From patchwork Tue Mar 28 14:08:45 2017 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Tetsuo Handa X-Patchwork-Id: 9649805 Return-Path: Received: from mail.wl.linuxfoundation.org (pdx-wl-mail.web.codeaurora.org [172.30.200.125]) by pdx-korg-patchwork.web.codeaurora.org (Postfix) with ESMTP id D074D602C8 for ; Tue, 28 Mar 2017 14:26:53 +0000 (UTC) Received: from mail.wl.linuxfoundation.org (localhost [127.0.0.1]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id BB27C283A6 for ; Tue, 28 Mar 2017 14:26:53 +0000 (UTC) Received: by mail.wl.linuxfoundation.org (Postfix, from userid 486) id AC419283FF; Tue, 28 Mar 2017 14:26:53 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on pdx-wl-mail.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=2.0 tests=BAYES_00, RCVD_IN_DNSWL_NONE autolearn=unavailable version=3.3.1 Received: from emsm-gh1-uea10.nsa.gov (smtp.nsa.gov [8.44.101.8]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.wl.linuxfoundation.org (Postfix) with ESMTPS id 71D6B283A6 for ; Tue, 28 Mar 2017 14:26:52 +0000 (UTC) X-IronPort-AV: E=Sophos;i="5.36,236,1486425600"; d="scan'208";a="5323955" IronPort-PHdr: =?us-ascii?q?9a23=3AnC0MgRAWMoOPjKZwtPP9UyQJP3N1i/DPJgcQr6Af?= =?us-ascii?q?oPdwSPr4ps6wAkXT6L1XgUPTWs2DsrQf2reQ4/2rADxIyK3CmUhKSIZLWR4BhJ?= =?us-ascii?q?detC0bK+nBN3fGKuX3ZTcxBsVIWQwt1Xi6NU9IBJS2PAWK8TW94jEIBxrwKxd+?= =?us-ascii?q?KPjrFY7OlcS30P2594HObwlSijewZbN/IA+1oAjRucUanIhvIbstxxXUpXdFZ/?= =?us-ascii?q?5Yzn5yK1KJmBb86Maw/Jp9/ClVpvks6c1OX7jkcqohVbBXAygoPG4z5M3wqBnM?= =?us-ascii?q?VhCP6WcGUmUXiRVHHQ7I5wznU5jrsyv6su192DSGPcDzULs5Vyiu47ttRRT1hi?= =?us-ascii?q?gHLTo5+3zJhMJ2gqxQvRatqwViz4LIZY2YMud1cKHActMAXWdPQNtfWSxPAoy+?= =?us-ascii?q?bIUBCO4BM+hXoInlpVYCsBWzChWjCuzx0T9FnWP20K8g3ug9CwzKwBIsEtQTu3?= =?us-ascii?q?rUttX1M6ISXPirwqbW0TXDdO5W2TDg44bKaB8hp+yDUqhtesfW0UkgCQXFjlqN?= =?us-ascii?q?qYzkOTOZz+cNvHaB7+pmS+2vj3UqqwBorjirwccslJfGipgOyl/e9iV53Zw1Ks?= =?us-ascii?q?eiRE59f9GoCplQtzmDOoZwX8gsQHlotT4nxrAJtpO3ZigHxIk9yxLBZPGLbZKE?= =?us-ascii?q?7g/7WOqMPzt1hWhpdKyhixuw60Ss1+LxW8uu3FpXsyZJj9/BvW0X2RPJ8MiIUP?= =?us-ascii?q?5981+k2TaIyg/c9PlJIVsxlarHM54hxaMwloYLvUTDACD2nEL2gbeKdko+4Oio?= =?us-ascii?q?6vnnYq78qp+AN457lgH+MqM0lsy5Hes4KRQBU3Ke+eS90L3v5Uz5QLNUgf0qiq?= =?us-ascii?q?TVrZ/XKMsBqqO5HgNZyJgv5hmhAzu8zdgUhXwHI0hEeBKDgYjpIVbOIPXgAPek?= =?us-ascii?q?nVuslDZrx/bbPrzuG5nCNX/DkKrnfblh9UFc0xE+zcxf5p1ICrEBJ+j/WknqtN?= =?us-ascii?q?PCFBM5PAu0w/j/BNVnyoweQX6PArOeMK7Ks1+I4eQvLPOQZI8Vojn9LeMo5/zp?= =?us-ascii?q?jX8/nF8SZ7Kp3YcJZ3CiBfRqOUKZYWDjgt0ZC2cFohI+TPD2iF2FSTNTZXSyUL?= =?us-ascii?q?gg6TE4E4KmCoHDRoGzgLGa0ie7GoBWZ29dBVCRF3foa5iEV+0LaCKILc9riiYE?= =?us-ascii?q?WqS5S489yRGusxf3y6J5IeXP5CIYs5Pj1MRy5+DIlBE96yJ7ANqH32GKVWF0kX?