Received: by 2002:a05:6902:102b:0:0:0:0 with SMTP id x11csp3134529ybt; Mon, 29 Jun 2020 16:26:39 -0700 (PDT) X-Google-Smtp-Source: ABdhPJyXILMWN1RcBTP77hMyFEWrjh7nxP5QTQ4IkeB3wpZ8JjzIjqsnZPo8nLCmf5tpGZNmj7Ld X-Received: by 2002:a17:906:46d1:: with SMTP id k17mr15653551ejs.446.1593473198892; Mon, 29 Jun 2020 16:26:38 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1593473198; cv=none; d=google.com; s=arc-20160816; b=bPiwNS9ObkzzACT8JDp2XO4Q9lapbR+1diRPXVBurnOLG2FQesenxJ2ngkg/4A/DgY FH2++xQOCyI1Ix9l/uACaD9bBMaoEqDbLvfZ/zjr0BdrCtDFSjLIIATvNjI7gdnXyFVb 3NxHCWAu+PtUmDn+IkwCWxWHZx0+Ir8BuNkLjjy+yf/sUhrQVhRQPP9n8S6HeW4rBOVS jcWUXaPOsWuHvuy/08+Mzsix9VHDdvqIzH1SQzgYnZwXqNdPaSsYeXgHbS8dn+VDzV+A 84C6BYRBQKR2Qj2w7qK9lKeUZdadwSBD3iyz8FK5RZckfVKvWK9KMNsMnJ+HV+i26w2+ Khhw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:dkim-signature; bh=sHKzrk/z/kMGPeyIpM+M4V0Dj+/IWbE197hNLvsYk+s=; b=d86GKqpxBppbt33vV/4xjWcy1mK5b5at6gyncHoKOPhQwj3fy5HerBqxyB8nPG8a7i aoMRx0fAL+XYFu/xTlz7XUPLQC3CWmUPxEJQ3+ABu80bw651QSvcy5sfH/wNi5mmIwFs gcvWBVSKzfxSqg8Mi3Rd0NH1wFzvdpuKhZiMukBi+t2w+l0og+azZugnUFM7TAQLR4Qh RO/jZJWub+PqQDS4fJW4BdJN0noX4noLDgI/wFvXcEhvEP9QFgxTePWrjwXP3FHcC8eA OQZmDAvJKT1K80J85FBGfcjPudISJfZd5hrCQxCmA9OmwWno6vVdB4AX0pyOyqwv6CR9 pvpA== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@paul-moore-com.20150623.gappssmtp.com header.s=20150623 header.b=y8e63kEO; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id x27si668871eje.40.2020.06.29.16.26.15; Mon, 29 Jun 2020 16:26:38 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@paul-moore-com.20150623.gappssmtp.com header.s=20150623 header.b=y8e63kEO; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1728131AbgF2XX5 (ORCPT + 99 others); Mon, 29 Jun 2020 19:23:57 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:55348 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726746AbgF2XX4 (ORCPT ); Mon, 29 Jun 2020 19:23:56 -0400 Received: from mail-ed1-x543.google.com (mail-ed1-x543.google.com [IPv6:2a00:1450:4864:20::543]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 69867C03E979 for ; Mon, 29 Jun 2020 16:23:56 -0700 (PDT) Received: by mail-ed1-x543.google.com with SMTP id by13so4614211edb.11 for ; Mon, 29 Jun 2020 16:23:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=paul-moore-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=sHKzrk/z/kMGPeyIpM+M4V0Dj+/IWbE197hNLvsYk+s=; b=y8e63kEOiL0z1ZBt1c02QAEtZTZHRqK//Ug1u6KjrDyx1rLoCxf8z9CCuSrOGVsdH+ ewnjBmWSDRcXPrysQgXVVue1EwnbhOsLSQ+FaUb6fIyf3btmYqjVJpLQanF+56lej5dr Sy2sZUzy8bP8KWamcOT8rX0R+VyGu8AIpH1/wC8+4UOVTtqxmcM06Zyq1v2+YXW75wuM JjBNeI9woLfYhD8spmKWaqCfJbE5GMvVCB4GCaY9QCUvyw+sD3jjqJC/ckhZBjCb42bI VVxV3q+BP9Urm8p41VtQkJmSYrt3TlZbIdBM3ZsgBSDfPCBfJAx0PjxxxASZ51iNtpdw djyw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=sHKzrk/z/kMGPeyIpM+M4V0Dj+/IWbE197hNLvsYk+s=; b=AkyVG09wS9FHD+efTUrjurYXquHRUUQh2oiR6nuUfmWlRvQJIpWapmez9E107EEvA4 qT0tny/CprTmUoKSw+7KEozIVLHoubmyo+7rIV3zL4UhNHxNavxenCSVCjtmB+3uVy40 GDXN430rGRxdxkC2ODnH6T0YANBlAxpLufyBcPsBqxdc3kNpy8hzRa01vkSJ9JI2oJG8 nFVI9cUZI8bVeHAYnIgzgezO0hNowA4ycI3SyFwP0FDxuFr8net3tvcravo5bda1Feta Uf0HH9rRIQ+KQBPXhKpgItT+av4E8X9A0nfRO7OXLE7orBtiiODyVgPPwR9sG/v3j1yp yxQg== X-Gm-Message-State: AOAM531/jO3oLWDVNUwKeOklZbGO+gVDgk5DRu5AtFJm6ckeNdn+sijp vo0k1VU/eQGmvCZCpEV/vTPYgPSbesQNHe06LvUy X-Received: by 2002:aa7:d6cf:: with SMTP id x15mr19695792edr.164.1593473035100; Mon, 29 Jun 2020 16:23:55 -0700 (PDT) MIME-Version: 1.0 References: <3eda864fb69977252a061c8c3ccd2d8fcd1f3a9b.1593278952.git.rgb@redhat.com> In-Reply-To: <3eda864fb69977252a061c8c3ccd2d8fcd1f3a9b.1593278952.git.rgb@redhat.com> From: Paul Moore Date: Mon, 29 Jun 2020 19:23:44 -0400 Message-ID: Subject: Re: [PATCH ghak124 v3fix] audit: add gfp parameter to audit_log_nfcfg To: Richard Guy Briggs Cc: Linux-Audit Mailing List , LKML , netfilter-devel@vger.kernel.org, sgrubb@redhat.com, Ondrej Mosnacek , fw@strlen.de, twoerner@redhat.com, Eric Paris , tgraf@infradead.org, dan.carpenter@oracle.com Content-Type: text/plain; charset="UTF-8" Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Sat, Jun 27, 2020 at 11:25 PM Richard Guy Briggs wrote: > > Fixed an inconsistent use of GFP flags in nft_obj_notify() that used > GFP_KERNEL when a GFP flag was passed in to that function. Given this > allocated memory was then used in audit_log_nfcfg() it led to an audit > of all other GFP allocations in net/netfilter/nf_tables_api.c and a > modification of audit_log_nfcfg() to accept a GFP parameter. > > Reported-by: Dan Carptenter > Signed-off-by: Richard Guy Briggs > --- > Passes audit-testsuite. > > include/linux/audit.h | 8 ++++---- > kernel/auditsc.c | 4 ++-- > net/bridge/netfilter/ebtables.c | 6 +++--- > net/netfilter/nf_tables_api.c | 33 +++++++++++++++++++++------------ > net/netfilter/x_tables.c | 5 +++-- > 5 files changed, 33 insertions(+), 23 deletions(-) Merged into audit/next. -- paul moore www.paul-moore.com