From patchwork Mon Mar 19 17:33:36 2018 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Jann Horn via Selinux X-Patchwork-Id: 10293547 Return-Path: Received: from mail.wl.linuxfoundation.org (pdx-wl-mail.web.codeaurora.org [172.30.200.125]) by pdx-korg-patchwork.web.codeaurora.org (Postfix) with ESMTP id E8FAB602C2 for ; Mon, 19 Mar 2018 17:34:20 +0000 (UTC) Received: from mail.wl.linuxfoundation.org (localhost [127.0.0.1]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id D679A28E89 for ; Mon, 19 Mar 2018 17:34:20 +0000 (UTC) Received: by mail.wl.linuxfoundation.org (Postfix, from userid 486) id C891729413; Mon, 19 Mar 2018 17:34:20 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on pdx-wl-mail.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-4.2 required=2.0 tests=BAYES_00, RCVD_IN_DNSWL_MED autolearn=ham version=3.3.1 Received: from uhil19pa10.eemsg.mail.mil (uhil19pa10.eemsg.mail.mil [214.24.21.83]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id D0B1C28E89 for ; Mon, 19 Mar 2018 17:34:19 +0000 (UTC) Received: from emsm-gh1-uea11.ncsc.mil ([214.29.60.3]) by uhil19pa10.eemsg.mail.mil with ESMTP/TLS/AES256-SHA; 19 Mar 2018 17:34:18 +0000 X-IronPort-AV: E=Sophos;i="5.48,331,1517875200"; d="scan'208";a="10836504" IronPort-PHdr: =?us-ascii?q?9a23=3A2qG3IRCqkzcWz7wTvXHmUyQJP3N1i/DPJgcQr6Af?= =?us-ascii?q?oPdwSPnypsmwAkXT6L1XgUPTWs2DsrQY07GQ6/iocFdDyK7JiGoFfp1IWk1Nou?= =?us-ascii?q?QttCtkPvS4D1bmJuXhdS0wEZcKflZk+3amLRodQ56mNBXdrXKo8DEdBAj0OxZr?= =?us-ascii?q?KeTpAI7SiNm82/yv95HJbAhEmDSwbaluIBmqsA7cqtQYjYx+J6gr1xDHuGFIe+?= =?us-ascii?q?NYxWNpIVKcgRPx7dqu8ZBg7ipdpesv+9ZPXqvmcas4S6dYDCk9PGAu+MLrrxjD?= =?us-ascii?q?QhCR6XYaT24bjwBHAwnB7BH9Q5fxri73vfdz1SWGIcH7S60/Vjq476dvVRTmli?= =?us-ascii?q?EJOTAk+23Tk8B8kb5XrBenqhN434PZbp2ZOOdncq/BYN8RWG5NUttRWiBEBI63?= =?us-ascii?q?cokBAPcbPetAr4fzuUYAoxW9CwerH+7j1iNEi2Xq0aAgz+gtDQfL1xEgEdIUt3?= =?us-ascii?q?TUqc34OrsTUe+pzKnH1y/DYO5L0jn/8ofIcxYhru+XXbltb8rRyFMgHB7YgFqO?= =?us-ascii?q?rYzlPjWV1vkCsmOG6OdgTvygi2omqwF3vziuydwhipXJh40JylDE8j91wIAuJd?= =?us-ascii?q?KiUkJ7btmkEIVJuiycKoB4QdsiTnl1tCs1xbAKo562cDUQxJg5yBPTdeaLf5WQ?= =?us-ascii?q?7h/gVeudOyp0iXxqdb6lhxu//1KsxvD/W8Wq1ltBszBLncPWtn8X0hze8s2HSv?= =?us-ascii?q?xg8Ui/wTuPzAXT6v1cIUAziKrbN4Ytwr4umZoXtkTOBjP2l1/sjK+Xa0Uk4fKk?= =?us-ascii?q?6/jnY7r6pp+cMJV4igfiPaQ1hsOzG+E4MgkKX2SD+OS80qPs/VHhTblXgfA7nb?= =?us-ascii?q?PVvZDHKcgBuKK0DBFZ3pw+5xqnCjepytUYnX0JLFJffxKHipDkO0rQL/D8DPe/?= =?us-ascii?q?hUmskThyy//dOb3hH5PNIWTdn7f6Zrt9905dxxYzzdBY/Z5UDKoBL+jpVk/+s9?= =?us-ascii?q?zYEAc1MxaozOb/FNV9yoQeVHqNAq+eNqPdq0OI5uI1LOmKf4IVujH9K/4g5/H0?