From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-0.8 required=3.0 tests=DKIM_INVALID,DKIM_SIGNED, HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 4CBD2C04EBF for ; Tue, 4 Dec 2018 15:39:48 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id 06D082081C for ; Tue, 4 Dec 2018 15:39:47 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=fail reason="key not found in DNS" (0-bit key) header.d=szeredi.hu header.i=@szeredi.hu header.b="Zm6j1/lg" DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 06D082081C Authentication-Results: mail.kernel.org; dmarc=none (p=none dis=none) header.from=szeredi.hu Authentication-Results: mail.kernel.org; spf=none smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726630AbeLDPjq (ORCPT ); Tue, 4 Dec 2018 10:39:46 -0500 Received: from mail-it1-f195.google.com ([209.85.166.195]:52669 "EHLO mail-it1-f195.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726302AbeLDPjq (ORCPT ); Tue, 4 Dec 2018 10:39:46 -0500 Received: by mail-it1-f195.google.com with SMTP id i7so16029388iti.2 for ; Tue, 04 Dec 2018 07:39:44 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=szeredi.hu; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=+8Usk423ndDeBccwZQwGZOTk5EVc8Nkd0vtAXLOPWCI=; b=Zm6j1/lgonn7mxUEQUaaOFqPeS0MG1V9gjBHo3EdxrJvY73h5nDBiZlj9Kqm59GHUU 9GZzbIikny1ojO4y/4OWvUA0iA9ekcOfIbXU+mhaQ/YwUOVExT3wU8dRYR+YCPLYxEc/ V93sl1AOVa6hYmaFAHXRYcEfqNPVAqKhtqfz8= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=+8Usk423ndDeBccwZQwGZOTk5EVc8Nkd0vtAXLOPWCI=; b=PSUgtX8vriMMTwmMsGEjEt6+MVx4YfTM19QRMkfBmww3zhRskq0c66z8HuaPIe8Aww Jp7muFikkSNddPdBvSN4czEtsGj+HICz/WjMJekSvxDjCrWu+JY0HNAm4a/hmM1l2ihM VHeEkWug6Vv58TQdwWn3ZSDW5G8mPrBLcQAOfhNn9+lSUFECUfbtJilhI4U1XfUqw9BQ mUJdQbCAgVQwJf5Hucn8pQZUgMInC1asMqGswKbqKx+o3WmggOt7gOmuX6YjMUoGASvt WmgVmX/+n7ELWRSTuETf22xyOi1skkT8xaKUA8AhLvQ0/ci/tyWO7Tf6VxPgOo7l1uAw Wskw== X-Gm-Message-State: AA+aEWY3hxCOjX3WBVlmcthYYQJFC31jXFrCjKWE4yeMJG0sfCY9jQ5H 9DO4WDkD1H2XBBMZ3ZXInEhVXWm6/LxFiQ5NomtJIA== X-Google-Smtp-Source: AFSGD/Uukdfxz2wdIR9pmQaC3nXEZWbQqPHsE1lrM9ATsYrO3ENH9cJslrCSclHqhSXdAkgn1H2eskXdT4C7z1LxixA= X-Received: by 2002:a02:a484:: with SMTP id d4mr18422781jam.77.1543937984513; Tue, 04 Dec 2018 07:39:44 -0800 (PST) MIME-Version: 1.0 References: <20181127210542.GA2599@redhat.com> <20181128170302.GA12405@redhat.com> <377b7d4f-eb1d-c281-5c67-8ab6de77c881@tycho.nsa.gov> <26bce3be-49c2-cdd8-af03-1a78d0f268ae@tycho.nsa.gov> <6b125e8e-413f-f8e6-c7ae-50f7235c8960@tycho.nsa.gov> <4c20a261-5ce1-f0a2-8d40-c6032a023216@tycho.nsa.gov> <6feb656e-b1e3-5839-ce5f-669ae5a55b7f@tycho.nsa.gov> In-Reply-To: <6feb656e-b1e3-5839-ce5f-669ae5a55b7f@tycho.nsa.gov> From: Miklos Szeredi Date: Tue, 4 Dec 2018 16:39:32 +0100 Message-ID: Subject: Re: overlayfs access checks on underlying layers To: Stephen Smalley Cc: Vivek Goyal , Ondrej Mosnacek , "J. Bruce Fields" , Mark Salyzyn , Paul Moore , linux-kernel@vger.kernel.org, overlayfs , linux-fsdevel@vger.kernel.org, selinux@vger.kernel.org, Daniel J Walsh Content-Type: text/plain; charset="UTF-8" Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Tue, Dec 4, 2018 at 4:32 PM Stephen Smalley wrote: > Ok, I concede the point. Not sure what that means though for v4.20. I have the revert queued up for v4.20 as that's the safest. Don't let that stop the discussion, though, I'd especially like to hear the arguments from the Android side. Thanks, Miklos