From patchwork Mon Apr 23 13:30:13 2018 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: David Herrmann X-Patchwork-Id: 10357015 Return-Path: Received: from mail.wl.linuxfoundation.org (pdx-wl-mail.web.codeaurora.org [172.30.200.125]) by pdx-korg-patchwork.web.codeaurora.org (Postfix) with ESMTP id E0CE6601D3 for ; Mon, 23 Apr 2018 13:41:10 +0000 (UTC) Received: from mail.wl.linuxfoundation.org (localhost [127.0.0.1]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id D300328AED for ; Mon, 23 Apr 2018 13:41:10 +0000 (UTC) Received: by mail.wl.linuxfoundation.org (Postfix, from userid 486) id C6EBF28AF5; Mon, 23 Apr 2018 13:41:10 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on pdx-wl-mail.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-5.1 required=2.0 tests=BAYES_00, DKIM_ADSP_CUSTOM_MED, DKIM_SIGNED, FREEMAIL_FROM, MAILING_LIST_MULTI, RCVD_IN_DNSWL_MED, T_DKIM_INVALID autolearn=unavailable version=3.3.1 Received: from ucol19pa09.eemsg.mail.mil (ucol19pa09.eemsg.mail.mil [214.24.24.82]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id F224428AED for ; Mon, 23 Apr 2018 13:41:09 +0000 (UTC) X-IronPort-AV: E=Sophos;i="5.49,318,1520899200"; d="scan'208";a="681383725" Received: from emsm-gh1-uea11.ncsc.mil ([214.29.60.3]) by ucol19pa09.eemsg.mail.mil with ESMTP; 23 Apr 2018 13:40:35 +0000 X-IronPort-AV: E=Sophos;i="5.49,318,1520899200"; d="scan'208";a="12366613" IronPort-PHdr: =?us-ascii?q?9a23=3ALuwoyhHOwFuA2H1LLU8MN51GYnF86YWxBRYc79?= =?us-ascii?q?8ds5kLTJ7+osm7bnLW6fgltlLVR4KTs6sC17KN9fi4EUU7or+5+EgYd5JNUx?= =?us-ascii?q?JXwe43pCcHRPC/NEvgMfTxZDY7FskRHHVs/nW8LFQHUJ2mPw6arXK99yMdFQ?= =?us-ascii?q?viPgRpOOv1BpTSj8Oq3Oyu5pHfeQpFiCazbL9oMBm6sRjau9ULj4dlNqs/0A?= =?us-ascii?q?bCrGFSe+RRy2NoJFaTkAj568yt4pNt8Dletuw4+cJYXqr0Y6o3TbpDDDQ7KG?= =?us-ascii?q?81/9HktQPCTQSU+HQRVHgdnwdSDAjE6BH6WYrxsjf/u+Fg1iSWIdH6QLYpUj?= =?us-ascii?q?us9adrTALjhjkBOTA37WrbjtV8gL9HrB6koRF03ozab5yPNPdmfq3TY90US2?= =?us-ascii?q?lGUMlTWSxPH5u8YokSA+cPI+lYtJLwq0cSoRakGQWhHv/jxiNOi3Tr3aM6ye?= =?us-ascii?q?MhEQTe0QIuBd0OrnXUo8joP6kQT++11rPIzTDZYPNQ3zf29Y/FfQ0hof2WXb?= =?us-ascii?q?J/b9DRyVMqFwzfiFWQr5foPzyQ1usXsmib6/BsWv6oi24isgx8pCWkyMQ0io?= =?us-ascii?q?TRm44YxV/J+T95zYooP9G0VkF2bcC+HJdNry2WKZd6Tt8sTmxtpCk21LgLto?= =?us-ascii?q?S1cSgE1psqwhDSZ+Cbf4SU5x/sSvqeLix6iX9ge7+yhQu9/Eqlx+D+S8W7y1?= =?us-ascii?q?JHoy9En9TOtX0A1Bre4dWdRPRn5EeuwzOP2hjW6uFDPE87i7LWK4Ukwr4sjp?= =?us-ascii?q?oTtlnDHjPulEX2kqCWckIk9/C06+v9eLXmp4KcN5RuhgHiMqUhhsy/AeMiPg?= =?us-ascii?q?gIQ2eb4viz2Kfm/U34RLVGlvw2kq/Hv5DGPckXu6G0DgBP3osj9hqzFSmq3d?= =?us-ascii?q?sGkXUdMV5JYBeHgJLoO1HKLvD4F/C/g1G0nTdw2f/GOrzhApPQLnnMibvuZr?= =?us-ascii?q?F961NayAUv099f/IlZCq0BIf3vWk/xs8bUDhkiMwOu2ernB9J91p0GVWKVHq?= =?us-ascii?q?CZKL/SsUOP5u83IemMY4kVtyzhK/gl/fHui2Q0mV0afamv2JsYcmu4Huh4LE?= =?us-ascii?q?WDenrgmNABEX0FvgAmVuzllEWCUSJPZ3a1R6885DM7B5i6AofAXYCth7qB3C?= =?us-ascii?q?alHpBNaGBGDk2MEHjzeIWZXfcMdD+SLtVmkjweWrirU5Uh2g22tA/m17pnKf?