From patchwork Wed May 3 10:30:18 2017 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Petr Lautrbach X-Patchwork-Id: 9709173 Return-Path: Received: from mail.wl.linuxfoundation.org (pdx-wl-mail.web.codeaurora.org [172.30.200.125]) by pdx-korg-patchwork.web.codeaurora.org (Postfix) with ESMTP id 61FC860385 for ; Wed, 3 May 2017 10:34:05 +0000 (UTC) Received: from mail.wl.linuxfoundation.org (localhost [127.0.0.1]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id 4EBC728557 for ; Wed, 3 May 2017 10:34:05 +0000 (UTC) Received: by mail.wl.linuxfoundation.org (Postfix, from userid 486) id 41E1F285EB; Wed, 3 May 2017 10:34:05 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on pdx-wl-mail.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-4.2 required=2.0 tests=BAYES_00, RCVD_IN_DNSWL_MED autolearn=ham version=3.3.1 Received: from emsm-gh1-uea11.nsa.gov (smtp.nsa.gov [8.44.101.9]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id 984C8285FD for ; Wed, 3 May 2017 10:34:04 +0000 (UTC) X-IronPort-AV: E=Sophos;i="5.38,283,1491264000"; d="scan'208";a="5425522" IronPort-PHdr: =?us-ascii?q?9a23=3ATqx3yxbSh5AAIeP7ifAcnUX/LSx+4OfEezUN459i?= =?us-ascii?q?sYplN5qZoc64Zx7h7PlgxGXEQZ/co6odzbGH7ea9CCdav96oizMrSNR0TRgLiM?= =?us-ascii?q?EbzUQLIfWuLgnFFsPsdDEwB89YVVVorDmROElRH9viNRWJ+iXhpTEdFQ/iOgVr?= =?us-ascii?q?O+/7BpDdj9it1+C15pbffxhEiCCzbL52LRi6twXcu80ZjYd8K6s61wfErGZPd+?= =?us-ascii?q?lK321jOEidnwz75se+/Z5j9zpftvc8/MNeUqv0Yro1Q6VAADspL2466svrtQLe?= =?us-ascii?q?TQSU/XsTTn8WkhtTDAfb6hzxQ4r8vTH7tup53ymaINH2QLUpUjms86tnVBnlgz?= =?us-ascii?q?oJOD4j9GHcl9J+gqRVrhm8oxBz2pPYbJ2QOPd4Y6jTf84VRXBZU8hRSSJPH42y?= =?us-ascii?q?YYgNAOoPJeZVrZTxqlUQohulHgSgGP/jxyVUinPqwaE2z+IsGhzG0gw6GNIOtW?= =?us-ascii?q?zZos/rO6cOS+C+0a/Gwi/eb/NKwzfy85LHfQwhofqRWr9wac7RxlMyFwPZlFWf?= =?us-ascii?q?spbqMiiP1usTrmeb7/BvVf61h2E7rAFxpyGiy8ExgYfHgYIVz0rL9SR/wIstK9?= =?us-ascii?q?y4Uk97YcK6H5dKrCGaN417Sd4hTWFwoCs217ILtJGhcCUK1Zgr3QDTZvOZf4SS?= =?us-ascii?q?/x7vTPidLSt8iX5/Zb6yiQi+/VK9xuD/WMS4ykhGoylDn9LRrH4CzQbT5dKCSv?= =?us-ascii?q?Zl+0eh3iuA2B7L5+FfJEA0ibLbK5k8wr4sjpYTsVrMHivxmEjukK+ZbF8k+um1?= =?us-ascii?q?6+T8eLnmup+dOJN0igH5KKgunNCwAf8kPQQUWmib+OC82KXi/U3/XrpKkuU7nr?= =?us-ascii?q?TWvZ3VP8gWprO1DxVL3oss9RqzFSqq3MwdnXYdLVJFfByHj5LuO1HLOP34Fumw?= =?us-ascii?q?g1CtkDdt2vDHMaTtDY7KLnjelrfuYahy61VHxQovzdFQ+5JUCrYbLPL1QU/+rs?