= =?us-ascii?q?sCRyUq06BnvUx91lCD3LBljPxfE9xT4e5GXRk+NZ7d1OF1Ec79WhjGftuTT1am?= =?us-ascii?q?WNqmCykrTt0t298Of1p9G9K6gx/ewyqlGaUVmqeXC5wz96LTw2L+J91hy3rc0q?= =?us-ascii?q?kukUUmSNNVNWK6nq5/6xTTB4nRnkWYkaaqaboT3CrT+2eG02WOoFtYUQ5rXKXC?= =?us-ascii?q?RXAQeE3WrdHj6UPDS7+hErMnMwRbxc6FMKtKZcXjjU9aS/f7JNTef2Wxln+wBB?= =?us-ascii?q?eJwbOMapHne2AZ3CnECUgElRof/XCcOggkBSehonzeAyJ0GVLpfUzs7fF0qGmn?= =?us-ascii?q?QU8s0wGKc0ph2qKu9REOgvCcT/IT3qkYuCc6sTl0B0iy0M7MB9qbuQVheKRcYd?= =?us-ascii?q?Ug4FZIzm/Wqwx8Poa9L6B5nFIffR54v1/11xVwDIVMi88qrGklzABqM6KXzEtB?= =?us-ascii?q?dy+E3ZD3IrDYNHHy8wq1a67XwVHTy86W9b0V6PQ5sFXjpAWpGVA+/Hp5ydVV1G?= =?us-ascii?q?Gc5prSBgoITZ3xSlo39wR9p7zCbCg95ofU1XhyPqmuqTLC1cwmC/Yiyha6Zdhf?= =?us-ascii?q?KLmEFAjwE8IEG8euNPYmm1+zbhILJOpS7rI7P9u6d/ua366mJOhgnCi8gmRB/I?= =?us-ascii?q?9901mM+jF5Su7Q3pYJ2uqY3wWcVzvmi1ehqM/3k5heZT4OBmq/1TTkBIlJa61x?= =?us-ascii?q?Z4kLCmCuI9Csy9V9nZHtWHlY9EO5C1MBws+pdgKYb0bh0g1IyUQXvXunlDOiwD?= =?us-ascii?q?NpiTEpr7SQ3DbVzuv4aBUHP3RHRG54jVfjOYK0lcwVXFC0bwg1kxuo/Vr1yLJf?= =?us-ascii?q?pKthNGnTXUdJfy/tImF5TqSwt6SNY8hT6JMpqypbSuK8bk6GSrTluRsVzzvjH3?= =?us-ascii?q?dCxDA8bzyquov2nxh+iGKaN3tzqGfZed13xRfa/tPQX/lR3iAJRCNgkznYGkC8?= =?us-ascii?q?P8W1/dWTj5rDqe6+V3imVp1IbSnm1piAtC285WxkBB2whfazlsfhEQckzS/xz8?= =?us-ascii?q?NqWjnQrBbgfonr0Ly3MOx9cUlsGF/z9dB6Gppln4sump4Qw2MVhoiQ/XYdlmfz?= =?us-ascii?q?K9pb07rkbHURXT4L38LV4A/91U1/M32G2oP5WW+ZwsZ6e9a6ZWYW1T4n4MBRFK?= =?us-ascii?q?eY9rpEkjVpolCgtwLefeB9nisByfsp8HMaheAJuA4pziqDGbAfBlNXMjL2lxSP?= =?us-ascii?q?9dy+q79XZGm3e7iqyEV+hcyhDK2FogxERnb5e4stHTN37sVlKl7DzH3z6obieN?= =?us-ascii?q?nfdt8TshyUkxHagOhPL5I9jP0KhTBoOWjlp30q1/Y7jQBy3ZG9pIWHL2Rt/Lml?= =?us-ascii?q?AhJBLT36eccT+jDrjaZDkcebxJuvHo1gGjUNXZvnUemoHCgUtfv5KwaECCc8pW?= =?us-ascii?q?uDGbrDAQ+f719rr2jIE5CvM3GYOmMZwsllRBiTP0Ffmx0UUykhnpIjEQCq3sPh?= =?us-ascii?q?el9j5j8N/l74tgdMyuVwOhnnSGjfuQOoZi0uR5SFNxVW6QVC51vSMcyY9e9zGj?= =?us-ascii?q?1U/pumrAORMGCbYRpHDX0RUEyeG1/jJqWu5cXH8+WABeqxMf3OYa6VpOxdSfiI?= =?us-ascii?q?w4mv0o148DaQLMmPOWNiD/Ij0EpZQX95A9jZmykISyEPjyLCddObpBOi9S1vtM?= =?us-ascii?q?+/9ujrVxz15YaUFrtSKstg+wqtgauZLO6Qgzt5KSxE2ZwSy3/Iz6If3FEMhC10?= =?us-ascii?q?cTmiD6gAvzbXTK3Mgq9XEwIbayRrOctW6aIzwxJAOdDditzo1r50lPg1BElZVV?= =?us-ascii?q?b5gMGmedQKI32hNFPAHEuLLK6JJSDPw8zsfay8SKFQjeVNux2+ozmbFVXvPjOZ?= =?us-ascii?q?lznmTxqvK/1DjDmHPBxCv4GwahVtCGjnTN34cRC7Ndh3jTM4wbIqmnPKKW4cMT?= =?us-ascii?q?95c0xTtLGQ6z1XgulnEWxb8nVlNfWEmzqe7+TAJJYZq/1rAjhzl+Jf+3k6xaVa?= =?us-ascii?q?4zxDRPxvgiTStsRuo1akkuaR1jVnTABCqjFRhIKEpU9iI7nW9oFcWXbY+xIA9X?= =?us-ascii?q?ifCxIQqNZ+F9LvvbpfxsLIlKLpJzdI68jU8tcEB8jINMKHN2IsMQD0FzHJFwYF?= =?us-ascii?q?QjurNG7Fi0xbjv6S6mWfroImpZj0hJoOVrhbWUQvFv8ABEVpBtkCL41zXjMjkb?= =?us-ascii?q?