From patchwork Tue Sep 25 00:18:10 2018 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Kees Cook X-Patchwork-Id: 10613913 Return-Path: Received: from mail.wl.linuxfoundation.org (pdx-wl-mail.web.codeaurora.org [172.30.200.125]) by pdx-korg-patchwork-2.web.codeaurora.org (Postfix) with ESMTP id 9709E13A4 for ; Tue, 25 Sep 2018 12:14:40 +0000 (UTC) Received: from mail.wl.linuxfoundation.org (localhost [127.0.0.1]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id 831F22903B for ; Tue, 25 Sep 2018 12:14:40 +0000 (UTC) Received: by mail.wl.linuxfoundation.org (Postfix, from userid 486) id 76B74292DE; Tue, 25 Sep 2018 12:14:40 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on pdx-wl-mail.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-5.1 required=2.0 tests=BAYES_00,DKIM_SIGNED, MAILING_LIST_MULTI,RCVD_IN_DNSWL_MED,T_DKIM_INVALID autolearn=unavailable version=3.3.1 Received: from usfb19pa16.eemsg.mail.mil (uphb19pa13.eemsg.mail.mil [214.24.26.87]) (using TLSv1.2 with cipher DHE-RSA-AES256-SHA256 (256/256 bits)) (No client certificate requested) by mail.wl.linuxfoundation.org (Postfix) with ESMTPS id 7EB102903B for ; Tue, 25 Sep 2018 12:14:39 +0000 (UTC) X-EEMSG-check-008: 130137418|USFB19PA16_EEMSG_MP12.csd.disa.mil Received: from emsm-gh1-uea10.ncsc.mil ([214.29.60.2]) by usfb19pa16.eemsg.mail.mil with ESMTP; 25 Sep 2018 12:14:37 +0000 X-IronPort-AV: E=Sophos;i="5.54,302,1534809600"; d="scan'208";a="16183230" IronPort-PHdr: 9a23:hwSY4BQYRdabl8UTWmi9SdZ81dpsv+yvbD5Q0YIujvd0So/mwa6/ZRSOt8tkgFKBZ4jH8fUM07OQ7/i/HzRYqb+681k6OKRWUBEEjchE1ycBO+WiTXPBEfjxciYhF95DXlI2t1uyMExSBdqsLwaK+i764jEdAAjwOhRoLerpBIHSk9631+ev8JHPfglEnjWwba9wIRmssQndqtQdjJd/JKo21hbHuGZDdf5MxWNvK1KTnhL86dm18ZV+7SleuO8v+tBZX6nicKs2UbJXDDI9M2Ao/8LrrgXMTRGO5nQHTGoblAdDDhXf4xH7WpfxtTb6tvZ41SKHM8D6Uaw4VDK/5KpwVhTmlDkIOCI48GHPi8x/kqRboA66pxdix4LYeZyZOOZicq/Ye94VS3BBXsJMXCJfBI2yYZYEA+4YMepFs4Xxol0Dpga8CwaxHuPi0j9GiGH406M51OouEw/G0hE4H98MrXjZotr6O7sdX++r16nF1inDYvFM1Dvh8oXEbg4trPeRVrxwa8rRzkwvGhvAgFqOt4PlJC6e2/oKs2ic7OprSOWii205pA5vuTig2sAsio7Kho8O1l/E9T95wIEwJd25VU57ZMSoEJxKtyGVLoZ7RN4pTWJwuCsi17ELtpG2cDIKxZg63RLTdfOKf5aS7h7+TOqdPDV1iXx/dL6ihhu//lKsxvDhWsWqylpGsyRIn9fKu3sQzRLc8NKHReF4/kq53DaP0B3c5f9cLEAvkKrbN4YhwrktlpoPqUjDHjH5mEHxjKKOakUr4PKo6+X6YrX9vJOcK