= =?us-ascii?q?bUDhA+Mwyq2+rnEsly1psCWWKTBa+UKKHSsViO5u01P+mMZJUauDDmJvgn4P7u?= =?us-ascii?q?i3o5lkUGfam1w5QXcmu4Eu5hI0WDbnrmms0BHnsSvgoiUOzqj0WPUTxRZ3moQ6?= =?us-ascii?q?085So7CIWgDYfCWICgm7KB3COmHpxZfW9GF1aMEWv1d4meXPcMci2SKNd7kjMY?= =?us-ascii?q?TbihV5Mh1Ra2uQ/i1bVoNfTb+isZtZL/09h4/OzTmg8s+jNqFcid1HuNT25slG?= =?us-ascii?q?MSWzA2xLx/oVB6ylqbzKd4hPpYFdpO6PxXVgc6NIXRwPZkBNDoXQLNZNCJSEyp?= =?us-ascii?q?Qt++GzE+Usoxw8MSY0Z6A9itkwzD0DCwA7IOi7OLA5k0/b7G0HjqO8Zx0XDG27?= =?us-ascii?q?c9j1M+WMtAKXWmhrJj9wjUH4PJkkOZl7q0eqQYwiHN8XmMzXaUvEBYSwNwVr3F?= =?us-ascii?q?Um4ZZkvTt9v550fCQKSpCbUoKAdBztSCKqRSYN3zkVpGXOvjOMjZY2+pm2axBB?= =?us-ascii?q?GIxrWXYYrvf2URxSTdCE4enwAV53mGLws+Bia/o23AFjBuE0zgY1/0++lktHy7?= =?us-ascii?q?VlM0zx2Nb0B5ybW14gQaheadS/MIxb8EoD0uqy91HFamx9LWD8CPqBZ/c6lGZt?= =?us-ascii?q?M9+lhH33rDtwNhJpygM7xihlkGfgV5vkPu0xB3BZtakcUxonMl0hd9KaWC0Fxb?= =?us-ascii?q?bzOYx5fwOr/JJWbu4BCjcanW2kvR0NyO4KcA9Ow4q0n/vAGuDkci/W9n3MNT03?= =?us-ascii?q?SA55XKFxEfUZfpUkY27hR6vL/bYjIn64PTz31sPrG+siXe1NIxGOsl1hGgcs9c?= =?us-ascii?q?MKyeFw/yFNAaCtOtKOMwmFipaQ8EMPpV9K4uMMOsb+GG17KzPOZ8gDKminxK75?= =?us-ascii?q?pg3UKW9ipzVPTI0o0fzP6E2wuLTTD8jE2ussrvg4BLeSkSHnajySjjHINeerd9?= =?us-ascii?q?fYIVBme1P822xtJ+ioX2W3FE9V6sGVUG2NOoeRWIdVD92xNf1VgPq3y9hSS41y?= =?us-ascii?q?B0ky0urqeHxyzOzf7idB0cOm5XX2RillHsIY+6jtAfRkeoaRIllB276kbm36Jb?= =?us-ascii?q?vrhwL3HPQUdUeCj7N29jXbG0trqefcFP8ogovD5JUOuie1CVUaP9ox4A3yPkBW?= =?us-ascii?q?teyygxdyu2tZXhgxx6lGWdIW5vrHXEZM5wxA3Q5NjHSPFN2ToGQTV3hiPMBlig?= =?us-ascii?q?JdWp+8ubl4vbuOCkS22hToFTcTXszY6Yqiu75HFlAQG4n/CpgNHoDQg60Sj919?= =?us-ascii?q?llTijIqBf8Yo/x2KSgNuJrZE5oBEXz68BiAIFxjpMwhI0M2XgdnpiV+XsHkXzv?= =?us-ascii?q?MdlCwqLxcn4NRT8Nw97I7wnow1ZjLmqIx4L/V3WS3tBha8O8YmwIxiI399pKB7?= =?us-ascii?q?uM7LxYgSt1pUK1rRjWYfh5mjcS1+Eu52Idg+AHowct1TidDawJHUVCOizsjRuI?= =?us-ascii?q?5cikrKpLfGavbaSw1E1mkNC5Fr6CvwVcVGzjdZs4BiBw6cF/ME7L0H318Yzkfc?= =?us-ascii?q?XcbdQUthKIiRvAifZaKI4pnPoQmSVnIX79vWEiy+Mjjhxhw5e6vJOcJmVu4q25?= =?us-ascii?q?BAVYNjvraMMP4D3tirxensmO1YC1ApphAikLXIfvTf+wCDIdr+nnNwKQHz0ksH?= =?us-ascii?q?ibH6bfEhGF6Ep9snLPCI6kN2uMJHUD1tViQwSdJFZDjw8KUjU6mYQ5Fg+0y8D7?= =?us-ascii?q?dkd2+CwR7EbiqhRQ0uJoKwX/UmDHqQe2bDc7VYOSLARQ7g5f50fZK8qe4fxvHy?= =?us-ascii?q?tA5J2usBSNKnCHZwRPFWwJQlaLB03nPrS1+dbA8vSYB+qnI/vAe7qOr/ZSV/CS?= =?us-ascii?q?xZKgyoFm5SqDNt2TPnl+CP02wklDXHB9G8vHgDgPTisXlyzDb8GFuBe85i13rs?= =?us-ascii?q?e68Pv1Qg7v45WAC6dKO9V15x+2mbuDN/KXhCthJzZXzJUMxWPPyLgax1MShT9h?