From patchwork Sat Sep 22 00:19:29 2018 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Casey Schaufler X-Patchwork-Id: 10612375 Return-Path: Received: from mail.wl.linuxfoundation.org (pdx-wl-mail.web.codeaurora.org [172.30.200.125]) by pdx-korg-patchwork-2.web.codeaurora.org (Postfix) with ESMTP id DCAD3174A for ; Mon, 24 Sep 2018 12:30:29 +0000 (UTC) Received: from mail.wl.linuxfoundation.org (localhost [127.0.0.1]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id CAE2729EAB for ; Mon, 24 Sep 2018 12:30:29 +0000 (UTC) Received: by mail.wl.linuxfoundation.org (Postfix, from userid 486) id BF72D29EB2; Mon, 24 Sep 2018 12:30:29 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on pdx-wl-mail.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-2.0 required=2.0 tests=BAYES_00,DKIM_SIGNED, MAILING_LIST_MULTI,NO_RDNS_DOTCOM_HELO,T_DKIM_INVALID autolearn=ham version=3.3.1 Received: from upbd19pa12.eemsg.mail.mil (upbd19pa12.eemsg.mail.mil [214.24.27.87]) (using TLSv1.2 with cipher DHE-RSA-AES256-SHA256 (256/256 bits)) (No client certificate requested) by mail.wl.linuxfoundation.org (Postfix) with ESMTPS id 78ECF29EB4 for ; Mon, 24 Sep 2018 12:30:27 +0000 (UTC) X-EEMSG-check-008: 159496148|UPBD19PA12_EEMSG_MP12.csd.disa.mil Received: from emsm-gh1-uea11.ncsc.mil ([214.29.60.3]) by upbd19pa12.eemsg.mail.mil with ESMTP; 24 Sep 2018 12:30:23 +0000 X-IronPort-AV: E=Sophos;i="5.54,297,1534809600"; d="scan'208";a="18575277" IronPort-PHdr: 9a23:qSOP1hBITqSkZ8fxBz9FUyQJP3N1i/DPJgcQr6AfoPdwSPn8pM6wAkXT6L1XgUPTWs2DsrQY07WQ6/iocFdDyK7JiGoFfp1IWk1NouQttCtkPvS4D1bmJuXhdS0wEZcKflZk+3amLRodQ56mNBXdrXKo8DEdBAj0OxZrKeTpAI7SiNm82/yv95HJbAhEmDiwbaluIBmqsA7cqtQYjYx+J6gr1xDHuGFIe+NYxWNpIVKcgRPx7dqu8ZBg7ipdpesv+9ZPXqvmcas4S6dYDCk9PGAu+MLrrxjDQhCR6XYaT24bjwBHAwnB7BH9Q5fxri73vfdz1SWGIcH7S60/VC+85Kl3VhDnlCYHNyY48G7JjMxwkLlbqw+lqxBm3oLYfJ2ZOP94c6zTZ9MaQXdKUNhXWSJPH4iwa5IDA/cdMepdqYTyoFkBogG+BQmrA+Pj0yZEi2P40KA7zugtCB3K0BE9FN4KrnjYsND5OaEPWu630abI1y3OYe1Y2Tn964bGfB4urv6OUrxtacrcy1QjGg3ZgVuft4PlJCiY1vgPvmWB8+ZsSeyih3Ahpgpsojav3MAsiozRi48L0F/E7jt2wYYoLtOlVEF7YcSrEIZetyGeKYR2WN4pTmZ0tykg0b0Jp566cTMRyJs7xx7QceGHc4aM4h39TuadOCt3i2h/dL2jgBay9FGtx+vhXce3yFZHtjdJn9bDu3wX1xHf99KLRuVy80u/wzqDyhjf5+BGLEwuiKbWKposzqQxm5cTq0jPADH6lUrwgaSLbEsr4PKo5P7iYrj+o5+cMJJ7hR/mP6Q1n8y/Hfw4Mg8TX2iH4ei81KPs/Un+QLhSkv05iLPZsJHHJcQAvKK5Hw9U3Zoj6xa4FTum1sgXnWIbI15ffRKHjozpN0nPIPD+E/i/n0yhnCpkyv3JJLHsAojBImLdnLruY7px8VNQxBI2zd9F5pJUDr8BIOj0Wk/0rNHYFQE2Mwi1w+bhFdV82ZoSVnmIAq+ENqPdrUGH5vk0LumQZI4apDb9K/8/6/7oln82g0URfaau3ZsJcHy4BOhpI12FYXrwhdcMCWUKvg04TOPwlF2CUSRcZ3CpUqI+4TE7DoemAp3YRoCxnrOBxjy7EodRZmBcBVCGCW3oeJmcW/cQdCKSJddskj4GVbe7V4Ah1gqutAj8y7pmMOrZ4SMYtZb+1Nl6/OLTiBcy9SBpD8iH1GGNVW50lHsSRzAqxKB/vVB9ylCb3Kl2gvxYEdlT6O1TUgohO57T0fF1C9foWg3bZteJUlGmQte4Dj4tUtI92dgOY1xyG9+6lBDMwzKqA6MJl7yMHJE7777T3332J8Z713bKybIsj0c4TctVNG2nh6l/9w7JC47PjUqZi76gdb4A0y7V6GeD0W2OsVlGXw5oS6rFR3EfZlDNoNTh/EzCVb6uCa8/MgtF08GNNrVFZsfujVVcS/fpIM7ebH6pm2esGRaIwauBbInwdGUe2yXdFVMJkwMJ8naFMgg+Gz2to2XEDDxhDVjveV/j8fFiqHOnSU851xuFYFB717q05BEVn+eRROkP0bIBoishrC90HFml1dLMF9WAvxZhfLlbYd4l/FhIz2bZuBJmPpy8L6FigUUTcx9rsEPvyRp3DJlAkckwo38wygp9N76Y2ktbdzyExZDwJqHXKm7q8RC1dqHZx0rT0NmT+qYA8vg4rUvsvB2xHEo473pny8VV02eb5pjSFwoSX4jxUkEs9xhmvLzaeS8954Ta1H1pK6a0tCXO29Q3C+s50hygZctQMLuYFA/uFM0XH8avJ/Yum1i1cB0EJvtS+bUqP8y4bfuJw7OrPON6kDKhl2RH75h30liQ+CpkVu7Iw5EFzume3guGUzf8iEmustvslI9eez4SBG2/xTLjBI5Laa14ZZwLBnu2I82r2tV+gIbgVGNE9FG5HVMLw9OmeR2Xb1PhxwJQzlgXrWahmSSm0zx+iyspobaH3CzS3+TicwIKOnBKRGZ+kVfsJpK0g8oGU0ioaAgpkhSl6F3+x6haoqRwNXPTQUBScyjxNWFiXbO6tqCebM5X9JMorSJXXfy4YVCbUb79vwIW0zj9EGtaxTA7cSyqu5rikhxhkGKdLXBzrHvFdsFr3xvf4sLTReJJ1DocWCZ4kSXXBkS7P9Sx59WUkJPDsuSgWGK7SpJTdifqwJibtCum+WJqGgezn/epmt3oCQI6yzP018F2VSXUqxbxeorr2Lq8MeJ8ZURoB0Hz68xhGoF4jIQwmIsc2X8AhpWa5XAHi3v8Mc1H2aLia3oAXSYLzMTI4AjhxkJjNmiGx4TlVnqD2MtsfMS6YngI1SIn9MBGEryU7LtZnStvvlW3swzRYf9nnjcS1/Qi8ngajP8VuAA11CWSHqgSHVVEPSzrjxmI8da+o7hMaWaxd7i/yUp+kcqnDL6cvgFWQGz5dYs6HS9s8sV/N0rB0GXp5YH5fNndds4cthyIkxbAluRVJog+lvwQiSpgI2L9smUvy/Qnghx2wZG6oI+HJn1j/K2jBB5YKjr1Z8YI9zHjk6lRg8GW35q1EZV5ADULW5noQuy0HzIOr/jnMByOEDIkoHeBBbXfBROf6Fthr3/XFpCkLXWXJH0HwtV+WBmSPlZQjRsSXDokgp45DRyly9b5cEhn/DwR4ED3qgdUwOJyKxb/SnvfpBuvajosRpifNgRZ4RxZ50jPN8ye8uVzHzpD85K7sAONL3aXZwNSDWEGQkaEHUzsPqGy5dnc9OiVHvK+IOXVbrqQr+xeVuuIxZW034tn4TmDKNuAMmNlD/0h1UpJRWp5FNjBmzUTVywXkDrAYNWAqxu7/i13r9u/8OjwWA71/ouAFaddPc90+x+ohaeDNuiQhDt2KDtDypwNxWXIyKUE3FIIhSBhbSWtEa8HtS7LVq7QnbVXDxEDYSNpKMRI97483hVKOcPDkdz117F4jvkzC1peSFPuhNqmZc0QLGG7Ll/HA1yLNLueLz3R3873eb+8SaFXjOhMtR2wuTaaE1fkPjSHljnpSw6gPPpJjCGaIBxeop+yfgxqCWj5Q9Lscge7P8NvjT0q3b00gWvHNW0cMDh4bUxAtbiQ7SRWgvVxBWNB8mZlLemDmyac8ebUMJAWvuV3Ai5sjeJV/Gw6y6dJ7CFDXPF1njXdocRqo1y9kemPzSFnUAZUpTZNn4KLvkRiNb/f9pZeRXbO5AgN4nmICxQWu9tlDcXiu7pOxdjUiq38Mi1C/M7U/cYHHMfUKdiHP2cmMRrnAD7UFhUKTD6xOWHZmUNdjOmY9meJoZgitpjshJ0OR6dGW1wyEPMaDFlqE8IGIJd2RT4ri6CUjNQP5XakqxnRXspatIjdVv2OGfXvNCqZjb5cahQV27z4M4UTOZDg20F5cFZ6hp7KG03eXNBWvCJuchI0oF9M8HhiTmw/wUTlZR2x4HULD/67ggY2ihdiYeQq7Drs51A3JkDUqys2kUgxns7ogT+XcD7sNquwWptWCyXsvUgrLpz7Wxp1bRG1nUF8LzfLWbZRj7pmdWB2hw7RoodAGflZTaJYehAQ3u2Xa+8u0VtCtiWt3VVH6vfdCZt+iAsqdoahr25B2wJma941OazQJapSw1dNh6KPvjWn2fsrzA8YOUkN7HuYeDQUt0wQKrkmOy2o8/R25gyGmjtMZHYDWOIvovNq8EM9POKAwDj73rFYK0C+LeqfI7qXu2jdj8KIRE0/1l8QnUlf4bd2ydsjc1aTV00317SeCRIJONHYJg5Iccpd6mLTfT2UvuXXwZN5JYK9FvrnTeWWrqYbnlqkHBo1H4QL9skBEYSs0EDcLcfjMrEFzA4g6xn1K1qeDfRGYhSLnC0Ao8Glw599xZNdKS0FAWVhLSW34a7aphUsgPqCQNg2YnAaXo8fNnwuQcO0hjRXsmhHAjSszu0Zzw2C4CPmqSTLEDnwddxja+mIZRl0EtG55S0/87SqiV7Q6pjePXv1Nc5lutDU8u4au4yHBOlKTbZjt0fcmo9YR3OuU27OHt61J4Twa4c2YtzuD3a2SFq/hCwpT83pJtaiMrCIgR30RYZTqISa0iovOtO9FjEfHhdwpvsM5KFnaA0CfZU0fwDnux45N6ylLweSys+uTHq1KTtKU/lfyv23Z7lNwCo2be+11mcgTpA8z+m46kMMSosFjhfCyvanYIleTDX8GmdHdwXJuyU5i3BrNvwuzecn3BPIrV4cPiiRe+xzdWxEucswBVCJLHV3C2o4RkOcgpHZ7g6qwb8S4zNXn8xI3u1drHj+opjfbSqwWKysrJXYqDYgYcQjo6JqK4DjJNWJtI/GlDzFUJbQqhGFUDK9F/dCmNhQJzxXTeJVlm47IswJp5BB6VYvWcgjPbBPDrcjpqyyYzp+ESES1TMZV5+H3DEajOe8waHVlhGMf5QjKxwJq5BCgsMcUyJveSMfqrSjW5/Rl2+eRWgBOB0T4hhU5AIcio9wefjo4JbVQ5BRyj5ZufZ0XzDXGZlv8lv0VnuZgUPkSPm7leymwx5Sxur20tYHQB5/FVRdx+FOm0swM7F3N7MfsZPWsjKTbkP6u3/tyPG6K1ZPz83Ua0f4A5DBtWbmVS0c43IUT5dVyH7DDZQSjxZ5aKEzqVpXLoCpZlry6j45y4lnBLS3Scerx1M5onkcXCeqD8BNC+d4v1LLQDdleYykqI35O5VORW9d4IedpElEn0VtKSG51YFRK8VK4j4SQjdDvymSvNyvR8Jdw8N2CYEDIstnsXfnBKxEIISRo2ExurH31n/Z4S4zv0mnyzioBq+4S/5Z/3cEFQU3JmSerU0vAPUw8mvI9VDNqF909f9BBreTlUVxvCp9HpdWCzZLz3+lNVNzTGJCs+pANqTYaMlcQ+Q2ZR+zOhwxCf8m0FaP/UFvh3v5ZDZytgRC8SDHQwY0TTUVgqvqmTAGqMGoIzkaS5xSbTUmcijKNRmWmTxNsxZZcEFqXIoVAtBb9LEHxYFU5NbNSV6wKSEZWxxvLgQ40f5EmE5CtkWYfDrRDQuudfbBqB14Z9yRrNKzLPTk4AhHlp7nsPom+KkZQH2mgwKtS8jEr4Dgrt2KqleOdKDgPu26YH/OUD/MjRSqirc/FZXK/i/TMA1AK5lh0nckZJfsCGHRMRRBPaIbKFJRVbpmZtVevuBae8hkdb4N+a92AxKKRgjiGIKxo/ZbKVbTXy7RLz2b8uy4o4Lc86DSSfT6asyL3XbHTLp9Po1m5jnjB7fqzYhe91L02vds80N3Ul3GPD6Brdv/PAML5c+idkT4sp0vAzzWHI96kGDxyUFYa8oXXyqq/YwZyJJY8nn/U/5331PosOJM67lr95U476puyceuKqfYMe5avlN/AhiIGgVq8Y0gD3N+R2BKbO4eMvXRfaUFjcD2se/3CqgX5QaJ9OxedNTIOVvOmtSlCjGbUxxLhh0NqTkALguTz/SFgbN7Sd65pejl3UIg+0C+IQQazL9x5YeF9K2IpPXUbxfI1rgLRKzqRsL1rrQxtEKf/uUkm6QSemNpYw2mHu8dVtQexmv6zqAl0zgsE8XdELLk4vJDUGg5nj34kZBnA1oWAu8UHaaM/YlGkWc3herZNsERcqBFnWqPDgCrErsDyX6t9iuWL3JoghXQ3BHqQWK89kX6rSlmTivQ193