From patchwork Tue Mar 6 11:58:06 2018 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Vit Mojzis X-Patchwork-Id: 10261493 Return-Path: Received: from mail.wl.linuxfoundation.org (pdx-wl-mail.web.codeaurora.org [172.30.200.125]) by pdx-korg-patchwork.web.codeaurora.org (Postfix) with ESMTP id 123C86055D for ; Tue, 6 Mar 2018 12:00:20 +0000 (UTC) Received: from mail.wl.linuxfoundation.org (localhost [127.0.0.1]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id F15C028F85 for ; Tue, 6 Mar 2018 12:00:19 +0000 (UTC) Received: by mail.wl.linuxfoundation.org (Postfix, from userid 486) id EF16128FD5; Tue, 6 Mar 2018 12:00:19 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on pdx-wl-mail.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-4.2 required=2.0 tests=BAYES_00, RCVD_IN_DNSWL_MED autolearn=ham version=3.3.1 Received: from ucol19pa09.eemsg.mail.mil (ucol19pa09.eemsg.mail.mil [214.24.24.82]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id A4F2928F6E for ; Tue, 6 Mar 2018 12:00:15 +0000 (UTC) X-IronPort-AV: E=Sophos;i="5.47,431,1515456000"; d="scan'208";a="647151635" Received: from emsm-gh1-uea11.ncsc.mil ([214.29.60.3]) by ucol19pa09.eemsg.mail.mil with ESMTP; 06 Mar 2018 12:00:14 +0000 X-IronPort-AV: E=Sophos;i="5.47,431,1515456000"; d="scan'208";a="10176248" IronPort-PHdr: =?us-ascii?q?9a23=3Aa1TuPB2zySgtna2OsmDT+DRfVm0co7zxezQtwd8Z?= =?us-ascii?q?se8QLP/xwZ3uMQTl6Ol3ixeRBMOHs6kC07KempujcFRI2YyGvnEGfc4EfD4+ou?= =?us-ascii?q?JSoTYdBtWYA1bwNv/gYn9yNs1DUFh44yPzahANS47xaFLIv3K98yMZFAnhOgpp?= =?us-ascii?q?POT1HZPZg9iq2+yo9JDffwtFiCChbb9uMR67sRjfus4KjIV4N60/0AHJonxGe+?= =?us-ascii?q?RXwWNnO1eelAvi68mz4ZBu7T1et+ou+MBcX6r6eb84TaFDAzQ9L281/szrugLd?= =?us-ascii?q?QgaJ+3ART38ZkhtMAwjC8RH6QpL8uTb0u+ZhxCWXO9D9Qr4uWTSm8qxlVhnmhi?= =?us-ascii?q?kaPDI96W3bl9B8gKddrRm8pRJw3pTUbZmVOvRgcK3TftEVRWRcUMZJVSFNH42x?= =?us-ascii?q?YJUUD+caIepUs5Pwq0cSoReiGQWhAv7kxD9Shn/x2K03y+suEQDa3Ac9GNwOt3?= =?us-ascii?q?bUrdT0NKcJTOu4y7fIzTDEb/NU2Db96ZPIfws7of6SQL1wcdDeyVU1GwzZiVWQ?= =?us-ascii?q?rJXoMjWI3eoDtGib6vBvVeOpi2M/sQF+vCWgxsc2hYnVnI4a1lfE9SB/zY0oJt?= =?us-ascii?q?O4UFZ2bcOrHZZfrS2XN5Z6Ttk8T2xnpio20KAKtYa6cSUL0pgr2h3SZv6df4SW?= =?us-ascii?q?7B/uWvydLDV2iX9jZbmxnQy98VK6xe35TsS01VFKoTdbndTUrXAN0gDT6tCASv?= =?us-ascii?q?tg4ketwTaP2B7X6uFDOU00ibDUK4Qgwr4tjZofq1jDHy/ql0X2i6+abEMk9fSz?= =?us-ascii?q?6+v7eLnmo56cN4tshgH/NKQhhNC/DPwlPgUBUGWX4+Sx2KD58UHnT7hGkOc6nr?= =?us-ascii?q?TBvJDfP8sbp6q5AwFP0oYk7hayFyym38ocnXkGKlJFZR2Gg5HyNFHJPfD4C+uw?= =?us-ascii?q?jEq3kDpw2/DHPqHuApXKLnTZlrfhZqxy51RTyAo009BT/4hUBa0ZIPLvRk/xs8?