= =?us-ascii?q?eCSqEbQaryHNVLjQmqhVDxEFdyxzKNFE76Um3glCIcTbkM/61qZkjv4pDFdITU?= =?us-ascii?q?bhldy0asERLGG9MVzGCFyNNLuYOT3B29v3br+kSb1MkOVUsAW9uSyBH07tJDiD?= =?us-ascii?q?kiPmVxSoMeBMlyyUJgBRuISnfhZqE2jjQ8rsagenP99vkT023bo0i2vENW4GLz?= =?us-ascii?q?dzblhNoaeW7SNEhfV/AHdM4WB5IumBgSqZ6PPYKpkOu/txHit0j/5a4Gg9y7ZN?= =?us-ascii?q?6iFEXuZ6mDPKrtN1rVGmk/OPyiF7UBpAqzZLgpiEvUN+NqXY7JZAXWzI/BUX7W?= =?us-ascii?q?WfEx4KvcdqCsXzu6BMzdjCjL/8KCxc/N3O8sscHdLbKNycPXo6KxXpGyPUDBEf?= =?us-ascii?q?QjKxMWHfmkpdn+uI9nGMspg6rZvsmZoJSrNBUlw6CO8aAFx/HNMeOJd3Qi8kkb?= =?us-ascii?q?mDgc4O5Hq+qB3RS9tBvp3cTP2dH+/vKDGDgblDfRsIzqvyLZ4POY3jx0xidl56?= =?us-ascii?q?kZzRFErRUtBNpSthYxQpr0pT63d+T3c820T/ZgOq+n8TGua+ngQqhQtmfeQt6D?= =?us-ascii?q?Ds7k8tKVrFviQwjlc+lM7igTCJbjHxKqKwUptXCyrwrEcxNZz6TxxybQ2okkxu?= =?us-ascii?q?LC3ESK5Jj7t8aWBrjxfRuYdIGf5ZV6FEehgQxPCJaPUuyltcsCKnylFE5ebeFZ?= =?us-ascii?q?Rikw4qfoK2oHJbxwJvdtg1KrLMJKBR1FhfmrqOvjO01uA22AIeIVgC/3mWeCMT?= =?us-ascii?q?u0wIMaImJzay8exq8gyCmDpDdHIKV/U0vvJg7lk9NPiYzyL8z75DLVi8N/aBIK?= =?us-ascii?q?OCpWfPj9SITU8w1k4TjEZF/KJ23tokc0qaT0Av1qWeFhQTOcrENw5Vc9JY9GLP?= =?us-ascii?q?ciaWreXN3ZV1Mp2gGe/yU++Otbsbglm/EQkzBYQM9MMBH5e30E7GMcjnMaQFyR?= =?us-ascii?q?Qx5AXrPlmFCupGeA6Tmjcdv86/1IN33ZVaJjwFBWV9Nj+36ajRpg4rh/qOR9g2?= =?us-ascii?q?YnEHXoceMXI2QsK6kTZDv3tcFDm3zv4ZyA+a4j/nuCvQCDj8b9x+ZPabfh5jFN?= =?us-ascii?q?a2+TAj/Keskl7X7o/SJ2fkOtR+otXP8/8Vp46bC/NISrlwq1rTlJVdR3ytVW7P?= =?us-ascii?q?DcO5KoPua4Yyd9z0C3e7Ulu5iz4vScf+IsqtJLCSgQ70XYZUrJWb3Dc7OM++DD?= =?us-ascii?q?EfGw1/p+cf5KJ8fgADbJ07YQb0uAgkMaywPhuY2M20Q2mxMTtWU+VfzeKiarxL?= =?us-ascii?q?ziosa+i6yGcgTpA61OS47E8NRZEQgR7F3/qjYZdRUTTrEHxHZwrPvTY5l3RmNu?= =?us-ascii?q?sqzec/2gnHsV8AMz2Qdexpb2JFv9cgBVOSP3p2C2w4R0OCgorZ+AKs2a4d/zdF?= =?us-ascii?q?ldZOzeJFqGT+voPYYD+0QqOrrZTVvDY+Ytc+pq1wMYrjIsyAtJzEhTHQV5jQvR?= =?us-ascii?q?eDUCKjGfpah8JcICRGT/lUgWslI9AJuZJd6UotUcczP6dAB7cqpr2xczVrEDAS?= =?us-ascii?q?wjEDV4ObxjMCmOe916HdlheKf5QoKAYEv4lagtsBTy52ZTsTpLWlV4XXi2CESm?= =?us-ascii?q?8LIAMI7QpU/QwOi5V+c/zi7ofTUJBMzDtWrO5uXSvQCplk7V37RX+KgVLgUvWu?= =?us-ascii?q?j/Sp3R5OzPLrytQURBx/BlJByOtNikQoL7V3K60RvoHUqD+IaV31s37tyOe8I1?= =?us-ascii?q?lR08LUfUXiDIXZrWr8TjEc+XoMSI9V0n7fD5MSnBFiZaY3vlVDOp6mdVj65zwl?= =?us-ascii?q?wYRpEL24VcGkx1YlsXYGST2lE8BEC+18tlLYRiFlaYixqJr5I5VSXnNQ+JqFpl?= =?us-ascii?q?ZXikliLy65yZtZK8FM+DEMXyNCoTSDs9SsVsJPw8h2D4UDIt1noXfyBLtEOISN?