jiFZaVqGrBUdOWCqkIVN3sDGVMwX0r9f4paM17EUyMmzlqt2NjnehN61LEM3/PtCcJjM0pF0Php0rWtOvwZwbGca6INoJ9XF+af3e63+kkyBfuKpHgove7duT+vrJAXmhgaqaq6+OxDBD0HQ4u08w6sy4PPHU+9KKW+io13oWTypntAvOQwW1qqfCo14JNkKF1kbLmIoXPtBWxnQ42UTm6/IlQN0t7gleEZzAZ/warzDpJDT02UqfY84wViSG0TtXGVL1EV9iFKcg2GLwuN/JmmrR+l0pQIlwbE/nhR1sAoUmKEIt9kIYwi4eHggMcxybCq+nBVj9J4seSUcDcQiH3KS9eqov3E1z3Kmg5OnIYOx4GqoCK/ddjgmVnFRBHZIWq6IeSqpme1BB7K7XuhTiC4//Uvjki3UwO/O1QsRB/MEXrXQi5BiwRwa65ZdF8bkblIiCdrRYbpjUoMB880Bn6CYAdixJhxh+gQ22UeQYpO34+djbt5yo6ueyW6o3QeUY6QQ0DXxkj5TsmFAjvc3X1+BER43QiIT/8wNNI3mRtYbYyRZ8Ku0OK4S1c7Zm7XkHITYRJ24WN9qMd/Y8+zNtMCnU51FaGcwDe9UYPNbWlABPjk3pX61T9tbFGlCGFoh/bcco73D4yDot65szTv7g6COqJZDY91xNJ/RDjCF2m9LYqukVxv7SCCYM7HmcbBh1xTiCxIeRBPbq+uWM08rUV1IAHi45SYtdIyCC+QO/TOqviJrpSh+U6tP0gJ8mekKfWHixnKUdsqlSCuNBiyT73j1bFo/rnfKVt8Sj5HFQtl1dH4Z59QfFF7lHPpVnJRT4kdGmR0ZkBivlecHbagQhtfGTxucN/+V+LVXxaZUcIhIexLLw8WBVQRd2SL7qolaZWvocZNxiSPzatX1V8YZgJLUUPFiBpZzlsitIqEooDwA3crMwqCJVdlXWlg1PR6n0oKIAihcbUdNhvU9MGGSwOH8x5jbeUaRVjbKRCOAO8jiIT6wBSUNoMiRkTxOywpVudKOjnepbvWNegiN9vP8q3iRjRBSmpSLsp6MN2TQn+LyjqjUBuHpFQfuakyfJD1VD0fsLgb0bC3b45ly2eGMDY5fq4Ll7OcTg8pEs43YlbhUgeC0JRv+tCzz2j6OUAoyPt89chBGNuMXSd7OzKzYdNqglwxL5W3d9yhTenApv8GYTWTWg4tokK5m8NMsm3SeoB3bUdEwN4qJIt8vxs0QHTO0oZlN9ky1f1Z2jfQhFEMjOHXslyxMpYnhecY5SrBodG7Qsjx6WsaRcuAIZejHZFsKi4IaG2Y/q0HwwVp9PwXjMp7bN0pEv12d/mshc6CeLtXVUcPbXBYskOVW78oZZ1Py2M+6gtuEBVZtO1KWqUPhENNKqv2SxxsMuEmuG4pFWS164NvITg7TWSSGoTUWGVumRNWuBhTA0Ngj1/xb+ahUVb8dM5206MuLEnZNa31njVrNyACeXpVbd12ElGegTcQUwuYyuf0oBS+tHI6C/KOU1iNY5D1hEO3zEEDB9DOi1mVWtho9+Omhlp0LgbrKpujzrLMCPHVEkGIjWp9Yl4fG8SX+APzpjwQd0MU1c9qLbEEo88PRVcIuLlJ7WipJ5ybhBP89kLCl1n9kUgI8rvZGdzcOiaRjMytP3ItbPr76TBPiJiwwRZmxCUrcfKTjw7oE+M89xD6bfBpNFrB8cAu48W5VnOGDvouU8ZgdydBPBIbqvjsT0q+ajeJRZvTnV40g2ISOavAcMgLTgSQ19coDviW7+LY49QhpfoNB3TBhrBo1CH4UHtQXxR9a9nKyrhs7510Rwoe4buKy4XvnG096j3pR4WbBV4EWKOHDaA6w9xgxAj++xi3TE5aL4Dcp2f5tQUelwamLEZb7FGYn5LD+SbIa0QEdC7beA16h0GjCcfyfjVqGP/Hm/cvBp+kIhw4dxJbT7wzkk7rWd09z3MTJ1vCCm+FWAL5ZOpGfBBeXDURZZU7LR+29+ELw/doD0/foANdE4hdOVpQJ06WIRg4O+P6G9oxqUiQpAfpXBIR6sin5jA9sDPQi/PE0wgGTQtnXaBzFGI9O5LdV22orOXAHm4E0oyHkkPzAHF2ftXtjXPGEa34S7ZQnZkWADFM4Nysiwf0NwraiuUa9wIJwQkuyxuaQvit1pIjzBQMVAeirZarRxO2k0bK3UvFZ9RBkCvvAuX5stI52HIUcJKkCFnCj71gbT+Vb/d9Wx2qKEOmMd+zNMyLeWtFoEvBG37NCehMCrS7XFdNf2UfrVZTIiTS2fTC8uHFyB4lCiuvFf5KTdeD9ZqVcSeSeITgsap6Qpp9aKSH7amepkOpYNgaP/OWj8Syx9wbI7HT0D9VuNTPwKCRTMYjf/jXBdtg2vKr4E/X/sY7CCgKsAc/0fAoxLNPaeRtY= X-IPAS-Result: A2AYBQB72Khb/wHyM5BaHAEBAQQBAQcEAQGDXAOBCFwojGiLSYMFgWGUCoFYMRMBhQSDFiE4FAEDAQEBAQEBAgFsHAyCNSSCYAMDAQIkEwYBAQwgDAIDCQEBQAgIAwEtFAERBgEHBQYCAQEBGASDAIFqAxUDlw2KHIFqM4J1AQEFgQQBAXWCMAOCUwgXimEXggCBEieCNgeCAoJ3ARIBhXeIJhoKhTVBMUaNSgmCDI4XHVmIO4YYjnuHZyFkcU0jFTuCbIIZDBeDRoocAVVPewEBiX2CPQEB Received: from tarius.tycho.ncsc.mil ([144.51.242.1]) by emsm-gh1-uea11.NCSC.MIL with ESMTP; 24 Sep 2018 12:30:13 +0000 Received: from prometheus.infosec.tycho.ncsc.mil (prometheus.infosec.tycho.ncsc.mil [192.168.25.40]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id w8OCUCGP028823; Mon, 24 Sep 2018 08:30:12 -0400 Received: from tarius.tycho.ncsc.mil (tarius.infosec.tycho.ncsc.mil [144.51.242.1]) by prometheus.infosec.tycho.ncsc.mil (8.15.2/8.15.2) with ESMTP id w8M0JdTS018296 for ; Fri, 21 Sep 2018 20:19:39 -0400 Received: from goalie.tycho.ncsc.mil (goalie.infosec.tycho.ncsc.mil [144.51.242.250]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id w8M0JVI9009902 for ; Fri, 21 Sep 2018 20:19:38 -0400 