From patchwork Wed May 9 15:29:04 2018 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Stephen Smalley X-Patchwork-Id: 10389795 Return-Path: Received: from mail.wl.linuxfoundation.org (pdx-wl-mail.web.codeaurora.org [172.30.200.125]) by pdx-korg-patchwork.web.codeaurora.org (Postfix) with ESMTP id 63E2960236 for ; Wed, 9 May 2018 15:28:38 +0000 (UTC) Received: from mail.wl.linuxfoundation.org (localhost [127.0.0.1]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id 5153828C7B for ; Wed, 9 May 2018 15:28:38 +0000 (UTC) Received: by mail.wl.linuxfoundation.org (Postfix, from userid 486) id 4359028F4E; Wed, 9 May 2018 15:28:38 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on pdx-wl-mail.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-5.2 required=2.0 tests=BAYES_00, MAILING_LIST_MULTI, RCVD_IN_DNSWL_MED autolearn=ham version=3.3.1 Received: from ucol19pa09.eemsg.mail.mil (ucol19pa09.eemsg.mail.mil [214.24.24.82]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id 5F0CD28C7B for ; Wed, 9 May 2018 15:28:36 +0000 (UTC) X-IronPort-AV: E=Sophos;i="5.49,382,1520899200"; d="scan'208";a="693637834" Received: from emsm-gh1-uea10.ncsc.mil ([214.29.60.2]) by ucol19pa09.eemsg.mail.mil with ESMTP/TLS/AES256-SHA; 09 May 2018 15:28:35 +0000 X-IronPort-AV: E=Sophos;i="5.49,382,1520899200"; d="scan'208";a="11596909" IronPort-PHdr: =?us-ascii?q?9a23=3AePAGLxUS7Ize0Y7w9JcZd6dbe9/V8LGtZVwlr6?= =?us-ascii?q?E/grcLSJyIuqrYYRGBvqdThVPEFb/W9+hDw7KP9fy4AipYud6oizMrSNR0TR?= =?us-ascii?q?gLiMEbzUQLIfWuLgnFFsPsdDEwB89YVVVorDmROElRH9viNRWJ+iXhpTEdFQ?= =?us-ascii?q?/iOgVrO+/7BpDdj9it1+C15pbffxhEiCCybL9uIhi6txndutULioZ+N6g9zQ?= =?us-ascii?q?fErGFVcOpM32NoIlyTnxf45siu+ZNo7jpdtfE8+cNeSKv2Z6s3Q6BWAzQgKG?= =?us-ascii?q?A1+dbktQLfQguV53sTSXsZnxxVCAXY9h76X5Pxsizntuph3SSRIMP7QawoVT?= =?us-ascii?q?mk8qxkRgXoiCMaPDAn9m/ZhNF7gKZCrB6/uxBzxojZa5yXOvVjZKPQZdMUS3?= =?us-ascii?q?RPUMhSUCJPH5u8YokSA+cPI+lYtJLwq0cSoRakGQWhHv/jxiNOi3Tr3aM6ye?= =?us-ascii?q?MhEQTe0QI9A9IBrmzUrNXrO6cUTOu70azIwi/Hb/NSxzj86JXDfxc6of6RRr?= =?us-ascii?q?J9atbRyEkzGAPFiVWcs4rlPyiP2egXvGib6PRgWPuphmU6qA9xuiCiytojh4?= =?us-ascii?q?TGnI4Yyk3I+T9nzIs6O9G0UlN3bNi5G5VKrS6aLZF5QsY6TmFtvyY116MJtI?