From patchwork Fri Mar 2 19:54:34 2018 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Jann Horn via Selinux X-Patchwork-Id: 10258993 Return-Path: Received: from mail.wl.linuxfoundation.org (pdx-wl-mail.web.codeaurora.org [172.30.200.125]) by pdx-korg-patchwork.web.codeaurora.org (Postfix) with ESMTP id E490460211 for ; Mon, 5 Mar 2018 13:59:36 +0000 (UTC) Received: from mail.wl.linuxfoundation.org (localhost [127.0.0.1]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id C1F49289C5 for ; Mon, 5 Mar 2018 13:59:36 +0000 (UTC) Received: by mail.wl.linuxfoundation.org (Postfix, from userid 486) id B60EE28A47; Mon, 5 Mar 2018 13:59:36 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on pdx-wl-mail.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-4.2 required=2.0 tests=BAYES_00, RCVD_IN_DNSWL_MED autolearn=unavailable version=3.3.1 Received: from UCOL19PA11.eemsg.mail.mil (ucol19pa11.eemsg.mail.mil [214.24.24.84]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id D7EDE289C5 for ; Mon, 5 Mar 2018 13:59:35 +0000 (UTC) X-IronPort-AV: E=Sophos;i="5.47,427,1515456000"; d="scan'208";a="459249106" Received: from emsm-gh1-uea10.ncsc.mil ([214.29.60.2]) by UCOL19PA11.eemsg.mail.mil with ESMTP; 05 Mar 2018 13:59:34 +0000 X-IronPort-AV: E=Sophos;i="5.47,427,1515456000"; d="scan'208";a="9331208" IronPort-PHdr: =?us-ascii?q?9a23=3A8/7K7RPcqp2v8tgewD8l6mtUPXoX/o7sNwtQ0KIM?= =?us-ascii?q?zox0L/T9rsbcNUDSrc9gkEXOFd2Cra4c0KyJ7Ou9BiQp2tWoiDg6aptCVhsI24?= =?us-ascii?q?09vjcLJ4q7M3D9N+PgdCcgHc5PBxdP9nC/NlVJSo6lPwWB6nK94iQPFRrhKAF7?= =?us-ascii?q?Ovr6GpLIj8Swyuu+54Dfbx9HiTahb75+Nhe7oAfeusQWg4ZpN7o8xAbOrnZUYe?= =?us-ascii?q?pd2HlmJUiUnxby58ew+IBs/iFNsP8/9MBOTLv3cb0gQbNXEDopPWY15Nb2tRbY?= =?us-ascii?q?VguA+mEcUmQNnRVWBQXO8Qz3UY3wsiv+sep9xTWaMMjrRr06RTiu86FmQwLmhy?= =?us-ascii?q?cdMz4y7X/ZhMp+gqlGpB6tvgFzz5LRbIyTKfFwfL7SfckCSGRBQMhfSiJPDIC7?= =?us-ascii?q?YYYUE+YNIfxVo5XnqlcSsRezAxSnCuP1yj9Pg3/7xbE00+U9HgHGxgMgBc8Bu2?= =?us-ascii?q?nWotrvNacSV/66zLLVxjXdbvNZwyr25pXWfRAloPGMW69wcMXMwkQoDAPKkFGQ?= =?us-ascii?q?qY3jPzOI2eUAqHSb7up8WuKvjG4rsQdxoiO1ycs2hYnJgZwVx0nC+C5kw4g1Pc?= =?us-ascii?q?W1RFN0bNOrCpddtzyWO5FoTs4tXW1kojs2xqUFtJO6ZiQG1ZoqyhHFZ/GIcIWE?= =?us-ascii?q?+AzvWeCMKjlinn1lYqiwhxOq/Eilze3zS9e73U5RripAjtnMrncN1wHP6sSfSv?= =?us-ascii?q?ty4EOh2TGX2gDP8O5EO0E0lbfAK5I73r4xloYcsUTEHiPsnkX5kLSWeVk+9uit?= =?us-ascii?q?6uTnZq3qpp6aN4BqlgHzKrkil8OwDOgiMgUCQnKX9fqz2bH950H1Xa1Gjvgsna?= =?us-ascii?q?nYtJDaK94bpqm8AwJNyYYs9RK/Dzag0NQFkngLNUlKeBWaj4jvJ17BPuv4AOyj?= =?us-ascii?q?g1WsjDhrx/fGMqfnApXWNHfPirjhfbFj60JE0go80chf545ICrEGOP/zWEjxtN?= =?us-ascii?q?rCAR8lMwy72eDnBc5/1oMZX2KPB7WWMLjOsVCW/OIvOPOAZIgPuDbyM/Il/eLh?= =?us-ascii?q?jWclmV8BeqmkxZkXaHKiEft6IEWZen3sgtEAEWcUpQc+QujqiECNUDFIenayWb?