From patchwork Wed Jan 3 01:20:16 2018 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Jann Horn via Selinux X-Patchwork-Id: 10142533 Return-Path: Received: from mail.wl.linuxfoundation.org (pdx-wl-mail.web.codeaurora.org [172.30.200.125]) by pdx-korg-patchwork.web.codeaurora.org (Postfix) with ESMTP id C494160594 for ; Wed, 3 Jan 2018 15:54:41 +0000 (UTC) Received: from mail.wl.linuxfoundation.org (localhost [127.0.0.1]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id 66D5529297 for ; Wed, 3 Jan 2018 15:54:34 +0000 (UTC) Received: by mail.wl.linuxfoundation.org (Postfix, from userid 486) id 5B4C52929F; Wed, 3 Jan 2018 15:54:34 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on pdx-wl-mail.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-4.2 required=2.0 tests=BAYES_00, RCVD_IN_DNSWL_MED autolearn=ham version=3.3.1 Received: from upbd19pa07.eemsg.mail.mil (upbd19pa07.eemsg.mail.mil [214.24.27.82]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id 913BF29297 for ; Wed, 3 Jan 2018 15:54:31 +0000 (UTC) Received: from emsm-gh1-uea11.ncsc.mil ([214.29.60.3]) by upbd19pa07.eemsg.mail.mil with ESMTP/TLS/AES256-SHA; 03 Jan 2018 15:54:31 +0000 X-IronPort-AV: E=Sophos;i="5.45,501,1508803200"; d="scan'208";a="7663445" IronPort-PHdr: =?us-ascii?q?9a23=3AFJ+OURES8LG/w95EPBkUY51GYnF86YWxBRYc798d?= =?us-ascii?q?s5kLTJ7+oMuzbnLW6fgltlLVR4KTs6sC17KP9fi4EUU7or+5+EgYd5JNUxJXwe?= =?us-ascii?q?43pCcHRPC/NEvgMfTxZDY7FskRHHVs/nW8LFQHUJ2mPw6arXK99yMdFQviPgRp?= =?us-ascii?q?OOv1BpTSj8Oq3Oyu5pHfeQpFiCagbb9oMBm6sRjau9ULj4dlNqs/0AbCrGFSe+?= =?us-ascii?q?RRy2NoJFaTkAj568yt4pNt8Dletuw4+cJYXqr0Y6o3TbpDDDQ7KG81/9HktQPC?= =?us-ascii?q?TQSU+HQRVHgdnwdSDAjE6BH6WYrxsjf/u+Fg1iSWIdH6QLYpUjm58axlVAHnhz?= =?us-ascii?q?sGNz4h8WHYlMpwjL5AoBm8oxBz2pPYbJ2JOPZ7eK7Sc8kaRW5cVchPUSJPDJ63?= =?us-ascii?q?Y48WA+YcIepUqo/wrEYMoxSjHwmhHOzgxDFKiXH106001PovHh3b0gw4Hd8CrX?= =?us-ascii?q?rZotXvNKgMSuC417XIwSnZYv9Kwzrx9IrFfxY8qv+MR7Jwds/RxFEoGQzfklWQ?= =?us-ascii?q?tYzlMC2b1+8QsmaU9fBgVfixhG47twF6vyavxsY2hYLUm4wa1FTE9SR/wIYoKt?= =?us-ascii?q?yzVUl2YcW6H5tUtiGaMZZ2Q8w5TmF0uCc11r0GuZmhcCgM05Qo3QTTa/OAc4iW?= =?us-ascii?q?+x/uUvuaLzRghH99Zb6yiBm//VKgx+HhTMW4zllHojRfntXRrnwByQDf58ydRv?= =?us-ascii?q?Z+/kqtwyiD2x3Q5+1eI005mqzWIIM7zLEqjJocq0HDEzfzmEXxkaCZaF0p+vOt?= =?us-ascii?q?6+T7erXmoYKcN5NshgH+LKsunsu/DPwkMgcURWib+Pm81Kb58U3lQLRFkv02kq?= =?us-ascii?q?7DvJDcOcsbvbK2DxVQ0oYi7xazFzam0NIGknkbNF9JZR2KgofzN1zOPfz0F+mz?= =?us-ascii?q?jluynDtx2vzKJrjhDY/MLnjHnrfhZ7F960tExQoo099f45NUCrccIPP8Q0P+r9?