From patchwork Wed Oct 17 14:15:12 2018 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ondrej Mosnacek X-Patchwork-Id: 10645701 Return-Path: Received: from mail.wl.linuxfoundation.org (pdx-wl-mail.web.codeaurora.org [172.30.200.125]) by pdx-korg-patchwork-2.web.codeaurora.org (Postfix) with ESMTP id 0DD87109C for ; Wed, 17 Oct 2018 14:18:48 +0000 (UTC) Received: from mail.wl.linuxfoundation.org (localhost [127.0.0.1]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id EEBCA2A8ED for ; Wed, 17 Oct 2018 14:18:47 +0000 (UTC) Received: by mail.wl.linuxfoundation.org (Postfix, from userid 486) id E23AB2B19F; Wed, 17 Oct 2018 14:18:47 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on pdx-wl-mail.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-5.2 required=2.0 tests=BAYES_00,MAILING_LIST_MULTI, RCVD_IN_DNSWL_MED autolearn=ham version=3.3.1 Received: from ucol19pa14.eemsg.mail.mil (ucol19pa14.eemsg.mail.mil [214.24.24.87]) (using TLSv1.2 with cipher DHE-RSA-AES256-SHA256 (256/256 bits)) (No client certificate requested) by mail.wl.linuxfoundation.org (Postfix) with ESMTPS id 7A3902B19B for ; Wed, 17 Oct 2018 14:18:46 +0000 (UTC) X-EEMSG-check-008: 633258021|UCOL19PA14_EEMSG_MP12.csd.disa.mil X-IronPort-AV: E=Sophos;i="5.54,392,1534809600"; d="scan'208";a="633258021" Received: from emsm-gh1-uea10.ncsc.mil ([214.29.60.2]) by ucol19pa14.eemsg.mail.mil with ESMTP/TLS/DHE-RSA-AES256-SHA256; 17 Oct 2018 14:18:43 +0000 X-IronPort-AV: E=Sophos;i="5.54,392,1534809600"; d="scan'208";a="16909823" IronPort-PHdr: 9a23:pM8vMx0WP6Cg3WRIsmDT+DRfVm0co7zxezQtwd8Zse8WIv7xwZ3uMQTl6Ol3ixeRBMOHs60C07KempujcFRI2YyGvnEGfc4EfD4+ouJSoTYdBtWYA1bwNv/gYn9yNs1DUFh44yPzahANS47xaFLIv3K98yMZFAnhOgppPOT1HZPZg9iq2+yo9JDffwdFiCChbb9uMR67sRjfus4KjIV4N60/0AHJonxGe+RXwWNnO1eelAvi68mz4ZBu7T1et+ou+MBcX6r6eb84TaFDAzQ9L281/szrugLdQgaJ+3ART38ZkhtMAwjC8RH6QpL8uTb0u+ZhxCWXO9D9QKsqUjq+8ahkVB7oiD8GNzEn9mHXltdwh79frB64uhBz35LYbISTOfVwZKPdec4RS3RHUMhfSidNBpqwY5YTA+YEO+tTsovzqEYUrRamBQeiGu3hxDxPiHHrxa030fktHA/J0wM8ENwBrm/Uoc7pNKoQS+250LPFwSndY/5QxDzz6JLIchckofyURLxwd9feyVMxGAPHk16erovlPyiT1usXr2eU8elgXv+ohm4grgFxpSOvxsE2hYbVmI0Y0UrE+jtkz4Y1P9K4VFR3bsKjEJtVriyXMZZ9TMA6Q2xwpSo3xbILtYS7cSQX0pgr2RHSZ+Kdf4SV+h7vSvudLDliiH54er+yhwy+/Eaix+HmS8W4zFBHpTdfnNbWrHACzRnT59CCSvt640iuxy6C1xvW6uFYOUA0krfbK4I5zr4wiJUTtUPDEzfqmErslq+Wd1gk+vOy5+T7YrTpup+cN4huhgH4LqsugdCwDf49MggPW2iX4eW81Lv98k3lWLhGk/I7n6bDvJ3aOMgXvLC1DgBL3oo59hqzFzKm384ZnXkDIlJFYhWHj43xNlHVPv/4Cfa/g1KxkDZk3vzJJbrhAojLLnffjrjhZq1w61JcyQUvzdBf4IhYCrcaIP3pQEPxu9vYDgEhPwyu3+nnEMl91p8ZWW+XAK+ZN6XSvkWU5uIvOeaMYpQYuDT6K/gj4v7hl2Q5mUMDcqmzxpsbcne4Hu5pI0+Be3rjns8BEXsWvgo5VOHqil+CXiRPaHaxRKI84Tc7CIO4DYrYSICthKGB3SigEZ1LYGBGFk2MHW3vd4WeVPcGcDiSLdN5kjwYSbihTJcs1QmwuwDh1bVnKOvU+jEftZ/41dh6+fPcmg8o+TxzFcSd3HmHT3tokWMQWz82wKd/rFRgxVeE16h4heFXGsJX5/NISQo1L4DTz/Z9C9zoXQLBZNiJQk68Qtq6GTExUs4xw9gWbkljA9WtlArD3yuxA7IOj7yEHoY08qPH33jpI8Zy0WrJ27c7g1khWMtPOnWshrRj+AjLG47Jj0KZmr6kdKQd2C7N8XmMzXCVsUFWTgF/TKLFXWoFaUvOt9T54UHCQKGyBrQ7KAdBztSCKqRSYN3zkVpGXOvjOMjZY2+plWewHwyHxrWQY4rrYGUQxyDdCFAFkwwK5naHOxM+Cj2mo2LEAzxkDUjvbF/08elitHO7SVc5zwKQYE1i0Lq15wUYhf+GRPMQ2bIEpT0tqzJuHFayx9jWEcaPpxJ9fKVAZtMw+E1I2n/Dtwx8IJOgNbtviUQCfARypU/u0A93CopYm8gwsHwq1BZyKb6f0F5ZazyXx5TwNaPMKmnu/BGvbLXb2krC39aX5KgP7ug4q1T5sw2zEEot7Wln2cFP03SA/pXKEBYSUZXpX0Yt6hd1uqrXYiY454Lbz3FsN7e7siPa0dIzGOQl0gqgf8tYMK6cDw/yHdcaB8+1KOw2gFWpdRQEPOdc9a4xJcymceGK2Ki1M+Z8hDiml3hI4Jhh0kKQ8CpxUuDJ0IwBw/GEwASHTSz8gUy/ss/pg4BLfiwSHm+lxSjjHo5RabV4fZwXBme2P8232tJ+iobrW35Z8F6jA00J2NSydBWIcVP9xwpQ2V4QoXy9liuy1yZ0nC0xrqqDwCzOxPzvewcbOmFRXmlvlkvjIY+xj98GRkeodBQpmAGj5Unk26hRvL5/IHXLQUdUYyj2KHlvUrWxtrWef85P74kovT9LX+S8ZlCaTLH9rgAe0yPiGWtR3io7dzawtpX+hRx6h3qXLGxvo3rBZcFw2RDf6cTYRf5QxToGWDB0iSLJCVi4Ptmp+8iUlpjYv+ClT2KhV5tTcSj3woObrie743NlAQGnlfCphtLnCRQ60TP819RyTyXIqxL8Yo312KSgLe1neUdpCUTn68pnBo5+iZE8hJYK2XgVnp+V52YIkX/vMdVH3qLzdHkNSiANw97O+wXl21NsLnSSx4L/SHqd3tFtZ96gYmMZwig99dxFCL+I7LxYmit4ukK4ohjMYfh5gDgd0eEh6HgGg+4Xogog1TidAqsMEklCJizgjQ+I79ejrKVNeGmgb7aw1E1kndCuEr6OuAdcV2jlep06By9/8t1/ME7Q0H308ozkZt/QYs8Iux2KlRfPkuhVJIg3lvUUmSptIXj9smE9y+4nkRxu2om3vJCdJGVw+KK0GQJXNjzpZ8IT4z3tg7xRnsCM04CoBJVhFS0BXIH0QvKwDDISqfPnOh6NEDw8rneUB6HSHQqY6EdooXLADYyrN22XJHkeyNVtWgORJEpBjwAIRD86hII2Fhi2xMz9d0d0/j4R6UT+qhtQzeJoMgLyUmnBqwi1bTc0UoKQLAJM7gFF5UfaL9CR7v5pEyFf5J2hoxSHKnaHaARQEWEJRkuECkjmPra04dnA9/aXBvaiL/TUe7qDsupeWOmUxZK0zoRp5S6MOduVMnlkEfI7xlJJXWplFMTBhzUPVysXmjrDb86Buhiz5zZ3odq58PT3XwLv/pCCBKFOPtVq4Ry2hr2DN+GIjiZjNTlYzo8MxWPPyLUHx1EdkCZidz2sEbQbqS7NV7jcmrRJABEHcS9zL9VH76Y93glLJM7ahcj42aJ4j/4vFldFTkbtm8+zaswWOGG9M1XHCFyMNLScKj3B29v3br+kSb1MkOVUsAW9ti2aE0/sOTSDkSLkWA2xPu5XjSGUJhpetJu6chZ3BmjpVMjmZQGjMN9rkT02xqU5hnHKNW8cKTh8dEdNrryM7SxGmfh/Hm1B7mZ/LeaagSqZ6PPYKpkOu/txHit0j/5a4Gg9y7ZN6iFLWuZ6mC/Jo95tpFGmifWPxSBhUBpVqTZLhZiHvUN8NqXF7pNAQ2rL/AoR7WWMDBQHv8FlBcP0u69O0NfPjr78KDdZ/t3P/MscHdXbKMWJMHo5KxrmBj7VABEDTTG1KWHVn1Zdn+2K9n2Jspg6rYDhl4cURb9FVVw6C+gaB19/E9wYOpd3WT0lkaWFg8EU+Hq+thjRRNlav5zdUPKdH+nvIi6DjbZYfxsI3a/4LYMLO43/3ExicEd1nILLGkrXRt1NrSthbhIurEVK6nh+QXU521j5ZQO1/H8TCfm0kwYtigRgZeQt9THs40o4J1fRuCQwl0wxlsn/jjCKbD79NqGwUp9KCyDsrUg+Lov7QxppbQ21hUFrKSvLR7dWj7tmaWBnlRTRuYVRFv5GTK1FYRgQxfeNa/Uuz1tctj2txVVb6uvdFZtiiAwqfIawr3JB3gJja8I1JazQJadS01dQh6KPsTWz2ewrxg8ROVoN+nuIeCEUoEwIKqUmJy2w8+N27QyCmidMd3YUWPovovNq8EQ9O+KawC/7yLFDK1q+N+qGI6OXpmjMj8iITU0s1kkQjUlK4aB20ds/c0qTT00g16WeFxISOMXYNA5VcdRd9GLIfSmUq+XMwYh5P4KnFuDnVeWOrrobglq4HAY1GIQB9t4BHp+t0E7ELcfnK7oFyQ416gryOVuLFuhEdhWQnTgbpMG/yYN40pNGJjEBG2l9Nzu45qrPrA8wnPWDRMs2YmsdXoYcKn02Wte1lDJCsntcCzm31uYZyAmc4D/muiTfEiXzb9p5aPeTfxNsB8m8+S8j/KiulV7X7pLeKnngNdt4oN/P7vgVqo2bC/NOV7Z9rVnTm41ZR3ysXG7PFd+1J5fwa4kwY9z7EGy6UlmlhzIzUcjxIM6nLrKUjgHwWYZUrI6b0SgtNMOnCj4eGxZwp+QC5K1mZg0OeJs7bgD2uAsgLaC/Jx2Y0tq2SWa3NTRWV+Vfzfm9Z7FPyiojdPW6yHg+QZEmzum390ENSYoEjx7Ew/ase41eUS/uGnNAYAXDvyw5mHZ9Nuwq2Ocw3AvIsUUAMzCMbOFpcGtEv9UmClOIL3R2DW44R1GHgIrG5Q6s2KsS8DVBkNZO1u1Fq2P+vp7ZYDKjQqCrro/VsyU4Z9g8v6JxKZDjIteBtJ7GhDPfVoTQsgufXC65DPdam9lQICNEQPZTg20lP9IJuZZZ40orSsg+P6BPCLUrpr2ydTpkCisSwDQFV4+c2TwNmf2w273EmReMaJ4iKgALsI1egtsBVC57eiEepKi9WIjNimCLVHMLLxkJ7QRQ+g0Pi5V8fub774rUVJVM0SJZo+poUivXEZll70f7RXyLjlj5Uvqhl/ek0h5VzPLpztYUQgV/CVRHy+ZQiEQoNKl9K7MMsY7Srj+IaUT6sXr1yOu9OFle09Dbd0HjAYresmr8Tzcc9mEKSo9J1HHfD44dkw5jZKYsvlVML5iselzi6Dw824RpA764WNiwyFYrsXkKWyWnH8dPBux9rF3XXzhlbIyxp5X+J5VeWGlQ94OBq11BikViLza5yYZAK8FK+jMMQCJPriuDs9SvU8BDxMt2D4MWIthlpXf9GaREOJyPrH0qoLDvzWXZ+z8kuleg2DqzA7O4T/5e/2AGGAUmPX6eqk40D+so6GjS7EvAslVp/+dfGriPjFl+oDdnEZBIHTZFz3elL058THNeqeVVNLzVc9BAQ/k1fRKvOQYxFfgo30yT+kF7gGn2bjdutgRA/SDdRA40WTMTgrjzhT0UstunNiMCS5JUcTUhaD/IKw2GmSBWuBZfb19lW5UCD9lY5b4UxopU8dDESUq2LiEFRhNiPBoi0fVDjU5DrFmYeSfFAAqqdPbPtwZ6fcKPo8+pMvv55gZHioXosOwi8aUMWWGmkxW3Qd/Ct4/8qsGKtkyWeaf+N+2xen7BTD7JjRyqhLckCZfK/zLJPwpAN5l602ckboT9CW7WJxRJObgXJ01BVaB1cd9GuPxVZ9d4eKYV/q9gHheHRhTpGIyzo/lJME3eRTHfLyqb9Oywv57T7LLaSej6ZcyM3GzLQ6RpMZdm8TP7Aavl0ZdC+krq3fdg7kd6SUPDMy2Bt9nhKB0E69Sldkv4pJIpBSnWAJBykHXz2k5Aa9AbQyqw8JQX0JlZ8mr/Sfpk0kjvt+1f77hk6Igt7L9z1ci5PrzSJupGsUB5HheYHAJq9o8iAGJnXWBefvcRKOvNfaQelc3hsOH3F7cZ6RKP+exZaMfHJ1nblcmiDjGRUgBLnAAcpjEENAScyuSFm6huScm/v+T53Vgt41emJB4c0L9t/ZuE+raPpOLPdxve16QEVbTqRsL9qbQsoUCS6eQ/lLEQfmx1YgunEPUSV8MG3mfv17wqwj4sE8LNGLLg4v1DW2g6nj3+gZB9GUsZGvcOEbqM54RekX8ym/bFOd0ObqBChmGPGAaiEr8D1XGr7C+XL3N+gh3U0hHwRmSz7ETtrSJjRCvBwNjinlBSVrmtCkdYRzCpNlNgsDOTIAros8L6uasp40EtKWzorc+DmmSnNrNWGc3/OdOdLDI7pFISlpIxQMKg1ZocGdqnL9cb6Gt+YefG62O3jy9BpL9Kh4jZ4sGV/PXbB2Wvj62eq7WQ2T9Zy3k4vVck6tCjN/HD/MOKQ/W212kLSydwpgrBUwSzqrPFs1AeIVaL31vTmIwWItFZ2mE11kD45Oc5RtI+7wFeFpvdaPMDojDzIyH4wVGFY9I4TiOeySdYHkrpEVlkH6gxwGDws9zHlXfe/10lXYdxeFbhhRNpE4U0M0Qt50YLwiAbCwgCdQibDK20BUTiNYYEWkwDaROJ3bekfqc32VZ+wqio5O/VbOxzG7ABNvBDgQ6ShFJbAI4ZsbUCQLJgfF9Q7KvXpgnhC4jkWPjrjngwOue2QsBd98AWqX0i7hy5RxW+9ZdJ96wbh4yQdq5YfZjMu9hx4Fx56j4JaixAmwN/jxe+UeAAuODj/MbUv4ey5uapTqYtSP0d9wIoCGRmk5vwnFcjrMnZ1+hCTo3ViJz//x5WLn+LuYba1hx8JvQUK4KvYrls7XIHJzIRJ3gWJ9qZd+E84zNxMDXU/1FDDNsMZckZPMXRhw9ZkUjpWLBP9srBBFCUEYBzd9on72Dv0jA67YM8Uvr86D+xPZ3f6FVNMO1YgSV0kNLNvvMVwebTCCcL/XmZcQZ6zT2Yx5mLFfnw4f2GyMvIWFMeAi42T4BdKSKG+QymQOq1iZroXhqQ6s/ym5I+aFmQS2ewnKsftKZMFvRMiiLh3jhRDor1ne6as8Kw6GtLsV1KCINz4gfZF6VfP5V7PxP4m9K1Rkh9ACvwZsXUdhsouOqLyeYA+eJ+N1HxZYUDOBIL16r66WZJTgtpULP2vEyWXeEWZNR9U/7Es3ZV6Z5gK68IIVidq5zqritSpFAwHgApdKc6riZGeUnWgA1VR6H0taYbigsSVN52pU5BFGGrNWIg+TXHT6VVjaiWCPwT6DmTSLIBU1k7eh95Fgi43JRoZquBg/9KqCVFkzl7rfxs1CZpAFOEsDDo74cK3igtsOWgvSgFkWRMU+HbliDPE1gFx/MP2/QyEXHnvHu6bGMObsPX56JhLM/t9sF15HE4ehMqdCAuR+msCyjsyaiPB9rc45pnmBeRtZCWPveIJi8IO+F4kEu7HSIv2xXCnBtu7GoASymh69lhPoimJMI53XD2QzrmTHonuYhxmZKr81MGSfA5L1ZowWEl18mDFUhvDMDMGmNgiA8iZC0EdZ9Y8hYVGuEuhSrApahJ+AwYIX/UH42p95OWnJLO3n8wHrIIjnnOqPijgZUnmGZgh8sy9jSH7XMXcPfeWsRhKmL+2odW1ar1YPD+14JPU5NonYyoS+RKKcy/4S2z0ZRuVFWiw+EZGl2iNuYIy5/BXiulQHHeUuOOIA3u1y0hPBvU4h+lZkYydN8Mr0I5Nb7agYVAkgT6Tb5ubiCZpFue03Z6dO1EJ0Q5v4CofwFMR+kUNI3+beQryec1XUMFdGSBXTMjDeiwvBahnZMuPXJm7ASybbH3/wzmOcfUER4BHA== X-IPAS-Result: A2BwAADQQ8db/wHyM5BjHAEBAQQBAQcEAQGBUwUBAQsBggEDgQlcKIxrizuLEY4IFIFfEgEBGBMBiTwhNgsNAQMBAQEBAQECAWwogjYkAYJmAiQTDQcgCwMDCQJACAgDAS0DAQUBCxcBBwsFGASCf4F1DQMBmHs8jAYzgyqCEIReEocYhCIXgUE/gRKHXQESAYV5AohohhePMgmGHINVhmcLF4FPh1CHA4JggT6Efox4BgIJBw8hgSkCL2RxTSMVO4JskFhtgQUBAYhFgj4BAQ Received: from tarius.tycho.ncsc.mil ([144.51.242.1]) by EMSM-GH1-UEA10.NCSC.MIL with ESMTP; 17 Oct 2018 14:18:43 +0000 Received: from prometheus.infosec.tycho.ncsc.mil (prometheus [192.168.25.40]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id w9HEIEcw022776; Wed, 17 Oct 2018 10:18:22 -0400 Received: from tarius.tycho.ncsc.mil (tarius.infosec.tycho.ncsc.mil [144.51.242.1]) by prometheus.infosec.tycho.ncsc.mil (8.15.2/8.15.2) with ESMTP id w9HEICvM008607 for ; Wed, 17 Oct 2018 10:18:12 -0400 Received: from goalie.tycho.ncsc.mil (goalie.tycho.ncsc.mil [144.51.242.250]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id w9HEICHU022773 for ; Wed, 17 Oct 2018 10:18:12 -0400 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A1A0AABERMdblywbGNZjHQEBBQEHBQGBUgcBCwGCAYFoKIxrizuLEY4IgXoLAQGEbIR8ITUMDQEDAQEBAQEBAhQBAQEBAQYYBoY/IDKBFQEFASIBEoMggXUNAwGYfTyMBjODKoZuEocYhCIXgUE/gRKNagKIaJVJCYYcg1WGZwsXgU+HUIcDgmCBPoR+jHgGAgkHDyGBIwGCC00jFYMngjQajgptjAoBAQ X-IPAS-Result: A1A0AABERMdblywbGNZjHQEBBQEHBQGBUgcBCwGCAYFoKIxrizuLEY4IgXoLAQGEbIR8ITUMDQEDAQEBAQEBAhQBAQEBAQYYBoY/IDKBFQEFASIBEoMggXUNAwGYfTyMBjODKoZuEocYhCIXgUE/gRKNagKIaJVJCYYcg1WGZwsXgU+HUIcDgmCBPoR+jHgGAgkHDyGBIwGCC00jFYMngjQajgptjAoBAQ X-IronPort-AV: E=Sophos;i="5.54,392,1534824000"; d="scan'208";a="394248" Received: from emsm-gh1-uea10.ncsc.mil ([214.29.60.34]) by goalie.tycho.ncsc.mil with ESMTP; 17 Oct 2018 10:18:11 -0400 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0ApAADQQ8dblywbGNZjHQEBBQEHBQGBUgcBCwGCAYFoKIxrizuLEY4IgXoLAQGEbIR8ITUMDQEDAQEBAQEBAgETAQEBAQEGGAZYgjYkAYMMIDKBFQEFASIBEoMggXUNAwGYezyMBjODKoZuEocYhCIXgUE/gRKNagKIaJVJCYYcg1WGZwsXgU+HUIcDgmCBPoR+jHgGAgkHDyGBIwGCC00jFYMngjQajgptjAoBAQ X-IPAS-Result: A0ApAADQQ8dblywbGNZjHQEBBQEHBQGBUgcBCwGCAYFoKIxrizuLEY4IgXoLAQGEbIR8ITUMDQEDAQEBAQEBAgETAQEBAQEGGAZYgjYkAYMMIDKBFQEFASIBEoMggXUNAwGYezyMBjODKoZuEocYhCIXgUE/gRKNagKIaJVJCYYcg1WGZwsXgU+HUIcDgmCBPoR+jHgGAgkHDyGBIwGCC00jFYMngjQajgptjAoBAQ X-IronPort-AV: E=Sophos;i="5.54,392,1534809600"; d="scan'208";a="16909772" X-IronPort-Outbreak-Status: No, level 0, Unknown - Unknown Received: from updc3cpa05.eemsg.mail.mil ([214.24.27.44]) by EMSM-GH1-UEA10.NCSC.MIL with ESMTP; 17 Oct 2018 14:18:10 +0000 X-EEMSG-check-005: 0 X-EEMSG-check-006: 000-001;2cb77b56-fc7d-49aa-90f9-f9cb7c66980c Authentication-Results: UPDC3CPA12.eemsg.mail.mil; dkim=none (message not signed) header.i=none; spf=None smtp.pra=omosnace@redhat.com; spf=Pass smtp.mailfrom=omosnace@redhat.com; spf=None smtp.helo=postmaster@mail-wr1-f68.google.com; dmarc=pass (p=none dis=none) d=redhat.com X-EEMSG-check-008: 60284900|UPDC3CPA12_EEMSG_MP28.csd.disa.mil X-EEMSG-SBRS: 2.7 X-EEMSG-ORIG-IP: 209.85.221.68 X-EEMSG-check-002: true X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0A+AACdQsdbf0TdVdFjHQEBBQEHBQGBUgcBCwGEEYxrizuLEY4IgXoLAQEThFmEfBkHAQQxDA0BAwEBAQEBAQEBARMBAQkLCwgbDDGCNiQBgwwgMoEVAQUBIgESgyCBdQ0EmHY8jAYzgyqGbgkBCIcYhCIXgUE/gRKNagKIaJVJCYYcg1WGZwsXgU+HUIcDgmCBPoR+jHgGAgkHDyGBIwGCC00jFYMnkFhtjAoBAQ X-IPAS-Result: A0A+AACdQsdbf0TdVdFjHQEBBQEHBQGBUgcBCwGEEYxrizuLEY4IgXoLAQEThFmEfBkHAQQxDA0BAwEBAQEBAQEBARMBAQkLCwgbDDGCNiQBgwwgMoEVAQUBIgESgyCBdQ0EmHY8jAYzgyqGbgkBCIcYhCIXgUE/gRKNagKIaJVJCYYcg1WGZwsXgU+HUIcDgmCBPoR+jHgGAgkHDyGBIwGCC00jFYMnkFhtjAoBAQ Received: from mail-wr1-f68.google.com ([209.85.221.68]) by UPDC3CPA12.eemsg.mail.mil with ESMTP/TLS/AES128-SHA; 17 Oct 2018 14:15:21 +0000 Received: by mail-wr1-f68.google.com with SMTP id w5-v6so29885512wrt.2 for ; Wed, 17 Oct 2018 07:15:19 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id; bh=P40zcvP2ZbkoXEkLQ07QlBFBQOGIQB2ap77Ziv2Kq4I=; b=s9EnYoi/Vbi4hE3qj6+2y5CwhtOSw/Be2rM9PWIAR7K6MmH3WuACXJ5vl1Y+hWhEqq Q47wy/KOAnk/RxQfWExdQ2lcv/XA/KxElkpuRHRWObjZADnNg5gvHzgLSalkGz77aCZF 1X9xpDjCRF4OFi3/PVYIKWV4F07tR3Ue8RICZwzZQ4yKsC8eX3NkLcGqG+vYmONZ8AUz psmMjTd6s6CRVoYn6qa3QAlilVwe7rKoge505Dboy1mp2lUKxExTCg7RP2sVQ07dkHwN 3s3FgmML18EU94YWyKj/xPen155D1IGzyVw9GwkuaqEjW1eGCRmIBZNXLo67o/0sGk7Y i2sw== X-Gm-Message-State: ABuFfogp3GobrAtiw9hztBZ4unDSigtF/7o3m74Qg0I3FXFc6GyDmy5W waSOjRxpQtvHYkpDUZJF+yKxKw== X-Google-Smtp-Source: ACcGV60glq3JLXUnyNnrNtKBACFaU5ocFGcL/WbaDyKEGyZg6UoOSUuzhkIon5olTBlCh/g9OPRTAg== X-Received: by 2002:adf:8022:: with SMTP id 31-v6mr25561287wrk.16.1539785718774; Wed, 17 Oct 