Received: by 2002:ac0:a5a6:0:0:0:0:0 with SMTP id m35-v6csp1299767imm; Wed, 26 Sep 2018 15:26:20 -0700 (PDT) X-Google-Smtp-Source: ACcGV60L5fHjqJLHovPPeUVCMW6XLnJmZ/0BB+KrJaeaTgCDAKFmpDWTWV0xTIgvnsAbaqvNQwM1 X-Received: by 2002:a17:902:5a89:: with SMTP id r9-v6mr3541771pli.95.1538000780724; Wed, 26 Sep 2018 15:26:20 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1538000780; cv=none; d=google.com; s=arc-20160816; b=nDmUp/k4RPLURVPGAiSH+6rdfUpnx6tscTlbZFNh6IudhXEG567QsFUb1iQKy71uvO G+3z4WgGRuAY+qUU/nULY3NLp34kVd/kT2pfEE1fLFemj4ptJm/mvA29oyxfkDNVtluN jjlBcRe5r+XRw8fNWHzaGCwkW+U862V4wVszctxhOxdNUM4M09hBXGMMbO2Ji2a078Pw Xdj8RFlGotrFvviEcMbzg4EvdVOrRNTZ7NRrEFtvatAR/Yfm0VFPrvj/q76mM/MJuK/4 kkHh7FnhWo1bGWwcdgOboivipqACUL6vgP3cfia7/z19I6jB97pJ5SlWHxd2CtWIGnte IT0g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:mime-version:content-transfer-encoding :dlp-reaction:dlp-version:dlp-product:content-language :accept-language:in-reply-to:references:message-id:date:thread-index :thread-topic:subject:cc:to:from; bh=zZA77NSSp8kr0eHPWwU/6WuRVRpBkWdfqxHqSO7wenM=; b=aA7WLDcEVlM0lQ+wV3X+owP01E4FjJlYYfRTBLFzMQOOKj7cqUyoeOqUtE4QUeSo/2 eEZIjShTGiRer/1+3orpiO1ReFfBOVSP3MBqMGUzbf2EbMD68eLbXtPTP0qBSI6xRW86 leaVc+46cCH7M+zLYw7giHNO10K31nem4AwljQP/CUEMu8oLAjDO5KrZkcy5tf0XOooE RVSOzv+VLmKYhCCz9iXr2EdOZj7jREo4/YraS2VzMutXycxKS0oRjyWxmtTMSMBDs5OV f6UBa4nXgyscL+e1DQlSO1Qz523lDL4NffVmovjCP78xDkoHGesg/mgYnEXs3PNN5/zN SCrQ== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=intel.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id 33-v6si228661ply.251.2018.09.26.15.26.05; Wed, 26 Sep 2018 15:26:20 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=intel.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726708AbeI0Ejv (ORCPT + 99 others); Thu, 27 Sep 2018 00:39:51 -0400 Received: from mga12.intel.com ([192.55.52.136]:49310 "EHLO mga12.intel.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726192AbeI0Ejv (ORCPT ); Thu, 27 Sep 2018 00:39:51 -0400 X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga003.jf.intel.com ([10.7.209.27]) by fmsmga106.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 26 Sep 2018 15:24:44 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.54,307,1534834800"; d="scan'208";a="86860953" Received: from orsmsx108.amr.corp.intel.com ([10.22.240.6]) by orsmga003.jf.intel.com with ESMTP; 26 Sep 2018 15:24:39 -0700 Received: from orsmsx116.amr.corp.intel.com (10.22.240.14) by ORSMSX108.amr.corp.intel.com (10.22.240.6) with Microsoft SMTP Server (TLS) id 14.3.319.2; Wed, 26 Sep 2018 15:24:39 -0700 Received: from orsmsx107.amr.corp.intel.com ([169.254.1.14]) by