From patchwork Thu Oct 19 23:49:15 2017 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Jann Horn via Selinux X-Patchwork-Id: 10020167 Return-Path: Received: from mail.wl.linuxfoundation.org (pdx-wl-mail.web.codeaurora.org [172.30.200.125]) by pdx-korg-patchwork.web.codeaurora.org (Postfix) with ESMTP id C529060211 for ; Fri, 20 Oct 2017 12:30:05 +0000 (UTC) Received: from mail.wl.linuxfoundation.org (localhost [127.0.0.1]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id BC06C28E7F for ; Fri, 20 Oct 2017 12:30:05 +0000 (UTC) Received: by mail.wl.linuxfoundation.org (Postfix, from userid 486) id B0B8D28EA6; Fri, 20 Oct 2017 12:30:05 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on pdx-wl-mail.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-3.7 required=2.0 tests=BAYES_00, RCVD_IN_DNSWL_MED, RCVD_IN_SORBS_SPAM autolearn=ham version=3.3.1 Received: from ucol19pa12.eemsg.mail.mil (ucol19pa12.eemsg.mail.mil [214.24.24.85]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id F32CD28E7F for ; Fri, 20 Oct 2017 12:30:04 +0000 (UTC) X-IronPort-AV: E=Sophos;i="5.43,405,1503360000"; d="scan'208";a="415125876" Received: from emsm-gh1-uea11.ncsc.mil ([214.29.60.3]) by ucol19pa12.eemsg.mail.mil with ESMTP/TLS/AES256-SHA; 20 Oct 2017 12:30:03 +0000 X-IronPort-AV: E=Sophos;i="5.43,405,1503360000"; d="scan'208";a="4953198" IronPort-PHdr: =?us-ascii?q?9a23=3ARnoB9xAC6jc4ePhaeSttUyQJP3N1i/DPJgcQr6Af?= =?us-ascii?q?oPdwSPnyoM6wAkXT6L1XgUPTWs2DsrQf2rqQ6/iocFdDyK7JiGoFfp1IWk1Nou?= =?us-ascii?q?QttCtkPvS4D1bmJuXhdS0wEZcKflZk+3amLRodQ56mNBXdrXKo8DEdBAj0OxZr?= =?us-ascii?q?KeTpAI7SiNm82/yv95HJbQhFgDmwbaluIBmqsA7cqtQYjYx+J6gr1xDHuGFIe+?= =?us-ascii?q?NYxWNpIVKcgRPx7dqu8ZBg7ipdpesv+9ZPXqvmcas4S6dYDCk9PGAu+MLrrxjD?= =?us-ascii?q?QhCR6XYaT24bjwBHAwnB7BH9Q5fxri73vfdz1SWGIcH7S60/VC+85Kl3VhDnlC?= =?us-ascii?q?YHNyY48G7JjMxwkLlbqw+lqxBm3oLYfJ2ZOP94c6zTZ9MaQXdKUNhXWSJPH4iw?= =?us-ascii?q?a5IDA/cdMepdqYTyoEcDoBWiCQWxHe/j1iJEjWLy0aEn0+ktFAfL1xEiEd0Tqn?= =?us-ascii?q?TZtMv7OqkRX+6y0afI1TfOY+5Y1Dn98ojHbAshrOqQUb5sa8fd1VMiGx/ZgliW?= =?us-ascii?q?tIfrPymV1uMIs2WD6+RvT/ygi20nqgFspDik29oihZfOhoIW11vE6yR5z5woLt?= =?us-ascii?q?OlVkF7Zd+kEJ1NtyCVKoB7RdgiTH9suCY7zL0GpJG6cTMWyJUn2xHfa/uHf5KO?= =?us-ascii?q?4hL4TumdOzh4hHV7eL+mgRu57EuuyvXkW8Wp31tHoTBJn9nRunwXyRDe5daLRu?= =?us-ascii?q?Fg8ku5xzqDywTe5vtHLE00j6bXNposzqAqmpYOtUnOHin7k1jsgqCMbEUr4O2o?= =?us-ascii?q?5vziYrXhu5CTKZd5ihr7MqQygsy/Bvk4MhQWU2ib5+u80Lrj8FXlQLpQlP02k7?