide draft: "Confined and Unconfined User Domains" review Murray McAllister  Re: user guide draft: "Confined and Unconfined User Domains" review Murray McAllister  Re: [RFC PATCH v6 00/16] Labeled networking patches for 2.6.28 Casey Schaufler  Tuesday, 16 September Re: [refpolicy] ssh issue with latest policy Justin Mattock  Re: [refpolicy] ssh issue with latest policy Hong  Re: [refpolicy] ssh issue with latest policy Justin Mattock  Re: [refpolicy] ssh issue with latest policy Hong  Re: [RFC PATCH v6 00/16] Labeled networking patches for 2.6.28 Paul Moore  [RFC PATCH v6 09/16] netlabel: Add a generic way to create ordered linked lists of network addrs Paul Moore  [RFC PATCH v6 12/16] selinux: Set socket NetLabel based on connection endpoint Paul Moore  [RFC PATCH v6 16/16] netlabel: Add configuration support for local labeling Paul Moore  [RFC PATCH v6 15/16] cipso: Add support for native local labeling and fixup mapping names Paul Moore  [RFC PATCH v6 13/16] selinux: Cache NetLabel secattrs in the socket's security struct Paul Moore  [RFC PATCH v6 10/16] netlabel: Add network address selectors to the NetLabel/LSM domain mapping Paul Moore  [RFC PATCH v6 14/16] netlabel: Changes to the NetLabel security attributes to allow LSMs to pass full contexts Paul Moore  [RFC PATCH v6 11/16] netlabel: Add functionality to set the security attributes of a packet Paul Moore  [RFC PATCH v6 08/16] netlabel: Replace protocol/NetLabel linking with refrerence counts Paul Moore  [RFC PATCH v6 07/16] smack: Fix missing calls to netlbl_skbuff_err() Paul Moore  [RFC PATCH v6 06/16] selinux: Fix missing calls to netlbl_skbuff_err() Paul Moore  [RFC PATCH v6 05/16] selinux: Fix a problem in security_netlbl_sid_to_secattr() Paul Moore  [RFC PATCH v6 03/16] netlabel: Remove unneeded in-kernel API functions Paul Moore  [RFC PATCH v6 04/16] selinux: Better local/forward check in selinux_ip_postroute() Paul Moore  [RFC PATCH v6 00/16] Labeled networking patches for 2.6.28 Paul Moore  [RFC PATCH v6 01/16] selinux: Cleanup the NetLabel glue code Paul Moore  [RFC PATCH v6 02/16] selinux: Correctly handle IPv4 packets on IPv6 sockets in all cases Paul Moore  [RFC] Apache/SELinux : Enables to prevent web application flaws. KaiGai Kohei  Monday, 15 September Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) KaiGai Kohei  Re: [PATCH][autotools] libselinux/load_policy.o compile error Joshua Brindle  Re: libsemage patch to not compile modules for seusers and fcontext Joshua Brindle  Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) Joshua Brindle  Re: user guide draft: "Confined and Unconfined User Domains" review Daniel J Walsh  Re: user guide draft: "Confined and Unconfined User Domains" review Daniel J Walsh  Re: libsemage patch to not compile modules for seusers and fcontext Daniel J Walsh  Re: user guide draft: "Confined and Unconfined User Domains" review Dominick Grift  Re: user guide draft: "Confined and Unconfined User Domains" review Dominick Grift  Sunday, 14 September Re: user guide draft: "Confined and Unconfined User Domains" review Murray McAllister  Re: user guide draft: "Confined and Unconfined User Domains" review Murray McAllister  [OT] voice at SecureOS BoF : Japan Linux Conference 2008 KaiGai Kohei  Friday, 12 September SELinux User Guide: weekly report 20080913 Murray McAllister  Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) KaiGai Kohei  Re: libsemage patch to not compile modules for seusers and fcontext Joshua Brindle  Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) Joshua Brindle  Re: Changes to semanage to allow it to handle transactions. Joshua Brindle  Latest translations of SELinux policoreutils patch Daniel J Walsh  Re: Changes to semanage to allow it to handle transactions. Daniel J Walsh  Re: Changes to semanage to allow it to handle transactions. Joshua Brindle  Re: Only call gen_requires once. Joshua Brindle  Re: Changes to semanage to allow it to handle transactions. Joshua Brindle  Re: Add glob support for restorecond Joshua Brindle  Re: fixfiles fixes Joshua Brindle  Re: setkey ipsec no avc's message Justin Mattock  Re: [refpolicy] ssh issue with latest policy Justin Mattock  Re: [refpolicy] ssh issue with latest policy Václav Ovsík  Re: setkey ipsec no avc's message Tomas Mraz  Thursday, 11 September setkey ipsec no avc's message Justin Mattock  Re: [refpolicy] ssh issue with latest policy Justin Mattock  Re: xpyb Fedora package? Eamon Walsh  Re: [patch] Update selinux info in MAINTAINERS and Kconfig help text James Morris  Only call gen_requires once. Daniel J Walsh  [patch] Update selinux info in MAINTAINERS and Kconfig help text Stephen Smalley  Re: [refpolicy] ssh issue with latest policy Václav Ovsík  Re: strange memory use of mcstransd Stephen Smalley  Re: user guide draft: "Confined and Unconfined User Domains" review Murray McAllister  Wednesday, 10 September strange memory use of mcstransd Russell Coker  Re: libsemage patch to not compile modules for seusers and fcontext Ivan Gyurdiev  xpyb Fedora package? Xavier Toth  Re: Userspace versioning and releases Daniel J Walsh  Userspace versioning and releases Joshua Brindle  ssh issue with latest policy Justin Mattock  [ANN] Updated SELinux userspace release and URL change Joshua Brindle  Re: libsemage patch to not compile modules for seusers and fcontext Daniel J Walsh  Re: semodule memory use Joshua Brindle  Re: semanage fcontext - policy loading Stephen Smalley  Re: semodule memory use Stephen Smalley  semanage fcontext - policy loading Russell Coker  Re: semodule memory use Russell Coker  Tuesday, 9 September Re: semodule memory use Joshua Brindle  dpkg bug related to SE Linux Russell Coker  semodule memory use Russell Coker  Re: BUGREPORT: A type alias of invisible primary one KaiGai Kohei  Re: BUGREPORT: A type alias of invisible primary one Joshua Brindle  Re: [refpolicy] Milter Mail Filters Paul Howarth  Re: user guide draft: "Confined and Unconfined User Domains" review Daniel J Walsh  BUGREPORT: A type alias of invisible primary one KaiGai Kohei  Re: user guide draft: "Confined and Unconfined User Domains" review James Morris  user guide draft: "Confined and Unconfined User Domains" review Murray McAllister  PHP/SELinux: libselinux wrappers KaiGai Kohei  Monday, 8 September Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.6) KaiGai Kohei  Re: X11 abstract unix domain socket context question Stephen Smalley  X11 abstract unix domain socket context question Joe Nall  Changes to semanage to allow it to handle transactions. Daniel J Walsh  Add glob support for restorecond Daniel J Walsh  fixfiles fixes Daniel J Walsh  Re: Why are the socket mls constraints are different between ipsec and netlabel? Paul Moore  rsync issues with 'security.selinux': copying unlabelled files to a 'labelled' file system ... ? Tom London  Why are the socket mls constraints are different between ipsec and netlabel? Joe Nall  Re: I hope the user guide will explain what to do with a message such as this one Dominick Grift  Re: user guide draft: "Targeted Policy" review Daniel J Walsh  Re: user guide draft: "Targeted Policy" review Daniel J Walsh  Sunday, 7 September Re: user guide draft: "SELinux Contexts and Attributes" review Murray McAllister  I hope the user guide will explain what to do with a message such as this one Stanley A. Klein  Saturday, 6 September Re: user guide draft: "Targeted Policy" review Murray McAllister  Re: user guide draft: "Targeted Policy" review Murray McAllister  Re: user guide draft: "Targeted Policy" review Murray McAllister  Re: user guide draft: "SELinux Contexts and Attributes" review Murray McAllister  Friday, 5 September Re: [RFC PATCH v5 05/14] smack: Fix missing calls to netlbl_skbuff_err() Casey Schaufler  [RFC PATCH v5 13/14] cipso: Add support for native local labeling and fixup mapping names Paul Moore  [RFC PATCH v5 09/14] netlabel: Add functionality to set the security attributes of a packet Paul Moore  [RFC PATCH v5 10/14] selinux: Set socket NetLabel based on connection endpoint Paul Moore  [RFC PATCH v5 14/14] netlabel: Add configuration support for local labeling Paul Moore  [RFC PATCH v5 11/14] selinux: Cache NetLabel secattrs in the socket's security struct Paul Moore  [RFC PATCH v5 12/14] netlabel: Changes to the NetLabel security attributes to allow LSMs to pass full contexts Paul Moore  [RFC PATCH v5 08/14] netlabel: Add