From patchwork Wed Feb 28 10:15:08 2018 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Vit Mojzis X-Patchwork-Id: 10247095 Return-Path: Received: from mail.wl.linuxfoundation.org (pdx-wl-mail.web.codeaurora.org [172.30.200.125]) by pdx-korg-patchwork.web.codeaurora.org (Postfix) with ESMTP id 7D64960362 for ; Wed, 28 Feb 2018 10:15:45 +0000 (UTC) Received: from mail.wl.linuxfoundation.org (localhost [127.0.0.1]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id 66E4328BCD for ; Wed, 28 Feb 2018 10:15:45 +0000 (UTC) Received: by mail.wl.linuxfoundation.org (Postfix, from userid 486) id 5B04728C8A; Wed, 28 Feb 2018 10:15:45 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on pdx-wl-mail.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-4.2 required=2.0 tests=BAYES_00, RCVD_IN_DNSWL_MED autolearn=ham version=3.3.1 Received: from ucol19pa09.eemsg.mail.mil (ucol19pa09.eemsg.mail.mil [214.24.24.82]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id 98C2528BCD for ; Wed, 28 Feb 2018 10:15:44 +0000 (UTC) X-IronPort-AV: E=Sophos;i="5.47,405,1515456000"; d="scan'208";a="643069088" Received: from emsm-gh1-uea10.ncsc.mil ([214.29.60.2]) by ucol19pa09.eemsg.mail.mil with ESMTP/TLS/AES256-SHA; 28 Feb 2018 10:15:43 +0000 X-IronPort-AV: E=Sophos;i="5.47,405,1515456000"; d="scan'208";a="9169915" IronPort-PHdr: =?us-ascii?q?9a23=3A/0UH0R+CohcNb/9uRHKM819IXTAuvvDOBiVQ1KB6?= =?us-ascii?q?1e0UIJqq85mqBkHD//Il1AaPAd2ArawZwLKG+4nbGkU4qa6bt34DdJEeHzQksu?= =?us-ascii?q?4x2zIaPcieFEfgJ+TrZSFpVO5LVVti4m3peRMNQJW2aFLduGC94iAPERvjKwV1?= =?us-ascii?q?Ov71GonPhMiryuy+4ZLebxlGiTanYL5/LBq6oRnSu8ILnYZsN6E9xwfTrHBVYe?= =?us-ascii?q?pW32RoJVySnxb4+Mi9+YNo/jpTtfw86cNOSL32cKskQ7NWCjQmKH0169bwtRbf?= =?us-ascii?q?VwuP52ATXXsQnxFVHgXK9hD6XpP2sivnqupw3TSRMMPqQbwoXzmp8qlkSAXsiC?= =?us-ascii?q?waKTA39m/ZgdF0gK5CvR6tuxlzzojJa4+XKfV+ZLvQc9MES2RPXcheVSJBDJ6k?= =?us-ascii?q?b4YNEuYMM/hXr5LmqlcSsRezHxWgCP/zxjNUgHL9wK000/4mEQHDxAEvENMOsG?= =?us-ascii?q?jJp9vyM6cSU+G0zKjTzT7eaP5WxzL96I/KchEgoPGMRql9cdDPxkYyFwPKlEmQ?= =?us-ascii?q?pZb5MDOS0+QAqm6W5PduW+Kojm4osQBxoj63y8c2lIbGm4IVxUrY9Slj3Ik1It?= =?us-ascii?q?i4RUhmatCnCJtdrzyWOoR5T884Q2xkpTw2xqMJtJKlZiQG1Ywryh/eZvCdboSF?= =?us-ascii?q?4RDuWPyPLTp2in9pYrCyihi0/EO90OPzTNO030xPriddl9nMsW0C2ALL58icT/?= =?us-ascii?q?t94l+h2TGS1wDP8u1EIV47la7cK5M53r4/jIATsUXeHi/tgkn2kK+XeVkk+uiv?= =?us-ascii?q?8ejnZKnppoSAOINujwH+M6AultS+AeQ+LAcOQ3CW9fmz2bDs50H0QKhGguconq?= =?us-ascii?q?TWrpzWP9kXqra8AwBP04Yj7xi/Dy2h0NQdhXQHN0xKeBaGj4jvJlHPL+n0Auy4?