= =?us-ascii?q?485iwhBIKhF4fDSZingKad0yejAp1WemdGB0iUEXj2bIqLRfEMaCOOIs9miTEE?= =?us-ascii?q?VKauRJE/2h20sw/60bVnJPLO+iIErZLjyMR15+rLmB4v8jx0CcKd3HyTQGFwn2?= =?us-ascii?q?MFXCU5075loUx60FuD1rJ4g/NAH9xJ+/xJShs6NYLbz+FiFt/yRhjOfs2SRVm6?= =?us-ascii?q?RdWmBC0+Qcgqw98SeUp9Hcutjgzb1SqwH7AVj6CLBIAz8q/E3njxIdp9xGjC1K?= =?us-ascii?q?Y/ilkpXNdPNXemh6Nk8AjTH5DGk0Ocl6mwdKQc2DXC9GCMzGaUu0FYSgFwW73f?= =?us-ascii?q?XX8DfkvWscj55kTaQr6uCLUnNQ1BxNWHKqtOc9HpjFNGSO3lONvEeWKxmGawBQ?= =?us-ascii?q?iWyb+WaorlZXkd1j3HCEcYiwAT4WqGNQ8mCyavomLeCDluGkz1Y073/+lxtm60?= =?us-ascii?q?Tkguzw6Qd01hzb21+hwLivOAV/MfxLUEuD0uqz9sBlayw8rWC8acpwpmZKhcb8?= =?us-ascii?q?k9701B1W3Ftgx9JYetL6V6hl4fagh3pE3v1w5tBoVHi8gqo2sgzBBuJqKAzFNB?= =?us-ascii?q?azSY0IjzOrLNKWny+w2vZrXV2l7E09aW/boP5O4/q1X5swGjDlAi/Gl/09lJz3?= =?us-ascii?q?uc4Y3HAxAPXpLrU0Y46QJ6qqrAbSYh4oPYz3psMbO7sjXawdImGPMlygq8f9dY?= =?us-ascii?q?KK6LCBX9E8kECMi1NOwrm1+pYwkfPO9O9a47IcWmd+eH2KGxJupgmiypjXhf6o?= =?us-ascii?q?Bnzk2M7zZ8SvLP35sd2fGXwxaIWizzjFekvcH7g4ZEai8OHmCn0yjrGJZRZrFu?= =?us-ascii?q?fYYMEWquOMO3xs95h572R35V70WjB1UB2M6nfBqddVr90RdW1UsJvXytgTG4wC?= =?us-ascii?q?BskzE1sqqf2zTDwur4exoDJm5EWnNijUz3LIiqkd8aRlOnbxUslBe/4kb63adb?= =?us-ascii?q?rrxlL2bPWUdIYzT2L2Z6X6uut7qNf9JP6JQysSlNTOu8YVeaSrjyoxYB1yPjHm?= =?us-ascii?q?1eyyohdzGtoJn5mAZ6iG2FJnZpsHXZYd1wxQvY5NHEQf5R3yEGRDVhhTnMGFe8?= =?us-ascii?q?O9ip/dOJl5bMqe2+THqhVpxVcSnq0YyArzG35Wt0Dh2jh/qzgMHoERAm0S/n0N?= =?us-ascii?q?lnTT/IrBH4Yonvyau6K/5ofk5mBVLn8Mp6B51xkpAqiJEXw3gaiY2f/WAbnmfr?= =?us-ascii?q?LdVbxaX+YWIORTEVxd7V+xPo2E59IXKP3IL5UGuSwtd7a9m9eGMW1To379pWB6?= =?us-ascii?q?eM8LxEgSx1r0KgrQ3LfPh9mikSyeM0534cn+EGphAtwz6AArAJA0ZYJzfsmw6T?= =?us-ascii?q?79C5saVXfnqgfqa+1Ep5h9ChA6+NrhtaWHnnZpcoBTVw4dlnMFLQzH3z7ZnpeM?= =?us-ascii?q?fWbd0OrRCUjRHAgPVVKJ4rkPoFmzZnM3rnvXI50+47kQBu3ZaisYifMWpt4aa5?= =?us-ascii?q?DwVEOT30e8MS+ijhjahEkcaQxYyvGY9hGjoTVpvyUf2oCC4StejgNwuWEz09qn?= =?us-ascii?q?ObFqTEEA+a70dmoXzPHI63N3GLJHkZytBiSweHKExZng8UQC0wnoQlGQCy2Mzh?= =?us-ascii?q?bEB56ygf5lHirBtM1uVoNxzkX2fRugindzA0SIKFIxpO9AFC4EXVPtKC4eJvBS?= =?us-ascii?q?1Y+YehrAOVIGyBewtIFX0JWlCDB137I7ah+dzA8++eBuqiMvfDequOpvJEV/eJ?= =?us-ascii?q?xJOv1Y1m8yyKNsqRInloF+c71VZbXXBlB8TZnC0CSyINly3TcsGbvw2z+itrrs?= =?us-ascii?q?C46/TmQxjg6peKC7dINtVv4R+2i7+ZN+GMnCZ5NSpY1pQUyH/O0rgQxkYSizl1?= =?us-ascii?q?ejmjELQArzXNTL7emq9WCR4UcSVzO9dJ760m2glBI8nbisn61rRglP46F09FVU?= =?us-ascii?q?D9msGufcEFOHqyOFTDBEaKL7SGOSbLz9vsYayiVbJclv5UuAO0uTaaFU/jIzuC?= =?us-ascii?q?miL1WBGvK+FMkTqbMAZQuY6nbhZtEm/jTNT8Zh28Kt93giU8wacoiXPSKW4cLT?= =?us-ascii?q?98fltLrr2R6SNYhutwG3da43V/M+aEgSGZ4/PfKpYMvvthGj50mP5C4HQm17tV?= =?us-ascii?q?6zlJS+d0mCvdqd5upUqrnfSRxTV8URpBsDBLiJiMvUV4NqXT7oNAVmrc/BIR8W?= =?us-ascii?q?WQDAwHqMFqCtL1paBf1MPClKXrKDhc9dLU+NETB8nQKM2cN3ogPgDlGDnODAsK?= =?us-ascii?q?VTSrL33Qh1RBkPGO8X2YtoQ6qp/pmJYUUL9bU100Ge0cCkt+BtwCJ4l4XjA/nL?