= =?us-ascii?q?vYDgI/MwOo3ennE85w1p8eWG2TAq+ZN7nesVmT5u01OeWMa4gVuCjlJ/g/+/Hu?= =?us-ascii?q?lWM5mUMafaSx35sXb3a4Ee56I0WZe3XshMwMEWUNvgo4SezlkkaCUSJNaHaoRK?= =?us-ascii?q?Iw/DY7CJipDY3bXICinKSB3DunHp1Rfm1GCFKMHm30eIWHQPcMbySSIs5/kjEf?= =?us-ascii?q?W7ihT5Ih1B61uw/nzbpnMvfU9jcftZL529h///fTmg0q9TxoE8Sd1HmAT3lqkW?= =?us-ascii?q?wTWTA22qF/oVB6ylqY0Kh3neJXGsJJ6/NOSAc6OobWz/ZmBNDqRgLBYtCJRU67?= =?us-ascii?q?TdWhBzExSM8+zMEKY0Z8ANitlA7M3zCtA7MPkLyLHpM0+LrG33ftP8Z912rG1K?= =?us-ascii?q?45glY7XstAL3emi7Vj+AjUAo7Gj1+Wl722dagG2i7C6nuDx3KUvE5ESA5wTbnF?= =?us-ascii?q?XXcHa0vXq9T5+l3NT7uwBrQiLARB1dSCK6tRZ93ulVVJWvHjONHEbGKwn2e/Hh?= =?us-ascii?q?GIx7yWYIrtYWUd0z3XCFIYnAAL4XaGKQ8+Cz+homPfCzxuE0niY0bo8eVnqXO7?= =?us-ascii?q?SFU4zweQYE171Lq1+wAViuKGR/MVwL0EpD8rqy9oE1alw9LWF92AqhJvfaVdZd?= =?us-ascii?q?M95UlI1XjCugxzIJOvMqdihkQEfARvpUPu0Bd3BZtcnsg2tn8qyxByKa2A2lNb?= =?us-ascii?q?azyYxYzwOqHQKmTq8hCvcbTZ2lfC39aX4acC8/E4q03ivA2wDUoj/W5n38NS03?= =?us-ascii?q?uG6ZXAFBASXo7pUkYr6xh6oKnXYion6IPX0n1sLLK5sjzY1NIqA+sl1wysf9BF?= =?us-ascii?q?MKOLDAXyCdEVB9CyKOw2nFikdggLM/1I9K41IcymbeCL17S3M+Zlhj6min5H4I?= =?us-ascii?q?9l2EKW6yV8UvLI34oCw/yAwgSITTP8g0m6ssDrmYFEYiofHnGjxijlGoFRYLFy?= =?us-ascii?q?fYcRBmu0Jc242Ml+jYb3W3FE7F6jG08G2MixdBqIclPywBZd1UsSoX2ogye4yS?= =?us-ascii?q?J7ky0xpKqFwCPO2/jidAYAOmNTX2lig03sIY+vj9AGR0WodA4plByr5Eb/3adb?= =?us-ascii?q?or5zL2/NTkdUZyL2NX1tUrOstrqeZM5C8J0pvj9TUOSgf1+aUKX9rgAE0yz9BW?= =?us-ascii?q?tR3y07dzSwtpX+hRx6h3qXLGxvo3rBZcFw2RDf6cTCRf5QwjUGWC54iSPNCleg?= =?us-ascii?q?P9mp+tOUl5jYv+C6VmKhUIdccTPszY+asyu7/2JqCwWln/+vgt3nDRQ60Sjj2t?= =?us-ascii?q?luVCXItwr8bpDw16ukNeJnf09oBELz6sdhAYF+ioowhJcR2XcGnZWZ53wHnnnv?= =?us-ascii?q?Md9Dw6LxcGINRSIXw97S+AXlwkpjLnaNx43nTHWS3sxhZtehb2MNxyIy89tKBL?= =?us-ascii?q?2T7Lxekit/ukC4oh7JYfhhgjcdzuMj6H0EjOEPowog1SadDa4UHUlDOyzjiQiI?= =?us-ascii?q?48q5rKVNa2alaaKw21ZmndC9ELGCpRlRWG7jdZc/GS9/8N1/P0jK0H3v9I7kYs?= =?us-ascii?q?Ldbc8IthKKiRfAlPJZKIk2lvoXnypoJXzyvXMiy+4hghxhw4u2vI6ZJGVx5Ki5?= =?us-ascii?q?GAJXNiXpZ8MP/THglbhensCL0I20AJVhHCgEXJvyQfKuDj0SqeztNxySHz0ktn?= =?us-ascii?q?ebBb3fEBeH6Eh8snLPF4umOG2WJHkFzdRuXRedK1ZZgAwOWzU6hJE5HBiwxMP9?= =?us-ascii?q?aEd5+iwR5lngpxtPyuNoMwfwX3zapAevZDc0RoaQLAZK7gFC4EfVNNKR4vh1Hy?= =?us-ascii?q?5G4p2rtBaNJXCDZwRUEWEJXVSJB175Mbmo+dnA9O2YC/GwL/TQfLqOrvZeWO2Q?= =?us-ascii?q?xZK11Ytm/SiDOdmTPnV4CP07wEVDV2hjG8vFgzUPVzAXlyXVYs6Bvhu99Dd7rs?= =?us-ascii?q?Wl//TvXwLu5ZCCBKFOPtVq4Ry2hr2DN+GIjiZjNTlYzo8MxWPPyLUH0l4SkT9h?