= =?us-ascii?q?g1Sxljdk2+7JPqb6D5XRLnnMjLfhfbFn505a0wo818pT551TCrEfOP7zQFP+tM?= =?us-ascii?q?TEDh8lNAy52+TnCNJ71owERWKPArWWMKXJvF+K4eIvJeyMa5UOuDbhNfcl/eXu?= =?us-ascii?q?gWU+mV8HcqmjxYEXZ2ygHvR6P0WZZmLhgtUDEWgQogU+T/fqiFqEUT5SeXa/RK?= =?us-ascii?q?w85jUmCIOpFojDW4atgKCc3CuhGZ1WfG9GAEiWEXj0b4WER+sMaCWKL85vkzwE?= =?us-ascii?q?Ub2hRJE71Ry1ug/11adoLu3O+iICrZLjzt915+/Nmh4u6Tx4FcOd03uCT2tshG?= =?us-ascii?q?MHWyc23LxjoUx60lqMzLR3g/lfFdxV+/NFTxw3NYDCwOxgCtDzWwXBftGTRFag?= =?us-ascii?q?XNqmHSk7TsgtzN8Wf0Z9B9Kigwje0Cq2GbAVjaeGC4Az8qLZw3f+Pd19y2rc2K?= =?us-ascii?q?knkVYmXtNFNXe6ia5n6wjTG4nJnl2ZlqercqQc2jXA9GKHzWaXvUFYVhR8UaPf?= =?us-ascii?q?UnAFZUvWrMr56V3YQ7+oF7snLhNLydSeJatSdt3pkVJGSe/9N9TGeW2xgWawBQ?= =?us-ascii?q?2Ty7OUdoXqYWQd3D7FCEgAiQ8c4WiJORI5Bie7rGLUFCZuGk73Y0Pw7el+r2u2?= =?us-ascii?q?TkEuzw6QaU1uy7u1+gUOiPyZU/MT36sIuDwvqjVvBlq92MjWC9WYrQp7YKpcec?= =?us-ascii?q?894EtA1W/BtAxyJJ+gL6d/hlMFcAR4pUDu1xJqColalsgqtnwqxhJoKa2EyFNB?= =?us-ascii?q?ay+Y3ZfoN7LNN2by5hGvZLDM2lzFytmZ5qIP5O4/q1X5swGjDlAi/Gl/09lJz3?= =?us-ascii?q?uc4Y3HDBAPXp3sSUs3+B16pr7Abik7+YzUyWVmMbOovT/ax9IpGOwlxw67f9dR?= =?us-ascii?q?KqOEExTyE9EBCsi1LuwqnFaobhceM+BU7qI0Od2pd+ee0q6xIOlghC6mjXhA4I?= =?us-ascii?q?1l3EOD7S58SvLW0JYf2PGVxRWHWCnmjFi6r8D3nJpIZTYIHmqw0SLkHpJeZrVu?= =?us-ascii?q?fYYXDmejO8u3xtR6h57pRXFY70WuCEkY18+zfhqedVv93Rdf1U4Pu3yohTO4zy?= =?us-ascii?q?BokzEutqefwi3OzPj+dBoAIG5HXnVtjVfrIYiygNAXR0yobwkvlBS//0b6wLJX?= =?us-ascii?q?pKNlL2ncWU1IZTT5L3l+UqussbqPe8pP6JIzsSVLSei8ek6VSrr8oxscziPiEH?= =?us-ascii?q?BTxCsjdzGrvJX5ngB1iHmHIHZ1snXZZdl6xQ3D69zEWf5Rwj0GSTFiiTnQAli8?= =?us-ascii?q?O8em/c+ImJfEvOGzTHmhVoBPfinw14+AszG75WJyCx2lg/+zgsHnERQ90SLj1N?= =?us-ascii?q?llSyPIrA3nb4noyau6N/lnfk92C1/g8cZ6HZt+koQojpEKxXcanomV/WYAkWrr?= =?us-ascii?q?KdVUw7/+bH4TSj4T2dHV5hTl11N5Ln+S2oL5TWuSwtF6Z9WgeWMW3T8979pWB6?= =?us-ascii?q?iK4rxEmjF1olWmog7LZ/hygCsdw+M06HEGm+EJpBYtziKFD7AMG0lXIDfhlwqO?= =?us-ascii?q?79+jrKVbfmCvfqas1EBmh9CuEKmCoh1AWHb+YpoiBTV/7th7MF/XzHLz653ked?= =?us-ascii?q?nJYdIdrBKUlQ3Mj+9PKJI+jvAKnzZoOXrhvX05zO42lRJu0ou8vIibLGVt+bm0?= =?us-ascii?q?AhBGOTLoYMMT4Cvijb5EnsaR3YCgAIluGikRUJvvV/KoHyoYte77OAaWDD08tn?= =?us-ascii?q?CbFKLaHQCF7Edmq2zAE4y3N36NPnYU1tNiSweBJExEnA8bRi06kYAjGgCs2sPh?= =?us-ascii?q?bF9z5ioN6V7gthtM1uVoOgHxUmfFugindyw0R4KZLBpK6QFC/FzYPtaC4eJ2BS?= =?us-ascii?q?1Y+YehrAOVIGyBewtIFX0JWlCDB137OLmu/8PP8/CABuelIfvOYK+OqfdCV/eG?= =?us-ascii?q?xJKv1JFp/zCQOcWOJHZiC+c32k1ZXXB2A87ZgSkASzQLlyLRaM6WvA+89TNsoc?= =?us-ascii?q?+h9vTrWR7v5YyUBrtTL9pg5Q65jb2EN+6KiyZzMSxY2Y8UxX/U1Lgf20YfhDp1?= =?us-ascii?q?eDWqFbQAtDXNTL7LmqNNFB4UdT98ONFT760i2glNOMjbis7617NjkvE0C01FVU?