Received: by 2002:ac0:946b:0:0:0:0:0 with SMTP id j40csp1218266imj; Sun, 17 Feb 2019 00:28:57 -0800 (PST) X-Google-Smtp-Source: AHgI3IaIBgE0Dz801Aeee3bQ2Hyoh2ccv+qcv7wrXxP8Bcnm3bOgXBwME6XyuxOKeK2G/mta3WII X-Received: by 2002:a17:902:6b87:: with SMTP id p7mr19335112plk.282.1550392137032; Sun, 17 Feb 2019 00:28:57 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1550392137; cv=none; d=google.com; s=arc-20160816; b=B3hgT9JAhPT0t7rrZW5wsX2o3zAD7LGffVLO37TuQ7gHwvcMmDqQlN6xWcLJj4fu4i 831GU+wkHwLFRUERXSB9qGulkc8YE7GztHf5UAYI+zZehZAYkHY9DOmP8GpwfuUkqS7D aHf/uHXK61/otVB530wsK3Lh9DmA6/jbSpqbeKjtsmBxC0FlwTTT8MbuoNOoWyCq+Kqh g3XFZ0HiXUzDSLA2zCUA72UiwatPoj0TTe4620ULN4SQgS7pIDaqDgz5yvRuvX0vji0w tmFrOiwTVILyyS9BQmQhGFquzumLO3uNjYkQdrbD3vvYZYFYzpQCiUt1S9v7SOMwNszG EI3A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:content-transfer-encoding :content-language:in-reply-to:mime-version:user-agent:date :message-id:from:references:cc:to:subject; bh=c3LGqB0a8IRpOXt2LFecV1rCoqudedA17ON4DUIOugk=; b=b36yqtnMV3tUNbsZ5DC94rqUDGYYQvfZcQtLNYcYilc3/gp45YSwu+Nt/ts87tYTsW pLjCCxQx1tsdj2TioVFrh/HUvR5OibHfsHTAqXeiEZ68vmTrjV08GRMIzmF0gqq3dTQd Xyo0ODwal7ickPpTmzqO3Ah/CYnn+wAIClPblDR6D1BQdE4VNicwPGj2mzmW9/DKGqu0 9daqGPJoY7TTgNYEW22jol7ZPiyxihnA6QxrMKkl7kHWB65HJy91EbbRutP+oXy54OEW w6ho2I/h27jM0GyR7t5m6BmdU1BZOLUbfzXb6kEpGLE9ss6D6qfaPJx7+EJ+F2v68L7I HtTg== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id y8si4869413plr.237.2019.02.17.00.28.41; Sun, 17 Feb 2019 00:28:57 -0800 (PST) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1727149AbfBQFRP (ORCPT + 99 others); Sun, 17 Feb 2019 00:17:15 -0500 Received: from www262.sakura.ne.jp ([202.181.97.72]:59013 "EHLO www262.sakura.ne.jp" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1725372AbfBQFRP (ORCPT ); Sun, 17 Feb 2019 00:17:15 -0500 Received: from fsav303.sakura.ne.jp (fsav303.sakura.ne.jp [153.120.85.134]) by www262.sakura.ne.jp (8.15.2/8.15.2) with ESMTP id x1H5GuTR090850; Sun, 17 Feb 2019 14:16:56 +0900 (JST) (envelope-from penguin-kernel@I-love.SAKURA.ne.jp) Received: from www262.sakura.ne.jp (202.181.97.72) by fsav303.sakura.ne.jp (F-Secure/fsigk_smtp/530/fsav303.sakura.ne.jp); Sun, 17 Feb 2019 14:16:56 +0900 (JST) X-Virus-Status: clean(F-Secure/fsigk_smtp/530/fsav303.sakura.ne.jp) Received: from [192.168.1.8] (softbank126126163036.bbtec.net [126.126.163.36]) (authenticated bits=0) by www262.sakura.ne.jp (8.15.2/8.15.2) with ESMTPSA id x1H5Goq5090695 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=NO); Sun, 17 Feb 2019 14:16:56 +0900 (JST) (envelope-from penguin-kernel@I-love.SAKURA.ne.jp) Subject: Re: [PATCH v2] LSM: Ignore "security=" when "lsm=" is specified To: SELinux , kernel-team@lists.ubuntu.com Cc: Casey Schaufler , Kees Cook , James Morris , linux-security-module@vger.kernel.org, linux-kernel@vger.kernel.org References: <20190212182318.GA16669@beast> <5260689d-9016-bdf4-6070-13d2c88ac8a8@schaufler-ca.com> From: Tetsuo Handa Message-ID: <4ed50852-abfb-773b-01e4-b4ac83e32ed3@I-love.SAKURA.ne.jp> Date: Sun, 17 Feb 2019 14:16:50 +0900 User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.5.0 MIME-Version: 1.0 In-Reply-To: <5260689d-9016-bdf4-6070-13d2c88ac8a8@schaufler-ca.com> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On 2019/02/14 1:05, Casey Schaufler wrote: > On 2/12/2019 10:23 AM, Kees Cook wrote: >> To avoid potential confusion, explicitly ignore "security=" when "lsm=" is >> used on the command line, and report that it is happening. >> >> Suggested-by: Tetsuo Handa >> Signed-off-by: Kees Cook > > Acked-by: Casey Schaufler > The manual for TOMOYO was updated to follow this change. SELinux folks and AppArmor folks, can we apply this change?