From patchwork Thu May 25 18:40:36 2017 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Stephen Smalley X-Patchwork-Id: 9748903 Return-Path: Received: from mail.wl.linuxfoundation.org (pdx-wl-mail.web.codeaurora.org [172.30.200.125]) by pdx-korg-patchwork.web.codeaurora.org (Postfix) with ESMTP id C9020601E9 for ; Thu, 25 May 2017 18:37:15 +0000 (UTC) Received: from mail.wl.linuxfoundation.org (localhost [127.0.0.1]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id C0BA327D0E for ; Thu, 25 May 2017 18:37:15 +0000 (UTC) Received: by mail.wl.linuxfoundation.org (Postfix, from userid 486) id B596728380; Thu, 25 May 2017 18:37:15 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on pdx-wl-mail.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-4.2 required=2.0 tests=BAYES_00, RCVD_IN_DNSWL_MED autolearn=ham version=3.3.1 Received: from emsm-gh1-uea11.nsa.gov (smtp.nsa.gov [8.44.101.9]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.wl.linuxfoundation.org (Postfix) with ESMTPS id A01B727D0E for ; Thu, 25 May 2017 18:37:14 +0000 (UTC) X-IronPort-AV: E=Sophos;i="5.38,393,1491264000"; d="scan'208";a="6121607" IronPort-PHdr: =?us-ascii?q?9a23=3AuQIfEhPJPXN/VVb7pZ8l6mtUPXoX/o7sNwtQ0KIM?= =?us-ascii?q?zox0LPzyo8bcNUDSrc9gkEXOFd2CrakV1KyN7+u8AiQp2tWoiDg6aptCVhsI24?= =?us-ascii?q?09vjcLJ4q7M3D9N+PgdCcgHc5PBxdP9nC/NlVJSo6lPwWB6nK94iQPFRrhKAF7?= =?us-ascii?q?Ovr6GpLIj8Swyuu+54Dfbx9GiTe5Y75+Nhu7oAreusQZj4ZpN7o8xAbOrnZUYe?= =?us-ascii?q?pd2HlmJUiUnxby58ew+IBs/iFNsP8/9MBOTLv3cb0gQbNXEDopPWY15Nb2tRbY?= =?us-ascii?q?VguA+mEcUmQNnRVWBQXO8Qz3UY3wsiv+sep9xTWaMMjrRr06RTiu86FmQwLmhy?= =?us-ascii?q?cdMz4y7X/ZhMp+gqlGpB6tvgJzz5LRbIyTKfFwfL7SfckCSGRBQMhfSiJPDIC7?= =?us-ascii?q?YYsXDecNIOhVoJfmp1YVsReyGROhCP/1xzNUmnP727Ax3eQ7EQHB2QwtB88AsG?= =?us-ascii?q?jKo9XtNKcdT+a1x7TVwzXGdfxW3TP955bIcxs8pvyMRq9/cdHKxEkzFwLKklWQ?= =?us-ascii?q?qYv/MzOTzeQCqXKX7+VnVeKxkmMqrRx6rDu3xso0l4XEiY0YxkrE+Clk2oo5O9?= =?us-ascii?q?K1RFBhbdK5FpZbqjuUOJFsQsw4RmFloCM6yrobtpGlZCUK05EnxwLHa/yAboiI?= =?us-ascii?q?/grvVOaPLjd8g3JoYK6/iAyo8Uih1+38TdO40EpKryVZktnMsWoB1xrP5cicVv?= =?us-ascii?q?Rx5EKh2TeL1wzL6+FEJ147lbbDJpI8zbM9mYAfvETeEiPshkn7g7Gael859uSw?= =?us-ascii?q?7uToeLTmppuSN49ujQH+N7wjmtehDuQ8MwgOWXWb+Oul2LL4+k35XbNKgeEona?= =?us-ascii?q?nCq53aOcQaqbK5Aw9SyIoj7Q2/AC283NQXmnkHMkpJeAibgIjxJ1HOPPf4AO+9?