= =?us-ascii?q?LZ+yMZtZLn0dh6+ffTmAo89TNqEsud1HuNQHtsnmMSQD823r5wrlBhyluZ1q?= =?us-ascii?q?h4mfNYH8RJ5/xVSgc6KYLcz+tiBt/vRg3Be9CJSFC6Qtm7GjwxUMw+w8UPY0?= =?us-ascii?q?d8HNWiiArP3yy0DL8Jj7aLHoA78rrA33jtIMZw02vJ1LU7gFk8WcZAKWqmhq?= =?us-ascii?q?tj+AfJHI7Jj1+Vl6C0eqQAxCTN7nuMzXKSvEFEVw59SaXEXHEYZkvQttn540?= =?us-ascii?q?fCQ6avCbQhKAdBz9SNKrFJat3ok1VJWu3vONLAbGKtg22wHwqHxquQbIr2fG?= =?us-ascii?q?UQxCvdCFIenAAV4XmGNBM+Czyko2LGDTxiDEnvYk338eVkr3O7VEA0xRmQb0?= =?us-ascii?q?J9z7q15gIVhfuERvMQxL0EuyAhqyhvEVa+xd3WCN2Apxd7cKVbe9M9709N1X?= =?us-ascii?q?jFuAxlIpygM6dii0YEfAtqpUPu1gt4Cp9bnMcwsHwqyRB+KaWC0FNObzmYx4?= =?us-ascii?q?z/OqXLKmnu+xCic7TW1UzD39uN9acP7fs5p0/lvA63Ckoo629n3MVN03uA+p?= =?us-ascii?q?XKCxIfUYn/UkYt8Bh6vK3abzIm54PS0n1tP6y0vSXE294zAusq1Aqgdc9FMK?= =?us-ascii?q?yYDA/yD9EaB8+2Je0kgVepag4EM/5I9K4vJM6maeWJ2LSwM+Z9mTKql2NH4J?= =?us-ascii?q?py0kiU7SpzVvbI34oZw/GfxgaHUTb8jFOlss/pgoBJfisdEXSlySjjHoJRYb?= =?us-ascii?q?dyfYkTA2e0P8K33sl+h4LqW3NA6l6jBk8J2NOueRqIdVDywQ1Q1UMRoXyogi?= =?us-ascii?q?a4yz10kzczoaqF2yzC2ePidAAIOmRTXmltkU/sIZSoj9AdREWoawkplAC55U?= =?us-ascii?q?rj3KhUuqB/L2jVQUdVcCn7NHpiUrOxtrqEYs5A9IgovT9RUOuifVCQUqT9rA?= =?us-ascii?q?cC0yP/A2tewyg2dyutupX9mxx1lnidI2p0rHvXYsxw3grf68DHRfJL2ToGXi?= =?us-ascii?q?Z4gyHNBlegJ9mp4cmUl5Dbv+C9SW2hUIZTfDLozYyesiu7/mtqDgOjn/ypnd?= =?us-ascii?q?3nCwc62zfh19Z2TSXIsAr8Yo7z2qSiK+1nY01oC0Hk68VgHIF+jpU/hIsL1H?= =?us-ascii?q?gHnZWa42AHkXzpPdVA3qL+cWANSiIVzN7b5wjlwkJjIWyTy4L/SHqd3tNrZ8?= =?us-ascii?q?OmbWMOxiI988dKBb+K7LxCgCR4uUS4rQTMbvh9hDsdz+Uh6GICieETpAUt1j?= =?us-ascii?q?mdAqwVHURAJSzjjQmI79SloapLZWavbbix2FNwnd+7CrGOuAZcWGz2ep06By?= =?us-ascii?q?9/8t1/ME7Q0H308ozkdsPfbdQPth2TlhfNlOZVJ4wsmfoNnypoI3r9vWciy+?= =?us-ascii?q?45kxNhwY26sJKAK2V386KzGgRYOSHtZ8MP5jHtir5TnsOM0ICrGpVuBCkLXI?= =?us-ascii?q?fyQv2yCz8Ss+roNxqVEDIgsHibAaTQERWZ6Eh4s3LFC4qrOG2PJHkF0dViQw?= =?us-ascii?q?GQJEJFgA8KQTo6hYQ2Fga2xMzma0d0/Soe6UL9qhdWzeJoLRb/WH/FpAi0cj?= =?us-ascii?q?c0VISfLB1O4wFE/UfaK9Se7vpoEiFW/52htheNKnCVZwRJC2EGQEqECEziPr?= =?us-ascii?q?a04dnM6e+YBvCxL/HWe7WBtfReV+uUxZKoyoZm5yiDOd6RMXlkDv07xk1DUG?= =?us-ascii?q?t4G8vHhToAVTYblyXXb86UvB284DF4rtij8PT3XwLi/ZCABKBVPdVr+hC2mr?= =?us-ascii?q?uDN/WKiCZiNzlXyokAxWTWx7gb3V4SjTxudja2HLsctS/NVr/QmrRNAx8VcS?= =?us-ascii?q?xzKNBI76U63gVXPs7bkNz13KZijvEpE1dFSUDhmsaxaMMRImG9O1THBECQOb?= =?us-ascii?q?ubOzLE2MD3brm6SbFKi+VUrRKwsy6BE0D/JjSDiyXpVxe3PO5WgyGUJgJet5?= =?us-ascii?q?+mfxZqEWjsUtTmahihP992iT052ro0h3zQOW4bKzh8fFtHrqeM4iNAnvV/B2?= =?us-ascii?q?tB42J5LemDniaV9fPYKpEXsPR1BCR7jPha4HMkxLtW9yxLWPt1mC7OodF0uF?= =?us-ascii?q?GmjvODyjx5XxpSsjxLnp6EvV1+OaXF8ZlNQXTE/BIN7GWIDBQKo9plCsHxtK?= =?us-ascii?q?1Lz9jPlb7zKC1c/N7O+sscHcfUItqdMHU9KRrpBCLUDAwdQD6oNWDfg1JSne?= =?us-ascii?q?qX9n2SoJg6pIbjmIYSSr9bU1w1E+0VBl5jHNMcPJd9RikknqKDjM4U+Xq+qw?= =?us-ascii?q?HcRMNEsZ/dUvKfGvbvKDGCjblYfRQIx6j4LYcSNoHh3UxtdEV6lpzQG0XMRd?= =?us-ascii?q?BNvjFhbggsrUVX7nd+VXM81Fj/agyx4H8eDuW7nh8sigRjZuQt+i/s400pKV?= =?us-ascii?q?vKvicwllc+mcn9izCLbDHxNLuwXZ1RCyfsqkcxNZX7QwBoYgKsmUxkNSzJSK?