= =?us-ascii?q?GHi84I4GaxowPKRMVGpJzHUOydAen3IjaDkbZEfwcIwa//LYkLNI3720xjakF9?= =?us-ascii?q?nITOGkrQQc5CrzZkbg81vEVN6mZxQnc020L/ZQOn+GUTGuKsnh4qlgt+Zvwg9D?= =?us-ascii?q?Hy7FgtIlrHvygwkE4qmdX5mz+RdiXxLKSxXY1MDSr7qVQxOIvhQwlpdQ2ygVBk?= =?us-ascii?q?NDDcSrJLkbRgbn5khxXGuZRTGf5RVrZLYB4Kxf6KYPUo30xcqj+5yk5H/+fFD4?= =?us-ascii?q?VtlBcye562s31Awx5jbMIyJaHIOaVG1EZQhqOTsS+zze0+2hUeJ1wK8GKcYy4H?= =?us-ascii?q?plAHNqQ8Jyqp4uxt6RaOmz1dd2gQT/AquO5l9lshO+ScyCLty7pDKkerN+OBKa?= =?us-ascii?q?OYum/AmNWHQlM2y0MEjU5F/aJ50c07aUqbS1gvzKeNFxQOLcfCMh9ab85T9HjV?= =?us-ascii?q?YCaPvv7Azo5yP4W4Cu/nV/SOtLoOjkKiAgkpA5wG7t4dEZm0zEHYMcDnIaYZyR?= =?us-ascii?q?Us4QTrI0mFDPRJeR+QjTgHosG+w4Vs0oVHIDESH3l9Oz2t5rnLvg8qnOaDXNAu?= =?us-ascii?q?b3gAWosEN245V9OilC5cv3VACj630uQDxwWZ9DD8pz7fDD/lY9ptefeYfxVsB8?= =?us-ascii?q?+q+T8n6ai5lUbX8onCJ2H9LdltocHA6eUBqpmdFvxUU6dys13Hm4ZCXXyrU3TD?= =?us-ascii?q?EdmvJ5j/c4Msd8D7Cm6mUlyjjDI4V93xPNCsLqeUgQHoQoJUsJKD0j46KMGzDC?= =?us-ascii?q?0TFRBrqu4f46J8YBEMbIAgYR70rQg+MbKwIBuA2NW0X2mtMSdWT+VYzeiie7NX?= =?us-ascii?q?zTAjYfOhxXQ8SZE6y+238U8TS5EQkhHR2+qsZ4lEXSj0AHxddB3FpTAlmGh5Ku?= =?us-ascii?q?Yy3uA/zQvSsVYGKTCLc/dmZXdYv9EmH1ySP2t5Cm45R1+agorD5g+s378S/ytB?= =?us-ascii?q?kdZby/dFsH3ksp/Zfj2sRLShqY/JvCo4cdgmv6pxPJTtI8ecqJzenj3fTJzRsg?= =?us-ascii?q?KfUy63DPtalcZOLy1GWvVInnslOcMes4pb9UUxTts+J6BICKQ0o7ClcyBkDS0M?= =?us-ascii?q?wi8FVoOA2jMCj/yy2rTAkBefbJAiMBsZsJpfmdsRSSh2bT0CpKW7TYXZi3eESn?= =?us-ascii?q?QXIAcU9QlM/AUAlotqceD/7ovIS5tMyzBNrvJxVSvLEYJo+EXnRWGMhlj4U+6h?= =?us-ascii?q?k+2v3QJd1v7s1cMbWBFnA0hH2+lWjlcoKK1wK6QIpIHKqCKIdUXgsGLu0+amJV?= =?us-ascii?q?hRyczId1LjFobFs3TzUjEE830OWYBP0G3fFYgVkwdhdKYro1BMLZu6ekri4jwr?= =?us-ascii?q?3J5lH7+mWsC331wlt2oJRz+2E9pdDOFrqFLXVyd/Y5+xrJXqJo5fTXJO952Fs1?= =?us-ascii?q?dWjkFtPDCjyZZGLMFN+DEMViBVoTqBpNuyVNFD2chuAp8OJddwpWzwF75aN5iK?= =?us-ascii?q?vXI2oKDvxWHE9Dwmtle12imzEbeiT+1F520eBhkpJ2OGp0kzEuQj72bS/UrJsl?= =?us-ascii?q?1v4+hbAb2PgllrrzZmApBCHDBJ2m65L15rVnlJr/1aKLjJc8xbW/Q9fhGvNAAi?= =?us-ascii?q?GfMkwkCE81p5kmv+Yyx3qgRV4TvdXxUuWSkTnLjthSUUqtu7Nj8CV5JIcTIhYj?= =?us-ascii?q?/fKw2FhC9XvAxQa11xVpAdBdZF5a8U0ZVI8crFVEmjNzsJXBp8OQIkyfBfj1JM?= =?us-ascii?q?sF2EeSDBCgqlbe7PsgZrfciLscGpMO/0/BxAioP6quA367sMR3u6mQ23W9/eq5?= =?us-ascii?q?XwttqQtkuBbK34KfGzYWfdTDjQihC9naskD4PU8CfNLQVWMIR6yX44YZj7E2HL?= =?us-ascii?q?IxVGJ6UfJ0VFSaB2c9JGovpVZ8V8YqYG5bdtBg6bRhPoAIGvqeNJLlLXRTvAMy?= =?us-ascii?q?WB7vawrpjI4LzbV+fgeteMyGrdTKJvIJh28z/7FKn20YVG4Er5xu9t9l9mSVjB?= =?us-ascii?q?Ky2Brs7uJhkM5Mm5ckvtpIMpECjTAJdtlHrt2kBAeNYWQyKw9pQY04lV6HHqSe?= =?us-ascii?q?J3ykLzqvFd96F46Ykr5LBk0cW0Kr3UKfRUq09nBQWbCRtx+5UxGmd/QXtRYugL?= =?us-ascii?q?JPfXY6sZkdjkq/rrGKwP9B2V5+tZZMPIJ0Hcm8m/DjWcRgJBnAoatDEVMBCT1/?= =?us-ascii?q?+flK9yU8qlovL52k016VikMhEG1Kxt5ZuD+qeQpu/Xbh7RwKMBWqf0RsL8sK4s?