From patchwork Mon Nov 6 15:00:40 2017 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Petr Lautrbach X-Patchwork-Id: 10043731 Return-Path: Received: from mail.wl.linuxfoundation.org (pdx-wl-mail.web.codeaurora.org [172.30.200.125]) by pdx-korg-patchwork.web.codeaurora.org (Postfix) with ESMTP id 7003D602BF for ; Mon, 6 Nov 2017 15:34:39 +0000 (UTC) Received: from mail.wl.linuxfoundation.org (localhost [127.0.0.1]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id 51C8328468 for ; Mon, 6 Nov 2017 15:34:39 +0000 (UTC) Received: by mail.wl.linuxfoundation.org (Postfix, from userid 486) id 4689C29EEB; Mon, 6 Nov 2017 15:34:39 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on pdx-wl-mail.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-4.2 required=2.0 tests=BAYES_00, RCVD_IN_DNSWL_MED autolearn=ham version=3.3.1 Received: from uhil19pa09.eemsg.mail.mil (uhil19pa09.eemsg.mail.mil [214.24.21.82]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id 6464628818 for ; Mon, 6 Nov 2017 15:34:34 +0000 (UTC) Received: from emsm-gh1-uea10.ncsc.mil ([214.29.60.2]) by uhil19pa09.eemsg.mail.mil with ESMTP/TLS/AES256-SHA; 06 Nov 2017 15:34:30 +0000 X-IronPort-AV: E=Sophos;i="5.44,353,1505779200"; d="scan'208";a="5509986" IronPort-PHdr: =?us-ascii?q?9a23=3ANbQJ4xzjgy8gxBjXCy+O+j09IxM/srCxBDY+r6Qd?= =?us-ascii?q?1u0TI/ad9pjvdHbS+e9qxAeQG9mDs7QZ16GJ6ujJYi8p2d65qncMcZhBBVcuqP?= =?us-ascii?q?49uEgeOvODElDxN/XwbiY3T4xoXV5h+GynYwAOQJ6tL1LdrWev4jEMBx7xKRR6?= =?us-ascii?q?JvjvGo7Vks+7y/2+94fcbglUmDaxe7N/IRq5oQjTq8UdnJdvJLs2xhbVuHVDZv?= =?us-ascii?q?5YxXlvJVKdnhb84tm/8Zt++ClOuPwv6tBNX7zic6s3UbJXAjImM3so5MLwrhnM?= =?us-ascii?q?URGP5noHXWoIlBdDHhXI4wv7Xpf1tSv6q/Z91SyHNsD4Ubw4RTKv5LplRx/yjC?= =?us-ascii?q?cMKiA3/mfZhMdtiK5XuQ+tqwB6z4PSfYqbNudxfrnFcN0aW2RPUMVfWC5PAo2h?= =?us-ascii?q?d4sCDfcNMOhGoInmvFYCsQeyCBOwCO/z1jNEmnn71rA63eQ7FgHG2RQtEcgQv3?= =?us-ascii?q?TIttX+KaEcXvqozKnU1zXMdOlZ1iv96IPVdR0hufWMUqhtccrN00kgDBnKg06K?= =?us-ascii?q?qYP7IjyV1v4Cs3SB4+V8UuKvjncqpgdsqTas3schkpTFi40ax1ze9Sh13Zw5Kc?= =?us-ascii?q?O3RUJle9KoDYNcuz+GO4ZyWM8uXm9ltDggxrEbupO2cjIGxIokyhPZdveJaZKH?= =?us-ascii?q?4gj5W+aUOTp4gXVld6+hiBuq6kigz/H8VtGz0FZXsipJitnMuW4J1xzU8sWHVu?= =?us-ascii?q?Fy/l2g2TaSzADf8P1EIEAomqrbLJ4t2LgwmYYIsUvfBCP2nUT2jKuOekUl/Oin?= =?us-ascii?q?9fjnb637qpKTOIJ4kAHzPrk0lsChDuk0LBICU3WD9eS5zrLj/En5QLtQjv0xl6?= =?us-ascii?q?nUqIvaKtofpq64BQ9Vz4ki5w+kADehzdQYm2UII0xeeB+ck4joO03BIPD/Dful?= =?us-ascii?q?hVSsiy1ky+rJPr3mHJXBNmLDn6v5fbZh905czxI+zdJY55JSEL4BPPLzVVX3tN?= =?us-ascii?q?HDDB85NAq0w+P9B9VmyoMRR3iPArSDPKPVq1+I6folI/OQa48NpDb9N/8l6ubs?= =?us-ascii?q?jX87g1ASYaqp3YAQaHC+H/RmPV6UYXTogtccHmYFpRc+TOr2iF2fSzJTYGyyX6?= =?us-ascii?q?0k7DEhFI2mFZvDRpyqgLGZxCe0AIZZaX5AClCNDXfocJ6JW/YSZy2MPMBtiDsE?= =?us-ascii?q?VaKuS4U5zxGhqBf6y6Z7LurT4iAXqJXj1N5z5+LOix4y8T10At+H3G6TVWF0mX?