From patchwork Thu Mar 29 03:40:02 2018 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yuli Khodorkovskiy X-Patchwork-Id: 10314379 Return-Path: Received: from mail.wl.linuxfoundation.org (pdx-wl-mail.web.codeaurora.org [172.30.200.125]) by pdx-korg-patchwork.web.codeaurora.org (Postfix) with ESMTP id 0AD7760353 for ; Thu, 29 Mar 2018 03:41:49 +0000 (UTC) Received: from mail.wl.linuxfoundation.org (localhost [127.0.0.1]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id F13712A1F3 for ; Thu, 29 Mar 2018 03:41:48 +0000 (UTC) Received: by mail.wl.linuxfoundation.org (Postfix, from userid 486) id EF8382A1EE; Thu, 29 Mar 2018 03:41:48 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on pdx-wl-mail.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-4.3 required=2.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID, DKIM_VALID_AU, FREEMAIL_FROM, RCVD_IN_DNSWL_MED autolearn=ham version=3.3.1 Received: from ucol19pa09.eemsg.mail.mil (ucol19pa09.eemsg.mail.mil [214.24.24.82]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id 3FD272A272 for ; Thu, 29 Mar 2018 03:41:03 +0000 (UTC) X-IronPort-AV: E=Sophos;i="5.48,375,1517875200"; d="scan'208";a="662922938" Received: from emsm-gh1-uea10.ncsc.mil ([214.29.60.2]) by ucol19pa09.eemsg.mail.mil with ESMTP/TLS/AES256-SHA; 29 Mar 2018 03:41:02 +0000 X-IronPort-AV: E=Sophos;i="5.48,375,1517875200"; d="scan'208";a="10141117" IronPort-PHdr: =?us-ascii?q?9a23=3AgvJoFhGNQHrLjtW8tmL70J1GYnF86YWxBRYc79?= =?us-ascii?q?8ds5kLTJ7+ocy5bnLW6fgltlLVR4KTs6sC17KN9fi4EUU7or+5+EgYd5JNUx?= =?us-ascii?q?JXwe43pCcHRPC/NEvgMfTxZDY7FskRHHVs/nW8LFQHUJ2mPw6arXK99yMdFQ?= =?us-ascii?q?viPgRpOOv1BpTSj8Oq3Oyu5pHfeQpFiCazbL9oMBm6sRjau9ULj4dlNqs/0A?= =?us-ascii?q?bCrGFSe+RRy2NoJFaTkAj568yt4pNt8Dletuw4+cJYXqr0Y6o3TbpDDDQ7KG?= =?us-ascii?q?81/9HktQPCTQSU+HQRVHgdnwdSDAjE6BH6WYrxsjf/u+Fg1iSWIdH6QLYpUj?= =?us-ascii?q?us9adrTALjhjkBOTA37WrbjtV8gL9HrB6koRF03ozab5yPNPdmfq3TY90US2?= =?us-ascii?q?lGUMlTWSxPH5u8YokSA+cPI+lYtJLwq0cSoRakGQWhHv/jxiNOi3Tr3aM6ye?= =?us-ascii?q?MhEQTe0QMiAtIOtHXUp8jwOqcSVuC60a7IzS/Ab/NRxzf984vIchEhoPqRWr?= =?us-ascii?q?9xccnRyUkoFwzYiVWdsoPlPzaP2eQMt2iX9fZvVeWqi2M+rQx6vzuhxt80h4?= =?us-ascii?q?XUiY8YxUrI+CVkzIovO9G1R1B3bcS5HJdItSyXNpF6Tt4+T210oio216AKtY?= =?us-ascii?q?KhcCQX1pgqxxjSYOGdfYeS+BLsTuORLC99hHJiZb2wmQ6/8VOlyu3gTsm010?= =?us-ascii?q?tKrjZdntnMqH8N0xvT59CbSvRn5Eeh2CuP1xvJ5uFYIUE7iarbK5k7zr42ip?= =?us-ascii?q?UTqljMEjXzmEX3iK+abkQk+u625OT7erjqu5CROoBuhgz+L6gigNKzDOsmPg?= =?us-ascii?q?QUQmSX4eG826fi/U39TrVKlPo2kqzBvZDBO8sboq+5AwlI0ocs8hqwFDCm0M?