= =?us-ascii?q?u0KU5f0rjrIOfHJ6YxG/GugHSsEd3nvgzbwtzS80FcPDG6nt+P9FV3I8hD7gmp?= =?us-ascii?q?Z9H1sMGvwOBrqL4Z5ennoklOzFK90WaL5NlnyIFR6+Hb8I0WSr5DePIGl5nhHO?= =?us-ascii?q?1An9QWa07F/wsS94TjXDwszmkkpUTLa3A1ldXzanOE9/qjOPPxHouMDxuasr8E?= =?us-ascii?q?E8Knbku86VlGu9JLNXGNXyJNiHISkxpF8al5MxScKy1oAcA9qyOs8R8Gt5bvvc?= =?us-ascii?q?9WykjzNBr71Ah4rE7cGf4u/XEmW4j62Gt7WNwyhVynk5vF4l8N+vKurD58aUTP?= =?us-ascii?q?S0yWkeUz1zuwzbXx66srbbtUwbOVSX0EfXn4wHJspW3Xgj1kDo/ucjQtMz9BlG?= =?us-ascii?q?FonaevMCoSv+NyfzwVmCfd04TDSe0yFQHlLvC1Z0Aq882Hj/vMjRj3ff50UoRp?= =?us-ascii?q?Vsd0zgnRF3F583KV4x51gXzCsDFhINaROCALGzG0vlKYoEVU4eaRWIx7W6Yr04?= =?us-ascii?q?3VFvzbOv6u7TavZ8B6kXOvZekAGOhl5bFYwSsaEER7J8YVBd/rbNpgf+E4jnQ+?= =?us-ascii?q?TmlX0oOP26WM9a694Wt2ci4gukQxqg6ItD4KgbiJ+Sa65EeoLAvMZi4Ed7/TQP?= =?us-ascii?q?bDBCgABjjxOlVuARvO/j7cbdsJq07eauU6EhR/4J+BgwBmR+iYbwgV84rNHTye?= =?us-ascii?q?hcUI3Uhp7l/ABLPXGKpJ7Q0wNgJuoWN4KrYLFg+m0BJygfO30OOt6WZOMn4yN3?= =?us-ascii?q?MTXT4FtCAtgXZd4DOcrAlg9VhlfuWLFJ+crRAkWYBJtrd8A082r3zyg48ZQgXe?= =?us-ascii?q?b78z+6PI3R4V5LMfNCiiVsid3DqfMawfrXEicX52eWZwJywiOYxJmHE+zw8vmU?= =?us-ascii?q?yNHIS1MGGTY7U4VaJDqC/wyrXPa6lJXtUgOJ98DygZM+dESLRnyynaQIqbhMEe?= =?us-ascii?q?9eiirh2jhRC4H1i+iTs9Wy9GtdrkdHH5pr7R3ZBKVfOY12ORXmlsaxQEhxHS//?= =?us-ascii?q?eNzJeRovv+qW3f0A4+JkN0vxfYUbOA4Ly6rm6XpJSQtjULz2sUiXXeIfYNtrU/?= =?us-ascii?q?3FoWpT6Y1+N68DJl6dq4L2rj1QslA5HBcpaKMsrjxdbkTOkwlVW6H6ubEejgsc?= =?us-ascii?q?VcV0uVRLGWK2OWIx+yDLVaJLg6mNEPYV6CmcTrQSU0V0NSNzWw+12JRre7aygf?= =?us-ascii?q?BHs39JniBjr/guyTBmQgWzuTH0raIXxT0g4K24tCkGuXFdS+WekiTICVZEzPkR?= =?us-ascii?q?j6cTEXXi6Vu6YHYdaov++r9nKtr89YM5+XQwfQ0jfzEaXeSnEyz/lL2HAoqTsN?= =?us-ascii?q?9Hnx6NvMLObaOvLSgMKLsy1AjvR39n0gjRhBxo6ncEQi287N84I4WwIcglyTSs?= =?us-ascii?q?GWjabFYD/LhEscrwtV4OSes5d0lhwGF93cSdQS0NXsPPEX4vjgc4cWVEbI5D6R?= =?us-ascii?q?gCGqgmmjaIpKhG8R0KbzrPF4Sl+5XQnd3W1nUnStdq3G3WrLWfhpw2yH1lh890?= =?us-ascii?q?7imWtXQVc+zXTdRhAmD31ohF0uz+e/StvfwbSIt81ruuTuUOMs+99muqwJ9qQF?= =?us-ascii?q?OqxqwCH1qlN+8O3rPbUyajSW2FVuWHamyMnzciMk7u/hmlNVw3Z91Mr086KOfC?= =?us-ascii?q?gYRclwL5W7NuWiqQvUPbzHAkMe4CcgI5opuoewwLTO4XYOiRPvYuwPw4CFQSa3?= =?us-ascii?q?/JHC12C/K5sFK3m4h7IXpg613gYevx6gDmLMeSGh4cHI7YtJFx+vu6SXmaNH99?= =?us-ascii?q?yh1yIEl09+DCF1Q+tu9cb4ydnd7OiNRnyeQFbetiMTUhut4PnYJu8ZKU0MmPcR?= =?us-ascii?q?7Nz5v/JsrYouaGDP3FzkQre2ZaUrwDbQPz+Yo6IsY1W73NErtduhQRHaw6QJs9?= =?us-ascii?q?OGjr8KF0LARzchXNZLiuhsnqof6EaYFQp3DL6VIwKT3TuxwFyvCsTAx7aY6lh2?= =?us-ascii?q?nqLZ0zRz9NtcBhBxVpEYdVFM4NrBCrD4CMlKG+kdCx+kd6u+EQsar3D/DHzNO0?= =?us-ascii?q?359wX5dG5UyEJizRC7RzjUt5luuygu3P0pj3Ccz8YtMJT/N0QnLEar/AAoWwNG?= =?us-ascii?q?HGBsWpYENC8riBwJplQx6RY2b/RKPAuyq6cL1i7Fk3x5JQYuXe1nou4qvd1d+0?= =?us-ascii?q?YHtU4m+nrHiUJN5E50DSLfLRUggSSvef9mthW6oNYs+88OYILMxn29WX/hNy8C?