ORSMSX116.amr.corp.intel.com ([169.254.7.58]) with mapi id 14.03.0319.002; Wed, 26 Sep 2018 15:24:35 -0700 From: "Schaufler, Casey" To: Jann Horn CC: Kernel Hardening , kernel list , linux-security-module , "selinux@tycho.nsa.gov" , "Hansen, Dave" , "Dock, Deneen T" , "kristen@linux.intel.com" , Arjan van de Ven Subject: RE: [PATCH v5 4/5] Capability: Complete PTRACE_MODE_SCHED Thread-Topic: [PATCH v5 4/5] Capability: Complete PTRACE_MODE_SCHED Thread-Index: AQHUVdhjP/87TC64iE2Vl5spY0HK/KUDiLqA//+YZ8A= Date: Wed, 26 Sep 2018 22:24:34 +0000 Message-ID: <99FC4B6EFCEFD44486C35F4C281DC6732146256E@ORSMSX107.amr.corp.intel.com> References: <20180926203446.2004-1-casey.schaufler@intel.com> <20180926203446.2004-5-casey.schaufler@intel.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-titus-metadata-40: eyJDYXRlZ29yeUxhYmVscyI6IiIsIk1ldGFkYXRhIjp7Im5zIjoiaHR0cDpcL1wvd3d3LnRpdHVzLmNvbVwvbnNcL0ludGVsMyIsImlkIjoiNWNiNTMxMzAtYzAxYi00MDRkLThlYmEtZGRjYTM1MjFkZGZmIiwicHJvcHMiOlt7Im4iOiJDVFBDbGFzc2lmaWNhdGlvbiIsInZhbHMiOlt7InZhbHVlIjoiQ1RQX05UIn1dfV19LCJTdWJqZWN0TGFiZWxzIjpbXSwiVE1DVmVyc2lvbiI6IjE3LjEwLjE4MDQuNDkiLCJUcnVzdGVkTGFiZWxIYXNoIjoiXC9ITDl0bjN5SlVJN2wzMENucEEreHJET0dTSWdEc1IzY0VjQ3VOYnU4QUlESXZvK3hnNk01YnBRTGxkXC9OcGpHIn0= x-ctpclassification: CTP_NT dlp-product: dlpe-windows dlp-version: 11.0.400.15 dlp-reaction: no-action x-originating-ip: [10.22.254.140] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBKYW5uIEhvcm4gW21haWx0bzpq YW5uaEBnb29nbGUuY29tXQ0KPiBTZW50OiBXZWRuZXNkYXksIFNlcHRlbWJlciAyNiwgMjAxOCAy OjI2IFBNDQo+IFRvOiBTY2hhdWZsZXIsIENhc2V5IDxjYXNleS5zY2hhdWZsZXJAaW50ZWwuY29t Pg0KPiBDYzogS2VybmVsIEhhcmRlbmluZyA8a2VybmVsLWhhcmRlbmluZ0BsaXN0cy5vcGVud2Fs bC5jb20+OyBrZXJuZWwgbGlzdA0KPiA8bGludXgta2VybmVsQHZnZXIua2VybmVsLm9yZz47IGxp bnV4LXNlY3VyaXR5LW1vZHVsZSA8bGludXgtc2VjdXJpdHktDQo+IG1vZHVsZUB2Z2VyLmtlcm5l bC5vcmc+OyBzZWxpbnV4QHR5Y2hvLm5zYS5nb3Y7IEhhbnNlbiwgRGF2ZQ0KPiA8ZGF2ZS5oYW5z ZW5AaW50ZWwuY29tPjsgRG9jaywgRGVuZWVuIFQgPGRlbmVlbi50LmRvY2tAaW50ZWwuY29tPjsN Cj4ga3Jpc3RlbkBsaW51eC5pbnRlbC5jb207IEFyamFuIHZhbiBkZSBWZW4gPGFyamFuQGxpbnV4 LmludGVsLmNvbT4NCj4gU3ViamVjdDogUmU6IFtQQVRDSCB2NSA0LzVdIENhcGFiaWxpdHk6IENv bXBsZXRlIFBUUkFDRV9NT0RFX1NDSEVEDQo+IA0KPiBPbiBXZWQsIFNlcCAyNiwgMjAxOCBhdCAx MDozNSBQTSBDYXNleSBTY2hhdWZsZXINCj4gPGNhc2V5LnNjaGF1ZmxlckBpbnRlbC5jb20+IHdy b3RlOg0KPiA+IEFsbG93IGEgY29tcGxldGUgcHRyYWNlIGFjY2VzcyBjaGVjayB3aXRoIG1vZGUg UFRSQUNFX01PREVfU0NIRUQuDQo+ID4gRGlzYWJsZSB0aGUgaW5hcHByb3ByaWF0ZSBwcml2aWxl Z2UgY2hlY2sgaW4gdGhlIGNhcGFiaWxpdHkgY29kZQ0KPiA+IHRoYXQgZG9lcyBpbmNvbXBhdGli bGUgbG9ja2luZy4NCj4gDQo+IFdoYXQncyB0aGF0IGxvY2tpbmcgeW91J3JlIHRhbGtpbmcgYWJv