Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-12.0 required=3.0 tests=DKIM_SIGNED,DKIM_VALID, HEADER_FROM_DIFFERENT_DOMAINS,INCLUDES_PATCH,MAILING_LIST_MULTI, MENTIONS_GIT_HOSTING,SIGNED_OFF_BY,SPF_PASS autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id EBF76C10F13 for ; Mon, 8 Apr 2019 13:56:36 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id A83AB20663 for ; Mon, 8 Apr 2019 13:56:36 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (1024-bit key) header.d=tresys.onmicrosoft.com header.i=@tresys.onmicrosoft.com header.b="on4rZOoI" Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726813AbfDHN4g (ORCPT ); Mon, 8 Apr 2019 09:56:36 -0400 Received: from mail-eopbgr770104.outbound.protection.outlook.com ([40.107.77.104]:33892 "EHLO NAM02-SN1-obe.outbound.protection.outlook.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S1726383AbfDHN4g (ORCPT ); Mon, 8 Apr 2019 09:56:36 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tresys.onmicrosoft.com; s=selector1-tresys-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=tYxbvyDoiL9hRjzhP3GDqDE6Y+eUXqsmq5LEulNW0uQ=; b=on4rZOoIUX1KYMeLK1OkVg8TCJdvipGibjyvbfHwLpu5T1pmiYVlt8MfOZSirLNkeNduHogL0GhOD+xylQ3eFs3nLmnHeJ/73To8HAMFjqRIKsA/vBoksWi58IhhUzBaYYZb6EFWutnclLoaDwtoN+TtEN/NNKYH+bnTmlTyJgU= Received: from BN6PR15MB1507.namprd15.prod.outlook.com (10.172.151.147) by BN6PR15MB1860.namprd15.prod.outlook.com (10.174.114.10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1771.19; Mon, 8 Apr 2019 13:56:29 +0000 Received: from BN6PR15MB1507.namprd15.prod.outlook.com ([fe80::fdb0:ce55:b42a:f4b9]) by BN6PR15MB1507.namprd15.prod.outlook.com ([fe80::fdb0:ce55:b42a:f4b9%5]) with mapi id 15.20.1771.016; Mon, 8 Apr 2019 13:56:29 +0000 From: "Sugar, David" To: Dominick Grift CC: "selinux-refpolicy@vger.kernel.org" Subject: Re: [PATCH] Resolve some denials related to sending journal messages Thread-Topic: [PATCH] Resolve some denials related to sending journal messages Thread-Index: AQHU6uIDVaxkQpME0U+r/Fn9yyk1ZqYxdQMAgADUkoCAAAJW4YAABAcA Date: Mon, 8 Apr 2019 13:56:29 +0000 Message-ID: References: <20190404122900.8945-1-dsugar@tresys.com> <20190404122900.8945-2-dsugar@tresys.com> <48f4a705-36e6-aca7-15e4-1c100785aaf8@ieee.org> <5898f8be-d46d-1bbd-de56-d59316c1ee16@tresys.com> <87v9zok40u.fsf@gmail.com> In-Reply-To: <87v9zok40u.fsf@gmail.