Received: by 2002:ac0:946b:0:0:0:0:0 with SMTP id j40csp1972284imj; Sun, 17 Feb 2019 19:58:39 -0800 (PST) X-Google-Smtp-Source: AHgI3Ibu0vPna2ar0sCmF5G2kxgZeXs5tWkpgRzaWsb00g49Jz0XaKd7yA9a0qcoSnhqU5j1mw5o X-Received: by 2002:a17:902:b01:: with SMTP id 1mr23523967plq.331.1550462318910; Sun, 17 Feb 2019 19:58:38 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1550462318; cv=none; d=google.com; s=arc-20160816; b=sWqPqdofgwx2cojrHs9iAGYMzTXYWsMdjhY6yEXS37QJi48Jx6I3c1RRu5/WWwhV1A 6bwMmlRsmtCzZJ7nfjOkMhpDgKQe2o4kXHFMLOCBWHlUUvi5VmiZ/zTHIvrTE9IqRf5i P7m5jIxcAhbXEPisW58OJFRrTp3viB52E47z3yG8leDIxEL8Bf02vAnFdIlGpsqNg4dF /DRK825l54gEkCQ/ewBcHoOyw8ejd/BzD/2OKcF9Gw/XJLfkH/9xXGYqxLox71O1xlt9 I0Pm1zrlU1xcG+c8qUOHpu7PV3nHmpPVUoXBRcFPO+aJzi3Mnk1BmsOAEF8CJ7DGIJ6K ZGHA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:dkim-signature; bh=UOsM3VCVgb9jvwPmcWRSvBagRCh9VlWAv72+Ih2qte0=; b=UFenT03Oi+pCDwWXuR058TkQWojXODBsXltkdoNQDZewr8CEHSSTpUYGFX3MrXME2x Vtbl5UQIXGqfOxno3jh5fhf5QeifC+JS45+QvkKN+OQdTsCUh18qFKHjwVy3MiHXj6Kc QeHU9vzeI9TItMXvQRWIxWB3AY7qZswQGaexqddKxnoSLtzEUxC++I5ww1MNOrAi2Fnf AR1BQkUBucCpyPygRNClFyKgom2aCiIV7M5lDAsrfjtRTM8G/oXVuvDSQ5zqHOuN9Ecd phZBLQOhfjiA0gnXNc77UNhWDdhkPif13LXKRtIiVehP4pPvMhZaiD8LiyiKZ8/uk+ua jxZw== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@chromium.org header.s=google header.b=lPFHHgru; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=chromium.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id i62si8369801pli.239.2019.02.17.19.58.21; Sun, 17 Feb 2019 19:58:38 -0800 (PST) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; dkim=pass header.i=@chromium.org header.s=google header.b=lPFHHgru; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=chromium.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1728239AbfBRD5q (ORCPT + 99 others); Sun, 17 Feb 2019 22:57:46 -0500 Received: from mail-vs1-f66.google.com ([209.85.217.66]:46646 "EHLO mail-vs1-f66.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1727602AbfBRD5q (ORCPT ); Sun, 17 Feb 2019 22:57:46 -0500 Received: by mail-vs1-f66.google.com with SMTP id n10so8826472vso.13 for ; Sun, 17 Feb 2019 19:57:45 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=UOsM3VCVgb9jvwPmcWRSvBagRCh9VlWAv72+Ih2qte0=; b=lPFHHgruNQsGLwdT6TH5+K5HkaAvs54hgg8I+9lpT8zJJT90R+8fGdQhpnSnLdoT/1 /zu/zyHI3Oqk8te3MqN0NvqNRNOFQVN8eM0Z03NZ62Uq5DZ7cuCZg6PzAXI2L+6bAd6c +pi/uIn8MrUihRld/jD2bcWL1eBT1XuclwbFA= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=UOsM3VCVgb9jvwPmcWRSvBagRCh9VlWAv72+Ih2qte0=; b=QwmdKZQR52ZdpmSBruDciy5pzmkMQpD8maj5Fdnpu8i8PwEcShrCvAAlNwuak96LyS 2ymqyINDMVTnjOKbcWe46k34hawOmxnfvkxoJ17ATSY2o2S1WZzEeDvOxqN03/soohLp XeOKNk6jIF9479uaL9NBKDJqw3lNbBttGWidj2QNz3SmdnOAqznBzz4kSPOlJLcNqgFS hZttJjmNVlnfDfrR4sdR5EqJ842sb6ilFZQzkDhJgLm+J6cqAcEz6i0bXNgf003ze5Vo 2DVZEVJHnrLVEmXyiuMVAa6mv5frc8YwVNXhtmwR3p1HK/u0Qrs7+/qKTdMok9rMIJI4 DwAg== X-Gm-Message-State: AHQUAuZkkF7Its8d1i18QMQ08jexT3ISTKNyewUv2yjw/ZYKbx0xcXVf s0SlJxqmNseigJT86jeFZuhfqrRRfPo= X-Received: by 2002:a67:5e86:: with SMTP id s128mr11211995vsb.90.1550462264726; Sun, 17 Feb 2019 19:57:44 -0800 (PST) Received: from mail-vs1-f52.google.com (mail-vs1-f52.google.com. [209.85.217.52]) by smtp.gmail.com with ESMTPSA id n206sm10962767vkn.36.2019.02.17.19.57.42 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 17 Feb 2019 19:57:43 -0800 (PST) Received: by mail-vs1-f52.google.com with SMTP id z18so8850093vso.7 for ; Sun, 17 Feb 2019 19:57:42 -0800 (PST) X-Received: by 2002:a67:6f44:: with SMTP id k65mr10275404vsc.222.1550462262332; Sun, 17 Feb 2019 19:57:42 -0800 (PST) MIME-Version: 1.0 References: <20190212182318.GA16669@beast> <5260689d-9016-bdf4-6070-13d2c88ac8a8@schaufler-ca.com> <4ed50852-abfb-773b-01e4-b4ac83e32ed3@I-love.SAKURA.ne.jp> In-Reply-To: From: Kees Cook Date: Sun, 17 Feb 2019 19:57:28 -0800 X-Gmail-Original-Message-ID: Message-ID: Subject: Re: [PATCH v2] LSM: Ignore "security=" when "lsm=" is specified To: Paul Moore Cc: Tetsuo Handa , SELinux , Ubuntu Kernel Team , Casey Schaufler , James Morris , linux-security-module , LKML Content-Type: text/plain; charset="UTF-8" Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Sun, Feb 17, 2019 at 6:46 PM Paul Moore wrote: > My main concern is that "selinux={0|1}" continues to work as it has > for years. It doesn't look like this affects that, but I can't say > I've dug into these changes very far. Yup, no worries; it does. :) -- Kees Cook