= =?us-ascii?q?ln85hUESfbOy3ZcNb3C4BPtmKV2DYXXwmtcBDXsKvg0mQezoil2NSyJcZ3WpX6?= =?us-ascii?q?I74DE7CZymAJzNRoCpnbyA0zy0HoBQZmBaF1CAC3Dod5+LW/0UciKdPtdhkiAY?= =?us-ascii?q?VbimU4Ig2xCutAv/y7V5NOrZ4SMYuoz+29hy/e3cjwky9SZzD8SfzW6CU310kn?= =?us-ascii?q?kPRz8s06B1uVZ9xUub0ahkn/xYEsRe6O5VXQc/Mp7cyfB6B83pVwLfYNiJUlem?= =?us-ascii?q?Q9ShATE3VN4xxcEBY1plEdW4kh/DxzaqA6MSl7GTGZM07rjT32LqKslhzHbG0b?= =?us-ascii?q?UugEM9QstTL2GmgLBw9xTLDY7Tj0qZj7qqdbgb3CPV9GaCzG2OvEdDXQ51VaXJ?= =?us-ascii?q?RHEfZk3ModT//EzCVbyuCbU5MgRf08KCLLVFasHxh1VcWPjjIMjeY362m2qoGx?= =?us-ascii?q?mI3qmDbJDre2UGxyjdEFILkxoS/XadLQg+Aj2urH7AAzB0ElLveUzs+/FkqHyn?= =?us-ascii?q?Vk800x2Kb0p52rq74B4an/qcRO8S3rIfoyohri10HFek09LNBduAvBBtfKJGYd?= =?us-ascii?q?My+F1Hz37WtxRhPpy8KKBvnl0efB50v0PpyhV6EYZAntIprHMt0Qp+M6WY0ElO?= =?us-ascii?q?dzmAx5D/JqXXKnXu/BCoc6PZwEzR0MyX+qgR8vQ1sE/ssx2sFkY49HVnydZV2W?= =?us-ascii?q?OG5prWFAoSTY7xUkEv+hhgur7VfzIw54zR1XxjK6W0tCHN284xDus/1hmgZ8tf?= =?us-ascii?q?ML+DFALqCM0aCdKuKOsxm1i1dR8EJ+ZS9Kk6PsOjbfSG3rSnPOB+kzK6lW5H+p?= =?us-ascii?q?xy0lqQ9ypgTe7Fx5gEzOuc3gubSTj8lkyhv9vpmY9afzEdBXe/yS3+CI5WfK1y?= =?us-ascii?q?cp4BCX2yLM2v2tV+m5ntVmZe9F6iA1MG3NGmeQGJYlPnwwJQz0MXrWagmSuiwD?= =?us-ascii?q?x+iyspobaH3CzS3+TicwIKOnBKRGZ+kVfsJpK0g8oGU0ioaAgpkhSl6F3+x6ha?= =?us-ascii?q?oqRwNXPTQUBScyjxNWFiXbO6tqCebM5X9JMorSJXXfy4YVCbUb79vwIW0zj9EG?= =?us-ascii?q?taxTA7cSyqu5rikhxhkGKdLXBzrHvFdsFr3xvf4sLTReJJ1DocWCZ4kSXXBkS7?= =?us-ascii?q?P9Sx59WUkJPDsuSgWGK7SpJTdifqwJibtCum+WJqGgezn/epmt3oCQI6yzP018?= =?us-ascii?q?F2VSXUqxbxeorr2Lq8MeJ8ZURoB0Hz68xhGoF4jIQwmIsc2X8AhpWa5XAHi3v8?= =?us-ascii?q?Mc1H2aLia3oAXSYLzMTI4AjhxkJjNmiGx4TlVnqD2MtsfMS6YngI1SIn9MBGEr?= =?us-ascii?q?yU7LtZnStvvlW3swzRYf9nnjcS1/Qi8ngajP8VuAA11CWSHqgSHVVEPSzrjxmI?= =?us-ascii?q?8da+o7hMaWaxd7i/yUp+kcqnDL6cvgFWQGz5dYs6HS9s8sV/N0rB0GXp5YH5fN?= =?us-ascii?q?ndds4cthyIkxbAluRVJog+lvwQiSpgI2L9smUvy/Qnghx2wZG6oI+HJn1j/K2j?= =?us-ascii?q?BB5YKjr1Z8YI9zHjk6lRg8GW35q1EZV5ADULW5noQuy0HzIOr/jnMByOEDIkoH?= =?us-ascii?q?eBBbXfBROf6Fthr3/XFpCkLXWXJH0HwtV+WBmSPlZQjRsSXDokgp45DRyly9b5?= =?us-ascii?q?cEhn/DwR4ED3qgdUwOJyKxb/SnvfpBuvajosRpifNgRZ4RxZ50jPN8ye8uVzHz?= =?us-ascii?q?pD85K7sAONL3aXZwNSDWEGQkaEHUzsPqGy5dnc9OiVHuy+L+HUbrWWsexTTPmI?= =?us-ascii?q?xZO10ot94zaMOMSPPn94AP09xkVDXGp2G8DDlzUIUSwXmDrHb9SHqxek5i13ss?= =?us-ascii?q?e//ezzWA3x/oSAFb1SMdRz+xCxmqqDNvCfizhnJjpC0ZMM33DIwqAF3FEOkyFu?= =?us-ascii?q?ayWtEbMYuCHWV63cnatXDx8AayNvL8tE9bk80RdRNsLBkdP6yLp4jv8zC1dYWl?= =?us-ascii?q?3sgd2mZMwQI2GgL1PLHkiKO66aJT3QxMH3Z7mwSbpKjOVbrxewoyqUE1f/PjSf?