Received: by 2002:a05:6358:a55:b0:ec:fcf4:3ecf with SMTP id 21csp653039rwb; Thu, 12 Jan 2023 10:29:30 -0800 (PST) X-Google-Smtp-Source: AMrXdXtgpwTHfcjbe/TSf5djlsJ7g8b5IXldmy2Td3Zi4CCBnvEsOCOONkUqSHVTf0PgN16FA5qi X-Received: by 2002:a05:6a21:1509:b0:af:705b:4816 with SMTP id nq9-20020a056a21150900b000af705b4816mr9240634pzb.33.1673548170043; Thu, 12 Jan 2023 10:29:30 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1673548170; cv=none; d=google.com; s=arc-20160816; b=RJOl4CZeNvM72UuB7n9KG0b6jPjNyPoNCLXgm9a4ArZ5zf5xHQ9i/B2w2yYqddSD43 lc4G2nO5waE+FlUIVsjtUOCgMp97Yqlx+n7jZiqPOSN+OLbwHs60mer4qRWRJNneyhQx i1KhhVxOOmU+a6ZWP7pjZdFg0F2iIkpPlvVzzB+iPZ4eebWChSzmM8J+zNcOAHoKZyD1 bZnOj7XTFQ1mSR3VzdNdM8U29Ybw4Fti/UrTUjHHyT4aSTfgG0X+TkFWPLIN3MGRDdvu 9IGlgYYhNVs44uPvexlDlbCYPXbmobl8Yta/d6gAzjehC28beRAShTUVcQcsJB9aBN1j Dmlg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:dkim-signature; bh=0xDr4QknDNxPi2cT8FrUuwNvsQNO379ZboIpi4mwvIk=; b=JWDmcKt8hn7oQ4fvD3fHtnITUvtxvpGM21cQqJx7eG1WHIaZJSSB60cp0BRkeji8zt 7ZxNZnhP1YDM4L3/BumYtBYiCMhHgheAawbhsj0lq2ZH6pVwNjUjuGLNN/Uhm/Fb+2as 6CfegfksAOgwpk4d36FDTO6cZDbUIk9yZ5A6EKwSYFRGl+utKn3fYngAcUFjYEROu0s+ n01wk3qb34ooQ65y9rYPerMtwGYnthnDiJl/eOsl97QYiEB6QEeKEPnskLvYP5Cs56cJ J+2yNHwRJmoCd3r38mGpM0n5e2llu+19BEiPvrGCFL7x/c5VonZg7mzyE2EXUUropu6B 8v2A== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@paul-moore.com header.s=google header.b=Fiy522RN; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=paul-moore.com Return-Path: Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id bk13-20020a056a02028d00b0049a8afc9b21si6986pgb.730.2023.01.12.10.29.22; Thu, 12 Jan 2023 10:29:30 -0800 (PST) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; dkim=pass header.i=@paul-moore.com header.s=google header.b=Fiy522RN; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=paul-moore.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S231891AbjALSCH (ORCPT + 52 others); Thu, 12 Jan 2023 13:02:07 -0500 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:42510 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S239778AbjALSBQ (ORCPT ); Thu, 12 Jan 2023 13:01:16 -0500 Received: from mail-pj1-x102e.google.com (mail-pj1-x102e.google.com [IPv6:2607:f8b0:4864:20::102e]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id CF0E113D1B for ; Thu, 12 Jan 2023 09:22:08 -0800 (PST) Received: by mail-pj1-x102e.google.com with SMTP id q23-20020a17090a065700b002290913a521so2028605pje.5 for ; Thu, 12 Jan 2023 09:22:08 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=paul-moore.com; s=google; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=0xDr4QknDNxPi2cT8FrUuwNvsQNO379ZboIpi4mwvIk=; b=Fiy522RNvvYxq4nWHpNZeEHiH1/P9P8SLmCZIIqj2T5uix0e9SLinDtq8qjCWr3RvO M++tjLHwR63OcuftzaEi1ChHQB/nAHWAlphG1r3019blrCX5ANTv/XcoJVZFBBzi6aUe MvLJxuqoSKKFHXXwDx19ZDLhPn5pfMZSOuEkIskLBENuvcoYcn3D/7ZnF+V0JdJj2ozl w3ZMpd9CGXnSWHPtu6A4IicaLCensH+4iBwQSp85GIynWT/+gTgkDRA2xQ+ry9YEolgp /TFO++DWjtppIUWlzcQtHMiWEruGd66Jn+076IgtMtnBQOtWeZNPvs9hxtIGRLFYmktV Etnw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=0xDr4QknDNxPi2cT8FrUuwNvsQNO379ZboIpi4mwvIk=; b=6KxJkA4nzXGoXRjCuz4ckkmwCyXQCWvJpGv+8Z5RY66eW3HxY+b0pxbBfitgNkb0x/ aV0dU8tZGBzVeyN/zJwKnp3JL8KUfO0euPdqttHObOoYx6mgn5vemV1CkUzpKbvDhD76 FMR/1IxGRzgakWI20r/RLUvQa9ORI3hCgoemsc4SzIqgqoyTfmyxycYgF7SHOgllOPmK 0Qc3Ryd4HQouoPgI6DJho6hPqF3C7fBG57NPPsVmsKuDCl/v7UfzxNiImhjPwYbJGBRS EV8jnzUF4IcLK/3cH6Br6CxPxU5nlVdl03w0omsoX2YKtJ8TIAmrXhjZIUiUO5ZRyaGV Tv7A== X-Gm-Message-State: AFqh2kqk9V6yo8Bdf1IspDxgwk7UTWru39ELaa5YUg/+4G6x392lgc/m N+ibdzL039NIetKR/s/UuyurlhvxXOEsVLxwMrZf X-Received: by 2002:a17:902:cec8:b0:192:6675:8636 with SMTP id d8-20020a170902cec800b0019266758636mr4530544plg.15.1673544128229; Thu, 12 Jan 2023 09:22:08 -0800 (PST) MIME-Version: 1.0 References: <20221201104125.919483-1-roberto.sassu@huaweicloud.com> <20221201104125.919483-3-roberto.sassu@huaweicloud.com> <6905166125130c22c244ebf234723d1587a01ae8.camel@huaweicloud.com> In-Reply-To: <6905166125130c22c244ebf234723d1587a01ae8.camel@huaweicloud.com> From: Paul Moore Date: Thu, 12 Jan 2023 12:21:57 -0500 Message-ID: Subject: Re: [PATCH v7 2/6] ocfs2: Switch to security_inode_init_security() To: Roberto Sassu Cc: mark@fasheh.com, jlbec@evilplan.org, joseph.qi@linux.alibaba.com, zohar@linux.ibm.com, dmitry.kasatkin@gmail.com, jmorris@namei.org, serge@hallyn.com, stephen.smalley.work@gmail.com, eparis@parisplace.org, casey@schaufler-ca.com, ocfs2-devel@oss.oracle.com, reiserfs-devel@vger.kernel.org, linux-integrity@vger.kernel.org, linux-security-module@vger.kernel.org, selinux@vger.kernel.org, linux-kernel@vger.kernel.org, keescook@chromium.org, nicolas.bouchinet@clip-os.org, Roberto Sassu Content-Type: text/plain; charset="UTF-8" X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_NONE, SPF_HELO_NONE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Tue, Jan 10, 2023 at 3:56 AM Roberto Sassu wrote: > On Thu, 2022-12-01 at 11:41 +0100, Roberto Sassu wrote: > > From: Roberto Sassu > > > > In preparation for removing security_old_inode_init_security(), switch to > > security_inode_init_security(). > > > > Extend the existing ocfs2_initxattrs() to take the > > ocfs2_security_xattr_info structure from fs_info, and populate the > > name/value/len triple with the first xattr provided by LSMs. > > Hi Mark, Joel, Joseph > > some time ago I sent this patch set to switch to the newer > function security_inode_init_security(). Almost all the other parts of > this patch set have been reviewed, and the patch set itself should be > ready to be merged. > > I kindly ask if you could have a look at this patch and give your > Reviewed-by, so that Paul could take the patch set. I've been pushing to clean up some of the LSM interfaces to try and simplify things and remove as many special cases as possible, Roberto's work in this patchset is part of that. I would really appreciate it if the vfs/ocfs2 folks could give patch 2/6 a quick look to make sure you are okay with the changes. I realize that the various end-of-year holidays tend to slow things down a bit, but this patchset has been on the lists for over a month now; if I don't hear anything in the next week or two I'll assume you folks are okay with these patches ... -- paul-moore.com