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [96.244.17.66] user-agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.6.1 x-clientproxiedby: BL0PR02CA0016.namprd02.prod.outlook.com (2603:10b6:207:3c::29) To BN6PR15MB1507.namprd15.prod.outlook.com (2603:10b6:404:c6::19) authentication-results: spf=none (sender IP is ) smtp.mailfrom=dsugar@tresys.com; x-ms-exchange-messagesentrepresentingtype: 1 x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: a5ea5605-2dfe-4c5c-1299-08d6bc29ff87 x-microsoft-antispam: BCL:0;PCL:0;RULEID:(2390118)(7020095)(4652040)(7021145)(8989299)(4534185)(7022145)(4603075)(4627221)(201702281549075)(8990200)(7048125)(7024125)(7027125)(7023125)(5600139)(711020)(4605104)(2017052603328)(7193020);SRVR:BN6PR15MB1860; x-ms-traffictypediagnostic: BN6PR15MB1860: x-ms-exchange-purlcount: 1 x-microsoft-antispam-prvs: x-forefront-prvs: 0001227049 x-forefront-antispam-report: SFV:NSPM;SFS:(10019020)(396003)(39830400003)(346002)(366004)(136003)(376002)(199004)(189003)(76176011)(11346002)(2616005)(81166006)(7736002)(81156014)(6246003)(476003)(3846002)(53546011)(386003)(102836004)(6506007)(26005)(305945005)(6116002)(486006)(31696002)(446003)(2906002)(508600001)(186003)(99286004)(31686004)(8936002)(5660300002)(86362001)(106356001)(105586002)(8676002)(52116002)(25786009)(4326008)(65826007)(6306002)(14444005)(256004)(53936002)(97736004)(6512007)(14454004)(6436002)(229853002)(93886005)(64126003)(71200400001)(6486002)(71190400001)(65806001)(65956001)(66066001)(68736007)(15650500001)(36756003)(316002)(966005)(58126008)(6916009);DIR:OUT;SFP:1102;SCL:1;SRVR:BN6PR15MB1860;H:BN6PR15MB1507.namprd15.prod.outlook.com;FPR:;SPF:None;LANG:en;PTR:InfoNoRecords;A:1;MX:1; received-spf: None (protection.outlook.com: tresys.