= =?us-ascii?q?g1Srljdk3ezGPr37DZXLNXXDkrDhfbB460FG0woz0c5Q54hPCr0bJ/LzQEDxvs?= =?us-ascii?q?TCDhAlKwy03/rnCNJl24McW2KAGLOWMKDJsV+P4OIvIveMaZQbuDb5Nvgk6OXh?= =?us-ascii?q?jWI/mV8BYKmlx5wXaGq3Hv5+OUWWfWLsgssdEWcNpgc/Qu3qiFmHUTFNfXa/RK?= =?us-ascii?q?w86S8mB4KhF4fMXJitgKaG3Ce5AJJZenxGBkqLEXfyeIWOQ+0MZz6KIs99jjwE?= =?us-ascii?q?UqCsRJI92hGrsw/6zaZnIvfP9y0Gq53jztl15uzUlRE07zB0CdqS032VRWFugm?= =?us-ascii?q?wIXyM23Lx4oUFl11iDzbJ3g+ZDGNNP4PNJVxs1OoTHz+xmEdzyXBzOfsuRQla8?= =?us-ascii?q?XtqmGS0xTs42w9IWY0d8GtKijhbY0iqvB78Zjr2LBJou/qLaxXfxPcV9y3fY1K?= =?us-ascii?q?Y/lVUmRNVANXG+jK5l6wfTH5LJk1mel6uybqsTxynB9GOCzWqVoEFYSxR8Ub7b?= =?us-ascii?q?Un8DfEfWtsr25kfDT7+oFLQmPRBMxtKCK6tQd93plk9KRfn5N9TCeGKxnGGwCQ?= =?us-ascii?q?yPxrOWY4rgY38d0znFCEgYjwAT+m6LOhYmBii7uWLeDSduGEn3Y0z26+l+qWi7?= =?us-ascii?q?Tlcwzw6Qc0JuyaC5+hkPhfyTU/kTxK4LuD89qzVoG1awx9zWC8CaqApnYKpcYM?= =?us-ascii?q?g97UxC1WLBtgxxJ4egLq55hlIEdAR3pUzu3Q1tCopcicgqsG8qzA1qJKKbylxB?= =?us-ascii?q?dDSY3Y3rN73UMGby/xeva7PM1lHZytaW9b8F6O4kpFX7oAGpCk0i/m193NZIyX?= =?us-ascii?q?uc54vFDBAJXJ3rTkk38gJ2p7bAYiky/4nUz2FjMbGosj/e3NIkHPAlyhi6f9dY?= =?us-ascii?q?K6OECBT/E9YcB8ipJu0qnkKmbhQeMOBU6qE0I9usd+Ga166zIOZggDWmgHxJ4Y?= =?us-ascii?q?9n1kKM6zRzSvTT35se3fGXwBGHWCzhjFekqMz3nppEZT4KFGql1SfkHJJRZrF1?= =?us-ascii?q?fYsTFWehPtC4xtRkiJ7pQHNX6FmjB1Ya18CzYhqSc0bx3QtO2kQLuXangze3zy?= =?us-ascii?q?RokzE1qaqSxCrOw+XmdBoDJGFLX3Jvgk3yLoiuiNAWRk+obxImlBG9/0b127Bb?= =?us-ascii?q?pLhjL2nUWUpIYSn2IH1+Uqu3rLqOedJA6JMvsSVRX+SxelSaSr/7oxQAySPjGH?= =?us-ascii?q?FSxDchdzGlop/5hQB1iHqBLHZvq3rUYcVwxRbE5NzAXPJRxSQJRC15iTnRG1i9?= =?us-ascii?q?MMKk/c6Ml5fCtOC+Vn6uVoZJfSnt04yAqDOx5Xd2Dh2ng/CzhtrnHBAg0S/809?= =?us-ascii?q?lqUTvHrAzgbYns2aW3KvlnflR0C1/n8cZ6HZt+koQojpEKxXcanomV/WYAkWrr?= =?us-ascii?q?KdVUw7/+bH4XSTER2dLa+w/l2El/LnKOwYL0TXCdztdnZ9m9fmwawCQ94N5WCK?= =?us-ascii?q?2M9rxLgTN1okakrQLWefV9nSkSyf016HMBgOEGpgwtzj6bAr8MAUlUJyvslw6H?= =?us-ascii?q?79qmtqVYeH6vcaSs1Ep5hd2hEreCrRxHVXbnfJctAC9w4t95MF3SzH358pvkd8?= =?us-ascii?q?XIbdIPqh2UlA/Nj/BPJ5IskvoHnjZoOWPhvXwl0uI7gwZh3ZegsIiAMWVt87qz?= =?us-ascii?q?AgREOT3te8MT5jbtgL5GnsmMwoCvGotuGi0RU5vuUfKnDigSuO/6NwaVDjI8sG?= =?us-ascii?q?ybFaDEHQ+Y9UdmtW7AHI6lN3GQPnkZwsttSAObJENBnAAeRC86kYIhFgC22Mzh?= =?us-ascii?q?d1905j4L6V7+thtMzedoOgLxUmjBuQiobS00R4KHLBpM6QFC5VnaPtCC7u5pGC?