Received: by 2002:ac0:a5a6:0:0:0:0:0 with SMTP id m35-v6csp123484imm; Fri, 21 Sep 2018 19:58:21 -0700 (PDT) X-Google-Smtp-Source: ANB0Vda+wsL0twFDBoLpw2l8r/xqbCiuHyzMdKRXLbLgraH0/zvGJ5ZfYkzyO0hSXbF3BsT60+Pq X-Received: by 2002:a62:b40c:: with SMTP id h12-v6mr561817pfn.18.1537585101234; Fri, 21 Sep 2018 19:58:21 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1537585101; cv=none; d=google.com; s=arc-20160816; b=m6+1d6Jbht56QAxLdb6klKZpkHfwBIeT29JouQ2/AECozNTNmyA1Wj+4jDsJvPh1QU P5IeJ32oaMJcnjQg2q8okIFzWYh1UDuGHnWE2mfY/1+TMDBQSsnJYHKiBx0DilCqgdkA pxtnSR8NJDMIRvm9A8tffl6gu7LktnNHjT2NT1crP7Fha8dxFreB/UQgkAk0o8o0aU9a kZ2A4uQWDlKHpMIuSilosObiqcmcB1NhKL+u5CX+te11lnaBsDlUfP2n+CBTpKzWqYMa FTLhbKl6dynyOtyCE24qZV7s6viMGcbjbldHGGDpLp3VlwYaL98YZH9oO8IamhJ1bJjH 2Cjg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:cc:to:subject:message-id:date:from :references:in-reply-to:mime-version:dkim-signature; bh=7S/M4Zp7l+UoPx8TVhrS6bceL5qB3bGgwOhQYLLk0ZQ=; b=ER3MNxK1FtoZvXBo+0kqXACgh/apybXdd2JOPN6XtvEfFb3F2n14VClSmjLQ6pnTeI chjoWeEpd755qE2/AtqBVlxtUfDke5gLD1CnD45K9C4D14VzbVMi5y/4+7Myh2ZE3+QV XRlwf5faDPdlUyio2SBjMEitYypGIiDaLErkNUgnSFRl+vEn4L/wW1NqK3pdZpx/ui8y UfAYVxOeHss2nO9QK/qYJokZUge3lGdaxfo0ytAwUuMBvGBohKyNyCi3pnXpnT25V8yc i9bzf3IR2sFCUAfwLfjdaJsl7hvts/ZeJs6MYAbcPLm/MK1ICiXwKmSk88GsR/dP9WZW lV6Q== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@chromium.org header.s=google header.b=SY7wIEjx; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=chromium.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id r1-v6si7502404pgo.431.2018.09.21.19.57.36; Fri, 21 Sep 2018 19:58:21 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; dkim=pass header.i=@chromium.org header.s=google header.b=SY7wIEjx; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=chromium.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1727072AbeIVIsv (ORCPT + 99 others); Sat, 22 Sep 2018 04:48:51 -0400 Received: from mail-yb1-f195.google.com ([209.85.219.195]:41327 "EHLO mail-yb1-f195.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726212AbeIVIsu (ORCPT ); Sat, 22 Sep 2018 04:48:50 -0400 Received: by mail-yb1-f195.google.com with SMTP id d14-v6so1173691ybs.8 for ; Fri, 21 Sep 2018 19:56:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=7S/M4Zp7l+UoPx8TVhrS6bceL5qB3bGgwOhQYLLk0ZQ=; b=SY7wIEjxYf/6UKpXXD9LwyPCUbx3itIUFcdP2rZoFo/Bk5CDamWMwoDrd3mi9MRkp7 xjmcMtujYnOw/+/dwZ+OmBYfFQE4CZNxXY/WGPKmGBPAbeSBbO1R+C8vmxg1KCAIuHnF z5V/HGdtFbsGtd/FPA7hMr+9v7C5mMcq38WeA= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=7S/M4Zp7l+UoPx8TVhrS6bceL5qB3bGgwOhQYLLk0ZQ=; b=Nr++sIg51j3NvQ6gnGkX+PDvjLrNSqLGr8JcBONwm+MdOBvs+9M345TpoSIk7bWp3o PzqpV+ykomQ9ikMaTk7Hkni8HAfylqPqYFFJzKnFru2a0jXhRq+8V7Z+GVd7JrTFvc/c hB0mDp8ZdzlLnvvHYjt6WsVVz4tdCwV1hbUDbMUrdiu287e/tjiMSipcVNbbFLHW8lrb qrJGkBZ5cRKxB/lAuI2clJfj3bIzk49u03l3TR2BBk/mOoEgclbNrbWiUBhfKGQFsngN dnGR7tDfgGWPI006qoj3VJ8bJREoTCAQtiRkvb8nDPcR5D0fcojtuTipIXjqRPWQW2sp AXEw== X-Gm-Message-State: ABuFfoiK5FJaEMYMtzuGsHUI3fDjBGKyLr+sr3FVVCfqHzWc5zoPGlDW RIIPRy/NK16pYFfMBKqE0AqQrrNPsec= X-Received: by 2002:a25:bc92:: with SMTP id e18-v6mr230193ybk.182.1537585018970; Fri, 21 Sep 2018 19:56:58 -0700 (PDT) Received: from mail-yb1-f171.google.com (mail-yb1-f171.google.com. [209.85.219.171]) by smtp.gmail.com with ESMTPSA id v34-v6sm22745ywh.45.2018.09.21.19.56.56 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 21 Sep 2018 19:56:56 -0700 (PDT) Received: by mail-yb1-f171.google.com with SMTP id y20-v6so6242445ybi.13 for ; Fri, 21 Sep 2018 19:56:56 -0700 (PDT) X-Received: by 2002:a25:3617:: with SMTP id d23-v6mr219248yba.141.1537585016189; Fri, 21 Sep 2018 19:56:56 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:a25:5f04:0:0:0:0:0 with HTTP; Fri, 21 Sep 2018 19:56:55 -0700 (PDT) In-Reply-To: <383f1b1a-3d7c-46d2-a553-3a09f25bc1c4@schaufler-ca.com> References: <383f1b1a-3d7c-46d2-a553-3a09f25bc1c4@schaufler-ca.com> From: Kees Cook Date: Fri, 21 Sep 2018 19:56:55 -0700 X-Gmail-Original-Message-ID: Message-ID: Subject: Re: [PATCH v4 16/19] SELinux: Abstract use of ipc security blobs To: Casey Schaufler Cc: LSM , James Morris , SE Linux , LKLM , John Johansen , Tetsuo Handa , Paul Moore , Stephen Smalley , "linux-fsdevel@vger.kernel.org" , Alexey Dobriyan , =?UTF-8?B?TWlja2HDq2wgU2FsYcO8bg==?= , Salvatore Mesoraca Content-Type: text/plain; charset="UTF-8" Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Fri, Sep 21, 2018 at 5:19 PM, Casey Schaufler wrote: > Don't use the ipc->security pointer directly. > Don't use the msg_msg->security pointer directly. > Provide helper functions that provides the security blob pointers. > > Signed-off-by: Casey Schaufler Reviewed-by: Kees Cook -Kees -- Kees Cook Pixel Security