Re: regression in 4.14-rc2 caused by apparmor: add base infastructure for socket mediation

2017-10-26 Thread John Johansen
On 10/26/2017 12:06 PM, James Morris wrote: > On Thu, 26 Oct 2017, Linus Torvalds wrote: > >> On Thu, Oct 26, 2017 at 8:54 PM, James Morris >> wrote: >>> On Thu, 26 Oct 2017, Linus Torvalds wrote: >>> I'm *very* unhappy with the security layer as is >>> >>> What are you unhappy with? >> >>

Re: regression in 4.14-rc2 caused by apparmor: add base infastructure for socket mediation

2017-10-26 Thread John Johansen
On 10/26/2017 10:36 AM, Linus Torvalds wrote: > On Tue, Oct 24, 2017 at 1:57 PM, John Johansen > wrote: >> >> actually a lot of work and testing has been done. A regression was >> found, the fix is in testing and it should land soon, but its not the >> regression you are having issues with. > > S

Re: regression in 4.14-rc2 caused by apparmor: add base infastructure for socket mediation

2017-10-26 Thread James Morris
On Thu, 26 Oct 2017, Linus Torvalds wrote: > On Thu, Oct 26, 2017 at 8:54 PM, James Morris > wrote: > > On Thu, 26 Oct 2017, Linus Torvalds wrote: > > > >> I'm *very* unhappy with the security layer as is > > > > What are you unhappy with? > > We had two big _fundamental_ problems this merge wi

Re: regression in 4.14-rc2 caused by apparmor: add base infastructure for socket mediation

2017-10-26 Thread Linus Torvalds
On Thu, Oct 26, 2017 at 8:54 PM, James Morris wrote: > On Thu, 26 Oct 2017, Linus Torvalds wrote: > >> I'm *very* unhappy with the security layer as is > > What are you unhappy with? We had two big _fundamental_ problems this merge window: - untested code that clearly didn't do what it claimed

Re: regression in 4.14-rc2 caused by apparmor: add base infastructure for socket mediation

2017-10-26 Thread James Morris
On Thu, 26 Oct 2017, Linus Torvalds wrote: > I'm *very* unhappy with the security layer as is What are you unhappy with? -- James Morris

Re: regression in 4.14-rc2 caused by apparmor: add base infastructure for socket mediation

2017-10-26 Thread Linus Torvalds
On Thu, Oct 26, 2017 at 11:11 AM, Thorsten Leemhuis wrote: > > All that afaics doesn't matter. If a new kernel breaks things for people > (that especially includes people that do *not* update their userland) > then it's a kernel regression, even if the root of the problem is in > usersland. Linus

Re: regression in 4.14-rc2 caused by apparmor: add base infastructure for socket mediation

2017-10-26 Thread Linus Torvalds
On Tue, Oct 24, 2017 at 1:57 PM, John Johansen wrote: > > actually a lot of work and testing has been done. A regression was > found, the fix is in testing and it should land soon, but its not the > regression you are having issues with. Stop gthis f*cking idiocy already! As far as the kernel is

Re: regression in 4.14-rc2 caused by apparmor: add base infastructure for socket mediation

2017-10-26 Thread Thorsten Leemhuis
On 24.10.2017 13:31, John Johansen wrote: > On 10/23/2017 11:39 PM, Thorsten Leemhuis wrote: >> Lo, your friendly regression tracker here! >> On 03.10.2017 09:17, John Johansen wrote: >>> On 10/02/2017 11:48 PM, Vlastimil Babka wrote: On 10/03/2017 07:15 AM, James Bottomley wrote: > On Mon

Re: regression in 4.14-rc2 caused by apparmor: add base infastructure for socket mediation

2017-10-24 Thread Vlastimil Babka
On 10/24/2017 01:03 PM, James Bottomley wrote: > On Tue, 2017-10-24 at 08:39 +0200, Thorsten Leemhuis wrote: >> Lo, your friendly regression tracker here! >> >> On 03.10.2017 09:17, John Johansen wrote: >>> >>> On 10/02/2017 11:48 PM, Vlastimil Babka wrote: On 10/03/2017 07:15 AM, James B

Re: regression in 4.14-rc2 caused by apparmor: add base infastructure for socket mediation

2017-10-24 Thread John Johansen
On 10/24/2017 04:03 AM, James Bottomley wrote: > On Tue, 2017-10-24 at 08:39 +0200, Thorsten Leemhuis wrote: >> Lo, your friendly regression tracker here! >> >> On 03.10.2017 09:17, John Johansen wrote: >>> >>> On 10/02/2017 11:48 PM, Vlastimil Babka wrote: On 10/03/2017 07:15 AM, James B