= =?us-ascii?q?TZsIvAKcQHpq+2Hw9V0oE55xa5Ezimy8gXkWMCLFJEfBKLl4npO1fQL/DkFfqz?= =?us-ascii?q?nluhnThxy/3GI7HtGIvBI3fdnLv7YLpx80tcxxAyzdBb6ZJUELYBIPfrV0/qqt?= =?us-ascii?q?PYCh45Mwqpw+foEdlyzYQeWX+JAqCFLqzSqkSF5v4vIuaQZI8VvyzxK/4+5/H0?= =?us-ascii?q?l3M5llgdfbex0ZsNdH+4BuhmI1meYXf0gNcBFmEKsRAiTOzqklKCVyVeZ3S1X6?= =?us-ascii?q?I64zE0EpmmDZvdSYC3m7yNxiC7HodZZmpeEFCDDW/od5mYW/cLcC+SIM1hnSYY?= =?us-ascii?q?WriiUI8h0heutA7ky7d8IOrU/jAYtJ3429ho4e3TiQwy+SZzD8SH3GGHV3t0kX?= =?us-ascii?q?8QRz8qwKB/plRwy1mC0ah8hvxXC8ZT6uhHUggkKJHcyPZ6BMrqWgLbedeJSkip?= =?us-ascii?q?Tcm6AT0rSdIx2dAOaV5nG9q+lhDDwzaqA7gNmrOWGJM096Xc337tJ8pg0HvGyr?= =?us-ascii?q?cuj0MnQspOMm2mgLRz9w7NCI7Vi0+ZjbqldbwA3C7R82eO1XeBvF1CXw5qSqjK?= =?us-ascii?q?QXcfZk7Kotvj/UPCU6WiCbI5PQtd0cSCMLdFasX1jVVaQ/fuINTfYmO2m2e2Hh?= =?us-ascii?q?uIw7eMYJPre2UbxindDlILkxoQ/XaHKwgxGD2to2TAAzxyDVjveV/j8fFiqHOn?= =?us-ascii?q?SU851x+Fb1V72Lqv+x4VnueRS+sJ0bIeuSchsC10HFKn0N3KFdWMvQ1hfL9TYd?= =?us-ascii?q?kl+ldIyXrZtxBhPpynN61iiEQefB5xv0zy1hV3EZ5Nkc0yrHMr1QZyMqyZ0Ehb?= =?us-ascii?q?ezOfx5DwNaXdKnPu8xC3d67Wxlbe3c6V+qgV6/Q4rEjjsRqqFkU48HVn1MRV32?= =?us-ascii?q?Gb5pXQAwoYSYjxXVov9xhmu7HaZTEw6JnJ2n12MKm7rCXC1skzC+Q5zxasZdBf?= =?us-ascii?q?MLmLFAXqCc0VG9CuKPA2m1iudh8EJv1d+7MvMsOpcvuH17SnPOB+kzK6lW5H+p?= =?us-ascii?q?xy0lqQ9ypgTe7Fx40Fw/+C3guATDf8kEysstvxmYBDazASG3CwyS7+CI5XeKJy?= =?us-ascii?q?YZ4BCX2yLM2v2tV+m5ntVmZW9VG5A1MGxNGmeQCJb1Hmww1fy14Xrme6mSu91T?= =?us-ascii?q?B0lCsprqWH1izU3+vibAYHOnJMRGR6kVfjPJW7j9EAU0isdAUmiByl5UPmyKdB?= =?us-ascii?q?v6R/M3PfQUFWcCjqN2tiSLe/tqKeY85T75MlqSNXUOW4YVCeVLH9uAAX3Dn9EG?= =?us-ascii?q?tEwzA3bTaquo/2nxZikmKSMG5zrGbFecF33Rrf+t3cSuJN3joBXil0kyXYBli7?= =?us-ascii?q?P9mv8tWZjJPDsuG4V227TJ1TdjPnzYSatCu0/WdqGwGwn+ivmt37Fgg3ySv719?= =?us-ascii?q?hxVSXUtRr8eZfk16C7MeJhY0lpC0Tx69FiGoF/lIswhY0f2WMAipWT43UHjX/5?= =?us-ascii?q?Mc9H1qLmcHoNWTkLzsbP4Aji3E1jKmyGx5jlWXWazMpsfMK6Yn4K1SIm9cxKD7?= =?us-ascii?q?2U7LNclytvvlW4tR7RYeR6njoFyvsh9ngag/oStQou0CqdBKsSHU9GMizwjRiI?= =?us-ascii?q?6Mq+rKpPbma1bbewzFZ+ncymDLyaugFTQmv5epM8Ei9o9Mp/Nk7M32Pp6oz/Zd?= =?us-ascii?q?nQdswctgePkxvalOhVL48xluAWiiV5N2L9umcly+ElghB025G1opSHIX13/K2l?= =?us-ascii?q?Gh5YKiH1Z8QL9zHzi6ZRg92b356pHpp8GjUHRp3oQuy0EDgKr/ToKx6OECEgqn?= =?us-ascii?q?ecAbffBRWQ6Fpir3/UD5+rNm2XJXkAwdVsXhadIlZTgAcOXDU1hpQ5DBylxNT9?= =?us-ascii?q?cEdl4TAc/lD4pQFKyuJ0MBn/V3zSpAm2ZTgpT5ifNgBZ7hlY50fSM8yR8P58Hz?= =?us-ascii?q?1C8p2mtgyNJXSRZx5UAmERRkyEG1fjM6Gr5dba9+iYAvSxL+fSYbqUs+NTTPGI?