Received: by 2002:a6b:500f:0:0:0:0:0 with SMTP id e15csp1213723iob; Thu, 28 Apr 2022 23:31:09 -0700 (PDT) X-Google-Smtp-Source: ABdhPJxOeyLySQ5kJO571DTiR+8M8CpbUjUp/yg3Gr2nqcO6m7vCiAddcsUJvm3zwOSbQSaIg0Cl X-Received: by 2002:a17:90a:4308:b0:1cb:b996:1dc with SMTP id q8-20020a17090a430800b001cbb99601dcmr2245333pjg.224.1651213869531; Thu, 28 Apr 2022 23:31:09 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1651213869; cv=none; d=google.com; s=arc-20160816; b=IaO3Y9Tbyx9A77YPWYui+aSHRqaVkOZn92g7KFuJOizhLAiBsdDEvuZY5TDsP4K+ag ZMLuqjRZrY1s4mgICRjiVJPBDqZdotg+Az8bCQyQrLqdpUolC8gE9BizvGdRo4s3qsVO 5tdUpLV+jUTg6TVy9wscOLxV4lmjUUp0Nq6gX3dUlx8b5GnR9mMUIPBQP9xdNyafvVim IZQ0u/htBq9kXIQ9vmT4Esd2ru3n5CwMYANHIYyDRyH66hOzD9OFwskupwQmZEba5ca0 tT5xrHmHoXyj0mzFdt5NNWEg25nA+XE1tym3KtMdkvMdmxyfepX8KVwLAZHwc5Of+4V9 MgiQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:dkim-signature; bh=acCmiAFeUKSb3f8UtEoB0zywf8yA7MpHB3Qa5wbIUz8=; b=V0f5Zta5JmlhRmrcluUdKrWwhu/fD1mcxY1JH0+M6WhoK6rDEFQg39X9NK5XpKgWXs u2d1taTiDBTkg6LhFt/XHgQWbqB+Fd1alQNJe4JUas8vL6RBUdjCyGlh0nlc9uVElfOD lPiSk75assdnCBkg8JV0QVmK8LOx+AUapy9aoqK0vyfqnlvAKes09Az14Jq5mKkAzY2/ jDWmCGa5/s7iw/E072IVQJ0pkT24QJbYTDPXwzvCmJwrJqSxtgug6lacA0haAJPgsBVA HPR1V9Pso4m3u26hc6mVZVVYpQffIG+EH20QTJlrWlUfJdb7p41PZY6E7vueYRRMc45J WTzw== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@google.com header.s=20210112 header.b=mnuuKuGE; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=google.com Return-Path: Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id m20-20020a634c54000000b003aa2d163bdesi6102895pgl.732.2022.04.28.23.30.54; Thu, 28 Apr 2022 23:31:09 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; dkim=pass header.i=@google.com header.s=20210112 header.b=mnuuKuGE; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=google.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S243189AbiD1FuB (ORCPT + 99 others); Thu, 28 Apr 2022 01:50:01 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:48002 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S233367AbiD1FuA (ORCPT ); Thu, 28 Apr 2022 01:50:00 -0400 Received: from mail-yb1-xb35.google.com (mail-yb1-xb35.google.com [IPv6:2607:f8b0:4864:20::b35]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 46F682AC5E for ; Wed, 27 Apr 2022 22:46:47 -0700 (PDT) Received: by mail-yb1-xb35.google.com with SMTP id f38so7159493ybi.3 for ; Wed, 27 Apr 2022 22:46:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=acCmiAFeUKSb3f8UtEoB0zywf8yA7MpHB3Qa5wbIUz8=; b=mnuuKuGElQavxBj7lser61CbewlQVKMabIOG3mpBZHBFpIp6VhAnILfSQbs1NIAiOo HUdQLw0Dg+jZw9qp72ww+HThNqqglc3yw6Q/YBr/wJ9vSgA/MTxe63kaP5x7BkAuxov/ 33BFaNrufrwrtlttgVMpnwzOoJAX6EhdOYIQoZtbcFtntEPNt8qMi4OKBeR9515FRtnS e8G9Uro+3ItpJtO5UVxCRFi8xN8iIOHLOlVxUQQ8ac1KL7LtZZzA0DzStHv9KlLa5+r+ BzozPUZX6x/YRkCoG9XbM7eAGLS7y+CL+r4nwQfxiUkaZHMgaylouPSkXQT+Yhuj5XBU FSJA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=acCmiAFeUKSb3f8UtEoB0zywf8yA7MpHB3Qa5wbIUz8=; b=5/PwZ+PIR/ZeGZUnYKsHhkMkt3Q/h1YW9qNtKmclBkN3dQtXKG3zk11qa3A3HKHxsP /TKAFFKIxe+/ZuuI49kj9Oe87jbg8hykMn46cYkpOL+PBFV+y/diJmIvm2Vor65YxXwi ydw046Bxksa7vr8RpLWq3N0t52aVgeYLlG2IZH9yEcpmb/9n8YbdFH6MDtGeczRaKnP8 GTGBF35Wcpo6gWGw4Vxf667VMVO1XuVQrfVCYvEgBd1FxyxNeVwyEC4RIrYVpuZ9SHp1 +5Ans25p7nVMz8RSRF3UsNkxTw7AzrFeZQ5xRhiTZY7QqOv4ZCAX5I2S5ipCF+TbWoU6 Pu5w== X-Gm-Message-State: AOAM530mkOl7ZkSILjdL3HsKWo7KkPhvd5ddifs2yQyxTDxheKkVE35X cSBZDA6/IvWl6AgnvSCP4UoOHCIUu1IM838BejWZWA== X-Received: by 2002:a5b:a4c:0:b0:628:b143:5bd with SMTP id z12-20020a5b0a4c000000b00628b14305bdmr30117306ybq.212.1651124806342; Wed, 27 Apr 2022 22:46:46 -0700 (PDT) MIME-Version: 1.0 References: <20220422013215.2301793-1-tweek@google.com> <20220427135823.GD71@qian> In-Reply-To: From: =?UTF-8?Q?Thi=C3=A9baud_Weksteen?= Date: Thu, 28 Apr 2022 15:46:29 +1000 Message-ID: Subject: Re: [PATCH v2] firmware_loader: use kernel credentials when reading firmware To: Greg Kroah-Hartman , Qian Cai Cc: Luis Chamberlain , Jeffrey Vander Stoep , Saravana Kannan , Alistair Delva , Adam Shih , SElinux list , linux-kernel Content-Type: text/plain; charset="UTF-8" X-Spam-Status: No, score=-17.6 required=5.0 tests=BAYES_00,DKIMWL_WL_MED, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF, ENV_AND_HDR_SPF_MATCH,RCVD_IN_DNSWL_NONE,SPF_HELO_NONE,SPF_PASS, USER_IN_DEF_DKIM_WL,USER_IN_DEF_SPF_WL autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org > Ugh, yeah, a put_cred() is not called after this. Good catch, I wasn't aware that an extra call to put_cred was required here. I'll send a new version for the patch. I'll update the commit log as well, with the recommendation from Luis. Thanks.