+Wl9QH6ma7rBXLQ8VapJ/HXOqIAfrzMDaZkaVEZxwQzLP2N4QcKJD021d4ZVl8?= =?us-ascii?q?gITKHFHQUMtXrSJ9aw84ukJN8GJxTmcrwULqdhut4GMPFf6zhhM2jBF+bv419D?= =?us-ascii?q?f0+Fo3KFvKpDErkEktl9XlgDaRfyT3LKisXIFZES70u1I2MpPhTAZ/dReyklB8?= =?us-ascii?q?NDfYW7JRiKNten1wiADCo5RPFuRcQrdaYBIL3vGYffYo0UlGqiq930NH4fbFCZ?= =?us-ascii?q?14mwswaJKss3VA2wFjbd4yP6DQIrRGzkRIjKKUoiCozvwxwBMZJ0sV62ySeSEI?= =?us-ascii?q?uEsONrQ9OiWn4Pdj6Q2YlDtFYmQMUOAqov1y/EMnJ+uA1z7g06JEKk2pLeOfIL?= =?us-ascii?q?mWu3bemsOTRVMwzl0Hl09A/bds0Mcjd1GbV0cgzbeLEBQJL8XCIxlPb8VO7HjT?= =?us-ascii?q?YTqOseLVzJJpOIW9E/rkTfWJtKcVnE2kGh0mH54L7ssfHZmhy13XLcDiLLEZ0x?= =?us-ascii?q?ot/xjrKE+DDPtXZBKBiC0HrN2nzJ9rwYldISkQAWNjPiqt4rbavQwqgP2YXNcq?= =?us-ascii?q?eHgaWJAENnE3WMGgnS5WoWhABiGt0u0F0AiC8yP8piPIATnmcdVjf+mbagl2CN?= =?us-ascii?q?6q+TUy6LO5iV/N8prDIGH6O8xiusXR5uIavZqHDe1bTaVluUfGh4ZYX2CqU3LI?= =?us-ascii?q?EdOtOpf/cZcsbd3pBXahSVGwkSg1T932PNejNaiHnx3nRZtOsImawDAiNdWxFj?= =?us-ascii?q?cAFBdsv+sD/r5zZRUfY5onZh7lrwA+N6ulIAiG1NWvQmGtJCBZT/lZ0OW2fbtX?= =?us-ascii?q?zzAjbuWi0nsvUok6z/Wr8U4KXJwKlQ/RxfKiZ4lYTCjyFWdQdBnIpSo8i2duLP?= =?us-ascii?q?0ywvslzBPOr1YcLyiBdPZ1Z2xco9E8GVSSLG1rBWUkQl+ciozD4hKx070J4StS?= =?us-ascii?q?gcxU0exEsXj5uJ/TejSsV7K3qZ/NqSovccAmo7FtMYzkOsaGt4nenzzFQ5nWrg?= =?us-ascii?q?2FUDW3F/VdmthIPC1UWv9Iln85OcYeo4pO9VIxVtsiJ7xIEKQsurGqaT9jDS4O?= =?us-ascii?q?zS8YV5iN0yEDgua8wbTVjQ2ccJI8PxwYqJ9CmMcSUzZqYiMCo6+uT4rWl3WeRW?= =?us-ascii?q?gNPAce9gVM5AUOl492YuDl4JTHTJ5Kyz5Kvf10SDHHFp92+FvnUmuWm0T3SO29?= =?us-ascii?q?k+y12gJf1Ojj0t0aWBFjF0dS3+NWl0suKLFwLakfpJXHvSSJdUzgumLh0eWmJE?= =?us-ascii?q?RLxc3SaVL4EJLPtXDgXS0E5X0UWYhPxWnEGpsMlQp0c7wkq0hSII+4YEb+/CYr?= =?us-ascii?q?x55pHrWiUsCr3Vklp24cRyi2C9pBF/1msFXPVT1/ZZCrqYnqO5VVQm9U452Ts0?= =?us-ascii?q?5Xnlh3PSOlzpRRMN1C4jkJXDdTuzqdp8eyRNdF2cBoE58GOs1/tGvlGKNYJJiR?= =?us-ascii?q?pGU7taDtynDD5z8xq0u1xDK3G6+8TuJW4XceGhk3KGuCqkkjFews8n3d8lrVqF?= =?us-ascii?q?B74/9bBqSTjUV2uDt9BIpBBixO1X++NFlzUGNGvP9EKKvLd8xcQv8yZRCrOxw/?= =?us-ascii?q?Gv4m31CJ/U9uknfjZix+rA1a9D7BXwMsTykanq/tmSECqsGgITIbRYhEYikhby?= =?us-ascii?q?fELgKbmDpYvBVEZkFrRZ8WHMhK96sc3YtO8crIUVysJj0dXBx+KgI41uJSlVZE?= =?us-ascii?q?sEWcYy/dFwSpdfHLsh15ZsqRqcmpLPPi/AhZloznquc4974YR32nnw2tTsrSr4?= =?us-ascii?q?jmtt2FrkGObrv3M/WgYX/dSzjBlQq/ha05D5nM5STTMxFWK5h7yXolfZjuEnTH?= =?us-ascii?q?PRJYKKIHP0BbT7x1ac1aouBGYM9pYLoJ+ahoBh+cWhPjBImvo+JcIlbVWzveMz?= =?us-ascii?q?2L8vajroLL8bzdVe/ga9SMx3ndWaJ4JJN65iTgFrj3z4Be4lL21elp9kxkU1jK?= =?us-ascii?q?KSeBrM7uJgkT/smtalPivoE1HTPRGJpwkn3tyV9besUKXSKq64oXyIlF6HnuVO?= =?us-ascii?q?10yE7zv/NO97N884k4/6hpyduoJafVMflVqkFnDQSICgho65kgDnNySHxWYu8U?= =?us-ascii?q?NPjeZ78Zjdz0p+DxCaMX9AWf+/ZFZtvfO0HBhs6/BymGSRNagQgBqSQVLheH2v?= =?us-ascii?q?6BnK90V9iqqfbl1UIq/lexMAQKzLZz6oeY4qCIvvPYbwPNzbgYXajnXtvzrq8w?