= =?us-ascii?q?o30xorHv0njZ+zQmv1egyjSzHKu4T+xC8m0bHQUpIH+epVczAOs29WfS6UvNsl?= =?us-ascii?q?Fy/+dUHLSPil9xoDllFJBUGjlJzWylL0h0THReqepaMrnVc8pGT/kxfhKvOh0+?= =?us-ascii?q?Ff8630OS5010m2n2YzBqvAtA5y/dRxU0VTUSgrr1hT0ercSnNCQGS55UaDUudD?= =?us-ascii?q?3JKwSFliBLpBxfcV1lW4gFAtZZ/LEWxYtU8dDYSUm2LSEKQQdvOR8m3vpHjU5M?= =?us-ascii?q?rkGYdj7HDQaycvbPqBJ3d9+LrMG1NPT54BtHioT/veA68KUMWWarlhCzTtDFsY?= =?us-ascii?q?D8rMGKuVWTe6viNe2zf2PBRiDWjR+snbckE4XK/y/LPQVAJZl11WYobJr8BWPF?= =?us-ascii?q?JhlJO6UbJ09HWq9gctVGvvpWZ8l6d6YV4aVtHA6IRgvzGIyzq/lLNkzTSirDIC?= =?us-ascii?q?WB6OO/vZne7bjaSej+eMOA2WrIQ6VqMZhk8zX7Hanl0ZNG8Ersxvht7l96SUTB?= =?us-ascii?q?My2ZtNThPR8L69O/eUv+pZApBjTWAIpqkHXx2E5AcdYXQzew/5Qc0p9Z72zwSe?= =?us-ascii?q?1g2EjprOJS76Vk6ZUw471x1ce0P7ndJupHvkJ8HxiUAhlq9o83D2hhRmBRZesR?= =?us-ascii?q?J+nNfagDisDuse/3HbQN6BKJ4+xZdcfHJ0bZl8m6ED6cTRhEkxkdqT4GNASTze?= =?us-ascii?q?WIm6lqRsa5vuj2xlgi40CgIRIcyrBi+5uE8LKSpODLdxvR0aQEWq/yS8PxtLss?= =?us-ascii?q?oUSS5eYglLEUZGx4eAinEPUZVs4Bx2fv0aEqwjgqE8PYBb7g/+RDV30hlDL6h5?= =?us-ascii?q?99B0kWGu8THbeT/4RRhGE4m+LDNt0Rb69NhH2CFQK+Hb8E0n6r7DGbIG97jRHS?= =?us-ascii?q?yxvwW3+87EfqrS9kRivB19jjkldUVrmzAUddQS+pNFRlvzyRJwXotcD4uaIv4E?= =?us-ascii?q?ExKGzku8qHlHG9N7NPA83/ONucLDEypFITl5AxR9qv2YUBFdq8JtcR/mt+YeHF?= =?us-ascii?q?62O3iS9BvrtIh5bD4sGP5PrbB36gj7eVq7+V3jBX1mA4vU0j6tCnLvzO4tqKQ/?= =?us-ascii?q?K012YeUShyoA7BXx+vpbzdsV8UJUKK0EDRmIwJJdFVx3842V/65OI7WtI86B1e?= =?us-ascii?q?FprcZ/MFvT3zPCD0wVOfbt8sWCmRzSZYHlXvEVZiAKg8wmXwvMDXmnjM510kXI?= =?us-ascii?q?5wd1bohRZvFYU3NVot6EQLwioECQUNcgqUDK+yCkTqM4QETlMOaQ+d07ikYKg3?= =?us-ascii?q?0lN8wqi16O/Vc+N8G7IHNuxBgQ6WgFhbBpUWvLUcQLJ9fl9Q76vXqRbiCof5Rf?= =?us-ascii?q?jmlHwwNfKvTsBc788Zq2Mo4hyjSBq49ZdD87EbhYiJdq9Fe5fDptxz4lx85TER?= =?us-ascii?q?aixCngRwgwm+UeAGq+Dp+sLbv4aw6uaySKYtQP0a+AM1B2RlgZr/mlIjodDL1+?= =?us-ascii?q?dEUILVlID//RtRLH6NpYnVzQNzKfcUK4KsZrZv7W8LJy8EJ3IBJdCWceUz4zdx?= =?us-ascii?q?MDXP4FxPGtsMaskEPMXRmQBVhErpWKtQ9sbCAV+XFYNzd8Eu72rqxzE46oM8Xf?= =?us-ascii?q?z86DCqJZDe4VZNP+lAjCl2l9LNuvIVwfzMBygT+3WZbAJ1wiyawZmXF/nw5fmM?= =?us-ascii?q?yM3TV14eAi42SZlSJD6Y9gyhWOW4j4jmUgKb6s/ynJIxblmQSWarnKQYqKpMF/?= =?us-ascii?q?BPijnj1DhECo/1n+6Vs8ar6GZPuV1ICpxz4gPZGKVfJZh7PRX4ltW1SUh8HCT/?= =?us-ascii?q?ZdrUegAouOWI2ucG+/9+OFfmZY8HPhIEzKr36XVLQQtoVL72uVGZUeUKZNR4TP?= =?us-ascii?q?PEr3ZV6Z9vKqIUOFiSuobqrzdSp1wsBg8mdqMwpCRAdkbShA1VR7r0uLkYhwsa?