= =?us-ascii?q?hPgLt6cmBnkgjcuYFAGfREV61LfAcQxe2LZ/UvyVlTtz+oxVFG5eTYEptvjx?= =?us-ascii?q?ElcYS2r3JH1QNjd8A6KrDNJKpTz1hQmqKPsjWu1u8v3A8UP1wN/3+KeC4UpE?= =?us-ascii?q?wIMaErJy6v/ux29wOCnTpCeG8XWvolpPJq61kxO+OazyLvy7RDMFy+N/SDL6?= =?us-ascii?q?OFvGjNjdWITU001kMJkUlF4Ld33Nw/fEqTUkAg0KGeFw8VNcbYLwFacdZS/m?= =?us-ascii?q?DJfSmSqeXN3Y51P4KlG+D0TO+OsaEUgl6kHAcpBIkD88UBH5m2307DN8vnKq?= =?us-ascii?q?AKyQk17gTxOFqFFOhJeA6MkDofuc6/yJ530pVDKT4FBGV8MSO35rHRpgAwm/?= =?us-ascii?q?eMR9Y2bW0cXocdOHI2Rde2myhHsHRcFDO3yP4WyBCe7z/goSTdFCLzYMRlZP?= =?us-ascii?q?qPfxxjFc+29isl86itk1HX6JXfK3v9NdR4td/F8fkaqIqfC/NIUbl9tF/Rm4?= =?us-ascii?q?ZFR3yrV27PFcC6J53rZoYxc9P7EXe6XUa5iz4vSMfxJtmtJLCSgQ70XYZUrJ?= =?us-ascii?q?Wb3Dc7OM+nEDEeGgt/p+EE5KJ4fg0Ne4M1bwPyuQkiMKKyOxuX0tKrQ2mxMz?= =?us-ascii?q?RWVOVfwf+8Z7NJ0yomdvW6x2c4TpEm0+m39lYARIsQgRHEwvasfJJTUTTpGn?= =?us-ascii?q?NHZQXAuy45l2lnNuY9xuc/wRzIsVkAMzCFbuNpcmlEs8s6BVyMPXV8EnA4SE?= =?us-ascii?q?OEjYrf/g6s2Kgf/iVHk9lI0e1FsX3+vp7FbzKvQ6GrqIvavDQ+YtQ8pK1xK4?= =?us-ascii?q?PjKNOctJzChjzfUIXQsgqdXS6/DfVagNtQLzxEQPlJn2ElNtcLuIRb5ko3Ss?= =?us-ascii?q?g+I7tPCLQxqbCxczZkCzAdzTMBXYOawDMCmvu826fdlhqIapsiKgEEsJNYjt?= =?us-ascii?q?seSCN2YyIepK6/V4rNjWOETHYEIBsL5wRW+A0AjpNwfvzi4IfQTZ9MzSJWrO?= =?us-ascii?q?xwUiTVE5ln6Uf7SnuWgFXjT/Whi/Km3QRXzP3209kbXAVwCU9SxupMkUsoMr?= =?us-ascii?q?53IbEKvoHWqj+IaV/6vGX1xeu6I1lRzNbZd0HkAIrArmXwSCsc9mMIRYVX0n?= =?us-ascii?q?HQCYwSkxZlaKYsvFhMIJqpelzk6Dwg2otkBKS3Wt6zx1Y9s3kGQzmlE8BbB+?= =?us-ascii?q?FhqlLXVyVvY4q3p5X9J5VSXmhQ9YWfq1dejkpgKDO2xoRHK85T+D4MQCZAri?= =?us-ascii?q?iHsNu0VsJDxdd8D4UQLddnp3f9BKRENYCNo3Irp7Pvy2XW+zQnvVimwzWzHr?= =?us-ascii?q?O3QPhC/20CAAkpIXqRqlU3Bes27mjS6kzNskxz/+pDHbePg1l+rCp/E5xTCD?= =?us-ascii?q?tEzmyqL1N2THZaqepaM7jVf9ZaQ/YseR+lIwY+GuI+30yV4UF0mm/0YzZsuQ?= =?us-ascii?q?RH+yDSRRU0WDIRgrfqhz0RtN+rNiMdS51VczotdSHFJByHmSpPphZQd1lqW4?= =?us-ascii?q?wFAtZC47wbxZBU/tbYRkmxNSEIRwdiNgUl0fpFiUFMrkOYeTzHDQWycfbDqB?= =?us-ascii?q?p3fd2erMSxNvT24B9Hip/7sOA/76gDW2emlhOzTt/DtIL8q9mKtleUdKjiLe?= =?us-ascii?q?28YHjBTDzSghCsn7skCIPK/yfLOgpBN5Z60WYkYYTmCWPTPxRJPbgbJ01AVa?= =?us-ascii?q?B+c9pGvPtXZ8p5eKYN5a9tBw6IRhL1F4ypt/lKNFHTRS7RLy+Z6OywvZrT7a?= =?us-ascii?q?DBSejnfsGMxWzIQ6R5Ppdg7jn0Bqnl3JRC+kXs3Pdt7UR6RULAMy+fsNTrPh?= =?us-ascii?q?kL69W6dkv+op0pGivbAJF0kHf2x0FAcc8XTzer8JQexpNZ8mz/Sflk0kjpre?= =?us-ascii?q?1d66Vk6ZQt479308u0Ir3SKftCu099HheUHhlq9okqAGVnQWBRY/MeKPDVfa?= =?us-ascii?q?sDlsDiseH3F6sQ6B2O4OxUct7HKk7Om8WlDTGcUxNElh8bqTEGNgucy+KFm6?= =?us-ascii?q?hsRMm5v+f53lwi40OiLh8Gy7Bg/pyE9baJpODJaRvR0bkEVbLwSsP1sLssp1?= =?us-ascii?q?uY5ec4m74WZmx1fwqnHfAZVs4Gw2ftzbsnzSwyHMzeGLLg4uRMV2ojnjLnmZ?= =?us-ascii?q?ByAUkZGu8OEbqM54RekX8ym/bFOd0ObqBChmGPGAamEr8DzH6m8C6XL3dlgx?= =?us-ascii?q?7QyRHwQGWz7FDsoS9+XyTM08/pklBJWbmvGUdSQy2pNFd5sDKOJgXnrsb4tL?= =?us-ascii?q?8u7E4oLmzrqs6CmHGmOLNNEM31PMacLjUspFILkJ0xQcSi1psaGdqmLtYe6n?= =?us-ascii?q?N+bvrC62OziSBBvqNHipHC7cGS5/rYA2Ovj7CAq7WK3jBX0GI0vVYl6tCvLv?= =?us-ascii?q?vO/cGFQ+y012YNSCdyoxPBUASpqrPHr1AVN0uL0F3ImIATJdFWw3041kDg5O?