= =?us-ascii?q?H6ms2za80FOX29NEjABEaNLriGIifLw87va6OmVbJQlPlUtwG3uTuDCEDjPzuD?= =?us-ascii?q?lz7vVx20LO5DkjqUPB1Et4G7aBptDnLjTN3+YB2hLNB3lSE2waEzhn7SL2EcPi?= =?us-ascii?q?Jzc11TobCL6iNYmutwG2pE7nV/LOmEnz2W7+7XK5oMtvtrGCt0nfpA4Hsm07tV?= =?us-ascii?q?8D1ERPttlSvOqd5upkuqkvOIyjtmThVOrC1EhJiMvUp8OqXU7YVPWXHB/B0R92?= =?us-ascii?q?qQEAgKq8FjCtLxp6Ba0sLPm77rKDde79LU+tMRB8rUKMOHKHohNh7pGD/IDAQb?= =?us-ascii?q?VjOrMGDfh1BHkP6M7HGVqYI6qpf0kpoUVrBbTEA1Fu8dCkl9H9wDIJN3US0/nL?= =?us-ascii?q?6ei84I63S+owfNRMVGvpDHUfeSDuv1JDafk7ZEewMCwankIoQLKo37x0tiZ0F8?= =?us-ascii?q?nIvUAUXQWctAoi5mbg8vvEVC6n5+TnYw20LkcA+t5mEcFeKslB4slgR+efgt9C?= =?us-ascii?q?vr41ovPFrFujAwn1crltX/nT+RcCX8I7yxXYFMFiX0sEYxMovhQwlrbQy+h0pk?= =?us-ascii?q?OynYR7hJlbtvaXhriBPAuZtIAfNTUKpEYBkWxf6Kefoo1VVcpz69ykBZ/+vFDo?= =?us-ascii?q?FulAwwcZ6jt3hAwR5sbMYpJazMI6pE1kVfibiQvi+py+8x2xQTKFwX8GOIfy4J?= =?us-ascii?q?tlcIOac6KCq15Oxs6BCCmjtZdGgKSfUqvupg9lkhNOSY0yLgz7lDJ1i1N+yYNa?= =?us-ascii?q?OWpW7AlM+PQl4r2UMIkVRF8aJx0cc5fEqeT1ovw6eJFxQVKcrCLhlYb9FM+3jX?= =?us-ascii?q?fCaOt/jNwJ1uMoqhEeDoSPOBu7wPgkK4BgopGZoD7tgZFJm2zE7YNdvnLKICyR?= =?us-ascii?q?g1+ATrJVCFDPNVeBKLkDYKuNywzJ533IZHPT4RG2N9Pjur5rzPvA8lnOKDXMsq?= =?us-ascii?q?YncdRoYLLHY2WMymlCFHp3tACTm20uQeyAiE9TDxvT/fDDjmYNplffuUaw5sBM?= =?us-ascii?q?uw+Toh76i8kUTX/YnGJ2HmKdRivcfC5vgEqJaBEP5bV6Rys1nClIlCXHylSXTP?= =?us-ascii?q?EN6vK5j3cYksYsT+CmymXVynlzI1U8DxMc6iLqiVgAHoQYJUv5ee3D04KMCyCC?= =?us-ascii?q?oRGxZqqOEF/q58YhcDY5Ujax7yqws+L7C/IBuf0ti2WWatLzpWQOVfzeW9Y7xX?= =?us-ascii?q?1DIiYPanxnU6Upw0yPK6/lIKRJEPkh7R3+2jZ5VEXSj1BHNdZx3FpTAlmGh5Ku?= =?us-ascii?q?Yy3uA/zQvSsVYGKTCLc/dmZXdYv9EmH1ySP2t5Cm45R1+agorD5g+s378S/ytB?= =?us-ascii?q?kdZby/dFsH3ksp/Zfj2sRLShqY/JvCo4cdgmv6pxPJTtI8ecqJzenj3fTJzRsg?= =?us-ascii?q?KfUy63DPtalcZOLy1GWvVInnslOcMes4pb9UUxTts+J6BICKQ0o7ClcyBkDS0M?= =?us-ascii?q?wi8FVoOA2jMCj/yy2rTAkBefbJAiMBsZsJpfmdsRSSh2bT0CpKW7TYXZi3eESn?= =?us-ascii?q?QXIAcU9QlD/hgAlpJ2fuz/44rFV55Myz9Xo/JoSSTHDJ9o+EXnSmuOm1j3VO2h?= =?us-ascii?q?k/C13QJV1P/s098bWAJhBkhZ2elWk1UnKK1tK6gQpYPKtSeIel38vGLo0uSmJV?= =?us-ascii?q?1RxtbTd1z3FobFsnD8UiIE830OWYBP0G3fFYgVkwdhdKYro1BMLZu6ekri4jwr?= =?us-ascii?q?3J5lH7+mWsC331wlt2oJRz+2E9pdDOFrqFLXVyd/Y5+xrJXqJo5fTXJO952Fs1?= =?us-ascii?q?dWjkFtPDCjyZZGLMFN+DEMViBVoTqBpNuyVNFD2chuAp8OJddwpWzwF75aN5iK?= =?us-ascii?q?vXI2oKDvxWHE9Dwmtle12imzEbeiT+1F520eBhkpJ2OGp0kzEuQj72bS/UrJsl?= =?us-ascii?q?1v4+hbAb2PgllrrzZmApBCHDBJ2m65L15rVnlJr/1aKLjJc8xbW/Q9fhGvNAAi?= =?us-ascii?q?GfMkwkCE81p5kmv+Yyx3qgRV4TvdXxUuWSkTnLjthSUUqtu7Nj8CV5JIcTIhYj?