= =?us-ascii?q?yoyz0ot94zmDLN2PMWd4A/09xEVDQWhzG97FlDUXVywXiyXNYtaBpBum9Cx7tM?= =?us-ascii?q?W//+7vWALo5YqCEKFdPslq+xyshqeDLeGQjj5jKTlEzpMM2WPIyL8H0V4ckSFh?= =?us-ascii?q?aSSiEa8aui7LUKLQnbRXAgUBZCxvMctE9aU83hNCOcTDkNP6yqZ4juIpC1dCTV?= =?us-ascii?q?HhnNupatYSI2GlL17HCkeLNK6dJT3XzcH3YKW8RqdWjOpIth2/ozKbH1XkPjSZ?= =?us-ascii?q?mDnjTwqvPv1UjCGHIBxev5mwcg5zBmf4Ut3mbBy7MMNwjTAtwL07mG3FOnAGPT?= =?us-ascii?q?h7aUNNoaWa7TlEjfVnB2xB8n1lIPGflCmC6OXYLpcWseB3AiRvje5a+2o1xKdP?= =?us-ascii?q?4CFfWvN1nCrSrthzo1CpieSA1jpmUABTqjZQno6Ks19tObnC9plHX3bI5hUN7X?= =?us-ascii?q?+fCx4SvdtqFsXvu7xMytjIjK/8MzZC893T/csaHMXbNdyIP2EgMRXzHj7YFgwF?= =?us-ascii?q?TSSkNWvHnUxSjOmS9mGJrpg9spXjgpUORaVFVFMrDf4aDVxlE8IEIJdyRDwkkL?= =?us-ascii?q?qbg9UP5XuxthXRQ99avp/fXPKIHfrvMCqZjaVDZxYQ3bP4KoETOpfh20xla1h1?= =?us-ascii?q?goLKFFHKXdBKvCJhbRQ5r1lK8Hh7UmI8wVnlah+37H8VC/G0ggY8ihFibuQ16D?= =?us-ascii?q?fs/1A3K0LJpCowlEk+h87ogTWWcD7/Iqe/Q51WCzb0t0g2N5P0XRx5bQuskkx4?= =?us-ascii?q?LD3EXa5ej6N8dWB3jw/RoZ1PFuBGQq1AexIQxvaXZ+400VtGrCWn3kxH5erfBZ?= =?us-ascii?q?tkigQqbYamr2hc1AJ7cN41OavQKbJTzldOnaKBoDWn1votzw8ePEsC62KSeDQV?= =?us-ascii?q?t0wPOLkmPzCo8fJs6ACYnTtMZnQMXeIwov127kM9J/iAzyX43rFeLUCxMeqfIL?= =?us-ascii?q?6HtGjElM6FWUk/2V0Sl0lC57R21t0jc0WMXUA10LSRDwgJNdbFKQxNcsVd7mbT?= =?us-ascii?q?fSeTvuXW2p96JZ+9FvrvTe6Ar6YbnF6rHBszH4QN8sQAHoOg0EfGIsf7NLQF0w?= =?us-ascii?q?ki5Bz3JFWZC/REYBaLkDAdo86hyp923I5dKyoSAWV7LCW7/LHXphUlgPCbRtc5?= =?us-ascii?q?fm8aXpcYNnIxQMC6gDBWv3BBDDmxz+IYxxOP4CP7piTVEDbzdcFjZOuOaRNqFt?= =?us-ascii?q?625S0187Kqhl7P7pXeO2b6OMx+ut/O7OMaoIqHC/NUTLRmrkjcmolZSGaxXGLV?= =?us-ascii?q?F966OYTwYZE2bdPoEna6TkC/izUtQsjrONatL7SHjh/wSoZRsIib2jcjNcmnGT?= =?us-ascii?q?wFABhwpvsM5KRlaQ0Nfpo3exjouBoiN6anOgeXzs2uQ3qxKTtRV/RQ1vu1Z7pM?= =?us-ascii?q?wiU2c+C61mUvToshz+at604MRIsGjhbExfasf4NeSzT8GmRBewXToio0j2dhNv?= =?us-ascii?q?szwuc7xBPHr1wcPiuWe+N3c2NEvsszBVWILXVxEGo4SEeWjZDf7Q60w7AS4yxd?= =?us-ascii?q?ks5O0e1DsXjxop/fYDWoWKywsZvbqjcuY8I6rqN2KoHsPsyGtJbCkTPFV5nQrh?= =?us-ascii?q?eJUCikGPpGgtJQOj5XQOFUmWE5PswLoZBB5lArVsc5PLNCE7UspqqwZjp6EyES?= =?us-ascii?q?yS4ZV4WP3DwGg+e81LvalguecJs4KhwEtY9Ogt0DXC5qeikevrOsV53Kl2+YTW?= =?us-ascii?q?gGOAkS4R5Q6wIAl49we+Hl75DLTJJXyj5Zvex7XTXRGplv7Vv7RXmcgULkR/W5?= =?us-ascii?q?j+ypwQVSwer23dkBRR5/D1JRx+VNm0spKbF3KrUQsZXQvj+Oa0z6oHrnyPG6K1?= =?us-ascii?q?lJ1c3Ua1r4AZLEtWr6Ti0T53kUSpFKyH7BCZQSiQp4Zb0spFVUPo+mfEP+6CYl?= =?us-ascii?q?x4RtBLa4Us+qy0wirXYcSCegC8BBBP1+sFLLRD1lZIimqJr/O5pIRG9Q5IaQq1?= =?us-ascii?q?ZekERjNS651ZpcJN9M4j4KQDhAvy+dsMG0SMJdxc98F4UMLctnu3fhBKNEP4Cc?