= =?us-ascii?q?FY5JKhphSXKmOHfwRIEX0JWkucClDmJLau4d3A/PaEBuqiNfTBe66DqepAWPeU?= =?us-ascii?q?3pKgzpFp/y6SOcmVOHltEeE70FJZXX9lA8TZhykPSysPmiLXdcKaqg2w+ihtoc?= =?us-ascii?q?C79/TqWBni6pGTBLtXK9lv/Aq2gaibPe6KmCl5MSpY1o8LxXLQxrgfxkAdhDx1?= =?us-ascii?q?dza3F7QAqSnNTLnLl6BNExEbbjl/NMxS76IzxgNNI9LUisvp1r5kif44E1FFVU?= =?us-ascii?q?b7lcGxfcwHOG+9NFLdBEaQKLSGKzzLw8ftbqO6VbJQjf9btxmqtTacCU/jMSyJ?= =?us-ascii?q?lyP1WBC3LeFMkCabMQRGuI6jaRliF27jTNP6ah28K9J3jCM5zqMqiX/QMm4cKz?= =?us-ascii?q?d8eVtXrrKM9SNYnul/G2tZ43V4NumLhTyW7+bCKpkMr/tmGT90mPhZ4HQn0bta?= =?us-ascii?q?9jtIRPhomCvUtNFuuUiqkvWIyjpkUBtOrSxHhISVskV+Ia/Z7IVPWW7Y/BIR6m?= =?us-ascii?q?WdEw8KqMF7CtL1tKBf1MPPmbnoKDhY7dLb58QcCNbPKM6dNnouLwbpEibODAQZ?= =?us-ascii?q?VT6rKX3fh0tFnf6J932VoZ86qp73lZUTVLBUT101GekcCkh/G9wCOph3VCs+kb?= =?us-ascii?q?GHlM4I+Wa+rB7JScpAsZDITOySDuv0JTaelblLeR0IwbbiIoQSMo30wEtia1Zg?= =?us-ascii?q?kITNAUrQUshHojd9YQ8svEVN7H9+Q3Uv20LibwOh+mUTFfm1nxEojAtxev4t9D?= =?us-ascii?q?Dy7Fc0PVfFuCwwkEwtltr/mjCRbCT9LKGuUoFKEyD0rVQ+MovnQwZpag2/hU9k?= =?us-ascii?q?NTfAR71PlLZgcGdriAHSuZRRBf5cUa1EYBgVxf6Jffko10pTqjm/z09d+eTFEY?= =?us-ascii?q?dilBctcZO0qXJPxRhsbNouKKzTI6pJ1URQibiIvi+z1eAxwRUSJ0AT/2OOYCQI?= =?us-ascii?q?olAHNqE6Jyq0+exh8RaClCVYeGcSTfUquO5l9kMmNuubziLgyaNMKke/N+yHNa?= =?us-ascii?q?OWpWjBmdSOQlwuykMCj1NF8qRu0cc/b0qUUFgiw6aWFxQPM8rNNB9ab85T9HXI?= =?us-ascii?q?ZymBr//NwZVvM4W6DODoQveEtLwIjUK8AAYpA4MM49wcEZa2zkHYLNroLKUexB?= =?us-ascii?q?o3/gTrPlKFDfpSeB2VjDgHvtu/zJ5r3YhdPD0dB3tyMTmv7LbNugAqmOaDXMsx?= =?us-ascii?q?YnoCWosEMWg2V9O8my9YuHRNFza30uQEyASY6D/8vCvQBiHmb9V/fPeUeQ9sCN?= =?us-ascii?q?au9DUk7ae2jV/X8pPDJ2D1LtltptjP6eYGqJmdEPNUUaNxs0HClIlEX3aqSXLA?= =?us-ascii?q?EcapJ5jsbIkhdd/0Cmy6U1OljTI1U8fxMc2iLqiPmQHnWZxYsI+F0zA/LcW9DC?= =?us-ascii?q?0RGw9sp+Ef46JxfREDY5s+YR7vqwQ+N6y+LRyF3dWvQ2eiMyBZQ+NZzeqke7xd?= =?us-ascii?q?1zAsYfOiyHs8UpE6yPG6/lQJRJELkh7R2+6sZ4xeUCj1HXxdfR/AqDEimGhgLO?= =?us-ascii?q?kyxP4zwB3VsVUGNTCEavBpYnRev94gHVOSPWl2Cm0gSlCHk4XD5BWh0KoP8CtD?= =?us-ascii?q?gdlUy/ZFv2Lkvp7fej6sX7arqZrNuSo6cdcmu7FxMZDkIsaeu5Pegz3fTJ3Usg?= =?us-ascii?q?KbVS63DOdVlcZLLyJZWvZIn3spOcscuYpO8UAxTNsxJ6RTCKkwobCncSBkDSgT?= =?us-ascii?q?zSAFV4OA2zgCgvyk1bXDixmeaogvPhsfvZpehdsdVjJ5bTkFpK+/TYnWkXGLSn?= =?us-ascii?q?QTKgcJ8QtM/B4AlpN3fu39+orHUYJDxiVZo/JxXSrHDJ9o+EXnSmuOm1j3VO2h?