From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by smtp.lore.kernel.org (Postfix) with ESMTP id AAD6FC00140 for ; Wed, 3 Aug 2022 02:40:48 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S235503AbiHCCkr (ORCPT ); Tue, 2 Aug 2022 22:40:47 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:56980 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S235316AbiHCCkq (ORCPT ); Tue, 2 Aug 2022 22:40:46 -0400 Received: from mail-oi1-x22d.google.com (mail-oi1-x22d.google.com [IPv6:2607:f8b0:4864:20::22d]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 1E9ED33348 for ; Tue, 2 Aug 2022 19:40:46 -0700 (PDT) Received: by mail-oi1-x22d.google.com with SMTP id bb16so18565315oib.11 for ; Tue, 02 Aug 2022 19:40:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=paul-moore-com.20210112.gappssmtp.com; s=20210112; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc; bh=dJ9RyKWE5FBwVhzJS/Ney0KLGBUDYNi42Whw7jsCqTk=; b=Pb2Eej0xmH23y/cqzxJPqY7hR1X5oZDSF3Ij3l5/RGclHhaIy+1giMDCyH6E97NFtw W7X8k0+rOQNq7e1b+QP8yaXoPmf+qMf6CRY+OtEnlKXjnb7XFhgGh/463kRiVyWF7sEJ 2ks+XT7DASO3j70gCiOwsvZl/c6VaVseb8He8FApS/vdEXrmKVJeJd/HpZoNtO2dQoWS W23yk7KbilvyYWCQg4K3FoK0MopX7hfo/gsWWqE8RR8xXHUj0N4MpYTT/v/7R+B6NDmZ 17+OATGNanpWeQa72PZc4UUaEZpBHSPUuYebvjMsZgMHlQPnGOk0Ou0b6zPKA9p7+yFe Zefg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc; bh=dJ9RyKWE5FBwVhzJS/Ney0KLGBUDYNi42Whw7jsCqTk=; b=6xroOo+12E0PwGBRUN8yK4nrUCkUDtc/1EPH9K4lcO2wndVSOsyomgGARKA+Xi7cMU S8MteRxiA3T4pQ37kcwQyu1UzVPYwRD4gklkXD/NxsHm8QjPpspgZ0vcCOkhUQ/EE0Mx Ch9W2cmsrRhbjUEEsYLV0jQhpfzc47AKRvz0iCT500o0fFL7b0NYH1760NaKcEQx7SU2 P9CfVjYzZycPHO8Opq0stcQYRuyx9NmDPe8+RWy0ea3/QmYrnb/wq/vBhZBxK90Bvdyx rHf43L//l27PIwjWJPocCccVPKZQiCAN2Kzhih6eVj/zg/GGD1ZCtvAeHPNsKzWjYYIj 7WCQ== X-Gm-Message-State: ACgBeo0sYdFyEx9kEnhdcQgC/OwrjXzwwDMLfRhejU2YqrK+4senJ0pM 1yUkpDeg/9M5q0ZBeGMOatW/bhS2p4JE+ZdzUGCdk2lqEA== X-Google-Smtp-Source: AA6agR5+3/8/YLolArypjH7JH1LqPE7ZmK02/QYNQW0OMSF5rhL00CxWaT/Z0tNJLAoc36IeOmsIxl5nMMQQIu3vF8c= X-Received: by 2002:a05:6808:2389:b0:33a:cbdb:f37a with SMTP id bp9-20020a056808238900b0033acbdbf37amr962169oib.136.1659494445502; Tue, 02 Aug 2022 19:40:45 -0700 (PDT) MIME-Version: 1.0 References: <791e13b5-bebd-12fc-53de-e9a86df23836.ref@schaufler-ca.com> <791e13b5-bebd-12fc-53de-e9a86df23836@schaufler-ca.com> <2642904.mvXUDI8C0e@x2> In-Reply-To: <2642904.mvXUDI8C0e@x2> From: Paul Moore Date: Tue, 2 Aug 2022 22:40:34 -0400 Message-ID: Subject: Re: LSM stacking in next for 6.1? To: Steve Grubb Cc: Casey Schaufler , linux-audit@redhat.com, John Johansen , SElinux list , James Morris , Mimi Zohar , LSM List Content-Type: text/plain; charset="UTF-8" Precedence: bulk List-ID: X-Mailing-List: selinux@vger.kernel.org On Tue, Aug 2, 2022 at 10:34 PM Steve Grubb wrote: > On Tuesday, August 2, 2022 8:56:21 PM EDT Paul Moore wrote: > > I can tell