= =?us-ascii?q?TVDh0+Mwyy2ennFNV92ZkYWW+UAK+ZN6XSsVqS6eI0P+mDepUVuC3nJ/gi/f7u?= =?us-ascii?q?gmczmUUBcqmxwZsXdHe4E+xkI0Wbe3XjntQBEXwNvgo4TezqlkaPUTBXZ3avUK?= =?us-ascii?q?Mz/Sw7CIS6DYfeXIyth6aB3CijFJ1Mem9GEkyMEWvvd4icVfYMaSaSIsp/nTwe?= =?us-ascii?q?TrWhRZEu2gyptA/g0bVnNvDU+ioatZ39yNd1+/fflRYo9Tx7F86dyX2CT3lonm?= =?us-ascii?q?MUQD87xL1wrlB4yleE16h4n+FUGMdN5/xXSAc6NJ/dz+t8C9zoXALOYMuJQk68?= =?us-ascii?q?Qtq6GTExUs4xw9gWbklgB9WtlArD0jG2DL8SkryEGIY78rnA33TrIcZy1WrG3r?= =?us-ascii?q?E7j1Y6WstPKXGmhqln+gnTBo/JlEOZmr2vdaQYxSLN9WGDwXCIvE5CSg5wUqTF?= =?us-ascii?q?XW4BaUfMq9T2+F/CRae0Cbs7KgtB1dKCKqxSZ9L3lVVJXu3jONXFY2+qg2e/Hw?= =?us-ascii?q?yIxrKXbIryf2USxjnSB1YenwAU53aGOhA0Bj29rGLGEDxuCVXvblvi8elksny7?= =?us-ascii?q?SFM7zwCRb0B60rq14h8VieWHS/IdxbIIoiAhqy97HFylxdLZF8KApxZ9fKVbed?= =?us-ascii?q?49401I1WHetwxgJZGgLLpthl0ZcwRqpU/u0A93CopYm8gwsHwq1BZyKb6f0F5Z?= =?us-ascii?q?bTyXwIrwOrzJJWno5x2gcbLZ2lTE3NaR4KcP5+wyq0//swGxCkoi73Jn3sFP03?= =?us-ascii?q?SB+5rHFwUSUZf+U0ot8Rh1ua3aaDEn54zIzX1sLbW0sjja1tIyCusl0BGgf8xD?= =?us-ascii?q?MK6fDw/yFcoaBsarKOMwnVildBQEM/5O9KQsJcOpa+OG2LK3POZnhD+ng35I4I?= =?us-ascii?q?Rh0k2S7Sp8UfXF34gbzPGCxQSHSjL8gE2mssDtloBOfSsSEXanySj4GI5RYbV/?= =?us-ascii?q?fYAKCWeqJ8242M5+ioX3VHFG7l6jAEkK2MizeRqdd1b9xxFf1VwLoXy7niu11y?= =?us-ascii?q?J0kzA1oaqD2yzO2f7uewYHOm5MQmligkzhIYy1j9AcRkeodQ8pmAGi5UbgyKhR?= =?us-ascii?q?vL5/IHXLQUdUYyj2KHlvUq+xtrqZf85D8YgovjtTUOS9Z1CaV7H8rgAB0yP7Hm?= =?us-ascii?q?tewjE7eC2xupnjmRx1ln6dJm5prHXFYcFw2Qvf5NvESP5L2ToGQC14hifNBleg?= =?us-ascii?q?ONmo886Zl4zesu+iTGKtTJpTcTPkzYmYriu0+XVqAQGjn/C0gtDnEhY10Sng19?= =?us-ascii?q?RxViXHshD8YpLt16ukLeJrZE5oBEXz68BiAIFxjpMwhI0M2XgdnpiV5WAIkXr3?= =?us-ascii?q?MdpFwaLxdnwNRSIVzN7P+wXlxVZjIWyTx4LiTHmd2cxhZ8SgYmwKxC094cdKCL?= =?us-ascii?q?2b7LNahyd1pES3rR7Ja/hngjgd0ecu6GIdg+wRpgotyDiSD6sMHUleICPslw6E?= =?us-ascii?q?79ago6VLfGyva6S/1FJindC9C7GPuhlcV2zkepcmBiJ/8sR/ME7M0XHq5IHrYt?= =?us-ascii?q?/QYcgUth2OnBfKl/JVJ44plvoWmSpnPnrwvXM/xO49kRxu2pS6sZOJK2pz4a25?= =?us-ascii?q?BQRYOSftZ8MJ/THtj7hRkdqK34y1GZVhADoLVoPyTf20CDISqejnNwGWHT05sH?= =?us-ascii?q?ibHb7fEhGD6Ed6tX3ACYumN3eJK3kF1tVtWAOSJFRBjwwOWjU1gII5HBiwxMP9?= =?us-ascii?q?aEd5+iwR5lngpxtC0OJnKQTwUnzFqweudjc0T4OfIQFM4Q5e4kfZK8ue7vh8Hy?= =?us-ascii?q?tA5J2usBSNKnCHZwRPFWwJXFaECEr7Prm2/tTA/emYBvClL/vSb7WOqOpeWO2O?= =?us-ascii?q?xZ2z04tp5TKMOt+IPnl4AP0xwlBDUmxhG8TFhzUPTDQalzrTYMGAuhi8/Cx3rt?= =?us-ascii?q?y48PnwWQLg+5WABKVIPdVo4RC2jr+JN/SMiyZhNTZYypQMyGfTx7cE21ISjyBu?= =?us-ascii?q?dyKxEbQbryLNV7zflbNNAx4AdSxzMMpI76Qh3ghCIsPUltP01qRljv4uEVtEW0?= =?us-ascii?q?bumt2yZcwNJWGxLlTHBFyENL6ePz3E39n3Yb+gSb1XlOhbrBywuTmcE0/lJTmM?