= =?us-ascii?q?k/C13QJV1P/syMMUWAR4CUdG3OtWilEoJ6tpK6YOuo7KszmIdUz+vGLsx+umJE?= =?us-ascii?q?VRycPOeF3iCYrJr2z8XTMA+XcMX49A1GnfFYgOkwp+cKsqqk9AL5ymekb/4jwk?= =?us-ascii?q?xp5mH7qjWMCq2Vkqs2gJSz2tE9pbBOFsqEjXVyF9Y5C3tJXlPI1fTXVK+J2ArV?= =?us-ascii?q?dVikZtPjW4yZpdKsFN/iUDUCJJoTqDoNu4UNdD1tNuD58QPtd/vG/wGKJCOJiN?= =?us-ascii?q?vXI2vqLgynrH9DAgqle7xC6+G6igT+1H+W0eHx8mJ2WaqkY0COst/X3e8lfXsl?= =?us-ascii?q?B75+1bHKSAjV1toDZhGZBDHjlJ1Wq/IFR1UHlLqORaKKPbcsxaX/kyZQGgOx04?= =?us-ascii?q?Ff46wUOJ51t4nXHnbCxurgFa4TzSXxEoVSkJhbfggSEeqsaiOTIBV5JEcTAhYD?= =?us-ascii?q?zfJwKdhy9XoA5Va1t2VJABHtZF57Yb0JNU/sXYU0ajMyUFUwF5Ow0lz/VfjVZD?= =?us-ascii?q?v1uceS/DFwqkb/HPsgd4fc2Jts6mMOz5/BtbioPgqO049aIDSGO9lAKwX9/etJ?= =?us-ascii?q?HztseWtkSQaaj0Keu8bmHdTDLUlxC/ma8kD4XW/yjUKAdUMJd6xmY4bZXjFGLG?= =?us-ascii?q?Mw9LKL4cJ0peSa91c85GovxAa89iZqkJ5bdnBgibSRP3BIyvsP5GI07JRTvAMi?= =?us-ascii?q?qB8vawoZ7I4LzZTujgeNKDy2jbTKJwI5h19yP3G7H03o9C4kD2wOti9ltmSVja?= =?us-ascii?q?NCCMtMzhJhgX5Ma4a0TiooYkHSjRAJdtinri2l9Pd8wLQy2w6psYzIlV6HHqSe?= =?us-ascii?q?J3ykLzqvFd96F46Ykr5LBk0du0Jb3MJvtErEBqGQWUBgF29pU3Gmd/WWFRYugV?= =?us-ascii?q?KPjPYaQVl8fuq/r4F6YP8h2a5/RZacfbJ0HGgsS/CCuTSQZDnAcarT4VNBWc2u?= =?us-ascii?q?WAm69pTcaluen51V4s41ekKB4G16ph5YCe+qqHvOXXdQfezaAYWqj2QcP+trYs?= =?us-ascii?q?tFmU5f0qjr4OfXF6bBO8HegBTMEdwHzgzacwwSIqDczDA6rq+ORfWHIhgjLgh5?= =?us-ascii?q?d9Ek0QGvMQBreL/IJenmIil+zYMN0WfLpClXyUFR64CL8C1GKk6zeKIGl/nB7C?= =?us-ascii?q?yRbwQXm87FXuty93XTPMz8v/kkpSTrS3A0ZSUDauOU98qjyPJxDktNvwuaQy90?= =?us-ascii?q?E2KXfptNeCmWquIr9XGNf/JNOEKykuuF0XlIExRsCo2Y0DBdWyOtMR/29lbvvC?= =?us-ascii?q?62KrlDRMo7xbiIrf/M6V/OnXHXi6gKGArbWC2ixYwGAivV4j8tCgKu3O59qSTv?= =?us-ascii?q?SszGYRSidythDPXxGrt7PbqEoUNlaT0EfRn4wKPM9W0mUk1k384+gjWt0z/h1E?= =?us-ascii?q?Foncf/MCuSzzODzszFadYtI3UzKT0z5JEVP1D1Z4Aqk82GT/vM7Tk3ff5UEoTJ?= =?us-ascii?q?Fqd0P7nRx3E5k4KUU15VgWwysMCxICZgyAAbGzG0vlMZULWlQZZRSAxri6db89?= =?us-ascii?q?3VdvzbO3+O/Tcet8CrIWOfZclQ6PkkJUGpAXsa0CWLJzYUJd9KrMqwf+DIjoQu?= =?us-ascii?q?bpmmAtNf2vRcBa69oWu2El4galSBqq8Y1D4KoDiJCUaq5EZoDBvNhm4Ed7+TEP?= =?us-ascii?q?diJMgB9ljxO6SOwcv/7s4tzasJqu9+avW70gR/0N+BgoG2t+j5XxgFc5odHUze?= =?us-ascii?q?tcSZPaiZ758A9TJ36GooHa0wNzKeAWMYKkYK5g92kbJygZP38OIcCWZOc44yB3?= =?us-ascii?q?NjXc+UdPDd4NZdMXPcrNhRpbilbzV7FJ68rXAFmYBJlvd8ow9Wr41Cg18YcgUu?