From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-3.7 required=3.0 tests=BAYES_00, HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS, URIBL_BLOCKED autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 6FA9CC43461 for ; Thu, 10 Sep 2020 14:12:01 +0000 (UTC) Received: from us-smtp-1.mimecast.com (us-smtp-delivery-1.mimecast.com [207.211.31.120]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id BD91720BED for ; Thu, 10 Sep 2020 14:12:00 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org BD91720BED Authentication-Results: mail.kernel.org; dmarc=none (p=none dis=none) header.from=paul-moore.com Authentication-Results: mail.kernel.org; spf=tempfail smtp.mailfrom=linux-audit-bounces@redhat.com Received: from mimecast-mx01.redhat.com (mimecast-mx01.redhat.com [209.132.183.4]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-283-kLarEEePNgSL-j9pdCfPZg-1; Thu, 10 Sep 2020 10:11:45 -0400 X-MC-Unique: kLarEEePNgSL-j9pdCfPZg-1 Received: from smtp.corp.redhat.com (int-mx04.intmail.prod.int.phx2.redhat.com [10.5.11.14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mimecast-mx01.redhat.com (Postfix) with ESMTPS id F20691882FBC; Thu, 10 Sep 2020 14:11:39 +0000 (UTC) Received: from colo-mx.corp.redhat.com (colo-mx02.intmail.prod.int.phx2.redhat.com [10.5.11.21]) by smtp.corp.redhat.com (Postfix) with ESMTPS id 43C605D9E8; Thu, 10 Sep 2020 14:11:39 +0000 (UTC) Received: from lists01.pubmisc.prod.ext.phx2.redhat.com (lists01.pubmisc.prod.ext.phx2.redhat.com [10.5.19.33]) by colo-mx.corp.redhat.com (Postfix) with ESMTP id AD610922ED; Thu, 10 Sep 2020 14:11:37 +0000 (UTC) Received: from smtp.corp.redhat.com (int-mx05.intmail.prod.int.rdu2.redhat.com [10.11.54.5]) by lists01.pubmisc.prod.ext.phx2.redhat.com (8.13.8/8.13.8) with ESMTP id 08AEBYZf019880 for ; Thu, 10 Sep 2020 10:11:34 -0400 Received: by smtp.corp.redhat.com (Postfix) id 55147F5581; Thu, 10 Sep 2020 14:11:34 +0000 (UTC) Received: from mimecast-mx02.redhat.com (mimecast03.extmail.prod.ext.rdu2.redhat.com [10.11.55.19]) by smtp.corp.redhat.com (Postfix) with ESMTPS id 5094EF5584 for ; Thu, 10 Sep 2020 14:11:31 +0000 (UTC) Received: from us-smtp-1.mimecast.com (us-smtp-delivery-1.mimecast.com [205.139.110.120]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by mimecast-mx02.redhat.com (Postfix) with ESMTPS id 23BD6811E78 for ; Thu, 10 Sep 2020 14:11:31 +0000 (UTC) Received: from mail-ed1-f66.google.com (mail-ed1-f66.google.com [209.85.208.66]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-130-C2mnyBFsMdKf2dmUWpqRsA-1; Thu, 10 Sep 2020 10:11:26 -0400 X-MC-Unique: C2mnyBFsMdKf2dmUWpqRsA-1 Received: by mail-ed1-f66.google.com with SMTP id c8so6471946edv.5 for ; Thu, 10 Sep 2020 07:11:25 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=JqER1n/S/bVapO+RyrM1xxWOQKbNzVguXbfv8iwgPWk=; b=af/XXAtv5/mZjtZjGeF5d8+xMhC+oouRwEaoOqrewHaxkHFpmQE6XxZ3Mc7GIK7DVL PJr7nn0WuUua/DYoHouHKiZndxetZEd18o8sDxkWCj75VoJnx5zHAmrSWhmpIK9w1R35 9d1bv+OB5KvHaBraa0xmrtljFCsx02nOIH+ALz1JX55ETXt2Va/c4ClfY5jLNaF3URCs sss12KgLg/O9L8ndrjtbms0S4Vb013rjPTovGGRxG7demo9xgYh09Z9l95HVl1qozzOC mvITMBSGXy4mwk2NoeOnecTQlV4pX+eiYS61sk93wn+/KITa4CG79IeosJC4ZQY/ZCDt db+w== X-Gm-Message-State: AOAM530BiX8ORSeN2mGFNtej6f2dIgxB8DTr/JehPLcOSCqn/9OiGzTt /BkXH3zvo2Nl9Jni3OzWmxioYE3Tbwx20Ki/SZ13 X-Google-Smtp-Source: ABdhPJy1FTJ7DXFJo05WoW+t4O9pZDdDoW4TpXiv609ezJYlL+41ua8D4GnLvm80oWsYted6RRcGfRiYYQPB685hrWg= X-Received: by 2002:a05:6402:1805:: with SMTP id g5mr9107156edy.135.1599747084327; Thu, 10 Sep 2020 07:11:24 -0700 (PDT) MIME-Version: 1.0 References: <20200826145247.10029-1-casey@schaufler-ca.com> <20200826145247.10029-6-casey@schaufler-ca.com> <1eeef766-405f-3800-c0cf-3eb008f9673e@schaufler-ca.com> <585600d7-70fb-0982-1e6b-ffd7b7c33e32@schaufler-ca.com> <9a58d14c-eaff-3acf-4689-925cf08ba406@canonical.com> In-Reply-To: From: Paul Moore Date: Thu, 10 Sep 2020 10:11:13 -0400 Message-ID: Subject: Re: [PATCH v20 05/23] net: Prepare UDS for security module stacking To: John Johansen X-Mimecast-Impersonation-Protect: Policy=CLT - Impersonation Protection Definition; Similar Internal Domain=false; Similar Monitored External Domain=false; Custom External Domain=false; Mimecast External Domain=false; Newly Observed Domain=false; Internal User Name=false; Custom Display Name List=false; Reply-to Address Mismatch=false; Targeted Threat Dictionary=false; Mimecast Threat Dictionary=false; Custom Threat Dictionary=false; X-Scanned-By: MIMEDefang 2.79 on 10.11.54.5 X-loop: linux-audit@redhat.com Cc: SElinux list , James Morris , Casey Schaufler , LSM List , linux-audit@redhat.com, Stephen Smalley X-BeenThere: linux-audit@redhat.com X-Mailman-Version: 2.1.12 Precedence: junk List-Id: Linux Audit Discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com X-Scanned-By: MIMEDefang 2.79 on 10.5.11.14 Authentication-Results: relay.mimecast.com; auth=pass smtp.auth=CUSA124A263 smtp.mailfrom=linux-audit-bounces@redhat.com X-Mimecast-Spam-Score: 0.001 X-Mimecast-Originator: redhat.com Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit On Wed, Sep 9, 2020 at 2:47 PM John Johansen wrote: > ... For now Casey can drop it from this series. As long as that whenever it reappears there is at the very least some note of the limits in the commit description and the code (via comments in the struct). Of course that assumes we can't find an alternate solution that we can all agree on which doesn't have these stacking limits. -- paul moore www.paul-moore.com -- Linux-audit mailing list Linux-audit@redhat.com https://www.redhat.com/mailman/listinfo/linux-audit