Received: by 2002:ac0:a5a6:0:0:0:0:0 with SMTP id m35-v6csp121762imm; Fri, 21 Sep 2018 19:55:11 -0700 (PDT) X-Google-Smtp-Source: ANB0VdbY+u0aalWMD7BBnhvCEPaI9iGRsRsx3JbtyZRxuhSBSFm8YnSWhVKDKXmCWN6wfjDBv4HH X-Received: by 2002:a62:7d8d:: with SMTP id y135-v6mr497236pfc.259.1537584911577; Fri, 21 Sep 2018 19:55:11 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1537584911; cv=none; d=google.com; s=arc-20160816; b=GpD3sbV9rMe8tC3Z7e/CEAR64Qp4OPnaprdMeSt9OoVjaOyYC+sAeGbstaSpZGZDPV DWiqgSeDt4dwQ8ikuYKCJwj7/BcIFKE6YRoz/ORiPMYeWx2NeSMrXK+4Ya9as5NzduMY Htie5SvDBNdBTebou/1EYduGdDfTyKgACP3ozmB4w2AnGj3PurEr7VAYXTG6urajqeE2 xRNb0gjv8UuVX2z3zCepMw8fxW4biaaN8MgAXDQVnCOeClXdM5WvxdEQawKRyzHa9OWk iU7Ih9duxOazlD191oQEOOsfBVRGAQyH5oXbp3js6Boj+J8GtevuMZdz0Oz+x4xXPCK0 Vl8g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:cc:to:subject:message-id:date:from :references:in-reply-to:mime-version:dkim-signature; bh=RoRONKQMjtDxQiQHwsgl0ViOw4PwAn/e0EP/Ksl/R08=; b=jAZlh7lh3UJyzdu5ugZ4Nu7WAw5ZalrWDSj/OIENL7Iath9ewSXSMht+x+x2n+fGDt +IKLI6op8n/dDwxutVbGFy2enSWLTXA7Vju+rimp6IALJMccoQaM3NIEGsdv+1DqI8Bf hgTmqh+KQyOQnx4Yp6h+LVCuT8kTuMdrLG07/L9HbJueKhRu8cDns+EGgxMzQx4J+bAg 74Dxp96EjXGm4FjFrIOFUpNRsSbRVNw3mEmIqIR0wgwAnnMHwSuLgbQd91mR3YJHPmSJ NzQcMYUNZI85qPZvngLaySXBqEjXORUv0OXG7pdN84oevRP03gwjORU7iCdYvWF+Lk3L hifw== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@chromium.org header.s=google header.b=Hq4jTAqu; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=chromium.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id p24-v6si28501015plo.52.2018.09.21.19.54.55; Fri, 21 Sep 2018 19:55:11 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; dkim=pass header.i=@chromium.org header.s=google header.b=Hq4jTAqu; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=chromium.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726153AbeIVIpS (ORCPT + 99 others); Sat, 22 Sep 2018 04:45:18 -0400 Received: from mail-yw1-f66.google.com ([209.85.161.66]:39664 "EHLO mail-yw1-f66.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1725786AbeIVIpS (ORCPT ); Sat, 22 Sep 2018 04:45:18 -0400 Received: by mail-yw1-f66.google.com with SMTP id g3-v6so1346464ywb.6 for ; Fri, 21 Sep 2018 19:53:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=RoRONKQMjtDxQiQHwsgl0ViOw4PwAn/e0EP/Ksl/R08=; b=Hq4jTAquuv5osMvtG3RmGxhFk2LFMuH+dj3wCJ83NxZH3g97MbcjBfoylvySfBa/mz e/yhH4pp8biGshjZ7uzr4deQaKL8o6kHl/y67txD51VUqx1aZjJQ+EfKcc4Pi6WPbIef RUccvcSZaG+RbHkIw7OfHYIab+sb/lmvjQMp8= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=RoRONKQMjtDxQiQHwsgl0ViOw4PwAn/e0EP/Ksl/R08=; b=Eqi2LgOu3f+jEHTdXvaQBDLUrMtLbQrH4nEs40Kij3WWYMIAR6ZaubaeGfAisIZWPT DNmXlzXjWW5nisMbNn8YqQAI2D1nHdtW8CiahwjGWvdRX35jPGQwvZODQDca8M8+4E7K wd/n+NYFVchAN3GQMukKUL6qoBmBbLeX/6HQQLYTOqHPPU+XdNPt6aN1tXCk7A5dazUg XepVACqCsurl5Ph0x+CrywFlH9VObx7yY8KeCJbdMrtRwT9f+HlHSJVlwbbzoATHtTTv Z6t0a0Hsb3bMh1W3/kXGXECOr4eZY/b21c39FV2Ri2uteQ8xKcbE+pmZOfpO0wU75LL9 /ZDQ== X-Gm-Message-State: APzg51CFIdpWyAXAYC6y9LsvEemeQ8CyYYnZ3cCGZ+/5xZSfoL+Ebc0R 58+JoYQAR3aCxkfCComSHuhhESpNmMQ= X-Received: by 2002:a81:b102:: with SMTP id p2-v6mr46574ywh.20.1537584807143; Fri, 21 Sep 2018 19:53:27 -0700 (PDT) Received: from mail-yw1-f52.google.com (mail-yw1-f52.google.com. [209.85.161.52]) by smtp.gmail.com with ESMTPSA id u124-v6sm10206070ywd.37.2018.09.21.19.53.25 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 21 Sep 2018 19:53:25 -0700 (PDT) Received: by mail-yw1-f52.google.com with SMTP id j131-v6so5961559ywc.13 for ; Fri, 21 Sep 2018 19:53:25 -0700 (PDT) X-Received: by 2002:a81:98d7:: with SMTP id p206-v6mr193715ywg.353.1537584805076; Fri, 21 Sep 2018 19:53:25 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:a25:5f04:0:0:0:0:0 with HTTP; Fri, 21 Sep 2018 19:53:24 -0700 (PDT) In-Reply-To: <1ca14e0b-6a95-4efe-7a23-e82d7562df26@schaufler-ca.com> References: <1ca14e0b-6a95-4efe-7a23-e82d7562df26@schaufler-ca.com> From: Kees Cook Date: Fri, 21 Sep 2018 19:53:24 -0700 X-Gmail-Original-Message-ID: Message-ID: Subject: Re: [PATCH v4 11/19] LSM: Infrastructure management of the file security To: Casey Schaufler Cc: LSM , James Morris , SE Linux , LKLM , John Johansen , Tetsuo Handa , Paul Moore , Stephen Smalley , "linux-fsdevel@vger.kernel.org" , Alexey Dobriyan , =?UTF-8?B?TWlja2HDq2wgU2FsYcO8bg==?= , Salvatore Mesoraca Content-Type: text/plain; charset="UTF-8" Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Fri, Sep 21, 2018 at 5:19 PM, Casey Schaufler wrote: > Move management of the file->f_security blob out of the > individual security modules and into the infrastructure. > The modules no longer allocate or free the data, instead > they tell the infrastructure how much space they require. > > Signed-off-by: Casey Schaufler Reviewed-by: Kees Cook -Kees -- Kees Cook Pixel Security