491hR3+MqQpgMC/B/g3MhMSUGSB/OS81bnj8VX4QLVMkPI2jrHUvI3VKMkUvKK0AxJZ3pw95xuwETuqyskUkWECLF1feRKHi4bpO0vJIPD9Ffq/mEqjkDNqx/DAI73gDYzBIWPEkLf8e7Zy91BTyBEowNBD55NbFrEBIPXpVk/3r9zXFAU1MwOzw+b5ENl9zJ8RWXqTAq+FN6PfqV2I5uUpI+aWeI8VuCzyK/4+6v7sin85n1odcrOy3ZsLdn+4BO9mL1+eYXr2jdcLCX0KsRYmTOz2lF2CViZeZ3SwX60m+j47C5mmDYDFRoCsnryMxym7HplLZmFJEV+MDHHod5mZW/sWbyKSOMBhmCQeVbe9U48hyQ2utAjixrtpL+rU/igYuoz51NVu6e3ciww99TtuD8uHy2GNVWZ0nmEWSDAqwKBzu0t9yk2M0aJgmfxXCcRT5+9VUgc9LZPT0vB1C9X1WgLHYteFVU2rQsu4DjErT9IwwtgOY0BnF9WkkB/DwzKgA6UJmLyTGJw07qXc0mDyJ8lnyHbG07QhgkIlQsRVNm2mgbN/+xLUB47TnEWTj7yqergE3C7R6GeDynKDs1tFXw5qUKXKQ2ofa1DMotvl40POVbiuCa4oMgFZ086NNrNKasH1jVVBXPrsJM7RY2avlGerGRaJxrSMYZHxe2oB3SXSFk4EkxwS/XmcLwQ+ADmuo37GBjx0CV3ve1/s8fV5qH6jVE870hyFYlZu17qw9R8Zn/qcRO0P3rgcoicuty10HEqh39LRE9eAvARhfL9bYdMm/FdKznnZtwp6Pp2uKqBtnFgefx5xv0zwyxV9Ep9AntQyrHM20ApyLrqV0V1beDOcwZD/JKfXKnLp8RCxdaHWwErR0MuT+qsV7/Q4sVrjthmzFkU+63Vnz8VV03yE65XMDQoSVZbxXVgs9xVhvb7VfDM954TO2X1rK6m0vSfI28g1C+s91hagY9BfPbuZGw/uCcIaHdOjJ/Atm1isch0LJvtS9LIuM8OgafSGxLahPPx8kzK+kWRH/Id931qS9yp9VuHIw5EFw+uC0gSbVzf8i1Ghss/slIBAZDESGHCwyTLjBIJLYa1yZ4kLA3+0I8Kr3tV+m4LtW3lA+V6nBlMGw9OpdQOJb1Pj2Q1Q1EIXoWGomCaj1Dx0izAprqye3CPS2OTubhwHNXBXRGN6l1fjPZC0j8wGXEivdwUpjhyl5UL+x6dFvqRwM27TQElTcijtMmFtTrCwuqCFY85V55MiqT9XX/ikYVCGVr79pAMX0yD9EGtY3zA2bDKqtYv/nxxhjmKSMmpzoGDeecFqyhfV/MbcSuJJ3joaWCl4jiHaBkCmMNm0+dWbiY/Dvfq4V2K9SJJTazLmzZ6btCSl/21qGgezn+u0mt36Cwg1zTH019dtVSXSoxbzfJPn16KkPuJ7ZkNoHkPz69JmGoFilYs9nI8Q2X4HiZiO43oHl3r8MdVB1aL4cnUNWSYBw8TJ7wj9xE1jMnWJyprhVnqH38thY8K3bX8X2iIh78FGEamU46ZCnSdvpVq4tw3Ra+BnnjgB0fsu9GIag+YRtQoj1CqdBKwSHU5dPSH3mRSH8c2xrKJNZGm1abiwzk1+ndK/A76evgFQQnH5eo0tHSVo9MVwLErM0GHv6oHjYNTQaMgcthmQkxjek+hVNIg+meARiCphJ239oWYlxPIhghx2w562po6HJHtx/KihGB5XKiX1Z98P+jHqlatekNyW0J6yEZV6ADoLWofoTfWzED8Jr/voKwOOHCc7qneBFrrVBRWf51t+r3LTD5CrMGmaJGEHwtp5WhadIk1fgBwTXDghn542CB6ly9L7fEd+/DAR6UbyqgFQxeJwKxn/TmDfqR+zZTgvT5SfKBtW7hpe50fOK8Ce9fx8ED1C8p26sgONLm2bZwJVDWAGQUGLG1DiPqOz5dnb6eSZCPCxL+fVYbWJr+xSTfCIxYig0oF+5TaDKt2PPmV+D/08wkdMRnF5G8vemzUJUCEYijzCYNWapBim/C17tMe/8O7kWAj3/4uAF6NSMclz+xCxmaqDNe6QhSZhKTZf0pMMxGPIx6YE0V4XiiFuayOtHqoauS7KVqLQlbddDwQHZCNrKMtI86U80xFOOc/bjtP6yKV1jvsyC1dLW1zuhN2pZdAKI2G6MVPIGlyHNLKYKj3X28v3e7+zSaVMjOVIsB29oSiUE1f5MTSZljnpTAuiMflWgyGBPRxeo5m9chJ3Bmf/Ut3qcBq7MMV4jTcu2