network address selectors to the NetLabel/LSM domain mapping Paul Moore  [RFC PATCH v5 07/14] netlabel: Add a generic way to create ordered linked lists of network addrs Paul Moore  [RFC PATCH v5 06/14] netlabel: Replace protocol/NetLabel linking with refrerence counts Paul Moore  [RFC PATCH v5 05/14] smack: Fix missing calls to netlbl_skbuff_err() Paul Moore  [RFC PATCH v5 04/14] selinux: Fix missing calls to netlbl_skbuff_err() Paul Moore  [RFC PATCH v5 03/14] selinux: Fix a problem in security_netlbl_sid_to_secattr() Paul Moore  [RFC PATCH v5 02/14] selinux: Better local/forward check in selinux_ip_postroute() Paul Moore  [RFC PATCH v5 01/14] netlabel: Remove unneeded in-kernel API functions Paul Moore  [RFC PATCH v5 00/14] Labeled networking patches for 2.6.28 Paul Moore  Re: [RFC PATCH v4 02/14] selinux: Better local/forward check in selinux_ip_postroute() Paul Moore  Re: user guide draft: "Targeted Policy" review Dominick Grift  Re: user guide draft: "Targeted Policy" review Daniel J Walsh  Re: user guide draft: "Targeted Policy" review Daniel J Walsh  Re: [refpolicy] Milter Mail Filters Christopher J. PeBenito  Re: user guide draft: "Targeted Policy" review Stephen Smalley  Re: user guide draft: "SELinux Contexts and Attributes" review Stephen Smalley  Re: [RFC PATCH v4 12/14] netlabel: Changes to the NetLabel security attributes to allow LSMs to pass full contexts James Morris  Re: [RFC PATCH v4 11/14] selinux: Cache NetLabel secattrs in the socket's security struct James Morris  Re: [RFC PATCH v4 10/14] selinux: Set socket NetLabel based on connection endpoint James Morris  Re: [RFC PATCH v4 09/14] netlabel: Add functionality to set the security attributes of a packet James Morris  Re: [RFC PATCH v4 04/14] selinux: Fix missing calls to netlbl_skbuff_err() James Morris  Re: [RFC PATCH v4 03/14] selinux: Fix a problem in security_netlbl_sid_to_secattr() James Morris  Re: [RFC PATCH v4 02/14] selinux: Better local/forward check in selinux_ip_postroute() James Morris  SELinux User Guide: weekly report 20080905 Murray McAllister  Re: user guide draft: "Targeted Policy" review Murray McAllister  Re: user guide draft: "Targeted Policy" review Murray McAllister  Re: user guide draft: "Targeted Policy" review Murray McAllister  Re: user guide draft: "SELinux Contexts and Attributes" review Murray McAllister  Thursday, 4 September Re: libsemage patch to not compile modules for seusers and fcontext Ivan Gyurdiev  root plug confusion Justin Mattock  Re: libsemage patch to not compile modules for seusers and fcontext Daniel J Walsh  Re: [PATCH][gnome.if]: bad gen_require type Daniel J Walsh  Re: [PATCH][gnome.if]: bad gen_require type Xavier Toth  Re: [PATCH][autotools] libselinux/load_policy.o compile error Joshua Brindle  Re: [PATCH][gnome.if]: bad gen_require type Daniel J Walsh  Re: [PATCH][autotools] libselinux/load_policy.o compile error Vikram Noel Ambrose  Re: [PATCH][gnome.if]: bad gen_require type Christopher J. PeBenito  Re: [PATCH][autotools] libselinux/load_policy.o compile error Joshua Brindle  Re: libsemage patch to not compile modules for seusers and fcontext Joshua Brindle  [PATCH][gnome.if]: bad gen_require type Xavier Toth  Re: [PATCH][origin/autotools] fix libtool_compat header error Stephen Smalley  Re: [PATCH][origin/autotools] fix libtool_compat header error Joshua Brindle  Re: [LTP] [RFC] LTP IMA patch Subrata Modak  Re: setroubleshoot problems with MLS policy in enforcing mode Daniel J Walsh  Re: [RFC PATCH v4 00/14] Labeled networking patches for 2.6.28 Paul Moore  Wednesday, 3 September [PATCH][autotools] libselinux/load_policy.o compile error Vikram Noel Ambrose  Re: [PATCH][origin/autotools] fix libtool_compat header error Vikram Noel Ambrose  Re: [PATCH][origin/autotools] fix libtool_compat header error Joshua Brindle  Re: [refpolicy] checkpolicy: error(s) encountered while parsing configuration Justin Mattock  RE: user guide draft: "Targeted Policy" review Clarkson, Mike R \(US SSA\)  Re: [PATCH -v3] SELinux: memory leak in security_context_to_sid_core Stephen Smalley  [PATCH -v3] SELinux: memory leak in security_context_to_sid_core Eric Paris  Re: [PATCH -v2] SELinux: memory leak in security_context_to_sid_core Stephen Smalley  Re: [refpolicy] checkpolicy: error(s) encountered while parsing configuration Hong  Re: [PATCH -v2] SELinux: memory leak in security_context_to_sid_core Eric Paris  Hey we made it big time, we are being made fun of in a cartoon! Daniel J Walsh  Re: [PATCH -v2] SELinux: memory leak in security_context_to_sid_core Stephen Smalley  Re: [RFC PATCH v4 00/14] Labeled networking patches for 2.6.28 Paul Moore  [PATCH -v2] SELinux: memory leak in security_context_to_sid_core Eric Paris  Re: user guide draft: "Targeted Policy" review Daniel J Walsh  Re: user guide draft: "Targeted Policy" review Stephen Smalley  Re: [PATCH] SELinux: memory leak in security_context_to_sid_core Stephen Smalley  Re: user guide draft: "SELinux Contexts and Attributes" review Stephen Smalley  Re: [PATCH] SELinux: memory leak in security_context_to_sid_core James Morris  Re: [refpolicy] checkpolicy: error(s) encountered while parsing configuration Christopher J. PeBenito  Re: [PATCH] SELinux: memory leak in security_context_to_sid_core Stephen Smalley  Re: user guide draft: "Targeted Policy" review James Morris  Re: user guide draft: "Targeted Policy" review Dominick Grift  user guide draft: "Targeted Policy" review Murray McAllister  Re: user guide draft: "SELinux Contexts and Attributes" review Murray McAllister  Re: user guide draft: "SELinux Contexts and Attributes" review Murray McAllister  Tuesday, 2 September Re: [RFC PATCH v4 00/14] Labeled networking patches for 2.6.28 Casey Schaufler  [RFC PATCH v4 13/14] cipso: Add support for native local labeling and fixup mapping names Paul Moore  [RFC PATCH v4 14/14] netlabel: Add configuration support for local labeling Paul Moore  [RFC PATCH v4 12/14] netlabel: Changes to the NetLabel security attributes to allow LSMs to pass full contexts Paul Moore  [RFC PATCH v4 11/14] selinux: Cache NetLabel secattrs in the socket's security struct Paul Moore  [RFC PATCH v4 10/14] selinux: Set socket NetLabel based on connection endpoint Paul Moore  [RFC PATCH v4 09/14] netlabel: Add functionality to set the security attributes of a packet Paul Moore  [RFC PATCH v4 08/14] netlabel: Add network address selectors to the NetLabel/LSM domain mapping Paul Moore  [RFC PATCH v4 07/14] netlabel: Add a generic way to create ordered linked lists of network addrs Paul Moore  [RFC PATCH v4 06/14] netlabel: Replace protocol/NetLabel linking with refrerence counts Paul Moore  [RFC PATCH v4 05/14] smack: Fix missing calls to netlbl_skbuff_err() Paul Moore  [RFC PATCH v4 04/14] selinux: Fix missing calls to netlbl_skbuff_err() Paul Moore  [RFC PATCH v4 03/14] selinux: Fix a problem in security_netlbl_sid_to_secattr() Paul Moore  [RFC PATCH v4 02/14] selinux: Better local/forward check in selinux_ip_postroute() Paul Moore  [RFC PATCH v4 01/14] netlabel: Remove unneeded in-kernel API functions Paul Moore  [RFC PATCH v4 00/14] Labeled networking patches for 2.6.28 Paul Moore  [PATCH] SELinux: memory leak in security_context_to_sid_core Eric Paris  Re: [refpolicy] checkpolicy: error(s) encountered while parsing configuration Justin Mattock  Re: How can I know violations in denied timing ? Shintaro Fujiwara  Re: user guide draft: "SELinux Contexts and Attributes" review Stephen Smalley  Re: user guide draft: "SELinux Contexts and Attributes" review Stephen Smalley  Re: How can I know violations in denied timing ? Stephen Smalley  Re: user guide draft: "SELinux Contexts and Attributes" review Stephen Smalley  Re: [refpolicy] checkpolicy: error(s) encountered while parsing configuration Christopher J. PeBenito  Re: user guide draft: "Introduction" review Stephen Smalley  Re: user guide draft: "Introduction" review Stephen Smalley  Re: user guide draft: "SELinux Contexts and Attributes" review Murray McAllister  Monday, 1 September Re: user guide draft: "SELinux Contexts and Attributes" review Murray McAllister  Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.4) KaiGai Kohei  RE: [PATCH 3/3] Thread/Child-Domain Assignment (rev.4) Joshua Brindle  [PATCH] libsepol : Add support for a new policy version (POLICYDB_VERSION_BOUNDARY) KaiGai Kohei  How can I know violations in denied timing ? Shintaro