dXQ/DQoNCm5zX2NhcGFibGUoKSBldmVudHVhbGx5IGdldHMgeW91IHRvIGFuIGF1ZGl0IGNhbGwu IFRoZSBhdWRpdCBjb2RlDQppcyBnb2luZyB0byBkbyB0aGUgbG9ja2luZy4gRm9ydHVuYXRlbHks IHRoZSBwcmVjZWRpbmcgY2FwX2lzc3Vic2V0KCkNCmlzIHRoZSBjaGVjayB0aGF0IHdlIHJlYWxs eSBuZWVkIGhlcmUuDQoNCj4gDQo+ID4gU2lnbmVkLW9mZi1ieTogQ2FzZXkgU2NoYXVmbGVyIDxj YXNleS5zY2hhdWZsZXJAaW50ZWwuY29tPg0KPiA+IC0tLQ0KPiA+ICBrZXJuZWwvcHRyYWNlLmMg ICAgICB8IDIgLS0NCj4gPiAgc2VjdXJpdHkvY29tbW9uY2FwLmMgfCAyICsrDQo+ID4gIDIgZmls ZXMgY2hhbmdlZCwgMiBpbnNlcnRpb25zKCspLCAyIGRlbGV0aW9ucygtKQ0KPiA+DQo+ID4gZGlm ZiAtLWdpdCBhL2tlcm5lbC9wdHJhY2UuYyBiL2tlcm5lbC9wdHJhY2UuYw0KPiA+IGluZGV4IDk5 Y2ZkZGRlNmE1NS4uMGI2YTlkZjUxYzNiIDEwMDY0NA0KPiA+IC0tLSBhL2tlcm5lbC9wdHJhY2Uu Yw0KPiA+ICsrKyBiL2tlcm5lbC9wdHJhY2UuYw0KPiA+IEBAIC0zMzEsOCArMzMxLDYgQEAgc3Rh dGljIGludCBfX3B0cmFjZV9tYXlfYWNjZXNzKHN0cnVjdCB0YXNrX3N0cnVjdA0KPiAqdGFzaywg dW5zaWduZWQgaW50IG1vZGUpDQo+ID4gICAgICAgICAgICAgICFwdHJhY2VfaGFzX2NhcChtbS0+ dXNlcl9ucywgbW9kZSkpKQ0KPiA+ICAgICAgICAgICAgIHJldHVybiAtRVBFUk07DQo+ID4NCj4g PiAtICAgICAgIGlmIChtb2RlICYgUFRSQUNFX01PREVfU0NIRUQpDQo+ID4gLSAgICAgICAgICAg ICAgIHJldHVybiAwOw0KPiA+ICAgICAgICAgcmV0dXJuIHNlY3VyaXR5X3B0cmFjZV9hY2Nlc3Nf Y2hlY2sodGFzaywgbW9kZSk7DQo+ID4gIH0NCj4gPg0KPiA+IGRpZmYgLS1naXQgYS9zZWN1cml0 eS9jb21tb25jYXAuYyBiL3NlY3VyaXR5L2NvbW1vbmNhcC5jDQo+ID4gaW5kZXggMmU0ODlkNmEz YWM4Li5lNzc0NTcxMTBkMDUgMTAwNjQ0DQo+ID4gLS0tIGEvc2VjdXJpdHkvY29tbW9uY2FwLmMN Cj4gPiArKysgYi9zZWN1cml0eS9jb21tb25jYXAuYw0KPiA+IEBAIC0xNTIsNiArMTUyLDggQEAg aW50IGNhcF9wdHJhY2VfYWNjZXNzX2NoZWNrKHN0cnVjdCB0YXNrX3N0cnVjdA0KPiAqY2hpbGQs IHVuc2lnbmVkIGludCBtb2RlKQ0KPiA+ICAgICAgICAgaWYgKGNyZWQtPnVzZXJfbnMgPT0gY2hp bGRfY3JlZC0+dXNlcl9ucyAmJg0KPiA+ICAgICAgICAgICAgIGNhcF9pc3N1YnNldChjaGlsZF9j cmVkLT5jYXBfcGVybWl0dGVkLCAqY2FsbGVyX2NhcHMpKQ0KPiA+ICAgICAgICAgICAgICAgICBn b3RvIG91dDsNCj4gPiArICAgICAgIGlmIChtb2RlICYgUFRSQUNFX01PREVfU0NIRUQpDQo+ID4g KyAgICAgICAgICAgICAgIGdvdG8gb3V0Ow0KPiANCj4gU28gZm9yIFBUUkFDRV9NT0RFX1NDSEVE LCB0aGlzIGZ1bmN0aW9uIGFsd2F5cyByZXR1cm5zIDAsIHJpZ2h0PyANCg0KVGhhdCBjYW4ndCBi ZSByaWdodCwgY2FuIGl0PyBEZXRlcm1pbmluZyB0aGF0IHdlIGhhdmUgUFRSQUNFX01PREVfU0NI RUQNCmF0IHRoaXMgcG9pbnQgc2hvdWxkIHJlc3VsdCBpbiAtRVBFUk0uIEkgbXVja2VkIHVwIG9u IHRoZSBsb2dpYyBmbG93LiBUaGUNCm5leHQgcmV2aXNpb24gd2lsbCBmaXggdGhpcy4NCg0KPiBJ ZiB0aGF0J3MgaW50ZW50aW9uYWwsIHBlcmhhcHMgeW91IHNob3VsZCBpbnN0ZWFkIGp1c3QgcHV0 ICJpZiAobW9kZSAmDQo+IFBUUkFDRV9NT0RFX1NDSEVEKSByZXR1cm4gMDsiIGF0IHRoZSBzdGFy dCBvZiB0aGUgZnVuY3Rpb24sIHRvIGF2b2lkDQo+IHRha2luZyB0aGUgUkNVIHJlYWQgbG9jayBp biB0aGlzIGNhc2UuDQo+IA0KPiA+ICAgICAgICAgaWYgKG5zX2NhcGFibGUoY2hpbGRfY3JlZC0+ dXNlcl9ucywgQ0FQX1NZU19QVFJBQ0UpKQ0KPiA+ICAgICAgICAgICAgICAgICBnb3RvIG91dDsN Cj4gPiAgICAgICAgIHJldCA9IC1FUEVSTTsNCg==