707mmvKNXIAMTh7a05NqKOf4jlcgvhkGGxB6WFlLfWelCaf9OnYKZcWveFtAitqi+JQ+G46xKdN7CFYWPx1nzPfrsRwrFG9jOaA0CBnXwZOqjtQn42LvF9iNrje9plOQXbE5gwC7GWKBxQMudRlFsXlu7pMxdjXiKLzNDBC/srJ8ssbAcjULt+IP2QlMRroAzPbFhUKTSSsNW3FgExdiv6S/GWPrpcmspjshIYOSrhDWVMoDPwaFEVlE8EZIJpsRDwki6SbjMkG5HqlshbeWNhavorGVvKOAfTjMjCZgqdYZxEQ27P3MZwTNpHn20xlclR6mIPKG1DOUtBLoyxhaRQ5oEpL8HhjVGEz3Fjlagy16n8JCfG0hgI2ihd5Yek17zfj/VM3JlvMpCstn0g8gsnqgTeUcDHtNqiwRp1WBzDyt0cvLpPxWxx1YhGqnUx4KDfEQKpcj6dhdWBujw/cpZtPGP5HQKJZYR8RxeuYaO4y3VRatCqn2VdN5fHZBpt6iAsqbZmsompa1AJnbd46ObLfK7JMzllQgKKOuSmo2foqzQAFJkYC6mWSdDcGuEwVLLUmITSn/vB04wyYhzRDYHQMV+Ytov9y7UwyJeKAwjn63LFeNEC+KfafL7iDtGjalc+EWFQw1lkHl0Nd57h5zd8jc1aIV0Ao1LaRGAkJNcvGKQFRccVS8WPecjuQvurWwJJ6JYO9GvrvTe+Uu6YemlikExoxH4QQ8sQBGYGh0FveLcfmMLEFyRIt5ADwJFudFfpHZQiFnSsArcyk0JB32oxdKS0HDmVmLSW7/LDXqRE2gPCbRtc5fm8aXpcYNnIxQMC6gTRWv25HDDasye8Z1BKC4CXipivOCDn8btxjZPiQZRNtB9G2+Sk/86ashl7N95XSPWf6Osp+utXX8+MVu46HC+9ITbl6q0rdlZNUSGCqU27OFN61JoL/a4o3YNz1FHm1TEKwhygyT8frM9anNrKIjh3wRYZIrImb2yguNcqnGTEEGBd/uf0D5KN6ZQ0MeJc6bwTntwIiOKy7JweYz8ihQ323JTtQUfZf0f2wZ6ZLwCo0cu+61HwgQ4kgwOmt7E4NQosGjhLFyPaiZoleUDTzFWdHdwXJuyU5i3BrNvwuzecn3BPIrV4cPiiXdOxubWxJpM08CU+XIXptEGY4QUGTjZbb6A62w78S5zddn8pT0eBdsnj+uYHQbSmxV6O1spXarTAgbcQ4rKJsK4DjJNWJtI/GlDzFUJbQqhGFUDK9F/dChthfPT9XQPhSlmEhIsEJpY1B6U8tWcgkPLxPFLMgpra0Zjp4FSQS1zMWV5uc3Dweheexw6PalgyMcJs4LRMErI5PgsAaUy5reCMRuLGsV4PKl2+eUGcLJB0f7QNW5AIPjoVwZPzq4JLUTJ9QzD5bu+l7UiXXGZV09Vb3V2+bjEPkR/WmluymwRhdzOnw0tUBXh5wF1Rdzf5MlkQ0MLF3N7UQvonSvz+Sa0z1oWLtx/G6JFRKzc3UcEP4A5TbuWXgVS0T5GMbSZVJyH7BCZQYixB5Z7ozpFVQPICmfV7z5yA+x4t3Aba3SNumx0shrXYaXSelCcRBC+BhsFLTRjJlf4qnqJL/O5VdWmVQ4oGSq09FkEVxNC600ZhcJNtX4j4LRzhPpS+SvMWpRc1GxM92C4MMItZjtHf8AqxEPoORr2cxurz1xX/T4yo8v0uixDWvB6+4SPpU/28EFQUvKWSesE4vAPYy/WrJ7lDCqFZ0//xcBrSVi0V+vip9FIhUBjlVzXClM0hzTH5evuVcLKTYaM1cQ/83ZRO1Ohw+E/Am31aT8kFvgXf5eTFyuRdG+yDARQk7SzMZgrD3mT0RssunIyMVS4pUbTU9aCfIMwSbmSFLsxZYb0FlQYsZDsxE+7Ec2otU5dHCRF2pKSwKUx1uLAU40eBQlURbqkWXZTjdDRa0dfbIqhB3edyRrMupIfni8gdIlJ7osOci96oZX32mgwqtQdLAoIDgqt2GrEyOdL33M+eke3/OUCDMjQyshbcjF5TK/SnTMA9AJpl/13UlYYbuCXTKPRRAKKIXPUxbWr5mad9euOBVe9dkeLoV+a9qHh+HRxLuF5a1o/ZaNVvTXirRLzmf/eOju47T6qbdSef4bMyW23nHW753Pot96TTjALjq0JRe+0Ts1fdv90N6VUDGPDqcrNTlPQ4E+M6ieVb8sZIzADPWGpBwkGD3yU1acMoXWSKq+owCyJxF8HbwVf540k/rve1K7bZk9ZU447BnyMezP6fSKu1WsVR5DRiQBwVq8IgtAWdkSmBJeOARNOvefaQXjMDpseD3FLYb6B6L9OxDb9vIOUXBltO4CjGGRhxOhB0BpiICLguAy/6FnLd5Rtqnpefjxk0g+ESxLhkCzLBp5IeL5LCIpPPJYBTNzbgIQK/qRtn8rr40oUOd+eUklKISemxyewCnFe8dVsgBxmfv068n1icsE8LZELLm5vFDS3w4njX6m5B+BFUaAPUUEqSX/Y5GhGc3h/TZNsEKcqBFgmuPGgKrEqQZyXKy9iWZL29rghDI0xHtTmK+91D2rSpiTivK0djviE1VVqO4BU1KRSqmJVd4sC+TPArvrNf3u6M17EEwMmD+qN2NlG+hOK5KEMz+JdycJzI0pFEWjJAqWNyv2J4bFsC5INgM8XFydP3e5H23kyVZuadIm5Le4t2J+vXQBXSgjrOapK+LxD1Dzng4oEww6tGnNvHV/dGKRO6o12kJRSdlpwTBRwK1qqDcr10MO0yEzknLmIIOPtxC03g3zEfm6/Y/QN4p8gVRCJrAbesYpT/vIDv03UqfY9UvWymR1ztXGVz0Hkd8GKg4w2/wp8XJlXHR+1I0XIVwcVLohQBvBYUiNU0t8EQXwjYEEQUVZxCbFqunBUL5IosFTkgOchGH3KC7eqsuxk1yzKiv6PXUbexmCKoHLuxdgRKWnFhHBpIWtrUTQLd9e19e967XoRPvC4r9UPjlknowM+O6QsZA/cAfqXQi/h61RwC85pdb87YblJeIe7ZfbpfSusB881xq5SULdixKnBh/kw25Xv4Bq+z55djbqpWo4P60VKkxX+UX6wQ0B2Nmgpvoh1AjpcvY1/1SS43SjYT//htAI3uNuIbdyBlzN/YBK5isfLZ77HUHJi4eJ30UMdqRcfk87DdnMC/P6FxaHsMMedQYMdLDmQ9Kjk3pWalT+dTAF16ZCodzcsUo4HTtyDAx75QwSOHg6CW5JZrH9VFCI+tDjDlwlNLFvOUUz+LSCDIW4XaFdRd42SaCy5iRC/bq4+qA0tbUV0kJHiQuSYdSOCKC+RC7RuqyjJjpVQeU5dHojZImcEKfXGexnLgEsqlQDe5AkDv00SZEGoDzmf2Vr8Km6HFLuV1fDIZz8RrFFb1bPpV6PxT4i8aqSlF4Biv+Y8HUagEutfGXxugW5eV+MFHyZYgBIhIL07j682ZaThNySL7quVaURecRa8F6R/PEr3BV74VgJrQRPFicopzlsDNIqFEwAA80Z748tDtadlPBnAdNQab7pKYAihcAUd5+oUJMG3i/OGE55zXcTqlVka+RCOAV8jWUU6wOXEVoMj9kTxOzxppuZ6OjnepbvWNegiN9vP8q3iR9RBuyvC3ju6MA1DE79bGmqjoBo31FT+SZkyfOE1lDyuoFjbtPQ0rlvH61ZXQYJK71+qNmPoy094wm+W4+ej0ldigLXKKnES6m3I2SBYnak99Rn1amv8LNJeuwICUJPbM6yjroR2J61wnDmVBv6mRdEWbo18MtOIjoYZVt/SGvA2WOMQ9VuvkT4sLsqV4GSvc3Ylp9wWJll9KKXTAJWNeVRDZnszMKQz5vSLsbslkXGqwzjXCNt6hCuAQVZGSxcMy+4oeFu8DO1DEmSMtygHrMr/iGi54x23pimPt/7jSJvXUPcqrfScA/Zxq7zZ9RnNT3fO7lqeUbUM1jwbWlXuUFN5yg9Gat05JtWWeuxq4ZGlukNakE3LiINkXtUnWWDMKMdWXEhDMlKgjy6B2ve0Uwc9tPplQhP/Hqg5ddk0j5XuoxSHzB+xnUy2ssNe5cfAUz6+LFMwAJTetEf+GHPqBu2/wxDlIQcmXEVTV7Ee64sFOh3cB7Nnxs7F+8YLHF+QD8N96TBxxCFpTV/fsTsfC/T3iKbGdp1wY6fFEh8eDZGhw9t/QJdZGXkJmYi4Fw0fQCcvZwNGs6oNEe X-IPAS-Result: A2BpAAAuJqpb/wHyM5BbHAEBAQQBAQcEAQGBUoIKA4EIShIojGiLTpN6hGEUgV8SGBMBiCMhNRcBAwEBAQEBAQIBbBwMgjUkAYJfAwMBAjcGAQEMIAsBAgMJAQEYJgIICAMBLQMBBQELEQYICwUYBIMAggIDl2g8ihyCHYJ1AQEFgXuFHAgShlKCe4EbF4FBP4hvARIBhXeOQDGOEAmCDIc+hlQiiGeGRSuUNwYCCQcPIYEjAjRkcTMaCCgIO4JsghkMFxGISYVeTwELbwEBil6CPQEB Received: from