An open API service for providing issue and pull request metadata for open source projects.

GitHub / selinuxproject/refpolicy issues and pull requests

#913 - filesystem: support bcachefs

Pull Request - State: open - Opened by benstonezhang about 2 months ago

#912 - unconfined: allow firewalld_t unconfined_t:dbus send_msg

Pull Request - State: open - Opened by 21sw-clayton about 2 months ago

#911 - Fix boot issues with dracut-generated initramfs

Pull Request - State: closed - Opened by gtrentalancia 2 months ago - 2 comments

#910 - sshd: label sshd-auth as sshd_exec_t

Pull Request - State: open - Opened by PPN-SD 2 months ago - 2 comments

#908 - fix building when dbus module is not enabled

Pull Request - State: open - Opened by dsugar100 2 months ago

#907 - xserver: usability fixes for the Qt library

Pull Request - State: open - Opened by gtrentalancia 2 months ago

#906 - dbus is now mandatory for selinuxutil.te and it shouldn't be.

Issue - State: open - Opened by aduskett 2 months ago - 2 comments

#905 - Distro addition inquiry - Yocto

Issue - State: open - Opened by 21sw-clayton 2 months ago - 3 comments

#904 - [Q] spaces in file_contexts

Issue - State: closed - Opened by xCEVre 2 months ago - 1 comment

#903 - apache: tag nginx httpd_runtime files

Pull Request - State: open - Opened by aerusso 3 months ago - 4 comments

#902 - Rework shadow transitions and access

Pull Request - State: open - Opened by aerusso 3 months ago - 3 comments

#901 - files: add files_delete_var_chr_files interface

Pull Request - State: closed - Opened by 21sw-clayton 3 months ago

#900 - [Question] How to use the association class

Issue - State: closed - Opened by xCEVre 3 months ago - 1 comment

#899 - Complete list of all SELinux rules

Issue - State: closed - Opened by smijolovic 3 months ago - 2 comments

#898 - Fix the apps/screen module

Pull Request - State: closed - Opened by gtrentalancia 3 months ago

#897 - NNP transition interface for chronyc

Pull Request - State: closed - Opened by dsugar100 3 months ago

#896 - systemd: allow systemd_generator_t use user ttys

Pull Request - State: closed - Opened by 21sw-clayton 3 months ago - 1 comment

#895 - Modules load modprobe

Pull Request - State: closed - Opened by dsugar100 3 months ago

#894 - NNP transition interface for dmesg

Pull Request - State: closed - Opened by dsugar100 3 months ago

#893 - Label snmp unit files

Pull Request - State: closed - Opened by dsugar100 3 months ago

#892 - systemd: Add log env to systemd-machine-id-setup.

Pull Request - State: closed - Opened by pebenito 3 months ago

#891 - oddjob: allow oddjob_mkhomedir_t user_terminals

Pull Request - State: closed - Opened by 21sw-clayton 3 months ago

#890 - systemd: allow reading /dev/cpu/0/msr

Pull Request - State: closed - Opened by dgdegraaf 4 months ago - 1 comment

#889 - Denials for systemd-machine-id-setup

Issue - State: closed - Opened by pasweistorz 4 months ago - 1 comment

#888 - Module for ipmitool

Pull Request - State: closed - Opened by dsugar100 4 months ago

#887 - Questions about some denials from initramfs and systemd

Issue - State: closed - Opened by pasweistorz 4 months ago - 3 comments

#886 - oddjob: allow oddjob_mkhomedir_t privfd:fd use

Pull Request - State: closed - Opened by 21sw-clayton 4 months ago

#885 - locallogin: allow sulogin_t user_tty_device_t rw

Pull Request - State: closed - Opened by 21sw-clayton 4 months ago

#883 - networkmanager: Watch systemd directories for nm-session-monitor.