= =?us-ascii?q?UH1cyJPqyshlHD11g9dp/BKkbtnSEjVtowLQy7IHcr1FXYoXTUG3gUDsGlL8R2?= =?us-ascii?q?yIKPDxft7lN9rmoaZmdAHGfzbd2NOG4H1ti4aRHM/wVOWYUthemyLHQ5va27U+?= =?us-ascii?q?UgGpxEn+ix/KsGmJ5SJiXOQtVKd3XLIbt3OCdBJvner1gvJBgfuv46XZljNsvG?= =?us-ascii?q?G18OLErVkXC69gDFy0ChMoX02Q=3D=3D?= X-IPAS-Result: =?us-ascii?q?A2C3AgBTTJ1a/wHyM5BcGgEBAQEBAgEBAQEIAQEBAYMjLYF?= =?us-ascii?q?WKI5sjQWDGJRTgW8piAshOBQBAgEBAQEBAQIBaieCOCSCTwIkUgMDCQJICAMBW?= =?us-ascii?q?hIFgmZZgT8BAQEVAwGqEjqEB12EAIIrhS2CLhCDLYR/gRiIJASIIZJBCZBxjwU?= =?us-ascii?q?BkwM1IYFSKwgCGAghD4FqGnmCMRyBe3eMegEBAQ?= Received: from tarius.tycho.ncsc.mil ([144.51.242.1]) by EMSM-GH1-UEA10.NCSC.MIL with ESMTP; 05 Mar 2018 13:59:34 +0000 Received: from prometheus.infosec.tycho.ncsc.mil (prometheus [192.168.25.40]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id w25DxVuf031728; Mon, 5 Mar 2018 08:59:33 -0500 Received: from tarius.tycho.ncsc.mil (tarius.infosec.tycho.ncsc.mil [144.51.242.1]) by prometheus.infosec.tycho.ncsc.mil (8.15.2/8.15.2) with ESMTP id w240tF9F002753 for ; Sat, 3 Mar 2018 19:55:22 -0500 Received: from goalie.tycho.ncsc.mil (goalie [144.51.242.250]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id w22Jsn6o000535; Fri, 2 Mar 2018 14:54:49 -0500 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A1D6AQDfqplalywYGNZeHAEBAQQBAQoBA?= =?us-ascii?q?YMjKoFZKJtwgxiWQoU6gmMhOBQBAgEBAQEBAQITAQEBAQEGGAaGJxkBOAEVgSk?= =?us-ascii?q?Sg0SBPgEDFQMBrBI6gwIFgQCEWAeCHwQIhSyBNXSDPYR/gRiIJASIH5I/CZBvj?= =?us-ascii?q?waTAzWBczMaI4MSgiIPEAyBe3eMPAEBAQ?= X-IPAS-Result: =?us-ascii?q?A1D6AQDfqplalywYGNZeHAEBAQQBAQoBAYMjKoFZKJtwgxi?= =?us-ascii?q?WQoU6gmMhOBQBAgEBAQEBAQITAQEBAQEGGAaGJxkBOAEVgSkSg0SBPgEDFQMBr?= =?us-ascii?q?BI6gwIFgQCEWAeCHwQIhSyBNXSDPYR/gRiIJASIH5I/CZBvjwaTAzWBczMaI4M?= =?us-ascii?q?SgiIPEAyBe3eMPAEBAQ?= X-IronPort-AV: E=Sophos;i="5.47,413,1515474000"; d="scan'208";a="214823" Received: from emsm-gh1-uea10.ncsc.mil ([214.29.60.34]) by goalie.tycho.ncsc.mil with ESMTP; 02 Mar 2018 14:54:49 -0500 IronPort-PHdr: =?us-ascii?q?9a23=3ArtwoFBbqo9IQ+JsJGV0N9VD/LSx+4OfEezUN459i?= =?us-ascii?q?sYplN5qZpsyyZR7h7PlgxGXEQZ/co6odzbaO6Oa+CCdZu8nJmUtBWaQEbwUCh8?= =?us-ascii?q?QSkl5oK+++Imq/EsTXaTcnFt9JTl5v8iLzG0FUHMHjew+a+SXqvnYdFRrlKAV6?= =?us-ascii?q?OPn+FJLMgMSrzeCy/IDYbxlViDanbr5+MBu7oR/Qu8QSjoduN7g9xxnUqXZUZu?= =?us-ascii?q?pawn9lK0iOlBjm/Mew+5Bj8yVUu/0/8sNLTLv3caclQ7FGFToqK2866tHluhnF?= =?us-ascii?q?VguP+2ATUn4KnRpSAgjK9w/1U5HsuSbnrOV92S2aPcrrTbAoXDmp8qlmRAP0hC?= =?us-ascii?q?oBKjU09nzchM5tg6JBuB+vpwJxzZPabo+WM/RzZb/Rcc8ASGZdRMtdSzBND4Wh?= =?us-ascii?q?ZIUPFeoBOuNYopHhqVsPsRS+BROjBPnyxTRVhHH5x6w60+I/HgHdwQctGMgOsH?= =?us-ascii?q?XIo9X1LqgSS/26w7HUwjrbb/NZwzb96I7WfRA6uvyDRq5wccvXyUkzCQzFlFOQ?= =?us-ascii?q?ppL5Pz+PyusNtG2b4vNmWOmyiGAnsxl8riayysojkIXFmI0Yxkra+Sh22oo4Kt?