= =?us-ascii?q?bn8DK2KorQ70tTMPNfjCVhj9bCpOkJwfXMCCgY+2SZawNvziOE1ZaNF+76/f+Q?= =?us-ascii?q?x9HMS1MGAik2Xp9SJDWc/wynWu21lJLuXgOP9MDzhJM+dESNRn2+h6kFtrhDEf?= =?us-ascii?q?RAiyrhxDReEJ76h+6Nudq29GRXrkFHEJp07RDdBKpfPI90Ngjjm8a3QUh8Ai//?= =?us-ascii?q?eMDKeRo0pOqZ2PsD4+VkO0v5f48bLQoOy6jm5npNUgtuVLn2s06cXeIWYttmVP?= =?us-ascii?q?zEoW5O5IJlKq8AJl6dq4L2rjZGr1A2GgwpaKQqojxcaEbOgBVfW7zot74Ylgsc?= =?us-ascii?q?Tdl5tFdDGW2sI2I+/CPLW7lagqeXCfwV9CiTT6MVXkVnNyNxWRW114t0d7uuh/?= =?us-ascii?q?BHvXtMnjlhr/gyzzxmWBy8tDXup6IK2TIg/qu0uykBuXxBU+WRjibJCVRFzPQR?= =?us-ascii?q?jqccCm3v6UK9YHkddoTy5KRoJcX6+Ykn/Xs/fQ0pfzcaUuS4FyHwk6SID5SOsN?= =?us-ascii?q?JCnhGNvt7DbbuuLScPN7Q9zgnjS2J60gjEkxZi6HELTSm47N84OIW9Pt4oxii2?= =?us-ascii?q?FmjVelYM5rhEscXrul4NUuQ2dUltwGN93cibXicNXtDAG34pjgg4bmVJaJ1D6R?= =?us-ascii?q?sdF6gmnDmIuq1G8xoPYDfTFISl+5Xfkd3O2XYjUddg3njWqbGdhpM2zH1lnMt5?= =?us-ascii?q?7iyOuHUSb+zYVMtsAnnv1ohB0uH+YvStsvwdSIR40rihV+UCMsa782usxJpqQl?= =?us-ascii?q?OlxqgZH1ehLO8Dx7LbXjy5SW2ZReuLcHaDnzIjPk70+xaoMkU9aN1WoE8lLuvC?= =?us-ascii?q?mplcmhXkUbN1RSWQpljbwXchMewAdAI2v4GndBIMTOILYeiTO/QuyuUkCFQQd3?= =?us-ascii?q?/JATd2C+iuvFG2god7PWlg7F7hYeTp9QDmLMeSGgcaHoHHtJJx/ua6Rm2ZM396?= =?us-ascii?q?0BJyJFV09/vYF1kpru9cdJKRksLKh9V11u4Fc/ltPDY4ut4UnYJj8peb39uQcR?= =?us-ascii?q?HW1ZbyPtDVov6XA/HFyEQqYG5aWKIDYQzp/4U6IsI5W7rLELtXoxscAak6QIQ/?= =?us-ascii?q?OGrq9aB0LQZzcgvPa7SuhsnluPiHZpxOp3/Z9lgwNjvTuwUfyvyoSgx2d56rh2?= =?us-ascii?q?3oIJAxWj1OscZgCh5nHItTAcMPsRCrA5mOmKG0k9Wx4V91u/cWsarsDfDHzNO5?= =?us-ascii?q?34FvUJVB/UyLOCzeBLJ3gkRkkuuynu3A3YfvBs/4f9MLSvR7SHbfarDaBoW/Ni?= =?us-ascii?q?6OOsXkdk5C8r6c1q95UxqIaCD9XqqGrzGkNO5/7EU60IN4eu3TwCYq77HB19v4?= =?us-ascii?q?f3tbqTu7rX6VKJtf60THBffAUBJQSPqF9ntlHKIQYYX76OcOMcItwMKC7Alr9j?= =?us-ascii?q?tPy8iFLLa7rk/KxE17cYnULFbm2yojXokKOhu/O1M2gWDFsnTdHWhcLs+8JMlo?= =?us-ascii?q?mtmaEhzt50h3mWEqfWNBBGvoRdGPNmgf2sK+YhCK9Q1RA9YEhe63dlYytreuRu?= =?us-ascii?q?lwJpVFheKqua0FkdlzKCHPQ9NVMjrNLL9wIjpRDuLPpEUnYh4Er7g5QIE1aoaS?= =?us-ascii?q?IEkfKkeP1TvyzRfe0U3zb9Gs27yGLz0M8nVG0b3F1SNBpxe9ufmDmc3jUa3ZYI?= =?us-ascii?q?vwXPHMLCovTiuaSigqEUa15VekvOIJvPidIWcYuFAUeCOSCBUIq6Bpt9fQC3Hc?= =?us-ascii?q?mex5cJ0NnvCaVDj6SDdkm6oqGiZLqUeMTuIYFQnYan/unGtRtQ+5K/9S433ldb?= =?us-ascii?q?yYx6tSW+wQGIdMdOOWQ8eLMcxZciwlkjQfJfaUY8zXr7F/1EnBC2QeDfrm7lqb?