tarius.tycho.ncsc.mil ([144.51.242.1]) by EMSM-GH1-UEA10.NCSC.MIL with ESMTP; 25 Sep 2018 12:14:34 +0000 Received: from prometheus.infosec.tycho.ncsc.mil (prometheus.infosec.tycho.ncsc.mil [192.168.25.40]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id w8PCEXQk011735; Tue, 25 Sep 2018 08:14:34 -0400 Received: from tarius.tycho.ncsc.mil (tarius.infosec.tycho.ncsc.mil [144.51.242.1]) by prometheus.infosec.tycho.ncsc.mil (8.15.2/8.15.2) with ESMTP id w8P0J9sA000435 for ; Mon, 24 Sep 2018 20:19:09 -0400 Received: from goalie.tycho.ncsc.mil (goalie.infosec.tycho.ncsc.mil [144.51.242.250]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id w8P0J8Ks005690 for ; Mon, 24 Sep 2018 20:19:09 -0400 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A1CzAQCofqlblywaGNZbHQEBBQEHBQGDXIFnKIxoi0+Te4ZbC4RsAoNZITgUAQMBAQEBAQECFAEBAQEBCBYGTIVFAwNAAQE3AQ8ZJhI0AQUBHAYTgyGCAgOYKzyKHIIdgnUBAQWHEwgShlCCe4EbF4FBP456jnGOEAmCDIc+hlQiiGeGRSuUNwYCCQcPIYE4gXYzGggoCIMnghkMDgkRiEmFXk8BC40dAQE X-IPAS-Result: A1CzAQCofqlblywaGNZbHQEBBQEHBQGDXIFnKIxoi0+Te4ZbC4RsAoNZITgUAQMBAQEBAQECFAEBAQEBCBYGTIVFAwNAAQE3AQ8ZJhI0AQUBHAYTgyGCAgOYKzyKHIIdgnUBAQWHEwgShlCCe4EbF4FBP456jnGOEAmCDIc+hlQiiGeGRSuUNwYCCQcPIYE4gXYzGggoCIMnghkMDgkRiEmFXk8BC40dAQE X-IronPort-AV: E=Sophos;i="5.54,299,1534824000"; d="scan'208";a="377482" Received: from emsm-gh1-uea11.ncsc.mil ([214.29.60.35]) by goalie.tycho.ncsc.mil with ESMTP; 24 Sep 2018 20:18:52 -0400 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0A7AQBzfqlblywaGNZbHQEBBQEHBQGDXIFnKIxon0qGWwuEbAKDejgUAQMBAQEBAQECARMBAQEBAQgWBkwMgjUkAYJfAwNAAQE3AQ8ZJhI0AQUBHAYTgyGCAgOYKzyKHIIdgnUBAQWHEwgShlCCe4EygUE/jnqOcY4QCYIMhz6GVCKIZ4ZFK5Q3BgIJBw8hgTiBdjMaCCgIgyeCGQwOCRGISYVeTwELjR0BAQ X-IPAS-Result: A0A7AQBzfqlblywaGNZbHQEBBQEHBQGDXIFnKIxon0qGWwuEbAKDejgUAQMBAQEBAQECARMBAQEBAQgWBkwMgjUkAYJfAwNAAQE3AQ8ZJhI0AQUBHAYTgyGCAgOYKzyKHIIdgnUBAQWHEwgShlCCe4EygUE/jnqOcY4QCYIMhz6GVCKIZ4ZFK5Q3BgIJBw8hgTiBdjMaCCgIgyeCGQwOCRGISYVeTwELjR0BAQ X-IronPort-AV: E=Sophos;i="5.54,299,1534809600"; d="scan'208";a="18614899" X-IronPort-Outbreak-Status: No, level 0, Unknown - Unknown Received: from uphb3cpa05.eemsg.mail.mil (HELO USFB19PA19.eemsg.mail.mil) ([214.24.26.44]) by emsm-gh1-uea11.NCSC.MIL with ESMTP; 25 Sep 2018 00:18:51 +0000 X-EEMSG-check-005: 0 X-EEMSG-check-006: 