= =?us-ascii?q?/fKw2FhC9XvAxQa11xVpAdBdZF5a8U0ZVI8crFVEmjNzsJXBp8OQIkyfBfj1JM?= =?us-ascii?q?sF2EeSDBCgqlbe7PsgZrfciLscGpMO/0/BxAioP6quA367sMR3u6mQ23W9/eq5?= =?us-ascii?q?XwttqQtkuBbK34KfGzYWfdTDjQihC9naskD4PU8CfNLQVWMIR6yX44YZj7E2HL?= =?us-ascii?q?IxVGJ6UfJ0VFSaB2c9JGovpVZ8V8YqYG5bdtBg6bRhPoAIGvruNJLkzURTTFKy?= =?us-ascii?q?WO6PK/rJnW7bzATejges2MyGrGQ61tOJd68iP3G7Dw0Y9R4kD2wOti9ltmSVja?= =?us-ascii?q?NCCMtNbhKRkN5MmsbEviuYAmEi3NDZdsinXtwFpAd80NTy2s7psY1ItT6GzsRu?= =?us-ascii?q?JgzkjzrOpS+qFi6Ykz+L1pyMG0JaLIJfRbt09nDAKUCR9x9pUxGmh/WnxeYvMM?= =?us-ascii?q?KPfLY6sVl8fuq/r4F6YP8h2a5/RZacfbJ0HGgsS/DDCcRgBDnAcFszEaNRGQ1/?= =?us-ascii?q?+Cm69zUsalvvP02kci7lmxNBIGy6pt5Yic8KqSuODXdwfRzaQDWqXyWsz8tLAs?= =?us-ascii?q?tF2J5f04lL8OfXd4Yxa7H+gcSMEdwHvgzaEwwi42FcPMAa7g8uZZV30lhjLgh4?= =?us-ascii?q?x9H1IOF/MQBrqL+IRTk3w2m+PHK9IWdbpClXyXFR6+Fb8Cy2Ck5DeLIGV/hRHO?= =?us-ascii?q?yR7wS3up7FDqtS94XTfMz9D7n0pXV7m3AFxfXy+3Nk54rjyPJgvotNz4uagv6k?= =?us-ascii?q?E5LHDkvsqXlGS9ILNXA9H/JNuELCk1pVMYloc+ScC01IAAB9W9PMke/21kYvvZ?= =?us-ascii?q?8WOrnDdLo71biIrG/sGV5vLXEGG7gK2bsLWMyipXyno5vVEj8tCvLOzO59mRTv?= =?us-ascii?q?u00GYeUjlwtBHcXx6vrbzbtUobNVaM0EfRl4wAJstZ0mUg1kH6+OgjR8o+9B1E?= =?us-ascii?q?GYbce/wCpT7yODzuwVacet43TTeR0z9WHlLzDFl5F7Mx2Hrqs8LViXjQ+1MpRo?= =?us-ascii?q?5qd0zknxB3DJs3KVgr6FcJxioPCw8NaQqUDLuwH0TqMZMEVVQfaRSAxLW6db04?= =?us-ascii?q?3VdtzbOz5O/eduh8B6sRNvlDjg6BhkVbGokMva0YXr18Z0dX9LTLqQj6F4jnQ/?= =?us-ascii?q?/mmGI/NfKrRMBa7ccZt3wl7gakWRWg7ZZD77AGiJGHbaNEZYbDvNp87kh9/zIP?= =?us-ascii?q?cDJCgARnhROjTe8cvPzj4sTcsJew9umuVrwiSPkM+hcoAGR+i5/wgFE9rtHNy+?= =?us-ascii?q?dTVJHaiYTl/ABKOX6Kt57Q0wNgJuoWN4KrYLFg+m0CJygZIXIOIdWWZOcn7i9o?= =?us-ascii?q?MTXc/VpCDd0QZdIWO8rNgwNUilbzVLFV6MXbBkeSC51veMAw82r31Dc1/IMzUu?= =?us-ascii?q?n88z+2PonT4UxCMf1FjSVsks/CpecOzPrdDSgY+3+ZZAZvziOF0ZmNBO76/f+Q?= =?us-ascii?q?x9HMS1MGAik2Xp9fJDqF+QynQPC5m4npUgOQ98/8nZM/dEOWRnyqn6QFs71BEf?= =?us-ascii?q?BBiiXlxDdeEp36h/OPv9qq9mRXqkVNEJxv4h3dBKVfIpJ7NAz5lsm1XEd8ADDy?= =?us-ascii?q?eMXJdhUzueqWwfwM7/95N0vkao8ROggExK7i6XpJUgtuT6b7vlSHUuIfattmTO?= =?us-ascii?q?jJr35P5oJmNaAPIEKRpJr0oTdUsFo2GhMmaKcsrjxGcUnDhAJVW6LzuL8OlAQc?= =?us-ascii?q?Vdp5tFRXGWK3PmI+5ibIWb5TjKaPFPwf6i+TQbAWU0V0LiN+RAu42Ilve7ushv?= =?us-ascii?q?1HrmJGkT9+oPc01zxqXh28tjPwp6gVwzIv5Km4tCkduXxCVuielibICVZAzPQN?= =?us-ascii?q?lqocCWzt6V+7YHkFcoTy5qNrJcL++ok9+34/ewksfzUaXeS8DCH9l7iHDZKJsN?= =?us-ascii?q?JAnxONo8HObbivLSgOKLQy1w/sS2J60gjEkxZi6HELTSm47N84OIW9Pt4oxjKv?= =?us-ascii?q?GWjfblkM+K1IsMz1tV4FV+Y2bFRhwGJ40seZWiINXsvPG30ujgglb2VEf4hP6R?