= =?us-ascii?q?iifmWAuuMe5WiiGXJhteuJuychx1E2jsUMrmagGnMN9wlTA527I0iWnUNWECKj?= =?us-ascii?q?V8dFtNoaOW7SNdmPp/GmhB4WFiLeiLgSqZ6PPYKpkOu/txHit0j/5a4Gg9y7ZN?= =?us-ascii?q?8CFEQ/l1lDHIrt5polCpjO+PxSF9UBpJtDlLh5mGslllOaXc6pZPQ23E/A4X4W?= =?us-ascii?q?WWFRsKu8NvCsfztKBI1tjPiKXzJS9A89LU/cocH8/UKMaGMHo9LxXkAzvUDAoZ?= =?us-ascii?q?TT6xK27TnUtdkOud9neNtJg1toDsmIYSSr9cTFE1FfMbCkB7E9EZJZd3WT0kkb?= =?us-ascii?q?CFg84U+Xq+rB7RRMBEsZzdUPKdH+nvIi6DjbZYfxsI3a/4LYMLO439xUNtcF16?= =?us-ascii?q?kZ/JG0rXRtBNvjdubgkvoEVO8XhyVGsz1Fz5agm1+n8cCea0ngIqigt5eekt7i?= =?us-ascii?q?nj40wpKVXQvis/jEkxlM7+jjCQaj7+MaCwXY9OCyruqUcwMon3QwBrYg2uhUZk?= =?us-ascii?q?LivLR6pNj7t8cmBmkBLTuZxJGf5aUKJLfhsQxfCMavoyz1tcsCKnyVVA5evfBp?= =?us-ascii?q?tojBEqfoK0r3JcxwJja8Y4KrHKK6pXz1hfm7mOszSy2eAr2g8eIEgM8HiMdyEU?= =?us-ascii?q?pUwILLgmJzao/+B27wyNhSdDcnAWV/U2uvJq6l89O+OYwiLk1L5DMF6+N+qeLq?= =?us-ascii?q?OeoGXAmsiIQk4q2kMPjUlF8qB80d0/fEqMS0Av0LyRGgwSNcXcLQFVbsxS9GXc?= =?us-ascii?q?fCuVrerNxpd1MJmnGeDzUe+CrqAUjVy4HAwxBYQD8twBHoWw0EHfNcrnML8FyR?= =?us-ascii?q?Aq5AT3JFWEDO9Edw+KkDYHuc6w14V73Y9DKTEBGW99Kzm45q7Lpg82h/qORM05?= =?us-ascii?q?YnMbXoQYKH05QMi6mi5fv3RHCjm4yPkUxxOD7zDmoCTcFTf8b8d5aPeSexxsFM?= =?us-ascii?q?m8+S8j/KiulV7X7pLeKnnhOtt8vN/C8vkVqIuZC/xKV7l9qF3Tm5NYRnCwVG7P?= =?us-ascii?q?C9G1LYDqa4Ywddz0Fmq6UlunhjI6UsfxPdKtLqyWjgHtXotbrZeU0ysiNcCnED?= =?us-ascii?q?ESARBwp/sM5Khkfw0Mf4I7YQL0twQ5L6G/OgGY0tSyTGatLjtWS+Jfw/2jabJK?= =?us-ascii?q?1SQhcui0xWA8QZE9yum47VQCRIoWjh3Ew/aseZVeWzDpGnNBYwXPuTY5l295O+?= =?us-ascii?q?Yo2Og/2hTIvkIHPjCXbuxmcnJEsM84BVOTJ3V2BW44R16TjYrD/g6s0aod/zFY?= =?us-ascii?q?n9pO1+1KrmT+tIfFYD2wQKyrtYnVsy04YNkouaF+LYzjIsqDtJPfhDPfT4Ldsg?= =?us-ascii?q?ybXyGkCfVWgN9QIDhXQPNQg2EqJdQGuZZd6Uo2Tso+IqZACLMvpr+0dTpkDCgS?= =?us-ascii?q?zSACWoKOxjMChPuz27/dlheNbZsiKwYIsJNcjdsBSyR2eD8RpLe/V4XKkG+JUn?= =?us-ascii?q?IEIB0O7QRK/g4AlZR9fuHk4IrJUJ9D0CRao/RqXSvXDpNo7Uf0SnmKgVjkT/Ws?= =?us-ascii?q?i+2p3QROzP3y1tkURht/BlZBx+ZMlkolM7Z3K7EOsY7Mtz+Hb0L6vGb2x+uhK1?= =?us-ascii?q?hd08rUd0f3DIDdr2rzTjUc+WEIRY9I0HzfCZMSkw9iZaY3uFlMJZupdlz45zM6?= =?us-ascii?q?24RjB6O4Wtyzx1Y5sXYGQD+nE9pbBOF8ql3XXCBqbou2p5r7I5VSWnFf+JmDpF?= =?us-ascii?q?dDikltNDS5yZVEIcFX/jEMRCRPoSmavNaqSs1D3tF5AoQRLdhhoHfyBrlEOISP?= =?us-ascii?q?rHIroLDvzGHW+ywkuleg2DqzA7O4T/5e/2AGBgUmOnmRqkg1AOso6Wrd7lfNsl?= =?us-ascii?q?Vo8OhBHbiPkV99oDBjEZBSHjxJz2yqL0xvTHlatOVXML/ac8JATPUuZxKjJhIz?= =?us-ascii?q?GOU60EyO+EF7gW32YzdutgdA/SDSQRU0XzEPgrjxgT0ett2nOTgCRpJSczouci?= =?us-ascii?q?fFJBiHmS1MuBZfbF9qVI4HDtlZ/LEUwJVb8tDESUmyNSEPRAZiOR4g0fpDiU5D?