= =?us-ascii?q?agfCgP1JQn3xnfa+Gbc4SQ4hLsSuKRITBgiXJ5Yr2/nRey8VW7yuHmSsm10E?= =?us-ascii?q?pFripCktXWsHACywfT5dSdRvt4/0eh3S6D1wHV6u5aPUA5jbfXJpEuz7Iqlp?= =?us-ascii?q?cfrF7PEjH5lUnolqOaa10o+u2y5OTmZrXmqIWcN4hxigzmKaQhhMi/AeU+Mg?= =?us-ascii?q?gTUGmX4P+z1Lr+/U3/XLpFkOY2n7LFsJHaOcsbpqm5DxVT0oY48RmzFTim0N?= =?us-ascii?q?MGnXUfNlJKZAqHj5T1O1HJOP34D/C/g1K2nzd3x/DJJLvhD47PLnjElrfheK?= =?us-ascii?q?xy61VAyAUt19Bf/IhYCrYbIPL8QkXxrsDXDgclMwyoxObqENd91oEEVm2TAa?= =?us-ascii?q?+ZK6TSsVmJ5uIxOOSMaosVuCvyKvc++v7ui2M5mUIHcamux5sXZ2iyHu56LE?= =?us-ascii?q?WBfXrsntABHH8Evwo/SOzqjUONUSRIana8Qa0z+zY7CJi8AofbXICth76B0z?= =?us-ascii?q?mnEZ1KfGxGDUqMEXjwfYWeR/gMcD6SItNmkjEcSLeuV4oh1RaotA/m1rZqNf?= =?us-ascii?q?TU9TMCtZLi1dl14OvTmQs09TNqE8SXy3uNQH1snmMUWz8227hyrlFhyliZy6?= =?us-ascii?q?h1mOBXFdtW5/xVSAg6LoLcw/Z8C9/sRgLLZs2JR0q+QtW6HTExSco8zMEWY0?= =?us-ascii?q?lnAdWijwvD0jGyA7APjbyLBYc08rrY33frO8ly1WzK1K47j1kpWsFPL3Gphr?= =?us-ascii?q?Zj9wjPAI7Ei0WYlqetdaQaxyPN8WODwXOPvEFeSgJwV7/KXWocZkvXs9T2+F?= =?us-ascii?q?nOT7mwBrQ7KgFB09KNKrNWat31ilVLXPnjOM7EbGK3h2iwBA2Iy6iJbIryem?= =?us-ascii?q?URxT7dCUYfkwwJ+naGLwc+DD+7o23CFDxuCU7vY0T0/Ol9sny7TUg0zxyRYk?= =?us-ascii?q?1izbW1+RkVheGGR/MUxLIEtz8rqy9oE1alw9LWF92AqhJ7c6pBe9M94UlI1X?= =?us-ascii?q?jCugNnIpOgKrpuhlkEcwR4p0nuzQl4Cp1ckcg2q3Mn1BByJr+F315aeDOY2J?= =?us-ascii?q?/xNqfRKmbs4BClc7TW1U3G0NaK5qcP7+w1q07tvAGzEUoi6Gln3sJO03ua4Z?= =?us-ascii?q?XLAg8SXoj3Ukot8Rh1ua3aaDEn54zIzX1sLbW0sjja1tMnHuQlzgqgcMlFMK?= =?us-ascii?q?OfDwLyDdMVB9K1J+w3nlildBUEPPpd9KQsJcOpa+OG2LK3POZnhD+mi2VH4I?= =?us-ascii?q?R50k2S7CpxUfTH0Igfw/GfxAeHUC38jFi5uMDthY9EfS0SHna4ySX8Go5RZ7?= =?us-ascii?q?F9fZoMCWe0OcG42tV+h5nrW35X71OjA1IG2MmzdhqIaFzxxwpQ1V4YoXa/gy?= =?us-ascii?q?u30yR0ky01rqqYxCHOx+XidAEbOmJSX2ltk1PsIYmyj9AHU0mldBMplAOk5U?= =?us-ascii?q?b8xqhUuL9/I3PVQUhWYyj8N3tiXbeotrqef85P74slsT9QUOS4ZVCVVKT9rA?= =?us-ascii?q?cd0yLtBGZe3y07eC2xupnjmBx6km2dJm5prHXFYcFw2Qvf5NvESP5SwDUGQj?= =?us-ascii?q?J4hCLUBleiOdmp5tOUmInfsuykUGKhTJJTezHxzYycrCu7+XFqARqnkvCrgN?= =?us-ascii?q?LnDAw63jHj19ZwUyXIsAjzYpPw2qSnKuJoYFNoBETm58phHYF+j5Ewi40O1n?= =?us-ascii?q?gUgZWV53UHnnnpPdVdx63+cGIHRSQXzN7N/AjlxEpjI2qXx4L/S3qQ2dVhZ9?= =?us-ascii?q?