Fujiwara  Re: user guide draft: "SELinux Contexts and Attributes" review Murray McAllister  Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.4) KaiGai Kohei  Re: user guide draft: "Introduction" review James Morris  Sunday, 31 August Re: user guide draft: "Introduction" review Murray McAllister  Re: checkpolicy: error(s) encountered while parsing configuration Justin P. Mattock  Re: checkpolicy: error(s) encountered while parsing configuration Hong  checkpolicy: error(s) encountered while parsing configuration Justin Mattock  Re: user guide draft: "Introduction" review James Morris  Re: user guide draft: "Introduction" review Murray McAllister  Saturday, 30 August Re: semodule -i error shaunak saha  Friday, 29 August Re: About SELinux in Ubuntu Russell Coker  Re: About SELinux in Ubuntu Hong  Re: Socket and inode label consistency Trent Jaeger  Re: semodule -i error Stephen Smalley  Re: semodule -i error Stephen Smalley  Re: semodule -i error shaunak saha  Re: semodule -i error Stephen Smalley  Re: semodule -i error shaunak saha  Re: semodule -i error Stephen Smalley  Re: About Domain Transition Stephen Smalley  Re: About SELinux in Ubuntu Stephen Smalley  Re: Socket and inode label consistency Stephen Smalley  semodule -i error shaunak saha  Re: About Domain Transition Dominick Grift  SELinux User Guide: weekly report 20080829 Murray McAllister  Re: Socket and inode label consistency Casey Schaufler  Thursday, 28 August Re: About Domain Transition Hong  RE: [PATCH 3/3] Thread/Child-Domain Assignment (rev.4) Joshua Brindle  Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.4) KaiGai Kohei  Re: About Domain Transition Dominick Grift  About Domain Transition Hong  About SELinux in Ubuntu Hong  Re: [RFC 1/2] labeled ipsec internet drafts Paul Moore  Re: [RFC 1/2] labeled ipsec internet drafts Paul Moore  Re: [PATCH 3/3] Thread/Child-Domain Assignment (rev.4) Joshua Brindle  Re: [RFC 1/2] labeled ipsec internet drafts Paul Moore  Re: [RFC 1/2] labeled ipsec internet drafts Paul Moore  Re: Socket and inode label consistency Trent Jaeger  Re: [PATCH] SELinux: add boundary support and thread context assignment James Morris  Re: [LTP][PATCH 1/2] Replacement of deprecated interfaces Subrata Modak  Re: [LTP][PATCH 1/2] Replacement of deprecated interfaces KaiGai Kohei  Re: [PATCH] SELinux: add boundary support and thread context assignment Stephen Smalley  Re: Socket and inode label consistency Stephen Smalley  Re: [LTP][PATCH 1/2] Replacement of deprecated interfaces Subrata Modak  Re: user guide draft: "Introduction" review James Morris  [PATCH] SELinux: add boundary support and thread context assignment KaiGai Kohei  Re: [LTP][PATCH 1/2] Replacement of deprecated interfaces KaiGai Kohei  Re: user guide draft: "Introduction" review Murray McAllister  Wednesday, 27 August Re: [RFC 1/2] labeled ipsec internet drafts Casey Schaufler  Re: [PATCH 1/1] selinux: add support for installing a dummy policy (v2) James Morris  Re: [RFC 1/2] labeled ipsec internet drafts Joy Latten  Re: user guide draft: "Introduction" review Murray McAllister  Re: [RFC 1/2] labeled ipsec internet drafts Joy Latten  Re: [RFC 1/2] labeled ipsec internet drafts Joy Latten  Re: libsemage patch to not compile modules for seusers and fcontext Joshua Brindle  Re: Socket and inode label consistency Casey Schaufler  Re: libsemage patch to not compile modules for seusers and fcontext Joshua Brindle  Re: [RFC 1/2] labeled ipsec internet drafts David P. Quigley  Re: [RFC 1/2] labeled ipsec internet drafts Paul Moore  Re: [RFC 1/2] labeled ipsec internet drafts David P. Quigley  Re: [RFC 1/2] labeled ipsec internet drafts David P. Quigley  Re: Socket and inode label consistency Trent Jaeger  Re: [RFC 1/2] labeled ipsec internet drafts Paul Moore  Re: Socket and inode label consistency Paul Moore  Re: Socket and inode label consistency Casey Schaufler  Re: Socket and inode label consistency Trent Jaeger  setroubleshoot problems with MLS policy in enforcing mode Robert Story  Re: [RFC 1/2] labeled ipsec internet drafts Joy Latten  Re: Socket and inode label consistency Paul Moore  Re: Socket and inode label consistency Trent Jaeger  Re: Socket and inode label consistency Stephen Smalley  Re: Socket and inode label consistency Trent Jaeger  Re: Socket and inode label consistency Eric Paris  Re: New SELinux toolchain build system Vikram Ambrose  Re: Socket and inode label consistency Trent Jaeger  Re: [RFC 1/2] labeled ipsec internet drafts David P. Quigley  Re: [RFC 1/2] labeled ipsec internet drafts Joy Latten  Re: user guide draft: "Introduction" review Stephen John Smoogen  Re: Socket and inode label consistency Paul Moore  Re: user guide draft: "SELinux Contexts and Attributes" review Stephen Smalley  Re: semodule -i not working Stephen Smalley  Re: user guide draft: "Introduction" review Stephen Smalley  Re: [LTP][PATCH 1/2] Replacement of deprecated interfaces Stephen Smalley  Re: libsemage patch to not compile modules for seusers and fcontext Stephen Smalley  Re: Socket and inode label consistency Stephen Smalley  [LTP][PATCH 2/2] Add a new test case for bounds types KaiGai Kohei  [LTP][PATCH 1/2] Replacement of deprecated interfaces KaiGai Kohei  user guide draft: "SELinux Contexts and Attributes" review Murray McAllister  user guide draft: "Introduction" review Murray McAllister  Re: semodule -i not working Shaz  Tuesday, 26 August Re: libsemage patch to not compile modules for seusers and fcontext Ivan Gyurdiev  Re: [PATCH 1/3] Thread/Child-Domain Assignment (rev.6) KaiGai Kohei  Re: [PATCH 1/3] Thread/Child-Domain Assignment (rev.6) KaiGai Kohei  Socket and inode label consistency Trent Jaeger  Re: [patch] selinux: simplify ioctl checking, SELinux enhancements in 2.6.26 James Morris  Re: [RFC 1/2] labeled ipsec internet drafts David P. Quigley  [PATCH 1/1] selinux: add support for installing a dummy policy (v2) Serge E. Hallyn  Re: [PATCH 1/1] selinux: add support for installing a dummy policy Serge E. Hallyn  Re: libsemage patch to not compile modules for seusers and fcontext Joshua Brindle  Re: [RFC 1/2] labeled ipsec internet drafts Joy Latten  Re: libsemage patch to not compile modules for seusers and fcontext Daniel J Walsh  Re: [PATCH 1/1] selinux: add support for installing a dummy policy David P. Quigley  Re: [RFC PATCH v3 00/13] Labeled networking patches for 2.6.28 Joe Nall  Re: libsemage patch to not compile modules for seusers and fcontext Joshua Brindle  Re: libsemage patch to not compile modules for seusers and fcontext Daniel J Walsh  Re: PAM security transitions Daniel J Walsh  Re: [PATCH 1/1] selinux: add support for installing a dummy policy Daniel J Walsh  Re: [PATCH] Revised Patch for local nodecon support in semanage (was: Adding local nodecon's through semanage) Stephen Smalley  Re: semodule -i not working Stephen Smalley  Re: [PATCH 1/3] Thread/Child-Domain Assignment (rev.6) James Morris  Re: [PATCH 1/3] Thread/Child-Domain Assignment (rev.6) James Morris  semodule -i not working Shaz  Re: [PATCH 1/3] Thread/Child-Domain Assignment (rev.6) James Morris  Re: [PATCH 1/3] Thread/Child-Domain Assignment (rev.6) KaiGai Kohei  Monday, 25 August Re: New SELinux toolchain build system Joshua Brindle  Re: [RFC 1/2] labeled ipsec internet drafts David P. Quigley  Re: [RFC 2/2] labeled ipsec internet drafts Joy Latten  Re: [RFC 1/2] labeled ipsec internet drafts Joy Latten  Re: [PATCH 1/1] selinux: add support for installing a dummy policy David P. Quigley  Re: New SELinux toolchain build system Vikram Ambrose  Re: [patch] libselinux: fix EMBEDDED=y build Joshua Brindle  Re: [PATCH 1/3] Thread/Child-Domain Assignment (rev.6) KaiGai Kohei  [patch] libselinux: fix EMBEDDED=y build Stephen Smalley  Re: PAM security transitions Vikram Ambrose  Re: [PATCH 1/3] Thread/Child-Domain Assignment (rev.6) Stephen Smalley  [PATCH 3/3] Thread/Child-Domain Assignment (rev.4) KaiGai Kohei  [PATCH 1/3] Thread/Child-Domain Assignment (rev.6) KaiGai Kohei  Re: [PATCH 1/1] selinux: add support for installing a dummy policy Stephen Smalley  Re: [PATCH 1/1] selinux: add support for installing a dummy policy Stephen Smalley  Re: PAM security transitions Stephen Smalley  Re: [PATCH 1/1] selinux: add support for installing a dummy policy James Morris  Sunday, 24 August Re: New SELinux toolchain build system Joshua Brindle  Friday, 22 August Re: [PATCH 1/1] selinux: add support for installing