Pull Request - State: closed - Opened by pebenito 4 months ago

#882 - ssh: fix typo in port forwarding tunable

Pull Request - State: closed - Opened by aerusso 4 months ago - 3 comments

#881 - Denials with networkmanager and systemd

Issue - State: closed - Opened by pasweistorz 4 months ago - 2 comments

#880 - Allow to specify module version

Pull Request - State: closed - Opened by McCzarny 4 months ago

#879 - Fix mislabeling of /etc/shadow

Pull Request - State: closed - Opened by dsugar100 4 months ago

#878 - locallogin: allow sulogin_t unconfined domtrans

Pull Request - State: closed - Opened by 21sw-clayton 4 months ago

#877 - Allow to specify module version in devel Makefile

Issue - State: closed - Opened by McCzarny 4 months ago - 4 comments

#876 - locallogin: dontaudit sulogin_t checkpoint_restore

Pull Request - State: closed - Opened by 21sw-clayton 4 months ago

#875 - use init_use_script_ptys for knotc in initscript

Pull Request - State: closed - Opened by PPN-SD 4 months ago - 3 comments

#874 - files, init: filetrans /run/machine-id etc_runtime_t

Pull Request - State: closed - Opened by 21sw-clayton 4 months ago

#873 - lldpad: Configure FW-LLDP on i40e NICs.

Pull Request - State: closed - Opened by pebenito 4 months ago

#872 - `systemd-nsresourced` errors

Issue - State: closed - Opened by hdonnay 4 months ago - 2 comments

#871 - Wayland and SELinux

Issue - State: closed - Opened by aerusso 5 months ago - 1 comment

#870 - firewalld: fix firewalld_t firewalld_tmpfs_t execute

Pull Request - State: closed - Opened by 21sw-clayton 5 months ago

#869 - firewalld: fix lib_t Python cache denial auditing

Pull Request - State: closed - Opened by 21sw-clayton 5 months ago

#868 - unconfined: fix oddjob security_compute_sid

Pull Request - State: closed - Opened by 21sw-clayton 5 months ago

#867 - Add setcap to knotd / add knotc_initrc_domtrans

Pull Request - State: closed - Opened by PPN-SD 5 months ago - 1 comment

#866 - chronyd: fix dac_read_search denials

Pull Request - State: closed - Opened by 21sw-clayton 5 months ago - 1 comment

#865 - Permit init_t (systemd) to start a detached screen/tmux session

Pull Request - State: closed - Opened by jcpunk 5 months ago - 4 comments

#864 - Add/update labeling for veritysetup and efibootmgr.

Pull Request - State: closed - Opened by pebenito 5 months ago

#861 - systemd: allow system --user to get attributes of nsfs inodes

Pull Request - State: closed - Opened by yizhao1 5 months ago

#860 - Systemd offline updates magic symlink

Pull Request - State: closed - Opened by sgtsnookums 5 months ago - 1 comment

#859 - Allow fapolicyd to watch /run/netns

Pull Request - State: closed - Opened by dsugar100 6 months ago - 3 comments

#858 - [Question][CIL][peer] How to properly mark peers?

Issue - State: closed - Opened by xCEVre 6 months ago - 1 comment

#857 - systemd fixes

Pull Request - State: closed - Opened by yizhao1 6 months ago

#855 - fixdep dbus

Pull Request - State: closed - Opened by PPN-SD 6 months ago

#854 - Add missing policies under different admin roles

Pull Request - State: closed - Opened by uudiin 6 months ago

#853 - Add the necessary policies to run the tpm2 tools

Pull Request - State: closed - Opened by uudiin 6 months ago

#852 - userdomain: allow grant mac_admin capability to security admin

Pull Request - State: closed - Opened by uudiin 6 months ago

#851 - Misc fixes

Pull Request - State: closed - Opened by WavyEbuilder 7 months ago

#850 - This is a policy for the ARC milter

Pull Request - State: closed - Opened by lquidfire 7 months ago - 5 comments

#849 - Release 8.0.1

Pull Request - State: closed - Opened by al1img 7 months ago

#848 - secadm: remove duplicate policies

Pull Request - State: closed - Opened by uudiin 7 months ago - 2 comments

#847 - authlogin: fix regex for /etc/tcb

Pull Request - State: closed - Opened by besser82 7 months ago

#845 - label jspawnhelper bin_t

Pull Request - State: closed - Opened by dsugar100 7 months ago

#843 - Firefox AVC when enabling non-permissive mode (Arch)