+nbWMWwC496d5FCLuM5rxegSR1uka4rR7WYfVlhjcS0+Yu6HoBju4VuQot0i?= =?us-ascii?q?WcDqkcHUZCOyzgjROI78qxrK9PfmagbaCw1FZindCmFLyCrBtTWHDlepclGC?= =?us-ascii?q?999ct/P0zR33308IHrYsHQbcgUth2WjRjPk/RVJIg2lvoQiiptIXj9smE9y+?= =?us-ascii?q?4nkRxu2om3vI2dJGVp+KK2HAJYNiHvaMwJ4Tzti7hRntqN34+zBJphAisEUI?= =?us-ascii?q?HuTf22DDIYre7nOBqWED0gtnebHqLSHQGF6Eh4sn3PCIqkN3eLJHke1tVvXw?= =?us-ascii?q?OSK1BagAwOWzU6hJE5HBiwxMP9aEd5+iwR5lngpxtK0OJnLQH/Un/EqQemaz?= =?us-ascii?q?c0UoOfLAZY7gFD4UfaK8qe4f5yHy5C+p2ttguNKnaUZw5QF2EGRlSEB0z/Pr?= =?us-ascii?q?mp/dTA6/aXCfGgIPvIYLWOteteWuyJxZ2xzIRp4SyANsKVPnltF/c7wFZMXW?= =?us-ascii?q?hlG8TFnDUCUzcYmDnKY86fpRe84TF3rtul/PTwRg3g+ZGDC6BMPtVr+hC2h7?= =?us-ascii?q?qDNuGLiSllKTdYzI4MxWTSxLkRxlESlzpudz6rEbgasi7NVq3QkLdNDxEHcy?= =?us-ascii?q?NzKNdI76Uk0wZWOM7bhdT11rhjg/EoFVhKTl3hlduvZcAQJGG9LlzHDl6RNL?= =?us-ascii?q?uaPT3L3933YaSkRLJKg+VbrQOwtiiAHk/kJjSMiT/pVxW1PuFNiCGUJxteuY?= =?us-ascii?q?6nfhZqE2jjQ8rsagenP99vkT023bo0i2vWNW4bNDhwaVlNrrqR7CxGhPVwAH?= =?us-ascii?q?ZB7n17IumHgCuW8+7YKpMKvvRxGSR0i/hW4HIkxLtJ9CtEXuB6mDPOrt5ypF?= =?us-ascii?q?GriuuPyjpnURpWrTZLgIOLvVl8NqjC85lAWGrE/AgT4mmKDBQKvdRlAMX1u6?= =?us-ascii?q?9M0tjPiL7zKDBa/tLX/cocA9bbJdmCMHomPxrpFiDbDBcZTT6rMmHfglJSnO?= =?us-ascii?q?uU9nKLspgwsoLsl4YWSr9HSFw1EesXCkJ7E9MYJJd6RTAkkbmAjM4U/3W+qg?= =?us-ascii?q?LRRMZbvpzdUPKdH+nvIi6DjbZYfxsI3a/4LYMLO43hxUNicUd1k57QG0XMXd?= =?us-ascii?q?BAuTZubg4uoEpQ93h+QHUz21j7ZQKt+nMTE+C7ngIugAtkfest7Cvs40swJl?= =?us-ascii?q?fSuSQwl08xmdP4jj+PdD7xLby9UptIBCrusEg9KJT7Qxx6bQeqh0xrKC/ER6?= =?us-ascii?q?5Nj7tnbW1klRXTuYVOGfFBVq1JewUfxeuNZ/Uv31VcsTuoylNa5evfCJtiiA?= =?us-ascii?q?srfYSqr31exwJpdMQ1KrDIJKpV0lhQgbqDviuv1uAr3gAeIUcM8GSJdS4Hvk?= =?us-ascii?q?wIK6MqJy2y/uxj8QaCgSdMeHAQV/o2pfJn7lg9NPqEzyLh1b5DN0+wOveDIK?= =?us-ascii?q?OevmjPidSHQkgs1k8SkUlK46R22985c0WIT0Av0KeRFxMROMreKAFVas1S9G?= =?us-ascii?q?TTfSeOqujC3JN1PoWnGe/zV+OOsrgbgl68FgYzA4sM9tgBHoWr0EzAN8jnKL?= =?us-ascii?q?8Fxgkz6wvzIVWEDPJJeBWNkDgduMyw15530pNbJj0ED2V9LD+75rDJqQ82mP?= =?us-ascii?q?CDRss5Ym8GXosYMXI7QNa1lDBfv3lbFja4z/wZxxaY7z/nvCvQFjn9Y8BkZP?= =?us-ascii?q?eOahNmEMu29ikn86iqlV7X9Y3TJ27nNdRjvt/P7f0Vp5OcBvxJU7ZyqEbclJ?