= =?us-ascii?q?kDnkTwugMeBDjCGcOhxTo5yyfQh2BmjiVt3mbAe3MNhtjT052bc0nG/FNXYAMT?= =?us-ascii?q?hgdENAtqef7SxCjfVhBWNM9X1lLfGalCaf6unXMJcWsf9wDSRzmONW+nM6y6Fa?= =?us-ascii?q?7CtcXvx6hDPSrsJyo1GhiuSP1j1nUB9UpjZRg4KKvFttOaPC+ZlaXnbL4hEN4H?= =?us-ascii?q?6MBBQNottqFsfgu7tMytTVkqL8NitC+crO/cQAH8jUNN6HMH05PBrrGD7VDBMF?= =?us-ascii?q?TTmvNWHem0xSjuqf9niUrpgmsJjjhoACSrhBVFw6DvkaEFhqHMQeIJdrWTMpib?= =?us-ascii?q?2bjc4M5XWgtxTRQcJavp7JVv2MHfXvNDaZjb5BZxQW27/4K5ocNpHj0Ux4dlZ6?= =?us-ascii?q?hJjKG1bXXd1VpC1ucBU7oEFW/Xh9SW0zwF7lZRmr4H8IFv60nwQ6ig1gbuQx7D?= =?us-ascii?q?3s+Us4JkLWpCssl0k8gc/lji6KcDHvNqiwR51ZCyrvukcqM5P7WRt6bQq8nUx8?= =?us-ascii?q?LjfLWbJQg6FmdW91lA/WoYFPFuJETa1YfB8QwumaaOgv0VRarCWo2FFI5e/ECZ?= =?us-ascii?q?Z5jgQlb4Ssr3Va1wJkdt41KrTaJLBVwVhImqKOoiio2/gszwAEOUYN8X6deDUT?= =?us-ascii?q?tUMSLLkmPS2o/+J36QOchzRDZXIMV/s2ovNq7E89PfqPzz742b5ZNk+xL/CfL7?= =?us-ascii?q?+eu2XYkc6IRUkw2V0Ol0hE+rh7ysgjc0yJV0w1y7uRDRsJP9LYKQ5Jd8pS6GTT?= =?us-ascii?q?fSGWvOXW3511O4S9Fub1Te6Br6sbnkWkHAM1EIsW9cQBAoOg0EfGIsf7NLQF0w?= =?us-ascii?q?ki5Bz3JFWZC/REYA6LkDYCo8G40J933YlcKyoADmV8MSS4/K3YqhUsgPWdQNc8?= =?us-ascii?q?em0aUZccNnIqRM26nDZUsG5EDDm2zu0W1hCN7zr8pyTWCzn8acBsaeyPahNtEt?= =?us-ascii?q?62/ywz86ariVLN9JXROX36P8x4utDT8eMau4qHC/RMQLZmrUjcnZJVSGa3XG7R?= =?us-ascii?q?D9G1PYPwZJM2bd30EHq6VUa/iz0tRcfrINmtNrSIgR3vRYtMv4mbwTEjNcu5Fj?= =?us-ascii?q?4AHhd9vPwM67xnag0CeZU7ZwTktwMkN6ywOA2YyMmhQ36xKTtKSPlS1f+6Z7pW?= =?us-ascii?q?zyUwbu+6z38gTooiweeu7EADXo0HgBbFyPm/YIleVDT8FWZGewXTvyY5kXZuNv?= =?us-ascii?q?oqyOcl3BzIqUUcMyyMdOFxcmxLpcs8BVSJLnhtFmo4XUWTjZTd7Q6o3rAS+SRd?= =?us-ascii?q?n9JV0e1KsHj+opHfbyi2WKyus5nVtTQvbcQ+qa1rLYPjOteGtI/ZnjHHQpjcqB?= =?us-ascii?q?GKUC67F/pfm9hfOiFYTeJJmW47J8MJp5BN6U0rVscxP7ZPErUjpqi2aTp4Ci4f?= =?us-ascii?q?1SoZWJma3DwBnOi8x7ralhGfcJk5Ph0LqpNCjccZUy5xfyMRubSjW5/Ql2CaVm?= =?us-ascii?q?gBOB0T4hhU5AIcio9wefjo75DSTJ9RzT5aufF0XzDKFplp9lv7VnqZjUL+SPq/?= =?us-ascii?q?j+yjxRhSw+700tkHRB5/DlBQx+dQlks0Nr53L7cfvovUvT+Ub0P7vHngyOy+JF?= =?us-ascii?q?ZPz83Uckf3DIvBtWXnVS0d9mcYRYhVyHHQDZ4SiRZ2aL43pFVQJ4CrYlr+5zsh?= =?us-ascii?q?x4lyA7m0ScWryE0/oXYAWSiqD8JLC/t6v1LPRD1lf5erpY3lO5pIWG9f4pmdpE?= =?us-ascii?q?pCnUpwLSG50YJcJN9J4jESRjhDuzKdvMG9SMdbw895E4cMIstju3f6AK5EOp+R?= =?us-ascii?q?rGMtt7Py1HDZ4C4zsE2mxDqtBqC0VeRZ8HMCGg8xPWSRtlEvD/cw8mfV6l3Nrk?= =?us-ascii?q?178PpaBreViUV8uypyHpdLBjlVz3+lNEhzQGNAs+pENKTfa9ZcTOUqZR+zJxw+?= =?us-ascii?q?EuYr0FeH/U5ogXv0YTF+uwVB9i/BWAk0UDUaja32mT0CsM2nPyEVS45QZzU7cy?= =?us-ascii?q?jFMx6bmTxQvBtHcUFlRY0WAtZf9LEHxoZU+s3CSViyJi0bQBNiMR833uRFmU5F?= =?us-ascii?q?rkqYZTjXDRC0evbXrh13YcCRodaxLPTi4AdIkJ7osPwj+qUYQH2mhBetTszAoI?