= =?us-ascii?q?eCS2Ebsasy7NUKXQmrRMAhEBdyxzMdFE76Um3glCIcTbkM/61qZkjv4pDFdITV?= =?us-ascii?q?rhmtuzaswSO2GwL13HBEeRNLSdOT3LzcD3YaWmRr1WkOpUtge/uTKBH0/kJDSD?= =?us-ascii?q?mCHjVwqzPuFUkCGbIBtetZmmfRl2DmTjSNPmaganMN9slzE22qM7iW/QOW4HLz?= =?us-ascii?q?d8d0JNrruN7SJXmfhwB2xA7mB4LemfgSqY4fPXKooNsftsBCR4jeVa4G41y7FN?= =?us-ascii?q?9iFLWOR1mDfOrt5pu1ymlOiPyj5jUBVQsTZGn5iEslt4OaXe7JVAXmzE/B0V52?= =?us-ascii?q?WKFxsKv8dlCsHou61I0dfPla3zKDBE89/P4MQTGdPbKMOdP3onKxbpHyTUDAQd?= =?us-ascii?q?Rz6xKW7fn1BdkO2V9nCNtJc6pYLjmIQQRbJAU1w1Du0VCkJgHNMYIZd3Wigrkb?= =?us-ascii?q?mUjcIS4nq+thbRTt1Avp/bTvKSHenvKDGBgLlYYBsIxKn0LZ4UNoz6xUNibEJ1?= =?us-ascii?q?nJ7NG0XOXtBAuTFubggxoEpR6nd+VXEz11jjagyz/H8ZDeS0kQIuigtifeQt8y?= =?us-ascii?q?/h41EpKVXQoCs9i0oxmdL+gTCNajHxKrywXYJXCybusUg+LI/7SR5vbQKuhUxk?= =?us-ascii?q?KCvER7VJgrt6a29rkxHTtoFVGfFATa1JewQfxfCNZ/o11lRcpD2nxVVZ6urFE5?= =?us-ascii?q?dikhUlcYK0pXJaxw1jdMI1JbDXJKdR01dfnLyOvi612eAq2wIRPVwN8HmVeC8G?= =?us-ascii?q?o0wHKKUpJzey/uxt9QyDmyFPeG4SWPo2uvhq7F8yO/yczyL81L5OMkSxN+uFL6?= =?us-ascii?q?yHvWjBlMmIT0g/1kMOiklJ57920d0sc0CMTUAg0KORFwgVNcrFMQxVdNRd9HzS?= =?us-ascii?q?fSaIrOXMzol4MJm6FuDtUeCBrr0Ugl6+EAYvAYsM8twLHoOw30HAMcfnMLkFxA?= =?us-ascii?q?0w6wv3IVWFC/JJeA6WnDocvcGw0oV33YhcJzEaB2VxKyO36ajLpgUymvqMQM82?= =?us-ascii?q?YmsGXosDLn82RMy6mytev3RcDDm20vkUxxWD7z78vCvfFyPwb9x9a/eIfRlsEs?= =?us-ascii?q?25+S0j86iqjl7a6o/RJ2X7Ndt+pNDA8eYappaBC/NTS7lyqVzRlJJZR3OwVW7D?= =?us-ascii?q?CNC1J4XqZ4kqc9P0Fm6wUkajhDItU8fxINGtI7CTjg72Q4ZZq5OU0y09NcCjDD?= =?us-ascii?q?EeAA1/p/sD5a5mYg0DeZU7awbytwsiL6y/PBuY0tK2Tma3LztWTuVQzeW9Z7xT?= =?us-ascii?q?1Coidva0xmY6QJwmyOe66lICRJYPjh7C3/mjfJVeXTL1GnNDZwXFvTA5mHR5Nu?= =?us-ascii?q?Yu3uc/xwvFvkUeMz+RaONkc3BLv9Y4BVOWIHV5FHA4R0OCgoXf4g6gxbcS/zFS?= =?us-ascii?q?n9xMy+1KrGD+voPDYDKrQKGrs4/aszAnbdc9uKBxLZbjLdGYtJzAmjzfTZ/Qsg?= =?us-ascii?q?KBUC67GPpamsRQICxCT/lSnGEpI8oGtpRd6UApTMcxO6RPCLUwprCtcTdlAzQe?= =?us-ascii?q?wjMZV4OB2TwCg/2z27jBmxeRbpstLgILvI9FgtsHXC58ejkeq7O7V4XKi2+ETX?= =?us-ascii?q?AGIAIJ4gRW5wIPiJNwfuHj4IrHV5JNxSRZo/RoXSvPEZlo6kb0SnqMjVj+Vvqh?= =?us-ascii?q?j/Sj3RhOw/L0ztkbRBl/BFBFx+ZRkksnMqt3KqcXvo7OvD+Fbkb6vGXqyOu9Ol?= =?us-ascii?q?Ze1dfUd1rjDIretGr8VCIc9WcTRY9Vx3HVDY4SnBZhaKY3uFVMJ5irdVzk5zw5?= =?us-ascii?q?wYRlBbq4WNuqx1YkrHYGWzylH8BHC+54rFLdQCdlbIyzqJX5J5VSRXdd+IGaq1?= =?us-ascii?q?dci0htLzK1yZ9HJM1X5D4DQiRPqy2HvNSuUM1DxdN2D5gUL9d/oXj9ArlLOJyM?= =?us-ascii?q?rHAtp7Pg1GfZ+ygiv1e+2jqzAbW0T+VD/20RAg8pPXiRqlEzD+sw9Wff6lLNsl?= =?us-ascii?q?dq8OpAG7eAk15xryhnHpBSGDlGyGqpL1JtQ3laq+9aMrjac9RAQ/kuYh+iIwA+?