= =?us-ascii?q?GXWKT+ScyjSjZoAcu4w5q2J84d7LtjNmGKTPebCErnih9ZDu33XQgvHXSmR4Ox?= =?us-ascii?q?99u+kFGmTUhUMYJQ=3D=3D?= X-IPAS-Result: =?us-ascii?q?A2HiAQAzIydZ/wHyM5BdGgEBAQECAQEBAQgBAQEBFQEBAQE?= =?us-ascii?q?CAQEBAQgBAQEBgwEpgV0SjnqobSiJBVcBAQEBAQEBAQIBAmgogjMkgkkCdgMDC?= =?us-ascii?q?QIXMQgDAWwFiAROgUUNrQUmAotZljEFniOTGw2CBokcDIZHApROWIEKJwkCHwg?= =?us-ascii?q?gD4R9gl9aiSQBAQE?= Received: from unknown (HELO tarius.tycho.ncsc.mil) ([144.51.242.1]) by emsm-gh1-uea11.nsa.gov with ESMTP; 25 May 2017 18:37:10 +0000 Received: from prometheus.infosec.tycho.ncsc.mil (prometheus [192.168.25.40]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id v4PIaNlS029195; Thu, 25 May 2017 14:36:43 -0400 Received: from tarius.tycho.ncsc.mil (tarius.infosec.tycho.ncsc.mil [144.51.242.1]) by prometheus.infosec.tycho.ncsc.mil (8.15.2/8.15.2) with ESMTP id v4PIaJZq229666 for ; Thu, 25 May 2017 14:36:19 -0400 Received: from moss-pluto.infosec.tycho.ncsc.mil (moss-pluto [192.168.25.131]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id v4PIaHpn029184; Thu, 25 May 2017 14:36:17 -0400 From: Stephen Smalley To: selinux@tycho.nsa.gov Subject: [PATCH] selinux-testsuite: allow more instances of map permission Date: Thu, 25 May 2017 14:40:36 -0400 Message-Id: <20170525184036.32327-1-sds@tycho.nsa.gov> X-Mailer: git-send-email 2.9.4 X-BeenThere: selinux@tycho.nsa.gov X-Mailman-Version: 2.1.20 Precedence: list List-Id: "Security-Enhanced Linux \(SELinux\) mailing list" List-Post: List-Help: Cc: Stephen Smalley Errors-To: selinux-bounces@tycho.nsa.gov Sender: "Selinux" X-Virus-Scanned: ClamAV using ClamSMTP The upstream patch defining map permission for refpolicy ("refpolicy: Define and allow map permission") only adds map permission to mmap_file_perms and exec_file_perms and to specific interfaces where it is required. Consequently, we need to allow more instances of map permission in the file and mmap test policies to avoid incorrect denials of map permission (either ones that cause a test that should succeed to fail, or ones that would prevent the test from reaching a later permission check that is being tested). Signed-off-by: Stephen Smalley --- policy/test_file.te | 2 ++ policy/test_mmap.te | 3 +++ 2 files changed, 5 insertions(+) diff --git a/policy/test_file.te