= =?us-ascii?q?o2Exurzq0XLZ5ywwsFKhyzmpHa+3Uf5Z9XUEGgo1P2SetlUvD+w0/2fS6F/NqE?= =?us-ascii?q?p7/+NGCbWUkEp+vi59HohQCTZNy3+lNU5/TH5cs+VVMK7VadBTQ+EuZR+zPBwz?= =?us-ascii?q?Dfwm30uX8kxvgHj2fTdyuRVA+yDBQQY7SDMZgrHzlj0CssunIyMVS4pUbTU9aC?= =?us-ascii?q?fIMxmUmS5LsxpDaUxmRp4UD81Z9LEc2Itb4tDNSV2wKS0fWhxtKB442+JFlUFf?= =?us-ascii?q?qEWYZTzdDQ2wePbVrBJ4YMeRo9S1LPni+AdHjZ3nv/4m+6ofQH2phBOiTcrYr4?= =?us-ascii?q?Diqt2ArlGOe7vgM+2gfX/BSyDBjQirhbc4FZbF4jTTPRFAK5l91Hoke4TuBnDN?= =?us-ascii?q?PRRaPaIUPU5bWbp9adVcreBQf9Vkd7oR+a9xGhKHQQviGJC1rPZYMFncWC/TLz?= =?us-ascii?q?iF8uyju4Lc96LdSennZsyI2XnHX7h7PpBg6Tn0A73qy5NR+lLq2vdx8UN3UVrG?= =?us-ascii?q?PDqbrNTmPQML4NOtdlX5s50sADPWBItwkHvxyUFBbcUXRTaq/I4fyJND53b6Uf?= =?us-ascii?q?h43VTrsO1O67lk7pE647JzxseyK6fSM/NavlJ5DRWPGgVl7JMtAHN4R2xLZO8e?= =?us-ascii?q?NuvRd7wDjc/ys+D3C7AX6BqN9uxfbdvKPEDBms+6Cj2GSBxEmgkBqSQAIQuHy/?= =?us-ascii?q?6FgbJ0Rtq5pejkwEIi/UKyLhkczLBi/Y2E4LaHpPfLbxvNyrgJQq7qRsLvobQr?= =?us-ascii?q?v0Od/+YkmKQPemxyZA2nC/MdW9UYxmrvwqEm1yUsE9nMH7j44v5MS2o5ni78m5?= =?us-ascii?q?B6B1gZBukbHb6V8oRFgmc5m+vZO8YNcq9em2aACxikEqMDyXGx8SeXJndqgg3W?= =?us-ascii?q?2RHqXWyz9EP2rTN/QSbUy9fjiU9VW7msCEdcQSWmJEh4sCmVMwrwrtr3vqY141?= =?us-ascii?q?8qPWz4rt6Nk3GhOLxPFc3lONOcOTU0pE4QjJApRNyv2IUbFMG4INgP8HBxcOHe?= =?us-ascii?q?62Ktky9OuatHgZTR4t2N8PXNAXagl7Gaq6mKxD1Ay3g5vEsw5cq8OfzV/N2FXe?= =?us-ascii?q?io2HgNQCtlvAvBRRG1oKTBr18IIUyLzFvLmIsSM95C3Hk4zU/n6/IhQNIy6AVe?= =?us-ascii?q?DpzPZ+4GpT3oJDT0xkuQbMwtWSmDyTtXGUj1HkNiFKg7wmLws9rDlW3M9F0wWo?= =?us-ascii?q?lwa0vniARvD4oiNUIi9FgXwyQEEQgXahCXFaqoClrhLYsFU0gDdBuG0aOieqgt?= =?us-ascii?q?wU183rOv5eHUbexmBKoBLPVdgRCUnFhdBJ0WtbcSQLVme19S7KTXvBTtC5D7X/?= =?us-ascii?q?j6kno9LeG1QtpE/sAdrXQi5BiwSgG95pdC4LYbiYyIebRfYZfWpsB88l1r5TgR?= =?us-ascii?q?eSxRmBJ/lQ+2UfgApOD/5djWqJWo5fy0VKkzW+UX9wM5B2B/j5vsnl8jocvY1/?= =?us-ascii?q?pHSoHPj4Tw7hxNKWaQuInGyxl8NfYOK4WzcbZv6XoHITQeJ3UJPdaRcPkz/Stt?= =?us-ascii?q?MDTV51xfDcIBftcYM9TXmQFUkELlQrdT+dTHGlWAEYd8a9go73bryDAy6ZYzTu?= =?us-ascii?q?Tg5yWqKp3E815NOPdDjCFtlN3cvugV3eTdBzQX4XWDbBh12CyCwYGXC/ns5eWM?= =?us-ascii?q?1M3UV1QeEy4zVIddIiaC+QO5SeeukZXpUxmb6sntj5IiekOQQWaxnKcesqpWF+?= =?us-ascii?q?5PlDn71CBEFo/pn/KVr8as6GxPu11IDIlz9gbFFLxCMJt0Pxr4l8+rRlVzBybk?= =?us-ascii?q?d8HUcwAhuOyIyesW5OV+LUT+b5cBIh0Y07L69WZVTgx2Rb70uVaZXeQRaMF6R/?= =?us-ascii?q?PEqnBV9J9vKq4OPFibv5zqrTZIpUsoAA8odr8/tDhaeVTPnAFPXab7pqIAgBMG?= =?us-ascii?q?UdFloU9MBX6wOGUm6jrGS6Ralq+RBecR8jWOU6MOUkJoMjhkTxOywpVudKOjne?