= =?us-ascii?q?NeR3CwVG7PC9G1LYDqa4Ywddz0Fmq6UlunhjIvScfxPcqiLqiPgQHsXoZaqJ?= =?us-ascii?q?CV0i05O8KhET8TAAt/p+YG5K1gfwIDeIY7bQTutwsgK6y1OB2Y3cm2Q2axNT?= =?us-ascii?q?tWSOFSzf+gaLxNyCojdfS3yGc6Tp4g0em470oNRJAMjhHRwfajZoZeUSjvGn?= =?us-ascii?q?xTYQrPvy85m3JnNuks3uc12AnIvkUEMzCXaOxpb3RJvt8mCVyOIXV2C284R1?= =?us-ascii?q?6GgorA+QOs3q4d8DVDkNpO1u1Fqnf+tIfFYD2wQKyrtYnVsy04YNgjuaJxK4?= =?us-ascii?q?/jLdWatJPfmDzfQ4LdswOfXy68C/Vant9QID9FT/lTg20lP9IJuZZZ40orSs?= =?us-ascii?q?g+P6BPCLUrpr2yczVkFzMSzSkDW4ODxzECg+a827rGlhiLapgiNgILsIlaiN?= =?us-ascii?q?sHTyF2ej8epLOkV4jOlm+ETHQLLxkX7QtS4QIPiJNwfvrl4YfTS59M0yBZo/?= =?us-ascii?q?RxUiTRF5lo80D0SmaZgFTiT/WhieOp1xpIzP3wytkbRAJ/CU9FyuZKkUsoLa?= =?us-ascii?q?p6K7UMso7PqTCEb0X6s3zxyOG+Plle1dXUd0HkDIrCrWf8UjcT+WcOSo9L1X?= =?us-ascii?q?7SDokdnBRhaKYzulpMJJ6pelzk6zwj3YRpEKGyVdq3yFY9sXYGWyCqHsJDC+?= =?us-ascii?q?Fhrl3aQyBqbI6wqJr7IZVSXnFf94CHp1dfjkptLzazyYBAJMFV/j4MQD9PrC?= =?us-ascii?q?2BvNSvVcJD2NV5D5sXL9hjvHf9Hb9LN4KKo30qoLDvzGHW+ywkuleg2DqzA7?= =?us-ascii?q?O4T/5e/2AGAQopKXiRplUtAucx/Grf6UzCsldx/+hHHLePlllxrCx7Hp9QGj?= =?us-ascii?q?ZDzWqlIEhrTHlar+VaL7zYc9ZCTPYvZR+gIQA+GOUi30yO40F7g2n1bDB1tg?= =?us-ascii?q?RH5S/RRQ80WjcJgr31gz0RttmnOSMGS5JPdTghdzzFKx6Bli9KoBZScFpqW5?= =?us-ascii?q?cEAtZf574Uw41U/tbYSUm2LSEJRhtiNhg30fBHj05MrF2YeTzBDQqvbfvPrg?= =?us-ascii?q?d3ctmPo8G0N/n54QNHip/9sO8i6aUDRnqmmQmzTtDCtYP8sceKtkSWfqfiL+?= =?us-ascii?q?K8eWPBTCTLjR2oh7crFYPK/y/IMApfMZZ612EpYZ38CW7PIRRGJr4UJ0tBWq?= =?us-ascii?q?B8ctVKuOdaZ9VreKwR469iGgqHRg/zGIyotPRGLEzcRTLQLyWb9eywvJzc4K?= =?us-ascii?q?fBSef6YMyM3HHHT7hxPphk9TnxA63q3pNG+krqxvdt8Vt3SV7CMy2ardThIA?= =?us-ascii?q?YL6NOjdkvksJ0pBynZAIxskHr320FPa9YXQzCw8JsG0p9Z72zwSe1g2EjprO?= =?us-ascii?q?JS76Vk6ZUw471xz8e0JLvdKfNesUB9GRiYHARq9pIqAGhkXGBceeoRJfjefK?= =?us-ascii?q?gDisDuse/3HbQN6BKJ4+xZdcfHJ0bZl8ajED6cTQJLnBwdqT8aKQuRzOWFlL?= =?us-ascii?q?N1Scm7o+j5xkMt7EKkIh4A0r9t+Z+O+rCUq+/PcxvR0b8EV7DuRsPoq7Qhu1?= =?us-ascii?q?if5fM6m7ETfWx1eReoEPAHVs4axGfv07wlzT42H8PEBbLg9+ZJV2glkTL4h5?= =?us-ascii?q?B9A1IWF+sWHbqK+IRThWI4lPLZN9IIaKBCm2CPFRG+Hr8E13Gr9zOdIHN5jR?= =?us-ascii?q?HWzxHwXWSz4Uf3rS55WyTD1cvsn1FOVrapGUddQTamNVV/sDOVMwrirMD3tr?= =?us-ascii?q?gt7EEqLmzks8qAm3CgOLNMEczwPt6cISgopFIPlpIxW9iv1JsHFtq6Pdge7m?