= =?us-ascii?q?K1RFZ4bNOlCpdcqi+XOoRsTs4tQGxkojg2x7sbspChZicK0o4oxxvHZvyHbYeI?= =?us-ascii?q?5hXjWf6fLjpmnXxrfryyigio/0W81uHxV9O430hUoSpAidnMuWoB1xnJ5ciGTv?= =?us-ascii?q?tx5EKh2TeL1wzL6+FEJ147lbbDJpI/37I9mYAfvVrMEyPshkn7g7Wae0or9+Sw?= =?us-ascii?q?7uToeLTmppuSN49ujQH+N7wjmta+AeskMggBRXKb9vmk27L/5UL5QK9Fjvwwkq?= =?us-ascii?q?bHq5DXPt8UprK4Aw9TzoYs9Qy/DzG439QEh3UIMFVFeBefg4jzJ17OOOz4Deu4?= =?us-ascii?q?g1m0izdk2uvGM6b9ApTNMnfDkLDhcax7605H0gU/199f55VKCrsZOvL8RlfxtM?= =?us-ascii?q?DEDh8+KwG02PjoCNF81oMYRGKODbSUML/SsFCU5uIvJPOAZIkOuDnnMfQl6Pnu?= =?us-ascii?q?jWEhlV8dY6ap2ZwXZWi8HvRhP0qWe37sgtcGEWcRogoyVujqiFqeXjFJY3a9Qq?= =?us-ascii?q?U85jQhB4KnC4fPXoGtgLqf0yenBpBbZWFLBkqRHXrmeIiIQfgBZSGILsN/ijAE?= =?us-ascii?q?UKKuS44l1RGgrg/6zL9nI/LT9y0CtJLsyNh16PfJlR4v7TN7E9yS02GXQGF1mG?= =?us-ascii?q?MHWSQ20btkrkxhy1eD17R4jOILXeBUsuhEVgY8KI700/1xC9e0XBnIONiOVhLu?= =?us-ascii?q?RNi6DTwvZsw+zsVIYEtnHdimyBfZ0G7iB74TiqzOH5co6orC0HXrYcVw0XDL0O?= =?us-ascii?q?8mlVZiCs9OM3C2w7Vy/BXJBpLY1kCem7uueIwC0yPXsmSO12yDuAdfSgEjf7/C?= =?us-ascii?q?WCUlZ0DWpM71rmPLTrmjEvxzKApKyceYJpxBXd3gjFNLX9/pJNXYf2+rnWqsQx?= =?us-ascii?q?2Pw+XfP8LRZ2wB0XCFWwA/mAcJ8CPeOA=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0D7AQCMq5lalywYGNZeHAEBAQQBAQoBA?= =?us-ascii?q?YMjKoFZKJtwgxiWQoU6gmMhOBQBAgEBAQEBAQIBEgEBAQEBBhgGVoI4IoJ3GQE?= =?us-ascii?q?4ARWBKRKDRIE+AQMVAwGsEzqDAgWBAIRYB4IfBAiFLIE1dIM9hH+BGIgkBIgfk?= =?us-ascii?q?j8JkG+PBpMDNYFzMxojgxKCIg8QDIF7d4w8AQEB?= X-IPAS-Result: =?us-ascii?q?A0D7AQCMq5lalywYGNZeHAEBAQQBAQoBAYMjKoFZKJtwgxi?= =?us-ascii?q?WQoU6gmMhOBQBAgEBAQEBAQIBEgEBAQEBBhgGVoI4IoJ3GQE4ARWBKRKDRIE+A?= =?us-ascii?q?QMVAwGsEzqDAgWBAIRYB4IfBAiFLIE1dIM9hH+BGIgkBIgfkj8JkG+PBpMDNYF?= =?us-ascii?q?zMxojgxKCIg8QDIF7d4w8AQEB?= X-IronPort-AV: E=Sophos;i="5.47,413,1515456000"; d="scan'208";a="9300047" X-IronPort-Outbreak-Status: No, level 0, Unknown - Unknown Received: from ucol3cpa06.eemsg.mail.mil ([214.24.24.44]) by EMSM-GH1-UEA10.NCSC.MIL with ESMTP; 02 Mar 2018 19:54:48 +0000 X-EEMSG-check-005: 0 X-EEMSG-check-006: 000-001;7930cb77-c646-4ed4-89f2-a1185bd88f98 X-EEMSG-check-008: 573278103|UCOL19PA14_EEMSG_MP12.csd.disa.mil X-EEMSG-SBRS: 3.4 X-EEMSG-ORIG-IP: 65.20.0.151 X-EEMSG-check-002: true X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0DkAAApqplahpcAFEFeGwEBAQEDAQEBCQEBAYMjggMonwiWQg+FK4JjITgUAQIBAQEBAQECEwEBAQoJCwgoLoVRGQE4ARWBKRKDRIE+AQMVBKwROoMCBYEAhFgHgh8ECIUsgTWEMYR/gRiIJASIH5I/CZBvjwUBkwM1gXMzGiODEoIiDxAMgXt3jDwBAQE X-IPAS-Result: A0DkAAApqplahpcAFEFeGwEBAQEDAQEBCQEBAYMjggMonwiWQg+FK4JjITgUAQIBAQEBAQECEwEBAQoJCwgoLoVRGQE4ARWBKRKDRIE+AQMVBKwROoMCBYEAhFgHgh8ECIUsgTWEMYR/gRiIJASIH5I/CZBvjwUBkwM1gXMzGiODEoIiDxAMgXt3jDwBAQE Received: from rgout0804.bt.lon5.cpcloud.co.uk ([65.20.0.151]) by ucol19pa14.eemsg.mail.mil