= =?us-ascii?q?kERzgs3KBwuUZ90EuM0bBkg/xEEtxe/+5GUhsgOp7G1OF1F9fyWgfdcdiTU1am?= =?us-ascii?q?Xs+qATcvQdIt29UOeVpyG82+jhDf2CqnG74Vl7qXBJMq9qLTwX3xKNhhy3bc1K?= =?us-ascii?q?gslF4mQtNROm2gg65w7QnTB4rSnEWemKemb6Mc3DTC9G2b12qBoFlYUBJsUaXC?= =?us-ascii?q?RX0eZkrXrdP/5k7ZSr+uDa0rMgpHycKYLKtFcMfpjVZHRPf9JtvSeWSxlHmsBR?= =?us-ascii?q?yQ3LODcJLqe3kB3CXaEEULjRgT8mycNQg/HSesuHreAyZ0FVLueEPs6e1+p2mn?= =?us-ascii?q?QUAq1Q2KaFdh17Wt8B4PmfOcU+8T3q4DuCo5pTR0HVK939fIBNqavAdhcrtTbs?= =?us-ascii?q?464Fddz23ZrxZ9PpuiL698mlEebx57v0T01xV4Eo9Ai9QlrGs2zApuLqKVyF1B?= =?us-ascii?q?dymC0pD2JrLXK3Ly8Quqa67O21HSyc2W+6kU6PgirFXjpg6pHFI483p7y9lVz2?= =?us-ascii?q?ec5pLSAQoRS53xUUE39wVhqrHZeCY95ITU1WB2PamzqD/C1MojBPE5xRa4Y9df?= =?us-ascii?q?LKSEGRfoHMIHHciuKfIlm0KyYx0eIO9S8bQ4P8S8d/uJwKSrJvpvnCq6jWRb54?= =?us-ascii?q?Bwyl6D+DB4SuHWxJYF3/GZ3gycWjfnkFihs974mYZYZTETBGWz0y7kC5BNZqdq?= =?us-ascii?q?Z4YEFX+uI9GrxtV5n5PtQWNX+0O4ClMJ3c+odgCeb1rj0g1MzU4Xu2ComTOkzz?= =?us-ascii?q?xolDEktrGf3CLUw+TlbxoHJnVGRHJkjVfrL4m0isoVXE6yYwgvihSl+V7wx7JH?= =?us-ascii?q?q6RnM2nTXUBIcjD4Lm54VquwqqSNY9RU6J4zryVYTv68bkuHSr74uRca1DnjH2?= =?us-ascii?q?RGzjAhaz6qoon5nwB9iG+FMHZ8sWfWecBqyhfb/9HTWflR3j8aSyZikjnXGkKw?= =?us-ascii?q?P9+38tWIj53DqPyxV3q9Vp1Pdinm1Z2AtCqn6m12Bh2/heq/lcHnEQg91y/72M?= =?us-ascii?q?JnVSHJrBb6eIbrzaO6PfhgfklyC1/289B6FZ1mkossmJEQ3mAXhpGU/XocjWf/?= =?us-ascii?q?KM5b1rz6bHoMQz4L3tHU7RP+2E17L3KJwYP5WWmGwsd7Ydm1fH8W0Don789WEK?= =?us-ascii?q?eU8KBEnSxtr1qiqgLRZfx9kSkHyfQy734bjfoEuBEwziqBGbAeB05YPTbjlx6Q?= =?us-ascii?q?9dCxsL1XZHqzcbi3zEd+ns6uDLeZogxHW3b2ZJEiHTR27sphLFLAynrz6pvreN?= =?us-ascii?q?PId9IcqgWUkwvcj+hSMJ8xjuAFhTdjOW3jpX0q0eg7jQBw0pGgp4WHNn5t87yj?= =?us-ascii?q?Ah5DLDH1fMQT+iz3jalCgMmW0YevHo9uGjoVRpfoS+ynEC4Kv/T9KwmOCCE8qm?= =?us-ascii?q?ucGbfHAw+f7lppomnRE5CtKn6XJGMVzdN8SxmBPEZfmhwbXC0mnp4lEQCn3NTh?= =?us-ascii?q?f11k5jAV/VP3thpMyv5oNhXmXGfQvgGoZi0zSJiFIxpc9htC6FvNMcyC8uJzGD?= =?us-ascii?q?lV/p6hrQyJNGOWfAFIDWYHWkyKGV/jIqWu5dnH8+idGOWyNf3ObquSqeZGTfeH?= =?us-ascii?q?2Yqv0pd6/zaLLsiPMGNtD/sn2kpEWHB0AMrZlCsSRCwQjSLCddabpA27+i11sM?= =?us-ascii?q?+w7OjrVBjo5YuVBLtYKc9v9AyugaefK+6Qgz50KSxC2pIC33PIzaIQ3FoViyBu?= =?us-ascii?q?bDSiC6gPtSvXQKLXgK9XAAYRazlvO8tQ86I8wg5NNNbVitPvyLF3k+U1BE1DVV?= =?us-ascii?q?z9ncGpftcHLHuhO1PCHkqLM66GJTLTycHtfay8UaFQjPlTtxCovzabCVXsPiyb?= =?us-ascii?q?lzTyWRCvMPtMjDqHPBxQuYG9dAxiCW7/Q9LncBK7NMV7jToswb07nnnKL3ITMS?= =?us-ascii?q?Bgc0NRqb2d9ThXje54F2xF73plNvWEmz2D4+nDNJkZreFnAj9qmOJe4XQ6zaZV?= =?us-ascii?q?7S5fSfNpmCrStMNuo0q8nuiB0DVnTAFOqjFNhI6RukViI6rZ/IFaWXnY5BIN8X?= =?us-ascii?q?mQCxMSqttjC93vv6RQxcbUlK/oMjhN7cjU/cwGC8jTMsKHP2IrMQD1Fz7MEAsF?= =?us-ascii?q?UTmrOHnEiExcn/GS8XuVo4MnpZfyg5UOS6VUVFovGvMdEERlE8QIII1rUTM8jb?= =?us-ascii?q?6bkMkI6GKkoxneXspaoI7IW+mVAfX3NjmZi7xEaAEJwbP8NosTMYL611Zlallg?= =?us-ascii?q?k4TAA1DQUsxVoi19cg80p11A8GR5Tm02wU7lcASt4X4NGv6yhRE2kAx+bvou9D?= =?us-ascii?q?r3/1g3IV/Kqzcqn0kqhdXpmzaRfyDtLK2oR4FZFzL0t1QtMpP8Wwt1axO9klZg?