= =?us-ascii?q?pbvWNegiN9vP8q3iRkRBSity3sqaYN1Cku+b6isjUOp2BFQv+YkyjWFVVJ1O4K?= =?us-ascii?q?grsEC3b+9Vy8Z2EObIT24LlgK8Xv640h43AkbBU4eC0GW+WgBD3qg6OOHIOPrM?= =?us-ascii?q?pWhASRt8XWcb+zMS8SO6w/yRLjR3l9yg/enBJp8GsXXDqt99okJIShOcY/2CWk?= =?us-ascii?q?A2/bdEwD4qlRqsv+qUYLTPcqaVNm2GhjzsmHRigWSczTGmY6kgskZntAcJ5Z7x?= =?us-ascii?q?8VCbUoiC6SvqZa5gEUfCvUEoO994nVnMfI2no9TdBxy2LUvKKFhZQq0Ht7lNNy?= =?us-ascii?q?9CKOvmodd/DAWc92HnfzzptfyfD5Z/i1qe8IVo1myKi6Xf8ZNsmj/ne22Il0Wk?= =?us-ascii?q?C727sSBV25MPUMxr3DSSeqVXWYWfiXc2iLhzs5Kkny5R2yIV0tZsZKqEs9MuXZ?= =?us-ascii?q?i55ZkA3hVqh0STuMql/By2wjKvgadwMwuIeoYQAKS/QRZ+eEL+g03PI+EEcMb2?= =?us-ascii?q?POHSZuBe+5r1qtnIljO3p++kj7YOXt8gXjMNSMABkEFZDVooR2+fygSWKLIWVg?= =?us-ascii?q?wwFqPElo6+ffEEw8t+FEc5aLnNjfm8p03PUAd/dsLS09oMAclphk6YmO38eAaQ?= =?us-ascii?q?vRwYrqJdHJvviYBOXSz0Muem5ESbcZeQf16J8hPt4lWr3cAadZvQ4CCqckWpAh?= =?us-ascii?q?MXn+9L1sJgNpbgHRfKi0gtXtpu+TYptUpnnW7k8/LSvFvx0Dy+e0TRBgb52xhn?= =?us-ascii?q?X9OpYwRjVbo91qEBtmE5NFG9kcoAq/H56UhKa7hseq+0xkv+8KsKzwCu3F1di+?= =?us-ascii?q?0ItxQ5ha6lKRPDnPHKlkmF9ojuesjffa1Jn+F8fidsgZVOh0WGLFbaXGHoqnID?= =?us-ascii?q?KUJs38Y1JG86Kb0L9hVxWefjz2X6qHtC2iM/Vp+ls7yo1+fOXNyDwt7rfb2Mb9?= =?us-ascii?q?Zm1BoSejt3GJPoNF7FPWHezeQw5USf2d/WZnB6IXboz0+/wVPNw/xtic/wlz7D?= =?us-ascii?q?Nf0MuKI6ihslXA2kRlepLHNEHpwTo2WZEWIBSjNkshmW3ZqnHaAXRGNMikKNJt?= =?us-ascii?q?jc2TDhP34kl+h2AtanRGGmryStebIXIb1N6mZA2W6AJLCM4On/W5eU49qqK/SO?= =?us-ascii?q?plN45bmeq0rrUHkNdoKybJRMRAOSHfMqN2bXJtCbDUqVwpZAMUm6QkUYcyI56V?= =?us-ascii?q?KQUIN1nT8y7qyRr+1hjWftGvxbuPaB0b9XYPm7DM3Dtdug+RtvGejcnuFrveac?= =?us-ascii?q?elcuTVNX8HXzyZVCk0WX2k/lTspfsN9MGVJWYZv0BcNjmfDA8Vu7BHscnbDmiV?= =?us-ascii?q?n/ZqOpINmqbJCGjLVCRkmf9qVW5wvkeWTq9GRFTb?= X-IPAS-Result: =?us-ascii?q?A2DhAwCZ6+lZ/wHyM5BcHAEBBAEBCgEBFwEBBAEBCgEBgwg?= =?us-ascii?q?sgVInjw2OS5gvGoEYA1IUGIleQBcBAQEBAQEBAQEBAWoogjgkgkkCJFIDAwkCE?= =?us-ascii?q?jYIAwEwAQUBNQWIAUmBUQOdKkCNeTqEcIZiEoMcggcQjCSFKQWSXo5+lGQNi1i?= =?us-ascii?q?HQgKVSQIEAgkCBhQkgRUgATZPgQwqCgIfCCMPgXYagR2CDAyCVmeKWAEBAQ?= Received: from tarius.tycho.ncsc.mil ([144.51.242.1]) by emsm-gh1-uea11.NCSC.MIL with ESMTP; 20 Oct 2017 12:30:01 +0000 Received: from prometheus.infosec.tycho.ncsc.mil (prometheus [192.168.25.40]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id v9KCU0MR022752; Fri, 20 Oct 2017 08:30:00 -0400 Received: from tarius.tycho.ncsc.mil (tarius.infosec.tycho.ncsc.mil [144.51.242.1]) by prometheus.infosec.tycho.ncsc.mil (8.15.2/8.15.2) with ESMTP id v9JNnWtr084546 for ; Thu, 19 Oct 2017 19:49:32 -0400 Received: from goalie.tycho.ncsc.mil (goalie [144.51.242.250]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id v9JNnVDY018908 for ; Thu, 19 Oct 2017 19:49:31 -0400 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A1DBAAB0OelZZCcbGNZcHAEBBAEBCgEBg?