GitHub / selinuxproject/refpolicy issues and pull requests
#913 - filesystem: support bcachefs
Pull Request -
State: open - Opened by benstonezhang about 2 months ago
#912 - unconfined: allow firewalld_t unconfined_t:dbus send_msg
Pull Request -
State: open - Opened by 21sw-clayton about 2 months ago
#911 - Fix boot issues with dracut-generated initramfs
Pull Request -
State: closed - Opened by gtrentalancia 2 months ago
- 2 comments
#910 - sshd: label sshd-auth as sshd_exec_t
Pull Request -
State: open - Opened by PPN-SD 2 months ago
- 2 comments
#909 - Update file context definitions and capabilities for the screen module
Pull Request -
State: open - Opened by gtrentalancia 2 months ago
#908 - fix building when dbus module is not enabled
Pull Request -
State: open - Opened by dsugar100 2 months ago
#907 - xserver: usability fixes for the Qt library
Pull Request -
State: open - Opened by gtrentalancia 2 months ago
#906 - dbus is now mandatory for selinuxutil.te and it shouldn't be.
Issue -
State: open - Opened by aduskett 2 months ago
- 2 comments
#905 - Distro addition inquiry - Yocto
Issue -
State: open - Opened by 21sw-clayton 2 months ago
- 3 comments
#904 - [Q] spaces in file_contexts
Issue -
State: closed - Opened by xCEVre 2 months ago
- 1 comment
#903 - apache: tag nginx httpd_runtime files
Pull Request -
State: open - Opened by aerusso 3 months ago
- 4 comments
#902 - Rework shadow transitions and access
Pull Request -
State: open - Opened by aerusso 3 months ago
- 3 comments
#901 - files: add files_delete_var_chr_files interface
Pull Request -
State: closed - Opened by 21sw-clayton 3 months ago
#900 - [Question] How to use the association class
Issue -
State: closed - Opened by xCEVre 3 months ago
- 1 comment
#899 - Complete list of all SELinux rules
Issue -
State: closed - Opened by smijolovic 3 months ago
- 2 comments
#898 - Fix the apps/screen module
Pull Request -
State: closed - Opened by gtrentalancia 3 months ago
#897 - NNP transition interface for chronyc
Pull Request -
State: closed - Opened by dsugar100 3 months ago
#896 - systemd: allow systemd_generator_t use user ttys
Pull Request -
State: closed - Opened by 21sw-clayton 3 months ago
- 1 comment
#895 - Modules load modprobe
Pull Request -
State: closed - Opened by dsugar100 3 months ago
#894 - NNP transition interface for dmesg
Pull Request -
State: closed - Opened by dsugar100 3 months ago
#893 - Label snmp unit files
Pull Request -
State: closed - Opened by dsugar100 3 months ago
#892 - systemd: Add log env to systemd-machine-id-setup.
Pull Request -
State: closed - Opened by pebenito 3 months ago
#891 - oddjob: allow oddjob_mkhomedir_t user_terminals
Pull Request -
State: closed - Opened by 21sw-clayton 3 months ago
#890 - systemd: allow reading /dev/cpu/0/msr
Pull Request -
State: closed - Opened by dgdegraaf 4 months ago
- 1 comment
#889 - Denials for systemd-machine-id-setup
Issue -
State: closed - Opened by pasweistorz 4 months ago
- 1 comment
#888 - Module for ipmitool
Pull Request -
State: closed - Opened by dsugar100 4 months ago
#887 - Questions about some denials from initramfs and systemd
Issue -
State: closed - Opened by pasweistorz 4 months ago
- 3 comments
#886 - oddjob: allow oddjob_mkhomedir_t privfd:fd use
Pull Request -
State: closed - Opened by 21sw-clayton 4 months ago
#885 - locallogin: allow sulogin_t user_tty_device_t rw
Pull Request -
State: closed - Opened by 21sw-clayton 4 months ago
#884 - systemd: allow systemd-hostnamed and systemd-rfkill to get attributes…
Pull Request -
State: closed - Opened by yizhao1 4 months ago
#883 - networkmanager: Watch systemd directories for nm-session-monitor.