= =?us-ascii?q?GuM70EyI5050mWz0bDB1tgtf5y/SRRI0VTUPjrfrhzIettmtOSUGRJJQcTUhcy?= =?us-ascii?q?DFJhqAliBZoBlTd0NnV40XD9te574b2o5U8dbYRka3NSEJRhpiORwk0fBHj05M?= =?us-ascii?q?rF2YeTzBDQqvbfvPqAN4ctqRrMGzMPT05wNHioT5sO8m6akMW3qmlhCzTtzEqY?= =?us-ascii?q?/zqMGKvFOUdKjkK+28fWPBTD/UgBConrckE4PF8DXPMAdAMJl6zmckYYL9BmHV?= =?us-ascii?q?OxRGO7gbKFBfVaxgbtVGuO9abdd+eKkV4a9tGg6HRhT3FYyztvlJMEjcSinFIi?= =?us-ascii?q?Wc9uy/vZjT4qbDSejhYcyMw2jIQ75tMpd98zn7FK/g0ZVC9Uruxvdt6kR6REDD?= =?us-ascii?q?My+bqNThIh0E5NW+dkT4pJIkBjXWD4lskHr22k5PbdIXTDOw/JQe1pxZ9G76Sf?= =?us-ascii?q?hk3UjrrO1S675k5JE1479z08e0IrzSKfBAvk95GRWUAxhq9pExAGh+W29RY/Ue?= =?us-ascii?q?KPHKfagDisDuse/3HbQN6BKJ4+xZdcfHJ0bZl8m9ED6cTxJEnB0GqTEHMASRzO?= =?us-ascii?q?KFlLVySca+ouj1wEQt7EaiLhQe1rBi+Z+E+raUpO/QdxbRwqUEWqnuRsP3sLss?= =?us-ascii?q?vlif6uA6m7EVe2x6eQunHPIaVs4HyWfq1boqwj40E8PfA7Lg/+ZOV3A4njLlgJ?= =?us-ascii?q?19GksZG/MKErqR/IRemGg4l/bfNtIIbqBIgnyPGgK8Er8e1X6r7DOaIG9hghzV?= =?us-ascii?q?0hHwR2az4EX3rS9+TyvM1c3sklFJVrmtGEddQzapOVJisDyRJgbos8D3uast5k?= =?us-ascii?q?EsLmPkrM6NlHemOL5PGs3/I9qcITU7pF0Jl5AxQ92v1podGdWjPNcQ/nZ+buHd?= =?us-ascii?q?62OwiSNBpblIh5bG6MGP5vrXBWWgj7Gdq7iVwDBY0X04sFEk59CuKP7B+tqKQ+?= =?us-ascii?q?6y2GYJVSd/vAnBUACppbzHtVwUPlaL0EjTkowQIt5ZxWU41l3h5OU7QdIy9R9R?= =?us-ascii?q?GZzcaP4ZvjD8Jif0zkiDbN4tUSmeyTRXFErvEVZkAKg8xH7wvMXRmHjL+l0oXY?= =?us-ascii?q?dxeFblhRx2E4U4MVgi6EUTwicYDQcNbg2UA6+yCkT4N4sEUlIDZg6d0Li9YKc3?= =?us-ascii?q?0lV5wqmz6+/Lcex8G60NO+5FjgGUgFhUBpIWsKMZQLJmeF9R7bXXqRbmC4jmWf?= =?us-ascii?q?jmiHUxOOatQs9A7cAWq3si4wi4Rxq66pdP9bUbh46Sdq5Cf5fMuNpw70B95T4A?= =?us-ascii?q?biZNmgRwjwulUeAAo+Du+tfbv4Cy6umwSKYtR/4a9xw1B2RikZTwgEosoczM1+?= =?us-ascii?q?tGTI3al5j/+hhXI3GWoIbazwV8Ke0WJoKkYrlg8WkHJy8ZJ34JJtqZdf084y5r?= =?us-ascii?q?MDXO6F1PGccMas0CPMvNgw9YkEvpV69P9sDDAF+XF59zd9w072rw0D0195o8Xf?= =?us-ascii?q?rn6D+yP5/f9EtBP/JEjCVrj9LCv/MYwf/dBSkY+3WZbAJ1wiyawZmXF/nw5fmM?= =?us-ascii?q?yM3TV14eES45T5xdJCGb9QK6SeS7kpTpUgWJ6s78m58+e0eQSWa3nKsbqKpMFv?= =?us-ascii?q?RAiirj1DhECo/1n+6Vs8ar6GZPtF1HF4Zz7RvfFKpDPpV7PQn4mdSqR0h9ACv/?= =?us-ascii?q?Y8LUdhs1teqIx+cM/f9xN0/jao8aOB4Ezaz16WZNRAt0VLH2pkqZXf4WZNZ+Sf?= =?us-ascii?q?PEsGpa6YR7Jq8LIViSuZ3qrjBTqFwsBw8pcrAwpCRAdkbShA1VR7r0uLkYhwse?= =?us-ascii?q?T9F5t0FMGWarNWMw/TXHU7pajLWLBPwT7DqTUrQEU190PSNmXxO1xJJudqOmnf?= =?us-ascii?q?BDtWNHkD1yoPwu0zF9Xxu8vivsp6MR1j46/rG3qikBs2RfTuqCiyfIFUlDzPMS?= =?us-ascii?q?gKceC3bj6US8YH4HbIvz/LloO9/t9Ywg43QjexUsYTcKXeO6CyH/l6mIGJCAsM?= =?us-ascii?q?pAhB6Rv8XDdaOzLSkXNrkm1RLjRmRy0gvAkxZs6mcLRCuv7MM8LoWnJckl3jao?