= =?us-ascii?q?NDrfRLJRiKBgdXxxhw/aoptPGv9cQbdCYBAO2fGdf+8o3khEqiW72U9H4vPICY?= =?us-ascii?q?F8mwsxb5GjtWhA1B5jbNMuPqPQJbBJwUVXhqKApi+ozP4+wQ8EK0YL7mySZDYC?= =?us-ascii?q?uFYUObk+Oyqo4uts5BSflDRZZmgMVucloulx+0wnIeSA1SXg0rBYKk+vK+OfMr?= =?us-ascii?q?mZu2nclc+IWF8w0F0Hl1Vd97hszcgja1aUV1wozLaJExQJMtDCJh9Tb8tT83je?= =?us-ascii?q?ZimOsePQwZ5vOIW9DO/oR/eUtKkImkKkABopH4MU48QaAJas1EDYLcH6LL8K0h?= =?us-ascii?q?gi+APrJFCZA/tTYxKLjC0Lo8ehw59rxYNdPC0SAX1hMSWr4bbavhIlj+aGXNcx?= =?us-ascii?q?ZHcaQpYIO2koWMKkgS5ZvnVBDD6x0u4DzgiN8SP8rDzKDDbgd9pjeOuUZRR0Bd?= =?us-ascii?q?Gq+DU/9q+2iULX8pTePGz1KNViu9/V5uwBvZqHDe1bTaVluUfGh4ZYX2CqU3LI?= =?us-ascii?q?EdOtKJjwcZMjbdroCnuhU1y/jDw0T8HtPNatMKeIgAfoRZpKv4mBxjwjM9GyFi?= =?us-ascii?q?0GERdqu+4D/L58ZREEY5cjexHoswU+OLChLwiA19WvQ2CtKTxQT/ZF1ui1fL1X?= =?us-ascii?q?wDAqbuOjxnsgU4s2z++p/k4RXJsKlA3Rxe6/Z4lCVij+AmdSdBvJpScijWduK/?= =?us-ascii?q?gyzfklwBPTq1YcKTCKePZuaGxesNE2HUmSLmluCmokW1+cipLO4hSq37AT4yRd?= =?us-ascii?q?n9FU0elesHbmp5HRfSiiVbCsp5jOryUgat0mrLFrPoz4PsuKrpXekSLDTJPIqA?= =?us-ascii?q?2KTDa6F+ZGmthXOC9XXPtIlns5NsEdpYVB7k4xVsM/J7NREqksuq6lZiZkDSII?= =?us-ascii?q?yi8ZTYyA1iQYguigw7vaiguQcJM6PRweqppCmNwdXDVtbyMCvq+sTZvWmHGASm?= =?us-ascii?q?gKJgcT4gBM5AMPlo9wYuDl7pDHTIVJyzJMpfJ7TDfLHIFy91TnUmGWnUT4SPK5?= =?us-ascii?q?nu2nxw5d0PLs0tgeWB5+E0ddxP1blko2J75pNaYcpInKsiWHdUnipmLi1POmJE?= =?us-ascii?q?VNyc3Tb1D4FI3FtW7mXS0G93wUQotPyH/EGJQXlAp5b70rq0tQL4C8fUb+/Cck?= =?us-ascii?q?x4VvH7m3T8yrwEwlrXkeTSewD9VBE/1msE7QWDB9eZ+rsojlO5NITm9T45Cdql?= =?us-ascii?q?ZZkERxMyGi05ZcLd9C4iIUVjhVvTqdpMeySNFE2cJuE58MJdJ/tmzhGK9YPZie?= =?us-ascii?q?uGc6urrxxX/F4zo8qku1xC2vG6+kSOJU520eFR8zJ2uErkkgEvAh/XrM/VDVql?= =?us-ascii?q?B74eNbCaaVjUlrpzZ9BJ9ODC5T1X+5N1RzUGVGs+JCJaTXdMxTXeI/agKxNBwl?= =?us-ascii?q?C/EmxVCJ8l9pknvjZSx9qBda8TjHXwYoTSkVnqvtmToGp868Nz8VV45EYDc8Yy?= =?us-ascii?q?rLMA+UhSdXvBNDZE5wQJAZHsxJ+7cF0otI5sDCU1qjKTkZXBx+MQI1yeBfmlBe?= =?us-ascii?q?v0WYYy/dERGldfLIsh1pY8idstKmLPPk8whZkI/ntv4397kbTX28hQKtWczer5?= =?us-ascii?q?P7ttCSrkuOb7v4PPehbn/dVzXMlhewhao+D5bW4SfTNhZbK4Ngxnoge5ThDnTL?= =?us-ascii?q?PRteLaIBO0VbTbx6aclBou1Ce89kYrgG9rFwCR+cWxPvHJCvrONcIVbNRDTeKC?= =?us-ascii?q?GB/fKjoY7J6rzdU+fgbNSWx3nbW6J3Iot66T7jFrfvy4Be/k721elx9kNmU1fJ?= =?us-ascii?q?KTuMrNL/KQMX/8mtalHtvoU3Ej/MBpd/jmbtzFlad8ULWy2q7IgYyJRB5XbyU+?= =?us-ascii?q?14yE/zsPZW97Z+94k6+LVpydqwJafOKPRVrU5nDQKSBgVx7JktB3J/R29JaO8L?= =?us-ascii?q?NPjRZbgZjdzpq+3vFawY8huV++JDadvAOk7OhNKyCi2GRhxChwcBriQWLg2C2P?= =?us-ascii?q?6Zg6V0U9qqpfDl2kIx5FizNhEGzK1s5YeA/qqHuurXYgDMwrcaQafqR9n8rrI2?= =?us-ascii?q?t0OV//0km6YEenZpbA2/DOgdSskdy3/izaAryCIhCMbDEKzg+fFdTXI5nzTgm5?= =?us-ascii?q?9nE1UQBPwUAaKB/Z5CkWcgh+zZKtoWf7hEmmaLDhOkE7kCyXux5yuWJmlljAvO?= =?us-ascii?q?3AvrQWOv9l/2sDN3QTfRz9f5jEVZTL63BV1dXyCxI093rCuPPBb0tNrwoak16U?= =?us-ascii?q?Y2Mmr4tNKCimSsI7ZXH8zlK9yaPyY0uFwWjJorRtyswoAXA9y9L8kN8HtmdPvR?