a dummy policy Serge E. Hallyn  Re: PAM security transitions Russell Coker  Re: [PATCH 1/1] selinux: add support for installing a dummy policy James Morris  PAM security transitions Vikram Ambrose  [PATCH 1/1] selinux: add support for installing a dummy policy Serge E. Hallyn  Re: libsemage patch to not compile modules for seusers and fcontext Stephen Smalley  SELinux User Guide: weekly report 20080822 Murray McAllister  Thursday, 21 August [RFC PATCH v3 13/13] netlabel: Add configuration support for local labeling Paul Moore  [RFC PATCH v3 12/13] cipso: Add support for native local labeling and fixup mapping names Paul Moore  [RFC PATCH v3 09/13] selinux: Set socket NetLabel based on connection endpoint Paul Moore  [RFC PATCH v3 11/13] netlabel: Changes to the NetLabel security attributes to allow LSMs to pass full contexts Paul Moore  [RFC PATCH v3 10/13] selinux: Cache NetLabel secattrs in the socket's security struct Paul Moore  [RFC PATCH v3 08/13] netlabel: Add functionality to set the security attributes of a packet Paul Moore  [RFC PATCH v3 07/13] netlabel: Add network address selectors to the NetLabel/LSM domain mapping Paul Moore  [RFC PATCH v3 06/13] netlabel: Add a generic way to create ordered linked lists of network addrs Paul Moore  [RFC PATCH v3 05/13] netlabel: Replace protocol/NetLabel linking with refrerence counts Paul Moore  [RFC PATCH v3 04/13] smack: Fix missing calls to netlbl_skbuff_err() Paul Moore  [RFC PATCH v3 03/13] selinux: Fix missing calls to netlbl_skbuff_err() Paul Moore  [RFC PATCH v3 02/13] selinux: Fix a problem in security_netlbl_sid_to_secattr() Paul Moore  [RFC PATCH v3 01/13] netlabel: Remove unneeded in-kernel API functions Paul Moore  [RFC PATCH v3 00/13] Labeled networking patches for 2.6.28 Paul Moore  Re: [PATCH] Revised Patch for local nodecon support in semanage (was: Adding local nodecon's through semanage) Stephen Smalley  Re: Make Dummy Policy David P. Quigley  Re: [patch 04/35] corenetwork policy update Christopher J. PeBenito  Re: Make Dummy Policy David P. Quigley  Wednesday, 20 August Re: [ANN] SELinux userland repository, wiki and bug tracking on oss.tresys.com Joshua Brindle  Re: Make Dummy Policy David P. Quigley  Re: Make Dummy Policy David P. Quigley  Re: Make Dummy Policy Casey Schaufler  Make Dummy Policy David P. Quigley  Re: [PATCH 1/3] Thread/Child-Domain Assignment (rev.4) KaiGai Kohei  Monday, 18 August Re: [LTP] [RFC] LTP IMA patch Subrata Modak  Friday, 15 August [ANN] Reference Policy mail list Christopher J. PeBenito  Re: [PATCH 1/3] Thread/Child-Domain Assignment (rev.4) Stephen Smalley  [ANN] SELinux userland repository, wiki and bug tracking on oss.tresys.com Joshua Brindle  Re: file_contexts duplicates Stephen Smalley  Re: file_contexts duplicates Vikram Ambrose  Re: file_contexts duplicates Stephen Smalley  file_contexts duplicates Vikram Ambrose  Re: [ANNOUNCE][RFC] sVirt: Integrating SELinux and Linux-basedvirtualization James Morris  Re: [PATCH] Communication between domains under labeled networks KaiGai Kohei  Re: [ANNOUNCE][RFC] sVirt: Integrating SELinux and Linux-basedvirtualization Atsushi SAKAI  SELinux User Guide: weekly report 20080815 Murray McAllister  Re: Request for multiple mailing lists Russell Coker  Thursday, 14 August Re: libsemage patch to not compile modules for seusers and fcontext Ivan Gyurdiev  Re: [PATCH] selinux: Unify for- and while-loop style James Morris  Re: Help: SELinux causing(?) boot failures... Stephen Smalley  Fixes to services_ppp Daniel J Walsh  libsemage patch to not compile modules for seusers and fcontext Daniel J Walsh  Re: Help: SELinux causing(?) boot failures... Mike Edenfield  Updated man pages Daniel J Walsh  services apcupsd.patch Daniel J Walsh  Updated fail2ban patch Daniel J Walsh  Re: [PATCH] Subject: remove expand_rule function Joshua Brindle  Missing interface for courier Daniel J Walsh  Missing interfaces for kudzu Daniel J Walsh  Minor fixes to first boot policy Daniel J Walsh  Re: New SELinux toolchain build system Vikram Ambrose  Re: [PATCH] Subject: remove expand_rule function Stephen Smalley  Re: Help: SELinux causing(?) boot failures... Stephen Smalley  Re: [PATCH] selinux: Unify for- and while-loop style Stephen Smalley  Re: [PATCH] selinux: Unify for- and while-loop style Stephen Smalley  Re: SELinux policy and performance impacts Stephen Smalley  Re: Request for multiple mailing lists Stephen Smalley  Re: postgresql patch Christopher J. PeBenito  Re: [patch 02/35] kudzu policy update Christopher J. PeBenito  Re: [patch 05/35] courier policy update Christopher J. PeBenito  Re: [patch 12/35] getty policy update Christopher J. PeBenito  Re: [patch 20/35] rpc policy update Christopher J. PeBenito  Re: [patch 24/35] bootloader policy updates Christopher J. PeBenito  Re: [patch 25/35] rdisc policy update Christopher J. PeBenito  Re: [patch 14/35] remotelogin policy update Christopher J. PeBenito  Re: [REFPOLICY PATCH] Added policy module for the oident daemon. Dominick Grift  Re: [patch 03/35] logrotate policy update Christopher J. PeBenito  Re: Made it dontaudit like you asked. Christopher J. PeBenito  Re: Amanda signals fstools Christopher J. PeBenito  postgresql patch Daniel J Walsh  Re: [REFPOLICY PATCH] Added policy module for the oident daemon. Dominick Grift  Re: [REFPOLICY PATCH] Added policy module for the oident daemon. Dominick Grift  A toy of SQL injection (Re: [PATCH 0/3] Thread/Child-Domain Assignment) KaiGai Kohei  [PATCH 1/3] Thread/Child-Domain Assignment (rev.4) KaiGai Kohei  [PATCH] Revised Patch for local nodecon support in semanage (was: Adding local nodecon's through semanage) Christian Kuester  Wednesday, 13 August Re: Using su with pam_selinux Tomas Mraz  Using su with pam_selinux Daniel J Walsh  system_libraries.patch Daniel J Walsh  Re: [REFPOLICY PATCH] Added policy module for the oident daemon. Dominick Grift  Re: [REFPOLICY PATCH] Added policy module for the oident daemon. Dominick Grift  Re: [REFPOLICY PATCH] Added policy module for the oident daemon. Dominick Grift  Re: [REFPOLICY PATCH] Added policy module for the oident daemon. Dominick Grift  Re: [REFPOLICY PATCH] Added policy module for the oident daemon. Dominick Grift  Re: [ANNOUNCE][RFC] sVirt: Integrating SELinux and Linux-based virtualization Paul Moore  Re: [REFPOLICY PATCH] Added policy module for the oident daemon. Paul Howarth  Re: [REFPOLICY PATCH] Added policy module for the oident daemon. Chris PeBenito  Re: Nagios and RHEL 5 David Härdeman  Re: [PATCH 0/3] Thread/Child-Domain Assignment (rev.2) KaiGai Kohei  Tuesday, 12 August graphical login Justin Mattock  Re: New SELinux toolchain build system Joshua Brindle  Re: [patch 23/35] iptables policy update Christopher J. PeBenito  Re: refpolicy: patch for ldconfig from glibc 2.7 Christopher J. PeBenito  Re: New SELinux toolchain build system Daniel J Walsh  Re: Nagios and RHEL 5 Gunnar Hellekson  [PATCH] Subject: remove expand_rule function Joshua Brindle  Re: refpolicy: patch for ldconfig from glibc 2.7 Václav Ovsík  Saturday, 26 July [PATCH] Subject: remove expand_rule function Joshua Brindle  Tuesday, 12 August Re: [libvirt] [ANNOUNCE][RFC] sVirt: Integrating SELinux and Linux-based virtualization Daniel J Walsh  Re: [libvirt] [ANNOUNCE][RFC] sVirt: Integrating SELinux and Linux-based virtualization Daniel J Walsh  Re: [libvirt] [ANNOUNCE][RFC] sVirt: Integrating SELinux and Linux-based virtualization Daniel J Walsh  Re: [libvirt] [ANNOUNCE][RFC] sVirt: Integrating SELinux and Linux-based virtualization James Morris  Re: [ANNOUNCE][RFC] sVirt: Integrating SELinux and Linux-based virtualization James Morris  Re: [ANNOUNCE][RFC] sVirt: Integrating SELinux and Linux-based virtualization Russell Coker  Re: [ANNOUNCE][RFC] sVirt: Integrating SELinux and Linux-based virtualization Casey Schaufler  Monday, 11 August Re: [RFC PATCH v2 0/7] Labeled networking patches for 2.6.28 Paul Moore  [RFC PATCH v2 6/7] selinux: Set socket NetLabel based on connection endpoint Paul Moore  [RFC PATCH v2 5/7] netlabel: Add functionality to set the security attributes of a packet Paul Moore  [RFC PATCH v2 7/7] selinux: Cache NetLabel secattrs in the socket's security struct Paul Moore  [RFC PATCH v2 4/7] netlabel: Add network address selectors to the NetLabel/LSM domain mapping Paul Moore  [RFC PATCH v2 3/7] netlabel: Add a generic way to create ordered linked lists of network