= =?us-ascii?q?/6qt2KrFGBdKPiP+27e3/BQyDGjQqsirc8E5nK4y/TPRJHK5lg13Urf4XuBHXW?= =?us-ascii?q?PRRCO6IbPVBUVb57adVBpuBVedNkdLwO+a93CRKNXgnvF5C3rPlaMlbTQizTLy?= =?us-ascii?q?eb/eylpoLT9rjdRvL+ZsGXwnbHXqZ3Pot76TbnGrfly4le+lHs1vdq7EN6RkDM?= =?us-ascii?q?Mzqdo9T5OgML+M6ie1PgvpIzGzPWDo1wkH3wyU5ebMcXXzel8JIDyJNe8nrwT/?= =?us-ascii?q?x30lTruu1I67Zk8ZU346xuycqsI6fSLe9XsU5hAhiRHAlq95MtAGZlR29Lee8R?= =?us-ascii?q?NO3RfbkFgsDytuD3DbIY5AeS++xDZtvNP1vBldWnCjGAVRxEmx8MqTgbLgSA0P?= =?us-ascii?q?6Fn7V7Sd2/qej43UIt5EO+LgUdwbBo6oqF9bCEpOjNbxve1bIEQLTlRtvvrrQw?= =?us-ascii?q?vEOf/eErm6QKemNreA2nDOgcVskGy2f70a8qzDwjE8XfH7Lh4vFPTXQ5kSz8m5?= =?us-ascii?q?plBVUZBusUHaaX/YRZhmo4n/fZNtgWf61ZlGaACwOrErgYyXGx8yuXOm5lghPQ?= =?us-ascii?q?3B7sXWO/9lj2rTV3QSHU1dfsjlJVVqWrBUdVRyepO054sDaUMQrtqtX2ubo67F?= =?us-ascii?q?s3Mmziu9KBjm2hN61LH8fnPtyTPTE0pE4LjJ02XtGv2IEaFsCnL9gN63x+deXR?= =?us-ascii?q?63+1nCBduatHgJDe4s6N8PXNAXagl7Gaq6mKxD1A0Xc4vEo/6966OfHM5t2KX+?= =?us-ascii?q?yo2HwMTyd7oAbOQxm1paHFoF8OJEyLykDLmJYQMd1D2nk4zE7m7vA5QN0v7AVe?= =?us-ascii?q?CprAZ/QaqDDrIjT03UqQY9I5VymZyTtXHUv5EUJmF6g42WLwut/JlHjL9l0wXI?= =?us-ascii?q?Zwa1DohRx5DoU/M0It60IbwikdHggXbxCUErWoCV7iLYseWkgJcQ6H06Sieqcr?= =?us-ascii?q?wU1zxaui5ODJYuxmGaUNKvZdgxWKnFhaBpIZr60eT6hhe19G7qLXoBbtC5T/Vf?= =?us-ascii?q?j8iXUwLeG1Qtxd8c0BuHst/AC/Rwan6ZdE6Lobk46HdqpFYZjKocB94Fxq5ToR?= =?us-ascii?q?eSxXgBlwlQm1UeYCq+D/+tLbqoan6v6yVKYxQOUa7wQ7B2ZkgJTsm10svdbX1+?= =?us-ascii?q?NYSo3Ul4v/6hxNLGCWt4bayRV8LvAOK42zdrZ663oHPzQeJ24JPdeObvk85Clt?= =?us-ascii?q?MCnc51NcGc4MYNIYM9DLmQ9Klk3oVrZT9tDYGl+DEYtzcd4n73bvwjAv7ZQ8Sv?= =?us-ascii?q?rg6COxJZ3H4FFCI+hDjD51mNzfq+Ybx/vSCC4K4XiWcBV1zSaCxIOLC/nu5+mM?= =?us-ascii?q?z8vUV1weFC4sT4hdPCaC+RCgRuetlpXpVQOU6snpjJ0idEKQQmGxk7kEs6ZNF+?= =?us-ascii?q?5AkSb73jlFG4DrhvKVrcCj6G9KuV1GCopz6wPKGLlHNJVhJRv4jtWrRlR7Bibn?= =?us-ascii?q?ecHUaAAhuOyNy+cI/uVxKkr+ZYgAIh4ezLL683VVRBN0SLHqplaZQf4RZNx+Rf?= =?us-ascii?q?PGsH9V54xgK6sUMVmTvpPqqClHqEwsDA8vdrAwsiRQdlPSkw1NR6b0pLkAhxMT?= =?us-ascii?q?Ud59vk9NF3y/OGY65zfcTqRVi6+RCP0J/TmJSKwBTVloODtkQxypwJVuZ6epnf?= =?us-ascii?q?dfv2NDnyN9o/sq0zt9SRu+oyLspKUN2TQ+97G+rjkBv2JKTvmGmSfSFVpD1OgK?= =?us-ascii?q?jbsbC3v68lOzfn8DbJfp7bl8IcTg8pUh42ghYRo9YiIKR+OgCzv/j6mQGIyArM?= =?us-ascii?q?pchAKRuMXJdbKzNS8SNrAnxhL5SXl91QzenBhz/WsORTWg68QkK5uhNsY/wSqo?= =?us-ascii?q?AnPbdFcK4qNGqsfxskQLTOQuY1N73GpjytSHRjEKRMHXFWY6kAwkaWRccJ1d8h?= =?us-ascii?q?IbFqgogjONvqZY5AEUZCnbHp6i+onKksfCwWM9QstyxmLKuq2FgYsn0XN9m9Nu?= =?us-ascii?q?7y6BpGodevfdU89tHnjzzJlQxfb5Z/W3veANUJFmx6i5UP8eLsmj/nO72JJuWk?