Pull Request -
State: closed - Opened by pebenito 4 months ago
#882 - ssh: fix typo in port forwarding tunable
Pull Request -
State: closed - Opened by aerusso 4 months ago
- 3 comments
#881 - Denials with networkmanager and systemd
Issue -
State: closed - Opened by pasweistorz 4 months ago
- 2 comments
#880 - Allow to specify module version
Pull Request -
State: closed - Opened by McCzarny 4 months ago
#879 - Fix mislabeling of /etc/shadow
Pull Request -
State: closed - Opened by dsugar100 4 months ago
#878 - locallogin: allow sulogin_t unconfined domtrans
Pull Request -
State: closed - Opened by 21sw-clayton 4 months ago
#877 - Allow to specify module version in devel Makefile
Issue -
State: closed - Opened by McCzarny 4 months ago
- 4 comments
#876 - locallogin: dontaudit sulogin_t checkpoint_restore
Pull Request -
State: closed - Opened by 21sw-clayton 4 months ago
#875 - use init_use_script_ptys for knotc in initscript
Pull Request -
State: closed - Opened by PPN-SD 4 months ago
- 3 comments
#874 - files, init: filetrans /run/machine-id etc_runtime_t
Pull Request -
State: closed - Opened by 21sw-clayton 4 months ago
#873 - lldpad: Configure FW-LLDP on i40e NICs.
Pull Request -
State: closed - Opened by pebenito 4 months ago
#872 - `systemd-nsresourced` errors
Issue -
State: closed - Opened by hdonnay 4 months ago
- 2 comments
#871 - Wayland and SELinux
Issue -
State: closed - Opened by aerusso 5 months ago
- 1 comment
#870 - firewalld: fix firewalld_t firewalld_tmpfs_t execute
Pull Request -
State: closed - Opened by 21sw-clayton 5 months ago
#869 - firewalld: fix lib_t Python cache denial auditing
Pull Request -
State: closed - Opened by 21sw-clayton 5 months ago
#868 - unconfined: fix oddjob security_compute_sid
Pull Request -
State: closed - Opened by 21sw-clayton 5 months ago
#867 - Add setcap to knotd / add knotc_initrc_domtrans
Pull Request -
State: closed - Opened by PPN-SD 5 months ago
- 1 comment
#866 - chronyd: fix dac_read_search denials
Pull Request -
State: closed - Opened by 21sw-clayton 5 months ago
- 1 comment
#865 - Permit init_t (systemd) to start a detached screen/tmux session
Pull Request -
State: closed - Opened by jcpunk 5 months ago
- 4 comments
#864 - Add/update labeling for veritysetup and efibootmgr.
Pull Request -
State: closed - Opened by pebenito 5 months ago
#863 - Don't build the fc subs dist install path in the builtappfiles target
Pull Request -
State: closed - Opened by dburgener 5 months ago
#862 - Build error in RELEASE_2_20250213 w/ default target
Issue -
State: closed - Opened by hendrikdonner 5 months ago
#861 - systemd: allow system --user to get attributes of nsfs inodes
Pull Request -
State: closed - Opened by yizhao1 5 months ago
#860 - Systemd offline updates magic symlink
Pull Request -
State: closed - Opened by sgtsnookums 5 months ago
- 1 comment
#859 - Allow fapolicyd to watch /run/netns
Pull Request -
State: closed - Opened by dsugar100 6 months ago
- 3 comments
#858 - [Question][CIL][peer] How to properly mark peers?
Issue -
State: closed - Opened by xCEVre 6 months ago
- 1 comment
#857 - systemd fixes
Pull Request -
State: closed - Opened by yizhao1 6 months ago
#856 - TigerVNC for Yocto-Based Linux with SELinux: PAM and SELinux Context Errors
Issue -
State: closed - Opened by EIC-JayGanatra 6 months ago
- 2 comments
#855 - fixdep dbus
Pull Request -
State: closed - Opened by PPN-SD 6 months ago
#854 - Add missing policies under different admin roles
Pull Request -
State: closed - Opened by uudiin 6 months ago
#853 - Add the necessary policies to run the tpm2 tools
Pull Request -
State: closed - Opened by uudiin 6 months ago
#852 - userdomain: allow grant mac_admin capability to security admin
Pull Request -
State: closed - Opened by uudiin 6 months ago
#851 - Misc fixes
Pull Request -
State: closed - Opened by WavyEbuilder 7 months ago
#850 - This is a policy for the ARC milter
Pull Request -
State: closed - Opened by lquidfire 7 months ago
- 5 comments
#849 - Release 8.0.1
Pull Request -
State: closed - Opened by al1img 7 months ago
#848 - secadm: remove duplicate policies
Pull Request -
State: closed - Opened by uudiin 7 months ago