= =?us-ascii?q?t12VeTjGDQq0b/nArwF3cNyKrM6uMfT55htIhZ3hsOAk7aUMXXmmlReqQdDEoI?= =?us-ascii?q?/2rseKuVeWdKfkL+28ZmfMTCTWjR+um7grEoLH/zXXMApHMZl102QkYZnmCW7P?= =?us-ascii?q?IxtGO7gXJ01BVaB1cd9GuPxVZ9d4eKYV/q9gHhCHSQn1GIyot/lGKkzcRSrFIi?= =?us-ascii?q?WE7+y/pZ7T7b3BRujhfMOMwW3HT7hwPpdg5jnxA63q3pNG+krqxvdt8Vt3SVrc?= =?us-ascii?q?PCCHotThPAQL69S8eUb5op0mBzXWAIx3kHb3wEFPadYXSTWw8JsE0JNZ9GrwSe?= =?us-ascii?q?Vg30j1tO1f7Lhk6Y8y47xzyMe0I6nSKe5Avk98HhiUHBhq+YkxAGhiXWBefPUd?= =?us-ascii?q?KPDLfaQWlcrusfz4F7QL6B2J/OxUcd3HJ0Ddlcm4DjGTUwdEkB0AqT4dKQuczO?= =?us-ascii?q?WFlrRxScuqqun1wEUt40KxLhQe1rBi+Z+E+raUpO/Qdxbe0aILWqz0ScPosrQt?= =?us-ascii?q?u0SS6OY/lLESe2x6fQunEPQcVsEH3Gvgy74lzT40GcPZA73g4OJDV24+nj/4n5?= =?us-ascii?q?B9BFAWF/MPELqF44tRg2A4m/bDOd0OaKBCnWSPGgC4Hb8e03Kr7DGXIGZ9iBHU?= =?us-ascii?q?zx7wWX+z7EPxrSJgQyvMztLjn1FQVrapBUZdQTCpOU5+sDOAJgbossT4ubgt5k?= =?us-ascii?q?EsLmPkrM6NlHemOL5PHs3+JcaTLjMoq18Ml50+WMCv1p4HFtanJ9cR6n5+ZOPE?= =?us-ascii?q?62y3iy9Bv7tHh43G786O+/XXBnehgLeYq7WM2DBY0mI3vUw76t27Kv7O4MCFTO?= =?us-ascii?q?qy2GYMVSd/vBHBUASvprzctVAUNlSB0F3Xl4wSItFZwX4421n+5Oc5XNI86AVe?= =?us-ascii?q?F4jHZ/MYpjD/ISD0zkibY9I2UCmezjRWE0ntEVZiBKgzxGLwvczOlXfK+F0kXI?= =?us-ascii?q?pweFL9hRxxEYo4LVgh6F8NwioMCQINcwyUDKm0BUT5KosJTUcDZg6d3LekZqc3?= =?us-ascii?q?3VZ+wreu5O/Pc+N8B7ACNutGjgKUmlhUBI4Wu7UEQL1gY19d6LLXpg/6BojoQf?= =?us-ascii?q?fmk2YwNfqyQsxd6sAWqX8i4ge5Rxq95pZO9LIbh46Sdq9Ee5fApsZ84Fl75TQX?= =?us-ascii?q?bCxCnAB/jw+lUeAbvO3s/trbv4C05eu1SKktQOEX9xw1B2tglZvwnE4srs3X1+?= =?us-ascii?q?tGTY3Vk4v/+hhXI3GWoIbazwV8Ke0WJoKue7Zg8WkHJycAKH8VONqWauMz4ylz?= =?us-ascii?q?PzXP6V1CBdkMZdADPMbXnwBblFHpUqlJ9sXHAl+YF5tzd8cw4mr41D816oA8Xv?= =?us-ascii?q?/95jG5I57f7ldNP+5MjSh3m9LCofIawfzMByQN5nmZcRd1yDuYy5aRE/bw4fmM?= =?us-ascii?q?yNbMWlMEGS42U4FdKCCe9gynQuq1iYjmUwKV6s/1m5I+d0OQS2evnKQErKZDC+?= =?us-ascii?q?pAhTj63jREEID6me6VucK26GRLrl1HDJpz7RrdFaVeIJV0IxL4m9KvRkhhGyT/?= =?us-ascii?q?ecbUdgE0tOqR3OcM7P10N1Hiao8DPhIE17X65GJXTgRwRr72sFKZUPkfZdR8Tv?= =?us-ascii?q?PLsGxV5ZhmK6ARIFiXvIbqoStQqFAqHA8pb6c9rjNedknJkgxaRaL0uLobhwsH?= =?us-ascii?q?Vt55v05MFn6qNGI4+TXHSbxfjLONB/wN7jWTUqsOXl10MiN/RhO4w4lue7q1kv?= =?us-ascii?q?BErGxGmjlxoP403Dx6XBG8ozHjp7oR2TI8/7G1rDABuX1GTuWdlCfFEldDw+4J?= =?us-ascii?q?jacbDXbt91q8bGMFbITs/LltPd7g+pU543QjfRUjeDULUv++BCH2k6OFGZePsN?= =?us-ascii?q?ZbhB6RpMXOc6G8IjUIOrQ60xLjSGB30hLCkxZw7GsLXjKg4cc8JIW6PcYq3DCo?= =?us-ascii?q?GGbcdFYI7KNEq87xtVkMTOstd1xu3H9j0s+cRi0WRczPHWk1ghIjaWVef5JJ8Q?= =?us-ascii?q?UaGLUwgjaUoqlG+RkZYDnKHYSh+4nQhdnH1GI8TNdrw2LWo7OKhoku0HJ7gd90?= =?us-ascii?q?6TSOuHsKfezCT8BsGmTz1ptYyeHmafStqvoHSIp6x7u/S/ICN8ij+Xes2Jp0QE?