= =?us-ascii?q?C73bkeB165P/UYxrfHUieqVXGYWf6VfGeShTo5NFD95QWwJF0tdMhKt1M9MvfF?= =?us-ascii?q?hpNEkw3hULV0RjifpFPCyGwjMPgadx4tuIq8egwFVugRZ++GKegp2v0+B0MGb2?= =?us-ascii?q?XVEituF++2rVmtkZB+O3p6/Ur6YeXt8gbhMNaJBBkEEIjaoYB1+fy7QGKBJHBh?= =?us-ascii?q?wAd1PElu+OfVD04xufNEc5aNgdjQgMx20ewfePduNi0yocUemp9l6YmI0MeKdg?= =?us-ascii?q?zRzpnyJdHJuPSYBePQz1gycGFATrUZeR/155k9PtMhWb3TGLxZvQ4GBag7W5ws?= =?us-ascii?q?LGHx+7txLAxtcw7dfrO0gtPlpuiTfJtbu2fW7k4sLCfboxAD0fK0TQlnYJ2rhH?= =?us-ascii?q?j/O44wSSxbr91sCxpmG41PF9kGrwW5H56YgKG7hMG1+0N9o+IKta3wBezQ29S9?= =?us-ascii?q?34VxWINa5VCRMDbVA6lknl5qjuCvjffH15n+E8LiedUcWOh6RG7KdKPGE528Jz?= =?us-ascii?q?+PIM7wZkBL/rGG3L95XBidfj31UqmYuCG8MfVr+0Q7yoh2fOrJyzwt6qnW1dzo?= =?us-ascii?q?Z2FauiijrWSGNIFC41PSGePRRxJURuCE8GZjA6IXdpD5+/wSMdwjxtic/xd87C?= =?us-ascii?q?5E0MSbP6ittFPD2kV+dZ/CKkbixjg0WY0XIBSkLUsjn3XZpGncAXVdMMepMdVh?= =?us-ascii?q?056pCUn26k1wn3w9TnJQEWrvA9GKMC4U3NztXgCS8BN3CIM5nuW3cFQ0/o27SO?= =?us-ascii?q?9lId0Rg+ShtLwdneFiHCHGRc5XJAnaML5wIjdLCOjT4lMvZ0hXnaIyX9IPZJOO?= =?us-ascii?q?KVkLeGeJyCX/1kPc0ES8TNGo1aCUMG5C6XhDzrTYwRBQtgK5vrCfmcSlX7fHOs?= =?us-ascii?q?KlFMXOOTYoA2nJDQ85FlykrAqp?= X-IPAS-Result: =?us-ascii?q?A2CSCAAa9K9a/wHyM5BdGwEBAQEDAQEBCQEBAYMjLYFYFRO?= =?us-ascii?q?Oa40JYYI4hxONDIFnL4g6ITgUAQIBAQEBAQECAWoogjgMgmkCeQMJAkgIAwEdT?= =?us-ascii?q?wWCY1mBPwEBARUDAatLhAZagj4NgS2CDoUzghUPgxqFeoJ4hH0gA4czhjGKIjA?= =?us-ascii?q?JjA6DFIFci18Bh0KCKId1NSGBUisIAhgIIQ+Bahp5gjIbjh50jhEsghsBAQE?= Received: from tarius.tycho.ncsc.mil ([144.51.242.1]) by emsm-gh1-uea11.NCSC.MIL with ESMTP; 19 Mar 2018 17:34:17 +0000 Received: from prometheus.infosec.tycho.ncsc.mil (prometheus [192.168.25.40]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id w2JHXp87017566; Mon, 19 Mar 2018 13:33:55 -0400 Received: from tarius.tycho.ncsc.mil (tarius.infosec.tycho.ncsc.mil [144.51.242.1]) by prometheus.infosec.tycho.ncsc.mil (8.15.2/8.15.2) with ESMTP id w2JHXk3N082515 for ; Mon, 19 Mar 2018 13:33:46 -0400 Received: from goalie.tycho.ncsc.mil (goalie [144.51.242.250]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id w2JHXo4w017564 for ; Mon, 19 Mar 2018 13:33:50 -0400 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A1DxAAAa9K9alywYGNZdHAEBAQQBAQoBA?= =?us-ascii?q?YMjKoFbKJt0gxmHE45/hRuDQiE4FAECAQEBAQEBAhMBAQEBAQYYBoZDATgBFWx?= =?us-ascii?q?Pg0GBPgEDFQMBq0uDAgV/aIIwDYEmB4ICBAiFM4EjcoMphXqCeIR9IAOHM4Yxi?= =?us-ascii?q?iIwCQWMCYMUgVyLYIdCgiiHdTWBczMaI4MSgiMPDwyOHnSOESyCGwEBAQ?= X-IPAS-Result: =?us-ascii?q?A1DxAAAa9K9alywYGNZdHAEBAQQBAQoBAYMjKoFbKJt0gxm?= =?us-ascii?q?HE45/hRuDQiE4FAECAQEBAQEBAhMBAQEBAQYYBoZDATgBFWxPg0GBPgEDFQMBq?