= =?us-ascii?q?UN52pUhMGWaqN2Il/TbHVKNVjK6KCPwO6TiTS6MDUkpyPiN5WRO1141ke6G1kv?= =?us-ascii?q?BfrmNGgiR9reAl0zN6Xxu8ojTgqb8C1zwm+bG4sigBuHNeQ+WRlifHE1NDw+oQ?= =?us-ascii?q?gacbEXbi5kS2YGMfY4vq/LlnOcPg+JEj43Q4YRUjeTcKUvigCyH0kqOHH42OsN?= =?us-ascii?q?NahB6Wu8XObKS+LTYTNrQj0x3jQ2Vy0gnEkBZu7mQLXi2q7MU4K4WlJcYl2i2o?= =?us-ascii?q?FHDadFYS+KxJttD8tVoWTOQraFNhx35j3tKARi0XS8zFA3w1gRQ8aWVYbJJD7g?= =?us-ascii?q?cXF6s2jTaGsKlG+hoZYTnOHYSj5IbQgd3E2X8jQtd23mjWvLGKhos20H15nNN5?= =?us-ascii?q?9iGOuHAVd+3WTcBsBnzz25xEyez5YfWts/wIRJFgyLu/TP8IKtOj9neu2JV2Rk?= =?us-ascii?q?+lwawTH1i5MO4D3rfbVCOlSWyEWeuVaGWMmjc5MlLo5Ra2NFE3b91Kr0AlOOvY?= =?us-ascii?q?mpFcjxHhUa9zRiiIql/b0W0jPv4ddw8tpIenYRIFTOgNZ+eGIegh2vs+B0cNb3?= =?us-ascii?q?DTByd2DfG5sUK1lohhJ3pg+Vn6Yfjq8g3+LNuSGxwEHJXGrp5w5fO6RXyOOXt6?= =?us-ascii?q?wB10IkZ06//VF04tue9Eb5aRgd/Qisx+0e4EdPdtMio9t8URmo156omU18GKfg?= =?us-ascii?q?/XzproI9HavOSYCeXFz0s2YmFaTqYZYQTt6oohINE5XaHTEKBCvRQYAqg6XIAh?= =?us-ascii?q?N3nv+65pNg9zdRTRZLusiMnwuu2LfodUp2PR7l8oIifTpRkDyv2sTQNldJ2rhn?= =?us-ascii?q?TyIJU1Rj1ftd1tDgVpEJFIG8MaoAqtG4SUl72ji9+t50N6vPcHsKToCvDQ1dS2?= =?us-ascii?q?w5t+UoNf5UyKIDbRHrdkjl5ijuSojffKyoPxBt/6edMYSOh7RXbIarjCHoqhMT?= =?us-ascii?q?+OIsb8dFRd876A0bJ2TgmRZDrnUKWYriGkMutr4VkjwIxiYOXT1CAt763c2Nbq?= =?us-ascii?q?Y2FbpyGjrWOGNZdG6FzKBPfeXw5PSfee8WZqB6sXbYzu+OcJK9wiz8CW4xNv4z?= =?us-ascii?q?RazMuFP6+ho1fX2k1lcZLbLU3p2zs2WIUNLxq/LUssjnHDqnvDGXRTNNOpKcpz?= =?us-ascii?q?j9aPCBzi+U1xlnowZm5OAGboQs2ROWcD0cKkeAKK7B5LD8oEn+OvfE43rLG9Se?= =?us-ascii?q?lpOpVDnuWnr6sHkddvKy7RQMhaPifQLKJ5PzZLCeXPvlcoaAYes7cpQoc1eYSO?= =?us-ascii?q?IEQfPUeC0yzyzgzC3lbvetyx0qaJPCYW8nJaz7LK0ThMuxO1ufCHjc3/SLrZdo?= =?us-ascii?q?35XObOMCo5UTGXXS89Hl2u9VeguvoEp+aYIXwFrlAPfC2dFBQfprtxotjUD2/T?= =?us-ascii?q?n/BjfZIRif+GWyHwUjB4lLEoCidFr0+MX+EDFQ7Qb3P7h2pcogOiLOdW/X35d7?= =?us-ascii?q?2Y2rZVW+sOD4tDaPKWWMHYefFAKDcsjTgZJuK8cMfHr7Y4z1LEV20ZHLfU9FeG?= =?us-ascii?q?Vk6ZXuScxy73XYUSp4U0uC8o+tXKni9tEqTIJK2Spzi0/Y69kimYuPfSVm43Y0?= =?us-ascii?q?w6mOgCGnWOwAFcKGEYDNEYoFrtQqCFZ0lQ1X8kivlj2wESdwRpU31v03pWnPCn?= =?us-ascii?q?Fs1fV1EUkDDmfPpTd11zDTUt7WeW8wbyZpoGosmVSGhApZUWTo9IFPQ08sHzMb?= =?us-ascii?q?YM2vwg1zIu9DQ+ujiBFVlUphiI/6rZAOR3wbgUtjpwxO1/QkzaG2CXSWPA0Ifz?= =?us-ascii?q?TpsXyA=3D=3D?= X-IPAS-Result: =?us-ascii?q?A2HnCADQsAlZ/wHyM5BcGwEBAQMBAQEJAQEBFwEBBAEBCgE?= =?us-ascii?q?BgwEmA2KBDI5zkF+CCwGVaCoDgXeIbVcBAQEBAQEBAQIBAmgogjMigSpbPAYBA?