= =?us-ascii?q?u0yI+PIkiKUDendyYw26CugSStASxmH8zaAw1y0sF9nPH7X6+P5MT3g5hC7vm4?= =?us-ascii?q?hhH1UKHfMZBaaL/Z5AkWgmhuPULcAWcqRemmaVDxGkDL4CyXmv6ySJPGlpmBbO?= =?us-ascii?q?0wv/QWmr9l/5sTd4QTfQz9fkikdVU6O4BUNWXyW3JU94rCmAMxDzudrxp6s18F?= =?us-ascii?q?o2PXD+u9KVimStIrVXENPjJNaEOyk7uEoXjIEtRtyowY0bG8CyIM0W8HFlavvR?= =?us-ascii?q?8X2rnjREo6dag4re/sCV9enWHXa6ia2asK+BxDdCyng3pVs/8MyvNunS592WRP?= =?us-ascii?q?Slz2QRQD15uwvPRR61raHUoE4PNEyXykjLnpcKPtZD0Xk+yE7m+PApQMgv+wVG?= =?us-ascii?q?CobAe/QCqCj8ODvpwFafZ9Y3WTeb0zZMA136D0J3GKkm12L2ps7Jkm3Q+1IwTI?= =?us-ascii?q?lqa0PnnQB3D5k/KU817lgXxjEOEQkLaRCeFr2oBELlLYUeVUcZchSHwKK6eror?= =?us-ascii?q?0k1v37Ov/vHcYfZ7B6oXOfZXlhSOk0RDGpIKra0eR6pxe1pa9K7RugjiBJboUu?= =?us-ascii?q?PjlXoxL/K1RN5V8dwXtnsl+Aa/RAGg5Y1F77kFlJCCbrREboTUvMBg80dn4iYC?= =?us-ascii?q?dihWgBh6jx60Su4cq/7+7djcqpqn8P6uVLwqR+UV6Rc7G3h+g4H3gFA5rtHdz/?= =?us-ascii?q?1cRZHNiYTj7ABNJGaHuJ3A3BliM+UOJJykfK17+nUcPSceOWgBPdWIZPkn+SNt?= =?us-ascii?q?Nivc50BaCMMWedwYJNbNmRxTikDxWrFT98/bF0SdC4htd8En8XD3yDEz8ZszSO?= =?us-ascii?q?rg7iG5JYzH5VFXI/xDlDlslM7FpOUNwPrTCTIY7mOFZBVu2SON1YWNBOjs8umW?= =?us-ascii?q?z9HUTVwGFDYsU4hBPDqC5RCnRu2tmZryUwOU8cHyj4g8dEKRWnyxhL4KsrtIEe?= =?us-ascii?q?Nblir72SVRGZ7viPKIqdqs73FXuUddHIZ09x3FF71VPo9nNhTgismrWk98CzPn?= =?us-ascii?q?eM7OahohpOqWx+kL4+VkNEvyfJQbLQwAy7L773pVUwRvRaXuvlmDQeIeeNtmSf?= =?us-ascii?q?3DrnBP6oJsMawPM0aHpJzssDhIrEo6AAgzaL8/tjZabFXBnBVJW6bov74Nkhcc?= =?us-ascii?q?UcRntk9IA22wPnwx6iHaWqRUg6mRCeAV/S+ITqMUSUVoLzlyQxWr15VyY7Gph+?= =?us-ascii?q?xIsntaniNhp/gnyzNmSwGmuSLyu6IN2Skt+LW5tDUdp3NFTv+RkzrTCVlZyvQF?= =?us-ascii?q?k7scAW746VOgeHkDcJfy4L5/KMTv64Yh5Wg/YRIkfyEBRuSvFSXwj6KOAoySv9?= =?us-ascii?q?NRnxqNt9vUbb6zNyceLLI9xgz/R3JlyAjRgA5o8HcXQjWn9NIkIoS9Ntoixiqs?= =?us-ascii?q?A2fbb0wA4qJOsMv2rl4LV/A7aVZuzWRsyMSHQTcNRMPXEWYvkgckcXlEcI5E6R?= =?us-ascii?q?ICGKknni2IvrJf8g8JbznaFIWl+o/NncbHwnQ9QtJqyXjQpqKbnJ8q12dlm9xs?= =?us-ascii?q?5C6UpHsSb/DYU9NrAnXr1Idfzuz+Z/O3vu8bSItmzKmhX+IDM8mi/2u2w5ZqWk?= =?us-ascii?q?6+y7QAHlq5LvUMxrPGXCekU2GYX/qEc3SUlTYjLkHy/QWoLkEwaMpSrk89LPHN?= =?us-ascii?q?hphHmg3lTLN7WySQpVjAzGA5NuMabQ02sp+9ewMWVO4Re/ScJe82zf08FlQMYX?= =?us-ascii?q?HJHS9tBu64q1GtmpZ0O2l67UX8f+vt7hjsMMGOFRkcDY7asplx9OS1RmKFPn9h?= =?us-ascii?q?wgN9PE1w9+rEDFQxselcc5eNktTKgdR0z/IFfe93MSIhot4Thp5j6Y6M3ceIcR?= =?us-ascii?q?HQzo7yJdbRoviZH/3Q0V8nemRbUroFewP6+Z82PtkjW73cBbFZpwgTBbAmQJw9?= =?us-ascii?q?MGf87L10LAJ2cgPKeLS0g9XlpuGVaZtQvXPW6Ew/LDvEsR0Z1vO0VRB7b4yth3?= =?us-ascii?q?jqJZAwRzFBr95qChZ9HotAAcAArw2hA5GKnqG3kdmx9F1mu+USq6r/FujK1Mil?= =?us-ascii?q?34V2R5VV/lKEPDDNBKRwmURliuOyguvc0pnvF8ztZMkIVO9hQm7KcrXGBJmwKi?= =?us-ascii?q?qSOsLgfE5L67Cc36x9UhWQfCD2QbGLtSylNPVh5EU01JZ4fO7NwzA36LHbwtTy?= =?us-ascii?q?bXlBpii/tX6JKIdf7FvSCO3QRxJUU/uF/3p7EqAMaIv09fsOMcY8z9SG5Alz9j?= =?us-ascii?q?tC2tOfI6e9tk/Mxl57dZXDIUvu3yY2R5IHIAy7MUQ2mm/ZtnXdDmhALsi+N8Zi?= =?us-ascii?q?nsyZDhrz6EltgWstfHJOGnL0RdeNPmgWw8a+ZAyM9AJWANcPhuq3eU8jtq2uUu?= =?us-ascii?q?llIZRFlv+stLUAi9ppLDvPRMdCNSHKMLB2JiZRDvnIpFUweR4Lrbw1WoYzZZiT?= =?us-ascii?q?L0ILN0iOyT/yzQTcy037acSs27ySLSYV7HpH1bTF3iZIpwaipPaZjdfvULfDbJ?= =?us-ascii?q?H5RPTSKjYqVimGRTQuFkak4VKktOAYs/qYIGcfpFcUbzmMCA4SoKBgs9zQDm7V?= =?us-ascii?q?me1+c5wGnveaWzr/SCdgjqo9Gj5LtVyQQ/oEDQTWbWXugGlbuAO5PfJM4HTlb6?= =?us-ascii?q?GYxqpSRuwWDYtMcuGDT9veZ/9eOy8ili8FN+akY93cs7E530rHTWQDCKbI7lye?= =?us-ascii?q?Q1CSQvGH2TLrWZ8av5M1uio14N7QmDF4E7jQNbaFuzGu6pK4jDqfueDGVGktZk?= =?us-ascii?q?s1gPgYAGmA2xlNM2cEBMsQuE7zQ66MfUFM1Ggmieh2wR8DZBxzUmFy0n1RhPu9?= =?us-ascii?q?AcNZSVsIg26vQ/ALd053Ay0q/U+L4wzyZtoAtdrVR2BA6rsGUZAdI+Uw6InLJK?= =?us-ascii?q?sQx+4k3DBhoCw8tyWQFFZdgRyY/KreG6J83KFN6nci8/FwQE6PX2CXTm+S0Ya9?= =?us-ascii?q?I95ezidp53b/3ozbuf4+GqFdotRFDUsRHCU+Btnb8TkJBXn53gSvvhD+HzmEJj?= =?us-ascii?q?8dyDdOISsbe6Buxuxmqh+OcNuH61vG5PFpk1eiFQveUun845dMEMy8kFzgZA?= =?us-ascii?q?=3D=3D?= X-IPAS-Result: =?us-ascii?q?A2FiAgCjcdpY/wHyM5BdGQEBAQEBAQEBAQEBBwEBAQEBFAE?= =?us-ascii?q?BAQEBAQEBAQEBBwEBAQEBgwApgWyOZI8vAQEBAQEBBoEjl1MmiSZXAQEBAQEBA?= =?us-ascii?q?QECAQJoKIIzIoJAAQEBAQIBAQI3FCALAwMJAQEKDQQDAQIBHggIAwEtCwoJCA4?= =?us-ascii?q?LBRgEiCGBOAUHAa8PJgKKIgEBCAIBJYYJhTSEJgoHAYYBAQSHFQeBe4dJToRih?= =?us-ascii?q?lCdQIZCSJMiWHwIJBZ1hFgdgXJmhzAPF4IXAQEB?= Received: from unknown (HELO tarius.tycho.ncsc.mil) ([144.51.242.1]) by emsm-gh1-uea10.nsa.gov with ESMTP; 28 Mar 2017 14:26:48 +0000 Received: from prometheus.infosec.tycho.ncsc.mil (prometheus [192.168.25.40]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id v2SEPwrB029984; Tue, 28 Mar 2017 10:26:16 -0400 Received: from tarius.tycho.ncsc.mil (tarius.infosec.tycho.ncsc.mil [144.51.242.1]) by prometheus.infosec.tycho.ncsc.mil (8.15.2/8.15.2) with ESMTP id v2SE8vYr044728 for ; Tue, 28 Mar 2017 10:08:57 -0400 Received: from goalie.tycho.ncsc.mil (goalie [144.51.242.250]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id v2SE8v6q024866; Tue, 28 Mar 2017 10:08:57 -0400 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A1AnBwDkbdpYfUhhtcpdGgEBAQECAQEBAQgBAQEBgyt6gRuOZI8xAQEBBoEjkz2EHYYiAoMhVwECAQEBAQECEwEBFjmFRAEBAQECATo/EAsRAwECAS4fHRMIGYhCgTgFB68RikwBAQEBAQEEAQEBAQEjhgmFNIQwhgkFhxUHgXuHSU6EYoZQHKNmSJMiVoEFJBaFTR2BcmaHMII9AQEB X-IPAS-Result: A1AnBwDkbdpYfUhhtcpdGgEBAQECAQEBAQgBAQEBgyt6gRuOZI8xAQEBBoEjkz2EHYYiAoMhVwECAQEBAQECEwEBFjmFRAEBAQECATo/EAsRAwECAS4fHRMIGYhCgTgFB68RikwBAQEBAQEEAQEBAQEjhgmFNIQwhgkFhxUHgXuHSU6EYoZQHKNmSJMiVoEFJBaFTR2BcmaHMII9AQEB X-IronPort-AV: E=Sophos;i="5.36,236,1486443600"; d="scan'208";a="5995231" Received: from emsm-gh1-uea10.corp.nsa.gov (HELO emsm-gh1-uea10.nsa.gov) ([10.208.41.36]) by goalie.tycho.ncsc.mil with ESMTP; 28 Mar 2017 10:08:56 -0400 IronPort-PHdr: =?us-ascii?q?9a23=3A+5buUBZc2CUOOUu1BOKG41T/LSx+4OfEezUN459i?