= =?us-ascii?q?g+T9M+7x1eGZzcZ/wepTDyNjz0wUycY94tVSmRzSFXHlTrHll8AqQ833jwvM?= =?us-ascii?q?3Rn3fK51IoXpVwd1DghRFvAIU3M1gt50YLwioDCgUNbRGbDK22CkTlN4QESF?= =?us-ascii?q?MDZQ6B3LekZqc9xVdzza+35O/Pcex8ALIANvlDgQ6IgFhbHZUWvaoFQL1if1?= =?us-ascii?q?9d9ajXphXtCoX8W/jpi2AwNP2vTcxA98AWqWci6B6lRxW88ZdD86obiJeQe6?= =?us-ascii?q?FYY5jDptxz4lx76j4IcixNhBl/gA2jUeAAuu/s/tjbvICv6ua0W6YnX/8X+A?= =?us-ascii?q?QsB2Rik5vwh0guodTQ1+daVo3Vhprw/RtII36Loona1QdzKfYAKoKsZrZg9G?= =?us-ascii?q?4HKzIYJ30QIdqcc+M87DN1MDXP+1xCBdsBZdwEM8rWggBYk1DnVr5V+MraHF?= =?us-ascii?q?+YFohyetsn72ry0j8194UzXvzn6D+sKpDV90tNMO9bjCVwiNLCo/AYwfjVCC?= =?us-ascii?q?gX53mVcQR6wiOGy5mQFvnx/OSMyNfPV1MFHy47SJldJDuc+QO9Quq6iZTpXh?= =?us-ascii?q?mS6sDtnJI0bFiQSWCpnKQZrqZMFvZNiiTl3jdEEID4nPaVs8ex52tWsV1HC5?= =?us-ascii?q?x/7RrfGKVQJp97Iwj3ltG3RkhgASvyYMPUeQQguOqYwucB+Ot/OFH4ZYAFPh?= =?us-ascii?q?II0bT65mRJTgF2Ur75ok6ZXf4NZNthUP7EoXRV6YVuKqAROFidoIfnrixPqF?= =?us-ascii?q?AwAQ8mdKU8rjpEeUnShAdVQbr7uKYcigsAVt50oUpMGWOzOGI94DrKTqZVg7?= =?us-ascii?q?OSCPwS9DWcUKoOX19uMixgXxO/wI9udKexnfBbrmNGmTtwr+M03DxgWBuxoj?= =?us-ascii?q?bsp6YK2TI85LG4qisOtmFfQuWZiSfIBk1JzO4WgqcEF3bi9Vu8bWEbbIv15L?= =?us-ascii?q?loP97g9Icm43Q7bxUuZCgGXeOnCyHrkayHHpaPsNVHhB6WucXOa7CzITIVNr?= =?us-ascii?q?QnxhLpX2J93RTGnBZ07GsLRS2t7NE6K4W5OMYl3jSnFHPadVYN56NJtdX+tU?= =?us-ascii?q?QPTOQoc19hx39j0sefTC0XWMPPA3o1jhQjaWhcfpND8QUaF6g0jTmWpaRG+w?= =?us-ascii?q?AUYCvOEou74IXQmt3I2XYlR9dw2m3WvrGFho8t0HB9nNN06jCBtW8Kd+zcSc?= =?us-ascii?q?BsGWTz1oZDxuziffWirP4IRJFgyLu/TP8IKtOj9neu2JV2Rk+lwawTH164MO?= =?us-ascii?q?8F27faXD6pSWmZWeSQb2iMhC00Mk/o6hmuKV07csBKr1UyMuHanJ5TixXhUa?= =?us-ascii?q?9oRiWXvVLbyXYsPv8adwI3voenfBcHTPAQZ+iaO+cuxPw+CF0Rb37GByd2DP?= =?us-ascii?q?W2sVG1lohhJ3pg+Vn6Yfjq8g3+MtudABoEEYnBoZNq5Py6QH6BOX9nzB1vM0?= =?us-ascii?q?l09/vfG043tuBCb5abhcLQiMhj0e4Za/dtNjUwusUdmoJm9YaZ0cSHfArPzp?= =?us-ascii?q?nsP9HVo/mZA/rZz0gwfGFVTKYZMkvJ4NA+P9gkS/jQEKFfsBA0G6c3WtoiOn?= =?us-ascii?q?33+aUyKxl8ISDLY7HhrsD0p+7DRpZOvXrf6FR4eCvc/R0O0OaxRAp9R5+vjn?= =?us-ascii?q?T2Zps3Q2QS/JVWFhJ6Ed4XSIs7pA29DsvRwfnh0Y245l96tukWsKH5FvHN0p?= =?us-ascii?q?Gj0p5sW4RBuh3ZAQ79L/JAum090qK/j/Lb3d/0AMLmP9YFULseICbJab7DS5?= =?us-ascii?q?22MSnGetn9dEhP76OG3fpnXw+QaiH0U+vOtCCtOPh+p0Ru4oN9devXijcq6r?= =?us-ascii?q?w=3D?= X-IPAS-Result: =?us-ascii?q?A2AzYgDO4N1a/wHyM5BbgyBRA4FbKIokgiaMGIMDkwCBc?= =?us-ascii?q?RIYE4coITYWAQIBAQEBAQECAWscDII1JIJKAwMBAj0BGx0BAgECCQEBBRAzC?= =?us-ascii?q?AMBHQIRAQUBHBkFhHEBAxUBAp4WPI0EBQEXgnAFgWOBZAoZJg1UV4ImAgYSh?= =?us-ascii?q?n58ghOGaYd4ApdHLAiLQ4JyC4c7CoUJK4lLhhACBAIEBQIFDyGBBCMBMIFST?= =?us-ascii?q?SOBAYISgiAXg0WKVG1iAY9KAQE?