= =?us-ascii?q?kenXYbMl1FYwmKj5TpOl7SIPD4Cu2zg1K3kDhx3fzGMbrhAovVInjZjLjhZa?= =?us-ascii?q?p961JbyAcrz9Bf4JRUBasdIPLzQEDxssfVDh0+MwyyxuboEs591p8AVmKVGa?= =?us-ascii?q?+VKqTSsUWH5ug3OemDeJcVuCrhK/gi//Puj305lkUBcqmqxpsXb3a4HvV4I0?= =?us-ascii?q?iCb3rshsoBEGgRsQojSuzqlECCXSRUZ3aoUKI2/is7B56+DYffWoCth6SM3D?= =?us-ascii?q?+lEZJNeG9GDFGMEWvvd4ifWvcDdjydLdF7njwDT7ihRJcr1Quyuw/i17pnMu?= =?us-ascii?q?3U9zUFupLk0th14fDcmg829Tx1FMmSyX+CT3tznm8SQD82xq9/q1Rnylifya?= =?us-ascii?q?h4n+BYFdtL6vxUTgc1L4TcwvdmBND1XwLOYs2GSE26Qtm8BzE+UM4xyccUY0?= =?us-ascii?q?lhA9WikgzD3y2yDr8UkbyLGII78qbC0Hj0Ocl912zG1ak6glkhWstAK2umhq?= =?us-ascii?q?tl+AjSA47GiEKZlqmweaQbxi7N+3+JzXCSs0FATA5wTaLFUGgfZ0rXqtT54F?= =?us-ascii?q?jPT7qqCbg+MwtBz9SOKq1QZd3zjlVGRenjN8rEb2K3hWiwGQ6CxqmQY4ryZ2?= =?us-ascii?q?UdwCLdBVAanAAL53mGLwk+Bjy6rmLGFjNuD1PvY1j08el6sny0UlE7wxuNb0?= =?us-ascii?q?172Lq/4gQViuCES/MPwrIEvz8sqjt1HFa52tLZFcCAqhFvfKpCfNw9501H2n?= =?us-ascii?q?jBtwxnOZygLb5tiUICcwhtuEPuzRp3AJ1akcc2tHMq0BZyKaWA3VNPbTOXx5?= =?us-ascii?q?bwNaHWKmnp5x2vbrbW2lDH3NaN9KYP8+40q1L5vAGmDkAi6Wlo08FJ03uA4Z?= =?us-ascii?q?XHFAkSXojyUkYw6hh3vLLabTM+54PTyH1gK660siXN29gxHusq1g6gf8tDMK?= =?us-ascii?q?ODDAL9CdAVB9KvKOM0gVikdQgLM/xX9KIuOMOmbfSG0raxPOl8hDKmkXhH4I?= =?us-ascii?q?dl302Q7SV8TvDH340Zw/CY2QuKTCz8g0ugss/pn4BEeTASEXClxSjiGoFRer?= =?us-ascii?q?V4fZwXBme2P8232tJ+iob3W3FF6VGuHFwG2MqmeBaIaVzywxFQ31wNoXO7gS?= =?us-ascii?q?u40yB0kzYxo6qE0izO2ePidAEbOmNQX2lii1DsIIaxj98AWkikdQ4pmwW55U?= =?us-ascii?q?zi3ahUuLx/L3XPQUdPZyX3IXttUq+strWcec5P84glsTtJX+Smel+aV7v9rw?= =?us-ascii?q?Ed0yP5EGtU3Co7eC2yupXlgxx6j3qQLGhyrHXFZcFwwg3f6MbASv5R2ToGQi?= =?us-ascii?q?Z4hCLTBli9Odmm58+Ul5DZvuC5TWKhWYVZcTP3woOYqCu7+WpqDAW7n/Cygd?= =?us-ascii?q?3nDRE20TTl2NluVCXIqgv8Y4bw2qShKeJnf09oBF7g5MphAI1+lJU/hI0I03?= =?us-ascii?q?gAmpqV5WYHkXv0MdhDw6L+a34NRToVzN7P/Afl30NiI2mSx4LkSnqd2dFtZ9?= =?us-ascii?q?6gYmMZwig99dxFCL+I7LxYmit4ulm4ohzXYfhmhTodyuUh6HgBg+EPpgUt0j?= =?us-ascii?q?+RArcIHUlXJSbsjQiH78iirKVLY2aiaaCw21BjndClEr6CuhtTWHDlepg8By?= =?us-ascii?q?999dh/MEnS333p8YHoYsLQbdUOth2OjxjPkeZVKJUrlvoFmyVrI2T9smM5y+?= =?us-ascii?q?QjlxxhwYm6vJSbK2Vq5K+5HBhYOSDuasMN/DHikKZektyQ34+xApVrAi8LU4?= =?us-ascii?q?fwTfK0DDISsuzqNx6UHz0hrneWAqbQHQ6D6EZmtn7PHYqkN3eNKHke19ViSw?= =?us-ascii?q?GXJFZDjwAMQDU6gpk5GxipxM3hdEd2+Csc5lv/qhtCxOJnKQX/UnvfpAevbz?= =?us-ascii?q?c7VoKTLBxI4QFe/03VK9CR7vpvHyFE+Z2stAKNJXadZwRUCmEJX1eJB179Mb?= =?us-ascii?q?az4tnA6fKXBvKkL/vJY7WBt/BRV+uSyZKoyItm8C6GNt+TMXl6E/07xk1DUG?= =?us-ascii?q?hkFMvFnjUPTCoXlz7QY8OAuhez5Dd3rsG+8fTsXgLj/42PBKVOMd934RC5nb?= =?us-ascii?q?