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A1AkAAD5iaVblywYGNZbHAEBAQQBAQcEAQGBU4IJgWcog3OIdItLgwWBYZN2gXqEdwJCgwQhNhYBAwEBAQEBAQIUAQEBAQEGGAZMhUUDAyMEGQEBOA8lAiYCAkUSBgEMBgIBAYMdgWoDFQOYHYocb3szgnUBAQWBBAEBdYI+A4JRCBd0iWUXggCBEieCNoIJhiuCV4gmGgqFM0ExRo1HCYIMjhcdWYg7hhSOd4dTA4IDTSMVO4JsghkMDgkRgzWKHAFVT45UAQE X-IPAS-Result: A1AkAAD5iaVblywYGNZbHAEBAQQBAQcEAQGBU4IJgWcog3OIdItLgwWBYZN2gXqEdwJCgwQhNhYBAwEBAQEBAQIUAQEBAQEGGAZMhUUDAyMEGQEBOA8lAiYCAkUSBgEMBgIBAYMdgWoDFQOYHYocb3szgnUBAQWBBAEBdYI+A4JRCBd0iWUXggCBEieCNoIJhiuCV4gmGgqFM0ExRo1HCYIMjhcdWYg7hhSOd4dTA4IDTSMVO4JsghkMDgkRgzWKHAFVT45UAQE X-IronPort-AV: E=Sophos;i="5.54,287,1534824000"; d="scan'208";a="375840" Received: from emsm-gh1-uea11.ncsc.mil ([214.29.60.35]) by goalie.tycho.ncsc.mil with ESMTP; 21 Sep 2018 20:19:38 -0400 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0AiAACWiaVblywYGNZbHAEBAQQBAQcEAQGBU4IJgWcog3OIdItLgwWBYZN2gXqEdwJCgwQhNhYBAwEBAQEBAQIBEwEBAQEBBhgGTAyCNSSCYAMDIwQZAQE4DyUCJgICRRIGAQwGAgEBgx2BagMVA5ggihxvezOCdQEBBYEEAQF1gj4DglEIF3SJZReCAIESJ4I2ggmGK4JXiCYaCoUzQTFGjUcJggyOFx1ZiDuGFI53h1MDggNNIxU7gmyCGQwOCRGDNYocAVVPjlQBAQ X-IPAS-Result: A0AiAACWiaVblywYGNZbHAEBAQQBAQcEAQGBU4IJgWcog3OIdItLgwWBYZN2gXqEdwJCgwQhNhYBAwEBAQEBAQIBEwEBAQEBBhgGTAyCNSSCYAMDIwQZAQE4DyUCJgICRRIGAQwGAgEBgx2BagMVA5ggihxvezOCdQEBBYEEAQF1gj4DglEIF3SJZReCAIESJ4I2ggmGK4JXiCYaCoUzQTFGjUcJggyOFx1ZiDuGFI53h1MDggNNIxU7gmyCGQwOCRGDNYocAVVPjlQBAQ X-IronPort-AV: E=Sophos;i="5.54,287,1534809600"; d="scan'208";a="18546055" X-IronPort-Outbreak-Status: No, level 0, Unknown - Unknown Received: from ucol3cpa06.eemsg.mail.mil ([214.24.24.44]) by emsm-gh1-uea11.NCSC.MIL with ESMTP; 22 Sep 2018 00:19:37 +0000 X-EEMSG-check-005: 0 X-EEMSG-check-006: 000-001;81abd3db-3c78-461a-a7a3-6dc268df108b Authentication-Results: ucol19pa16.eemsg.mail.mil; spf=None smtp.pra=casey@schaufler-ca.com; spf=None smtp.mailfrom=casey@schaufler-ca.com; spf=None smtp.helo=postmaster@sonic306-10.consmr.mail.bf2.yahoo.com; dkim=pass (signature verified) header.i=@yahoo.com X-EEMSG-check-008: 495975160|UCOL19PA16_EEMSG_MP14.csd.disa.mil X-EEMSG-SBRS: 3.5 X-EEMSG-ORIG-IP: 74.6.132.49 X-EEMSG-check-002: true X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0DBAABFiaVbhzGEBkpbHQEBBQEHBQGBU4NwKINziHSOUIFhk3aBeoR3AkKDBBkGBjIWAQMBAQEBAQEBAQETAQEBCA0JCBsOIwyCNSSCYAMDIwQZAQE4DyUCJgICRRIGAQwGAgEBgx2BagMVmCmKHG97M4J1AQEFgQQBAXWCPgOCUQgXdIl8ggCBEieCNgeCAoYrgleIJhoKhTNBMUaNRwmCDI4XHVmIO4YUjneHUwWCAU0jFTuCbIIZDA4Jg0aKHAFVHzCOVAEB X-IPAS-Result: A0DBAABFiaVbhzGEBkpbHQEBBQEHBQGBU4NwKINziHSOUIFhk3aBeoR3AkKDBBkGBjIWAQMBAQEBAQEBAQETAQEBCA0JCBsOIwyCNSSCYAMDIwQZAQE4DyUCJgICRRIGAQwGAgEBgx2BagMVmCmKHG97M4J1AQEFgQQBAXWCPgOCUQgXdIl8ggCBEieCNgeCAoYrgleIJhoKhTNBMUaNRwmCDI4XHVmIO4YUjneHUwWCAU0jFTuCbIIZDA4Jg0aKHAFVHzCOVAEB Received: from sonic306-10.consmr.mail.bf2.yahoo.com ([74.6.132.49]) by ucol19pa16.eemsg.mail.mil with ESMTP; 22 Sep 2018 00:19:35 +0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1537575574; bh=oB9+8EhHneZutTURg6/uF6y11Vt5z73rvZBZdtkIqog=; h=Subject:To:References:From:Date:In-Reply-To:From:Subject; b=liOS0uhl5AL8Iah9gXYGc9xyGY6tunCqeDDdprObRJwmjjzlufRq+ZgS4V27jzHivlFpXgGeUxWM8Ym4NWG5zmOYVIaO6d/VDIHJ9QCHZo/wZ2Y/9K5CaUZRSJvmvtTUReFL5MhBpRXBhN/Y7a1LBTskZ0GpYDZ4xwLfoSZTdPBqk0+JaE4ZRtCGtAeuHhcXI7rGoGYg86FXex2nNJKz2/Ky3XLBNKRfLuKSKmRaQTqZ1/RiDc5DBfusMUrs7ZcfJ4dnVX9qlaWw5CoeynbohtohfQK4X17hl/ypL2jrIKhX+vl8JS7/QrMJd9t/V5BQhoP7PyS9AqAwv4Xg3nhPhA== X-YMail-OSG: 7K7ocGQVM1kNhpn2W39H80y1gxw21bSlLSvG2rAiARcDiakWOPpaVgTeLZW4RwS AHMQixdoBxLV4dmjZ7qLf6TjhqTTGoB2qwL1f4Tu2phCfLLMhWkhSI4l5P4wXC7D39_kgCx0fssC 7lM5bGVtAjwBPjeTVtWEA2Z00YdE312nO_fXtl7JrkLaZgLw3BZqYX2VLq3zgPi1s.EJ.QQLb.TP