addrs Paul Moore  [RFC PATCH v2 2/7] netlabel: Replace protocol/NetLabel linking with refrerence counts Paul Moore  [RFC PATCH v2 0/7] Labeled networking patches for 2.6.28 Paul Moore  [RFC PATCH v2 1/7] selinux: Fix a problem in security_netlbl_sid_to_secattr() Paul Moore  Kerberos Patch Daniel J Walsh  Made it dontaudit like you asked. Daniel J Walsh  Amanda signals fstools Daniel J Walsh  RE: [PATCH 0/3] Thread/Child-Domain Assignment (rev.2) Joshua Brindle  Re: Request for multiple mailing lists Justin Mattock  Re: long contexts Eric Paris  Cleaned up patch Daniel J Walsh  Re: Request for multiple mailing lists Eric Paris  New SELinux toolchain build system Vikram Ambrose  Re: [LTP] [RFC] LTP IMA patch Subrata Modak  Re: Request for multiple mailing lists Vikram Ambrose  Re: [patch 06/35] soundserver policy update Daniel J Walsh  Re: [patch 06/35] soundserver policy update Daniel J Walsh  Re: [patch 06/35] soundserver policy update Daniel J Walsh  Re: [patch 29/35] ipsec policy update Christopher J. PeBenito  Re: [patch 34/35] qmail policy update Christopher J. PeBenito  Re: [patch 28/35] iscsi policy update Christopher J. PeBenito  Re: [patch 27/35] inetd policy update Christopher J. PeBenito  Re: [patch 17/35] brctl policy update Christopher J. PeBenito  Re: [patch 06/35] soundserver policy update Christopher J. PeBenito  long contexts Russell Coker  Re: [ANNOUNCE][RFC] sVirt: Integrating SELinux and Linux-based virtualization James Morris  Re: [ANNOUNCE][RFC] sVirt: Integrating SELinux and Linux-based virtualization Casey Schaufler  Sunday, 10 August [ANNOUNCE][RFC] sVirt: Integrating SELinux and Linux-based virtualization James Morris  Saturday, 9 August Re: [PATCH] selinux: conditional expression type validation was off-by-one Joshua Brindle  Re: [PATCH] selinux: conditional expression type validation was off-by-one Vesa-Matti J Kari  Re: [RFC PATCH] netlabel: Replace protocol/NetLabel linking with refrerence counts Paul Moore  [RFC PATCH] netlabel: Replace protocol/NetLabel linking with refrerence counts Paul Moore  Re: [RFC PATCH v1 2/6] netlabel: Replace protocol/NetLabel linking with refrerence counts Paul Moore  Re: Problem with MLS because /dev is labeled tmpfs_t Dennis Wronka  Friday, 8 August Re: Request for multiple mailing lists Russell Coker  Re: Request for multiple mailing lists Casey Schaufler  Re: Request for multiple mailing lists max bianco  Re: [RFC PATCH v1 0/6] Labeled networking patches for 2.6.28 Paul Moore  Re: [RFC PATCH v1 2/6] netlabel: Replace protocol/NetLabel linking with refrerence counts Paul Moore  Re: Help: SELinux causing(?) boot failures... Russell Coker  [RFC PATCH v1 4/6] netlabel: Add network address selectors to the NetLabel/LSM domain mapping Paul Moore  [RFC PATCH v1 6/6] selinux: Set socket NetLabel based on connection endpoint Paul Moore  [RFC PATCH v1 5/6] netlabel: Add functionality to set the security attributes of a packet Paul Moore  [RFC PATCH v1 3/6] netlabel: Add a generic way to create ordered linked lists of network addrs Paul Moore  [RFC PATCH v1 2/6] netlabel: Replace protocol/NetLabel linking with refrerence counts Paul Moore  [RFC PATCH v1 1/6] selinux: Fix a problem in security_netlbl_sid_to_secattr() Paul Moore  [RFC PATCH v1 0/6] Labeled networking patches for 2.6.28 Paul Moore  Re: Why is customizing labeling and seusers so SLOOOOOOOWWWWW. Daniel J Walsh  Re: Gconf application James Carter  Re: Help: SELinux causing(?) boot failures... Justin Mattock  Re: Help: SELinux causing(?) boot failures... Paul Moore  Re: Can we make libsemanage default to expand-check=0 Daniel J Walsh  Nagios and RHEL 5 Cooper David Ctr 14WS/P3I  Re: SELinux policy and performance impacts Joshua Brindle  Re: Help: SELinux causing(?) boot failures... Mike Edenfield  Re: Request for multiple mailing lists Joshua Brindle  Re: Help: SELinux causing(?) boot failures... Paul Moore  Re: Why is customizing labeling and seusers so SLOOOOOOOWWWWW. Joshua Brindle  Re: Can we make libsemanage default to expand-check=0 Joshua Brindle  Help: SELinux causing(?) boot failures... Mike Edenfield  Why is customizing labeling and seusers so SLOOOOOOOWWWWW. Daniel J Walsh  Re: SELinux policy and performance impacts Paul Moore  Gconf application shaunak saha  Re: [PATCH] selinux: Unify for- and while-loop style Paul Moore  Re: Request for multiple mailing lists Russell Coker  Re: [PATCH] selinux: Unify for- and while-loop style Vesa-Matti J Kari  Re: Request for multiple mailing lists Vesa-Matti J Kari  Re: Request for multiple mailing lists Andy Warner  Re: [PATCH] selinux: conditional expression type validation was off-by-one Vesa-Matti J Kari  Re: Request for multiple mailing lists Vesa-Matti J Kari  Re: Request for multiple mailing lists Andy Warner  SELinux User Guide: weekly report 2008-08-08 Murray McAllister  Thursday, 7 August Re: Request for multiple mailing lists Casey Schaufler  Re: Request for multiple mailing lists Russell Coker  Re: Problem with MLS because /dev is labeled tmpfs_t Russell Coker  Re: SELinux policy and performance impacts James Morris  SELinux policy and performance impacts Matt Anderson  logging to FIFOs Johnson, Richard  Re: Request for multiple mailing lists Stanley A. Klein  Re: Request for multiple mailing lists Casey Schaufler  Re: [refpolicy] Let dhcp use init fds Martin Orr  Request for multiple mailing lists Vikram Ambrose  ipsec patch Daniel J Walsh  Re: [patch 17/35] brctl policy update Daniel J Walsh  Re: [patch 06/35] soundserver policy update Daniel J Walsh  Re: [refpolicy] Let dpkg scripts ptrace Martin Orr  Re: [patch 26/35] stunnel policy update Christopher J. PeBenito  Re: [patch 21/35] kismet policy update Christopher J. PeBenito  Re: [patch 11/35] hotplug policy update Christopher J. PeBenito  Re: [patch 22/35] oav policy updates Christopher J. PeBenito  Re: [patch 19/35] kernel storage module policy updates Christopher J. PeBenito  Re: [patch 13/35] ricci policy update Christopher J. PeBenito  Re: [patch 16/35] usernet policy updates Christopher J. PeBenito  Re: [patch 30/35] fetchmail policy update Christopher J. PeBenito  Re: [patch 31/35] amanda policy update Christopher J. PeBenito  Re: [patch 32/35] rsync policy update Christopher J. PeBenito  Re: [patch 01/35] anaconda policy update Christopher J. PeBenito  Problem with MLS because /dev is labeled tmpfs_t Dennis Wronka  Re: [patch 18/35] fsadm policy update Christopher J. PeBenito  Re: [patch 17/35] brctl policy update Christopher J. PeBenito  Re: [patch 15/35] kernel terminal policy update Christopher J. PeBenito  Re: [patch 06/35] soundserver policy update Christopher J. PeBenito  Re: [PATCH] selinux: Unify for- and while-loop style Paul Moore  Wednesday, 6 August [PATCH] selinux: Unify for- and while-loop style Vesa-Matti Kari  Re: [PATCH] selinux: conditional expression type validation was off-by-one James Morris  Re: selinux freaking out about samba share Lucas Emery  Re: selinux freaking out about cifs share max  Re: selinux freaking out about cifs share Justin Mattock  selinux freaking out about cifs share Lucas Emery  [PATCH] selinux: conditional expression type validation was off-by-one Vesa-Matti Kari  Re: Can we make libsemanage default to expand-check=0 Daniel J Walsh  [PATCH 2/3] Thread/Child-Domain Assignment (rev.3) KaiGai Kohei  [PATCH 1/3] Thread/Child-Domain Assignment (rev.3) KaiGai Kohei  [PATCH 3/3] Thread/Child-Domain Assignment (rev.3) KaiGai Kohei  Re: [PATCH 1/3] Thread/Child-Domain Assignment (rev.2) KaiGai Kohei  Tuesday, 5 August Re: Question about newrole Justin Mattock  [refpolicy patch] Updated Git daemon domain. Dominick Grift  [refpolicy patchJ updated Git daemon domain. Dominick Grift  Re: Question about newrole Dennis Wronka  Re: Question about newrole Stephen Smalley  Re: Question about newrole Dennis Wronka  Re: Question about newrole Justin Mattock  Re: [RFC 2/2] labeled ipsec internet drafts Paul Moore  Re: Question about newrole Justin Mattock  Re: Question about newrole Dennis Wronka  Re: Question about newrole Dennis Wronka  Re: Question about newrole Justin Mattock  Re: [RFC 2/2] labeled ipsec internet drafts Joy Latten  Re: Can we make libsemanage default to expand-check=0 Stephen Smalley  Re: Question about newrole Stephen Smalley  Add /etc/services to restorecond file. Daniel J Walsh  Re: (u|r)bacsep: initial testing Christopher J. PeBenito  Can we make libsemanage