000-001;26fde77f-742e-49a3-b665-58a45dfb3ea8 Authentication-Results: USFB3CPA03.eemsg.mail.mil; spf=None smtp.pra=keescook@chromium.org; spf=Pass smtp.mailfrom=keescook@chromium.org; spf=None smtp.helo=postmaster@mail-pg1-f196.google.com; dkim=pass (signature verified) header.i=@chromium.org; dmarc=pass (p=none dis=none) d=chromium.org X-EEMSG-check-008: 32233261|USFB3CPA03_EEMSG_MP25.csd.disa.mil X-EEMSG-SBRS: 0.0 X-EEMSG-ORIG-IP: 209.85.215.196 X-EEMSG-check-002: true X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0DTAgC2falbZMTXVdFbHQEBBQEHBQGDX0KBSoxoi0+Te4ZbCxOEWQKDWRkHAQQ0FAEDAQEBAQEBAQEBBBoLDAUdDiMMgjUkAYJfBkABATcBDxkmEjQBBQEcBhODIYICmCs8ihyCHYJ1AQEFhxMICQEIhlCCe4EbF4FBP456jnGOEAmCDIc+hlQiiGeGRSuUNwYCCQcPIYE4gXYzGggoCIMnghkMFxGISYVeTwELjR0BAQ X-IPAS-Result: A0DTAgC2falbZMTXVdFbHQEBBQEHBQGDX0KBSoxoi0+Te4ZbCxOEWQKDWRkHAQQ0FAEDAQEBAQEBAQEBBBoLDAUdDiMMgjUkAYJfBkABATcBDxkmEjQBBQEcBhODIYICmCs8ihyCHYJ1AQEFhxMICQEIhlCCe4EbF4FBP456jnGOEAmCDIc+hlQiiGeGRSuUNwYCCQcPIYE4gXYzGggoCIMnghkMFxGISYVeTwELjR0BAQ Received: from mail-pg1-f196.google.com ([209.85.215.196]) by USFB3CPA03.eemsg.mail.mil with ESMTP/TLS/AES128-SHA; 25 Sep 2018 00:18:47 +0000 Received: by mail-pg1-f196.google.com with SMTP id b129-v6so10098202pga.13 for ; Mon, 24 Sep 2018 17:18:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; h=from:to:cc:subject:date:message-id:in-reply-to:references; bh=6EfxT0zcae6A5rzLbELC2IqQ09YDT4L0Am/o9GdvmCQ=; b=ca8HuJEN8GvhdrrGWOJGHlywVNTjjXI23kAJOqur2gPvgJq4UX3WPgibnW/GvLJ6LX sBljd7tWuue+7KP85zge+rgxoKYQ7HtIsfSzJedqK/WdiGbpKo6YLJJRwGLnz8V5oDlO LNqPGr1y0SSZvAPde8tK7oZ9JRyQ2MKjS1bt4= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references; bh=6EfxT0zcae6A5rzLbELC2IqQ09YDT4L0Am/o9GdvmCQ=; b=U62dRSagoqn8RLfnIVTY+8b2PsME6KlE5/L9gM3AcbPz19mf2U3c9xYw6DbsMtk58O pnjZKailnF3XF29UYBnDsH6YgWctKqNVNvYHsQLKlfPp9iW5QkreRqw02imuTTm+1NXN /ySFdUMMynHdL+qxAmH4W96sCycc050NyT0K7cntv5geee5oqhnQCnXpmj0dKNky+X2Z 4Xzwz66fWfO18Vuche7BoI5WXWCstwoz+XLKVU7scJMcrRt3z4cPak6KY5ZmxRXid9fe JmIHOBGBX3TBWKxalOhccSbzMcEgChu8tIMw+vuU0xd6SSlg1AEOCycT5sS2JW889JT6 PxpA== X-Gm-Message-State: ABuFfogqYFRfy9EGsOe09UOuXXLNZQXikyQpMUdw9Ksw07NkrsjTGstv 5kMttZo1vOVNCBCdf5PXkzkkIw== X-Google-Smtp-Source: ACcGV61sgt2d0oFLTpcaL284CJN9GYkgWTcz9hrEiYPZ5KRo/A/eEWo/lu+MeTxLrEIDpJQw98EHPQ== X-Received: by 2002:a63:700e:: with SMTP id l14-v6mr860909pgc.359.1537834726429; Mon, 24 Sep 2018 17:18:46 -0700 (PDT) Received: from www.outflux.net (173-164-112-133-Oregon.hfc.comcastbusiness.net. [173.164.112.133]) by smtp.gmail.com with ESMTPSA id a75-v6sm540713pfa.124.2018.09.24.17.18.39 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Mon, 24 Sep 2018 17:18:42 -0700 (PDT) X-EEMSG-check-009: 444-444 From: Kees Cook To: James Morris Date: Mon, 24 Sep 2018 17:18:10 -0700 Message-Id: <20180925001832.18322-8-keescook@chromium.org> X-Mailer: git-send-email 2.17.1 In-Reply-To: <20180925001832.18322-1-keescook@chromium.org> References: <20180925001832.18322-1-keescook@chromium.org> X-Mailman-Approved-At: Tue, 25 Sep 2018 08:10:26 -0400 Subject: [PATCH security-next v3 07/29] LSM: Convert security_initcall() into DEFINE_LSM() X-BeenThere: selinux@tycho.nsa.gov X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Security-Enhanced Linux \(SELinux\) mailing list" List-Post: List-Help: Cc: linux-arch@vger.kernel.org, John Johansen , Jonathan Corbet , Tetsuo Handa , linux-doc@vger.kernel.org, linux-kernel@vger.kernel.org, "Schaufler, Casey" , linux-security-module@vger.kernel.org, selinux@tycho.nsa.gov, Stephen Smalley , Kees Cook MIME-Version: 1.0 Errors-To: selinux-bounces@tycho.nsa.gov Sender: "Selinux" X-Virus-Scanned: ClamAV using ClamSMTP Instead of using argument-based initializers, switch to defining the contents of struct lsm_info on a per-LSM basis. This also drops the final use of the now inaccurate "initcall" naming. Cc: John Johansen Cc: James Morris Cc: "Serge E. Hallyn" Cc: Paul Moore Cc: Stephen Smalley Cc: Casey Schaufler Cc: Tetsuo Handa Cc: Mimi Zohar Cc: linux-security-module@vger.kernel.org Cc: selinux@tycho.nsa.gov Signed-off-by: Kees Cook --- include/linux/lsm_hooks.h | 6 ++++-- security/apparmor/lsm.c | 4 +++- security/integrity/iint.c | 4 +++- security/selinux/hooks.c | 4 +++- security/smack/smack_lsm.c | 4 +++- security/tomoyo/tomoyo.c | 4 +++- 6 files changed, 19 insertions(+), 7 deletions(-) diff --git a/include/linux/lsm_hooks.h b/include/linux/lsm_hooks.h index ad04761e5587..02ec717189f9 100644 --- a/include/linux/lsm_hooks.h +++ b/include/linux/lsm_hooks.h @@ -2045,11 +2045,13 @@ struct lsm_info { extern struct lsm_info __start_lsm_info[], __end_lsm_info[]; -#define security_initcall(lsm) \ +#define DEFINE_LSM(lsm) \ static struct lsm_info __lsm_##lsm \ __used __section(.lsm_info.init) \ __aligned(sizeof(unsigned long)) \ - = { .init = lsm, } + = { \ + +#define END_LSM } #ifdef CONFIG_SECURITY_SELINUX_DISABLE /* diff --git a/security/apparmor/lsm.c b/security/apparmor/lsm.c index 8b8b70620bbe..7fa7b4464cf4 100644 --- a/security/apparmor/lsm.c +++ b/security/apparmor/lsm.c @@ -1606,4 +1606,6 @@ static int __init apparmor_init(void) return error; } -security_initcall(apparmor_init); +DEFINE_LSM(apparmor) + .init = apparmor_init, +END_LSM; diff --git a/security/integrity/iint.c b/security/integrity/iint.c index 70d21b566955..20e60df929a3 100644 --- a/security/integrity/iint.c +++ b/security/integrity/iint.c @@ -175,7 +175,9 @@ static int __init integrity_iintcache_init(void) 0, SLAB_PANIC, init_once); return 0; } -security_initcall(integrity_iintcache_init); +DEFINE_LSM(integrity) + .init = integrity_iintcache_init, +END_LSM; /* diff --git a/security/selinux/hooks.c b/security/selinux/hooks.c index ad9a9b8e9979..469a90806bc6 100644 --- a/security/selinux/hooks.c +++ b/security/selinux/hooks.c @@ -7202,7 +7202,9 @@ void selinux_complete_init(void) /* SELinux requires early initialization in order to label all processes and objects when they are created. */ -security_initcall(selinux_init); +DEFINE_LSM(selinux) + .init = selinux_init, +END_LSM; #if defined(CONFIG_NETFILTER) diff --git a/security/smack/smack_lsm.c b/security/smack/smack_lsm.c index 340fc30ad85d..1e1ace718e75 100644 --- a/security/smack/smack_lsm.c +++ b/security/smack/smack_lsm.c @@ -4882,4 +4882,6 @@ static __init int smack_init(void) * Smack requires early initialization in order to label * all processes and objects when they are created. */ -security_initcall(smack_init); +DEFINE_LSM(smack) + .init = smack_init, +END_LSM; diff --git a/security/tomoyo/tomoyo.c b/security/tomoyo/tomoyo.c index 9f932e2d6852..a280d4eab456 100644 --- a/security/tomoyo/tomoyo.c +++ b/security/tomoyo/tomoyo.c @@ -550,4 +550,6 @@ static int __init tomoyo_init(void) return 0; } -security_initcall(tomoyo_init); +DEFINE_LSM(tomoyo) + .init = tomoyo_init, +END_LSM;