bpU9kxKXFkAPIcOMSaxjn05LBhsqgL.8YCy5IMaWH4vFvFbsjVpAgwNm9_GQ8Lj_EG9H.vV8xdP7 2qp0vhO_oMs5H1QCrlVCuxYQf6EqBska0bkuwo14KNCVOLUi5pgOaRHYYAtdbVxpd9f2SD2KS3m6 JhGwvFy.LTzTKQOTXj.Uq9EWdi9HnDdJgumWhtXFzYLFcJ3bqMmzF0Lhwe.1q92mLd3eriutdaSu yjB8ffkiCLah9SI9PbVyzapi_h7224NgtsXV5X_IEqt9NEFEmUaEaW6HroMmBAp9IeEi5SyiRO10 ztGSTxXrjQxnSAlFb_ZV50.VPOo.0rkinLF7PolrT0d3LwKRlMbZ15HdkT0vznxwDiLKjLXK3mvN 56N5MxhzPHLF5Kk4QvYziJwUhrFtEcCPB15TOXFV2WV31VSnQHEYR5wbCFEBeoOiBn4xLCgOpj8j 62H9YFXyShsV.nQNWrbyMOxxcDk4nBDhkCUCBZbpySDfKmA5GRhc7IFhf_ZrIBv_oQLBvQZng3M_ Ins7SV34FXZ5BxkRyQhoAXRRKhz_L0osirdl1jurnlE5j6lmDa1aK1UFtr8QErNzwNZlPdpdcXpd fs.3DgaV9hsm3ayWIT1jEag_cB9DLoXAke.JxPny_Z2DtezyU2zUQTQLT2OTGega48_bz9BcpJWm itG6tqwU7EEHMayhSXG_9F6D627KzZetyVKJTx6OzHAm8q_iYSTMCglclG3ASyjQB_S2Bia7wtKH bzxallN78tyby46pGxPZGVkCy95i.j2gXaE6elp9BMZj8SwuecS2n4II80ApcdG6bG3yb1.Qp96g 0itDh03825IRb0T5Ix7.XYBgYcyN9gERyyMRfJrtpjbA- Received: from sonic.gate.mail.ne1.yahoo.com by sonic306.consmr.mail.bf2.yahoo.com with HTTP; Sat, 22 Sep 2018 00:19:34 +0000 Received: from c-67-169-65-224.hsd1.ca.comcast.net (EHLO [192.168.0.102]) ([67.169.65.224]) by smtp419.mail.bf1.yahoo.com (Oath Hermes SMTP Server) with ESMTPA ID 709e02bc0b3347a1da6131f4e9564503; Sat, 22 Sep 2018 00:19:33 +0000 (UTC) To: LSM , James Morris , SE Linux , LKLM , John Johansen , Kees Cook , Tetsuo Handa , Paul Moore , Stephen Smalley , "linux-fsdevel@vger.kernel.org" , Alexey Dobriyan , =?utf-8?q?Micka=C3=ABl_Sala=C3=BCn?= , Salvatore Mesoraca References: X-EEMSG-check-009: 444-444 From: Casey Schaufler Message-ID: Date: Fri, 21 Sep 2018 17:19:29 -0700 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: Content-Language: en-US X-Mailman-Approved-At: Mon, 24 Sep 2018 08:26:06 -0400 Subject: [PATCH v4 14/19] LSM: Infrastructure management of the inode security X-BeenThere: selinux@tycho.nsa.gov X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Security-Enhanced Linux \(SELinux\) mailing list" List-Post: List-Help: Errors-To: selinux-bounces@tycho.nsa.gov Sender: "Selinux" X-Virus-Scanned: ClamAV using ClamSMTP Move management of the inode->i_security blob out of the individual security modules and into the security infrastructure. Instead of allocating the blobs from within the modules the modules tell the infrastructure how much space is required, and the space is allocated there. Signed-off-by: Casey Schaufler Reviewed-by: Kees Cook --- include/linux/lsm_hooks.h | 3 ++ security/security.c | 83 ++++++++++++++++++++++++++++++- security/selinux/hooks.c | 32 +----------- security/selinux/include/objsec.h | 5 +- security/smack/smack_lsm.c | 70 ++++---------------------- 5 files changed, 98 insertions(+), 95 deletions(-) diff --git a/include/linux/lsm_hooks.h b/include/linux/lsm_hooks.h index 167ffbd4d0c0..416b20c3795b 100644 --- a/include/linux/lsm_hooks.h +++ b/include/linux/lsm_hooks.h @@ -2030,6 +2030,7 @@ struct security_hook_list { struct lsm_blob_sizes { int lbs_cred; int lbs_file; + int lbs_inode; }; /* @@ -2092,9 +2093,11 @@ static inline void loadpin_add_hooks(void) { }; #endif extern int lsm_cred_alloc(struct cred *cred, gfp_t gfp); +extern int lsm_inode_alloc(struct inode *inode); #ifdef CONFIG_SECURITY void lsm_early_cred(struct cred *cred); +void lsm_early_inode(struct inode *inode); #endif #endif /* ! __LINUX_LSM_HOOKS_H */ diff --git a/security/security.c b/security/security.c index 5430cae73cf6..a8f00fdff4d8 100644 --- a/security/security.c +++ b/security/security.c @@ -41,6 +41,7 @@ struct security_hook_heads security_hook_heads __lsm_ro_after_init; static ATOMIC_NOTIFIER_HEAD(lsm_notifier_chain); static