+DN/KMhCZ+MTtY2IkMymHVx7gExlESjT1udz62EbkbryHCUKfQlrVQDx4BZC?= =?us-ascii?q?N5LNFI4L4k3glRJc7bjcv41rhijvEvE1dFTUfsms+oZcwQOGG9KF3HBEeNNL?= =?us-ascii?q?ucIz3E38D3brm4SbFKi+VUrRKwsy6BE0D/JjSDiyXpVxe3PO5Xly6XOxheuI?= =?us-ascii?q?CmchZxEmjvVsnmZQOnP9Ntlj0537k0hnLMNW4BPjlxaF9Cr72K7SNFmfVzAW?= =?us-ascii?q?JA4WB5LemfnCaZ6fPUKpEMsftkGi50jf5V4Gwmy7tJ6yFJXPp1mCrWrt5qvV?= =?us-ascii?q?6mifKCxSB5XxpUrTZHnoWLvV9tOa/B7JlPRW7E/A4R7WWXExkFvNplCtLou6?= =?us-ascii?q?BW0dXAibz8JyxD893O+8sQHc/UKNiIMHA5KxrmBCbUDBcZTT6sLWzQnUNdn+?= =?us-ascii?q?uM9nKLtZU6rYDsl4QISr9eTlM1F/caBV9iHN0NOpt3WSkkkbGDhs4S+XW+tA?= =?us-ascii?q?XRRNldvp3fSvKSBvDvJCyDjblDZhoH37X4Ip8JNo38xUNiaUJ3k5jNG0rVQd?= =?us-ascii?q?9CuDZhbhMurEVL7nd+UnU521j5ZQO1/H8TCfm0kwY0igt+YeUt7DDs41M2Jl?= =?us-ascii?q?rWuiQ9i0wxmdT5gTCLbjH9NqCwXZtZCyDsrUg+Lov7QxppbQ21hUFkMinLSK?= =?us-ascii?q?hVj7Z7dmBrjxTcuYdVFv5aVq1EYx4QyeuRZ/o2zVRWsj+nylNf5evZFZtikx?= =?us-ascii?q?MncYSyoHJbxQ1sdsQ1KrDQJKdS1VdQh7iOsTKv1uA/2A8ePVgC8WOIdC4Opk?= =?us-ascii?q?MIKqEsJzC08ex09QyChzxDdXARWPUwvPJq914yO/+bwi36yb5DMEexNuKEL6?= =?us-ascii?q?yHp2fAiNSIQlIs1kIIjUVF+6Z50ds7eUqOS08v1KeRFwgONcfaLQFVaNBS+2?= =?us-ascii?q?bVfSePtuXA2p11P4OgFuzySu+OrqkUiFq+HAk1B4QM8tgBHp603UHDM8jnKL?= =?us-ascii?q?8FyRMw5AXkP1iKEPNJeBeXnzgduMG/0IV73Y9DKTEBGW99Kzm45q7Lpg82h/?= =?us-ascii?q?qORMs2YnYfXosDKnI2WM27ljVEsHRBDDi4yPkWxBKE7zDiuiTaFCP8YMZ7ZP?= =?us-ascii?q?eIeRNsD8m79i8786i3lVHY7I3RJ2T6NNRkvd/P7/kVqo2cBPNVV7Z9tV7Qm4?= =?us-ascii?q?dFR3CwVW7AD8K1LYDqa4Ywddz0Fmq6Ulunhj0uUcjxOs2gIbKVjgH2W4lUqp?= =?us-ascii?q?Kb0yo5Nc69DD0eHA1wp+4b7qJmeQIDe4Y7YQLvtwkmLay/JgaY3cmuQ2aqLT?= =?us-ascii?q?tWVOFRw/ynabJN0yciafS3x2cnTpE/0+a461UNRI0QghHY2/mje5FUUTLvFX?= =?us-ascii?q?xFZwXPuS05mnB9OeYw2Ogw3AjFvkUbMzCPcOxpaXJLv8sgBVyMPXp2CnA0R1?= =?us-ascii?q?iGjYrM+gSsxawd/zNBn9ZI1u1IqGL+sYXFYDKrQ6OmsonVszA6Ytg4vaJxNY?= =?us-ascii?q?3jIs2JtJPanzzfQ5nQshGLUCGgDfpan8JcICRGT/lUgWslI9AJuZJd6UotUc?= =?us-ascii?q?czP7JOBLMwqbCqaDpkCC8SwjUaV46b3TwNnPmz1KXAmheXapQiPwQOsI9ejd?= =?us-ascii?q?sFTy52fiQeqbemV4rMjW+ESXYEIBsS7QRK6wINjYFxcfrj4IXUSJ9MzCNWrO?= =?us-ascii?q?9vUifREJln6Uf7QHmMgVfkUPWhj/Cp3QVKwfL01dkbXARwCVJTxuZRkksoJq?= =?us-ascii?q?p6K6wXvo7NqT+Ha1/1vHjqyOu9P1lRyMvUd1LiAIrCr2r8XTUW+WcISo9X1H?= =?us-ascii?q?HfCZMSnhJjZ6YxuVVMJpqqekXl6jwlxoRpHqW4Wtuxy1Yjs3kGWz+gE8BdBO?= =?us-ascii?q?F+rFLXRDplboi3qJXiPpVfWXNQ9IGYq1hCikltNTC2yYZEIcFX/jEMRCRPoS?= =?us-ascii?q?mavNaqSM1Mw9V2AIUIIthioHryBb1LOICJo3Iovrzg1GXZ9yo7sFegyzW5A7?= =?us-ascii?q?W4QP5B/20CBgUpIHyTqksoD+Qy6Wrd707Csktq8OdBGriAk1h+rCx7Hp9QGj?= =?us-ascii?q?ZDzWqlIEhrTHlar+VaL7zYc9BBTPYvZB+gIRg+GOU60EyO+EF7gW32Yzdutg?