= =?us-ascii?q?sYplN5qZr8i8bnLW6fgltlLVR4KTs6sC0LuL9fC9EjVeqb+681k6OKRWUBEEjc?= =?us-ascii?q?hE1ycBO+WiTXPBEfjxciYhF95DXlI2t1uyMExSBdqsLwaK+i764jEdAAjwOhRo?= =?us-ascii?q?LerpBIHSk9631+ev8JHPfglEnjSwbLdyIRmsrgjctsYajZZjJ60s1hbHv3xEdv?= =?us-ascii?q?hMy2h1P1yThRH85smx/J5n7Stdvu8q+tBDX6vnYak2VKRUAzs6PW874s3rrgTD?= =?us-ascii?q?QhCU5nQASGUWkwFHDBbD4RrnQ5r+qCr6tu562CmHIc37SK0/VDq+46t3ThLjlS?= =?us-ascii?q?EKPCM7/m7KkMx9lLxVrg+hqRxxwYHaY4abNP5wcKzSYdwXXnZBUtpLWiBdGI6w?= =?us-ascii?q?c5UDAuwcNuhYtYn9oF4OoAOgCwayGOPv0SJIhnjr1qM4yeshFxzJ0xY9FN8JqH?= =?us-ascii?q?TbstP1NKgPUeC0yqnE1DbDYO1M2Tf79ofIdgssr/KVUbJ0dsrR11cgGxnYgFiM?= =?us-ascii?q?rILqMS+b2/gXv2id8eVsT+Cvi3Y+pgx3vzOhxd8sh5HXio4J1FzI7zh1zYUoKd?= =?us-ascii?q?GiTEN2Y8SoHZlOuy2CKod6XMIvT3t2tCokyLAKo4O3cScIxZg92hLTduGLfo6V?= =?us-ascii?q?6Rz5TumROy13hHd9dbK/mRmy9U+gx/XyV8i63ldGsCtInsfWunAWzRPT6dWHSu?= =?us-ascii?q?Fn8Uu73zaAyRrf6uNcIUwslKrbLYAuwqIom5YNrUjPADX6lFj1gaOLbEkp/uql?= =?us-ascii?q?5/7lb7n4vpOcMpV7igD6MqQggMy/BuE4PxAWX2eF/+S826Dj/Uz/QLlTjf05jL?= =?us-ascii?q?PZsJbEKsQfvaO5AhZZ0oIk6xahETiqys8YkmMELFJYYhKIlZLlO1fQL/ziD/e/?= =?us-ascii?q?m0ygkC13yPDeIr3hHpLNI2DYkLj8ZrZw8FJcyQovwtBf4JJYELcBIOnpVUPru9?= =?us-ascii?q?zYCQE5ORSuw+n7ENV9yp8eWWWXD6+CLqzStV6I5uQyI+iDf4IVpDb8JOQl5/7p?= =?us-ascii?q?l3M5n0QdcrOz0ZsYb3C4AKcuH0LMenb3qssQGmcN+AwlRarlj0PRfyRUYiOOUr?= =?us-ascii?q?4n+zZzKIugAY6LEpighrOc3SH+HZBMYG1CInHJFXD2esO/ctQxUgvUJMInkCRS?= =?us-ascii?q?BuvpcJMoyRz77Fyy8LFgNOeBoiA=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0EFBgAgbtpYfUhhtcpdGwEBAQMBAQEJA?= =?us-ascii?q?QEBFgEBAQMBAQEJAQEBgwB6gRuOZI8xAQEBBoEjkz2EHYYiAoMhVwEBAQEBAQE?= =?us-ascii?q?BAgECEAEBFjkvgjMggkIBAQEBAgE6PxALEQMBAgEuHx0TCBmIQoE4BQevBIpMA?= =?us-ascii?q?QEBAQEBBAEBAQEBI4YJhTSEMIYJBYcVB4F7h0lOhGKGUByjZkiTIlaBBiQWhU0?= =?us-ascii?q?dgXJmhzCCPQEBAQ?= X-IPAS-Result: =?us-ascii?q?A0EFBgAgbtpYfUhhtcpdGwEBAQMBAQEJAQEBFgEBAQMBAQE?= =?us-ascii?q?JAQEBgwB6gRuOZI8xAQEBBoEjkz2EHYYiAoMhVwEBAQEBAQEBAgECEAEBFjkvg?= =?us-ascii?q?jMggkIBAQEBAgE6PxALEQMBAgEuHx0TCBmIQoE4BQevBIpMAQEBAQEBBAEBAQE?= =?us-ascii?q?BI4YJhTSEMIYJBYcVB4F7h0lOhGKGUByjZkiTIlaBBiQWhU0dgXJmhzCCPQEBA?= =?us-ascii?q?Q?