= =?us-ascii?q?0uDAgV/aIIwDYEmB4ICBAiFM4EjcoMphXqCeIR9IAOHM4YxiiIwCQWMCYMUgVy?= =?us-ascii?q?LYIdCgiiHdTWBczMaI4MSgiMPDwyOHnSOESyCGwEBAQ?= X-IronPort-AV: E=Sophos;i="5.48,331,1517893200"; d="scan'208";a="229252" Received: from emsm-gh1-uea11.ncsc.mil ([214.29.60.35]) by goalie.tycho.ncsc.mil with ESMTP; 19 Mar 2018 13:33:48 -0400 IronPort-PHdr: =?us-ascii?q?9a23=3Aq/BEZhC19Tk6Wkv288EMUyQJP3N1i/DPJgcQr6Af?= =?us-ascii?q?oPdwSPXzo8bcNUDSrc9gkEXOFd2Cra4c0KyO6+jJYi8p2d65qncMcZhBBVcuqP?= =?us-ascii?q?49uEgeOvODElDxN/XwbiY3T4xoXV5h+GynYwAOQJ6tL1LdrWev4jEMBx7xKRR6?= =?us-ascii?q?JvjvGo7Vks+7y/2+94fcbglUijexe69+IAmrpgjNq8cahpdvJLwswRXTuHtIfO?= =?us-ascii?q?pWxWJsJV2Nmhv3+9m98p1+/SlOovwt78FPX7n0cKQ+VrxYES8pM3sp683xtBnM?= =?us-ascii?q?VhWA630BWWgLiBVIAgzF7BbnXpfttybxq+Rw1DWGMcDwULs5Xymp4aV2Rx/ykC?= =?us-ascii?q?oJNyA3/nzZhMJzi6xWuw6tqwBlzoLIeoyZKOZyc6XAdt0aX2pBWcNRWjRdDIO9?= =?us-ascii?q?c4QPD/AOPfxFoILgpVUBtxq+BQ+yC+P01zRFgWX23awm3OQhCw7GxhEvEMoSv3?= =?us-ascii?q?vMrNX6LqYSUearw6nT1jjMdO9W2Tb76IjUbB8hu/eMUqxsccbL1UYvEAbFg0yW?= =?us-ascii?q?pIf4PD2VzvwAv3aG4+dvT+6jlWEqpxtvrjWg3MshhYbEipoWx13F7yl13Yg4KN?= =?us-ascii?q?KiREN7b9OoCoZcuiKEO4ZwX8gsWXtnuDwgxb0DoZO7fDYFyJAgxxPHZfOKbZGG?= =?us-ascii?q?7BTtWeuPOzl1mG5pdbOlixms70egz/b8Vsau3FZPtCVFk93MumoI1xzS7siLUv?= =?us-ascii?q?p9/kG/1jaTzw3f9PxILE8umabFJJMt2KA8m5UJvUnMESL6gED2g7WXdkUg9Oio?= =?us-ascii?q?8ePnYrD+q5+GNo97lgH+Pb40msOiGes3LhABX2iB9uS90r3s41b5Ta5Rgf0qk6?= =?us-ascii?q?nZtozaKtoBpq6/HQBVzpwv5Aq4DzejyNgYh2UILEpZeBKbiIjkI0rOL+78Dfe+?= =?us-ascii?q?hVSsjThqyuvaPrzhHprNLn/DnK3nfbZm8UFQ0gUzzddB555MCrEOPvbzWkjpud?= =?us-ascii?q?zcCR82Lxa7w+LnCNV6zYMeRXiDAqueMKzOq1CI4v8gI+6JZIAPuTb9LeAp5//o?= =?us-ascii?q?jXAnhV8QZaqk0JoNZHylEPlrLF+VbHrij9sbDGsHvRQyQPTviFKYUD5TY3iyX7?= =?us-ascii?q?g75jE+EI+rCp3DRoGxj7yBxii7BIBZaXhaBV+UEXfnbYSEW/ESZyKJOcJuiSAE?= =?us-ascii?q?VbmnS489yx6urgn6xKR7LubO5iIYspfj2cFz6ubOixwy8SF0D9+B026TVWF6g2?= =?us-ascii?q?IIRj4o061nvUAugmuEhLN1h/1eCMx7++JCUgB8M4XVieN9FYPcQAXEK+2IQ1av?= =?us-ascii?q?WNnuITgwSN8qi4sUYk19Es+uuRv03yOrBbIOv7aXBZoo/7ja0mS3LMF4nSWVnJ?= =?us-ascii?q?I9hkUrF5McfVatgbRyolDe?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DyAAAa9K9alywYGNZdHAEBAQQBAQoBA?= =?us-ascii?q?YMjKoFbKJt0gxmHE45/hRuDQiE4FAECAQEBAQEBAgESAQEBAQEGGAZXgjgigxI?= =?us-ascii?q?BOAEVbE+DQYE+AQMVAwGrS4MCBX9ogjANgSYHggIECIUzgSNygymFeoJ4hH0gA?= =?us-ascii?q?4czhjGKIjAJBYwJgxSBXItgh0KCKId1NYFzMxojgxKCIw8PDI4edI4RLIIbAQE?= =?us-ascii?q?B?= X-IPAS-Result: =?us-ascii?q?A0DyAAAa9K9alywYGNZdHAEBAQQBAQoBAYMjKoFbKJt0gxm?= =?us-ascii?q?HE45/hRuDQiE4FAECAQEBAQEBAgESAQEBAQEGGAZXgjgigxIBOAEVbE+DQYE+A?