Received: by 2002:a05:6a10:1287:0:0:0:0 with SMTP id d7csp5117522pxv; Tue, 20 Jul 2021 20:16:09 -0700 (PDT) X-Google-Smtp-Source: ABdhPJzDXvdunaHAOd4pw5Efum1vp+IPjjh2q3d92Fb8Y5gGS8fahPqDFMZTTuY6uVMMOcGmNd6p X-Received: by 2002:a17:906:3399:: with SMTP id v25mr36950057eja.357.1626837369040; Tue, 20 Jul 2021 20:16:09 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1626837369; cv=none; d=google.com; s=arc-20160816; b=RbTr/t2uqWb8pXrsYE3qoonLvB6bzt4a31uuy/356v+5kavwp2sl4AVuQCRn3ZuMx5 OgMI5FBprT21NnwsxVHQ6QREHa/8LtUWdhBWUfPav9G29oqjxEUjt2cFjXDXzvUjY2qN RWQdXpXD/HlbPNeXOd9D0uKw2pmhcy3xnZsrBkzWpEVOp/y8oDYltsVwN5VdDMAzJi8Y gXvjoc8qjoc+hTZ0mCYPRslrv9ZCN5oIYCjQBZPFb6IiroDNhjxMPPTC6Xdh1HpRMQ3f E6LXDzvXmEwamQWhMaCw9uuYOu0at4SdiFfyRH6XFCWq56RVyrr+EGEgDFtAylGJzi0m lzGA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:content-transfer-encoding:content-language :in-reply-to:mime-version:user-agent:date:message-id:from:references :to:subject; bh=Q8qnVgvdV+sz4kDfQH9Dy8EssEpZ1i/UkYZ83mQRLGg=; b=RenTWCCflmDIbT4EHbYM/wrNnizi9vPiVqKSTfZzmCWjCDZHKtSD99gZAyr+cZUdMK N41t5QkT28tuCEiYUQEb2ejYd43NZpcU6qDYpjmVQRRysnBhVBd7k05GgxM6zTQo0qYP ZDOjUEmcSTNzyHsQhLuqvXkdP6RP7z06t0QKAVrquFySR4AoHAoN3i0ZAXCuNKeif8VL gQehnGpXqGfq6xWvRQZ0lp3SglW8897fQeqHjp6GmK1ov9d1RGI4ZL139gibZGh7rmDx LYE/UpddMpu/PoFGFQNZKStehzcpwq3kwXgh1nCn9zaIb6FYR3G2nMoglQ040q+B7zhz bsEg== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=alibaba.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id x2si30357028ejy.297.2021.07.20.20.15.45; Tue, 20 Jul 2021 20:16:09 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=alibaba.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S232492AbhGUCde (ORCPT + 99 others); Tue, 20 Jul 2021 22:33:34 -0400 Received: from out30-132.freemail.mail.aliyun.com ([115.124.30.132]:41684 "EHLO out30-132.freemail.mail.aliyun.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S232447AbhGUCbF (ORCPT ); Tue, 20 Jul 2021 22:31:05 -0400 X-Alimail-AntiSpam: AC=PASS;BC=-1|-1;BR=01201311R111e4;CH=green;DM=||false|;DS=||;FP=0|-1|-1|-1|0|-1|-1|-1;HT=e01e04400;MF=tianjia.zhang@linux.alibaba.com;NM=1;PH=DS;RN=5;SR=0;TI=SMTPD_---0UgTMv32_1626837044; Received: from B-455UMD6M-2027.local(mailfrom:tianjia.zhang@linux.alibaba.com fp:SMTPD_---0UgTMv32_1626837044) by smtp.aliyun-inc.com(127.0.0.1); Wed, 21 Jul 2021 11:10:44 +0800 Subject: Re: [PATCH] Smack: Fix wrong semantics in smk_access_entry() To: Casey Schaufler , James Morris , "Serge E. Hallyn" , linux-security-module@vger.kernel.org, linux-kernel@vger.kernel.org References: <20210715091724.45768-1-tianjia.zhang@linux.alibaba.com> <20b7bc36-89fa-d004-74f0-629a42595f86@schaufler-ca.com> From: Tianjia Zhang Message-ID: Date: Wed, 21 Jul 2021 11:10:43 +0800 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:78.0) Gecko/20100101 Thunderbird/78.12.0 MIME-Version: 1.0 In-Reply-To: <20b7bc36-89fa-d004-74f0-629a42595f86@schaufler-ca.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On 7/21/21 12:32 AM, Casey Schaufler wrote: > On 7/15/2021 8:15 AM, Casey Schaufler wrote: >> On 7/15/2021 2:17 AM, Tianjia Zhang wrote: >>> In the smk_access_entry() function, if no matching rule is found >>> in the rust_list, a negative error code will be used to perform bit >>> operations with the MAY_ enumeration value. This is semantically >>> wrong. This patch fixes this issue. >> Indeed, the code as written is functioning correctly by >> sheer luck. I will take this patch. Thank you. >> >>> Signed-off-by: Tianjia Zhang > > Added to the Smack next branch. > Great, Thanks. Tianjia