b/policy/test_file.te index 24c8b16..1f1da3a 100644 --- a/policy/test_file.te +++ b/policy/test_file.te @@ -83,6 +83,7 @@ allow fileop_t ptmx_t:chr_file { read write }; # Permissions for the 'good' domain... allow test_fileop_t fileop_file_t:file { setattr rw_file_perms}; allow test_fileop_t fileop_file_t:file { execute relabelfrom relabelto }; +allow_map(test_fileop_t, fileop_file_t, file) allow test_fileop_t fileop_t:process { signal }; allow test_fileop_t ptmx_t:chr_file { open read write ioctl }; allow test_fileop_t devpts_t:filesystem getattr; @@ -90,6 +91,7 @@ allow test_fileop_t self:capability sys_admin; # Permissions for the 'bad' domain... allow test_nofileop_t nofileop_rw_file_t:file { open read write append relabelfrom }; +allow_map(test_nofileop_t, nofileop_rw_file_t, file) allow test_nofileop_t nofileop_ra_file_t:file { open read append }; allow test_nofileop_t fileop_file_t:file { relabelto }; allow test_nofileop_t ptmx_t:chr_file { open read write ioctl }; diff --git a/policy/test_mmap.te b/policy/test_mmap.te index 1d20f30..9e2d9c9 100644 --- a/policy/test_mmap.te +++ b/policy/test_mmap.te @@ -96,6 +96,7 @@ unconfined_runs_test(test_no_mmap_dev_zero_t) typeattribute test_no_mmap_dev_zero_t testdomain; typeattribute test_no_mmap_dev_zero_t mmaptestdomain; dev_rw_zero(test_no_mmap_dev_zero_t) +allow_map(test_no_mmap_dev_zero_t, zero_device_t, chr_file) type test_mprotect_dev_zero_t; domain_type(test_mprotect_dev_zero_t) @@ -103,6 +104,7 @@ unconfined_runs_test(test_mprotect_dev_zero_t) typeattribute test_mprotect_dev_zero_t testdomain; typeattribute test_mprotect_dev_zero_t mmaptestdomain; dev_rw_zero(test_mprotect_dev_zero_t) +allow_map(test_mprotect_dev_zero_t, zero_device_t, chr_file) # In old kernels, mprotect PROT_EXEC on /dev/zero # triggers a tmpfs file execute check on the kernel-internal shmem /dev/zero # inode. In new kernels, mprotect PROT_EXEC will instead trigger an @@ -117,6 +119,7 @@ unconfined_runs_test(test_no_mprotect_dev_zero_t) typeattribute test_no_mprotect_dev_zero_t testdomain; typeattribute test_no_mprotect_dev_zero_t mmaptestdomain; dev_rw_zero(test_no_mprotect_dev_zero_t) +allow_map(test_no_mprotect_dev_zero_t, zero_device_t, chr_file) type test_file_rwx_t; domain_type(test_file_rwx_t)