= =?us-ascii?q?93urkzNdo6dAn4fe5tqV+vDXEHS7ga2VtaiCxDdCyncipVE/8NegNvPQ6NKWX/?= =?us-ascii?q?SkzWERTz1wuwHZRR66tqTbr0wIOUyMyErLmY0LMctD0nYkzUzm//YsQM4t+wpC?= =?us-ascii?q?DIrAYOkCpT/rMjvu3Vmfe843VjWZ0zZPBV31EEJ4GaYm12LyvcLJiW/Q9Ec1Ro?= =?us-ascii?q?l0bEHomRt3AJgmJk039VgX2C0DERIXZhyBC7GoH0vlJ5MeVUcfcRSHwKS6eqAv?= =?us-ascii?q?0E1r2Lyv+PPcbexyBqoKLPZdjReCnENFFZISsK0eRq98elBG+a7PvAfiF5ToX/?= =?us-ascii?q?jolHo3L/21QdpW8cMHuHs45AawWR6g5Y1E77YBh5CCbrREboTUvMBg80dn4iYC?= =?us-ascii?q?djBXgBdhixO2S+Ycq/7479fGsZqo5eeuVLo3SOUM7Rc0HXl+g4H2gF89vdHdz/?= =?us-ascii?q?1cRZHNiYTj7ABNJGaHuInA3BlmN+UON4Krca1k93UGOygROXIOMsCLa/kn+SNt?= =?us-ascii?q?Nivc50BaCMMWedwYJNbNmRxTikDxV7Fc6MzbGkOfC4d0cMwo9HT4yDQ08Zs6T+?= =?us-ascii?q?bh5yS7JZTB4FFXP/JMlj9glNTcq+gJ2fDSEjQY4WGFaxhpxSOP05+NC/fs8uWL?= =?us-ascii?q?zNHbTUgGEjQ3U4daIzqC4henS/GwlJjmXQKY8MjzgIgxdEiIXHy+gLwFsrpQEe?= =?us-ascii?q?5Hkij70SRRFpvuh/6MrtSi521ZtlxBEIZu4hzIA6pfPpBhNhT+iManXE98BjHw?= =?us-ascii?q?eMvMbBohpPKWxvsQ4+V5L0b+Z4gbIhICy77g9XVVTg9uSKPrsVeYXOIRYsBmSP?= =?us-ascii?q?DFrn1O94JgKrEPM0KZpJP3rzdEslY2DxE1aLUotDxValHOnBFJW6bzoLMAixUc?= =?us-ascii?q?XsR/uUJXHWKwJX8x5zvAVaROlqWRD+YV8jqLRKwUT0poKj9+Qw+y2Jh2ebumg/?= =?us-ascii?q?5Hsm1Cni5mrvklyTpmSwWguSH2oaICxy4g8qmitDodoXxFUvmekyDQBFVMyPQK?= =?us-ascii?q?iqkdBGjm6Vy4e3QDd4zy4L9mJcv874Uh5WowYQk7dS0cQeugEz3wj7+PAoGXst?= =?us-ascii?q?JchB6MuN3Jbb+3LCgSKqoyxAnmR3h8zgjehghn/HEMQjW6498uPJ+9Nto9xiq0?= =?us-ascii?q?BWjbc04B4r9IsMv0rlMLUOo2Zk9iwGp91siLXCsNS9LTG2wtlAgrdX1EcI5f6R?= =?us-ascii?q?8dD6QohzeIvqpF/gETezrUEJ6q+orXncfOx3Y9S81mxmTIqa2ZnpkqymFqm8to?= =?us-ascii?q?7i6Sv3Qfb/fXXNFqAnjvzYpf0uj+Z/KxsuAbVotp1qmuXOUFMsm59mu8wI9qVV?= =?us-ascii?q?O9xrQCA1q5N/cOxrnFXCehSG2YQfqEfnONnjY4N07y4AenLkczaMhUtUM9NfHC?= =?us-ascii?q?hpFEnQ37Tbx0XjmQpUPczGE7P+Iabxg2uIa7dAMUV+MRYumcJfQ0wPIgElcMaG?= =?us-ascii?q?XJHSRuAe+srVGthJR7O2ln4UjiZuTt9h7pPcCKGhkAC4HatYJx+f2mSWKdI39v?= =?us-ascii?q?0gN9MFNy9+jBC1Q7rvVcfIqJndjMm9R71vYId/NsMS07p94SlZtv6Y2V0MeRbR?= =?us-ascii?q?HR1Y3/JdDPrfieBP3T1UMqentVUrABewP6+506PsIlW73UBbZZuA4TCrQ6QJwg?= =?us-ascii?q?MWfx87p5LB1ycg7Xeru0hsjqpuSWZppbvXPW6UgwLCjEsR0Z1vO0VRB7b4yth3?= =?us-ascii?q?jqIpA/XDFBr9p2BRZ9AYtPHd8ArwqgA56Jl6G7i8Ox91l8u+AUrar6EurK28ih?= =?us-ascii?q?34VtQ5ha4lSGPDTUBKlsmERllOWyguzb35n3E8zifM0LVOlhTm7CcL/GEZ21Ki?= =?us-ascii?q?iSNcLkZ05G77mc3apiUhWfYSD2Q6uLuS6/OfV6/0o70I14fevUzDwr9b3b3sX9?= =?us-ascii?q?Z30I7huk+GWEMJpZ8UziGf3VXxUST+GMtmliA/45d4zxod8DLcZq5NGB/xN55T?= =?us-ascii?q?9CmJ+dJ6G8slXG02pheJ7bJVev0CE8D9pZaC+jOFch1DeK4k/WBm5Re439ccQ?= =?us-ascii?q?=3D?= X-IPAS-Result: =?us-ascii?q?A2ASBABbgABa/wHyM5BbHAEBBAEBCgEBgwgpA2RuJ48Qjia?= =?us-ascii?q?PXohkggoRGAOKCkAXAQEBAQEBAQEBAWoogjgkgkMDAwECeQMJAQE4AQ8IAwFTG?= =?us-ascii?q?QWITYFEDQOtfIs5gy6CB4FThm+DfQGFLgEEiiaHOJAwh2aHOIVRDYJ0iHOHTZY?= =?us-ascii?q?WgTkgATaBbFUlFUmCZAmDCIFPdok0DRiCHQEBAQ?