Projects

SELinux

I started serving as the Linux Kernel's SELinux maintainer in the fall of 2013.

Audit

I started serving as the Linux Kernel's audit maintainer in the fall of 2014.

Labeled Networking

In the summer of 2007, shortly after NetLabel was accepted into the mainline Linux Kernel, I was asked to serve as the Linux Kernel's labeled networking maintainer, responsible for NetLabel, labeled IPsec, and Secmark.

Syscall Filtering

I created the libseccomp project in the summer of 2012 to help make the newly created seccomp BPF filtering functionality easier to use.