Received: by 2002:a05:6902:102b:0:0:0:0 with SMTP id x11csp1156404ybt; Sun, 14 Jun 2020 12:23:04 -0700 (PDT) X-Google-Smtp-Source: ABdhPJz3swfaav+2wlkMD79HFXBOGzwUHDzh0RMYiO+5HeV0CmWn6zmvD4hC2IX31PtCSRko+DBH X-Received: by 2002:a17:906:6897:: with SMTP id n23mr23113905ejr.437.1592162584087; Sun, 14 Jun 2020 12:23:04 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1592162584; cv=none; d=google.com; s=arc-20160816; b=Z0+gNr8gEial01WRVOwZozBYsMoruLG+2zRLSZqBRx5x/U+yiKYUUMDUZZbmfoZPvq RVLN9LCTPgyIdNXTZrXsUGirosTHct5yGY6ltp2aywxThB0KutVqnpyeVQbip5nTWoOB 3MYlUko2CoB0B0oUzJzIvpzbql38RMcgHaBfl4XcYO65m3UhRh4LwZAk+xBwnfBxn6m5 1zd/K5mX+SkHspqKZ3BQNu9M6d0vhXKZN9yXl0mGXzCAX6vu8GI/COBHEW9EnI0B2Z1T dNPERQhMMUVLGM0WWfyE8cABEsRdcysv7AG3YoXuGmEkke4lwTyAwjJOa64d9/CwXfdL IxAg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:dkim-signature; bh=YkTGwKN0ehW6UgG74U5MQE/8rHA2ql2TaHXg1+0uOrI=; b=sogydMK0UnaFDQFIzQfEXcBOr80ExUdGhAm++888nIhKI2rfzFxaJcyFN/wTrEih+b 7Atxodc84IMjJEYFWPPcdtejKLZARnEGCpTvXWksT5v1dVKivskfxbVnoYkc4RRG1XTQ mcBzwQziFqRDz6AzyGOkNq6ATRyUSxCp//UNQ1/yiYgbYNrnVgX9j5j/br+WKX4AE1FM xXBbPok8PwVvgkPjCLKglOQKe7LP68HmymlJvirJWL3NCKo2yIjm7QAUXkSs2MA3nr1k uVQfXK3IPDStsCZ551A6BtyTdOeldqhFydaTT30S7I1I4os2wP4+D/lbnn7+Z1ukx74A bZ0w== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@linux-foundation.org header.s=google header.b=B86RJ5yI; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id h12si7283681eds.421.2020.06.14.12.22.40; Sun, 14 Jun 2020 12:23:04 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@linux-foundation.org header.s=google header.b=B86RJ5yI; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726938AbgFNTUx (ORCPT + 99 others); Sun, 14 Jun 2020 15:20:53 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:59482 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726881AbgFNTUw (ORCPT ); Sun, 14 Jun 2020 15:20:52 -0400 Received: from mail-lf1-x141.google.com (mail-lf1-x141.google.com [IPv6:2a00:1450:4864:20::141]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 84068C08C5C3 for ; Sun, 14 Jun 2020 12:20:50 -0700 (PDT) Received: by mail-lf1-x141.google.com with SMTP id u16so8251006lfl.8 for ; Sun, 14 Jun 2020 12:20:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linux-foundation.org; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=YkTGwKN0ehW6UgG74U5MQE/8rHA2ql2TaHXg1+0uOrI=; b=B86RJ5yIdsHeQw1NF5tFw3EA4BEodeMzh/BTlJMf7Hy2cC5soKyh29KcDJszKuXFNm 9GQC3DN3W1Yyj4HAXH4pOSNrTX+5ETIIyNm2eTLHJU6AfMJp4OF6duVNkmwpqYZ7l8kr 6DfwIL53hjj0LgWaWs+M6ny80fcmdlssZmgao= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=YkTGwKN0ehW6UgG74U5MQE/8rHA2ql2TaHXg1+0uOrI=; b=dRQ4V2U/ShDVngD/K15khRfQ0+AMWq0mHVc/Ydd1qxm86mYSP4TX6skq2LOs070qK4 2p6J/jycaEblMW6bkqGQwIDtUxeok3xKrv39wBFg/FPtT+b1h4GOYA8GE/ohnJCFNewb +xspQtWITc0wJ5VEgZ3PTE68Xd5q5JjGwgCdNs1qW+P5G0V8qrzXc7gOBa2ElO3xkcE9 P9Ds57bU54dGS0dEB8i3YPOx3o+askgI2yA+K1jAqeWH1A593KICVNZeu0/Nx7UetOyl 2KrHh8MSS4Hy5XL2+Wrc/QXfNjhvh/u2ZxEHUsoEQ9Twgw35ibe4f2paTTIANyJLEHlU 7ASQ== X-Gm-Message-State: AOAM533HB+Orppj3YerG7lgDmPF2szgU3Egs75B0ETxNFT2O+P6b/H2a LMq5UJ95e0gymHX0MpSrDXdPsdGJ4Ng= X-Received: by 2002:ac2:499a:: with SMTP id f26mr11841967lfl.76.1592162448372; Sun, 14 Jun 2020 12:20:48 -0700 (PDT) Received: from mail-lj1-f170.google.com (mail-lj1-f170.google.com. [209.85.208.170]) by smtp.gmail.com with ESMTPSA id i23sm3414512ljh.56.2020.06.14.12.20.47 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Sun, 14 Jun 2020 12:20:47 -0700 (PDT) Received: by mail-lj1-f170.google.com with SMTP id s1so16628347ljo.0 for ; Sun, 14 Jun 2020 12:20:47 -0700 (PDT) X-Received: by 2002:a2e:b5d9:: with SMTP id g25mr12147800ljn.285.1592162446763; Sun, 14 Jun 2020 12:20:46 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Linus Torvalds Date: Sun, 14 Jun 2020 12:20:30 -0700 X-Gmail-Original-Message-ID: Message-ID: Subject: Re: [GIT PULL] SafeSetID LSM changes for v5.8 To: Micah Morton Cc: Linux Kernel Mailing List , linux-security-module Content-Type: text/plain; charset="UTF-8" Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Sun, Jun 14, 2020 at 12:12 PM Micah Morton wrote: > > That said I'm a little fuzzy on where to draw the line for which kinds > of changes really should be required to have bake time in -next. If > you think this is one of those cases, we can hold off on this until we > have some bake time for v5.9. It's merged, but in general the rule for "bake in -next" should be absolutely everything. The only exception is just pure and plain fixes. This SafeSetID change should in fact have been there for two different reasons: not only was it a new feature rather than a fix (in linux-next just for testing), it was one that crossed subsystem borders (should be in linux-next just for cross-subsystem testing). It touched files that very much aren't touched by just you. "Looks obvious" has nothing to do with avoiding linux-next. I suspect most of the bugs we have tend to be in code that "looked obvious" to somebody. Linus