Message ID | 149677755756.17333.13758722084031397094.stgit@sifl (mailing list archive) |
---|---|
State | Accepted |
Headers | show
Return-Path: <selinux-bounces@tycho.nsa.gov> Received: from mail.wl.linuxfoundation.org (pdx-wl-mail.web.codeaurora.org [172.30.200.125]) by pdx-korg-patchwork.web.codeaurora.org (Postfix) with ESMTP id 0138C60353 for <patchwork-selinux@patchwork.kernel.org>; Tue, 6 Jun 2017 19:34:40 +0000 (UTC) Received: from mail.wl.linuxfoundation.org (localhost [127.0.0.1]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id DB3C21FF2D for <patchwork-selinux@patchwork.kernel.org>; Tue, 6 Jun 2017 19:34:39 +0000 (UTC) Received: by mail.wl.linuxfoundation.org (Postfix, from userid 486) id CE554201BC; Tue, 6 Jun 2017 19:34:39 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on pdx-wl-mail.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-4.2 required=2.0 tests=BAYES_00, RCVD_IN_DNSWL_MED autolearn=ham version=3.3.1 Received: from emsm-gh1-uea11.nsa.gov (emsm-gh1-uea11.nsa.gov [8.44.101.9]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id D5E501FF2D for <patchwork-selinux@patchwork.kernel.org>; Tue, 6 Jun 2017 19:34:38 +0000 (UTC) X-IronPort-AV: E=Sophos;i="5.39,307,1493683200"; d="scan'208";a="6415680" IronPort-PHdr: =?us-ascii?q?9a23=3A0cZLfh3Tx1qkbmn5smDT+DRfVm0co7zxezQtwd8Z?= =?us-ascii?q?sewXI//xwZ3uMQTl6Ol3ixeRBMOAuq0C1rud6vu/EUU7or+5+EgYd5JNUxJXwe?= =?us-ascii?q?43pCcHRPC/NEvgMfTxZDY7FskRHHVs/nW8LFQHUJ2mPw6arXK99yMdFQviPgRp?= =?us-ascii?q?OOv1BpTSj8Oq3Oyu5pHfeQtFiT6/bL9oLBi7qQrdutQYjIZgN6081gbHrnxUdu?= =?us-ascii?q?pM2GhmP0iTnxHy5sex+J5s7SFdsO8/+sBDTKv3Yb02QaRXAzo6PW814tbrtQTY?= =?us-ascii?q?QguU+nQcSGQWnQFWDAXD8Rr3Q43+sir+tup6xSmaIcj7Rq06VDi+86tmTgLjhT?= =?us-ascii?q?wZPDAl7m7Yls1wjLpaoB2/oRx/35XUa5yROPZnY6/RYc8WSW9HU8lfTSxBBp63?= =?us-ascii?q?YZUJAeQPIO1Uq5DxqloLoRa4GAKiBv7gyiVQi3Hr3aM0zeovHwLI0wMvA90Av2?= =?us-ascii?q?zUodfoOKocT++117LFzSnBYv5MxTvx9JLFfxInrPqRXbxwa83RyUw3Gg3flFqQ?= =?us-ascii?q?tIjlNC6S2OQKtGib9fRvXv+ohm4/rgFxpT+vxt0yhYTSnIIa1E3L9SVjz4YpP9?= =?us-ascii?q?G3VEl7Ydu9HZZWqiqUOYx2QsY4TGFpviY30rgGtoShfCcW0pgnxhjfa/KAc4WO?= =?us-ascii?q?/xntV/6RLC9liH9qd7+znRa//VW6xuHiWcS4zkxGojddntXSqnwA0wbf5tWJR/?= =?us-ascii?q?dj5EutxDWC2g7J5u1aIk05k7fQJYQ7zb4qjJUTtFzOHirxmErrkqCbbl4k+u20?= =?us-ascii?q?6+T/ZbXmu4OcO5d0ig7gNqQundSyAfgiPQgUXmib5P+82Kf//Uz5XLpKjvo2nr?= =?us-ascii?q?PfsJ/GPsQUurS1AwpU0oYn8xq/DjGm38oEnXQfMV5Idx2Kg5LpNl3TOvz0E/iy?