Received: by 2002:a05:6a10:9afc:0:0:0:0 with SMTP id t28csp554444pxm; Fri, 25 Feb 2022 13:38:16 -0800 (PST) X-Google-Smtp-Source: ABdhPJyCf2t1bqfLZbaQRz2PYRdm6bahr2nGUkKLcxutbRfRnkIV3lp+wjpmGnGGLyyRgm6e1508 X-Received: by 2002:a17:90b:3587:b0:1bc:87f6:73ae with SMTP id mm7-20020a17090b358700b001bc87f673aemr5070981pjb.14.1645825096500; Fri, 25 Feb 2022 13:38:16 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1645825096; cv=none; d=google.com; s=arc-20160816; b=Focgi9EjCfNCa1AiIsrn8OBpobj3iIMIlucjr/aeV+d3xlpOiNu9PwIgLnTwPRUWJl cUSGdy7o8UeJrmqEdz6z9RwaHILpXCUzkB4Ym5DuNXUpV7uJqa5+W4HsABTkwkn4Qkdf XKYeR+yGcx6XXpHhN2THpzgZIp3FQIVAxiFs47eynUJ0e2+Fc8BJgMW4SUHiWZVPNnCi MLK8l67Rz/E7ZOPuiTb5ak6jcatvBJ4A1s1huS5y2qtIeazjExl9bUaQmIbYIe/ztRLN adUuwKiqTKhlf3wsrHr2+cPot8ajZhdTmcGltCQNbtvpB6sbadNNrjE5TJqFTuYMoQPI sSNQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:dkim-signature; bh=5uRsrBukF/OaHklKeUPxgxH16ty4e2SknPEAhNIbuzI=; b=qISOcrC5PLI/EDrglSDWtbXaR68SD9Xsxiy6c/DmFQFuHQU5mJeVYDOhXhUIiU+Wyj 3P2YHbvmjPiBgdFmSw5ti5qm2D0EH1BB/iP3ZZ/LnE6PTFpUMGrwMMCIuxrL6LqHQKBr rCyasLUJm8ZT/XcXK0a7oWVsQQdCFsNylQsBKFKdNg5mQ3Z8LI9KQkwXJ1wXZs1F4nzl V7NWWLvHY/2KmJTuIbpEtohHNOo+Tox9FYpPAgoxuf6AqZyqerjEEULInd3mGYVZWTo+ AcCXzJPAIoiiy6IdzmxebhuyVbn2IDBjmx85zwgPavBNgAKzjcSb5Mpqqr0NK+MyJLX8 ozPw== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@paul-moore-com.20210112.gappssmtp.com header.s=20210112 header.b=Oj2UeHh2; spf=pass (google.com: domain of selinux-refpolicy-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=selinux-refpolicy-owner@vger.kernel.org Return-Path: Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id p22-20020a1709028a9600b0014990e248f3si2619046plo.167.2022.02.25.13.38.11; Fri, 25 Feb 2022 13:38:16 -0800 (PST) Received-SPF: pass (google.com: domain of selinux-refpolicy-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; dkim=pass header.i=@paul-moore-com.20210112.gappssmtp.com header.s=20210112 header.b=Oj2UeHh2; spf=pass (google.com: domain of selinux-refpolicy-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=selinux-refpolicy-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S233777AbiBYUzg (ORCPT + 22 others); Fri, 25 Feb 2022 15:55:36 -0500 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:33166 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S232280AbiBYUzf (ORCPT ); Fri, 25 Feb 2022 15:55:35 -0500 Received: from mail-ej1-x636.google.com (mail-ej1-x636.google.com [IPv6:2a00:1450:4864:20::636]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 0F7DA1D793C for ; Fri, 25 Feb 2022 12:54:59 -0800 (PST) Received: by mail-ej1-x636.google.com with SMTP id a8so13101956ejc.8 for ; Fri, 25 Feb 2022 12:54:58 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=paul-moore-com.20210112.gappssmtp.