From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by smtp.lore.kernel.org (Postfix) with ESMTP id 71B56C433F5 for ; Tue, 8 Feb 2022 23:44:55 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S238144AbiBHXoy convert rfc822-to-8bit (ORCPT ); Tue, 8 Feb 2022 18:44:54 -0500 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:50122 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S231478AbiBHXos (ORCPT ); Tue, 8 Feb 2022 18:44:48 -0500 Received: from eu-smtp-delivery-151.mimecast.com (eu-smtp-delivery-151.mimecast.com [185.58.86.151]) by lindbergh.monkeyblade.net (Postfix) with ESMTP id 7A9B7C061576 for ; Tue, 8 Feb 2022 15:44:47 -0800 (PST) Received: from AcuMS.aculab.com (156.67.243.121 [156.67.243.121]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id uk-mtapsc-5-34ZSeE5ZPTGlj3py7oltng-1; Tue, 08 Feb 2022 23:44:44 +0000 X-MC-Unique: 34ZSeE5ZPTGlj3py7oltng-1 Received: from AcuMS.Aculab.com (fd9f:af1c:a25b:0:994c:f5c2:35d6:9b65) by AcuMS.aculab.com (fd9f:af1c:a25b:0:994c:f5c2:35d6:9b65) with Microsoft SMTP Server (TLS) id 15.0.1497.28; Tue, 8 Feb 2022 23:44:43 +0000 Received: from AcuMS.Aculab.com ([fe80::994c:f5c2:35d6:9b65]) by AcuMS.aculab.com ([fe80::994c:f5c2:35d6:9b65%12]) with mapi id 15.00.1497.028; Tue, 8 Feb 2022 23:44:43 +0000 From: David Laight To: 'Dominick Grift' , Chris PeBenito CC: William Roberts , Paul Moore , Demi Marie Obenour , "Stephen Smalley" , Eric Paris , SElinux list , "Linux kernel mailing list" , "selinux-refpolicy@vger.kernel.org" Subject: RE: [PATCH] SELinux: Always allow FIOCLEX and FIONCLEX Thread-Topic: [PATCH] SELinux: Always allow FIOCLEX and FIONCLEX Thread-Index: AQHYHQyXVOSyCHpUB0mpWP39zhRRb6yKUIVg Date: Tue, 8 Feb 2022 23:44:43 +0000 Message-ID: <23e35a8fc78e414c982ab40670157667@AcuMS.aculab.com> References: <4df50e95-6173-4ed1-9d08-3c1c4abab23f@gmail.com> <478e1651-a383-05ff-d011-6dda771b8ce8@linux.microsoft.com> <875ypt5zmz.fsf@defensec.nl> <4be3fef6-63ca-af97-7fc6-d93d85a9b706@linux.microsoft.com> <87ee4dnw52.fsf@defensec.nl> In-Reply-To: <87ee4dnw52.fsf@defensec.nl> Accept-Language: en-GB, en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.202.205.107] MIME-Version: 1.0 Authentication-Results: relay.mimecast.com; auth=pass smtp.auth=C51A453 smtp.mailfrom=david.laight@aculab.com X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: aculab.com Content-Language: en-US Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8BIT Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org From: Dominick Grift > Sent: 08 February 2022 16:47 ... > I would not mind removing these two checks, but i am not a big user of > xperms (i only filter TIOSCTI on terminal chr files and only for the > entities that write or append them). TIOSCTI isn't your only problem. Much 'fun' can be had with terminals that support a settable answerback message. Possibly that is limited to physical serial terminals, but some emulators might be 'good enough' to support the relevant escape sequences. Even the default answerback message can be very confusing. David - Registered Address Lakeside, Bramley Road, Mount Farm, Milton Keynes, MK1 1PT, UK Registration No: 1397386 (Wales)