= =?us-ascii?q?gAF6knmjyIpLVJ/hkIYDfIFYSo4ofQktnM2Xk8Vddl2Hnbp6yEhpMv1X1qhcl0?= =?us-ascii?q?7iqQt3gIcOzYScBsCGDp1ohD0ez+e+mtsucfRYpo0LShSv4CPdW99mat3ZVqW1?= =?us-ascii?q?Olxq4AEFajN+8D3LjbWT+/SWKEQeSLb3SMnzEhP0714RmnMEY6aN9Or0AnKevC?= =?us-ascii?q?mp9cmBH9UbNuWCqfu0XXzGo9PuMGbwg2opuoexQWTO4NYOiRPewuwPw4CFsRYH?= =?us-ascii?q?7FBC92C+6tsV6xh4h2IHRg7l/8YeTq6AzmN8GSGhYcG47AspFx4eC6Rn6GOXJ4?= =?us-ascii?q?yR19JlV79+feF1Q3se9RaIiRndnWh9tl1e4FdvFtMTAyu9IJnYJj84aU2t+QcR?= =?us-ascii?q?7N1pbyOc3Vov+ADv3d1UsqeWZaXaECbAPo4YU6It45W7rOHbtWvRQcGbI2QJo/?= =?us-ascii?q?OGft7Kt0Nh98chbNZLSohcnnvuCLZp5Tp3/M9FIwLTzctgYFyvOuSAx0cZGqi2?= =?us-ascii?q?/1IJAqSTJLt8dtBQd+HItTB8MAqBKqA4WamKG+l9C8+kB3tvQUsaXuEPDK1dW4?= =?us-ascii?q?34J3X5RA40yEIirRV+FXhRF+g+CzhOrQ+oXgAsPlP9UfXa50RXCWRKXBG9CBKy?= =?us-ascii?q?7GH8X+aU9du+qC1bV7QBSKTDr0U6qPqGuvM/AyshZz8ZBxYOeGlG9l1Lrcwtan?= =?us-ascii?q?IjgDqw=3D=3D?= X-IPAS-Result: =?us-ascii?q?A2BJAgCSgJZa/wHyM5BdHAEBAQQBAQoBAYMjKgNmcCiNdnS?= =?us-ascii?q?MfYMYlCqCDhEYC4dhVBgBAgEBAQEBAQIBaiiCOCSCSAMDAQIkVQMJAQFICAMBU?= =?us-ascii?q?xkFg0CBVwMNrDk6hHKEAoIiASAFhSOCJ4FXhm6BUwQZh0UBBJpQCYZQihQNiQG?= =?us-ascii?q?FdIl6h1aBLh44gVFNIxWCfYJDHIF8dgGNBgEBAQ?= Received: from tarius.tycho.ncsc.mil ([144.51.242.1]) by EMSM-GH1-UEA10.NCSC.MIL with ESMTP; 28 Feb 2018 10:15:43 +0000 Received: from prometheus.infosec.tycho.ncsc.mil (prometheus [192.168.25.40]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id w1SAFVKQ020867; Wed, 28 Feb 2018 05:15:34 -0500 Received: from tarius.tycho.ncsc.mil (tarius.infosec.tycho.ncsc.mil [144.51.242.1]) by prometheus.infosec.tycho.ncsc.mil (8.15.2/8.15.2) with ESMTP id w1SAFO7X013034 for ; Wed, 28 Feb 2018 05:15:24 -0500 Received: from goalie.tycho.ncsc.mil (goalie [144.51.242.250]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id w1SAFSc4020865 for ; Wed, 28 Feb 2018 05:15:28 -0500 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A1CFAABHgJZaly0YGNZdHQIFDIMkKmlwK?= =?us-ascii?q?I12dIx9gxiUKoIVCiOFDQKCUlQYAQIBAQEBAQECEwEBAQEBBhgGhXsDAydiUVc?= =?us-ascii?q?Zg0WBVwMNrDk6hHKEAoIWAQshBYUjgieBV4ZugVMEGYdFBZpQCYZQihQNiQGFd?= =?us-ascii?q?Il6h1aBLh6CCU0jFYJ9gkMQDBaBZnYBjQYBAQE?= X-IPAS-Result: =?us-ascii?q?A1CFAABHgJZaly0YGNZdHQIFDIMkKmlwKI12dIx9gxiUKoI?= =?us-ascii?q?VCiOFDQKCUlQYAQIBAQEBAQECEwEBAQEBBhgGhXsDAydiUVcZg0WBVwMNrDk6h?= =?us-ascii?q?HKEAoIWAQshBYUjgieBV4ZugVMEGYdFBZpQCYZQihQNiQGFdIl6h1aBLh6CCU0?= =?us-ascii?q?jFYJ9gkMQDBaBZnYBjQYBAQE?