= =?us-ascii?q?txbubE62OsiS9Oub1Lh43E4sGa4v/XB2Wvj7WGq7WRwzBV0mA4sksj6t+8Nv?= =?us-ascii?q?HP6dqKQ+6r12oIVCdwpQ/BXx+zqrzGoFEZIlSL313XmIMWPtFY03441lvl5O?= =?us-ascii?q?Q5Q9I86h9eFoDeaPMGvzzzPyH0wVmHadItSiaeyydXHk7yEVRgF6gzwnjws9?= =?us-ascii?q?zVlXfQ4FAoQohwd1D5ihx3FYo4NFkt5EIRwiUdDQgHcQqbA62wBUT5MYsEUl?= =?us-ascii?q?AOaRuZ07i8Zqc32kpzzrS05ODNaex8BqwNNutSjwOVmFhUBIgWsK0ET75mfV?= =?us-ascii?q?9S6rLXrBD4C4f7R/jmiWYwNfqtT89G88AWrWct7x2jSBqn7ZdD67cbh46Sdq?= =?us-ascii?q?5Yf5fDoMB8411g5T4VeSxHmAJ/gA+hUeAAuODj5cDWsJ+v6uaoSKYtSPsY+g?= =?us-ascii?q?MxB2R/lZTwhk4soc3Z1udbUI3Vip///BpLI3GUpIbQywN8JvYWK4K3YLZg8G?= =?us-ascii?q?0KJycCKHIVJtqacuQy7SBrPjXS4VxCH8wNaMgXPMrIgw9UjFPmVKtU9srBFV?= =?us-ascii?q?+SE51zeNww72rr1DA19oMxUuTn6D+2I5DT9U1CP/NHjCVxid3DpekVwfzJCC?= =?us-ascii?q?gU4HmUcAZ1wiKcy5aXD/b/4OSMxMvSV1wYAi48S51dKyaa+Qy7Wuq1k43kUg?= =?us-ascii?q?KK6sDphpIzb0aQRmGsk6QEtaZMCvRMiiLh3jhRDor1ne6as8Kw6GtLsV1KCI?= =?us-ascii?q?Rz4gPLGKVROpV2Ihr5mdOtRkdiGivzYsfUeQQyuOCO3OcD//1+N1fiZY8cOh?= =?us-ascii?q?8ExLb66X1bTwRwTL72uk2UXfkWZNtgSfPLsmpZ6YR+JK8TJFKdvoDlri9UqF?= =?us-ascii?q?AqBw8kcLowrj1ZdknNmw1YQKT0t6QDigsbV952p0lMFXi2OG0g+zrNTb5Vg7?= =?us-ascii?q?WJCPwJ7jWTSbQDXF52PSN4XxO4w45ue7+unfBbrmNGgD1yr+Uw3zxhXhu8tj?= =?us-ascii?q?Xmp7gR1jI45LG4qDIBtGRdTuWZlyfHE09DzfoNjacYBXbv8lm8YH4EbIvp/r?= =?us-ascii?q?ZoOd7g9Y4643QkYBUjeSIGUf6nCyHqgKOCGpaPv85EhB6RpMXOaqe+LSYMOb?= =?us-ascii?q?Q5yBLjX2Zy3xPfnRZp9WsLRyuv7MUgJIqjI8olwTCoGWfDflYW/qxJqNfxtU?= =?us-ascii?q?IMTOYuZ1Jh2H9j0smbSSITX8HPHmc1jhQ+aWpaap5D7gUaF6YwiDaSoqZG5h?= =?us-ascii?q?0UYCvTEom9/YnQmdnH1GIlTddu3G3WvbGFhpI23315gdN78DCBtG4Ud+PGT8?= =?us-ascii?q?9mGmLz2ZtHyezie/WttfgKSI9nyLSnTf8DPdCv+W+32JVxRk+l3a8TH1ujP+?= =?us-ascii?q?8FwbfXSSClSXeXWe6TaWiDgy45MlLu5RmvNlA3bd1FoFM9MuvDgJ5ckBbsUa?= =?us-ascii?q?11RiWWu1DbyG0jMeUHdwM5oounfBYKTOEJbeiGOecu2OE+CEcLb3LRHyt5Ee?= =?us-ascii?q?y2sVm2k4VgJnVg51n6YeTq8gD7P9uSGgUEHZTcrpFv5fywXniBNmN4zB1uIE?= =?us-ascii?q?l08P/SF1Y0tu9baZaRh9nQh89g3O4DbfhtNDMyut8JloJk84mU39+AcQvNwZ?= =?us-ascii?q?bqOdHVvv+YDuXEz0Qkf2FVTrsUbADu6oUkINE5QbzTHLpevRQaH6Q6RoIuN3?= =?us-ascii?q?uivJ1zeRh+dg/XeaScntjhpuXNYIBd4XDR8AEeNiDZ7iYfx+S0QAozVJWjg3?