you that I've never been really excited about the /proc > > changes, and believe it or not I've been thinking about those a fair > > amount since James asked me to start maintaining the LSM. > > Why do we not have auid and sessionid in /proc//status ? > > This has been needed for 10 - 15 years. Nice thread hijack, but I believe you already know the answer to your question Steve: submit a patch for review. -- paul-moore.com From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 9679DC19F2B for ; Wed, 3 Aug 2022 02:40:55 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1659494454; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post; bh=D5FfQtPnTtxgn+1/9bObr4mJPjyUD9BC/NQ1eNCy/SE=; b=EQYT9oRgjsdTXDjAXfKYT0BJMZo78ddk33WFL+WfhWbn7JNxyse2BW+m8lCVg1LydbXCd6 XyOrhZco18y4/v6K5BBdeoSGqAsLDvex349M7N3cDWBwD71BhB4R5T73SGIcT086YXO0Qp C1sZt26FqY3KBdoJUTZPk+NVaY0VZ6I= Received: from mimecast-mx02.redhat.com (mx3-rdu2.redhat.com [66.187.233.73]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id us-mta-331-JDBEbav9NiS3yH1XiOGfMQ-1; Tue, 02 Aug 2022 22:40:51 -0400 X-MC-Unique: JDBEbav9NiS3yH1XiOGfMQ-1 Received: from smtp.corp.redhat.com (int-mx07.intmail.prod.int.rdu2.redhat.com [10.11.54.7]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mimecast-mx02.redhat.com (Postfix) with ESMTPS id BA6103C0D199; Wed, 3 Aug 2022 02:40:49 +0000 (UTC) Received: from mm-prod-listman-01.mail-001.prod.us-east-1.aws.redhat.com (unknown [10.30.29.100]) by smtp.corp.redhat.com (Postfix) with ESMTP id 700921410F38; Wed, 3 Aug 2022 02:40:49 +0000 (UTC) Received: from mm-prod-listman-01.mail-001.prod.us-east-1.aws.redhat.com (localhost [IPv6:::1]) by mm-prod-listman-01.mail-001.prod.us-east-1.aws.redhat.com (Postfix) with ESMTP id 300261946A4E; Wed, 3 Aug 2022 02:40:49 +0000 (UTC) Received: from smtp.corp.redhat.com (int-mx10.intmail.prod.int.rdu2.redhat.com [10.11.54.10]) by mm-prod-listman-01.mail-001.prod.us-east-1.aws.redhat.com (Postfix) with ESMTP id 02BED1946A4A for ; Wed, 3 Aug 2022 02:40:48 +0000 (UTC) Received: by smtp.corp.redhat.com (Postfix) id E85F3401E5C; Wed, 3 Aug 2022 02:40:47 +0000 (UTC) Received: from mimecast-mx02.redhat.com (mimecast09.extmail.prod.ext.rdu2.redhat.com [10.11.55.25]) by smtp.corp.redhat.com (Postfix) with ESMTPS id E4C03492C3B for ; Wed, 3 Aug 2022 02:40:47 +0000 (UTC) Received: from us-smtp-1.mimecast.com (us-smtp-delivery-1.mimecast.com [205.139.110.120]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mimecast-mx02.redhat.com (Postfix) with ESMTPS id CDAB229ABA08 for ; Wed, 3 Aug 2022 02:40:47 +0000 (UTC) Received: from mail-oi1-f178.google.com (mail-oi1-f178.google.com [209.85.167.178]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id us-mta-440-MHMayxRKNzi_p_UuSJ19Fg-1; Tue, 02 Aug 2022 22:40:46 -0400 X-MC-Unique: MHMayxRKNzi_p_UuSJ19Fg-1 Received: by