= X-IronPort-AV: E=Sophos;i="5.47,405,1515474000"; d="scan'208";a="211992" Received: from emsm-gh1-uea11.ncsc.mil ([214.29.60.35]) by goalie.tycho.ncsc.mil with ESMTP; 28 Feb 2018 05:15:27 -0500 IronPort-PHdr: =?us-ascii?q?9a23=3AYSEpQhZw+s4cq4turG4YVHn/LSx+4OfEezUN459i?= =?us-ascii?q?sYplN5qZoM+zbnLW6fgltlLVR4KTs6sC17KN9fi4EUU7or+5+EgYd5JNUxJXwe?= =?us-ascii?q?43pCcHRPC/NEvgMfTxZDY7FskRHHVs/nW8LFQHUJ2mPw6arXK99yMdFQviPgRp?= =?us-ascii?q?OOv1BpTSj8Oq3Oyu5pHfeQpFiCazbL9oMBm6sRjau9ULj4dlNqs/0AbCrGFSe+?= =?us-ascii?q?RRy2NoJFaTkAj568yt4pNt8Dletuw4+cJYXqr0Y6o3TbpDDDQ7KG81/9HktQPC?= =?us-ascii?q?TQSU+HQRVHgdnwdSDAjE6BH6WYrxsjf/u+Fg1iSWIdH6QLYpUjmk8qxlSgLniD?= =?us-ascii?q?0fOjAk8G/ZlMJ+gqFZrxKvvBFz35LYbZuJOPZiYq/RYdUXTndBUMZLUCxBB5ux?= =?us-ascii?q?YIQOD+odIO1WqI79p1kPrBu/HgmnGeTiyiFNhn/x36070uUhERrd0Qw6Ad0BrX?= =?us-ascii?q?TUo8/pNKsITe+1y6zIwCzFYvhL1zn9743IfQogofGKRb9wa9TexlQvFwzfklWc?= =?us-ascii?q?s5DqPzSQ1ukLrmOV7PJgWPqxh2I6pAx9uCajy8g2hoXXiY8Z0F/J+CVhzIs0JN?= =?us-ascii?q?C0UlN3bN2mHZdKqS2XOYV7TtkgTmxmvisx16cItoShfCcQzZQq3x7fZOKDc4iP?= =?us-ascii?q?+h/sWvicLy5+in9rZr+xnQq//VSix+HmSMa7zlNKrjFKktXWs3ACzR3T6sydRv?= =?us-ascii?q?t4/0eh3S6D1wHV6u5aPUA5jbTXJ4Muz7IqiJYevl7PEjH5lUnsg6Kbdl0o+u2y?= =?us-ascii?q?5OTmZrXmqIWcN4hxigzmLKQun8u/AeY5MwgPRGiW4v6826P+8k35WrpKkuc6nb?= =?us-ascii?q?XesJDfPcgbvLK2AxdJ0oY/7BayFyym38ocnXkGKlJFZR2GgpP1O1DOPP/4DfC/?= =?us-ascii?q?j06qkDdw3f/KJLLhApLTLiuLrLC0Zrt56khB2CIv3Ntf4NRSEbhHL/XtCWHrs9?= =?us-ascii?q?mNMB4leymzwfTmE50pyIYZW3COGYeDPa/SuEPO7eUqdbrfLLQJsSrwfqB2r8Xl?= =?us-ascii?q?imU0zAcQ?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CFAACSgJZaly0YGNZdHQIFDIMkKmlwK?= =?us-ascii?q?I12dIx9gxiUKoIVCiOFDQKCUlQYAQIBAQEBAQECARIBAQEBAQYYBleCOCKCSgM?= =?us-ascii?q?DJ2JRVxmDRYFXAw2sOTqEcoQCghYBCwEgBYUjgieBV4ZugVMEGYdFBZpQCYZQi?= =?us-ascii?q?hQNiQGFdIl6h1aBLh6CCU0jFYJ9gkMQDBaBZnYBjQYBAQE?= X-IPAS-Result: =?us-ascii?q?A0CFAACSgJZaly0YGNZdHQIFDIMkKmlwKI12dIx9gxiUKoI?= =?us-ascii?q?VCiOFDQKCUlQYAQIBAQEBAQECARIBAQEBAQYYBleCOCKCSgMDJ2JRVxmDRYFXA?= =?us-ascii?q?w2sOTqEcoQCghYBCwEgBYUjgieBV4ZugVMEGYdFBZpQCYZQihQNiQGFdIl6h1a?= =?us-ascii?q?BLh6CCU0jFYJ9gkMQDBaBZnYBjQYBAQE?= X-IronPort-AV: E=Sophos;i="5.47,405,1515456000"; d="scan'208";a="9928698" X-IronPort-Outbreak-Status: No, level 0, Unknown - Unknown Received: from ucol3cpa07.eemsg.mail.mil ([214.24.24.45]) by emsm-gh1-uea11.NCSC.MIL with ESMTP; 28 Feb 2018 10:15:27 +0000 X-EEMSG-check-005: 0 X-EEMSG-check-006: 000-001;5b9405c5-552f-4432-928c-2d062e2d367b Authentication-Results: ucol19pa13.eemsg.mail.mil; dkim=none (message not signed) header.i=none X-EEMSG-check-008: 576150142|UCOL19PA13_EEMSG_MP11.csd.disa.mil X-EEMSG-check-001: false