struct kmem_cache *lsm_file_cache; +static struct kmem_cache *lsm_inode_cache; char *lsm_names; static struct lsm_blob_sizes blob_sizes; @@ -101,6 +102,10 @@ int __init security_init(void) lsm_file_cache = kmem_cache_create("lsm_file_cache", blob_sizes.lbs_file, 0, SLAB_PANIC, NULL); + if (blob_sizes.lbs_inode) + lsm_inode_cache = kmem_cache_create("lsm_inode_cache", + blob_sizes.lbs_inode, 0, + SLAB_PANIC, NULL); /* * The second call to a module specific init function * adds hooks to the hook lists and does any other early @@ -111,6 +116,7 @@ int __init security_init(void) #ifdef CONFIG_SECURITY_LSM_DEBUG pr_info("LSM: cred blob size = %d\n", blob_sizes.lbs_cred); pr_info("LSM: file blob size = %d\n", blob_sizes.lbs_file); + pr_info("LSM: inode blob size = %d\n", blob_sizes.lbs_inode); #endif return 0; @@ -288,6 +294,13 @@ void __init security_add_blobs(struct lsm_blob_sizes *needed) { lsm_set_size(&needed->lbs_cred, &blob_sizes.lbs_cred); lsm_set_size(&needed->lbs_file, &blob_sizes.lbs_file); + /* + * The inode blob gets an rcu_head in addition to + * what the modules might need. + */ + if (needed->lbs_inode && blob_sizes.lbs_inode == 0) + blob_sizes.lbs_inode = sizeof(struct rcu_head); + lsm_set_size(&needed->lbs_inode, &blob_sizes.lbs_inode); } /** @@ -311,6 +324,46 @@ int lsm_file_alloc(struct file *file) return 0; } +/** + * lsm_inode_alloc - allocate a composite inode blob + * @inode: the inode that needs a blob + * + * Allocate the inode blob for all the modules + * + * Returns 0, or -ENOMEM if memory can't be allocated. + */ +int lsm_inode_alloc(struct inode *inode) +{ + if (!lsm_inode_cache) { + inode->i_security = NULL; + return 0; + } + + inode->i_security = kmem_cache_zalloc(lsm_inode_cache, GFP_NOFS); + if (inode->i_security == NULL) + return -ENOMEM; + return 0; +} + +/** + * lsm_early_inode - during initialization allocate a composite inode blob + * @inode: the inode that needs a blob + * + * Allocate the inode blob for all the modules if it's not already there + */ +void lsm_early_inode(struct inode *inode) +{ + int rc; + + if (inode == NULL) + panic("%s: NULL inode.\n", __func__); + if (inode->i_security != NULL) + return; + rc = lsm_inode_alloc(inode); + if (rc) + panic("%s: Early inode alloc failed.\n", __func__); +} + /* * Hook list operation macros. * @@ -557,14 +610,40 @@ EXPORT_SYMBOL(security_sb_parse_opts_str); int security_inode_alloc(struct inode *inode) { - inode->i_security = NULL; - return call_int_hook(inode_alloc_security, 0, inode); + int rc = lsm_inode_alloc(inode); + + if (unlikely(rc)) + return rc; + rc = call_int_hook(inode_alloc_security, 0, inode); + if (unlikely(rc)) + security_inode_free(inode); + return rc; +} + +static void inode_free_by_rcu(struct rcu_head *head) +{ + /* + * The rcu head is at the start of the inode blob + */ + kmem_cache_free(lsm_inode_cache, head); } void security_inode_free(struct inode *inode) { integrity_inode_free(inode); call_void_hook(inode_free_security, inode); + /* + * The inode may still be referenced in a path walk and + * a call to security_inode_permission() can be made + * after inode_free_security() is called. Ideally, the VFS + * wouldn't do this, but fixing that is a much harder + * job. For now, simply free the i_security via RCU, and + * leave the current inode->i_security pointer intact. + * The inode will be freed after the RCU grace period too. + */ + if (inode->i_security) + call_rcu((struct rcu_head *)inode->i_security, + inode_free_by_rcu); } int security_dentry_init_security(struct dentry *dentry, int mode, diff --git a/security/selinux/hooks.c b/security/selinux/hooks.c index 248ae907320f..389e51ef48a5 100644 --- a/security/selinux/hooks.c +++ b/security/selinux/hooks.c @@ -147,8 +147,6 @@ static int __init checkreqprot_setup(char *str) } __setup("checkreqprot=", checkreqprot_setup); -static struct kmem_cache *sel_inode_cache; - /** * selinux_secmark_enabled - Check to see if SECMARK is currently enabled * @@ -244,13 +242,9 @@ static inline u32 task_sid(const struct task_struct *task) static int inode_alloc_security(struct inode *inode) { - struct inode_security_struct *isec; + struct inode_security_struct *isec = selinux_inode(inode); u32 sid = current_sid(); - isec = kmem_cache_zalloc(sel_inode_cache, GFP_NOFS); - if (!isec) - return -ENOMEM; - spin_lock_init(&isec->lock); INIT_LIST_HEAD(&isec->list); isec->inode = inode; @@ -258,7 +252,6 @@ static int inode_alloc_security(struct inode *inode) isec->sclass = SECCLASS_FILE; isec->task_sid = sid; isec->initialized = LABEL_INVALID; - inode->i_security = isec; return 0; } @@ -336,14 +329,6 @@ static struct inode_security_struct *backing_inode_security(struct dentry *dentr return selinux_inode(inode); } -static void inode_free_rcu(struct rcu_head *head) -{ - struct inode_security_struct *isec; - - isec = container_of(head, struct inode_security_struct, rcu); - kmem_cache_free(sel_inode_cache, isec); -} - static void inode_free_security(struct inode *inode) { struct inode_security_struct *isec = selinux_inode(inode); @@ -364,17 +349,6 @@ static void inode_free_security(struct inode *inode) list_del_init(&isec->list); spin_unlock(&sbsec->isec_lock); } - - /* - * The inode may still be referenced in a path walk and - * a call to selinux_inode_permission() can be made - * after inode_free_security() is called. Ideally, the VFS - * wouldn't do this, but fixing that is a much harder - * job. For now, simply free the i_security via RCU, and - * leave the current inode->i_security pointer intact. - * The inode will be freed after the RCU grace period too. - */ - call_rcu(&isec->rcu, inode_free_rcu); } static int file_alloc_security(struct file *file) @@ -6838,6 +6812,7 @@ static void selinux_bpf_prog_free(struct bpf_prog_aux *aux) struct lsm_blob_sizes selinux_blob_sizes = { .lbs_cred = sizeof(struct task_security_struct), .lbs_file = sizeof(struct file_security_struct), + .lbs_inode = sizeof(struct inode_security_struct), }; static struct security_hook_list selinux_hooks[] __lsm_ro_after_init = { @@ -7107,9 +7082,6 @@ static __init int selinux_init(void) default_noexec = !(VM_DATA_DEFAULT_FLAGS & VM_EXEC); - sel_inode_cache = kmem_cache_create("selinux_inode_security", - sizeof(struct inode_security_struct), - 0, SLAB_PANIC, NULL); avc_init(); avtab_cache_init(); diff --git a/security/selinux/include/objsec.h b/security/selinux/include/objsec.h index ea1687e737ad..591adb374d69 100644 --- a/security/selinux/include/objsec.h +++ b/security/selinux/include/objsec.h @@ -57,10 +57,7 @@ enum label_initialized { struct inode_security_struct { struct inode *inode; /* back pointer to inode object */ - union { - struct list_head list; /* list of inode_security_struct */ - struct rcu_head rcu; /* for freeing the inode_security_struct */ - }; + struct list_head list; /* list of inode_security_struct */ u32 task_sid; /* SID of creating task */ u32 sid; /* SID of this object */ u16 sclass; /* security class of this object */ diff --git a/security/smack/smack_lsm.c b/security/smack/smack_lsm.c index 364699ad55b9..6617abb51732 100644 --- a/security/smack/smack_lsm.c +++ b/security/smack/smack_lsm.c @@ -288,24 +288,18 @@ static struct smack_known *smk_fetch(const char *name, struct inode *ip, } /** - * new_inode_smack - allocate an inode security blob + * init_inode_smack - initialize an inode security blob + * @isp: the blob to initialize * @skp: a pointer to the Smack label entry to use in the blob * - * Returns the new blob or NULL if there's no memory available */ -static struct inode_smack *new_inode_smack(struct smack_known *skp) +static void init_inode_smack(struct inode *inode, struct smack_known *skp) { - struct inode_smack *isp; - - isp = kmem_cache_zalloc(smack_inode_cache, GFP_NOFS); - if (isp == NULL) - return NULL; + struct inode_smack *isp = smack_inode(inode); isp->smk_inode = skp; isp->smk_flags = 0; mutex_init(&isp->smk_lock); - - return isp; } /** @@ -824,17 +818,13 @@ static int smack_set_mnt_opts(struct super_block *sb, /* * Initialize the root inode. */ - isp = smack_inode(inode); - if (isp == NULL) { - isp = new_inode_smack(sp->smk_root); - if (isp == NULL) - return -ENOMEM; - inode->i_security = isp; - } else - isp->smk_inode = sp->smk_root; + lsm_early_inode(inode); + init_inode_smack(inode, sp->smk_root); - if (transmute) + if (transmute) { + isp = smack_inode(inode); isp->smk_flags |= SMK_INODE_TRANSMUTE; + } return 0; } @@ -963,48 +953,10 @@ static int smack_inode_alloc_security(struct inode *inode) { struct smack_known *skp = smk_of_current(); - inode->i_security = new_inode_smack(skp); - if (inode->i_security == NULL) - return -ENOMEM; + init_inode_smack(inode, skp); return 0; } -/** - * smack_inode_free_rcu - Free inode_smack blob from cache - * @head: the rcu_head for getting inode_smack pointer - * - * Call back function called from call_rcu() to free - * the i_security blob pointer in inode - */ -static void smack_inode_free_rcu(struct rcu_head *head) -{ - struct inode_smack *issp; - - issp = container_of(head, struct inode_smack, smk_rcu); - kmem_cache_free(smack_inode_cache, issp); -} - -/** - * smack_inode_free_security - free an inode blob using call_rcu() - * @inode: the inode with a blob - * - * Clears the blob pointer in inode using RCU - */ -static void smack_inode_free_security(struct inode *inode) -{ - struct inode_smack *issp = smack_inode(inode); - - /* - * The inode may still be referenced in a path walk and - * a call to smack_inode_permission() can be made - * after smack_inode_free_security() is called. - * To avoid race condition free the i_security via RCU - * and leave the current inode->i_security pointer intact. - * The inode will be freed after the RCU grace period too. - */ - call_rcu(&issp->smk_rcu, smack_inode_free_rcu); -} - /** * smack_inode_init_security - copy out the smack from an inode * @inode: the newly created inode @@ -4619,6 +4571,7 @@ static int smack_dentry_create_files_as(struct dentry *dentry, int mode, struct lsm_blob_sizes smack_blob_sizes = { .lbs_cred = sizeof(struct task_smack), .lbs_file = sizeof(struct smack_known *), + .lbs_inode = sizeof(struct inode_smack), }; static struct security_hook_list smack_hooks[] __lsm_ro_after_init = { @@ -4637,7 +4590,6 @@ static struct security_hook_list smack_hooks[] __lsm_ro_after_init = { LSM_HOOK_INIT(bprm_set_creds, smack_bprm_set_creds), LSM_HOOK_INIT(inode_alloc_security, smack_inode_alloc_security), - LSM_HOOK_INIT(inode_free_security, smack_inode_free_security), LSM_HOOK_INIT(inode_init_security, smack_inode_init_security), LSM_HOOK_INIT(inode_link, smack_inode_link), LSM_HOOK_INIT(inode_unlink, smack_inode_unlink),