= =?us-ascii?q?H/MdhkXT5ah8F8ARthWo1UEoUPqBTxUM3co72yl9LkoxAygOQNq6elT6qS2Q?= =?us-ascii?q?=3D=3D?= X-IPAS-Result: =?us-ascii?q?A2CnAwCqEvNa/wHyM5BcGgEBAQEBAgEBAQEIAQEBAYMYK?= =?us-ascii?q?4FbFROMT4wTgwiPDYYQKBMBhy8hOBQBAgEBAQEBAQIBayiCNSSCVwJ2AwMJA?= =?us-ascii?q?kgIAwFsBYJeQCqBSg2qdYRYg2yCSIglghOIVoEDhQgCmCwIjkQLgSeLOwErk?= =?us-ascii?q?UkzIYFSKwgCGAghD4J+kGpTegEBjWKCRgEB?= Received: from tarius.tycho.ncsc.mil ([144.51.242.1]) by EMSM-GH1-UEA10.NCSC.MIL with ESMTP; 09 May 2018 15:28:34 +0000 Received: from prometheus.infosec.tycho.ncsc.mil (prometheus [192.168.25.40]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id w49FSFx3004594; Wed, 9 May 2018 11:28:21 -0400 Received: from tarius.tycho.ncsc.mil (tarius.infosec.tycho.ncsc.mil [144.51.242.1]) by prometheus.infosec.tycho.ncsc.mil (8.15.2/8.15.2) with ESMTP id w49FS6p1174421 for ; Wed, 9 May 2018 11:28:06 -0400 Received: from moss-pluto.infosec.tycho.ncsc.mil (moss-pluto [192.168.25.131]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id w49FSCjL004592; Wed, 9 May 2018 11:28:12 -0400 From: Stephen Smalley To: selinux@tycho.nsa.gov Date: Wed, 9 May 2018 11:29:04 -0400 Message-Id: <20180509152904.11822-1-sds@tycho.nsa.gov> X-Mailer: git-send-email 2.14.3 Subject: [PATCH] libsepol: cil: prevent stack buffer overflow in cil_expr_to_string X-BeenThere: selinux@tycho.nsa.gov X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Security-Enhanced Linux \(SELinux\) mailing list" List-Post: List-Help: Cc: Stephen Smalley Errors-To: selinux-bounces@tycho.nsa.gov Sender: "Selinux" X-Virus-Scanned: ClamAV using ClamSMTP Fix the test to prevent overflowing the stack buffer for boolean expressions. Signed-off-by: Stephen Smalley --- libsepol/cil/src/cil_tree.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libsepol/cil/src/cil_tree.c b/libsepol/cil/src/cil_tree.c index 2abbb96c..1b04fe68 100644 --- a/libsepol/cil/src/cil_tree.c +++ b/libsepol/cil/src/cil_tree.c @@ -339,7 +339,7 @@ static int cil_expr_to_string(struct cil_list *expr, char **out) int pos = 0; cil_list_for_each(curr, expr) { - if (pos > COND_EXPR_MAXDEPTH) { + if (pos >= COND_EXPR_MAXDEPTH) { rc = SEPOL_ERR; goto exit; }