= Received: from tarius.tycho.ncsc.mil ([144.51.242.1]) by EMSM-GH1-UEA10.NCSC.MIL with ESMTP; 06 Nov 2017 15:34:29 +0000 Received: from prometheus.infosec.tycho.ncsc.mil (prometheus [192.168.25.40]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id vA6FYIiW031743; Mon, 6 Nov 2017 10:34:21 -0500 Received: from tarius.tycho.ncsc.mil (tarius.infosec.tycho.ncsc.mil [144.51.242.1]) by prometheus.infosec.tycho.ncsc.mil (8.15.2/8.15.2) with ESMTP id vA6FYGMf111993 for ; Mon, 6 Nov 2017 10:34:16 -0500 Received: from goalie.tycho.ncsc.mil (goalie [144.51.242.250]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id vA6FYGae031738 for ; Mon, 6 Nov 2017 10:34:16 -0500 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A1C0AQDxfwBa/yYWGNZbHAEBBAEBCgEBg?= =?us-ascii?q?wgpA2RuJ44cdI4mj16IZIIRChMIhSAChGg/GAEBAQEBAQEBAWuFRwZ5EDkBF1c?= =?us-ascii?q?ZiFKBRA0DrXuLBwEBAQcogy6CB4FThm+DfQGFLgWKJoc4kDCHZoc4hVENgnSIc?= =?us-ascii?q?4dNlhaBOR84gWxVJRVJgmQJgwiBT3aJNA0Ygh0BAQE?= X-IPAS-Result: =?us-ascii?q?A1C0AQDxfwBa/yYWGNZbHAEBBAEBCgEBgwgpA2RuJ44cdI4?= =?us-ascii?q?mj16IZIIRChMIhSAChGg/GAEBAQEBAQEBAWuFRwZ5EDkBF1cZiFKBRA0DrXuLB?= =?us-ascii?q?wEBAQcogy6CB4FThm+DfQGFLgWKJoc4kDCHZoc4hVENgnSIc4dNlhaBOR84gWx?= =?us-ascii?q?VJRVJgmQJgwiBT3aJNA0Ygh0BAQE?= X-IronPort-AV: E=Sophos;i="5.44,353,1505793600"; d="scan'208";a="108194" Received: from emsm-gh1-uea11.ncsc.mil ([214.29.60.35]) by goalie.tycho.ncsc.mil with ESMTP; 06 Nov 2017 10:34:16 -0500 IronPort-PHdr: =?us-ascii?q?9a23=3AETb+ih8wJB/ka/9uRHKM819IXTAuvvDOBiVQ1KB4?= =?us-ascii?q?0eocTK2v8tzYMVDF4r011RmSDNWds6oMotGVmpioYXYH75eFvSJKW713fDhBt/?= =?us-ascii?q?8rmRc9CtWOE0zxIa2iRSU7GMNfSA0tpCnjYgBaF8nkelLdvGC54yIMFRXjLwp1?= =?us-ascii?q?Ifn+FpLPg8it2e2//57ebx9UiDahfLh/MAi4oQLNu8cMnIBsMLwxyhzHontJf+?= =?us-ascii?q?RZ22ZlLk+Nkhj/+8m94odt/zxftPw9+cFAV776f7kjQrxDEDsmKWE169b1uhTF?= =?us-ascii?q?UACC+2ETUmQSkhpPHgjF8BT3VYr/vyfmquZw3jSRMMvrRr42RDui9b9mRgLohi?= =?us-ascii?q?kZOTA382PYisJrga5HvB6svQBzz5LIbI2JMvd1Y6PTfckdRWpERstfTTJOAp+m?= =?us-ascii?q?b4ASCeQOJ/tYr5Xnp1QVtxSxGQmsD/7oxz9Qgn/5x7A60/g7EQ7dxgMtBMgOv2?= =?us-ascii?q?rJo9X1LqgSTfq5w7XPzTXGdv5b3yr25ovQch05v/2AQL19fdDPxUQgDQ/JkEuc?= =?us-ascii?q?pZbrMj6WzugBrXSX4u56We6yhWMrtRt9riWsy8oikIXFmIEYx1bZ/itj2ok1P8?= =?us-ascii?q?e3SEtjbN6kDpRQsyaaOpNrQsMhXW5ovDs2x7keuZGhYCQHy44ryADBZPyCaIiI?= =?us-ascii?q?7QjvVOOLLjd5gHJpYre/hxe28US4y+38UNe70EpSoyZbj9XBuWoB2wLc58SdVP?= =?us-ascii?q?dx4F2t1DiM2gzL7+FLO0E0la7VK547xb4wk4IesVzHHiDshUX2kLWWeV4+9eWz?= =?us-ascii?q?8eTofKjppp+GOI9okA3xLqMumsmnDeQiLgcOR3Sb+fi71LD75k32XrFKjvwwkq?= =?us-ascii?q?nEv5HXPtgbp66lDA9V1YYv8RC/Dyy839gCknkHK0xFK1q7iN3yNlXPJu3oJeuu?= =?us-ascii?q?iFSr1jFwzrbJOaOyLI/KKy37nav7NZJ09lJGwgM4zZgL/5ZdF60bKvvbQEL9tN?= =?us-ascii?q?XESBQ+NlrnkK7cFNxh29ZGCiq0CaiDPfaKvA=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0C1AQDxfwBa/yYWGNZbHAEBBAEBCgEBg?