with ESMTP; 02 Mar 2018 19:54:45 +0000 X-OWM-Source-IP: 86.134.48.2 (GB) X-OWM-Env-Sender: richard_c_haines@btinternet.com X-RazorGate-Vade-Classification: clean X-RazorGate-Vade-Verdict: clean 0 X-VadeSecure-score: verdict=clean score=0/300, class=clean X-SNCR-VADESECURE: CLEAN X-Junkmail-Premium-Raw: score=10/50, refid=2.7.2:2018.3.2.193916:17:10.433, ip=, rules=__HAS_FROM, __FRAUD_WEBMAIL_FROM, __TO_MALFORMED_2, __TO_NO_NAME, __HAS_CC_HDR, __MULTIPLE_RCPTS_CC_X2, __CC_NAME, __CC_NAME_DIFF_FROM_ACC, __SUBJ_ALPHA_END, __HAS_MSGID, __SANE_MSGID, __HAS_X_MAILER, __FROM_DOMAIN_IN_ANY_CC1, __TO_IN_SUBJECT, __ANY_URI, __FRAUD_BODY_WEBMAIL, __URI_NO_WWW, __INVOICE_MULTILINGUAL, __NO_HTML_TAG_RAW, BODY_SIZE_3000_3999, __MIME_TEXT_P1, __MIME_TEXT_ONLY, __URI_NS, HTML_00_01, HTML_00_10, BODY_SIZE_5000_LESS, __FRAUD_WEBMAIL, __FROM_DOMAIN_IN_RCPT, __CC_REAL_NAMES, MULTIPLE_RCPTS, __PHISH_SPEAR_STRUCTURE_1, TO_IN_SUBJECT, __MIME_TEXT_P, NO_URI_HTTPS, BODY_SIZE_7000_LESS X-RazorGate-Vade: gggruggvucftvghtrhhoucdtuddrgedtfedrieelgdduvdelucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuueftkffvkffujffvgffngfevqffopdfqfgfvnecuuegrihhlohhuthemuceftddtnecunecujfgurhephffvufffkffosedttdertdertddtnecuhfhrohhmpeftihgthhgrrhguucfjrghinhgvshcuoehrihgthhgrrhgupggtpghhrghinhgvshessghtihhnthgvrhhnvghtrdgtohhmqeenucfkphepkeeirddufeegrdegkedrvdenucfrrghrrghmpehhvghloheplhhotggrlhhhohhsthdrlhhotggrlhguohhmrghinhdpihhnvghtpeekiedrudefgedrgeekrddvpdhmrghilhhfrhhomhepoehrihgthhgrrhgupggtpghhrghinhgvshessghtihhnthgv Received: from localhost.localdomain (86.134.48.2) by rgout08.bt.lon5.cpcloud.co.uk (9.0.019.21-1) (authenticated as richard_c_haines@btinternet.com) id 5A5E200C0CFFF2CD; Fri, 2 Mar 2018 19:54:43 +0000 X-EEMSG-check-009: 444-444 To: selinux@tycho.nsa.gov, netdev@vger.kernel.org, linux-sctp@vger.kernel.org, linux-security-module@vger.kernel.org Date: Fri, 2 Mar 2018 19:54:34 +0000 Message-Id: <20180302195434.15435-1-richard_c_haines@btinternet.com> X-Mailer: git-send-email 2.14.3 X-Mailman-Approved-At: Mon, 05 Mar 2018 08:57:05 -0500 Subject: [PATCH] selinux: Fix ltp test connect-syscall failure X-BeenThere: selinux@tycho.nsa.gov X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Security-Enhanced Linux \(SELinux\) mailing list" List-Post: List-Help: From: Richard Haines via Selinux Reply-To: Richard Haines Cc: marcelo.leitner@gmail.com, anders.roxell@linaro.org, nhorman@tuxdriver.com, vyasevich@gmail.com, sds@tycho.nsa.gov Errors-To: selinux-bounces@tycho.nsa.gov Sender: "Selinux" X-Virus-Scanned: ClamAV using ClamSMTP Fix the following error when running regression tests using LTP as follows: cd /opt/ltp/ cat runtest/syscalls |grep connect01>runtest/connect-syscall ./runltp -pq -f connect-syscall Running