From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-wm1-f70.google.com (mail-wm1-f70.google.com [209.85.128.70]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 57B67642355 for ; Mon, 19 Oct 2026 14:06:15 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.128.70 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1792418777; cv=none; b=f6cbcmV1DfIzd/+2RB8Tcek1DeZFECO/he42b7IADbUG8ahVnrRUo+JA1tmN5nD/b7xiMflDBO7x0UBnqA43nC7en+3V6oDUoGSj1PFlAUylruPjxcAdvHnPgx0lZqF/3td2oUAKn8nC49VGzHzQV8WpUIUgMnuSBYRdo20kBmA= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1792418777; c=relaxed/simple; bh=EZ6SuXI0g/P+YubOOW0hKYEI2YhDJ3nwCgM1UzmghdU=; h=Date:In-Reply-To:Mime-Version:References:Message-ID:Subject:From: To:Cc:Content-Type; b=XtGPvTSq+38rLVaTw+hDWezYMYGa0konhAXsSG4d3+EHQ9elLuuOuFGYXkkH0FKfxJx230MLX5WEjzEMwyQG4cx03TID4locaPfJPhDeI0/OFThsRiGikxZ5v0IC4w77dyDM2XmUYcQ0CrP/kYeJu4ispDACeAzDcgeAjNFeKh0= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=google.com; spf=pass smtp.mailfrom=flex--aliceryhl.bounces.google.com; dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b=AhEczB20; arc=none smtp.client-ip=209.85.128.70 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=google.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=flex--aliceryhl.bounces.google.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b="AhEczB20" Received: by mail-wm1-f70.google.com with SMTP id 5b1f17b1804b1-4a1d7663a4dso21261515e9.2 for ; Mon, 19 Oct 2026 07:06:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20251104; t=1792418773; x=1793023573; darn=vger.kernel.org; h=content-transfer-encoding:content-type:cc:to:from:subject :message-id:references:mime-version:in-reply-to:date:from:to:cc :subject:date:message-id:reply-to:content-type; bh=rCahezzy+NXiY9NCRh2MJ0p3KpsJ9Ta93YUdt50/tqY=; b=AhEczB20CF0Xf2VcazjG0wlSHZW81X35qQQ0pqHgFcBOAmh6UwxaPu56Dy7zKRWaLU cDU9HUL0FASo/EW1i0KSkpQ7n/PJ6jFlffMhwA9P26jEu1q2reWzvWRK2f+X+LRlK+S8 cNXKiSM+b3uVtswgW3yeib4QIuWxrLNymS61pk/zEIviZKVGEWrpHsJRClQZP5xqJ6zG 5PvxrssgbD78iUo1X7w3181qoIdnLDpUiaFDNnIc00JX2VAx1d/NvjviTxUiwDrBscxR /BedH4IFboKsSIMeRneTqovvsMxkDpGqt2g+8qf11gR+g4l82OxIhV3wAITxkXLErmWD ZhZg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792418773; x=1793023573; h=content-transfer-encoding:content-type:cc:to:from:subject :message-id:references:mime-version:in-reply-to:date :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=rCahezzy+NXiY9NCRh2MJ0p3KpsJ9Ta93YUdt50/tqY=; b=nmOxr20ya5Ne3lsqHeq8VmjPYwRjInFnQ36TsztdJJBfY7godVD6utLkv1ceSxjvSi kZihT0VzLOFSdyzxUOYxXMgK9bP6YDjaL0yGiVKz9hXOiQndQ1TsRrKN+DV6y5Ve6ZWn 6TXXek4LcNSIzlqx3PPdf9B6hn9VYwOHQ1VpGurS6MIb1FJZl+zUn8vEME+aGzDH9RFS JCi4wvf4GD6Q0OlNaB0xeaA7otrTSLWrbiG+GZgOqx33uM1uhWZRIhnZUybs5afaKbZS a8VoZZYNQybQQ91NMbFDa5DAv4xZjvdvkKjX0deBhq70Zg+Wqu2Qjf82o5j81m+2LRvy dE/w== X-Forwarded-Encrypted: i=1; AKwUvBzjl2jUSE5gU3xn/Uure5ICCVUTvGyL+b7wMzwHyyYb5RAQYxU17nKlH/Ea9OVXIM/TpjD1Nm+PiJbgVKY=@vger.kernel.org X-Gm-Message-State: AFq9FYKwPvOFNImlCAjsqzjoviHwV1GefmTTIkXV3ppNzUXwHxSjCZl3 mGlnIBpNKI5OlPqJak3L4wYlizYfTqvo1huCpTl+WY/8fxZ0Ob8/zC/TJQI+6tcRrbHpDpJLi74 5Z+ZfRNlGp6Ck3tKWqQ== X-Received: from wmxt3-n2.prod.google.com ([2002:a05:600d:8643:20b0:4a1:e676:5ad4]) (user=aliceryhl job=prod-delivery.src-stubby-dispatcher) by 2002:a05:600c:4691:b0:4a1:ebf0:43ed with SMTP id 5b1f17b1804b1-4a1ebf04495mr39875595e9.24.1792418773213; Mon, 19 Oct 2026 07:06:13 -0700 (PDT) Date: Mon, 19 Oct 2026 14:06:11 +0000 In-Reply-To: <2026101814-strut-endnote-a0b5@gregkh> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: Mime-Version: 1.0 References: <2026101814-strut-endnote-a0b5@gregkh> Message-ID: Subject: Re: BUG: selinux-testsuite binder tests fail with CONFIG_ANDROID_BINDER_IPC_RUST=y From: Alice Ryhl To: Greg Kroah-Hartman Cc: "Ondrej =?utf-8?B?TW9zbsOhxI1law==?=" , Carlos Llamas , "Arve =?utf-8?B?SGrDuG5uZXbDpWc=?=" , Todd Kjos , Christian Brauner , Linux Kernel Mailing List , SElinux list Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable On Sun, Oct 18, 2026 at 06:53:49PM +0200, Greg Kroah-Hartman wrote: > On Sun, Oct 18, 2026 at 06:36:04PM +0200, Ondrej Mosn=C3=A1=C4=8Dek wrote= : > > Hello Android binder maintainers, > >=20 > > Fedora Linux has recently enabled CONFIG_ANDROID_BINDER_IPC_RUST [1], > > which turns out to cause the binder tests of selinux-testsuite [2] to > > fail. > >=20 > > Minimal reproducer (no SELinux involved): > > # git clone https://github.com/SELinuxProject/selinux-testsuite > > # cd selinux-testsuite/tests/binder > > # make > > # ./init_binder.sh > > # setenforce 0 ### <-- may be needed if SELinux is enabled > > # ./manager -n & > > # sleep 1 > > # ./service_provider -n & > > # sleep 1 > > # ./client -n -c -r 3 > > Client ioctl BINDER_WRITE_READ error: Invalid argument > > # > >=20 > > With only CONFIG_ANDROID_BINDER_IPC=3Dy the last command succeeds. > >=20 > > The issue reproduces even on a kernel compiled from commit > > eafedbc7c050, so it seems to date back to the origin of the Rust > > implementation. I'm not sure if it's a bug in the new kernel code or > > some bug/wrong assumption in the testsuite code - can you please look > > into it? >=20 > Given that the "real" binder client works, perhaps the test is wrong and > should be fixed? Apparently there is a divergence of behavior if the SELinux permission `binder { impersonate }` is granted to a process, though Android never uses this permission anywhere. Thanks for the report. Alice