= =?us-ascii?q?dA/SDSQRU0XzEPgrjxgT0ett2nOTgCRp1TYzUuczvJJgCGlS1ZpxtQd0ZqW5?= =?us-ascii?q?UFDdlf4LEbwZFY/szcRkawMSsFRgBtNhok0fpDkk5OqF+Ydj7AAgqob/nPrg?= =?us-ascii?q?Z6fcOWrM63Mvv14htIioT6v+8m7akDQWOpmRG1S9DEs4D8rsGKtleJdKrgK+?= =?us-ascii?q?28emPBQyLRghCsnrokFJ7K/zXJMAVHNZZ6z2YkYYL7Bm7PJxhGILgbJ0VDX6?= =?us-ascii?q?BgddpGuvxaZ9NjeKsR5a9tHAyISQ3yF4G0sflGKkrTRS7EICWf8+y/pobT4q?= =?us-ascii?q?LBSeT6YcyM3XnHSbptPphm8Tn7B6vq0YhG90rzwPht8kd6RkbaMyCdttvuPB?= =?us-ascii?q?gG5M+8eUv+pZ0mASnZAI9un3b3wEFPadYXSTWw8JsE0JNZ9GrwSeVg30jxqu?= =?us-ascii?q?JS7b5k6ZIz479z18e5PqLSKelesU97AxibGgRq+Y8rAGhkXWxRZfURKPjJd6?= =?us-ascii?q?QDkc/us/z3F7AQ6BCN+exWc93HJ0/bmsm4Fz6TVwdJnBsbpj4cNQuc0OSJm6?= =?us-ascii?q?lqRsa5veL5wF4i40CiLh4ay7Bg/YiE+reJpO/Taxve070EV7P3Sczttbssul?= =?us-ascii?q?md5fs+mL4JYGx1bBWtEPIBWc4F2mfg0acqwDouE8PCGrLt4/tDWGw5nz3+gZ?= =?us-ascii?q?B9HlMWGvwOEbqN44tegn8ym/bFOd0ObqBChmGPGAaiEr8G0nOr6i2XIGx/jh?= =?us-ascii?q?HP1RHwT3mz40XtrS9kWyvM0svsklZIVrmtG0heRS2pOVV3sDmXJgrnqML3ub?= =?us-ascii?q?gp7EExKmHksdWNlG29OLNYAcLyP9mcISguq1IRkpIxWtKu2YcBGdq+O9cd6n?= =?us-ascii?q?d+YeXC62mziS9Ov79Hh5bC4sGS4vjXGWKgj6iapriWyjBX1GU3vVYl6t+6Lv?= =?us-ascii?q?HO/dqKQ/a22GkNUydzoQzBXwS6qrbDtVAbJVSL0FvXmIwNJtxZ3Hg52Vv86+?= =?us-ascii?q?c/W98z7xtRFpreaPwevzzzPyH0wVmHadItSiaeyydXHk7yEVRgA6c82Xnwvc?= =?us-ascii?q?zTmnfS+l0oWpFweFb6hRxzFIg3NUUt50UJzSUZDAgNcxebDKuyCkj/KosET0?= =?us-ascii?q?cDYwyd3LemYqc3wVFzwrS36e/Ld+N8G7YCNvZTjw6JhlhbGYsasbYAT7J4el?= =?us-ascii?q?9d8rPXpwf5Boj/RffmiWY/Nf27Q8Bd68AZtGEu4gWhSBq675dM8bIbhIqPdq?= =?us-ascii?q?5ebpjGpNp84Ft/5T4TaixNhwByjxyjXuAGuu/j/tjbvYGs6uavSKYiWeUX+A?= =?us-ascii?q?IpB2RllZfwhk4soc3P3edGVoLVkZj/8BxKI3OSt4bVzR98KfYJK4Kse7pg7G?= =?us-ascii?q?sIJywfJ3IIINqXZOIx4ytzPzXJ511NGNkAZdUGM8rRgQpUkFHmWKlP9srHHV?= =?us-ascii?q?+VE4Fzd8E04GrwzDA664A8Xvzh6D+xIpDf9EpNMuhGjChjm9POvu8VweDdCC?= =?us-ascii?q?IP+3mWdwB1wj+ey5mKE/vw8vmDyMrPV18fAyA4XIFTJDuE+Qy6Seu4j5rpUg?= =?us-ascii?q?aO5c/1np0ybkWQRma+nK4dqKZDDfZAijnn3jhZDo31hfWVs9qq6GdNqlJHEI?= =?us-ascii?q?Jz7QDYF6ReP5V7Pw/4lsqqRkVnGCv/ed/UeQAquOWLx+cA+eN+OFXiZYUDOB?= =?us-ascii?q?IL16r66WZJTgtpULP2v0iZUvgXZNZ9TPPEs21a6YNnK68UJlSdo4bqrjhQol?= =?us-ascii?q?AsHAApcKMwriBddkTWng1aRaj0uLAEigYHX992o0lMFnysOG4k4TrIS7hVhr?= =?us-ascii?q?GLCPMJ6jWTUrAOU0JwPyNxRxO135tvdKWtnfBDqW5GhSR9oP4r0zN6Xhe8vz?= =?us-ascii?q?Pjp74V0zI65L64rCkBuWBCTuiGlifICFZDzPcNjaoHCXbt81+8YH4FbITs5r?= =?us-ascii?q?lrP8Lg+pc9434nexUsYzUGXfi8CyH3l66HGZKAsNRAhBOWo8XOabizLTQONr?= =?us-ascii?q?Qj1x3sWmJx0g/EnBZn6GELWCmv7Mc4JIWhPsYo3iSoFnbfdFYN+qNGrtD8tF?