From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-1.3 required=3.0 tests=DKIMWL_WL_HIGH,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI, SPF_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 2F1D6C6787C for ; Fri, 12 Oct 2018 19:01:22 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id E3C1E20865 for ; Fri, 12 Oct 2018 19:01:21 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (1024-bit key) header.d=chromium.org header.i=@chromium.org header.b="WLP2DKZo" DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org E3C1E20865 Authentication-Results: mail.kernel.org; dmarc=fail (p=none dis=none) header.from=chromium.org Authentication-Results: mail.kernel.org; spf=none smtp.mailfrom=linux-security-module-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726515AbeJMCfO (ORCPT ); Fri, 12 Oct 2018 22:35:14 -0400 Received: from mail-yb1-f193.google.com ([209.85.219.193]:41312 "EHLO mail-yb1-f193.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1725919AbeJMCfO (ORCPT ); Fri, 12 Oct 2018 22:35:14 -0400 Received: by mail-yb1-f193.google.com with SMTP id e16-v6so5301141ybk.8 for ; Fri, 12 Oct 2018 12:01:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=SV1l6xGR0dH7KR9WlPOaU/bxiRwjWoygMAKTjMPmH00=; b=WLP2DKZoVXREMElMyoDQ9Mgwy5nTWtF75q946kO2NOd58IwNFh4fUsntFAlt7QrWME pWTs66GZF+kvgDnZBvOxPA41Dw0j2+TypN84k3ws6WpEc0TDvwzld7Ha5b100UoMlulU Cc7CyPlAmaRYgCHrZNCs4VnZ23MuDNbjklGQQ= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=SV1l6xGR0dH7KR9WlPOaU/bxiRwjWoygMAKTjMPmH00=; b=IjIJOzsc+d/C13hbuAPPNZ7EuXmG+U/dxM0BBJBycQmhSTrwVWdwsjvA8WesJyYYff oUnqNRw89sh10/yxEXQr94SldFCcD+TT3l4FTFl3WhEjy5AT7+tka5TWwci5BWuXsPXa 6r33q+Vzd7WfLGaBiY9yrrOc6Pu0eDumq916EnFrfD1KKEkTVAkjdvdcfevfc4kmYFqM Tm1z60gXECac0I1f2IWmWqt0HtYprjnkfDmQxLLcTXIi2RaRTeazPmnhel6edZKYOVpJ GSZnsS0kZz4SSfati90a5bX5i694vKM4J0uYB1f7UmTpk94Uee9KNE5mRwMYm5di51TU xhGA== X-Gm-Message-State: ABuFfojwGLywyQk5VsoIAQs7fBQ2M/MRaIdDi+m2LaawLSFCYZWMkVp9 puDIgT4QGuqQf146w9Yz2Y/gsA5Z4Xo= X-Google-Smtp-Source: ACcGV60fT/SSP2rc/lRzrjt2dbOhAp42NIvCnaSihGBCo5dXPRuveglzkEyCbi1zzetpEc4wSVoFqQ== X-Received: by 2002:a25:7610:: with SMTP id r16-v6mr3908507ybc.461.1539370880142; Fri, 12 Oct 2018 12:01:20 -0700 (PDT) Received: from mail-yb1-f173.google.com (mail-yb1-f173.google.com. [209.85.219.173]) by smtp.gmail.com with ESMTPSA id w6-v6sm506659ywl.30.2018.10.12.12.01.19 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 12 Oct 2018 12:01:19 -0700 (PDT) Received: by mail-yb1-f173.google.com with SMTP id d9-v6so5289300ybr.12 for ; Fri, 12 Oct 2018 12:01:19 -0700 (PDT) X-Received: by 2002:a25:3617:: with SMTP id d23-v6mr4152480yba.141.1539370878865; Fri, 12 Oct 2018 12:01:18 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:a25:d116:0:0:0:0:0 with HTTP; Fri, 12 Oct 2018 12:01:17 -0700 (PDT) In-Reply-To: <8251564f-ba7a-1777-a606-dec472b32f35@canonical.com> References: <20181011001846.30964-1-keescook@chromium.org> <32stV62RmME8Dj5jKB8Z03zPe_Et72kMo71D8SpgSOHUo6SaROc8DomMWdk5jDGpyqVd8T63NIIK2NdDw95clpF8Uj47Wca2FBFItXDRh7E=@protonmail.ch> <38dde301-d77e-35fd-88d4-5cdc5b570ee8@canonical.com> <_CkJnKYmEZ4ZF0JtsSYuahAd9sgnX9OtcstjXaeqb8wn5uxfimc6S4jomly7If9VqnOXqXwaiCbJ9ttS6NiqE7n6cQUlwLvfO53paLmacvU=@protonmail.ch> <8251564f-ba7a-1777-a606-dec472b32f35@canonical.com> From: Kees Cook Date: Fri, 12 Oct 2018 12:01:17 -0700 X-Gmail-Original-Message-ID: Message-ID: Subject: Re: [PATCH security-next v5 00/30] LSM: Explict ordering To: John Johansen Cc: Jordan Glover , James Morris , Casey Schaufler , Stephen Smalley , Paul Moore , Tetsuo Handa , Mimi Zohar , Randy Dunlap , LSM , "open list:DOCUMENTATION" , linux-arch , LKML Content-Type: text/plain; charset="UTF-8" Sender: owner-linux-security-module@vger.kernel.org Precedence: bulk List-ID: On Friday, October 12, 2018 3:19 AM, John Johansen wrote: > It isn't perfect but it manages consistency across distros as best as > can be achieved atm. Yeah, this is why I'm okay with the current series: it provides as consistent a view as possible, but leaves room for future improvements (like adding "+" or "!" or "all" or whatever). I'm curious to see what SELinux folks think of v5, though. I *think* I addressed all the concerns there, even Paul's "I want my distro default to not have extreme stacking" case too. -Kees -- Kees Cook Pixel Security