default to expand-check=0 Daniel J Walsh  Re: Question about newrole Dennis Wronka  Re: Question about newrole Dennis Wronka  Re: policycoreutils patch Daniel J Walsh  Re: Question about newrole Xavier Toth  Re: Question about newrole Stephen Smalley  Re: policycoreutils patch Stephen Smalley  Question about newrole Dennis Wronka  Re: Patch to make libselinux shut up when SELinux is disabled. Paul Howarth  Re: policycoreutils patch Stephen Smalley  Re: I have added group support to libselinux Stephen Smalley  Re: [refpolicy] corrected/rebased samba patch Christopher J. PeBenito  Re: [PATCH 1/3] Thread/Child-Domain Assignment (rev.2) Stephen Smalley  Re: [refpolicy] Milter Mail Filters Paul Howarth  [PATCH 3/3] Thread/Child-Domain Assignment (rev.2) KaiGai Kohei  [PATCH 2/3] Thread/Child-Domain Assignment (rev.2) KaiGai Kohei  [PATCH 1/3] Thread/Child-Domain Assignment (rev.2) KaiGai Kohei  [PATCH 0/3] Thread/Child-Domain Assignment (rev.2) KaiGai Kohei  Monday, 4 August xdm_tmp_t Russell Coker  White space consistency patch Daniel J Walsh  [refpolicy] corrected/rebased samba patch Mike Edenfield  Re: Patch to make libselinux shut up when SELinux is disabled. Stephen Smalley  Re: Patch to make libselinux shut up when SELinux is disabled. Daniel J Walsh  Re: Some questions regarding RedHat refpolicy patches Daniel J Walsh  [patch] libselinux: make setrans socket descriptor close-on-exec Stephen Smalley  Re: Patch to make libselinux shut up when SELinux is disabled. Paul Howarth  Re: Some questions regarding RedHat refpolicy patches Christopher J. PeBenito  [patch 22/35] oav policy updates david_at_hardeman.nu  [patch 28/35] iscsi policy update david_at_hardeman.nu  [patch 15/35] kernel terminal policy update david_at_hardeman.nu  [patch 31/35] amanda policy update david_at_hardeman.nu  [patch 14/35] remotelogin policy update david_at_hardeman.nu  [patch 09/35] xen policy update david_at_hardeman.nu  [patch 21/35] kismet policy update david_at_hardeman.nu  [patch 33/35] mailscanner policy addition david_at_hardeman.nu  [patch 25/35] rdisc policy update david_at_hardeman.nu  [patch 13/35] ricci policy update david_at_hardeman.nu  [patch 24/35] bootloader policy updates david_at_hardeman.nu  [patch 19/35] kernel storage module policy updates david_at_hardeman.nu  [patch 32/35] rsync policy update david_at_hardeman.nu  [patch 12/35] getty policy update david_at_hardeman.nu  [patch 18/35] fsadm policy update david_at_hardeman.nu  [patch 11/35] hotplug policy update david_at_hardeman.nu  [patch 23/35] iptables policy update david_at_hardeman.nu  [patch 17/35] brctl policy update david_at_hardeman.nu  [patch 35/35] livecd policy addition david_at_hardeman.nu  [patch 34/35] qmail policy update david_at_hardeman.nu  [patch 29/35] ipsec policy update david_at_hardeman.nu  [patch 27/35] inetd policy update david_at_hardeman.nu  [patch 10/35] qemu policy update david_at_hardeman.nu  [patch 16/35] usernet policy updates david_at_hardeman.nu  [patch 26/35] stunnel policy update david_at_hardeman.nu  [patch 20/35] rpc policy update david_at_hardeman.nu  [patch 30/35] fetchmail policy update david_at_hardeman.nu  [patch 08/35] logging policy update david_at_hardeman.nu  [patch 07/35] w3c policy addition david_at_hardeman.nu  [patch 06/35] soundserver policy update david_at_hardeman.nu  [patch 05/35] courier policy update david_at_hardeman.nu  [patch 04/35] corenetwork policy update david_at_hardeman.nu  [patch 03/35] logrotate policy update david_at_hardeman.nu  [patch 02/35] kudzu policy update david_at_hardeman.nu  [patch 01/35] anaconda policy update david_at_hardeman.nu  [patch 00/35] Second round of Fedora/RedHat SELinux changes david_at_hardeman.nu  Sunday, 3 August Some questions regarding RedHat refpolicy patches David Härdeman  Friday, 1 August [refpolicy patch] Add Git daemon domain. Dominick Grift  policycoreutils patch Daniel J Walsh  [refpolicy patch] Add Git daemon domain. Dominick Grift  I have added group support to libselinux Daniel J Walsh  SELinux User Guide: weekly report 2008-08-01 Murray McAllister  Re: [PATCH 1/3] Thread/Child-Domain Assignment KaiGai Kohei  Thursday, 31 July selinux-activate Russell Coker  setfiles patch Russell Coker  [refpolicy, take 3] samba policy updates Mike Edenfield  Re: [refpolicy patch, second try] samba policy updates Mike Edenfield  Re: [refpolicy patch, second try] samba policy updates Christopher J. PeBenito  Re: [refpolicy patch, second try] samba policy updates Mike Edenfield  Re: [refpolicy] Patch: Create non_security_file_type attribute (v2) Christopher J. PeBenito  Re: unconfined_t and user_home_dir_type Christopher J. PeBenito  Re: [refpolicy patch, second try] samba policy updates Christopher J. PeBenito  Wednesday, 30 July ANN: CDS Framework version 3.0 Dave Sugar  Re: [patch] SELinux: trivial, unify iterator variable naming Vesa-Matti J Kari  Re: [patch] SELinux: trivial, unify iterator variable naming Paul Moore  Re: [PATCH 1/3] Thread/Child-Domain Assignment Stephen Smalley  Re: Should /dev/mem be SystemHigh? Joe Nall  Re: [PATCH 1/3] Thread/Child-Domain Assignment Joshua Brindle  Re: Should /dev/mem be SystemHigh? Stephen Smalley  Re: Should /dev/mem be SystemHigh? Christopher J. PeBenito  Re: Should /dev/mem be SystemHigh? Stephen Smalley  Re: [PATCH -v3] SELinux: /proc/mounts should show what it can Stephen Smalley  Re: unconfined_t and user_home_dir_type Russell Coker  Tuesday, 29 July Re: [patch] SELinux: trivial, unify iterator variable naming Russell Coker  Re: Should /dev/mem be SystemHigh? Eamon Walsh  Re: [refpolicy patch, second try] samba policy updates Mike Edenfield  [PATCH -v3] SELinux: /proc/mounts should show what it can Eric Paris  Re: [refpolicy patch, second try] samba policy updates Chris PeBenito  [refpolicy] Patch: Create non_security_file_type attribute (v2) James Carter  Re: Ruby bindings patch for libselinux Daniel J Walsh  Re: [refpolicy patch, second try] samba policy updates Mike Edenfield  Re: Ruby bindings patch for libselinux Stephen Smalley  Re: [refpolicy patch, second try] samba policy updates Chris PeBenito  Re: Ruby bindings patch for libselinux Daniel J Walsh  Should /dev/mem be SystemHigh? Joe Nall  Re: unconfined_t and user_home_dir_type Chris PeBenito  Re: policycoreutils packages were updated without a bump in the version number??? Stephen Smalley  Re: Mapping Linux GROUP to an SELinux user ?... Daniel J Walsh  Re: Setting login context for multiple Linux users using single semanage command... Daniel J Walsh  policycoreutils packages were updated without a bump in the version number??? Daniel J Walsh  Re: [PATCH 2/3] Thread/Child-Domain Assignment Stephen Smalley  Re: Ruby bindings patch for libselinux Stephen Smalley  Re: [PATCH 2/3] Thread/Child-Domain Assignment Scott Schmit  Re: unconfined_t and user_home_dir_type Russell Coker  Re: Adding local nodecon's through semanage Stephen Smalley  Re: [PATCH 1/3] Thread/Child-Domain Assignment Stephen Smalley  Re: unconfined_t and user_home_dir_type Stephen Smalley  unconfined_t and user_home_dir_type Russell Coker  Re: [PATCH 2/3] Thread/Child-Domain Assignment KaiGai Kohei  Re: [PATCH 1/3] Thread/Child-Domain Assignment KaiGai Kohei  Monday, 28 July Re: Mapping Linux GROUP to an SELinux user ?... Karl MacMillan  Re: libsepol.context_from_record: MLS is disabled, but MLS context"s0" found Vikram Ambrose  Re: [patch] SELinux: trivial, unify iterator variable naming, part 3 Stephen Smalley  Re: libsepol.context_from_record: MLS is disabled, but MLS context"s0" found Vikram Ambrose  Re: [PATCH 1/3] Thread/Child-Domain Assignment Stephen Smalley  Re: libsepol.context_from_record: MLS is disabled, but MLS context"s0" found Stephen Smalley  Re: [refpolicy-patch 06/23] logrotate policy update Daniel J Walsh  Re: libsepol.context_from_record: MLS is disabled, but MLS context"s0" found Vikram Ambrose  [refpolicy patch, second try] samba policy updates Mike Edenfield  Re: [refpolicy-patch 06/23] logrotate policy update Chris PeBenito  Re: [refpolicy-patch 15/23] soundserver policy update Chris PeBenito  Sunday, 27 July Re: [PATCH 1/3] Thread/Child-Domain Assignment KaiGai Kohei  Saturday, 26 July Re: [PATCH 1/3] Thread/Child-Domain Assignment Joshua Brindle  Re: [PATCH 1/3] Thread/Child-Domain Assignment Stephen Smalley  Re: [RFC 2/2] labeled ipsec internet drafts Paul Moore  Re: [RFC 1/2] labeled ipsec internet