= =?us-ascii?q?zMpA3tXJ44Zjz6YLYE1A1wKE4UohQ0/GAECAQEBAQEBAQQcFIYqGQEBNwGBFAE?= =?us-ascii?q?FATWIT4FRA54hQIshglg6gwgBAQWIEwEpCBKDHYE2UYw6hSmSYI54hXCOcg1yi?= =?us-ascii?q?mOHRJVHAgQCCQIGFCSBFR+BB4EMNCEIHRWDLYJNRIFdZ4sOAQEB?= X-IPAS-Result: =?us-ascii?q?A1DBAAB0OelZZCcbGNZcHAEBBAEBCgEBgzMpA3tXJ44Zjz6?= =?us-ascii?q?YLYE1A1wKE4UohQ0/GAECAQEBAQEBAQQcFIYqGQEBNwGBFAEFATWIT4FRA54hQ?= =?us-ascii?q?Ishglg6gwgBAQWIEwEpCBKDHYE2UYw6hSmSYI54hXCOcg1yimOHRJVHAgQCCQI?= =?us-ascii?q?GFCSBFR+BB4EMNCEIHRWDLYJNRIFdZ4sOAQEB?= X-IronPort-AV: E=Sophos;i="5.43,404,1503374400"; d="scan'208";a="90462" Received: from emsm-gh1-uea11.ncsc.mil ([214.29.60.35]) by goalie.tycho.ncsc.mil with ESMTP; 19 Oct 2017 19:49:31 -0400 IronPort-PHdr: =?us-ascii?q?9a23=3A71JYTxJWcPZtz8SEbNmcpTZWNBhigK39O0sv0rFi?= =?us-ascii?q?tYgRKvvxwZ3uMQTl6Ol3ixeRBMOAuqIC07KempujcFRI2YyGvnEGfc4EfD4+ou?= =?us-ascii?q?JSoTYdBtWYA1bwNv/gYn9yNs1DUFh44yPzahANS47xaFLIv3K98yMZFAnhOgpp?= =?us-ascii?q?POT1HZPZg9iq2+yo9ZDeZwZFiCChbb9uMR67sRjfus4KjIV4N60/0AHJonxGe+?= =?us-ascii?q?RXwWNnO1eelAvi68mz4ZBu7T1et+ou+MBcX6r6eb84TaFDAzQ9L281/szrugLd?= =?us-ascii?q?QgaJ+3ART38ZkhtMAwjC8RH6QpL8uTb0u+ZhxCWXO9D9QLYpUjqg8qhrUgflhj?= =?us-ascii?q?oHOTAn/m/Zict+gblHrB69vRFz35TZbJ2JOPd4Y6jTfckaRW1EXstJUyJOGJ2z?= =?us-ascii?q?b4gPDuocO+ZTspTzqEUJrRu9GAKhA+HvxSVWiX/13aw6zuIhHBrJ3AwnGNIOv3?= =?us-ascii?q?DUo8vvOKgOVuC1ybDFwDPeZP1VwTfw8JbEfg0urP2WQ759ftDdxVctGg/fgFid?= =?us-ascii?q?rZTpMy2J2ukJqWSW7OptWfiyh2MjtQ19uCWjy8Msh4TPm4kb0ErL9T9jz4YwPd?= =?us-ascii?q?C4SFB0YdqjEJZIqiGaL5B5Td4/T2xsoCY10KEKtJ+hcCcU1psnwgXfa/Odf4iN?= =?us-ascii?q?+B3jVeKRLS19hHJkfLKznxey8U6+xe3gTsS4zktGoyVfntXSuX0BzQLf58qdRv?= =?us-ascii?q?Zz+kqtwTOP2BrS6uFAL0A0j63bK5s5z74yjJUcr0fDHy/rmEXwl6KWeUIk+u+n?= =?us-ascii?q?6+TjfLrqvIOTN4hxig3mKKQhhtS/AfgkMggJR2Wb4vqz1Lni/U3/XbVLgeY7kr?= =?us-ascii?q?XZsZ/GJcQbobS1AwlO0ok58Rq/ADCm0MpL1UUAeUlIfBOBkpjBJ0DFIPe+C+y2?= =?us-ascii?q?xVurjmRF3ffDa5/oD5bcM36Lq7rmfv4p6UdRyxsuy/hQ4JVbDrxHK/X2DByi/O?= =?us-ascii?q?fEBwM0ZlTni93sD89wg9sT?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DjAABAOelZZCcbGNZcHQEFAQsBGAEFA?= =?us-ascii?q?QsBgwgpA3tXJ44Zjz6YLYE1A1wKE4UohQ0/GAEBAQEBAQEBAQEBAxwUX4I4IoJ?