= =?us-ascii?q?j0q2nDt23/zGO6fuApTJLnjNirfherN95lZHyAUtydBf5pRUCqwOIf7qQUDxs8?= =?us-ascii?q?HYDhklPAOq2ObqE8l914MCVmKPBa+VKqXSsUSS6e41LOmMY5EVtC7nK/c5//7u?= =?us-ascii?q?kWM5mVgFcKmr2psXbmq3HuhmI0qDZ3rhmdUBEWAMvgo7VuPqk0GCXiBJZ3apRa?= =?us-ascii?q?484Ss7CI2+B4fZWo+tmKCB3Du8HpBOZGBGCEqDHmvrd4WfXPcMbiOSItF6nzwK?= =?us-ascii?q?UbihVoAg2gqztA/817pnM/DY+ioCtZLszNJ1/fHclQku9TxoCMSQy2+MT2Bwnm?= =?us-ascii?q?MNWTA2xrtyoUJjxVie1qh4meZXFcRJ5/NOUAc1K4LTz/BgB9D1QALBcc+DSEy6?= =?us-ascii?q?TdW+HTExUtUxzscTbElhHtWiiRbD3za3D7IOibyEGoY08qPd3nj2IcZx0XDG27?= =?us-ascii?q?c9j1M+WMtAKXWmhrJj9wjUH4PGjlmZmLywdakHwCHN82KDwnaUs0FDTA58S6PF?= =?us-ascii?q?Um4DZkHOt9T2+lvCT6OyCbQgKgZAyc+DKqxMatDyiFVGQO7vONXYY26rnWe/Hw?= =?us-ascii?q?yIxrCNbIr0ZWoRxiPdB1YYkwoL53aJKRA+Bju9o2LZFDFhC0rvbFn28el/s3O2?= =?us-ascii?q?VVc0wBuQb01gzLq14hoViuaARPwNxL4Evz0hqzpsFlanw93WE8aApxZmfKhEb9?= =?us-ascii?q?M9+k1I1WTFuAx8JZytNKVihkYfcwhupEPv2Q53Bp9Hkcgwo3Mg1BByJr6A0FNd?= =?us-ascii?q?azOY2oj9Or7NJWnx+xCvdrXb2lLE39aV/acP9e40q1L5vAGmDkAi6Wlo08FJ03?= =?us-ascii?q?uA4ZXHFBAdXo/rUkY26Rd6varXbTMh6IPRz3FsNrO0sjDa0dIzGOQl0gqgf8tY?= =?us-ascii?q?MK6cDw/yHdcaB8+1KOw2gFWpdRQEPOdc9a4xJcymceGK2Ki1M+Z8hDiml3hI4J?= =?us-ascii?q?hh0kKQ8CpxUuDJ0IwBw/GEwASHTSz8gUy/ss/pg4BLfiwSHm+lxSjjHo5RabV4?= =?us-ascii?q?fZwXBme2P8232tJ+iobxW3FF6VGjBkkJ2MuydBWOaFz92BFf2l4MoXy7gye4yS?= =?us-ascii?q?J7ky0xpKqFwCPO2/jidAYAOmNTQmlijFPsIYyqgNABR0WndRYmlAGi5UrgwKhb?= =?us-ascii?q?vqt/JXHJQUhUZyj2M31iUqyou7qcYs5A9I8osSJNUOimfV+aSrn9ox0V0y74G2?= =?us-ascii?q?texTY7eCuwupX+hRB6j3idLHlrpnrDZc5w3Qvf5MDbRfNJ2joGRTJ4iSXOClin?= =?us-ascii?q?Idap+dSUl5HesuGxTG+hTYVTcSjtzYOBqCS7/ndmARuhkPCvgtfnCxQ10Tfn19?= =?us-ascii?q?l2UiXFtAz8Yo7v16S+L+1nZFVnBFjy6sdhAYF+j5c/hIoK1XgdnJWV8mINkX3v?= =?us-ascii?q?PtVDxaL+cH0NSCYTw9HP/Qjl3FdvIWiTy43iUXWdxtdhZ968Ym4N3yIx88ZKCK?= =?us-ascii?q?CI47Bemyt6vEa4pxrLYfdhhjcd1ecu6HkCjuEKpgUtyD6dD6sRHUZGOyzsjBKI?= =?us-ascii?q?4M6irKlNY2ava7ew3lJknd+9FLGCvh1cWHHhd5c8Gy9/895yMEzK0HLu6oHoYt?= =?us-ascii?q?/QYswPtheMiRfPk/BVKI4tlvoNnSdnIXjyvWAhy+MgkRNu3I26vYieJ2Vj5q25?= =?us-ascii?q?BARUNjrvZ8Mc4jvtl7pRnt6K34CzGZVsAi0LU4H1TfKsDj0Sre7oNwCSEDIisH?= =?us-ascii?q?eWAqffHRSB50d8tHLDCYurN3aKJHkD0dptWhedJEtFgAAbQjo2hJg5GR62xMb5?= =?us-ascii?q?akd2+igR5kLkqhtL0u9oOQPwUmHDpAevbzc5U5afIwRL4QFF/UfaK9Se7vh0Hy?= =?us-ascii?q?Fa4JKusBCNJnacZwRSAmEDQlaECEz7Prmy+dnA9PCVBu+kIPvKZbWBt/BeV+uS?= =?us-ascii?q?yp21yYZm+SiDNtmUPnZ+FfI7wlRMUWp/G8vHhzUFUzYXmD7Vb86HuBe8/TV6rt?= =?us-ascii?q?ql/PXlQg7v4JGAC79VMdRv4B25m7uMN+uKiCZ+MzZY2YsGxWXUx7gHwF4SlyZu?= =?us-ascii?q?eiGjEbQaqyHCUbnQlbVRDx4HbCNzL9BF4Lgg0QlII8Lbjcn11rFghP4vF1hFTU?= =?us-ascii?q?Dhmt2uZcESJWG9LknIBF6TNLmdKz3Lwtv3YbigSb1ejeVUsQe/uTCHHE/iJDuD?= =?us-ascii?q?kyPlVxe1MeFDlCubJgBRuJmhchZxDmjuVMrmZQOgP9Bpiz02wKE0hnTROG4dLz?= =?us-ascii?q?dzbV1CoqeX7SNCjfV1A3ZB4WZ9LemYhyaZ6PHVJYsNsfR1GCt0mPha724ky7ZO?= =?us-ascii?q?9yFLXv91mDbIrtF0uV2mlvSPyjx9XxpUszpLmIWLvUZiOKXe7JVAX2jL/A4V52?= =?us-ascii?q?WKFxsKv8dlCsHou61I0djAjrzzJy1N893K5ssRHNPUJ9iZMHU7PhrmBiXUABED?= =?us-ascii?q?TTG1KWHVn1Zdn+2K9n2Jspg6rYDhl4EPSr9UU1w1EOgXBVl7E9MZIZd4RDUkna?= =?us-ascii?q?ScjM4S6nq0tAPRS9lCvpDbSvKSBu3iJyyWjbZeeRsH36j1LYMLNoLl3Uxib0N1?= =?us-ascii?q?nIXOG0XLWtBMrTdtbgguoEVC6HJ+VHE821r5agOx538eDeK0nhkzigdke+Qt8z?= =?us-ascii?q?bt7EkxJlXRviswl1c+mdb+jD+Ndz7xKbu/UptNCyrorUQxNI30QxptZw2ogUNk?= =?us-ascii?q?LCvER65Wj7Z4dmBqiAvctoVUFP5ZSq1EbhEQyu+LZ/U00VRcrSCnylFd6evDF5?= =?us-ascii?q?RiiBMgcYSwoHJYxwJjcNk1KLTWJKVX1FdQgrmDviyv1uAq3A8RPUAN8HiReC4J?= =?us-ascii?q?okAIMKcpJzaw9Ox29QOCgydDeHQLV/cyuPJl6Fg9NPqawCL6z7FDKlu8OPeeL6?= =?us-ascii?q?ODpmfAksCIQksq1kwWl0hJ57523tk/c0CMTUAg0KORFwgVNcrFMQxacs1S9H7V?= =?us-ascii?q?fSmTr+rNxZN1Mp6nGe/2V++Os7wYgkW+HAYmB44M9NgOHoGw0EHEKsfqNKMKxg?= =?us-ascii?q?8z5ATqOVqFF+9EdwiRkDcdpMG+woR30pdBKTEAG2V9MDm357bNqg8snvWDQM88?= =?us-ascii?q?Ym0GUYscKnI2RMq6ljZdv3RHFjm4zOQZyQmF7zLnqSTQCiT8Y8BkZPeOahNmEM?= =?us-ascii?q?u29ikn86iqlV7X9Y3TJ3rkOtRmu9/P7/4appmcBvxISrl9tlvTlJNDR3y2SWLP?= =?us-ascii?q?F8C6J4ToYYk2cdP0Emq6UkC4iz8tTMfxJtasIbKOgQH0RYZZq4ab3Dc7NcChDD?= =?us-ascii?q?0eHQl/p/0b7qJmeQIDe4Y7YQLvtwkmK6y/IQKY0tKyQ2atKTpbVORQzeS6ZrNN?= =?us-ascii?q?1CUgdOm6x2U8Tpsi1em47VYNRI0WjhHZ3fusfY1eUSnvFXNDYwrPoCo4l25mNu?= =?us-ascii?q?Y02Ogy2wjHsVgGPDCNbeBpZnFEs8s6BVyMPXV8EnA4SEOEjYrf/g6s2Kgf8DBD?= =?us-ascii?q?kNZSyuBKqmXxvoHBbzK2Q6yks4/Vsio6Ydghua1xPpTpItGau5PGgjzfUJ7Qvx?= =?us-ascii?q?WKUC6nFvpantxQLzxdQPRThG4qJ9cJuYtb5ko3TMs+IKZPCKY0rLCwdTVkFTIS?= =?us-ascii?q?zTMeV46YxjwChOa81KfalheXdJQiKwQKvoxfjNUHTyN4ZTgTq7OkV4XTi2CLUH?= =?us-ascii?q?MLIBsJ4QRK+g0Aipd6fvr574rQUJ9M1zlWrupuUiTWC5Zl7FT7SmSZgFTiTvWu?= =?us-ascii?q?jfCp1xpIzP3wytkbRAJ/CU9FyuZMjEQoMrZ3JLILs47WqD+Hb136s3zpyOunIl?= =?us-ascii?q?lRxsnUd1z3DIrFqWr8XDcT+WcRRYNVznHQC4gSmRJjaKk3vFVMPJymekHm6j0q?= =?us-ascii?q?3YhmA7m4VcGux1Ykt3kGRDynE9tfBO54rl3bQjplY4qkqJ/9IZVdXndQ+IGBq1?= =?us-ascii?q?deiEhiKTS5yYdaK81X4T4BRzlPoTScvNuuU8JPw8l2AIEQIt1noXfyBLtEOISN?= =?us-ascii?q?o30xorHvy3nZ+ywiv1e+2jqzHrG3T/5D/2weAQgpIHyepVcpD+sp6GjS81TNvU?= =?us-ascii?q?tz/+ZUHLSPil9xoDllFJBUGjlJzWylL0h0THRevOVaMr7ac8pAQ/QpZB+vPBI/?= =?us-ascii?q?Ffg630yJ4050nHH5YzBsuQtA4SzdWRc7VTUNiLf3hTIest2nOSMdS59QcTUhaC?= =?us-ascii?q?LFJhmHmSxLuRZQcFtmW5YHDdZZ47sbx5db/tLeSUawLiEIRBxiORgi0fVFkU5M?= =?us-ascii?q?rV6Vdj3DAgqwbfbArBl3ctmLrMKzK/T55ghHgJv9sO8k76UDW2GmmQq1TNDcqI?= =?us-ascii?q?/zqMaHuVaQe6fjLeK8e2PBQybRghyqg7crEYXK9TDJMAVHM5l61WYkYZ/5BGHQ?= =?us-ascii?q?MxRJO74XKkhGWa10cthJvudaZ8p4d6kT4q9tGgiLRhXxF4yztPNGNErcRSzCLy?= =?us-ascii?q?Wd9eyyuZjT4qLARujgfMOM223KQ6ZwPpdk9zb3Bavl0YhD9UXowPtt8F11SUTe?= =?us-ascii?q?OSCbsNvhPh8L5NWldkb6pp0pBi/WD41tn3rx3UxAbM0XQzCw8JsE1pxZ7mrwSf?= =?us-ascii?q?hi3Uj3quFS8KNk6YYv6bBz1ci0PbvSKehdsUJ/HhiUHBtl+YswD2VkWmBRZvMR?= =?us-ascii?q?KO3LcqQHjMDurOT3GLIL6BGP/OxZc9THLVnbmsajEjGcVQBEnAAZpD4YNASczf?= =?us-ascii?q?mFm7RwScm/u+j0wUct40W6Lh4azbBi+YaE9bCOpO/MdRfRyqIEWqfyTMPpsrss?= =?us-ascii?q?o1+S5eEjlLMWeGx6eQunEOYHVs4a22jv07snzT42HMPFBLLg/+RPV3QnkTL8g5?= =?us-ascii?q?p9BUkZGusIHbqX+oRThmE4m+jCO90XdKBCn3yDFR+iEr8M036k8TCXIHV/ghHT?= =?us-ascii?q?zx7wXX6z7EXooiNiRivM1djjmFJPVrarHUdSQzapOUhgvTOJPQrnqN33uaAv40?= =?us-ascii?q?EtKGDktdWNlGy6OLNMBMD/IdORICYuqFIQlp0xScSl2ZoHFtqlPNcR7HZ+Y+PC?= =?us-ascii?q?5Gyxly9OvbxHh5be48GS4fjXBmWvj6yEpLWL2DBYy2I3sUs56t++KvHE/8eKTO?= =?us-ascii?q?iw12YNUyd/vBPMXxquqrzer10ZIkKL31nWl4wNJNFWx2E41lvh5OghXt086Ble?= =?us-ascii?q?GpzHZ/MYqjD5ICH0zkqHY9IrSime1CNaHlD0EVl9A6U83Xz/vcLXmnfK+l0oQI?= =?us-ascii?q?Zwe1bhhRNpE4UyMVgt50QPwiofDQgNbgiWDLCpBEv/N4QLSVMOaQ+Z07imZKg4?= =?us-ascii?q?wVd/wrS15O/cdeZ8HbYCNu5Bjg6Sm1hWAokZsawFQLNyYVBd9q/XphT6C4f9Qv?= =?us-ascii?q?jmkWE9OuGyQs9H788WrWYi4hy4Rxq685hP9bEbiIqHdqRce5jDoNh871t75T4I?= =?us-ascii?q?biFNmAJwjw+lXuAcquHj5cLbsJmx5ua1SqktQ+QX9x4pB2VxlJbwmEosoc3L2O?= =?us-ascii?q?dcRIzVjp7/8ANXL36JponayR98JvQKK46xe7Zg7XoHLTAEJ30SJdqWd+U84yh1?= =?us-ascii?q?PTXP/VxNHMcMaskePMXTgg1bl0zpWL5S9srHAFCYEJ18d9o172btzjA674c8WP?= =?us-ascii?q?766DCqPZDf801NP/RbgSVjjt3CvvYawebSCCUM5XmZagR1zT2Cy5aXFvbw5v+A?= =?us-ascii?q?yNfKWFMaBiQ2SZtSJCKe+Qy7Qeq4jJrpXR2S6s/vh5I+c0WcRmevk6QBs6ZMF/?= =?us-ascii?q?NAiyrg0zhaCI/1nfKUvMC25GtRqFJHDJ557QfZF6VHIpV7JRP4m9G3SUh+HCTw?= =?us-ascii?q?ZNrZeQYpuOqSwucM4vtxN1HiZYAFPh0Ey6j26X1PTgthULT2pEqWXfoNZNt6T/?= =?us-ascii?q?PJtnVV6YVmK68TM1iSuofnrjJJqF8sBg8mdqMwrzJddknUnw1VQLz4uLgehQsA?= =?us-ascii?q?SdR5o1NDGXqsOGIi4DrKTatVg7WKCPwO6zmdU6MAXUNpMiN4XhO0145je7Ssnf?= =?us-ascii?q?9dtGNJgDlxoP8w0zxpXBG8ozHjp7oR2TI8/7G1rDcBuXtFTuWYiSvHFVVDzPAX?= =?us-ascii?q?jagBCnfi6Fq8YGIAbIvz+7RnO8Xg9Zc77HQ7fBojfjcKXeK+BCHsl6mIGJCAsM?= =?us-ascii?q?pAhB6Rv8XDdb6zLTYIObQ70h/jQ2V93RXfnBZv62sHWDKg7MUrJI+lI8Yq2jKo?= =?us-ascii?q?GXTHdFYL+q5JstX+tVAFTOsycl5gzn9s0s6ZSS0RXsDPHXg6jhQ8Y2VebJ1D8Q?= =?us-ascii?q?MaF7UvgjuQsalG+gYUYTnKHYSh/ondhtzI2X47Tddr2m3avKuFiY020Hd9gdN7?= =?us-ascii?q?8jaOuGgOd+zfS8JsAHjz14dHyez5Y/Wts/wHR5V9xbSkUf8CLtOj9nWs1JVtQE?= =?us-ascii?q?+lyawUH0ClP+8b2rfbTyClRHWEWeSKdmiBhCo5Mk/u6hmrMFI3bN1Gr0kjPeve?= =?us-ascii?q?npRcjRHuUatoRiWMol/W1GkjMeIZdwI1v4eqYA4KQ/QSZ+ibI+gh3vs+BEEKb3?= =?us-ascii?q?DXASt8E/W2vkK1nIhnJ3Vg5l33bv/z/QDgLNufAQIEEYrdrp5t5fy6WHyONmJ6?= =?us-ascii?q?wB11Jkl0+P/VF04tue9Eb5aRgd/Qisxj0e4Cc/diKzc9u9AUmoJn54mZy8KKcR?= =?us-ascii?q?bWzpbpO97avuKYA/rEz0Qxe2FaVLUZbRny54UgMd4zQ6fTEqdBvRQAGag6R4Qs?= =?us-ascii?q?N2nv+6FwLQNzahDeaa+1g8nro+KLY4Vbp2XS7l0uNivcvAcDyvOsRwxhc5+qn2?= =?us-ascii?q?nyIIw3Rj9ZodxtEgFmHIpTFMwetAenBp+UmL2hi9Cv4U96vPUKsaXoAPDQyNu5?= =?us-ascii?q?x5lxX4Rd5UGTOzbRALdkj199juS2mPjAyYXxCcL+dtMYTuh0XHDKZqXAHoqhNj?= =?us-ascii?q?KEItj8dFJe876AzLJ5VQ2cZCT4X6qAqS2lO+xo4UE6yoxjYOrT1ycg77DB19v0?= =?us-ascii?q?YGFXvCCjrWSGNJFH9lzFGfTeXw5ISfqC6GtlBrMYbY/19OcILNwjz9+Q7QZv7D?= =?us-ascii?q?RCzsSFObaurlfW1U9gdpLUMlHp2yAnVokOOxu/LEQsjXXeqnTHDnRWNtKkJtV1?= =?us-ascii?q?gNaJEhzt4FF8mWQ3aWFdGmroRNGROW8A1sKgZQ2K8hxED9ICn+6xZE45ube+Se?= =?us-ascii?q?5yOpVKge+qrqkIkc51KyHTQ8hXJyPQI6V1PjpWFerCv0UoYhgYs7g1XYc1eJeO?= =?us-ascii?q?IEMbMEuazyP90xfC21Xud9OwzKaJPDoW8nJfwr3eyjdAoA25ufeCgs3/S7DVdo?= =?us-ascii?q?r2U+DOPyY/TTGVWzAyEUev+Ve5tPsJp+aXIGcFolAJeSKeEgASqbpzrdjLCW/T?= =?us-ascii?q?n/dvfJoQhPCVQyrwUjF3lLIuBiZXskCBW/UDGhPNYH/7gWpTpgiiK+RS/XLhdb?= =?us-ascii?q?KY3atVW/EMDotKbPKZX8PSeepCKDcwijUZJOG8csXer7Y81VLIV3EZE6jT9FCF?= =?us-ascii?q?Sk6ZWPmcyCzqXYkPuIg0oCUo8MrKniBrC6TII6qfpzm2/46jgiaYvPHRW2gubk?= =?us-ascii?q?EunuINHnOBwBhBKWEDDdEZokftTbCcZxUE6HV8ku9q2hkRaCxvQ3Zu1TtQh//7?= =?us-ascii?q?FcpHGnAOi2b7ePQbaBhSCzQq8Afe+gj1ZsYNkdreS29X6v0HTo9Lf6pg05XeJK?= =?us-ascii?q?ZFmKVh5zlhuiFv9nzFUV4=3D?= X-IPAS-Result: =?us-ascii?q?A2GSAwBiAjdZ/wHyM5BeGgEBAQECAQEBAQgBAQEBFQEBAQE?= =?us-ascii?q?CAQEBAQgBAQEBgwIoA2IDgQqDc4Z/hA2eEIQhgX+EEgVOLQuFcwOCaVcBAQEBA?= =?us-ascii?q?QEBAQIBAmgogjMkAQ1yAQEBAQEBAQEBAQEBAQEBAUUCDWUCIARSAwMJAhcIBQI?= =?us-ascii?q?iBAICAwFDKQWIU4FSEK1EgWw6JgKLVQwBIAWBC4VWgWA2hhCCEIJGgmEBBJ40h?= =?us-ascii?q?yaDN5NWEBeGVwJIlBlYTD4wIQgbFYUdgktaiUwBAQE?= Received: from unknown (HELO tarius.tycho.ncsc.mil) ([144.51.242.1]) by emsm-gh1-uea11.nsa.gov with ESMTP; 06 Jun 2017 19:34:36 +0000 Received: from prometheus.infosec.tycho.ncsc.mil (prometheus [192.168.25.40]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id v56JYXmD010903; Tue, 6 Jun 2017 15:34:34 -0400 Received: from tarius.tycho.ncsc.mil (tarius.infosec.tycho.ncsc.mil [144.51.242.1]) by prometheus.infosec.tycho.ncsc.mil (8.15.2/8.15.2) with ESMTP id v56JWhqE162721 for <selinux@prometheus.infosec.tycho.ncsc.mil>; Tue, 6 Jun 2017 15:32:43 -0400 Received: from goalie.tycho.ncsc.mil (goalie [144.51.242.250]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id v56JWhjx010348 for <selinux@tycho.nsa.gov>; Tue, 6 Jun 2017 15:32:43 -0400 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A1BpBgAkAjdZhxy3hNFeHAEBBAEBCgEBgy0oZQOBCoNzhn+EDZBxjR+EIYYRBVocEIV4gmdXAQIBAQEBAQITAQEBCgsJCCiFcQRSMAUCJgJJKYhYgVIQrUSBbDqLfQELIQWBC4VWgWA2hhCCEIJGgmEFnjSHJoM3k1YQhm4CSJQZgSM+MCEIGxWFHT+CDCQ2iUwBAQE X-IPAS-Result: A1BpBgAkAjdZhxy3hNFeHAEBBAEBCgEBgy0oZQOBCoNzhn+EDZBxjR+EIYYRBVocEIV4gmdXAQIBAQEBAQITAQEBCgsJCCiFcQRSMAUCJgJJKYhYgVIQrUSBbDqLfQELIQWBC4VWgWA2hhCCEIJGgmEFnjSHJoM3k1YQhm4CSJQZgSM+MCEIGxWFHT+CDCQ2iUwBAQE X-IronPort-AV: E=Sophos;i="5.39,307,1493697600"; d="scan'208";a="6080713" Received: from emsm-gh1-uea11.corp.nsa.gov (HELO emsm-gh1-uea11.nsa.gov) ([10.208.41.37]) by goalie.tycho.ncsc.mil with ESMTP; 06 Jun 2017 15:32:40 -0400 IronPort-PHdr: =?us-ascii?q?9a23=3AVjLqDRCthnLBtxLfIYZAUyQJP3N1i/DPJgcQr6Af?= =?us-ascii?q?oPdwSPv/oMbcNUDSrc9gkEXOFd2CrakV1KyL4uu5AjNIyK3CmUhKSIZLWR4BhJ?= =?us-ascii?q?detC0bK+nBN3fGKuX3ZTcxBsVIWQwt1Xi6NU9IBJS2PAWK8TW94jEIBxrwKxd+?= =?us-ascii?q?KPjrFY7OlcS30P2594HObwlSijewZbF/IA+2oAjVucUanIVvJ6QswRbVv3VEfP?= =?us-ascii?q?hby3l1LlyJhRb84cmw/J9n8ytOvv8q6tBNX6bncakmVLJUFDspPXw7683trhnD?= =?us-ascii?q?UBCA5mAAXWUMkxpHGBbK4RfnVZrsqCT6t+592C6HPc3qSL0/RDqv47t3RBLulS?= =?us-ascii?q?wKLCAy/n3JhcNsjaJbuBOhqAJ5w47Ie4GeKf5ycrrAcd8GWWZNW8BcXDFDDIyh?= =?us-ascii?q?dYsCF/cPM+ZGoYfzpFUBoxSxChWjCu701j9FhGX70bEm3+k7EwzL2hErEdIUsH?= =?us-ascii?q?TTqdX4LL0cXvqozKnM0D7NaPRW2TDn6IfWbxsspumMXbd3ccrW00kgCRjIjk+O?= =?us-ascii?q?poP4PzOazPgNv3KH4OpnUOKikmgqoBx/rDiow8cjkIjJhoQNx1DB7yp52po6Kc?= =?us-ascii?q?e5SE59b96kF51dvDyZOYtuWs4uXX1ktSIgxrEbt5O3YjIGxIkkyhPRcfCLbYuF?= =?us-ascii?q?7xT+X+iLOzh4nmhqeLenihay70egzur8W9Gx0FdFsyZJiMPMuW4Q2BzT8MeHVu?= =?us-ascii?q?Fx8Vum2TaKzwzT6+dELl4olafDNZIt3ro9moAOvUnNACP6glj6gayYe0k+5OSl?= =?us-ascii?q?6PzrYrD8qZ+dM490hBv+MqMrmsGnGeQ4Nw8OX2+B+euiz7Dj51P2T6hKjvIsjq?= =?us-ascii?q?nVqozVJcMepqKhGQ9azp4j6wqjDzehyNkYhmcILFZEeBKBkojoNErDIOz4DPij?= =?us-ascii?q?g1Ssly1nx/bdPrL7GJnNIX/DkKmyNYp6vlVRzAs10MB3+4NfCrZHJun6HED2qo?= =?us-ascii?q?/2FBg8ZjS93uKvLdJ6zI5WDXqKBaiDPYvIvFOI7/5pKO6JMtxG8A3hIuQosqa9?= =?us-ascii?q?xUQynkUQKOzwhcMa?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0H4AQBiAjdZhxy3hNFeHAEFAQsBGAEBB?= =?us-ascii?q?AEBCgEBgwIoZQOBCoNzhn+EDZ4QhCGBf4QSBVocEIV4gmdXAQEBAQEBAQECAQI?= =?us-ascii?q?QAQEBCgsJCCgvgjMkAQ1yAQEBAQEBAQEBAQEBAQEBAUUCDYEHBFIwBQImAkkpi?= =?us-ascii?q?FiBUhCtRIFsOot9AQshBYELhVaBYDaGEIIQgkaCYQWeNIcmgzeTVhCGbgJIlBm?= =?us-ascii?q?BJD4wIQgbFYUdP4IMJDaJTAEBAQ?= X-IPAS-Result: =?us-ascii?q?A0H4AQBiAjdZhxy3hNFeHAEFAQsBGAEBBAEBCgEBgwIoZQO?= =?us-ascii?q?BCoNzhn+EDZ4QhCGBf4QSBVocEIV4gmdXAQEBAQEBAQECAQIQAQEBCgsJCCgvg?= =?us-ascii?q?jMkAQ1yAQEBAQEBAQEBAQEBAQEBAUUCDYEHBFIwBQImAkkpiFiBUhCtRIFsOot?= =?us-ascii?q?9AQshBYELhVaBYDaGEIIQgkaCYQWeNIcmgzeTVhCGbgJIlBmBJD4wIQgbFYUdP?= =?us-ascii?q?4IMJDaJTAEBAQ?= X-IronPort-AV: E=Sophos;i="5.39,307,1493683200"; d="scan'208";a="6415571" X-IronPort-Outbreak-Status: No, level 0, Unknown - Unknown Received: from mx1.redhat.com ([209.132.183.28]) by emsm-gh1-uea11.nsa.gov with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 06 Jun 2017 19:32:39 +0000 Received: from smtp.corp.redhat.com (int-mx01.intmail.prod.int.phx2.redhat.com [10.5.11.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.redhat.com (Postfix) with ESMTPS id CCFBEC0587DC; Tue, 6 Jun 2017 19:32:38 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.2 mx1.redhat.com CCFBEC0587DC Authentication-Results: ext-mx08.extmail.prod.ext.phx2.redhat.com; dmarc=none (p=none dis=none) header.from=redhat.com Authentication-Results: ext-mx08.extmail.prod.ext.phx2.redhat.com; spf=pass smtp.mailfrom=pmoore@redhat.com DKIM-Filter: OpenDKIM Filter v2.11.0 mx1.redhat.com CCFBEC0587DC Received: from [127.0.0.1] (ovpn-124-189.rdu2.redhat.com [10.10.124.189]) by smtp.corp.redhat.com (Postfix) with ESMTP id 554C118A3D; Tue, 6 Jun 2017 19:32:38 +0000 (UTC) Subject: [RFC PATCH] selinux: fix double free in selinux_parse_opts_str() From: Paul Moore <pmoore@redhat.com> To: selinux@tycho.nsa.gov Date: Tue, 06 Jun 2017 15:32:37 -0400 Message-ID: <149677755756.17333.13758722084031397094.stgit@sifl> User-Agent: StGit/0.17.1-dirty MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit X-Scanned-By: MIMEDefang 2.79 on 10.5.11.11 X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.5.16 (mx1.redhat.com [10.5.110.32]); Tue, 06 Jun 2017 19:32:39 +0000 (UTC) X-BeenThere: selinux@tycho.nsa.gov X-Mailman-Version: 2.1.20 Precedence: list List-Id: "Security-Enhanced Linux \(SELinux\) mailing list" <selinux.tycho.nsa.gov> List-Post: <mailto:selinux@tycho.nsa.gov> List-Help: <mailto:selinux-request@tycho.nsa.gov?subject=help> Cc: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>, Dmitry Vyukov <dvyukov@google.com> Errors-To: selinux-bounces@tycho.nsa.gov Sender: "Selinux" <selinux-bounces@tycho.nsa.gov> X-Virus-Scanned: ClamAV using ClamSMTP |
On Tue, Jun 6, 2017 at 3:32 PM, Paul Moore <pmoore@redhat.com> wrote: > From: Paul Moore <paul@paul-moore.com> > > This patch is based on a discussion generated by an earlier patch > from Tetsuo Handa: > > * https://marc.info/?t=149035659300001&r=1&w=2 > > The double free problem involves the mnt_opts field of the > security_mnt_opts struct, selinux_parse_opts_str() frees the memory > on error, but doesn't set the field to NULL so if the caller later > attempts to call security_free_mnt_opts() we trigger the problem. > > In order to play it safe we change selinux_parse_opts_str() to call > security_free_mnt_opts() on error instead of free'ing the memory > directly. This should ensure that everything is handled correctly, > regardless of what the caller may do. > > Fixes: e0007529893c1c06 ("LSM/SELinux: Interfaces to allow FS to control mount options") > Cc: stable@vger.kernel.org > Cc: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> > Reported-by: Dmitry Vyukov <dvyukov@google.com> > Signed-off-by: Paul Moore <paul@paul-moore.com> > --- > security/selinux/hooks.c | 5 ++--- > 1 file changed, 2 insertions(+), 3 deletions(-) FYI, I just merged this into selinux/stable-4.12.
diff --git a/security/selinux/hooks.c b/security/selinux/hooks.c index 9926adbd50a9..05c0df050a39 100644 --- a/security/selinux/hooks.c +++ b/security/selinux/hooks.c @@ -1102,10 +1102,8 @@ static int selinux_parse_opts_str(char *options, opts->mnt_opts_flags = kcalloc(NUM_SEL_MNT_OPTS, sizeof(int), GFP_KERNEL); - if (!opts->mnt_opts_flags) { - kfree(opts->mnt_opts); + if (!opts->mnt_opts_flags) goto out_err; - } if (fscontext) { opts->mnt_opts[num_mnt_opts] = fscontext; @@ -1128,6 +1126,7 @@ static int selinux_parse_opts_str(char *options, return 0; out_err: + security_free_mnt_opts(opts); kfree(context); kfree(defcontext); kfree(fscontext);