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: oMhUldTGkpb7PZYf46jf4qEMmHZP4xVi+DsmQO+hKh4qIdeIB1MJ7z7PHUf/4l9MAEKJZudTGGmRVIkwT1w8LD1zDm0VWD6UhUBeTzkD5m3QgWU+ps+Ze+hNmqAruGib4d7gIGBFM6M94zlvSmld6TGLRz1Sr12ZImqqtDh2lIHzDWFhHax4+E15HG3uMvLVOcx8nQTTHjRFPOMWjeNaeTg+oU0e1gRcGuVGMgogjAzy74WvyRAJUfrsMGMXax+4HqGvwCHd+vCmTEVlCB6CZo+ulWbLiVwDIWlhC1JXM8hcNSbMm46X1ZAPzp+bPr7CfkP+XSVQkBjg7+SaascRFVmOtFju8J3WgFqS0q3ryzAuhkWfcnEhz2ZEKG2VsRan5D0RZX11eFoWm8l8ZdDP2dArJcRJ6f3PDha9aA5tc+Y= Content-Type: text/plain; charset="utf-8" Content-ID: <2C593F5243B8294F8A45FC7F9A3614A2@namprd15.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: tresys.com X-MS-Exchange-CrossTenant-Network-Message-Id: a5ea5605-2dfe-4c5c-1299-08d6bc29ff87 X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Apr 2019 13:56:29.0680 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: a0d45667-6c07-4e88-868f-4ac9af95c7ed X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR15MB1860 Sender: selinux-refpolicy-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: selinux-refpolicy@vger.kernel.org DQoNCk9uIDQvOC8xOSA5OjQxIEFNLCBEb21pbmljayBHcmlmdCB3cm90ZToNCj4gIlN1Z2FyLCBE YXZpZCIgPGRzdWdhckB0cmVzeXMuY29tPiB3cml0ZXM6DQo+IA0KPiANCj4+IE9uIDQvNy8xOSA4 OjUyIFBNLCBDaHJpcyBQZUJlbml0byB3cm90ZToNCj4+PiBPbiA0LzQvMTkgODoyOSBBTSwgU3Vn YXIsIERhdmlkIHdyb3RlOg0KPj4+PiB0eXBlPUFWQyBtc2c9YXVkaXQoMTU1NDMyNDU2Mi44NDA6 MTU5KTogYXZjOsKgIGRlbmllZMKgIHsgc2VuZHRvIH0gZm9yDQo+Pj4+IHBpZD03Mjc3IGNvbW09 InN5c3RlbWQtYmFja2xpZyIgcGF0aD0iL3J1bi9zeXN0ZW1kL2pvdXJuYWwvc29ja2V0Ig0KPj4+ PiBzY29udGV4dD1zeXN0ZW1fdTpzeXN0ZW1fcjpzeXN0ZW1kX2JhY2tsaWdodF90OnMwDQo+Pj4+ IHRjb250ZXh0PXN5c3RlbV91OnN5c3RlbV9yOmtlcm5lbF90OnMwIHRjbGFzcz11bml4X2RncmFt X3NvY2tldA0KPj4+PiBwZXJtaXNzaXZlPTENCj4+Pj4gdHlwZT1BVkMgbXNnPWF1ZGl0KDE1NTQz MjQyNzEuODYzOjI0NSk6IGF2YzrCoCBkZW5pZWTCoCB7IHNlbmR0byB9IGZvcg0KPj4+PiBwaWQ9 NzQyMSBjb21tPSJzeXN0ZW1kLXVzZXItc2UiIHBhdGg9Ii9ydW4vc3lzdGVtZC9qb3VybmFsL3Nv Y2tldCINCj4+Pj4gc2NvbnRleHQ9c3lzdGVtX3U6c3lzdGVtX3I6c3lzdGVtZF9zZXNzaW9uc190 OnMwDQo+Pj4+IHRjb250ZXh0PXN5c3RlbV91OnN5c3RlbV9yOmtlcm5lbF90OnMwIHRjbGFzcz11 bml4X2RncmFtX3NvY2tldA0KPj4+PiBwZXJtaXNzaXZlPTANCj4+Pj4gdHlwZT1BVkMgbXNnPWF1 ZGl0KDE1NTQzMjQ2MzUuODQ0OjMxMyk6IGF2YzrCoCBkZW5pZWTCoCB7IHNlbmR0byB9IGZvcg0K Pj4+PiBwaWQ9Nzc0NCBjb21tPSJzeXN0ZW1kLWNyeXB0c2UiIHBhdGg9Ii9ydW4vc3lzdGVtZC9q b3VybmFsL3NvY2tldCINCj4+Pj4gc2NvbnRleHQ9c3lzdGVtX3U6c3lzdGVtX3I6bHZtX3Q6czAN