= Received: from tarius.tycho.ncsc.mil ([144.51.242.1]) by emsm-gh1-uea11.NCSC.MIL with ESMTP; 23 Apr 2018 13:40:33 +0000 Received: from prometheus.infosec.tycho.ncsc.mil (prometheus [192.168.25.40]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id w3NDeSxt032767; Mon, 23 Apr 2018 09:40:30 -0400 Received: from tarius.tycho.ncsc.mil (tarius.infosec.tycho.ncsc.mil [144.51.242.1]) by prometheus.infosec.tycho.ncsc.mil (8.15.2/8.15.2) with ESMTP id w3NDV6Nw061353 for ; Mon, 23 Apr 2018 09:31:06 -0400 Received: from goalie.tycho.ncsc.mil (goalie [144.51.242.250]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id w3NDVBnl032204; Mon, 23 Apr 2018 09:31:12 -0400 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A1AZBQDr3t1alywbGNZbgyBRgV4oiiSCJ?= =?us-ascii?q?owYgwOTAIF4C4RrAoJkITQYAQIBAQEBAQECFAEBAQEBBhgGS4UvAwNAARsdAQM?= =?us-ascii?q?MBhA7IQIRAQUBHBmEdgEDFQECnhM8jQQFAReCcAWDRwoZJg1UV4ImAgYShn58g?= =?us-ascii?q?hOGaYd4ApdHLAiLQ4JyC4c7CoUJK4lLhhACBAIEBQIFDyGBBByCCk0jgQGCEoI?= =?us-ascii?q?gDgmDRYpUbZAtAQE?= X-IPAS-Result: =?us-ascii?q?A1AZBQDr3t1alywbGNZbgyBRgV4oiiSCJowYgwOTAIF4C4R?= =?us-ascii?q?rAoJkITQYAQIBAQEBAQECFAEBAQEBBhgGS4UvAwNAARsdAQMMBhA7IQIRAQUBH?= =?us-ascii?q?BmEdgEDFQECnhM8jQQFAReCcAWDRwoZJg1UV4ImAgYShn58ghOGaYd4ApdHLAi?= =?us-ascii?q?LQ4JyC4c7CoUJK4lLhhACBAIEBQIFDyGBBByCCk0jgQGCEoIgDgmDRYpUbZAtA?= =?us-ascii?q?QE?= X-IronPort-AV: E=Sophos;i="5.49,318,1520913600"; d="scan'208";a="258445" Received: from emsm-gh1-uea10.ncsc.mil ([214.29.60.34]) by goalie.tycho.ncsc.mil with ESMTP; 23 Apr 2018 09:31:11 -0400 IronPort-PHdr: =?us-ascii?q?9a23=3AzXfM8hL3kJMtGc7LvtmcpTZWNBhigK39O0sv0r?= =?us-ascii?q?FitYgeLfrxwZ3uMQTl6Ol3ixeRBMOHs6kC07KempujcFRI2YyGvnEGfc4EfD?= =?us-ascii?q?4+ouJSoTYdBtWYA1bwNv/gYn9yNs1DUFh44yPzahANS47xaFLIv3K98yMZFA?= =?us-ascii?q?nhOgppPOT1HZPZg9iq2+yo9JDffwtFiCChbb9uMR67sRjfus4KjIV4N60/0A?= =?us-ascii?q?HJonxGe+RXwWNnO1eelAvi68mz4ZBu7T1et+ou+MBcX6r6eb84TaFDAzQ9L2?= =?us-ascii?q?81/szrugLdQgaJ+3ART38ZkhtMAwjC8RH6QpL8uTb0u+ZhxCWXO9D9QKsqUj?= =?us-ascii?q?q+8ahkVB7oiD8GNzEn9mHXltdwh79frB64uhBz35LYbISTOfFjfK3SYMkaSH?= =?us-ascii?q?JcUMhRSSJPDICyYYwNAOoPJutUs5XxqkESoRakGQWgGOXiwSJIiH/s2q061v?= =?us-ascii?q?wsHw/c0ww+HtIBrWnfotfrO6cIS+C1ybPHzTPFb/hL3jry9YjIfgohof6SR7?= =?us-ascii?q?Jwa8/RxlMpFwPDlViQponlMCmU1uQJqWSU8+1gVee2hmMhtgp/oSCvy98yho?= =?us-ascii?q?XUiY8Z0E7I+CpjzIorJ9C0UkF2bNG8HJdOqy2WK4V7T8Y+TG12vSs10LMLuZ?= =?us-ascii?q?ClcyUPxpkr2wLTZ+CCfoeW/h3sT+ScLDJ7iX9nZb2yhRO//Eq9xuLnUsS51V?= =?us-ascii?q?dHoyhGn9TPsH0Gygbd5dKdSvRn+0eswTaP2B7X6uFDOU07m7DVJZA/z7M+iJ?= =?us-ascii?q?cdq1jOEjP2lUnskqCZaEAk+vOn6+j9Z7XpvJ6cN4tuhgH7M6QuntSzAeU+Mg?= =?us-ascii?q?cQQ2iW4fqw2KDs8EHjXrlHgec6nrfbvZzAKskWqba1AwpP3YYi7xa/AS2m0N?= =?us-ascii?q?MdnXQfMV1FeAiLj4j3NFHUOvD4CO2wg1KqkDpwyPDGO6fuApTJLnTZjLjher?= =?us-ascii?q?N951ZGyAUv1dBf+45UCrYZLfLoR0Dxr8fVDgM5MgOow+bnD89x1oUFWW2VGK?= =?us-ascii?q?OZP6TSsUGQ7OI1P+aMfJMVuCr6K/U9/P7hk3s5mV4bfam00poac2y4H/R6LE?= =?us-ascii?q?WZZnrgmNEBEXwQsQYkQ+zqj0OCAnZvYCO2XqQh9nQ4BZigAIPrWI+gmvqC0T?= =?us-ascii?q?29E5kQYXpJWX6WFnK9W4yaWvtESC+IOMpolDpMAbShDY8szwurvQn847ViJ+?= =?us-ascii?q?vQvCYfsMSwh5BO++TPmERqpnRPBMOH3jTIFjksxDlaTiIq3K15vU12w0uC1q?= =?us-ascii?q?49mfFDCNhP/KwWADoCGbWH5NRTU4y0Vw/EZdjPTV+nRpOjADViBt4ywtpbe0?= =?us-ascii?q?9mAJ3ilRHM2SO2HqUY36KGHp0686/QnjDxKs9xxmyA1fwJgFwvQ88JPmqjiw?