= X-IronPort-AV: E=Sophos;i="5.36,236,1486425600"; d="scan'208";a="5322504" X-IronPort-Outbreak-Status: No, level 0, Unknown - Unknown Received: from www262.sakura.ne.jp ([202.181.97.72]) by emsm-gh1-uea10.nsa.gov with ESMTP/TLS/DHE-RSA-CAMELLIA256-SHA; 28 Mar 2017 14:08:53 +0000 Received: from fsav406.sakura.ne.jp (fsav406.sakura.ne.jp [133.242.250.105]) by www262.sakura.ne.jp (8.14.5/8.14.5) with ESMTP id v2SE8oDb039280; Tue, 28 Mar 2017 23:08:50 +0900 (JST) (envelope-from penguin-kernel@I-love.SAKURA.ne.jp) Received: from www262.sakura.ne.jp (202.181.97.72) by fsav406.sakura.ne.jp (F-Secure/fsigk_smtp/530/fsav406.sakura.ne.jp); Tue, 28 Mar 2017 23:08:50 +0900 (JST) X-Virus-Status: clean(F-Secure/fsigk_smtp/530/fsav406.sakura.ne.jp) Received: from AQUA (softbank126227147111.bbtec.net [126.227.147.111]) (authenticated bits=0) by www262.sakura.ne.jp (8.14.5/8.14.5) with ESMTP id v2SE8oWK039270; Tue, 28 Mar 2017 23:08:50 +0900 (JST) (envelope-from penguin-kernel@I-love.SAKURA.ne.jp) To: sds@tycho.nsa.gov Subject: Re: [PATCH] selinux: Use task_alloc hook rather than task_create hook From: Tetsuo Handa References: <1490706772-8013-1-git-send-email-penguin-kernel@I-love.SAKURA.ne.jp> <1490707796.6046.1.camel@tycho.nsa.gov> In-Reply-To: <1490707796.6046.1.camel@tycho.nsa.gov> Message-Id: <201703282308.BHJ95808.MFFHVQLOOtJFOS@I-love.SAKURA.ne.jp> X-Mailer: Winbiff [Version 2.51 PL2] X-Accept-Language: ja,en,zh Date: Tue, 28 Mar 2017 23:08:45 +0900 Mime-Version: 1.0 X-Mailman-Approved-At: Tue, 28 Mar 2017 10:25:57 -0400 X-BeenThere: selinux@tycho.nsa.gov X-Mailman-Version: 2.1.20 Precedence: list List-Id: "Security-Enhanced Linux \(SELinux\) mailing list" List-Post: List-Help: Cc: linux-security-module@vger.kernel.org, selinux@tycho.nsa.gov Errors-To: selinux-bounces@tycho.nsa.gov Sender: "Selinux" X-Virus-Scanned: ClamAV using ClamSMTP Stephen Smalley wrote: > On Tue, 2017-03-28 at 22:12 +0900, Tetsuo Handa wrote: > > This patch is a preparation for getting rid of task_create hook > > because > > task_create hook > > task_alloc hook? Oops, copy&paste error. Yes, I meant task_alloc hook. > > > which can do what task_create hook can do was revived. > > > > Creating a new thread is unlikely prohibited by security policy, for > > fork()/execve()/exit() is fundamental of how processes are managed in > > Unix. If a program is known to create a new thread, it is likely that > > permission to create a new thread is given to that program. > > Therefore, > > a situation where security_task_create() returns an error is likely > > that > > the program was exploited and lost control. Even if SELinux failed to > > check permission to create a thread at security_task_create(), > > SELinux > > can later check it at security_task_alloc(). Since the new thread is > > not > > yet visible from the rest of the system, nobody can do bad things > > using > > the new thread. What we waste will be limited to some initialization > > steps such as dup_task_struct(), copy_creds() and audit_alloc() in > > copy_process(). We can tolerate these overhead for unlikely > > situation. > > > > Therefore, this patch changes SELinux to use task_alloc hook rather > > than > > task_create hook so that we can remove task_create hook. > > Aside from the nit on the patch description above, > > Acked-by: Stephen Smalley Thank you. >From b43bd0fc0cc267b91f51ad118f6fabd13efb921e Mon Sep 17 00:00:00 2001 From: Tetsuo Handa Date: Tue, 28 Mar 2017 22:09:38 +0900 Subject: [PATCH v2] selinux: Use task_alloc hook rather than task_create hook This patch is a preparation for getting rid of task_create hook because task_alloc hook which can do what task_create hook can do was revived. Creating a new thread is unlikely prohibited by security policy, for fork()/execve()/exit() is fundamental of how processes are managed in Unix. If a program is known to create a new thread, it is likely that permission to create a new thread is given to that program. Therefore, a situation where security_task_create() returns an error is likely that the program was exploited and lost control. Even if SELinux failed to check permission to create a thread at security_task_create(), SELinux can later check it at security_task_alloc(). Since the new thread is not yet visible from the rest of the system, nobody can do bad things using the new thread. What we waste will be limited to some initialization steps such as dup_task_struct(), copy_creds() and audit_alloc() in copy_process(). We can tolerate these overhead for unlikely situation. Therefore, this patch changes SELinux to use task_alloc hook rather than task_create hook so that we can remove task_create hook. Signed-off-by: Tetsuo Handa Acked-by: Stephen Smalley --- security/selinux/hooks.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/security/selinux/hooks.c b/security/selinux/hooks.c index d37a723..d850b7f 100644 --- a/security/selinux/hooks.c +++ b/security/selinux/hooks.c @@ -3710,7 +3710,8 @@ static int selinux_file_open(struct file *file, const struct cred *cred) /* task security operations */ -static int selinux_task_create(unsigned long clone_flags) +static int selinux_task_alloc(struct task_struct *task, + unsigned long clone_flags) { u32 sid = current_sid(); @@ -6205,7 +6206,7 @@ static int selinux_key_getsecurity(struct key *key, char **_buffer) LSM_HOOK_INIT(file_open, selinux_file_open), - LSM_HOOK_INIT(task_create, selinux_task_create), + LSM_HOOK_INIT(task_alloc, selinux_task_alloc), LSM_HOOK_INIT(cred_alloc_blank, selinux_cred_alloc_blank), LSM_HOOK_INIT(cred_free, selinux_cred_free), LSM_HOOK_INIT(cred_prepare, selinux_cred_prepare),