= =?us-ascii?q?Olwa4eH1WhOu8Z2rjbSzulSXGfWemTdGiMmyg2P1Xq5RmsNFI3c9tKr04hPeve?= =?us-ascii?q?nJ5TiRPuXalyRiqOuV/R1HYjPv8CdwIqpIenfBQHTOoQZ+iaOOgvz+QyCF8Nb3?= =?us-ascii?q?/SASt2EPS7sV+3k4h9PHVs+0L6Yf7i8gr+KtudBgEEEZLGrp524fG6Q3iONmNg?= =?us-ascii?q?zB1zOkl08PzSF0owtu9abZmRmdnQh9Jm0e8KbfttNjc9utELkIJ59YaUyNuKcQ?= =?us-ascii?q?3WzpvqJ9HauPuYA/rEwEkxZ2FaVKYZYQPy54UnMd45W6HTEaFfvRsCGagwWIYh?= =?us-ascii?q?OHvp9KFoMANzdRbcZLaxgsntvOKLfJpUp2TN41I2NijcvgMMyv2uQQx8dZCqiG?= =?us-ascii?q?34IIosSTJZs91tFhxmEZNUG8MOqgqoH5+ZlaKght+v5Ux6oe4KsKv3CvDMzti5?= =?us-ascii?q?2Zt+X4QJrXCMaS3cAKhtn1RNkvW5gvCG1IL4T8zlZ4AqTu9+F1DEdvfjGYetKy?= =?us-ascii?q?nGbtz5fExU8qW0yr91UhyNIiv+WvzV52WfKPx47BBjmcRDd+3JwWlotunW?= X-IPAS-Result: =?us-ascii?q?A2DtBQBhgZ5a/wHyM5BcHgEGDIMjKgNmcCiObI0FgxiUNII?= =?us-ascii?q?OERgLiA8hNhYBAgEBAQEBAQIBaieCOCSCSAMDAQIkVQMJAQFICAMBUxkFgz+BV?= =?us-ascii?q?wMNqkU6hHKDd4IhBYUugi6BV4ZugVMEGYdDBJpnCYZUih0OiQKFdol9h1mBLiQ?= =?us-ascii?q?BMYFSTSMVgn2CMRyBfHYBjCUBAQE?= Received: from tarius.tycho.ncsc.mil ([144.51.242.1]) by emsm-gh1-uea11.NCSC.MIL with ESMTP; 06 Mar 2018 12:00:12 +0000 Received: from prometheus.infosec.tycho.ncsc.mil (prometheus [192.168.25.40]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id w26C0AKI026698; Tue, 6 Mar 2018 07:00:10 -0500 Received: from tarius.tycho.ncsc.mil (tarius.infosec.tycho.ncsc.mil [144.51.242.1]) by prometheus.infosec.tycho.ncsc.mil (8.15.2/8.15.2) with ESMTP id w26BwS4x071342 for ; Tue, 6 Mar 2018 06:58:28 -0500 Received: from goalie.tycho.ncsc.mil (goalie [144.51.242.250]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id w26BwQ1A025649 for ; Tue, 6 Mar 2018 06:58:31 -0500 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A1DqAADOgZ5aly0bGNZcH4M1KmlwKI5sj?= =?us-ascii?q?QWDGJQ0ghUKI4UNAoMAITYWAQIBAQEBAQECEwEBAQEBBhgGhXoDAydiUVcZg0S?= =?us-ascii?q?BVwMNqkU6hHKDd4IhBYUugi6BV4ZugVMEGYdDBJpnCYZUih0OiQKFdol9h1mBL?= =?us-ascii?q?iUCggFNIxWCfYIxEAwWgWZ2AYwlAQEB?= X-IPAS-Result: =?us-ascii?q?A1DqAADOgZ5aly0bGNZcH4M1KmlwKI5sjQWDGJQ0ghUKI4U?= =?us-ascii?q?NAoMAITYWAQIBAQEBAQECEwEBAQEBBhgGhXoDAydiUVcZg0SBVwMNqkU6hHKDd?= =?us-ascii?q?4IhBYUugi6BV4ZugVMEGYdDBJpnCYZUih0OiQKFdol9h1mBLiUCggFNIxWCfYI?= =?us-ascii?q?xEAwWgWZ2AYwlAQEB?= X-IronPort-AV: E=Sophos;i="5.47,431,1515474000"; d="scan'208";a="217057" Received: from emsm-gh1-uea11.ncsc.mil ([214.29.60.35]) by goalie.tycho.ncsc.mil with ESMTP; 06 Mar 2018 06:58:29 -0500 IronPort-PHdr: =?us-ascii?q?9a23=3AWBPM9B2bRMplAcZ/smDT+DRfVm0co7zxezQtwd8Z?= =?us-ascii?q?se0VI/ad9pjvdHbS+e9qxAeQG9mDsLQc06L/iOPJYSQ4+5GPsXQPItRndiQuro?