= =?us-ascii?q?nkDCQEBFwgpCAMBORoZBYhRgT4NslYmAop8hl+KKIR6HwEEnVuHG4tsDYJXiBQ?= =?us-ascii?q?nhkyUNFiBCk4hFYVrgUx0iF4BAQE?= Received: from unknown (HELO tarius.tycho.ncsc.mil) ([144.51.242.1]) by emsm-gh1-uea11.nsa.gov with ESMTP; 03 May 2017 10:34:03 +0000 Received: from prometheus.infosec.tycho.ncsc.mil (prometheus [192.168.25.40]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id v43AXwWH030378; Wed, 3 May 2017 06:34:01 -0400 Received: from tarius.tycho.ncsc.mil (tarius.infosec.tycho.ncsc.mil [144.51.242.1]) by prometheus.infosec.tycho.ncsc.mil (8.15.2/8.15.2) with ESMTP id v43AUqJY015758 for ; Wed, 3 May 2017 06:30:52 -0400 Received: from goalie.tycho.ncsc.mil (goalie [144.51.242.250]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id v43AUpHd029539 for ; Wed, 3 May 2017 06:30:52 -0400 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A1CBAQC6sAlZhxy3hNFcHAEBBAEBCgEBgywmZYEMjnOQX5d9JIYAAoRiVwECAQEBAQECEwEBAQoLCQgohUUDA3kQIDE9GhmIVoE+DbJWinMBAQgohl+KKIR6HwWdW4cbi2wNgleIFIZzlDSBYU4hFYVGJYFMPjaIXgEBAQ X-IPAS-Result: A1CBAQC6sAlZhxy3hNFcHAEBBAEBCgEBgywmZYEMjnOQX5d9JIYAAoRiVwECAQEBAQECEwEBAQoLCQgohUUDA3kQIDE9GhmIVoE+DbJWinMBAQgohl+KKIR6HwWdW4cbi2wNgleIFIZzlDSBYU4hFYVGJYFMPjaIXgEBAQ X-IronPort-AV: E=Sophos;i="5.38,283,1491278400"; d="scan'208";a="6038174" Received: from emsm-gh1-uea11.corp.nsa.gov (HELO emsm-gh1-uea11.nsa.gov) ([10.208.41.37]) by goalie.tycho.ncsc.mil with ESMTP; 03 May 2017 06:30:51 -0400 IronPort-PHdr: =?us-ascii?q?9a23=3Aahx9ORIli8c7Bcg059mcpTZWNBhigK39O0sv0rFi?= =?us-ascii?q?tYgRLPzxwZ3uMQTl6Ol3ixeRBMOAuqwC1rud6f6ocFdDyK7JiGoFfp1IWk1Nou?= =?us-ascii?q?QttCtkPvS4D1bmJuXhdS0wEZcKflZk+3amLRodQ56mNBXdrXKo8DEdBAj0OxZr?= =?us-ascii?q?KeTpAI7SiNm82/yv95HJbQhFgDuwbalyIRiyogndqMgbipZ+J6gszRfEvmFGcP?= =?us-ascii?q?lMy2NyIlKTkRf85sOu85Nm7i9dpfEv+dNeXKvjZ6g3QqBWAzogM2Au+c3krgLD?= =?us-ascii?q?QheV5nsdSWoZjBxFCBXY4R7gX5fxtiz6tvdh2CSfIMb7Q6w4VSik4qx2UxLjlj?= =?us-ascii?q?sJOCAl/2HWksxwjbxUoBS9pxxk3oXYZJiZOOdicq/BeN8XQ3dKUMRMWCxbGo6y?= =?us-ascii?q?b5UBAfcPM+hbrYb9qUADoQeiCQS2GO/j1iNEimPw0KYn0+ohCwbG3Ak4EtwUrn?= =?us-ascii?q?vUsM/1P7oUX++v0anI0S/DYOhM1jjh6IjDbxcsoemIXb1qbMrR1VMvGBjfgViL?= =?us-ascii?q?s4zqIS6a1uQXvGiH9eZvSeWvi2s+pgx3vzOhyMAsiozTiYIUzFDJ7St4wJw0Jd?= =?us-ascii?q?2kVkF3e8WkEJtWuiqHNIV2WtsvT390tCs+0LEKpJC2cDYQxJg6xBPSZeaLf5aL?= =?us-ascii?q?7x/lSe2fOy13hGh/d7K6nxuy8Vavyun7VsSs1VZLoTdJnsPWtn8TyhPT6tKISu?