X-EEMSG-SBRS: 3.5 X-EEMSG-ORIG-IP: 66.187.233.73 X-EEMSG-check-002: true X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0BEAADQgJZah0npu0JdHAECBAELAYMkgRNwKI12dJAVlCqCFQojhQ0CgyYYAQIBAQEBAQECEwEBAQoLCQgoL4UkAwMnYlFXGYNFgVcQrDY6hHKEAoIWAQsBIAWFI4N+hm6BUwQZh0UFmlAJhlCKFA2JAYV0iXqHVoEuHoIJTSMVgn2CQxAMgXw/NwGNBgEBAQ X-IPAS-Result: A0BEAADQgJZah0npu0JdHAECBAELAYMkgRNwKI12dJAVlCqCFQojhQ0CgyYYAQIBAQEBAQECEwEBAQoLCQgoL4UkAwMnYlFXGYNFgVcQrDY6hHKEAoIWAQsBIAWFI4N+hm6BUwQZh0UFmlAJhlCKFA2JAYV0iXqHVoEuHoIJTSMVgn2CQxAMgXw/NwGNBgEBAQ Received: from mx3-rdu2.redhat.com (HELO mx1.redhat.com) ([66.187.233.73]) by ucol19pa13.eemsg.mail.mil with ESMTP; 28 Feb 2018 10:15:25 +0000 Received: from smtp.corp.redhat.com (int-mx03.intmail.prod.int.rdu2.redhat.com [10.11.54.3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.redhat.com (Postfix) with ESMTPS id 9BF9F4040855 for ; Wed, 28 Feb 2018 10:15:24 +0000 (UTC) Received: from localhost.localdomain.com (unknown [10.43.12.26]) by smtp.corp.redhat.com (Postfix) with ESMTP id 3E3E710B0F45 for ; Wed, 28 Feb 2018 10:15:24 +0000 (UTC) X-EEMSG-check-009: 444-444 From: Vit Mojzis To: selinux@tycho.nsa.gov Date: Wed, 28 Feb 2018 11:15:08 +0100 Message-Id: <20180228101510.21023-1-vmojzis@redhat.com> In-Reply-To: <1498485334.13301.9.camel@tycho.nsa.gov> References: <1498485334.13301.9.camel@tycho.nsa.gov> X-Scanned-By: MIMEDefang 2.78 on 10.11.54.3 X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.5.16 (mx1.redhat.com [10.11.55.5]); Wed, 28 Feb 2018 10:15:24 +0000 (UTC) X-Greylist: inspected by milter-greylist-4.5.16 (mx1.redhat.com [10.11.55.5]); Wed, 28 Feb 2018 10:15:24 +0000 (UTC) for IP:'10.11.54.3' DOMAIN:'int-mx03.intmail.prod.int.rdu2.redhat.com' HELO:'smtp.corp.redhat.com' FROM:'vmojzis@redhat.com' RCPT:'' Subject: [PATCH 1/3] libsemanage: remove access() check to make setuid programs work X-BeenThere: selinux@tycho.nsa.gov X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Security-Enhanced Linux \(SELinux\) mailing list" List-Post: List-Help: Errors-To: selinux-bounces@tycho.nsa.gov Sender: "Selinux" X-Virus-Scanned: ClamAV using ClamSMTP access() uses real UID instead of effective UID which causes false negative checks in setuid programs. Remove redundant access() checks Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1186431 Signed-off-by: Vit Mojzis --- libsemanage/src/direct_api.c | 7 ------- libsemanage/src/semanage_store.c | 17 ++++++++--------- 2 files changed, 8 insertions(+), 16 deletions(-) diff --git a/libsemanage/src/direct_api.c