= =?us-ascii?q?GXTcdFsU56NJscjxtV0MTOYta1Nu2mZj0s+BRiITQszDAWA1gRY4aW9capJM9Q?= =?us-ascii?q?caF7U0gjaPpqRJ5R8bYDHIEom+4YnQmcDI2WUhTdd02G3Zu7eJhpQw0H1qg9l0?= =?us-ascii?q?9DKBuGwOd+zEVM9hGnbz2Zlbyez/f/WirPsKSYpnyLSkVf8NLNOj+W+o15lwXU?= =?us-ascii?q?+l3LseFUKjMOAf3rfbTzulSWqAVOWFa2iMhTc5PVLs6hSzK103adtKr1UjPefY?= =?us-ascii?q?gZ5cjQLhW6tuRiqMvV/b0HAjMeQCegIxvIeoZRcHTPYVZ+eGPugu3Pw+B0cQb3?= =?us-ascii?q?/TAyR5FfW6sVizk4hnI39g+1n1Yfzx8gD6N9ufAh0EEY/crp5s9v22X2aBOX57?= =?us-ascii?q?zB1uJ0l57ObfGE43tu9baZqRmsLQh9tj2+4fa/htKTE9usIUmo977ImbytuFcR?= =?us-ascii?q?HQzpb0ItHYueaYA/zZz0s0fmFaU7wZYR765okgOd45QbLTF6NDvRsAHag6XIAh?= =?us-ascii?q?N2Dp+aF2NgxzcQnRa6+vj8n3oOKLeptUp3jL7lI/LCfcpwcPyvqqQgxnd5qqnW?= =?us-ascii?q?n9IIgsRjJdqN1gEhlmHI5IG8MatQqnAoWUlbq9i9Cr/kN1pe4KvbD3CvDQ29Sz?= =?us-ascii?q?x59xUIRC5UyXIDbRA7Fmgl9rjuS3nvjN05r8BNj8edwaTuh7Q2/EarjAHomlLD?= =?us-ascii?q?KBJN78KAZ69OuY0bRkQlCQYjz0ULCHqDyMKvpp+wM4x5Z+ce6VyyYivIvWwN/j?= =?us-ascii?q?W2YOgy6/sX6EK9Nw5UbQCPDCF0ZRS/XYoU5qGqoYaYay/+ALZ48M2t+Ztix68C?= =?us-ascii?q?hC3dTNDKG7tELQxgpldJuTF0bt2iAkScFeOxm7ME0xkUfFu3/dBjJaNcHiJs5z?= =?us-ascii?q?1oXGRifx7lV8zDl+LlVKHXDlEJLIYDAW?= X-IPAS-Result: =?us-ascii?q?A2C2AQBe+0xa/wHyM5BcGQEBAQEBAQEBAQEBAQcBAQEBAYM?= =?us-ascii?q?SLIFaJ4QHixiOJYsJjkCBGANQLolVQxQBAQEBAQEBAQEBaiiCOCQBgkcDAwECI?= =?us-ascii?q?ARSAwMJAQESEgIiBAICAwEdEwEFARwZBYgFggwDFQOkTUCMEIFtOiEChFCCTA2?= =?us-ascii?q?CcAELJhJ9gwSCEhCJSEWCOoJLgmUBBJM1j189i3eEQAGEcQ2GB4Ysh06NZYkNO?= =?us-ascii?q?YEXNiIygR0qCAIYCCEPgVQaeIJUHIIIVwGJUgEBAQ?= Received: from tarius.tycho.ncsc.mil ([144.51.242.1]) by emsm-gh1-uea11.NCSC.MIL with ESMTP; 03 Jan 2018 15:53:51 +0000 Received: from prometheus.infosec.tycho.ncsc.mil (prometheus [192.168.25.40]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id w03FrKk7028799; Wed, 3 Jan 2018 10:53:27 -0500 Received: from tarius.tycho.ncsc.mil (tarius.infosec.tycho.ncsc.mil [144.51.242.1]) by prometheus.infosec.tycho.ncsc.mil (8.15.2/8.15.2) with ESMTP id w031KaLv145460 for ; Tue, 2 Jan 2018 20:20:36 -0500 Received: from goalie.tycho.ncsc.mil (goalie [144.51.242.250]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id w031KbBw006334 for ; Tue, 2 Jan 2018 20:20:37 -0500 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A1B0HACfL0xa/3UWGNZdHAEBAQQBAQoBA?= =?us-ascii?q?YM7A4FaJ4QHmT5HBQGBL4kNhUyIVoE2A3mFJAKENEAXAQEBAQEBAQEBa4VMBiM?= =?us-ascii?q?EGQEBNwEPJQImAgIhEwEFARwZihYDCA0DpTxAiyJugW06IQKCZwEBBYQuDYEqg?= =?us-ascii?q?UYqCBJ9gn2CEoEOiEpEAYI6gkuCZQGBMQEBkgOPXTMIAQGGCYVthEABhHENhga?= =?us-ascii?q?GKodNjWKJDTmBFyEBNjKBHTIaI4FWgSWCRQ8cgghXAYhzAQEB?= X-IPAS-Result: =?us-ascii?q?A1B0HACfL0xa/3UWGNZdHAEBAQQBAQoBAYM7A4FaJ4QHmT5?= =?us-ascii?q?HBQGBL4kNhUyIVoE2A3mFJAKENEAXAQEBAQEBAQEBa4VMBiMEGQEBNwEPJQImA?= =?us-ascii?q?gIhEwEFARwZihYDCA0DpTxAiyJugW06IQKCZwEBBYQuDYEqgUYqCBJ9gn2CEoE?= =?us-ascii?q?OiEpEAYI6gkuCZQGBMQEBkgOPXTMIAQGGCYVthEABhHENhgaGKodNjWKJDTmBF?= =?us-ascii?q?yEBNjKBHTIaI4FWgSWCRQ8cgghXAYhzAQEB?= X-IronPort-AV: E=Sophos;i="5.45,499,1508817600"; d="scan'208";a="163392" Received: from emsm-gh1-uea11.ncsc.mil ([214.29.60.35]) by goalie.tycho.ncsc.mil with ESMTP; 02 Jan 2018 20:20:27 -0500 IronPort-PHdr: =?us-ascii?q?9a23=3AMZJOWBPwyZ8T7Lu/6zol6mtUPXoX/o7sNwtQ0KIM?= =?us-ascii?q?zox0I/zyrarrMEGX3/hxlliBBdydt6odzbKO+4nbGkU4qa6bt34DdJEeHzQksu?= =?us-ascii?q?4x2zIaPcieFEfgJ+TrZSFpVO5LVVti4m3peRMNQJW2aFLduGC94iAPERvjKwV1?= =?us-ascii?q?Ov71GonPhMiryuy+4ZLebxlViDanfb9+MAi9oBnMuMURnYZsMLs6xAHTontPde?= =?us-ascii?q?RWxGdoKkyWkh3h+Mq+/4Nt/jpJtf45+MFOTav1f6IjTbxFFzsmKHw65NfqtRbY?= =?us-ascii?q?UwSC4GYXX3gMnRpJBwjF6wz6Xov0vyDnuOdxxDWWMMvrRr0vRz+s87lkRwPpiC?= =?us-ascii?q?cfNj427mfXitBrjKlGpB6tvgFzz5LIbI2QMvd1Y6HTcs4ARWdZQ8heWCJPDYG/?= =?us-ascii?q?YYsBCOQPPfhWoJXmqlsSsRezHxWgCfnzxjJKgHL9wK000/4mEQHDxAEuGMgBsG?= =?us-ascii?q?jIrNX1KqgTX/2+wqjSwjXZdfNZxyv96JTVeR0mpPGMX71wfMrVxEQ0GAPFiVKQ?= =?us-ascii?q?qYPhPzyLzOgCr2+b7+95WO+plmUpqBlxryCxyssxhYTFnJwZx1/e+Sln3oo5P8?= =?us-ascii?q?C0RFN5bNK8DpdcqyWXO5F1T84iWW1kpjs2x74ctZO5cyUHzoksyQTFZPydaYeI?= =?us-ascii?q?5wruVOaPLjd8g3JoYK+/hxWs/kik1+HxUtG030xXoidGiNXDqG4C1xnI6siIUP?= =?us-ascii?q?d9+12u2TeL1wzJ7+FEIEQ0mbLaK54n3LEwioIevVreEiL5gkn6kqCbel869uS2?= =?us-ascii?q?8ejrf6jqq52EO49xkA7+M6AumsKlAeQ/NwgDR2aW9fqi2bDn+kP2QLpKgfMznK?= =?us-ascii?q?TErJzUKtwbpqu7AwJWzIsj6Qy/Dy2k0NQfnXkLNlxFeAifj4j3O1HOJ/T4De6w?= =?us-ascii?q?gliwnjZn2v7GPr77ApnXN3jDjqrucax/605GyAs+1t5f55ZKBbAOOf7/Q0rxu8?= =?us-ascii?q?bEDh8lMwy73ejmCNpn2YMEQ2KAHLOZML/IvVCT4eIvPu+Ma5MLtzbmMfQl6Pnu?= =?us-ascii?q?jXg2mV8ZY6alx4cYaHe9Hvh+OUWWfWLsgssdEWcNpgc+V/LliFmDUT5VenazUL?= =?us-ascii?q?kx5i07CY26DYfDQZqhgLqa3CihBJFWaWdGCk7fWUvvIoGFXeocLSOUPsJuiD0Y?= =?us-ascii?q?RJC/RII7kxKjrgn3z/xgNOWH1DcfsMfG3cRp5+DM3T477yZ5E9jVh2SPQDwltm?= =?us-ascii?q?wPQDAy0eZ0pkkrmQTL6rRxn/ENTY8b3PhOSApvcMeEl+E=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DyFgDpLkxa/3UWGNZdHAEBAQQBAQoBA?= =?us-ascii?q?YM7A4FaJ4QHmT5HBQGBL4kNhUyIVoE2A3mFJAKENEAXAQEBAQEBAQEBAWoogjg?= =?us-ascii?q?kAYJHBiMEGQEBNwEPGA0CJgICIRMBBQEcGYoWAwgNA6VZQIsiboFtOiECgmcBA?= =?us-ascii?q?QWELg2BKoFGKggSfYJ9ghKBDohKRAGCOoJLgmWBMgEBkgOPXTMIAQGGCYVthEA?= =?us-ascii?q?BhHENhgaGKodNjWKJDTmBFyEBNjKBHTIaI4FWgSWCRQ8cgghXAYhzAQEB?= X-IPAS-Result: =?us-ascii?q?A0DyFgDpLkxa/3UWGNZdHAEBAQQBAQoBAYM7A4FaJ4QHmT5?= =?us-ascii?q?HBQGBL4kNhUyIVoE2A3mFJAKENEAXAQEBAQEBAQEBAWoogjgkAYJHBiMEGQEBN?= =?us-ascii?q?wEPGA0CJgICIRMBBQEcGYoWAwgNA6VZQIsiboFtOiECgmcBAQWELg2BKoFGKgg?= =?us-ascii?q?SfYJ9ghKBDohKRAGCOoJLgmWBMgEBkgOPXTMIAQGGCYVthEABhHENhgaGKodNj?= =?us-ascii?q?WKJDTmBFyEBNjKBHTIaI4FWgSWCRQ8cgghXAYhzAQEB?= X-IronPort-AV: E=Sophos;i="5.45,499,1508803200"; d="scan'208";a="7642032" X-IronPort-Outbreak-Status: No, level 0, Unknown - Unknown Received: from unknown (HELO ukel19pa18.eemsg.mail.mil) ([214.24.22.117]) by emsm-gh1-uea11.NCSC.MIL with ESMTP; 03 Jan 2018 01:20:26 +0000 X-EEMSG-check-005: 0 X-EEMSG-check-006: 000-001;2a75fcfa-6b2d-43ee-9eeb-802df99adcd6 X-EEMSG-check-008: 302654360|UKEL19PA08_EEMSG_MP5.csd.disa.mil X-EEMSG-SBRS: 3.4 X-EEMSG-ORIG-IP: 209.85.218.74 X-EEMSG-check-002: true X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0CxAQAFLUxahkraVdFdHAEBAQQBAQoBAYUYJ4QHmT5HBoo8hUyIVoE2A3mFJAKENEEWAQEBAQEBAQEBEwEBAQoJCwgoL4UkBiMEGQEBNwEPJQImAgIhEwEFARwZihYDCA2lVkCLIm6BbTqDCgEBBYQuDYEqgUYqCBJ9gn2CEoEOiEpEAYI6gkuCZYEyAQGSA49dMwgBAYYJhW2EQYRxDYYGjXeNYokNOYEXJgRggR0yGiOBVoElgkUPHIIIIDcBiHMBAQE X-IPAS-Result: A0CxAQAFLUxahkraVdFdHAEBAQQBAQoBAYUYJ4QHmT5HBoo8hUyIVoE2A3mFJAKENEEWAQEBAQEBAQEBEwEBAQoJCwgoL4UkBiMEGQEBNwEPJQImAgIhEwEFARwZihYDCA2lVkCLIm6BbTqDCgEBBYQuDYEqgUYqCBJ9gn2CEoEOiEpEAYI6gkuCZYEyAQGSA49dMwgBAYYJhW2EQYRxDYYGjXeNYokNOYEXJgRggR0yGiOBVoElgkUPHIIIIDcBiHMBAQE Received: from mail-oi0-f74.google.com ([209.85.218.74]) by ukel19pa08.eemsg.mail.mil with ESMTP; 03 Jan 2018 01:20:24 +0000 Received: by mail-oi0-f74.google.com with SMTP id j135so88912oih.9 for ; Tue, 02 Jan 2018 17:20:24 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:date:in-reply-to:message-id :references:subject:from:to:cc; bh=XqUF9Fy6D7lxnLcCH1MkDjqCTLaoIs4a56up3qkMY04=; b=HjE/O+/0OyfCkDKrdgJ18OfFU+fjOnGj8xdw1mKAZTnK9GKNNoHjfUxFUDzFlJzo7g ULjOzZiJRJ7DgA+FqxSK1Sac9WLALqThQz1NdsEi9QT0kc1EyvL+gHkqSC84llv4xygC Bv90yRNhiIfVyvh+U0KHd6oGMiuIr78//cAvQ+IIAVHDze3BvQRsbhEMXpqD9SJFq2IU o12BlNRzEywliS2EKv2UXutyhXzoDDyeuIdioMsINktlaDLCA8KAgVXSuIU3tMH8i+5m 2iwjydDUTHGd6YI4Uhy9QOrFwoCLy6ZoNmkN1Alys2XWuAACL1q2iOA/uwYn3cxTkpas vpbw== X-Gm-Message-State: AKGB3mKu/r0/92Ai8dcIw+MArjhwv7kw3gZrnr+18f+woHiEFXDt0KBg