= =?us-ascii?q?dn8ki93jaP0hjf6uBCIU8qiarWM4AtzqI0m5YJrEjOEDH6lF/rgKKVeEgo4Pak?= =?us-ascii?q?5uf/brXjvJCcNot0ig/kMqQpn8yyGfw4MgwUUGiG5eS8zqbs8lfiTbVQkPI5j6?= =?us-ascii?q?nZv4rGJcgBuqG5BApV3p456xmjFzemzMgYnX4fIVJeZh2Hi4npO1fTIPH3Fvq/?= =?us-ascii?q?n1Stnytrx/DBJLHhBI7NIWLZnLfuerZ99R0U9A1m1t1b5pRJGpkdMfnzXQn3r9?= =?us-ascii?q?WeARgnYCKuxOOyMNhhzMs6UH+TGKWQO6Oa5UeM7/8zOeOFTJUYtDb0N74u4Pu4?= =?us-ascii?q?3ixxokMUYaT8hchfU3u/BPkzZhzBOXc=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0ECAwDQsAlZhxy3hNFcHAEBBAEBCgEBF?= =?us-ascii?q?wEBBAEBCgEBgwEmZYEMjnOQX4IMlXEkgXeECQKEYlcBAQEBAQEBAQIBAhABAQE?= =?us-ascii?q?KCwkIKC+CMyIBgSlbPAMDeRAgMT0aGYhWgT4NslaKcgEBCCiGX4oohHofBZ1bh?= =?us-ascii?q?xuLbA2CV4gUhnOUNIFiTiEVhUYlgUw+NoheAQEB?= X-IPAS-Result: =?us-ascii?q?A0ECAwDQsAlZhxy3hNFcHAEBBAEBCgEBFwEBBAEBCgEBgwE?= =?us-ascii?q?mZYEMjnOQX4IMlXEkgXeECQKEYlcBAQEBAQEBAQIBAhABAQEKCwkIKC+CMyIBg?= =?us-ascii?q?SlbPAMDeRAgMT0aGYhWgT4NslaKcgEBCCiGX4oohHofBZ1bhxuLbA2CV4gUhnO?= =?us-ascii?q?UNIFiTiEVhUYlgUw+NoheAQEB?= X-IronPort-AV: E=Sophos;i="5.38,283,1491264000"; d="scan'208";a="5425425" X-IronPort-Outbreak-Status: No, level 0, Unknown - Unknown Received: from mx1.redhat.com ([209.132.183.28]) by emsm-gh1-uea11.nsa.gov with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 03 May 2017 10:30:50 +0000 Received: from smtp.corp.redhat.com (int-mx01.intmail.prod.int.phx2.redhat.com [10.5.11.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.redhat.com (Postfix) with ESMTPS id 7949461BA5 for ; Wed, 3 May 2017 10:30:49 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.2 mx1.redhat.com 7949461BA5 Authentication-Results: ext-mx10.extmail.prod.ext.phx2.redhat.com; dmarc=none (p=none dis=none) header.from=redhat.com Authentication-Results: ext-mx10.extmail.prod.ext.phx2.redhat.com; spf=pass smtp.mailfrom=plautrba@redhat.com DKIM-Filter: OpenDKIM Filter v2.11.0 mx1.redhat.com 7949461BA5 Received: from hulk.com (unknown [10.40.2.172]) by smtp.corp.redhat.com (Postfix) with ESMTP id 94CDA189CB; Wed, 3 May 2017 10:30:48 +0000 (UTC) From: Petr Lautrbach To: selinux@tycho.nsa.gov Subject: [PATCH 01/19] policycoreutils/sepolicy: Add documentation for MCS separated domains Date: Wed, 3 May 2017 12:30:18 +0200 Message-Id: <20170503103036.17514-2-plautrba@redhat.com> In-Reply-To: <20170503103036.17514-1-plautrba@redhat.com> References: <20170503103036.17514-1-plautrba@redhat.com> X-Scanned-By: MIMEDefang 2.79 on 10.5.11.11 X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.5.16 (mx1.redhat.com [10.5.110.39]); Wed, 03 May 2017 10:30:49 +0000 (UTC) X-BeenThere: selinux@tycho.nsa.gov X-Mailman-Version: 2.1.20 Precedence: list List-Id: "Security-Enhanced Linux \(SELinux\) mailing list" List-Post: List-Help: Errors-To: selinux-bounces@tycho.nsa.gov Sender: "Selinux" X-Virus-Scanned: ClamAV using ClamSMTP From: Dan Walsh Signed-off-by: Petr Lautrbach --- python/sepolicy/sepolicy/manpage.py | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/python/sepolicy/sepolicy/manpage.py b/python/sepolicy/sepolicy/manpage.py index 1af4295c..3ebdfeb7 100755 --- a/python/sepolicy/sepolicy/manpage.py +++ b/python/sepolicy/sepolicy/manpage.py @@ -504,6 +504,7 @@ class ManPage: self._booleans() self._port_types() + self._mcs_types() self._writes() self._footer() @@ -527,6 +528,7 @@ class ManPage: self._header() self._entrypoints() self._process_types() + self._mcs_types() self._booleans() self._nsswitch_domain() self._port_types() @@ -923,6 +925,17 @@ All executeables with the default executable label, usually stored in /usr/bin a self.fd.write(""" %s""" % ", ".join(paths)) + def _mcs_types(self): + attributes = sepolicy.info(sepolicy.TYPE, (self.type))[0]["attributes"] + if "mcs_constrained_type" not in attributes: + return + self.fd.write (""" +.SH "MCS Constrained" +The SELinux process type %(type)s_t is an MCS (Multi Category Security) constrained type. Sometimes this separation is referred to as sVirt. These types are usually used for securing multi-tenant environments, such as virtualization, containers or separation of users. The tools used to launch MCS types, pick out a different MCS label for each process group. + +For example one process might be launched with %(type)s_t:s0:c1,c2, and another process launched with %(type)s_t:s0:c3,c4. The SELinux kernel only allows these processes can only write to content with a matching MCS label, or a MCS Label of s0. A process running with the MCS level of s0:c1,c2 is not allowed to write to content with the MCS label of s0:c3,c4 +""" % {'type': self.domainname}) + def _writes(self): permlist = sepolicy.search([sepolicy.ALLOW], {'source': self.type, 'permlist': ['open', 'write'], 'class': 'file'}) if permlist is None or len(permlist) == 0: