From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-1.1 required=3.0 tests=DKIMWL_WL_HIGH,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI, SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 642F6C169C4 for ; Fri, 8 Feb 2019 21:39:50 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id 2EAB0218D2 for ; Fri, 8 Feb 2019 21:39:50 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (1024-bit key) header.d=chromium.org header.i=@chromium.org header.b="JrymG7lJ" Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1727300AbfBHVjt (ORCPT ); Fri, 8 Feb 2019 16:39:49 -0500 Received: from mail-ua1-f67.google.com ([209.85.222.67]:45667 "EHLO mail-ua1-f67.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726791AbfBHVjt (ORCPT ); Fri, 8 Feb 2019 16:39:49 -0500 Received: by mail-ua1-f67.google.com with SMTP id e16so1598738uam.12 for ; Fri, 08 Feb 2019 13:39:48 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=H9oSgnPm07vwmWODWGHcHoCNDCiBPV7B6kOG9r5qu5s=; b=JrymG7lJoXWsdlGvV/4XrNQKV5jFNCCv7L/CdKsF5P4YfcP2Qdm6BaAisbUTma5Sr5 5ZEj6Lg+JfPditlcaBaxH5uT/4F4vpWUSDCUoD6rEub+eC2hLSdRykft9yOhldj1bq5D O2qgglxnNx7XN59JI0RXLfuJ2BB5TsBgpdRMc= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=H9oSgnPm07vwmWODWGHcHoCNDCiBPV7B6kOG9r5qu5s=; b=QCrL3hq5rq4lcWndhTFskbIuWmGZCqFbTZjyIR/o6hwCKi553RhRylPNUZQoaDrpp1 rgEBbGQcRtVVQZzphmvP+nkXrVokMQfft0e6qOP5o9mrfni8P+8npREzHYIkoUlMR2bZ Ow+TljCbbwqMjibUnhk53YL0tQip40nDrh17UyyVIQP8+W2O/NU6SBYqnw0ikZYXgdN9 lFRGjURRasHhFKRpco1fLUursBGBjJgpH4EqfDf//cqC3X7PP6i7lcNKyvoEPydhfHsU C36Nv191QRnKCSyggbIm0d6jQSu2oh3svBwsNAMRg+MIK8S7i3rY4RsTOj1vbbp4emEF rrWA== X-Gm-Message-State: AHQUAuaDkCliISidrhS3q9bHU5NcB0IEqf1//l2X/Z6xY7Ztp8xWD6el 5eiwUM7oB8AI//0ZEiHLfW/fw4qqupY= X-Google-Smtp-Source: AHgI3IbaSwewvxxqMjswho07bo+PONrDXMhq2IuXO/aM//kQeVU3qvl0xahbYL3KAG4HO8GPKhDbZQ== X-Received: by 2002:ab0:6007:: with SMTP id j7mr8998738ual.32.1549661987799; Fri, 08 Feb 2019 13:39:47 -0800 (PST) Received: from mail-vs1-f45.google.com (mail-vs1-f45.google.com. [209.85.217.45]) by smtp.gmail.com with ESMTPSA id x185sm1978329vkd.27.2019.02.08.13.39.47 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 08 Feb 2019 13:39:47 -0800 (PST) Received: by mail-vs1-f45.google.com with SMTP id e10so272045vsp.1 for ; Fri, 08 Feb 2019 13:39:47 -0800 (PST) X-Received: by 2002:a67:848a:: with SMTP id g132mr9843074vsd.222.1549661604836; Fri, 08 Feb 2019 13:33:24 -0800 (PST) MIME-Version: 1.0 References: <8f48e1d0-c109-f8a9-ea94-9659b16cae49@i-love.sakura.ne.jp> <0d23d1a5-d4af-debf-6b5f-aaaf698daaa8@schaufler-ca.com> <201902070230.x172UUG6002087@www262.sakura.ne.jp> <6def6199-0235-7c37-974c-baf731725606@schaufler-ca.com> In-Reply-To: <6def6199-0235-7c37-974c-baf731725606@schaufler-ca.com> From: Kees Cook Date: Fri, 8 Feb 2019 13:33:13 -0800 X-Gmail-Original-Message-ID: Message-ID: Subject: Re: [PATCH] LSM: Allow syzbot to ignore security= parameter. To: Casey Schaufler Cc: Tetsuo Handa , Dmitry Vyukov , Paul Moore , Stephen Smalley , syzbot , Tyler Hicks , John Johansen , James Morris , LKML , linux-security-module , Serge Hallyn , syzkaller-bugs , Jeffrey Vander Stoep , SELinux , Russell Coker , Laurent Bigonville , syzkaller , Andrew Morton Content-Type: text/plain; charset="UTF-8" Sender: owner-linux-security-module@vger.kernel.org Precedence: bulk List-ID: On Thu, Feb 7, 2019 at 8:24 AM Casey Schaufler wrote: > I added Kees to the CC list. Kees, what to you think about > ignoring security= if lsm= is specified? I'm ambivalent. This was one of many earlier suggestions, and the consensus seemed to be "don't mix security= and lsm=". Why would anyone use both? -- Kees Cook