tests....... connect01 1 TPASS : bad file descriptor successful connect01 2 TPASS : invalid socket buffer successful connect01 3 TPASS : invalid salen successful connect01 4 TPASS : invalid socket successful connect01 5 TPASS : already connected successful connect01 6 TPASS : connection refused successful connect01 7 TFAIL : connect01.c:146: invalid address family ; returned -1 (expected -1), errno 22 (expected 97) INFO: ltp-pan reported some tests FAIL LTP Version: 20180118 Reported-by: Anders Roxell Signed-off-by: Richard Haines Reviewed-by: Marcelo Ricardo Leitner --- security/selinux/hooks.c | 42 ++++++++++++++++++++++++++++++------------ 1 file changed, 30 insertions(+), 12 deletions(-) diff --git a/security/selinux/hooks.c b/security/selinux/hooks.c index 28a5c4e..d614df1 100644 --- a/security/selinux/hooks.c +++ b/security/selinux/hooks.c @@ -4470,22 +4470,29 @@ static int selinux_socket_bind(struct socket *sock, struct sockaddr *address, in * need to check address->sa_family as it is possible to have * sk->sk_family = PF_INET6 with addr->sa_family = AF_INET. */ - if (address->sa_family == AF_INET) { - if (addrlen < sizeof(struct sockaddr_in)) { - err = -EINVAL; - goto out; - } + switch (address->sa_family) { + case AF_INET: + if (addrlen < sizeof(struct sockaddr_in)) + return -EINVAL; addr4 = (struct sockaddr_in *)address; snum = ntohs(addr4->sin_port); addrp = (char *)&addr4->sin_addr.s_addr; - } else { - if (addrlen < SIN6_LEN_RFC2133) { - err = -EINVAL; - goto out; - } + break; + case AF_INET6: + if (addrlen < SIN6_LEN_RFC2133) + return -EINVAL; addr6 = (struct sockaddr_in6 *)address; snum = ntohs(addr6->sin6_port); addrp = (char *)&addr6->sin6_addr.s6_addr; + break; + default: + /* Note that SCTP services expect -EINVAL, whereas + * others expect -EAFNOSUPPORT. + */ + if (sksec->sclass == SECCLASS_SCTP_SOCKET) + return -EINVAL; + else + return -EAFNOSUPPORT; } if (snum) { @@ -4589,16 +4596,27 @@ static int selinux_socket_connect_helper(struct socket *sock, * need to check address->sa_family as it is possible to have * sk->sk_family = PF_INET6 with addr->sa_family = AF_INET. */ - if (address->sa_family == AF_INET) { + switch (address->sa_family) { + case AF_INET: addr4 = (struct sockaddr_in *)address; if (addrlen < sizeof(struct sockaddr_in)) return -EINVAL; snum = ntohs(addr4->sin_port); - } else { + break; + case AF_INET6: addr6 = (struct sockaddr_in6 *)address; if (addrlen < SIN6_LEN_RFC2133) return -EINVAL; snum = ntohs(addr6->sin6_port); + break; + default: + /* Note that SCTP services expect -EINVAL, whereas + * others expect -EAFNOSUPPORT. + */ + if (sksec->sclass == SECCLASS_SCTP_SOCKET) + return -EINVAL; + else + return -EAFNOSUPPORT; } err = sel_netport_sid(sk->sk_protocol, snum, &sid);