Re: regression in 4.14-rc2 caused by apparmor: add base infastructure for socket mediation

2017-10-24 Thread John Johansen
On 10/23/2017 11:39 PM, Thorsten Leemhuis wrote: > Lo, your friendly regression tracker here! > > On 03.10.2017 09:17, John Johansen wrote: >> On 10/02/2017 11:48 PM, Vlastimil Babka wrote: >>> On 10/03/2017 07:15 AM, James Bottomley wrote: On Mon, 2017-10-02 at 21:11 -0700, John Johansen wro

Re: regression in 4.14-rc2 caused by apparmor: add base infastructure for socket mediation

2017-10-24 Thread James Bottomley
On Tue, 2017-10-24 at 08:39 +0200, Thorsten Leemhuis wrote: > Lo, your friendly regression tracker here! > > On 03.10.2017 09:17, John Johansen wrote: > > > > On 10/02/2017 11:48 PM, Vlastimil Babka wrote: > > > > > > On 10/03/2017 07:15 AM, James Bottomley wrote: > > > > > > > > On Mon, 2017-1

Re: regression in 4.14-rc2 caused by apparmor: add base infastructure for socket mediation

2017-10-23 Thread Thorsten Leemhuis
Lo, your friendly regression tracker here! On 03.10.2017 09:17, John Johansen wrote: > On 10/02/2017 11:48 PM, Vlastimil Babka wrote: >> On 10/03/2017 07:15 AM, James Bottomley wrote: >>> On Mon, 2017-10-02 at 21:11 -0700, John Johansen wrote: On 10/02/2017 09:02 PM, James Bottomley wrote: >>

Re: regression in 4.14-rc2 caused by apparmor: add base infastructure for socket mediation

2017-10-03 Thread John Johansen
On 10/02/2017 11:48 PM, Vlastimil Babka wrote: > On 10/03/2017 07:15 AM, James Bottomley wrote: >> On Mon, 2017-10-02 at 21:11 -0700, John Johansen wrote: >>> On 10/02/2017 09:02 PM, James Bottomley wrote: The specific problem is that dnsmasq refuses to start on openSUSE Leap 42.2.

Re: regression in 4.14-rc2 caused by apparmor: add base infastructure for socket mediation

2017-10-02 Thread Vlastimil Babka
On 10/03/2017 07:15 AM, James Bottomley wrote: > On Mon, 2017-10-02 at 21:11 -0700, John Johansen wrote: >> On 10/02/2017 09:02 PM, James Bottomley wrote: >>> >>> The specific problem is that dnsmasq refuses to start on openSUSE >>> Leap 42.2.  The specific cause is that and attempt to open a >>> P

Re: regression in 4.14-rc2 caused by apparmor: add base infastructure for socket mediation

2017-10-02 Thread John Johansen
On 10/02/2017 10:15 PM, James Bottomley wrote: > On Mon, 2017-10-02 at 21:11 -0700, John Johansen wrote: >> On 10/02/2017 09:02 PM, James Bottomley wrote: >>> >>> The specific problem is that dnsmasq refuses to start on openSUSE >>> Leap 42.2. The specific cause is that and attempt to open a >>> P

Re: regression in 4.14-rc2 caused by apparmor: add base infastructure for socket mediation

2017-10-02 Thread James Bottomley
On Mon, 2017-10-02 at 21:11 -0700, John Johansen wrote: > On 10/02/2017 09:02 PM, James Bottomley wrote: > > > > The specific problem is that dnsmasq refuses to start on openSUSE > > Leap 42.2.  The specific cause is that and attempt to open a > > PF_LOCAL socket gets EACCES.  This means that netw

Re: regression in 4.14-rc2 caused by apparmor: add base infastructure for socket mediation

2017-10-02 Thread John Johansen
On 10/02/2017 09:02 PM, James Bottomley wrote: > The specific problem is that dnsmasq refuses to start on openSUSE Leap > 42.2.  The specific cause is that and attempt to open a PF_LOCAL socket > gets EACCES.  This means that networking doesn't function on a system > with a 4.14-rc2 system. > > Re

regression in 4.14-rc2 caused by apparmor: add base infastructure for socket mediation

2017-10-02 Thread James Bottomley
The specific problem is that dnsmasq refuses to start on openSUSE Leap 42.2.  The specific cause is that and attempt to open a PF_LOCAL socket gets EACCES.  This means that networking doesn't function on a system with a 4.14-rc2 system. Reverting commit 651e28c5537abb39076d3949fb7618536f1d242e (ap