yXjiaQGJIE94fUVgm31y8VJkeetsGqTsVPPvxddUiA== X-Google-Smtp-Source: ACJfBouNtDrKEOdzL8dyvoBOtxKEYYrYvfdzN48Oi76BeqbpnxqmAcZt4KPgfJZCJwX7k1CDflcu6BcUdzPp0VZyrtvAFQ== MIME-Version: 1.0 X-Received: by 10.157.22.252 with SMTP id s57mr16899020ots.19.1514942424320; Tue, 02 Jan 2018 17:20:24 -0800 (PST) Date: Tue, 2 Jan 2018 17:20:16 -0800 In-Reply-To: <20180103012017.7022-1-mjg59@google.com> Message-Id: <20180103012017.7022-2-mjg59@google.com> References: <20180103012017.7022-1-mjg59@google.com> X-Mailer: git-send-email 2.15.1.620.gb9897f4670-goog X-EEMSG-check-009: 444-444 To: linux-integrity@vger.kernel.org X-Mailman-Approved-At: Wed, 03 Jan 2018 10:53:17 -0500 Subject: [PATCH V4 2/3] IMA: Use consistent creds X-BeenThere: selinux@tycho.nsa.gov X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Security-Enhanced Linux \(SELinux\) mailing list" List-Post: List-Help: From: Matthew Garrett via Selinux Reply-To: Matthew Garrett Cc: Matthew Garrett , linux-security-module@vger.kernel.org, selinux@tycho.nsa.gov, Dmitry Kasatkin , Stephen Smalley Errors-To: selinux-bounces@tycho.nsa.gov Sender: "Selinux" X-Virus-Scanned: ClamAV using ClamSMTP Right now most of the IMA code is using current->creds, but the LSM checks are using security_task_getsecid() which ends up looking at real_creds. Switch to using security_cred_getsecid() in order to make this consistent. Signed-off-by: Matthew Garrett Cc: Paul Moore Cc: Stephen Smalley Cc: Eric Paris Cc: selinux@tycho.nsa.gov Cc: Casey Schaufler Cc: linux-security-module@vger.kernel.org Cc: Mimi Zohar Cc: Dmitry Kasatkin Cc: linux-integrity@vger.kernel.org --- security/integrity/ima/ima_policy.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/security/integrity/ima/ima_policy.c b/security/integrity/ima/ima_policy.c index ee4613fa5840..52951ac445ea 100644 --- a/security/integrity/ima/ima_policy.c +++ b/security/integrity/ima/ima_policy.c @@ -249,7 +249,6 @@ static void ima_lsm_update_rules(void) static bool ima_match_rules(struct ima_rule_entry *rule, struct inode *inode, enum ima_hooks func, int mask) { - struct task_struct *tsk = current; const struct cred *cred = current_cred(); int i; @@ -305,7 +304,7 @@ static bool ima_match_rules(struct ima_rule_entry *rule, struct inode *inode, case LSM_SUBJ_USER: case LSM_SUBJ_ROLE: case LSM_SUBJ_TYPE: - security_task_getsecid(tsk, &sid); + security_cred_getsecid(cred, &sid); rc = security_filter_rule_match(sid, rule->lsm[i].type, Audit_equal,