Cj4+Pj4gdGNvbnRleHQ9c3lzdGVtX3U6c3lzdGVtX3I6a2VybmVsX3Q6czAgdGNsYXNzPXVuaXhf ZGdyYW1fc29ja2V0DQo+Pj4+IHBlcm1pc3NpdmU9MQ0KPj4+DQo+Pj4gSSB0aGluayB3ZSd2ZSBy ZWFjaGVkIHRoZSBsaW1pdCBvZiB0aGUgZXhwbGljaXQga2VybmVsX2RncmFtX3NlbmQoKQ0KPj4+ IGFuZCBpdCdzIHRpbWUgdG8gcmVldmFsdWF0ZSBwdXR0aW5nIHRoaXMgaW4gbG9nZ2luZ19zZW5k X3N5c2xvZ19tc2coKS4NCj4+Pg0KPj4gVGhhdCBtYWtlcyBzZW5zZS7CoCBJIHdpbGwgc3VibWl0 IGEgcGF0Y2ggYWZ0ZXIgSSB0ZXN0IGEgYml0LsKgIEJ1dCBpdA0KPj4gbG9va3MgbGlrZSBldmVy eXdoZXJlIChleGNlcHQgdGhlIHN5c3RlbWQgbW9kdWxlKSB0aGF0IHVzZXMNCj4+IGtlcm5lbF9k Z3JhbV9zZW5kKCkgYWxyZWFkeSBoYXMgbG9nZ2luZ19zZW5kX3N5c2xvZ19tc2coKSBzbyBvbmNl DQo+PiBrZXJuZWxfZGdyYW1fc2VuZCgpIGlzIGFkZGVkIHRvIGxvZ2dpbmdfc2VuZF9zeXNsb2df bXNnKCksDQo+PiBrZXJuZWxfZGdyYW1fc2VuZCgpIGNhbiByZW1vdmVkIGZyb20gdGhvc2UgZG9t YWlucy4NCj4+DQo+PiBUaGUgZXhjZXB0aW9ucyBhcmU6DQo+Pg0KPj4gMSkgSW4gdGhlIHN5c3Rl bWQgbW9kdWxlIHRoZXJlIGlzbid0IG11Y2ggdXNlIG9mDQo+PiBsb2dnaW5nX3NlbmRfc3lzbG9n X21zZygpLsKgIEZvciB0aGlzIGNhc2UgSSB3aWxsIGFkZA0KPj4gbG9nZ2luZ19zZW5kX3N5c2xv Z19tc2coKSBhcyByZXF1aXJlZC4NCj4gDQo+IHNlZToNCj4gDQo+IGh0dHBzOi8vZ2l0aHViLmNv bS9TRUxpbnV4UHJvamVjdC9yZWZwb2xpY3kvYmxvYi9tYXN0ZXIvcG9saWN5L21vZHVsZXMvc3lz dGVtL3N5c3RlbWQudGUjTDQxMA0KPiANCj4gU28gInN5c3RlbWRfbG9nX3BhcnNlX2Vudmlyb25t ZW50KCkiIGltcGxpZXMgImxvZ2dpbmdfc2VuZF9zeXNsb2dfbXNnKCkiDQo+IA0KDQpUaGFua3Mg Zm9yIHRoYXQsIEkgaGFkbid0IG5vdGljZWQuDQoNCj4+DQo+PiAyKSBJbiB0aGUgaW50ZXJmYWNl IGluaXRfZGFlbW9uX2RvbWFpbigpLCBpdCB1c2VzIGtlcm5lbF9kZ3JhbV9zZW5kKCkNCj4+IGRp cmVjdGx5LCB0aGVyZSBpdCBwcm9iYWJseSBkb2Vzbid0IG5lZWQgdG8gdXNlDQo+PiBsb2dnaW5n X3NlbmRfc3lzbG9nX21zZygpLiBUaGlzIG1heSBiZSBhYmxlIHRvIGdvIGF3YXkgYXMgbW9kdWxl cyBtaWdodA0KPj4gYWxyZWFkeSB1c2UgbG9nZ2luZyBub3csIEkgd2lsbCB0cnkgcmVtb3Zpbmcg YW5kIHNlZSB3aGF0IGJyZWFrcy4NCj4+DQoNCkluaXRpYWwgdGVzdGluZyBpcyBzaG93aW5nIHRo aXMgY2FuIGJlIHJlbW92ZWQgd2l0aCBubyBuZWdhdGl2ZSBzaWRlIA0KZWZmZWN0IChhdCBsZWFz dCBmb3IgdGhlIGRvbWFpbnMgSSdtIHVzaW5nKS4gIEkgd2lsbCBjb250aW51ZSB0ZXN0aW5nIA0K YmVmb3JlIHN1Ym1pdHRpbmcgYSBwYXRjaC4NCg0KPj4+DQo+Pj4+IFNpZ25lZC1vZmYtYnk6IERh dmUgU3VnYXIgPGRzdWdhckB0cmVzeXMuY29tPg0KPj4+PiAtLS0NCj4+Pj4gIMKgIHBvbGljeS9t b2R1bGVzL3N5c3RlbS9sdm0udGXCoMKgwqDCoCB8IDEgKw0KPj4+PiAgwqAgcG9saWN5L21vZHVs