mail-oi1-f178.google.com with SMTP id r13so18632064oie.1 for ; Tue, 02 Aug 2022 19:40:46 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc; bh=dJ9RyKWE5FBwVhzJS/Ney0KLGBUDYNi42Whw7jsCqTk=; b=QR8Es9m5kJJUBuq6saGbZyxjoFVkBTLTiqS4QQ9HHtVmP+PPz/STwhY6APgkZWsDSE D80BhkW7SHJ8Bwf91Zwrtk4ttIjOPKqPJTH5Afs8aDYTH7j/Jsp9JRR1Et+peVszafE0 J1LAo2fO1ZAMGi9noqfIkK9LQMpg1zlZYErM40Gl+1fMIKUcOQASyGXbpLDjOl2hu9rF 5lQPQpot0p35VM44cJxmrte9pYtSLPl48Eik9E74VuPeWolRFFBWDuOioApMG7l5oCIs roIxFj0xuw5xLVp2G9bmGyj/7nEJEG1sveB1vngh3UdS0h4vbGFtHp+LVFV2VD7QgQwo uOlA== X-Gm-Message-State: ACgBeo0kGNUgf1aMtfvk8BGQGw1ufQVzCCoxOHXXjgLijJGkJ73vtE/U bFDed3VzC7zIQ9V0E7kEkvpJJoUB2dI4srFhLZhB X-Google-Smtp-Source: AA6agR5+3/8/YLolArypjH7JH1LqPE7ZmK02/QYNQW0OMSF5rhL00CxWaT/Z0tNJLAoc36IeOmsIxl5nMMQQIu3vF8c= X-Received: by 2002:a05:6808:2389:b0:33a:cbdb:f37a with SMTP id bp9-20020a056808238900b0033acbdbf37amr962169oib.136.1659494445502; Tue, 02 Aug 2022 19:40:45 -0700 (PDT) MIME-Version: 1.0 References: <791e13b5-bebd-12fc-53de-e9a86df23836.ref@schaufler-ca.com> <791e13b5-bebd-12fc-53de-e9a86df23836@schaufler-ca.com> <2642904.mvXUDI8C0e@x2> In-Reply-To: <2642904.mvXUDI8C0e@x2> From: Paul Moore Date: Tue, 2 Aug 2022 22:40:34 -0400 Message-ID: Subject: Re: LSM stacking in next for 6.1? To: Steve Grubb X-Mimecast-Impersonation-Protect: Policy=CLT - Impersonation Protection Definition; Similar Internal Domain=false; Similar Monitored External Domain=false; Custom External Domain=false; Mimecast External Domain=false; Newly Observed Domain=false; Internal User Name=false; Custom Display Name List=false; Reply-to Address Mismatch=false; Targeted Threat Dictionary=false; Mimecast Threat Dictionary=false; Custom Threat Dictionary=false X-Scanned-By: MIMEDefang 2.85 on 10.11.54.10 X-BeenThere: linux-audit@redhat.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Linux Audit Discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: John Johansen , SElinux list , James Morris , Mimi Zohar , LSM List , linux-audit@redhat.com Errors-To: linux-audit-bounces@redhat.com Sender: "Linux-audit" X-Scanned-By: MIMEDefang 2.85 on 10.11.54.7 X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit On Tue, Aug 2, 2022 at 10:34 PM Steve Grubb wrote: > On Tuesday, August 2, 2022 8:56:21 PM EDT Paul Moore wrote: > > I can tell you that I've never been really excited about the /proc > > changes, and believe it or not I've been thinking about those a fair > > amount since James asked me to start maintaining the LSM. > > Why do we not have auid and sessionid in /proc//status ? > > This has been needed for 10 - 15 years. Nice thread hijack, but I believe you already know the answer to your question Steve: submit a patch for review. -- paul-moore.com -- Linux-audit mailing list Linux-audit@redhat.com https://listman.redhat.com/mailman/listinfo/linux-audit