= =?us-ascii?q?wgpA2RuJ44cdI4mj16IZIIRChMIhSAChGg/GAEBAQEBAQEBAQFqKII4IoJFBnk?= =?us-ascii?q?QOQEXVxmIUoFEDQOte4sHAQEBByiDLoIHgVOGb4N9AYUuBYomhziQMIdmhziFU?= =?us-ascii?q?Q2CdIhzh02WFoE5HziBbFUlFUmCZAmDCIFPdok0DRiCHQEBAQ?= X-IPAS-Result: =?us-ascii?q?A0C1AQDxfwBa/yYWGNZbHAEBBAEBCgEBgwgpA2RuJ44cdI4?= =?us-ascii?q?mj16IZIIRChMIhSAChGg/GAEBAQEBAQEBAQFqKII4IoJFBnkQOQEXVxmIUoFED?= =?us-ascii?q?QOte4sHAQEBByiDLoIHgVOGb4N9AYUuBYomhziQMIdmhziFUQ2CdIhzh02WFoE?= =?us-ascii?q?5HziBbFUlFUmCZAmDCIFPdok0DRiCHQEBAQ?= X-IronPort-AV: E=Sophos;i="5.44,353,1505779200"; d="scan'208";a="5596224" X-IronPort-Outbreak-Status: No, level 0, Unknown - Unknown Received: from ukel19pa08.eemsg.mail.mil ([214.24.22.38]) by emsm-gh1-uea11.NCSC.MIL with ESMTP; 06 Nov 2017 15:34:14 +0000 X-EEMSG-check-005: 0 X-EEMSG-check-006: 000-001;92cdb4e0-f2bd-43d1-b8f5-2985354d87e4 Authentication-Results: ukel19pa07.eemsg.mail.mil; dkim=neutral (message not signed) header.i=none X-EEMSG-check-008: 281861674|UKEL19PA07_EEMSG_MP4.csd.disa.mil X-EEMSG-SBRS: 3.5 X-EEMSG-ORIG-IP: 209.132.183.28 X-EEMSG-check-002: true X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0BIAQATeQBahxy3hNFcHAEBBAEBCgEBgwgpAWZuJ48QjiaPXohkghEKG4UgAoRnQBcBAQEBAQEBAQETAQEBCgsJCCgvhR8DA3kQOQEXVxmIUoFEDa1yiwcBAQEHKIMuggeBU4Zvg30BhS4FiiaHOJAwh2aHOIVRDYJ0iHOHTZYWgTkgAYIiVSUVSYJkCYJjJYFPQDaJNA0Ygh0BAQE X-IPAS-Result: A0BIAQATeQBahxy3hNFcHAEBBAEBCgEBgwgpAWZuJ48QjiaPXohkghEKG4UgAoRnQBcBAQEBAQEBAQETAQEBCgsJCCgvhR8DA3kQOQEXVxmIUoFEDa1yiwcBAQEHKIMuggeBU4Zvg30BhS4FiiaHOJAwh2aHOIVRDYJ0iHOHTZYWgTkgAYIiVSUVSYJkCYJjJYFPQDaJNA0Ygh0BAQE Received: from mx1.redhat.com ([209.132.183.28]) by ukel19pa07.eemsg.mail.mil with ESMTP; 06 Nov 2017 15:00:54 +0000 Received: from smtp.corp.redhat.com (int-mx04.intmail.prod.int.phx2.redhat.com [10.5.11.14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.redhat.com (Postfix) with ESMTPS id B69305F176 for ; Mon, 6 Nov 2017 15:00:50 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.2 mx1.redhat.com B69305F176 Received: from workstation.brq.redhat.com (unknown [10.43.12.121]) by smtp.corp.redhat.com (Postfix) with ESMTP id DF22A5D9C7; Mon, 6 Nov 2017 15:00:49 +0000 (UTC) X-EEMSG-check-009: 444-444 From: Petr Lautrbach To: selinux@tycho.nsa.gov Date: Mon, 6 Nov 2017 16:00:40 +0100 Message-Id: <20171106150040.25300-4-plautrba@redhat.com> In-Reply-To: <20171106150040.25300-1-plautrba@redhat.com> References: <20171103082211.GA8075@pl-rpi.tpb.lab.eng.brq.redhat.com> <20171106150040.25300-1-plautrba@redhat.com> X-Scanned-By: MIMEDefang 2.79 on 10.5.11.14 X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.5.16 (mx1.redhat.com [10.5.110.25]); Mon, 06 Nov 2017 15:00:50 +0000 (UTC) Subject: [PATCH 3/3] python/semanage: Enforce noreload only if it's requested by -N option X-BeenThere: selinux@tycho.nsa.gov X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Security-Enhanced