2018 07:15:18 -0700 (PDT) Received: from localhost.localdomain.com (nat-pool-brq-t.redhat.com. [213.175.37.10]) by smtp.gmail.com with ESMTPSA id o3-v6sm11902433wrw.93.2018.10.17.07.15.17 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Wed, 17 Oct 2018 07:15:18 -0700 (PDT) X-EEMSG-check-009: 444-444 From: Ondrej Mosnacek To: selinux@vger.kernel.org, Paul Moore Date: Wed, 17 Oct 2018 16:15:12 +0200 Message-Id: <20181017141512.4866-1-omosnace@redhat.com> X-Mailer: git-send-email 2.17.2 Subject: [PATCH v3] selinux: policydb - fix byte order and alignment issues X-BeenThere: selinux@tycho.nsa.gov X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Security-Enhanced Linux \(SELinux\) mailing list" List-Post: List-Help: Cc: stable@vger.kernel.org, Doug Ledford , selinux@tycho.nsa.gov, Eli Cohen MIME-Version: 1.0 Errors-To: selinux-bounces@tycho.nsa.gov Sender: "Selinux" X-Virus-Scanned: ClamAV using ClamSMTP Do the LE conversions before doing the Infiniband-related range checks. The incorrect checks are otherwise causing a failure to load any policy with an ibendportcon rule on BE systems. This can be reproduced by running (on e.g. ppc64): cat >my_module.cil < Cc: Eli Cohen Cc: James Morris Cc: Doug Ledford Cc: # 4.13+ Fixes: a806f7a1616f ("selinux: Create policydb version for Infiniband support") Signed-off-by: Ondrej Mosnacek Acked-by: Stephen Smalley --- security/selinux/ss/policydb.c | 41 ++++++++++++++++++++++------------ 1 file changed, 27 insertions(+), 14 deletions(-) Changes in v3: - use separate buffer for the 64-bit subnet_prefix - add comments on the byte ordering of subnet_prefix - deduplicate the le32_to_cpu() calls from checks Changes in v2: - add reproducer to commit message - update e-mail address of James Morris - better Cc also the old SELinux ML diff --git a/security/selinux/ss/policydb.c b/security/selinux/ss/policydb.c index f4eadd3f7350..b9029491869b 100644 --- a/security/selinux/ss/policydb.c +++ b/security/selinux/ss/policydb.c @@ -2108,6 +2108,7 @@ static int ocontext_read(struct policydb *p, struct policydb_compat_info *info, { int i, j, rc; u32 nel, len; + __be64 prefixbuf[1]; __le32 buf[3]; struct ocontext *l, *c; u32 nodebuf[8]; @@ -2218,21 +2219,26 @@ static int ocontext_read(struct policydb *p, struct policydb_compat_info *info, break; } case OCON_IBPKEY: - rc = next_entry(nodebuf, fp, sizeof(u32) * 4); + rc = next_entry(prefixbuf, fp, sizeof(u64)); if (rc) goto out; - c->u.ibpkey.subnet_prefix = be64_to_cpu(*((__be64 *)nodebuf)); + /* we need to have subnet_prefix in CPU order */ + c->u.ibpkey.subnet_prefix = be64_to_cpu(prefixbuf[0]); - if (nodebuf[2] > 0xffff || - nodebuf[3] > 0xffff) { + rc = next_entry(buf, fp, sizeof(u32) * 2); + if (rc) + goto out; + + c->u.ibpkey.low_pkey = le32_to_cpu(buf[0]); + c->u.ibpkey.high_pkey = le32_to_cpu(buf[1]); + + if (c->u.ibpkey.low_pkey > 0xffff || + c->u.ibpkey.high_pkey > 0xffff) { rc = -EINVAL; goto out; } - c->u.ibpkey.low_pkey = le32_to_cpu(nodebuf[2]); - c->u.ibpkey.high_pkey = le32_to_cpu(nodebuf[3]); - rc = context_read_and_validate(&c->context[0], p, fp); @@ -2249,13 +2255,14 @@ static int ocontext_read(struct policydb *p, struct policydb_compat_info *info, if (rc) goto out; - if (buf[1] > 0xff || buf[1] == 0) { + c->u.ibendport.port = le32_to_cpu(buf[1]); + + if (c->u.ibendport.port > 0xff || + c->u.ibendport.port == 0) { rc = -EINVAL; goto out; } - c->u.ibendport.port = le32_to_cpu(buf[1]); - rc = context_read_and_validate(&c->context[0], p, fp); @@ -3105,6 +3112,7 @@ static int ocontext_write(struct policydb *p, struct policydb_compat_info *info, { unsigned int i, j, rc; size_t nel, len; + __be64 prefixbuf[1]; __le32 buf[3]; u32 nodebuf[8]; struct ocontext *c; @@ -3192,12 +3200,17 @@ static int ocontext_write(struct policydb *p, struct policydb_compat_info *info, return rc; break; case OCON_IBPKEY: - *((__be64 *)nodebuf) = cpu_to_be64(c->u.ibpkey.subnet_prefix); + /* subnet_prefix is in CPU order */ + prefixbuf[0] = cpu_to_be64(c->u.ibpkey.subnet_prefix); - nodebuf[2] = cpu_to_le32(c->u.ibpkey.low_pkey); - nodebuf[3] = cpu_to_le32(c->u.ibpkey.high_pkey); + rc = put_entry(prefixbuf, sizeof(u64), 1, fp); + if (rc) + return rc; + + buf[0] = cpu_to_le32(c->u.ibpkey.low_pkey); + buf[1] = cpu_to_le32(c->u.ibpkey.high_pkey); - rc = put_entry(nodebuf, sizeof(u32), 4, fp); + rc = put_entry(buf, sizeof(u32), 2, fp); if (rc) return rc; rc = context_write(p, &c->context[0], fp);