= =?us-ascii?q?8KTOszbFNu3n9j0syZSSEXQ8zPAWk1hBA+aWpYaJJD9QMaF64wjzeGpqlG5A?= =?us-ascii?q?AUbyvKHYm+/4nQnNvI2WMjQttwwWLWvKKFjIsw0HJ5g9N08jKOuHMKeuzfV8?= =?us-ascii?q?9jHGP+1p9byePkfPWtruEHR5d6yLS7TvANLNOv+W2o15V2QkWl3KgRH0KlMO?= =?us-ascii?q?8fwbfWSyOlSWyeWeSWfGmAhjI5Mk/p5Rm0NV06c8ZKoFU7MuvFnJJckBfhUb?= =?us-ascii?q?xsTCWKuVDb1HAjMf8ddw8uvYeoYRAFTO4QZ+iaIugj2+M+CFoKb3DXGSt2Cu?= =?us-ascii?q?m2sUOinYRhPHVg+0r6a/z38g/6KNuSBgUEEYnCo55z4/O6RWWBNmR7wR1vOk?= =?us-ascii?q?l06+ffF1Mstu9Tc5aRgcLch9Jl3u4Zb/1tKzEyusYPmoJ/7omZyMWKcRTWzp?= =?us-ascii?q?boP9HVo+OYDubZz0swf2FVTLsZbRny54UgMd4zQ6fTEqdBvRQAGag6R4QsN3?= =?us-ascii?q?z/9KFxMAx+cw3caa+qgsb0vOKLZ5pVp3jQ7l4qKifTpQEDmbSISllgYpSrgW?= =?us-ascii?q?jiCIwhTTJG6dt2A11pG5UcNdkHql+WHpqV0IK7jNO24UB9pfQJsLu4XuHJ1N?= =?us-ascii?q?O12K1+WpFb4QqAOzOHV/ojuVhskunn2qSI6ZL2E863PIpcDrIpS3PZarLAAo?= =?us-ascii?q?S0Iy6PPcS5YUNd7rqAy+0oAAiaYySgDrKP7XPiOfhh+kp9z4V5eKzWzTh+it?= =?us-ascii?q?OT1NjzYjRDrzy45T6SNZRZ5UDXH+GWQR9OSPSE/WokVa0aZIf57qEPZPQtxd?= =?us-ascii?q?Gd50946zFP?= X-IPAS-Result: =?us-ascii?q?A2AJAgCgX7xa/wHyM5BeHAEBAQQBAQoBAYMWKANWeiiLX?= =?us-ascii?q?F6MIoMDklGBcRQYiHshNBgBAgEBAQEBAQIBaiiCOCSCSgMDAQIkGQEbHgIBA?= =?us-ascii?q?gkBAQUQMwgDAR0CEQEFARwZBYMygT4BAwgNA59tPIxuFgUBF4JvBX1kgWsKG?= =?us-ascii?q?SYNVVeCIQIGEodNgVQ/hl+BaYEDhGggAoxQijcsCIsugnELhy2FBCuJIoYEB?= =?us-ascii?q?gIJBw8hgQQcOIFScBVrghKCFI5ZT4t3AiUHghgBAQ?= Received: from tarius.tycho.ncsc.mil ([144.51.242.1]) by EMSM-GH1-UEA10.NCSC.MIL with ESMTP; 29 Mar 2018 03:41:01 +0000 Received: from prometheus.infosec.tycho.ncsc.mil (prometheus [192.168.25.40]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id w2T3ePqb011824; Wed, 28 Mar 2018 23:40:33 -0400 Received: from tarius.tycho.ncsc.mil (tarius.infosec.tycho.ncsc.mil [144.51.242.1]) by prometheus.infosec.tycho.ncsc.mil (8.15.2/8.15.2) with ESMTP id w2T3eJgb033891 for ; Wed, 28 Mar 2018 23:40:19 -0400 Received: from goalie.tycho.ncsc.mil (goalie [144.51.242.250]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id w2T3eMdE011820 for ; Wed, 28 Mar 2018 23:40:23 -0400 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A1CSAAAVX7xaly0YGNZeHQEBBQELAYMWK?= =?us-ascii?q?Fl6KItcXowigwOSUYF6C4UEAoQNITQYAQIBAQEBAQECEwEBAQEBBhgGhX0DAyc?= =?us-ascii?q?ZARseAwwGEDshAhEBBQEcGYM3gT4BAwgNA59tPIxuFgUBF4JvBX1kgWsKGSYNV?= =?us-ascii?q?VeCIQIGEodNgVQ/hl+BaYEDhGggAoxQijcsCIsugnELhy2FBCuJIoYEBgIJBw8?= =?us-ascii?q?hgQQcggpwFWuCEoIUGhqOJU+LdwIlB4IYAQE?= X-IPAS-Result: =?us-ascii?q?A1CSAAAVX7xaly0YGNZeHQEBBQELAYMWKFl6KItcXowigwO?