ZXMvc3lzdGVtL3N5c3RlbWQudGUgfCA0ICsrKysNCj4+Pj4gIMKgIDIgZmlsZXMgY2hhbmdlZCwg NSBpbnNlcnRpb25zKCspDQo+Pj4+DQo+Pj4+IGRpZmYgLS1naXQgYS9wb2xpY3kvbW9kdWxlcy9z eXN0ZW0vbHZtLnRlIGIvcG9saWN5L21vZHVsZXMvc3lzdGVtL2x2bS50ZQ0KPj4+PiBpbmRleCBl YzNiNGExOC4uYWVhMTk5ZDQgMTAwNjQ0DQo+Pj4+IC0tLSBhL3BvbGljeS9tb2R1bGVzL3N5c3Rl bS9sdm0udGUNCj4+Pj4gKysrIGIvcG9saWN5L21vZHVsZXMvc3lzdGVtL2x2bS50ZQ0KPj4+PiBA QCAtMjIyLDYgKzIyMiw3IEBAIGZpbGV0cmFuc19wYXR0ZXJuKGx2bV90LCBsdm1fZXRjX3QsDQo+ Pj4+IGx2bV9tZXRhZGF0YV90LCBmaWxlKQ0KPj4+PiAgwqAgZmlsZXNfZXRjX2ZpbGV0cmFucyhs dm1fdCwgbHZtX21ldGFkYXRhX3QsIGZpbGUpDQo+Pj4+ICDCoCBmaWxlc19zZWFyY2hfbW50KGx2 bV90KQ0KPj4+PiAgwqAgK2tlcm5lbF9kZ3JhbV9zZW5kKGx2bV90KQ0KPj4+PiAgwqAga2VybmVs X3JlcXVlc3RfbG9hZF9tb2R1bGUobHZtX3QpDQo+Pj4+ICDCoCBrZXJuZWxfZ2V0X3N5c3ZpcGNf aW5mbyhsdm1fdCkNCj4+Pj4gIMKgIGtlcm5lbF9yZWFkX3N5c3RlbV9zdGF0ZShsdm1fdCkNCj4+ Pj4gZGlmZiAtLWdpdCBhL3BvbGljeS9tb2R1bGVzL3N5c3RlbS9zeXN0ZW1kLnRlDQo+Pj4+IGIv cG9saWN5L21vZHVsZXMvc3lzdGVtL3N5c3RlbWQudGUNCj4+Pj4gaW5kZXggZjY0NTVmNmYuLjU0 MTExN2E5IDEwMDY0NA0KPj4+PiAtLS0gYS9wb2xpY3kvbW9kdWxlcy9zeXN0ZW0vc3lzdGVtZC50 ZQ0KPj4+PiArKysgYi9wb2xpY3kvbW9kdWxlcy9zeXN0ZW0vc3lzdGVtZC50ZQ0KPj4+PiBAQCAt MjI4LDYgKzIyOCw4IEBAIGRldl9yd19zeXNmcyhzeXN0ZW1kX2JhY2tsaWdodF90KQ0KPj4+PiAg wqAgIyBmb3IgdWRldi5jb25mDQo+Pj4+ICDCoCBmaWxlc19yZWFkX2V0Y19maWxlcyhzeXN0ZW1k X2JhY2tsaWdodF90KQ0KPj4+PiAgwqAgK2tlcm5lbF9kZ3JhbV9zZW5kKHN5c3RlbWRfYmFja2xp Z2h0X3QpDQo+Pj4+ICsNCj4+Pj4gIMKgICMgZm9yIC9ydW4vdWRldi9kYXRhLytiYWNrbGlnaHQq DQo+Pj4+ICDCoCB1ZGV2X3JlYWRfcGlkX2ZpbGVzKHN5c3RlbWRfYmFja2xpZ2h0X3QpDQo+Pj4+ ICDCoCBAQCAtOTgxLDYgKzk4Myw4IEBAIGFsbG93IHN5c3RlbWRfc2Vzc2lvbnNfdCBzZWxmOnBy b2Nlc3Mgc2V0ZnNjcmVhdGU7DQo+Pj4+ICDCoCBhbGxvdyBzeXN0ZW1kX3Nlc3Npb25zX3Qgc3lz dGVtZF9zZXNzaW9uc192YXJfcnVuX3Q6ZmlsZQ0KPj4+PiBtYW5hZ2VfZmlsZV9wZXJtczsNCj4+ Pj4gIMKgIGZpbGVzX3BpZF9maWxldHJhbnMoc3lzdGVtZF9zZXNzaW9uc190LCBzeXN0ZW1kX3Nl c3Npb25zX3Zhcl9ydW5fdCwNCj4+Pj4gZmlsZSkNCj4+Pj4gIMKgICtrZXJuZWxfZGdyYW1fc2Vu ZChzeXN0ZW1kX3Nlc3Npb25zX3QpDQo+Pj4+ICsNCj4+Pj4gIMKgIHNlbGludXhfZ2V0X2VuZm9y Y2VfbW9kZShzeXN0ZW1kX3Nlc3Npb25zX3QpDQo+Pj4+ICDCoCBzZWxpbnV4X2dldF9mc19tb3Vu dChzeXN0ZW1kX3Nlc3Npb25zX3QpDQo+Pj4+DQo+Pj4NCj4+Pg0KPiANCg==