Issue - State: closed - Opened by spease 7 months ago - 7 comments

#842 - systemd: various changes

Pull Request - State: closed - Opened by WavyEbuilder 7 months ago - 2 comments

#841 - authlogin: connect to nsresourced

Pull Request - State: closed - Opened by WavyEbuilder 8 months ago - 2 comments

#840 - systemd v257 tweaks

Pull Request - State: closed - Opened by cgzones 8 months ago

#839 - systemd-homed: various fixups

Pull Request - State: closed - Opened by WavyEbuilder 8 months ago

#838 - Add support for open-vm-tools

Pull Request - State: closed - Opened by dsugar100 8 months ago - 2 comments

#837 - DAC bypass after split security task to secadm user

Issue - State: open - Opened by uudiin 8 months ago - 4 comments

#836 - Communicate with locale via dbus

Pull Request - State: closed - Opened by dsugar100 8 months ago

#834 - mozilla adds .mozilla directory to /etc/skel which useradd tries to copy

Pull Request - State: closed - Opened by dsugar100 8 months ago - 6 comments

#832 - ci: add module storage test

Pull Request - State: open - Opened by cgzones 9 months ago - 1 comment

#831 - Setup sudo log file type

Pull Request - State: closed - Opened by dsugar100 9 months ago

#830 - Misc update no2

Pull Request - State: closed - Opened by cgzones 9 months ago

#829 - Policy fails to build due to unconfined role move

Issue - State: closed - Opened by cgzones 9 months ago - 8 comments

#828 - Misc updates

Pull Request - State: closed - Opened by cgzones 9 months ago

#827 - Update mcs.if to instruct caller to "use" mcs_constrained and not "remove"

Pull Request - State: closed - Opened by JaysonHurst 9 months ago - 2 comments

#826 - init: Move common rules out of daemon/system interfaces.

Pull Request - State: closed - Opened by pebenito 9 months ago

#825 - systemd: Fix systemd_write_notify_socket().

Pull Request - State: closed - Opened by pebenito 9 months ago - 1 comment

#824 - Revert "systemd: Fix systemd_write_notify_socket()."

Pull Request - State: closed - Opened by pebenito 9 months ago

#823 - files context : few fixes for merged-usr distro_gentoo

Pull Request - State: closed - Opened by PPN-SD 9 months ago - 4 comments

#822 - systemd: Fix systemd_write_notify_socket().

Pull Request - State: closed - Opened by pebenito 9 months ago

#821 - cron: Remove too greedy file context grab

Pull Request - State: closed - Opened by hbakken 9 months ago

#820 - Changes to support python 3.9 (RHEL9)

Pull Request - State: closed - Opened by dsugar100 10 months ago - 4 comments

#819 - Error in validate-appconfig.py

Issue - State: closed - Opened by dsugar100 10 months ago - 3 comments

#818 - add netlink_xperm policy capability and nlmsg permission definitions

Pull Request - State: closed - Opened by stephensmalley 10 months ago - 1 comment

#817 - devices: add more video4linux related devices as v4l_device_t

Pull Request - State: closed - Opened by egtvedt 10 months ago

#816 - validate-appconfig.py: Add further validations.

Pull Request - State: closed - Opened by pebenito 10 months ago - 1 comment

#815 - Add tool for validating contexts in appconfig files.

Pull Request - State: closed - Opened by pebenito 10 months ago

#814 - Modifications to allow minimal initrd policy only

Issue - State: closed - Opened by iam-TJ 10 months ago - 1 comment