= =?us-ascii?q?SUYF6C4UEAoQNITQYAQIBAQEBAQECEwEBAQEBBhgGhX0DAycZARseAwwGEDshA?= =?us-ascii?q?hEBBQEcGYM3gT4BAwgNA59tPIxuFgUBF4JvBX1kgWsKGSYNVVeCIQIGEodNgVQ?= =?us-ascii?q?/hl+BaYEDhGggAoxQijcsCIsugnELhy2FBCuJIoYEBgIJBw8hgQQcggpwFWuCE?= =?us-ascii?q?oIUGhqOJU+LdwIlB4IYAQE?= X-IronPort-AV: E=Sophos;i="5.48,375,1517893200"; d="scan'208";a="238029" Received: from emsm-gh1-uea10.ncsc.mil ([214.29.60.34]) by goalie.tycho.ncsc.mil with ESMTP; 28 Mar 2018 23:40:20 -0400 IronPort-PHdr: =?us-ascii?q?9a23=3A+YHiJBCTIN0dahIhtOu2UyQJP3N1i/DPJgcQr6?= =?us-ascii?q?AfoPdwSPv6rsbcNUDSrc9gkEXOFd2Cra4c0KyO6+jJYi8p2d65qncMcZhBBV?= =?us-ascii?q?cuqP49uEgeOvODElDxN/XwbiY3T4xoXV5h+GynYwAOQJ6tL1LdrWev4jEMBx?= =?us-ascii?q?7xKRR6JvjvGo7Vks+7y/2+94fcbglUijexe69+IAmrpgjNq8cahpdvJLwswR?= =?us-ascii?q?XTuHtIfOpWxWJsJV2Nmhv3+9m98p1+/SlOovwt78FPX7n0cKQ+VrxYES8pM3?= =?us-ascii?q?sp683xtBnMVhWA630BWWgLiBVIAgzF7BbnXpfttybxq+Rw1DWGMcDwULs5Xy?= =?us-ascii?q?mp4aV2Rx/ykCoJKj43/n/ZhMJzi6xUohyhqgdjz4LIeoyZKOBzcr/Bcd4cWG?= =?us-ascii?q?FPXtxRVytEAo6kbYQPEu4BPedFpIf4p1sOqgaxBQ62BOPszT9ImGT23a470+?= =?us-ascii?q?UhDArL2wwhH9EOsHTTsdr1M7wfUe+wzKbSzDXDa+la1iv66IjNax0sp+yHU7?= =?us-ascii?q?FoccfJ10UjCgzIgk+OpYHqJT+ZyOsAv3KU4udgTe6iiW8qpxtsrjSz2ssgkJ?= =?us-ascii?q?TFip8Jxlze6Cl13oY4KNulQ0Bhe9GkCoFftySCOot2XMwiR2ZotT40xbAYoJ?= =?us-ascii?q?C1eiYHxYo9yRPDd/CKcZKE7Qz9W+aUOjd4i2hpeLeliBaz9Uis0Oj8Vsiw0F?= =?us-ascii?q?pSrypFlMfDtmwV2hDN98SKReFx8lmu1DqVyQze5ftILE80mKbDLp4u2L8wlp?= =?us-ascii?q?4dsUTZGS/2nV37ja+VdkUk/ein9uPnb67ppp+ZLYB0iwX+Pr4ylcy4BOQ0Kh?= =?us-ascii?q?IOUHSD+eSgyL3j+lX0QK5Ugf0yk6nZto3aJMsAq66lAw5azoYj6xGlAzegy9?= =?us-ascii?q?QXh2MLLF1CeBKZ3MDVPATVLfT5C+qvq0i9mzdsgfbdN/vuBYueAGLEleLQYL?= =?us-ascii?q?J8o21czwY019NY+YlXC6BJdOPwWkj9s/TXCxY4N0q/xOOxW4Y17Z8XRW/aWv?= =?us-ascii?q?zRC6jVq1Ldvrh1ceCReI8Yvir8IPE55vnoyGU0gkIZYbL2gskKY3e8R6V+Kh?= =?us-ascii?q?zHJ3fhh8wOV2IDvw54Se3u2xWOUj9WMm67RLl0pio6B4SvEZrZS8izjaaA0i?= =?us-ascii?q?a2EtweZm1PBl2WV3a9X4qBUvYILimVJ8I=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CSAACgX7xaly0YGNZeHQEBBQELAYM?= =?us-ascii?q?WKFl6KItcXowigwOSUYF6C4UEAoQNITQYAQIBAQEBAQECARIBAQEBAQYYBle?= =?us-ascii?q?COCKCTAMDJxkBGx4DDAYQOyECEQEFARwZgzeBPgEDCA0Dn208jG4WBQEXgm8?= =?us-ascii?q?FfWSBawoZJg1VV4IhAgYSh02BVD+GX4FpgQOEaCACjFCKNywIiy6CcQuHLYU?= =?us-ascii?q?EK4kihgQGAgkHDyGBBByCCnAVa4ISghQaGo4lT4t3AiUHghgBAQ?= X-IPAS-Result: =?us-ascii?q?A0CSAACgX7xaly0YGNZeHQEBBQELAYMWKFl6KItcXowig?= =?us-ascii?q?wOSUYF6C4UEAoQNITQYAQIBAQEBAQECARIBAQEBAQYYBleCOCKCTAMDJxkBG?= =?us-ascii?q?x4DDAYQOyECEQEFARwZgzeBPgEDCA0Dn208jG4WBQEXgm8FfWSBawoZJg1VV?