= =?us-ascii?q?=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AIBACX391alywbGNZbgyBRgV4oiiS?= =?us-ascii?q?CJowYgwOTAIF4C4RrAoJkITQYAQIBAQEBAQECARMBAQEBAQYYBksMgjUkAYJ?= =?us-ascii?q?JAwNAARsdAQMMBhA7IQIRAQUBHBmEdgEDFQECngo8jQQFAReCcAWDRwoZJg1?= =?us-ascii?q?UV4ImAgYShn58ghOGaYd4ApdHLAiLQ4JyC4c7CoUJK4lLhhACBAIEBQIFDyG?= =?us-ascii?q?BBByCCk0jgQGCEoIgDgmDRYpUbZAtAQE?= X-IPAS-Result: =?us-ascii?q?A0AIBACX391alywbGNZbgyBRgV4oiiSCJowYgwOTAIF4C?= =?us-ascii?q?4RrAoJkITQYAQIBAQEBAQECARMBAQEBAQYYBksMgjUkAYJJAwNAARsdAQMMB?= =?us-ascii?q?hA7IQIRAQUBHBmEdgEDFQECngo8jQQFAReCcAWDRwoZJg1UV4ImAgYShn58g?= =?us-ascii?q?hOGaYd4ApdHLAiLQ4JyC4c7CoUJK4lLhhACBAIEBQIFDyGBBByCCk0jgQGCE?= =?us-ascii?q?oIgDgmDRYpUbZAtAQE?= X-IronPort-AV: E=Sophos;i="5.49,318,1520899200"; d="scan'208";a="10998739" X-IronPort-Outbreak-Status: No, level 0, Unknown - Unknown Received: from updc3cpa05.eemsg.mail.mil ([214.24.27.44]) by EMSM-GH1-UEA10.NCSC.MIL with ESMTP; 23 Apr 2018 13:31:10 +0000 X-EEMSG-check-005: 0 X-EEMSG-check-006: 000-001;d1b4acde-5f1f-429a-b211-73f7a4a4cdf4 Received: from localhost.localdomain (localhost [127.0.0.1]) by UPDCF3IC16.oob.disa.mil (Postfix) with SMTP id 40V6mM1hDZz2Vp8c; Mon, 23 Apr 2018 13:30:59 +0000 (UTC) Received: from UPDC3CPA04.eemsg.mil (unknown [192.168.18.11]) by UPDCF3IC16.oob.disa.mil (Postfix) with ESMTP id 40V6mL2hpvz2Vp9N; Mon, 23 Apr 2018 13:30:58 +0000 (UTC) Authentication-Results: UPDC3CPA04.eemsg.mail.mil; dkim=pass (signature verified) header.i=@gmail.com X-EEMSG-check-008: 240422660|UPDC3CPA04_EEMSG_MP20.csd.disa.mil X-EEMSG-SBRS: 2.7 X-EEMSG-ORIG-IP: 209.85.128.194 X-EEMSG-check-002: true X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0AYCADr3t1af8KAVdFbgyCCV4okgiaMGIMDkwCBeAuEawKCZCE0GAECAQEBAQEBAhQBAQkLCwgmJQyFIwMDQAEbHQEDDAYQOyECEQEFARwZhHYBAxUBnhU8jQQFAReCcAWDRwoZJg1UV4ImAgYJAQiGfnyCE4Zph3gCl0csCItDgnILhzsKhQkriUuGEAIEAgQFAgUPIYEEHIIKTSOBAYISgiAXg0WKVG2QLQEB X-IPAS-Result: A0AYCADr3t1af8KAVdFbgyCCV4okgiaMGIMDkwCBeAuEawKCZCE0GAECAQEBAQEBAhQBAQkLCwgmJQyFIwMDQAEbHQEDDAYQOyECEQEFARwZhHYBAxUBnhU8jQQFAReCcAWDRwoZJg1UV4ImAgYJAQiGfnyCE4Zph3gCl0csCItDgnILhzsKhQkriUuGEAIEAgQFAgUPIYEEHIIKTSOBAYISgiAXg0WKVG2QLQEB Received: from mail-wr0-f194.google.com ([209.85.128.194]) by UPDC3CPA04.eemsg.mail.mil with ESMTP; 23 Apr 2018 13:30:56 +0000 Received: by mail-wr0-f194.google.com with SMTP id d1-v6so41282672wrj.13; Mon, 23 Apr 2018 06:30:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:in-reply-to:references; bh=MwmycSb2Z3vLqKx7Jk6MaqeWFf7bSrL18ppFc7RjFwU=; b=qBEsFqSVWenEPIPYn9LnsIQugC5F7mYDGObFbtiCtOxwYG92q6+ajHLAtqYJRNt0ZM 3k72A5iwruFIqsOZkAA9TalYM/K9KBOzp/IWiilN/BBvdq6YC1Ke9YY1NQL34wDv0Zao fBoafDF/ebFauww/GmnYxy5vJTIsRPpcOXz2fdqmJkC1aYyfns7bOR8A6eWiGrjzIp4p ztkj8/LdeXJslNCZBEwnYzJKy9rGaWrFbKu4RqROFaE/aEXJu8aqfAixBLMQ++UoMAG3 3azY7ETUHv4FMzIs6VLfyUMPC3SMx818KKNuWZX/UziEIOnxBQgg99hSFcAMe+r5qJyq