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=5uRsrBukF/OaHklKeUPxgxH16ty4e2SknPEAhNIbuzI=; b=Oj2UeHh27U1O4N7l5DBWuAtV67Ay3IpEleEp+o54d3CxEXDSMdqy6DaeA+FVZB28VP wIIn8hgELwuOTwz6hOaeVZtlebfiuq3gyTf4EaQ6Ptcgp36l3GNy4BKzj98oUPVXqbOH gElIpqL5novCm4oHdfP/9MAthJ3028EkXQoYQhUxfrXY0LYmRD4bIlikE4dSBajq45EX dVAVsJS2CRwsKGD6LJW4W2dl/l5Jh4mRy2v+obEo3Dwi1agtVRiunAVTbAg1P6EPHGZZ O+Bq6Nnjd3C4m0q/YAKHsgvk6yajs4u7OTkygvn5yYQB0CV3QVVbUQ5prDm2Lyoc50HM HAoQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=5uRsrBukF/OaHklKeUPxgxH16ty4e2SknPEAhNIbuzI=; b=kx8Ql7JzH2/uMelGFM5aum1rOpVDhfOnZttJAfIwN2f9jDhf04YkkyJX3jZNBDxkm+ 4RaIpu11lLYroxrB+eSUtqlvT4gX1uwPxTXyHfG/DALa87yOwzn1bjLzOz/TA14Bsc/R WaKg9i12TQAYUUdw3HvnZwerAotxbY+90TyvzTvPCpEPtu9D02LROaDsU58ybBIIKw+4 ITGXtHg2CGlnBgoHVeCuc4OZvp7vDCvMduu6RjVtuGvPgDxR1hg20nZk4wrTeelRTNpf A+tRJ2tx2OhMTY+uIlzdC++yHhGcn1ewTOiCDOquf0xZSPdnXyz5mhZkBIDR202sOgVL Z+tw== X-Gm-Message-State: AOAM533aA+BeqUbTK5MmrPZjfrkztc/MgoL0uge5TFaGN+hAsniF/tDb OdMg8kyI9SNzlhCZ1ZrDSx6g3dXSGLCaUwk8OzNU X-Received: by 2002:a17:907:2a54:b0:6d5:879d:aca4 with SMTP id fe20-20020a1709072a5400b006d5879daca4mr7473197ejc.29.1645822497528; Fri, 25 Feb 2022 12:54:57 -0800 (PST) MIME-Version: 1.0 References: <20220224102417.42268-1-richard_c_haines@btinternet.com> In-Reply-To: From: Paul Moore Date: Fri, 25 Feb 2022 15:54:46 -0500 Message-ID: Subject: Re: [PATCH V3] security/selinux: Always allow FIOCLEX and FIONCLEX To: Ondrej Mosnacek Cc: Richard Haines , SElinux list , Stephen Smalley , Eric Paris , demiobenour@gmail.com, Linux kernel mailing list , selinux-refpolicy@vger.kernel.org, Jeff Vander Stoep Content-Type: text/plain; charset="UTF-8" X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,RCVD_IN_DNSWL_NONE,SPF_HELO_NONE,SPF_NONE, T_SCC_BODY_TEXT_LINE autolearn=unavailable autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: selinux-refpolicy@vger.kernel.org On Fri, Feb 25, 2022 at 5:02 AM Ondrej Mosnacek wrote: > (IMHO the POLICYDB_CAPABILITY_ prefix is ridiculously long for no > reason and we should simply shorten it (just POLCAP_ would be > perfectly fine, IMHO) instead of trying to abbreviate the rest. Of > course, this doesn't have to be done now - I'm taking a note to myself > to splice in such rename next time I add a new capability, if not > earlier.) Yeah, that prefix is probably longer than it needs to be. Since we're at -rc5 right now, with -rc6 just a few days away, I'll go ahead and toss out a patch to shorten the names next week. While I have very mixed feelings on style/formatting-only patches, things like this should go into selinux/next at the end of the -rcX cycle so as not to cause unnecessary conflicts for people making "real" changes :) -- paul-moore.com