= =?us-ascii?q?QMVAwGrS4MCBX9ogjANgSYHggIECIUzgSNygymFeoJ4hH0gA4czhjGKIjAJBYw?= =?us-ascii?q?JgxSBXItgh0KCKId1NYFzMxojgxKCIw8PDI4edI4RLIIbAQEB?= X-IronPort-AV: E=Sophos;i="5.48,331,1517875200"; d="scan'208";a="10836469" X-IronPort-Outbreak-Status: No, level 0, Unknown - Unknown Received: from ucol3cpa06.eemsg.mail.mil ([214.24.24.44]) by emsm-gh1-uea11.NCSC.MIL with ESMTP; 19 Mar 2018 17:33:47 +0000 X-EEMSG-check-005: 0 X-EEMSG-check-006: 000-001;a48c294e-b121-447d-8d8c-b09844c1069c X-EEMSG-check-008: 503456716|UCOL3CPA02_EEMSG_MP17.csd.disa.mil X-EEMSG-SBRS: 3.5 X-EEMSG-ORIG-IP: 65.20.0.150 X-EEMSG-check-002: true X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0C+AABA8q9ah5YAFEFdGwEBAQEDAQEBCQEBAYMjggUonw2HE45/EIULg0IhOBQBAgEBAQEBAQITAQEBCA0JCCgvhWwBOAEVbE+DQYE+AQMVBKtKgwIFf2iCMA2BJgeCAgQIhTOBI4QbhXqCeIR9IAOHM4YxiiIwCQWMCYMUgVyLXwGHQoIoh3U1gXMzGiODEoIjDw8Mjh50jhEsghsBAQE X-IPAS-Result: A0C+AABA8q9ah5YAFEFdGwEBAQEDAQEBCQEBAYMjggUonw2HE45/EIULg0IhOBQBAgEBAQEBAQITAQEBCA0JCCgvhWwBOAEVbE+DQYE+AQMVBKtKgwIFf2iCMA2BJgeCAgQIhTOBI4QbhXqCeIR9IAOHM4YxiiIwCQWMCYMUgVyLXwGHQoIoh3U1gXMzGiODEoIjDw8Mjh50jhEsghsBAQE Received: from rgout0803.bt.lon5.cpcloud.co.uk ([65.20.0.150]) by UCOL3CPA02.eemsg.mail.mil with ESMTP; 19 Mar 2018 17:33:46 +0000 X-OWM-Source-IP: 86.134.53.182 (GB) X-OWM-Env-Sender: richard_c_haines@btinternet.com X-RazorGate-Vade-Classification: clean X-RazorGate-Vade-Verdict: clean 0 X-VadeSecure-score: verdict=clean score=0/300, class=clean X-SNCR-VADESECURE: CLEAN X-RazorGate-Vade-Verdict: clean 0 X-RazorGate-Vade-Classification: clean X-Junkmail-Premium-Raw: score=9/50, refid=2.7.2:2018.3.19.170617:17:9.975, ip=, rules=__HAS_FROM, __FRAUD_WEBMAIL_FROM, __TO_MALFORMED_2, __TO_NO_NAME, __HAS_CC_HDR, __CC_NAME, __CC_NAME_DIFF_FROM_ACC, __HAS_MSGID, __SANE_MSGID, __HAS_X_MAILER, __FROM_DOMAIN_IN_ANY_CC1, __TO_IN_SUBJECT, __ANY_URI, __FRAUD_BODY_WEBMAIL, __URI_NO_WWW, __NO_HTML_TAG_RAW, BODY_SIZE_1500_1599, BODYTEXTP_SIZE_3000_LESS, __MIME_TEXT_P1, __MIME_TEXT_ONLY, __URI_NS, HTML_00_01, HTML_00_10, BODY_SIZE_5000_LESS, __FRAUD_WEBMAIL, __FROM_DOMAIN_IN_RCPT, __CC_REAL_NAMES, __PHISH_SPEAR_STRUCTURE_1, BODY_SIZE_2000_LESS, TO_IN_SUBJECT, __MIME_TEXT_P, NO_URI_HTTPS, BODY_SIZE_7000_LESS X-RazorGate-Vade: gggruggvucftvghtrhhoucdtuddrgedtgedrudefgddutddvucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuueftkffvkffujffvgffngfevqffopdfqfgfvnecuuegrihhlohhuthemuceftddtnecunecujfgurhephffvufffkffosedttdertdertddtnecuhfhrohhmpeftihgthhgrrhguucfjrghinhgvshcuoehrihgthhgrrhgupggtpghhrghinhgvshessghtihhnthgvrhhnvghtrdgtohhmqeenucfkphepkeeirddufeegrdehfedrudekvdenucfrrghrrghmpehhvghloheplhhotggrlhhhohhsthdrlhhotggrlhguohhmrghinhdpihhnvghtpeekiedrudefgedrheefrddukedvpdhmrghilhhfrhhomhepoehrihgthhgrrhgupggtpghhrghinhgvshessghtihhnthgvrhhnvghtrdgtohhmqeenucevlhhushhtvghrufhiiigvpedt Received: from localhost.localdomain (86.134.53.182) by rgout08.bt.lon5.cpcloud.co.uk (9.0.019.24-1) (authenticated as richard_c_haines@btinternet.com) id 5A9D45F401454E43; Mon, 19 Mar 2018 17:33:43 +0000 X-EEMSG-check-009: 444-444 To: selinux@tycho.nsa.gov Date: Mon, 19 Mar 2018 17:33:36 +0000 Message-Id: <20180319173336.24730-1-richard_c_haines@btinternet.com> X-Mailer: git-send-email 2.14.3 Subject: [PATCH] selinux: Update SELinux SCTP documentation X-BeenThere: selinux@tycho.nsa.gov X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Security-Enhanced Linux \(SELinux\) mailing list" List-Post: List-Help: From: Richard Haines via Selinux Reply-To: Richard Haines Errors-To: selinux-bounces@tycho.nsa.gov Sender: "Selinux" X-Virus-Scanned: ClamAV using ClamSMTP Update SELinux-sctp.rst "SCTP Peer Labeling" section to reflect how the association permission is validated. Reported-by: Dominick Grift Signed-off-by: Richard Haines --- Documentation/security/SELinux-sctp.rst | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/Documentation/security/SELinux-sctp.rst b/Documentation/security/SELinux-sctp.rst index 2f66bf3..a332cb1 100644 --- a/Documentation/security/SELinux-sctp.rst +++ b/Documentation/security/SELinux-sctp.rst @@ -116,11 +116,12 @@ statement as shown in the following example:: SCTP Peer Labeling =================== An SCTP socket will only have one peer label assigned to it. This will be -assigned during the establishment of the first association. Once the peer -label has been assigned, any new associations will have the ``association`` -permission validated by checking the socket peer sid against the received -packets peer sid to determine whether the association should be allowed or -denied. +assigned during the establishment of the first association. Any further +associations on this socket will have their packet peer label compared to +the sockets peer label, and only if they are different will the +``association`` permission be validated. This is validated by checking the +socket peer sid against the received packets peer sid to determine whether +the association should be allowed or denied. NOTES: 1) If peer labeling is not enabled, then the peer context will always be