K4RA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references; bh=MwmycSb2Z3vLqKx7Jk6MaqeWFf7bSrL18ppFc7RjFwU=; b=P9fxq0ZNZiSvZv/9Dr30xD52MTzVdOa4YXAnWmwb9tHBTeWPmotCKHX6HGnOpoHzJL LrX0+huoFPFpTSoHr7weoqt+5vwDZx5NMNaqICEn5vs7ayPiD3hvJzSLRMi9zqh1VgK5 K83d2mvu389feVosMF9F2zgnmRfzt8PoHV4wOga6CaumcT+jQ8syBbiNyZAuC7WKOsCU KjDi4eBk3wgEAuaxLCdCjWxCyRnA2rCuDTca8VhC/oNbty6h2O1Ox8kjOoqMJWE59sZb gtZUGc5d2qHZPFvkQMFPes/l8kk2jVEBTZJsUyyUGo3BRTg5ewdaBJShjlSE1xsn67Wu euIA== X-Gm-Message-State: ALQs6tAVYT/5WO67WdfrJyfnBiSSDa80RGI5YrBws2DZY9ivLfVxye/V gMczKCgTtOeKEF/rOhygtuA= X-Google-Smtp-Source: AIpwx49DLuKS5xxa2oNupuVI7CMu/7HMipNtx8MY8FWsh9OUBEIP0WiUVThiu3dbuuIu50xIikyr2A== X-Received: by 2002:adf:b859:: with SMTP id u25-v6mr17799384wrf.162.1524490256058; Mon, 23 Apr 2018 06:30:56 -0700 (PDT) Received: from david-x1.fritz.box (p200300C2A3FE3000ECB787D771B96788.dip0.t-ipconnect.de. [2003:c2:a3fe:3000:ecb7:87d7:71b9:6788]) by smtp.gmail.com with ESMTPSA id 78sm10262548wmm.19.2018.04.23.06.30.54 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 23 Apr 2018 06:30:55 -0700 (PDT) X-EEMSG-check-009: 444-444 From: David Herrmann To: linux-kernel@vger.kernel.org Date: Mon, 23 Apr 2018 15:30:13 +0200 Message-Id: <20180423133015.5455-2-dh.herrmann@gmail.com> X-Mailer: git-send-email 2.17.0 In-Reply-To: <20180423133015.5455-1-dh.herrmann@gmail.com> References: <20180423133015.5455-1-dh.herrmann@gmail.com> X-Mailman-Approved-At: Mon, 23 Apr 2018 09:39:16 -0400 Subject: [PATCH 1/3] security: add hook for socketpair(AF_UNIX, ...) X-BeenThere: selinux@tycho.nsa.gov X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Security-Enhanced Linux \(SELinux\) mailing list" List-Post: List-Help: Cc: netdev@vger.kernel.org, teg@jklm.no, linux-security-module@vger.kernel.org, selinux@tycho.nsa.gov, David Herrmann , Stephen Smalley , davem@davemloft.net Errors-To: selinux-bounces@tycho.nsa.gov Sender: "Selinux" X-Virus-Scanned: ClamAV using ClamSMTP Right now the LSM labels for socketpairs are always uninitialized, since there is no security hook for the socketpair() syscall. This patch adds the required hooks so LSMs can properly label socketpairs. This allows SO_PEERSEC to return useful information on those sockets. Note that the behavior of socketpair() can be emulated by creating a listener socket, connecting to it, and then discarding the initial listener socket. With this workaround, SO_PEERSEC would return the caller's security context. However, with socketpair(), the uninitialized context is returned unconditionally. This is unexpected and makes socketpair() less useful in situations where the security context is crucial to the application. With the new socketpair-hook this disparity can be solved by making socketpair() return the expected security context. Signed-off-by: David Herrmann --- include/linux/lsm_hooks.h | 8 ++++++++ include/linux/security.h | 7 +++++++ security/security.c | 6 ++++++ 3 files changed, 21 insertions(+) diff --git a/include/linux/lsm_hooks.h b/include/linux/lsm_hooks.h