Re: [PATCH v2] selinux: rate-limit unrecognized netlink message warnings in selinux_nlmsg_perm()

2015-11-10 Thread Paul Moore
On Wednesday, November 04, 2015 11:35:51 AM Vladis Dronov wrote: > Any process is able to send netlink messages with invalid types. > Make the warning rate-limited to prevent too much log spam. > > The warning is supposed to help to find misbehaving programs, so > print the triggering command name

Re: [PATCH v5 3/3] Allows reading back the current IMA policy;

2015-11-10 Thread Mimi Zohar
On Tue, 2015-11-10 at 18:01 +0200, Petko Manolov wrote: > On 15-11-09 09:30:58, Mimi Zohar wrote: > > On Mon, 2015-11-02 at 00:39 +0200, Petko Manolov wrote: > > > > > + > > > +#ifdef CONFIG_IMA_READ_POLICY > > > +enum { > > > + mask_err = -1, > > > + mask_exec = 1, mask_write, mask_read, mask_a

Re: [PATCH v5 3/3] Allows reading back the current IMA policy;

2015-11-10 Thread Petko Manolov
On 15-11-09 09:30:58, Mimi Zohar wrote: > On Mon, 2015-11-02 at 00:39 +0200, Petko Manolov wrote: > > > + > > +#ifdef CONFIG_IMA_READ_POLICY > > +enum { > > + mask_err = -1, > > + mask_exec = 1, mask_write, mask_read, mask_append > > +}; > > + > > +static match_table_t mask_tokens = { > >

Re: [PATCH v4 03/11] lsm: add file opener's cred to a setprocattr arguments

2015-11-10 Thread Lukasz Pawelczyk
On wto, 2015-11-10 at 04:16 +, Al Viro wrote: > On Wed, Oct 14, 2015 at 02:41:57PM +0200, Lukasz Pawelczyk wrote: > > int (*getprocattr)(struct task_struct *p, char *name, char > > **value); > > - int (*setprocattr)(struct task_struct *p, char *name, void > > *value, > > -

[GIT PULL] TPM fixes for v4.4

2015-11-10 Thread Jarkko Sakkinen
scm/linux/kernel/git/dhowells/linux-fs into next (2015-10-23 12:07:52 +1100) are available in the git repository at: https://github.com/jsakkine/linux-tpmdd.git tags/tpmdd-next-20151110 for you to fetch changes up to d56e4f75346933dd2cb11533a668ce883908c859: tpm: fix compat &#