- 2 comments
#847 - authlogin: fix regex for /etc/tcb
Pull Request -
State: closed - Opened by besser82 7 months ago
#846 - SELINUX_ERR op=security_compute_sid invalid_context="system_u:system_r:sysadm_sudo_t"
Issue -
State: closed - Opened by huzai9527 7 months ago
- 5 comments
#845 - label jspawnhelper bin_t
Pull Request -
State: closed - Opened by dsugar100 7 months ago
#844 - If mta module is not installed useradd fails to create mailbox files
Pull Request -
State: closed - Opened by dsugar100 7 months ago
#843 - Firefox AVC when enabling non-permissive mode (Arch)
Issue -
State: closed - Opened by spease 7 months ago
- 7 comments
#842 - systemd: various changes
Pull Request -
State: closed - Opened by WavyEbuilder 7 months ago
- 2 comments
#841 - authlogin: connect to nsresourced
Pull Request -
State: closed - Opened by WavyEbuilder 8 months ago
- 2 comments
#840 - systemd v257 tweaks
Pull Request -
State: closed - Opened by cgzones 8 months ago
#839 - systemd-homed: various fixups
Pull Request -
State: closed - Opened by WavyEbuilder 8 months ago
#838 - Add support for open-vm-tools
Pull Request -
State: closed - Opened by dsugar100 8 months ago
- 2 comments
#837 - DAC bypass after split security task to secadm user
Issue -
State: open - Opened by uudiin 8 months ago
- 4 comments
#836 - Communicate with locale via dbus
Pull Request -
State: closed - Opened by dsugar100 8 months ago
#835 - Need search perms on cert_t/tls_privkey_t when using private types
Pull Request -
State: closed - Opened by dsugar100 8 months ago
#834 - mozilla adds .mozilla directory to /etc/skel which useradd tries to copy
Pull Request -
State: closed - Opened by dsugar100 8 months ago
- 6 comments
#833 - CI: Add a semodule load test to verify modules insert to store.
Pull Request -
State: open - Opened by pebenito 8 months ago
#832 - ci: add module storage test
Pull Request -
State: open - Opened by cgzones 9 months ago
- 1 comment
#831 - Setup sudo log file type
Pull Request -
State: closed - Opened by dsugar100 9 months ago
#830 - Misc update no2
Pull Request -
State: closed - Opened by cgzones 9 months ago
#829 - Policy fails to build due to unconfined role move
Issue -
State: closed - Opened by cgzones 9 months ago
- 8 comments
#828 - Misc updates
Pull Request -
State: closed - Opened by cgzones 9 months ago
#827 - Update mcs.if to instruct caller to "use" mcs_constrained and not "remove"
Pull Request -
State: closed - Opened by JaysonHurst 9 months ago
- 2 comments
#826 - init: Move common rules out of daemon/system interfaces.
Pull Request -
State: closed - Opened by pebenito 9 months ago
#825 - systemd: Fix systemd_write_notify_socket().
Pull Request -
State: closed - Opened by pebenito 9 months ago
- 1 comment
#824 - Revert "systemd: Fix systemd_write_notify_socket()."
Pull Request -
State: closed - Opened by pebenito 9 months ago
#823 - files context : few fixes for merged-usr distro_gentoo
Pull Request -
State: closed - Opened by PPN-SD 9 months ago
- 4 comments
#822 - systemd: Fix systemd_write_notify_socket().
Pull Request -
State: closed - Opened by pebenito 9 months ago
#821 - cron: Remove too greedy file context grab
Pull Request -
State: closed - Opened by hbakken 9 months ago
#820 - Changes to support python 3.9 (RHEL9)
Pull Request -
State: closed - Opened by dsugar100 10 months ago
- 4 comments
#819 - Error in validate-appconfig.py
Issue -
State: closed - Opened by dsugar100 10 months ago
- 3 comments
#818 - add netlink_xperm policy capability and nlmsg permission definitions
Pull Request -
State: closed - Opened by stephensmalley 10 months ago
- 1 comment
#817 - devices: add more video4linux related devices as v4l_device_t
Pull Request -
State: closed - Opened by egtvedt 10 months ago
#816 - validate-appconfig.py: Add further validations.
Pull Request -
State: closed - Opened by pebenito 10 months ago
- 1 comment
#815 - Add tool for validating contexts in appconfig files.
Pull Request -
State: closed - Opened by pebenito 10 months ago
#814 - Modifications to allow minimal initrd policy only
Issue -
State: closed - Opened by iam-TJ 10 months ago
- 1 comment