= =?us-ascii?q?EopTEmG9OPEkbhLfTnPGQQFcVGU0J5rTngaRAGUMnxaEfPrXKs8DUcBgvwNRZv?= =?us-ascii?q?JuTyB4Xek9m72/q99pHPbQhEniaxba9vJxiqsAvdsdUbj5F/Iagr0BvJpXVIe+?= =?us-ascii?q?VSxWx2IF+Yggjx6MSt8pN96ipco/0u+dJOXqX8ZKQ4UKdXDC86PGAv5c3krgfM?= =?us-ascii?q?QA2S7XYBSGoWkx5IAw/Y7BHmW5r6ryX3uvZh1CScIMb7S60/Vza/4KdxUBLmlS?= =?us-ascii?q?cJOSA3/m/UiMNwgrlWrA69qxFl34LYfJ2ZOOZ4c6jAfd0aX21BXsNJWiNOA4O8?= =?us-ascii?q?c5YEAe0GPeZaroj9pkAOpga5CAmyAePvzT1Ih3733a0hyOkhCx/J0xEgH90UrH?= =?us-ascii?q?TYtsn6NKAXUe2syqTD0DvNb/RT2Tjn6YjIdAgsoeuSUr1tccre01UvGxnZgVWX?= =?us-ascii?q?rIzoOS6e2OcVs2WD8eZsSO2ih3Q5pwx+uDSj2MUhhpPGi48V0lzJ9CR0zJwoKd?= =?us-ascii?q?C7SkN3e8CoHZVeui2ANYZ7TMUvSHxytikg0L0Jo5u7cTAKyJs5wx7fbOSKfIaS?= =?us-ascii?q?7BztSuucLyl1imh5db6jhhu+61avxfP5Vsmv31ZGtC9FncPNtnAJzRDT78mHSv?= =?us-ascii?q?9l8keg3zaAyRzT5/laLUwpmqfXMYAtz7EqmpYNs0nPBCD7lUXugK+TbEok++yo?= =?us-ascii?q?6+r9YrXho5+RL5F0igT5MqQsm82/AP84PxMUX2eF5Ou81Kfs/VHjTLpWif02l7?= =?us-ascii?q?HVsIrGKsQDuq65HwhV35446xmhCzem0dIYnWQILV9eZBKGj5TmO1HJIPziC/e/?= =?us-ascii?q?mE6jnC1kx/DBIL2ySqnKe2POlLbnYKZV919XyA11y8tWoZ1TFOIvOvX2D3HwqJ?= =?us-ascii?q?T9CR0rMhf8l/jiD9dv15g2Q2+DAqaFdqjVtAnbtaoUP+CQadpN637GIP8/6qu2?= =?us-ascii?q?gA=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DrAABhgZ5aly0bGNZcH4M1KmlwKI5sj?= =?us-ascii?q?QWDGJQ0ghUKI4UNAoMAITYWAQIBAQEBAQECARIBAQEBAQYYBlaCOCKCSgMDJ2J?= =?us-ascii?q?RVxmDRIFXAw2qRTqEcoN3giEFhS6CLoFXhm6BUwQZh0MEmmcJhlSKHQ6JAoV2i?= =?us-ascii?q?X2HWYEuJQKCAU0jFYJ9gjEQDBaBZnYBjCUBAQE?= X-IPAS-Result: =?us-ascii?q?A0DrAABhgZ5aly0bGNZcH4M1KmlwKI5sjQWDGJQ0ghUKI4U?= =?us-ascii?q?NAoMAITYWAQIBAQEBAQECARIBAQEBAQYYBlaCOCKCSgMDJ2JRVxmDRIFXAw2qR?= =?us-ascii?q?TqEcoN3giEFhS6CLoFXhm6BUwQZh0MEmmcJhlSKHQ6JAoV2iX2HWYEuJQKCAU0?= =?us-ascii?q?jFYJ9gjEQDBaBZnYBjCUBAQE?= X-IronPort-AV: E=Sophos;i="5.47,431,1515456000"; d="scan'208";a="10176198" X-IronPort-Outbreak-Status: No, level 0, Unknown - Unknown Received: from updc3cpa06.eemsg.mail.mil ([214.24.27.45]) by emsm-gh1-uea11.NCSC.MIL with ESMTP; 06 Mar 2018 11:58:28 +0000 X-EEMSG-check-005: 0 X-EEMSG-check-006: 000-001;80965e24-e4fd-4181-818e-270afd4c139a Received: from localhost.localdomain (localhost [127.0.0.1]) by UPDCF3IC04.oob.disa.mil (Postfix) with SMTP id 3zwZzl44Dkz63cH for ; Tue, 6 Mar 2018 11:58:27 +0000 (UTC) Received: from UPBD19PA02.eemsg.mil (unknown [192.168.18.3]) by UPDCF3IC04.oob.disa.mil (Postfix) with ESMTP id 3zwZzl3Gn0z63cK for ; Tue, 6 Mar 2018 11:58:27 +0000 (UTC) Authentication-Results: upbd19pa02.eemsg.mail.mil; dkim=none (message not signed) header.i=none X-EEMSG-check-008: 