= =?us-ascii?q?4IhAgYSh02BVD+GX4FpgQOEaCACjFCKNywIiy6CcQuHLYUEK4kihgQGAgkHD?= =?us-ascii?q?yGBBByCCnAVa4ISghQaGo4lT4t3AiUHghgBAQ?= X-IronPort-AV: E=Sophos;i="5.48,375,1517875200"; d="scan'208";a="10141112" X-IronPort-Outbreak-Status: No, level 0, Unknown - Unknown Received: from ucol3cpa07.eemsg.mail.mil ([214.24.24.45]) by EMSM-GH1-UEA10.NCSC.MIL with ESMTP; 29 Mar 2018 03:40:20 +0000 X-EEMSG-check-005: 0 X-EEMSG-check-006: 000-001;4ff0b29a-470b-4614-8a27-3abd10d78186 Authentication-Results: ucol19pa16.eemsg.mail.mil; dkim=pass (signature verified) header.i=@gmail.com X-EEMSG-check-008: 455117243|UCOL19PA16_EEMSG_MP14.csd.disa.mil X-EEMSG-SBRS: 2.7 X-EEMSG-ORIG-IP: 209.85.216.195 X-EEMSG-check-002: true X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0CDAABYXrxaf8PYVdFeHAEBAQQBAQoBAYMWgQGBIotcXowigwOSUYF6C4UEAoQNITQYAQIBAQEBAQECEwEBCQsLCCYxhSYDAycZARseAwwGEDshAhEBBQEcGYM3gT4BAwgNn288jG4WBQEXgm8FfWSBawoZJg1VV4IhAgYJAQiHTYFUP4ZfgWmBA4RoIAKMUIo3LAiLLoJxC4cthQQriSKGBAYCCQcPIYEEHIIKcBVrghKCFI5ZT4t3AiUHghgBAQ X-IPAS-Result: A0CDAABYXrxaf8PYVdFeHAEBAQQBAQoBAYMWgQGBIotcXowigwOSUYF6C4UEAoQNITQYAQIBAQEBAQECEwEBCQsLCCYxhSYDAycZARseAwwGEDshAhEBBQEcGYM3gT4BAwgNn288jG4WBQEXgm8FfWSBawoZJg1VV4IhAgYJAQiHTYFUP4ZfgWmBA4RoIAKMUIo3LAiLLoJxC4cthQQriSKGBAYCCQcPIYEEHIIKcBVrghKCFI5ZT4t3AiUHghgBAQ Received: from mail-qt0-f195.google.com ([209.85.216.195]) by ucol19pa16.eemsg.mail.mil with ESMTP; 29 Mar 2018 03:40:18 +0000 Received: by mail-qt0-f195.google.com with SMTP id j26so4898430qtl.11 for ; Wed, 28 Mar 2018 20:40:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:subject:date:message-id:in-reply-to:references; bh=NkPTdJk5dhPj45NtEu6mm8fcZGv656rQhthDJZ2b6Ps=; b=gLjU5l8DjUb6mhEFeyI/gNArjtBLWg/lcEsdVAfvKAe66glwOHrebCQ9VIvk7sTfMj ORV/yTJG+kH4Ifa8dLu22wDFzzWnMDs75PWkrNO8QOI3O6BFh+mkfj3NYWXxdw8IOLsL vzjM9PBLzn1LfJrSuQmWeCSaiThwFEwe9s03sCE0fDPtJ4vkUJgXXiG56w/r0VyCmqbI OESO0yx6dAP5zFHyCw+BhJyU/niUsIFFAWd3LgT7ed3KPm4F2GHknH0syzG0BCCbqdy6 k9IMcZwjtdaXywHcF2EvJuDmzJ7RaQfaIeRMQnL4RxNvwrm88VwjQhyYQQDEYfj7RRVU pGPQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:subject:date:message-id:in-reply-to :references; bh=NkPTdJk5dhPj45NtEu6mm8fcZGv656rQhthDJZ2b6Ps=; b=bImHoeHl60doh3SOwwrkRnKk0yprr86HV1xWc2arSP2dzc3ujnXH8Jjo05DAQj6Xy9 +8oVoqgedtJZFlNfcqlznhmT4g4V+/o38TnP9Ae+Pt7XkQGbNlcntZwNletADdDXVoOV MyOl5Ckp/iS8O+t97ojlPl4YzRTvLbKSQoCExLFpgyhaX+UHPJAvzV6AaB0WUOFknOs3 +GKkLPQKAhk2qR2tlyO/jiVa0NykzT6tN5YpOQ8fxBoRCN7QbUycSw880mXsTOtZSkb+ l7XVH9lj2bOIC63d3Tqhlb2pVlN73nzNX/455B7amDHUVbhvq5CLG/VjozGywrgqpTcd