Linux \(SELinux\) mailing list" List-Post: List-Help: Errors-To: selinux-bounces@tycho.nsa.gov Sender: "Selinux" X-Virus-Scanned: ClamAV using ClamSMTP We want to call semanage_set_reload() only if -N option is used. Fixes: $ sudo umount /sys/fs/selinux $ sudo semanage fcontext -a --type=postfix_local_tmp_t /var/opt/01789667 SELinux: Could not downgrade policy file /etc/selinux/targeted/policy/policy.31, searching for an older version. SELinux: Could not open policy file <= /etc/selinux/targeted/policy/policy.31: No such file or directory /sbin/load_policy: Can't load policy: No such file or directory libsemanage.semanage_reload_policy: load_policy returned error code 2. (No such file or directory). SELinux: Could not downgrade policy file /etc/selinux/targeted/policy/policy.31, searching for an older version. SELinux: Could not open policy file <= /etc/selinux/targeted/policy/policy.31: No such file or directory /sbin/load_policy: Can't load policy: No such file or directory libsemanage.semanage_reload_policy: load_policy returned error code 2. (No such file or directory). FileNotFoundError: [Errno 2] No such file or directory Signed-off-by: Petr Lautrbach --- python/semanage/semanage | 15 +-------------- python/semanage/seobject.py | 11 ++++++----- 2 files changed, 7 insertions(+), 19 deletions(-) diff --git a/python/semanage/semanage b/python/semanage/semanage index bcac20b2..8d8a0860 100644 --- a/python/semanage/semanage +++ b/python/semanage/semanage @@ -183,7 +183,6 @@ def handleLogin(args): handle_opts(args, login_args, args.action) OBJECT = object_dict['login'](args) - OBJECT.set_reload(args.noreload) if args.action is "add": OBJECT.add(args.login, args.seuser, args.range) @@ -213,7 +212,7 @@ def parser_add_noheading(parser, name): def parser_add_noreload(parser, name): - parser.add_argument('-N', '--noreload', action='store_false', default=True, help=_('Do not reload policy after commit')) + parser.add_argument('-N', '--noreload', action='store_true', default=False, help=_('Do not reload policy after commit')) def parser_add_locallist(parser, name): @@ -317,7 +316,6 @@ def handleFcontext(args): handle_opts(args, fcontext_args, args.action) OBJECT = object_dict['fcontext'](args) - OBJECT.set_reload(args.noreload) if args.action is "add": if args.equal: @@ -386,7 +384,6 @@ def handleUser(args): handle_opts(args, user_args, args.action) OBJECT = object_dict['user'](args) - OBJECT.set_reload(args.noreload) if args.action is "add": OBJECT.add(args.selinux_name, args.roles, args.level, args.range, args.prefix) @@ -437,7 +434,6 @@ def handlePort(args): handle_opts(args, port_args, args.action) OBJECT = object_dict['port'](args) - OBJECT.set_reload(args.noreload) if args.action is "add": OBJECT.add(args.port, args.proto, args.range, args.type) @@ -483,7 +479,6 @@ def