drafts Paul Moore  Re: [patch] SELinux: trivial, unify iterator variable naming, part 3 Paul Moore  [REFPOLICY PATCH] Added policy module for the oident daemon. Dominick Grift  Re: [PATCH 1/3] Thread/Child-Domain Assignment KaiGai Kohei  Re: [PATCH 1/3] Thread/Child-Domain Assignment KaiGai Kohei  Friday, 25 July Re: [patch] SELinux: trivial, unify iterator variable naming, part 3 Stephen Smalley  RE: user_identify for httpd (warning: newbie question) Stephen Smalley  RE: libsepol.context_from_record: MLS is disabled, but MLS context"s0" found Stephen Smalley  Re: Policy loading: initramfs vs. patched /sbin/init Russell Coker  Re: libsepol.context_from_record: MLS is disabled, but MLS context"s0" found Vikram Ambrose  [RFC 2/2] labeled ipsec internet drafts Joy Latten  [RFC 1/2] labeled ipsec internet drafts Joy Latten  RE: [PATCH 1/3] Thread/Child-Domain Assignment Joshua Brindle  RE: [PATCH 1/3] Thread/Child-Domain Assignment Joshua Brindle  RE: user_identify for httpd (warning: newbie question) Joshua Brindle  RE: libsepol.context_from_record: MLS is disabled, but MLS context"s0" found Chris PeBenito  RE: libsepol.context_from_record: MLS is disabled, but MLS context"s0" found Chris PeBenito  Re: [patch] SELinux: trivial, unify iterator variable naming, part 3 James Morris  Re: [PATCH 1/3] Thread/Child-Domain Assignment Stephen Smalley  Re: Policy loading: initramfs vs. patched /sbin/init Stephen Smalley  Re: user_identify for httpd (warning: newbie question) Stephen Smalley  Re: [patch] SELinux: trivial, unify iterator variable naming, part 3 Stephen Smalley  [PATCH 4/3] Thread/Child-Domain Assignment KaiGai Kohei  Re: [patch] SELinux: trivial, unify iterator variable naming, part 3 James Morris  [PATCH 3/3] Thread/Child-Domain Assignment KaiGai Kohei  [PATCH 2/3] Thread/Child-Domain Assignment KaiGai Kohei  [PATCH 1/3] Thread/Child-Domain Assignment KaiGai Kohei  [PATCH 0/3] Thread/Child-Domain Assignment KaiGai Kohei  Re: [refpolicy-patch 19/23] netlabel policy update Chris PeBenito  Re: [refpolicy-patch 18/23] miscfiles policy update Chris PeBenito  Re: [refpolicy-patch 21/23] raid policy update Chris PeBenito  [refpolicy patch] latest try: merge irssi policy with irc module. Dominick Grift  SELinux User Guide: weekly report 2008-07-25 Murray McAllister  Re: user_identify for httpd (warning: newbie question) Murray McAllister  user_identify for httpd (warning: newbie question) Murray McAllister  Re: [PATCH] Communication between domains under labeled networks Chris PeBenito  Thursday, 24 July Re: Policy loading: initramfs vs. patched /sbin/init Russell Coker  Re: hierarchy_check_constraints() needs reworks? KaiGai Kohei  Policy loading: initramfs vs. patched /sbin/init Stephen Smalley  Re: [refpolicy-patch 14/23] rhgb policy update Daniel J Walsh  Re: [patch] SELinux: trivial, unify iterator variable naming, part 3 Stephen Smalley  Re: Mapping Linux GROUP to an SELinux user ?... Stephen Smalley  Re: hierarchy_check_constraints() needs reworks? KaiGai Kohei  Re: [refpolicy patch] mozilla replace local policy by interface calls. Chris PeBenito  Re: libsepol.context_from_record: MLS is disabled, but MLS context "s0" found Chris PeBenito  Re: [refpolicy-patch 13/23] portslave policy update Chris PeBenito  Re: [refpolicy-patch 14/23] rhgb policy update Chris PeBenito  libsepol.context_from_record: MLS is disabled, but MLS context "s0" found Vikram Ambrose  Mapping Linux GROUP to an SELinux user ?... Hasan Rezaul-CHR010  Re: [patch] SELinux: trivial, unify iterator variable naming, part 3 Vesa-Matti J Kari  RE: hierarchy_check_constraints() needs reworks? Joshua Brindle  [refpolicy patch] retry: merge irssi module with irc module. Dominick Grift  Re: [patch] SELinux: trivial, unify iterator variable naming, part 3 James Morris  Re: [patch] SELinux: trivial, remove unneeded local variable James Morris  Re: [patch] SELinux: Trivial minor fixes that change C null character style James Morris  Re: [refpolicy-patch 11/23] cpucontrol policy update Daniel J Walsh  [refpolicy patch] merge irssi module with irc module. Dominick Grift  Re: hierarchy_check_constraints() needs reworks? Stephen Smalley  [refpolicy patch] Round 2: Clean up white spaces. Dominick Grift  hierarchy_check_constraints() needs reworks? KaiGai Kohei  Wednesday, 23 July Re: [refpolicy-patch 14/23] rhgb policy update Daniel J Walsh  Re: [refpolicy patch] retry add irssi module. Chris PeBenito  Re: [refpolicy patch] services: add a duplicate delimiter. Chris PeBenito  [refpolicy patch 2/2] revisit and apply trivial modifications to fstools module. Dominick Grift  [refpolicy patch 1/2] revisit and apply trivial redhat modifications to amanda module Dominick Grift  openssh and roles Russell Coker  [refpolicy patch] add frozen-bubble-server module. Dominick Grift  Tuesday, 22 July Re: [RFC] An idea of thread/child-domain assignment KaiGai Kohei  Re: [patch] SELinux: trivial, unify iterator variable naming Paul Moore  Re: what is the point of semodule -u? Russell Coker  Re: what is the point of semodule -u? Stephen Smalley  what is the point of semodule -u? Russell Coker  [refpolicy patch] retry add irssi module. Dominick Grift  [refpolicy patch] mozilla replace local policy by interface calls. Dominick Grift  Re: [refpolicy-patch 02/23] anaconda policy update Chris PeBenito  Re: [refpolicy-patch 20/23] pcmcia policy update Chris PeBenito  Re: [refpolicy-patch 14/23] rhgb policy update Chris PeBenito  [refpolicy patch] adds irssi module. Dominick Grift  Re: [refpolicy-patch 11/23] cpucontrol policy update Chris PeBenito  Re: [patch] SELinux: trivial, unify iterator variable naming Vesa-Matti J Kari  Re: questions about persistent storage of security contexts Stephen Smalley  Re: questions about persistent storage of security contexts Andy Warner  Re: questions about persistent storage of security contexts Stephen Smalley  Re: questions about persistent storage of security contexts Andy Warner  Re: questions about persistent storage of security contexts Andy Warner  Re: questions about persistent storage of security contexts KaiGai Kohei  Re: [PATCH] Communication between domains under labeled networks KaiGai Kohei  Re: questions about persistent storage of security contexts Andrew Warner  Re: [refpolicy-patch 07/23] corenetwork policy update Daniel J Walsh  Re: [refpolicy-patch 02/23] anaconda policy update Daniel J Walsh  Monday, 21 July Re: Setting login context for multiple Linux users using single semanage command... Stephen Smalley  Re: About unifying the coding style Stephen Smalley  Re: questions about persistent storage of security contexts Stephen Smalley  Re: questions about persistent storage of security contexts KaiGai Kohei  Re: questions about persistent storage of security contexts Eric Paris  [refpolicy patch] admin: add a duplicate delimiter. Dominick Grift  questions about persistent storage of security contexts Andrew Warner  [refpolicy patch] apps: add a duplicate delimiter. Dominick Grift  [refpolicy patch] kernel: add a duplicate delimiter. Dominick Grift  [refpolicy patch] roles: add a duplicate delimiter. Dominick Grift  [refpolicy patch] system: add a duplicate delimiter. Dominick Grift  [refpolicy patch] services: add a duplicate delimiter. Dominick Grift  Setting login context for multiple Linux users using single semanage command... Hasan Rezaul-CHR010  Re: [patch] SELinux: trivial, unify iterator variable naming Paul Moore  Re: [patch] SELinux: trivial, unify iterator variable naming Vesa-Matti J Kari  RE: SELinux User Guide Joe_Wulf  Re: Patch: 1/6: selinux-policy: remove dupe delimiter. Chris PeBenito  Re: [patch] SELinux: trivial, unify iterator variable naming Paul Moore  Re: About unifying the coding style Vesa-Matti J Kari  About unifying the coding style Vesa-Matti J Kari  Re: [patch] SELinux: trivial, unify iterator variable naming Vesa-Matti J Kari  Sunday, 20 July Re: [patch] SELinux: trivial, unify iterator variable naming Paul Moore  [patch] SELinux: trivial, remove unneeded local variable Vesa-Matti J Kari  [patch] SELinux: trivial, unify iterator variable naming, part 3 Vesa-Matti J Kari  [patch] SELinux: trivial, unify iterator variable naming, part 2 Vesa-Matti J Kari  Re: SELinux User Guide max  [patch] SELinux: trivial, unify iterator variable naming Vesa-Matti J Kari  [patch] SELinux: Trivial minor fixes, pt. 2 Vesa-Matti J Kari  [patch] SELinux: Trivial minor fixes that change C null character style Vesa-Matti J Kari  Re: [patch]: ss/services.c null character style fix James Morris  Re: [patch]: ss/services.c null character style fix Eric Paris  [patch]: ss/services.c remove unneeded assignment Vesa-Matti J Kari  [patch] ss/services.c services-remove-unneeded-cast.patch Vesa-Matti J Kari  [patch]: ss/services.c null character style fix Vesa-Matti J Kari  [patch]: ss/services.c: trivial typo fix Vesa-Matti J Kari  Re: [refpolicy-patch 02/23] anaconda policy update Russell Coker  Saturday, 19 July [refpolicy-patch 17/23] logging policy update david_at_hardeman.nu  [refpolicy-patch 20/23] pcmcia policy update david_at_hardeman.nu  [refpolicy-patch 10/23] courier policy update david_at_hardeman.nu  [refpolicy-patch 11/23] cpucontrol policy update david_at_hardeman.nu  [refpolicy-patch 23/23] qemu policy update david_at_hardeman.nu  [refpolicy-patch 19/23] netlabel policy update david_at_hardeman.nu  [refpolicy-patch 06/23] logrotate policy update david_at_hardeman.nu  [refpolicy-patch 16/23] w3c policy addition david_at_hardeman.nu  [refpolicy-patch 21/23] raid policy update david_at_hardeman.nu  [refpolicy-patch 14/23] rhgb policy update david_at_hardeman.nu  [refpolicy-patch 08/23] secadm policy update david_at_hardeman.nu  [refpolicy-patch 22/23] xen policy update david_at_hardeman.nu  [refpolicy-patch 15/23] soundserver policy update david_at_hardeman.nu  [refpolicy-patch 18/23] miscfiles policy update david_at_hardeman.nu  [refpolicy-patch 13/23] portslave policy update david_at_hardeman.nu  [refpolicy-patch 12/23] openca policy update david_at_hardeman.nu  [refpolicy-patch 05/23] kudzu policy update david_at_hardeman.nu  [refpolicy-patch 07/23] corenetwork policy update david_at_hardeman.nu  [refpolicy-patch 03/23] unconfined_u policy updates david_at_hardeman.nu  [refpolicy-patch 02/23] anaconda policy update david_at_hardeman.nu  [refpolicy-patch 09/23] apm policy update david_at_hardeman.nu  [refpolicy-patch 00/23] Cherry-picks from Fedora SELinux patch david_at_hardeman.nu  [refpolicy-patch 01/23] slocate policy update david_at_hardeman.nu  [refpolicy-patch 04/23] kismet policy update david_at_hardeman.nu  Patch: 6/6: selinux-policy: remove dupe delimiter. Dominick Grift  Patch: 5/6: selinux-policy: remove dupe delimiter. Dominick Grift  Patch: 4/6: selinux-policy: remove dupe delimiter. Dominick Grift  Patch: 3/6: selinux-policy: remove dupe delimiter. Dominick Grift  Patch: 2/6: selinux-policy: remove dupe delimiter. Dominick Grift  Patch: 1/6: selinux-policy: remove dupe delimiter. Dominick Grift  Re: SELinux User Guide: weekly report 20080708 Murray McAllister  SELinux User Guide: weekly report 20080708 Murray McAllister  Re: SELinux User Guide James Morris  Friday, 18 July RE: [rfc][patch] setfiles: validate all file_contextsfileswhenusing -c Stephen Smalley  RE: [rfc][patch] setfiles: validate all file_contextsfileswhenusing -c Joshua Brindle  RE: [rfc][patch] setfiles: validate all file_contexts fileswhenusing -c Stephen Smalley  RE: [rfc][patch] setfiles: validate all file_contexts fileswhenusing -c Joshua Brindle  [patch v2] libselinux: handle duplicate file context entries as a fatal error Stephen Smalley  Re: refpolicy patch: samba enhancements Daniel J Walsh  Re: [patch] libselinux: handle conflicting file contexts as a fatal error Daniel J Walsh  [patch] libselinux: handle conflicting file contexts as a fatal error Stephen Smalley  Re: refpolicy patch: samba enhancements Daniel J Walsh  Re: Patch to make libselinux shut up when SELinux is disabled. Daniel J Walsh  RE: [rfc][patch] setfiles: validate all file_contexts files whenusing -c Stephen Smalley  RE: [rfc][patch] setfiles: validate all file_contexts files whenusing -c Joshua Brindle  [rfc][patch] setfiles: validate all file_contexts files when using -c Stephen Smalley  Re: refpolicy patch: samba enhancements Mike Edenfield  Re: refpolicy patch: samba enhancements Mike Edenfield  Re: refpolicy patch: samba enhancements Mike Edenfield  Re: refpolicy patch: samba enhancements Christopher J. PeBenito  Re: refpolicy patch: samba enhancements Christopher J. PeBenito  Re: firefox3 Justin Mattock  Re: [refpolicy] Patch: Create non_security_file_type attribute Christopher J. PeBenito  Re: Patch to make libselinux shut up when SELinux is disabled. Stephen Smalley  Re: [refpolicy] Patch: Create non_security_file_type attribute Daniel J Walsh  Re: firefox3 Daniel J Walsh  Re: refpolicy patch: samba enhancements Daniel J Walsh  Re: Patch to make libselinux shut up when SELinux is disabled. Daniel J Walsh  Re: Critical bug in semanage Daniel J Walsh  Re: [refpolicy] Patch: Create non_security_file_type attribute Stephen Smalley  Re: Critical bug in semanage Stephen Smalley  Re: refpolicy patch: samba enhancements Mike Edenfield  Re: Patch to make libselinux shut up when SELinux is disabled. Stephen Smalley  Re: [refpolicy] Patch: Create non_security_file_type attribute Daniel J Walsh  SELinux developer summit Stephen Smalley  Patch to make libselinux shut up when SELinux is disabled. Daniel J Walsh  Re: Fedora refpolicy patches Brett Lentz  Re: firefox3 Justin Mattock  Re: [refpolicy] Patch: Create non_security_file_type attribute James Carter  Re: [refpolicy] Patch: Create non_security_file_type attribute Christopher J. PeBenito  Re: [refpolicy] Patch: Create non_security_file_type attribute James Carter  Re: Critical bug in semanage Joshua Brindle  Re: refpolicy patch: samba enhancements Christopher J. PeBenito  Re: [refpolicy] Let dhcp use init fds Christopher J. PeBenito  Re: [refpolicy] Patch: Create non_security_file_type attribute Christopher J. PeBenito  Re: [refpolicy] Let dpkg scripts ptrace Christopher J. PeBenito  Re: [PATCH] Communication between domains under labeled networks Christopher J. PeBenito  Re: [PATCH] Labeled IPsec for PostgreSQL/MySQL/SSHd (Re: [PATCH] IPsec SPD default security context) Christopher J. PeBenito  Re: pam_mount Christopher J. PeBenito  Re: [PATCH -v2] SELinux: /proc/mounts should show what it can Stephen Smalley  Re: [refpolicy] Milter Mail Filters Christopher J. PeBenito  Re: Fedora refpolicy patches Christopher J. PeBenito  RE: Attaching multiple user accounts to same home directory... Stephen Smalley  Re: firefox3 Dominick Grift  SELinux User Guide Justin Mattock  SELinux User Guide Murray McAllister  Re: [RFC] An idea of thread/child-domain assignment KaiGai Kohei  Thursday, 17 July Re: OpenMoko/JFFS2 sestatus difficulties Mohamed Hassan  firefox3 Justin Mattock  Patch: selinux-policy: concept: let users relabel their user_home_t files to user_tmp_t and vice versa. Dominick Grift  RE: Attaching multiple user accounts to same home directory... Hasan Rezaul-CHR010  Re: Attaching multiple user accounts to same home directory... Daniel J Walsh  Re: Attaching multiple user accounts to same home directory... Daniel J Walsh  RE: Attaching multiple user accounts to same home directory... Hasan Rezaul-CHR010  Re: Attaching multiple user accounts to same home directory... Daniel J Walsh  Critical bug in semanage Daniel J Walsh  Patch: selinux-policy: style: lo under li before m. Dominick Grift  Re: Fedora refpolicy patches Christopher J. PeBenito  Attaching multiple user accounts to same home directory... Hasan Rezaul-CHR010  Re: Patch: selinux-policy: inconsistency: logging_send_syslog_msg is not optional policy. Dominick Grift  Re: Proposed patch for policycoreutils/sestatus Vesa-Matti J Kari  Re: Patch: selinux-policy: inconsistency: logging_send_syslog_msg is not optional policy. Daniel J Walsh  Patch: selinux-policy: inconsistency: logging_send_syslog_msg is not optional policy. Dominick Grift  Re: [PATCH -v2] SELinux: /proc/mounts should show what it can James Morris  Re: Proposed patch for policycoreutils/sestatus Joshua Brindle  Wednesday, 16 July [PATCH] SELinux: /proc/mounts shoudl show what it can Eric Paris  [PATCH -v2] SELinux: /proc/mounts should show what it can Eric Paris  Re: Fedora refpolicy patches Eric Paris  Re: Fedora refpolicy patches David Härdeman  Re: Fedora refpolicy patches Mike Edenfield  Re: Fedora refpolicy patches Brett Lentz  Re: Fedora refpolicy patches Daniel J Walsh  Re: Fedora refpolicy patches David Härdeman  Re: Fedora refpolicy patches Daniel J Walsh  Re: OpenMoko/JFFS2 sestatus difficulties Justin Mattock  Re: Fedora refpolicy patches