= =?us-ascii?q?xGQEBNwGBFAEFATWIT4FRA54gQIshglg6gwgBAQWIEwEpCBKDHYE2UYw6ggsMg?= =?us-ascii?q?xKSYI54hXCOcg1yimOHRJVHAgQCCQIGFCSBFR+BB4EMNCEIHRWDLYJNRIFdZ4s?= =?us-ascii?q?OAQEB?= X-IPAS-Result: =?us-ascii?q?A0DjAABAOelZZCcbGNZcHQEFAQsBGAEFAQsBgwgpA3tXJ44?= =?us-ascii?q?Zjz6YLYE1A1wKE4UohQ0/GAEBAQEBAQEBAQEBAxwUX4I4IoJxGQEBNwGBFAEFA?= =?us-ascii?q?TWIT4FRA54gQIshglg6gwgBAQWIEwEpCBKDHYE2UYw6ggsMgxKSYI54hXCOcg1?= =?us-ascii?q?yimOHRJVHAgQCCQIGFCSBFR+BB4EMNCEIHRWDLYJNRIFdZ4sOAQEB?= X-IronPort-AV: E=Sophos;i="5.43,404,1503360000"; d="scan'208";a="4940702" X-IronPort-Outbreak-Status: No, level 0, Unknown - Unknown Received: from upbd19pa06.eemsg.mail.mil ([214.24.27.39]) by emsm-gh1-uea11.NCSC.MIL with ESMTP; 19 Oct 2017 23:49:30 +0000 X-EEMSG-check-005: 0 X-EEMSG-check-006: 000-001;19fde887-49fa-4814-8ba7-763dcfaafbbd Received: from localhost.localdomain (localhost [127.0.0.1]) by UPDCF3IC07.oob.disa.mil (Postfix) with SMTP id 3yJ5Hs50dWz1wyKZ for ; Thu, 19 Oct 2017 23:49:29 +0000 (UTC) Received: from UPBD19PA14.eemsg.mil (unknown [192.168.18.14]) by UPDCF3IC07.oob.disa.mil (Postfix) with ESMTP id 3yJ5Hs3ZHdz1wyKW for ; Thu, 19 Oct 2017 23:49:29 +0000 (UTC) X-EEMSG-check-008: 122427209|UPBD19PA14_EEMSG_MP14.csd.disa.mil X-EEMSG-SBRS: 1.6 X-EEMSG-ORIG-IP: 209.85.192.195 X-EEMSG-check-002: true X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0DAAAADOelZdMPAVdFcHAEBBAEBCgEBgzOCJY4Zjz6YLYE1A1wKE4UohQ0/GAECAQEBAQEBARMBCgsMByYxhUsZAQE3AYEUAQUBNYhPgVGeJECLIYJYOoMIAQEFiBMBKQgJAQiDHYE2UYw6ggsMgxKSYI54hXCOcg1yimOHQgKVRwIEAgkCBhQkgRUfgQeBDDQhCB0Vgy2CTYIhMTaLDgEBAQ X-IPAS-Result: A0DAAAADOelZdMPAVdFcHAEBBAEBCgEBgzOCJY4Zjz6YLYE1A1wKE4UohQ0/GAECAQEBAQEBARMBCgsMByYxhUsZAQE3AYEUAQUBNYhPgVGeJECLIYJYOoMIAQEFiBMBKQgJAQiDHYE2UYw6ggsMgxKSYI54hXCOcg1yimOHQgKVRwIEAgkCBhQkgRUfgQeBDDQhCB0Vgy2CTYIhMTaLDgEBAQ Received: from mail-pf0-f195.google.com ([209.85.192.195]) by UPBD19PA14.eemsg.mail.mil with ESMTP; 19 Oct 2017 23:49:29 +0000 Received: by mail-pf0-f195.google.com with SMTP id b6so8302728pfh.7 for ; Thu, 19 Oct 2017 16:49:27 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id; bh=SexmkeFIZBPtZonhwarhvk+TC/w0U5yeXazGW4vMFRc=; b=UN97GBzx+SvroPrmu0xt5Rr/MH8YwVQzn0lIfUrecgHO3OGnykLD86BvZLsZqfr2D4 /b8OiDC1Znfi6oX+8MZlBxk6Oa2QmPMxD8RgyOTzoJDDRoOQu/T0Jn/5XlJmL7OKQeXA 2pyPYxBkq5GpKjaNDTl84ZzzbW/qnDJSJ2cxi8LKEA70jbZaE3mJo/pGLbvOzLeTxqfs SPlw+HxyI6VrsGVDaoJz00lTfaCobXX7WpHrpOnHV8In0gE7y9i3uPEH0CbKsC7z7r6X 