XgTw== X-Gm-Message-State: ALQs6tBd+whKR+xvMR1JhrK3rRvYNeW3+WOTVdn06R1g8XnHrjfX2Yy7 a8bvbC15JATusI8J2WfL+U65aQ== X-Google-Smtp-Source: AIpwx48AvUFTZhpXmbWhTBX5caK/yrsWNrjBv8z2pns/ATQQ/RxkweLUgwfB1MQuJow5LF3IXAwyag== X-Received: by 10.200.48.58 with SMTP id f55mr9141902qte.140.1522294818275; Wed, 28 Mar 2018 20:40:18 -0700 (PDT) Received: from localhost.localdomain (c-76-100-110-125.hsd1.md.comcast.net. [76.100.110.125]) by smtp.gmail.com with ESMTPSA id b10sm3745189qtg.78.2018.03.28.20.40.17 for (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Wed, 28 Mar 2018 20:40:17 -0700 (PDT) X-EEMSG-check-009: 444-444 From: Yuli Khodorkovskiy To: selinux@tycho.nsa.gov Date: Wed, 28 Mar 2018 20:40:02 -0700 Message-Id: <20180329034003.2231-2-ykhodo@gmail.com> X-Mailer: git-send-email 2.14.3 In-Reply-To: <20180329034003.2231-1-ykhodo@gmail.com> References: <20180329034003.2231-1-ykhodo@gmail.com> Subject: [PATCH v2 1/2] libselinux: verify file_contexts when using restorecon X-BeenThere: selinux@tycho.nsa.gov X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Security-Enhanced Linux \(SELinux\) mailing list" List-Post: List-Help: Errors-To: selinux-bounces@tycho.nsa.gov Sender: "Selinux" X-Virus-Scanned: ClamAV using ClamSMTP In permissive mode, calling restorecon with a bad label in file_contexts does not verify the label's existence in the loaded policy. This results in any label successfully applying to a file, as long as the file exists. This issue has two assumptions: 1) file_contexts must be manually updated with the invalid label. Running `semanage fcontext` will error when attempting to add an invalid label to file_contexts. 2) the system must be in permissive. Although applying an invalid label in enforcing gives an error and fails, successfully labeling a file with a bad label could cause issues during policy development in permissive. Instead, as each context is used, verify it is valid before blindly applying the label. If an error with validation occurs in restorecon, application of remaining valid labels will be uninterrupted as before. Signed-off-by: Yuli Khodorkovskiy --- libselinux/src/label.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libselinux/src/label.c b/libselinux/src/label.c index 48f4d2d6..e642a97b 100644 --- a/libselinux/src/label.c +++ b/libselinux/src/label.c @@ -126,7 +126,7 @@ int selabel_validate(struct selabel_handle *rec, { int rc = 0; - if (!rec->validating || contexts->validated) + if (contexts->validated) goto out; rc = selinux_validate(&contexts->ctx_raw);