index 9d0b286f3dba..2a23c75c1541 100644 --- a/include/linux/lsm_hooks.h +++ b/include/linux/lsm_hooks.h @@ -717,6 +717,12 @@ * @other contains the peer sock structure. * @newsk contains the new sock structure. * Return 0 if permission is granted. + * @unix_stream_socketpair: + * Check permissions before establishing a Unix domain stream connection + * for a fresh pair of sockets. + * @socka contains the first sock structure. + * @sockb contains the second sock structure. + * Return 0 if permission is granted and the connection was established. * @unix_may_send: * Check permissions before connecting or sending datagrams from @sock to * @other. @@ -1651,6 +1657,7 @@ union security_list_options { #ifdef CONFIG_SECURITY_NETWORK int (*unix_stream_connect)(struct sock *sock, struct sock *other, struct sock *newsk); + int (*unix_stream_socketpair)(struct sock *socka, struct sock *sockb); int (*unix_may_send)(struct socket *sock, struct socket *other); int (*socket_create)(int family, int type, int protocol, int kern); @@ -1919,6 +1926,7 @@ struct security_hook_heads { struct hlist_head inode_getsecctx; #ifdef CONFIG_SECURITY_NETWORK struct hlist_head unix_stream_connect; + struct hlist_head unix_stream_socketpair; struct hlist_head unix_may_send; struct hlist_head socket_create; struct hlist_head socket_post_create; diff --git a/include/linux/security.h b/include/linux/security.h index 200920f521a1..be275deeda10 100644 --- a/include/linux/security.h +++ b/include/linux/security.h @@ -1187,6 +1187,7 @@ static inline int security_inode_getsecctx(struct inode *inode, void **ctx, u32 #ifdef CONFIG_SECURITY_NETWORK int security_unix_stream_connect(struct sock *sock, struct sock *other, struct sock *newsk); +int security_unix_stream_socketpair(struct sock *socka, struct sock *sockb); int security_unix_may_send(struct socket *sock, struct socket *other); int security_socket_create(int family, int type, int protocol, int kern); int security_socket_post_create(struct socket *sock, int family, @@ -1242,6 +1243,12 @@ static inline int security_unix_stream_connect(struct sock *sock, return 0; } +static inline int security_unix_stream_socketpair(struct sock *socka, + struct sock *sockb) +{ + return 0; +} + static inline int security_unix_may_send(struct socket *sock, struct socket *other) { diff --git a/security/security.c b/security/security.c index 7bc2fde023a7..3dfd374e84e5 100644 --- a/security/security.c +++ b/security/security.c @@ -1340,6 +1340,12 @@ int security_unix_stream_connect(struct sock *sock, struct sock *other, struct s } EXPORT_SYMBOL(security_unix_stream_connect); +int security_unix_stream_socketpair(struct sock *socka, struct sock *sockb) +{ + return call_int_hook(unix_stream_socketpair, 0, socka, sockb); +} +EXPORT_SYMBOL(security_unix_stream_socketpair); + int security_unix_may_send(struct socket *sock, struct socket *other) { return call_int_hook(unix_may_send, 0, sock, other);