8T9nQB97J757/f4UgV8bw2hlDXlBL4GVTOt7gpkXSI33KKFkkMno6yyBCfbSD/yUSuEb jsUw== X-Gm-Message-State: AMCzsaWYwD4YBV2hgC0LU6K12NvC4111BIMmAC8w/Mow5HlR0o84MfY/ tFQkK7TNk/pjjvjEm6p39RDSGr2/iTQ= X-Google-Smtp-Source: ABhQp+RkZ7ccHnCjSrvGk/FPjtCqkdjOkMS9HJHU5iZiSj3uDeW7XF5JHFGJ++xqGkw3bHTyndlsRg== X-Received: by 10.159.204.148 with SMTP id t20mr2666310plo.115.1508456966022; Thu, 19 Oct 2017 16:49:26 -0700 (PDT) Received: from jaekyun.seo.corp.google.com ([172.30.114.42]) by smtp.gmail.com with ESMTPSA id o9sm28725087pfk.162.2017.10.19.16.49.24 (version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Thu, 19 Oct 2017 16:49:25 -0700 (PDT) X-EEMSG-check-009: 444-444 To: selinux@tycho.nsa.gov Date: Fri, 20 Oct 2017 08:49:15 +0900 Message-Id: <20171019234915.21820-1-jaekyun@google.com> X-Mailer: git-send-email 2.15.0.rc0.271.g36b669edcc-goog X-Mailman-Approved-At: Fri, 20 Oct 2017 08:29:07 -0400 Subject: [PATCH] libselinux: android: support exact match for a property key X-BeenThere: selinux@tycho.nsa.gov X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Security-Enhanced Linux \(SELinux\) mailing list" List-Post: List-Help: From: Jaekyun Seok via Selinux Reply-To: Jaekyun Seok Cc: Jaekyun Seok Errors-To: selinux-bounces@tycho.nsa.gov Sender: "Selinux" X-Virus-Scanned: ClamAV using ClamSMTP Performs exact match if a property key of property contexts ends with '$' instead of prefix match. This will enable to define an exact rule which can avoid unexpected context assignment. Signed-off-by: Jaekyun Seok --- libselinux/src/label_backends_android.c | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/libselinux/src/label_backends_android.c b/libselinux/src/label_backends_android.c index cb8aae26..4611d396 100644 --- a/libselinux/src/label_backends_android.c +++ b/libselinux/src/label_backends_android.c @@ -258,8 +258,13 @@ static struct selabel_lookup_rec *property_lookup(struct selabel_handle *rec, } for (i = 0; i < data->nspec; i++) { - if (strncmp(spec_arr[i].property_key, key, - strlen(spec_arr[i].property_key)) == 0) { + size_t property_key_len = strlen(spec_arr[i].property_key); + if (spec_arr[i].property_key[property_key_len - 1] == '$' && + strlen(key) == property_key_len - 1 && + strncmp(spec_arr[i].property_key, key, property_key_len - 1) == 0) { + break; + } + if (strncmp(spec_arr[i].property_key, key, property_key_len) == 0) { break; } if (strncmp(spec_arr[i].property_key, "*", 1) == 0)