286050605|UPBD19PA02_EEMSG_MP2.csd.disa.mil X-EEMSG-check-001: false X-EEMSG-SBRS: 5.2 X-EEMSG-ORIG-IP: 66.187.233.73 X-EEMSG-check-002: true X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0CuAAAlgZ5amEnpu0JcH4M1gRNwKI5skB2UNIIVCiOFDQKDITYWAQIBAQEBAQECEwEBAQEBCAsLBiguhSQDAydiUVcZg0SBVxCqRTqEcoN3giEFhS6EBYZugVMEGYdDBJpnCYZUih0OiQKFdol9h1mBLiUCggFNIxWCfYIxEAyBfD83AYwlAQEB X-IPAS-Result: A0CuAAAlgZ5amEnpu0JcH4M1gRNwKI5skB2UNIIVCiOFDQKDITYWAQIBAQEBAQECEwEBAQEBCAsLBiguhSQDAydiUVcZg0SBVxCqRTqEcoN3giEFhS6EBYZugVMEGYdDBJpnCYZUih0OiQKFdol9h1mBLiUCggFNIxWCfYIxEAyBfD83AYwlAQEB Received: from mx3-rdu2.redhat.com (HELO mx1.redhat.com) ([66.187.233.73]) by upbd19pa02.eemsg.mail.mil with ESMTP; 06 Mar 2018 11:58:26 +0000 Received: from smtp.corp.redhat.com (int-mx04.intmail.prod.int.rdu2.redhat.com [10.11.54.4]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.redhat.com (Postfix) with ESMTPS id 927D2404085A for ; Tue, 6 Mar 2018 11:58:25 +0000 (UTC) Received: from localhost.localdomain.com (unknown [10.43.12.26]) by smtp.corp.redhat.com (Postfix) with ESMTP id 37CF52026DFD for ; Tue, 6 Mar 2018 11:58:25 +0000 (UTC) X-EEMSG-check-009: 444-444 From: Vit Mojzis To: selinux@tycho.nsa.gov Date: Tue, 6 Mar 2018 12:58:06 +0100 Message-Id: <20180306115808.17470-2-vmojzis@redhat.com> In-Reply-To: <20180306115808.17470-1-vmojzis@redhat.com> References: <20180306115808.17470-1-vmojzis@redhat.com> X-Scanned-By: MIMEDefang 2.78 on 10.11.54.4 X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.5.16 (mx1.redhat.com [10.11.55.5]); Tue, 06 Mar 2018 11:58:25 +0000 (UTC) X-Greylist: inspected by milter-greylist-4.5.16 (mx1.redhat.com [10.11.55.5]); Tue, 06 Mar 2018 11:58:25 +0000 (UTC) for IP:'10.11.54.4' DOMAIN:'int-mx04.intmail.prod.int.rdu2.redhat.com' HELO:'smtp.corp.redhat.com' FROM:'vmojzis@redhat.com' RCPT:'' Subject: [PATCH 1/3] libsemanage: remove access() check to make setuid programs work X-BeenThere: selinux@tycho.nsa.gov X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Security-Enhanced Linux \(SELinux\) mailing list" List-Post: List-Help: Errors-To: selinux-bounces@tycho.nsa.gov Sender: "Selinux" X-Virus-Scanned: ClamAV using ClamSMTP access() uses real UID instead of effective UID which causes false negative checks in setuid programs. Remove redundant access() checks Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1186431 Signed-off-by: Vit Mojzis --- libsemanage/src/direct_api.c | 7 ------- libsemanage/src/semanage_store.c | 17 ++++++++--------- 2 files changed, 8 insertions(+), 16 deletions(-) diff --git a/libsemanage/src/direct_api.c b/libsemanage/src/direct_api.c index 88873c43..b7899d68 100644 --- a/libsemanage/src/direct_api.c +++ b/libsemanage/src/direct_api.c @@ -148,9 +148,6 @@ int semanage_direct_connect(semanage_handle_t * sh) if (semanage_create_store(sh, 1)) goto err; - if (semanage_access_check(sh) < SEMANAGE_CAN_READ) - goto err; - sh->u.direct.translock_file_fd = -1; sh->u.direct.activelock_file_fd = -1; @@ -398,10 +395,6 @@ static int semanage_direct_disconnect(semanage_handle_t *sh) static int semanage_direct_begintrans(semanage_handle_t * sh) { - - if (semanage_access_check(sh) != SEMANAGE_CAN_WRITE) { - return -1; - } if (semanage_get_trans_lock(sh) < 0) { return -1; } diff --git a/libsemanage/src/semanage_store.c b/libsemanage/src/semanage_store.c index 936e6495..4bd1d651 100644 --- a/libsemanage/src/semanage_store.c +++ b/libsemanage/src/semanage_store.c @@ -538,7 +538,6 @@ char *semanage_conf_path(void) int semanage_create_store(semanage_handle_t * sh, int create) { struct stat sb; - int mode_mask = R_OK | W_OK | X_OK; const char *path = semanage_files[SEMANAGE_ROOT]; int fd; @@ -557,9 +556,9 @@ int semanage_create_store(semanage_handle_t * sh, int create) return -1; } } else { - if (!S_ISDIR(sb.st_mode) || access(path, mode_mask) == -1) { + if (!S_ISDIR(sb.st_mode)) { ERR(sh, - "Could not access module store at %s, or it is not a directory.", + "Module store at %s is not a directory.", path); return -1; } @@ -580,9 +579,9 @@ int semanage_create_store(semanage_handle_t * sh, int create) return -1; } } else { - if (!S_ISDIR(sb.st_mode) || access(path, mode_mask) == -1) { + if (!S_ISDIR(sb.st_mode)) { ERR(sh, - "Could not access module store active subdirectory at %s, or it is not a directory.", + "Module store active subdirectory at %s is not a directory.", path); return -1; } @@ -603,9 +602,9 @@ int semanage_create_store(semanage_handle_t * sh, int create) return -1; } } else { - if (!S_ISDIR(sb.st_mode) || access(path, mode_mask) == -1) { + if (!S_ISDIR(sb.st_mode)) { ERR(sh, - "Could not access module store active modules subdirectory at %s, or it is not a directory.", + "Module store active modules subdirectory at %s is not a directory.", path); return -1; } @@ -624,8 +623,8 @@ int semanage_create_store(semanage_handle_t * sh, int create) return -1; } } else { - if (!S_ISREG(sb.st_mode) || access(path, R_OK | W_OK) == -1) { - ERR(sh, "Could not access lock file at %s.", path); + if (!S_ISREG(sb.st_mode)) { + ERR(sh, "Object at %s is not a lock file.", path); return -1; } }