b/libsemanage/src/direct_api.c index 88873c43..b7899d68 100644 --- a/libsemanage/src/direct_api.c +++ b/libsemanage/src/direct_api.c @@ -148,9 +148,6 @@ int semanage_direct_connect(semanage_handle_t * sh) if (semanage_create_store(sh, 1)) goto err; - if (semanage_access_check(sh) < SEMANAGE_CAN_READ) - goto err; - sh->u.direct.translock_file_fd = -1; sh->u.direct.activelock_file_fd = -1; @@ -398,10 +395,6 @@ static int semanage_direct_disconnect(semanage_handle_t *sh) static int semanage_direct_begintrans(semanage_handle_t * sh) { - - if (semanage_access_check(sh) != SEMANAGE_CAN_WRITE) { - return -1; - } if (semanage_get_trans_lock(sh) < 0) { return -1; } diff --git a/libsemanage/src/semanage_store.c b/libsemanage/src/semanage_store.c index 936e6495..4bd1d651 100644 --- a/libsemanage/src/semanage_store.c +++ b/libsemanage/src/semanage_store.c @@ -538,7 +538,6 @@ char *semanage_conf_path(void) int semanage_create_store(semanage_handle_t * sh, int create) { struct stat sb; - int mode_mask = R_OK | W_OK | X_OK; const char *path = semanage_files[SEMANAGE_ROOT]; int fd; @@ -557,9 +556,9 @@ int semanage_create_store(semanage_handle_t * sh, int create) return -1; } } else { - if (!S_ISDIR(sb.st_mode) || access(path, mode_mask) == -1) { + if (!S_ISDIR(sb.st_mode)) { ERR(sh, - "Could not access module store at %s, or it is not a directory.", + "Module store at %s is not a directory.", path); return -1; } @@ -580,9 +579,9 @@ int semanage_create_store(semanage_handle_t * sh, int create) return -1; } } else { - if (!S_ISDIR(sb.st_mode) || access(path, mode_mask) == -1) { + if (!S_ISDIR(sb.st_mode)) { ERR(sh, - "Could not access module store active subdirectory at %s, or it is not a directory.", + "Module store active subdirectory at %s is not a directory.", path); return -1; } @@ -603,9 +602,9 @@ int semanage_create_store(semanage_handle_t * sh, int create) return -1; } } else { - if (!S_ISDIR(sb.st_mode) || access(path, mode_mask) == -1) { + if (!S_ISDIR(sb.st_mode)) { ERR(sh, - "Could not access module store active modules subdirectory at %s, or it is not a directory.", + "Module store active modules subdirectory at %s is not a directory.", path); return -1; } @@ -624,8 +623,8 @@ int semanage_create_store(semanage_handle_t * sh, int create) return -1; } } else { - if (!S_ISREG(sb.st_mode) || access(path, R_OK | W_OK) == -1) { - ERR(sh, "Could not access lock file at %s.", path); + if (!S_ISREG(sb.st_mode)) { + ERR(sh, "Object at %s is not a lock file.", path); return -1; } }