handlePkey(args): handle_opts(args, ibpkey_args, args.action) OBJECT = object_dict['ibpkey'](args) - OBJECT.set_reload(args.noreload) if args.action is "add": OBJECT.add(args.ibpkey, args.subnet_prefix, args.range, args.type) @@ -527,7 +522,6 @@ def handleIbendport(args): handle_opts(args, ibendport_args, args.action) OBJECT = object_dict['ibendport'](args) - OBJECT.set_reload(args.noreload) if args.action is "add": OBJECT.add(args.ibendport, args.ibdev_name, args.range, args.type) @@ -571,7 +565,6 @@ def handleInterface(args): handle_opts(args, interface_args, args.action) OBJECT = object_dict['interface'](args) - OBJECT.set_reload(args.noreload) if args.action is "add": OBJECT.add(args.interface, args.range, args.type) @@ -611,7 +604,6 @@ def setupInterfaceParser(subparsers): def handleModule(args): OBJECT = seobject.moduleRecords(args) - OBJECT.set_reload(args.noreload) if args.action == "add": OBJECT.add(args.module_name, args.priority) if args.action == "enable": @@ -654,7 +646,6 @@ def handleNode(args): handle_opts(args, node_args, args.action) OBJECT = object_dict['node'](args) - OBJECT.set_reload(args.noreload) if args.action is "add": OBJECT.add(args.node, args.netmask, args.proto, args.range, args.type) @@ -701,7 +692,6 @@ def handleBoolean(args): handle_opts(args, boolean_args, args.action) OBJECT = object_dict['boolean'](args) - OBJECT.set_reload(args.noreload) if args.action is "modify": if args.boolean: @@ -740,7 +730,6 @@ def setupBooleanParser(subparsers): def handlePermissive(args): OBJECT = object_dict['permissive'](args) - OBJECT.set_reload(args.noreload) if args.action is "list": OBJECT.list(args.noheading) @@ -775,7 +764,6 @@ def setupPermissiveParser(subparsers): def handleDontaudit(args): OBJECT = object_dict['dontaudit'](args) - OBJECT.set_reload(args.noreload) OBJECT.toggle(args.action) @@ -876,7 +864,6 @@ def handleImport(args): except KeyboardInterrupt: sys.exit(0) - trans.set_reload(args.noreload) trans.finish() diff --git a/python/semanage/seobject.py b/python/semanage/seobject.py index 00246fdd..228c8ae9 100644 --- a/python/semanage/seobject.py +++ b/python/semanage/seobject.py @@ -242,8 +242,11 @@ class semanageRecords: def __init__(self, args): global handle - self.load = True self.args = args + try: + self.noreload = args.noreload + except: + self.noreload = False self.sh = self.get_handle(args.store) rc, localstore = selinux.selinux_getpolicytype() @@ -252,9 +255,6 @@ class semanageRecords: else: self.mylog = nulllogger() - def set_reload(self, load): - self.load = load - def get_handle(self, store): global is_mls_enabled @@ -314,7 +314,8 @@ class semanageRecords: if semanageRecords.transaction: return - semanage_set_reload(self.sh, self.load) + if self.noreload: + semanage_set_reload(self.sh, 0) rc = semanage_commit(self.sh) if rc < 0: self.mylog.commit(0)