From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from sonic311-30.consmr.mail.ne1.yahoo.com (sonic311-30.consmr.mail.ne1.yahoo.com [66.163.188.211]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id D0ABA21CC64 for ; Mon, 28 Apr 2025 16:52:50 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=66.163.188.211 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1745859172; cv=none; b=LfQ6DBomueEWZtakr3jDBFFzcMwsuFN0NbJ84Oh+Gjtmx2ERpFKYbtu9cIZYBS5dlqj5/aR0yG6yTcThvbfwcY6R4wQ4hu+oOT/T/DQNHR9zDVZ7x0xHWLM3Q88r6ZSnZ3IJh+GKvTXAmc7fyaBdKFzTQdoQjc/0nGpDgxKaEK0= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1745859172; c=relaxed/simple; bh=6xY2nc0RaB26C8Wx9+EpDD+pS50ZQFFzgqmN0vDJVM8=; h=Message-ID:Date:MIME-Version:Subject:To:Cc:References:From: In-Reply-To:Content-Type; b=ZY2K6qgg7gC+VEK/YO1NMH+un3kt/RKCoh4PX47WtVb+Fby0OvegHbYUEmYl/oYYJGfOKBinZwqFzdmRqhxNBk9b3Bh8QtUzchQj97njtzmhe21DxV0LO4hTrHk1f4QlpkpTduJC01k6xR3WP7XZ27NMDDRdpomOwN/xBCkpkDk= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=schaufler-ca.com; spf=none smtp.mailfrom=schaufler-ca.com; dkim=pass (2048-bit key) header.d=yahoo.com header.i=@yahoo.com header.b=TmShkLv5; arc=none smtp.client-ip=66.163.188.211 Authentication-Results: smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=schaufler-ca.com Authentication-Results: smtp.subspace.kernel.org; spf=none smtp.mailfrom=schaufler-ca.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=yahoo.com header.i=@yahoo.com header.b="TmShkLv5" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1745859164; bh=sqVT6q/gS2IO11mPSx1zGKMYT49soEThtm+blh315uA=; h=Date:Subject:To:Cc:References:From:In-Reply-To:From:Subject:Reply-To; b=TmShkLv5LTcjqhtI1S3E3yTKqUlFEaq6/9edfX4pUbh5DQYJIMFgMv/rdLoDv/ZrSd9SBRx3IWFDa3Fp30+k24uzLUqqZxUOriyrA/fm6A9i6KveGjRl3pf0lDv7vW9GsIOpcvuFCDZJk/o7EGyR1+KJnxJVykYZyjmBSRXL0mbJVauuoC3Ma5Th3qsjw7eeVn3TxpvbsKgXpN+4PndNu8CatyyD8gGlMxNkGfku6xOt/OVJF82rWFt42naM8+hrycFNslm6pnoKTyN+6qg5xq7kjQIY6tcXq9gak99IFS+FhFlNUY5nosl4awH7/TFsm25LuYfevukmI+yAU2Z7ZQ== X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1745859164; bh=1ocgATpWUMwDoqL1q7zfHtIKlCWRZ8QGGEvu4gHsels=; h=X-Sonic-MF:Date:Subject:To:From:From:Subject; b=CfaVzAbwXQaWtjfP7NSeZUnNEArlCi9pQcFy7WS7n0tRLu5NnwjgbJh00KrgNN0RRDnhTI0ZKfPMabVrmmt9yLqMshGnJPHSkUh4AcHF8yz43SwKgTmwjMzVEoJeaFqsrgnBzBUhDBA8pt5L1vCAvOQlTwQap8j8utAmMBXTbnhqkigN2RdqHBpeQr6jUinyLGnCcoXnjJ2NlEU9ppF5bsoKpklFLJLAlOA+rzgcq0J/Xuzy4QOVjNw4Jd803gLYGnLCsUdEJo1cxMBx2Lg2kHDQzYoLkck11WqvTdafY+HvHsSjpOuYtzMioRoiW27gEdP2kUCAkEOlec618qg/FA== X-YMail-OSG: UYxsJJYVM1nve9Q1xFVLkeERBzVnVqyeHNPd50KUB7jgbH3qnYdOeQSyfMHuvbW qdxenoAyQY4kfeXtpWqZncnvV4pEA65QrNlhYkSBm5eHxEzqJaN_MrUWFi4HLAdU3NTv9ONO8gLT cLAu_MOBPS_LgVGCglF1z0Y3_8ytqhiuFo_TP8MCy0UFNM6a1IbxYWDG86Cox61EjEcmypBIvpe1 uWuUd4TD4tK.3ul8yWMxqrd25_WVjmqzIPeI2kQxA80v8bDSvAvS9fRfgBQie1dFmB7b.lMgWFOP ZilW7mYqGAUAEd5sIHhRbM5sX06GQSi1mpsVcYkc8PJknupzijLUWFVZter12xVOFjb0BA55oSAH 77H4.ISHRjuvqylanW3b5ADWiS95coLks.f8xOjtuxNenvVMAg8nqxpdtyEdsA_UdRr4ecIQECqE bmgJN.bhYwx3oMX6z3Jz1bkOJklFDEYmnAKw3D3str.Nht9hC_xVNgrbLJZ9.rNr.mOFSxqa6jfR NzTWQm.Ytw63L55tA06hyzHHdrjVR2OXcgnBOkat708FMl_IPur7I3GO7c4xZx1cLwYxLsVyQlM2 vLwoPcqv2JNGJlx.k_S6poZ78DMhnZPo1Fi5UANnyldKm0qx2nvSkgFeSxH_dSA2oUxF38Jv05Ex uPnh4LNRt2ILoAAhOXhYaQBMOFAHUmDPQjBMyjx8eZA84SDu2cVeBZrZdVN01GhuztLQNAVp294G ULILjvCOs.54DRfxU1wtH17Sk79MRyUWr7F2m1MfzeT0xDCQ2oSEuRMV9JWeS7rkBFeYtUEFcUW. Ps03SFKOZwHHSe7i1CUN1AQL79JqCpL2D2vGFmZElBKd654KIWGglrDvQzz9go6t_dnC_0XNuFFz Wqfs7cwGDr1KAQbGHT1tMMN62xIPoyd_lYLpXpPLS6T.i1PVqtCeHq0agMU62JEcFBVVHeNq0Q5y mMIR8R_58uuJGV80TTO8N1InesdhPtkZG17KfzZZvINBYepDdFtaqqkiiBMdwmDvIJnUKUTq8RqS x80QqukyMnMk8ThsUJYJh7MuGF59h2T8N7GxnM7K9zgIZvCApcvG2ecW.Hagm535fBKgeZ0GuN6T wiN7fj8CSnxIEf_0tjTs2hd_CtNjs8SOo.FceppCmCHalLAesziEagVow2DCsId4mAsLZ71.1NYv UM92W_x6lVQ2vZW8fpmNtXDjV6DeZgshzQGWrjWc5lF9TmZ55DoTsPTGyMcqDW8Mhi8Y4z9i5EMw CWoPC1chtCz9ZdvpDp4qoHVc_j3gH9PNFj8xOBHxZOnW6EAV76Srgpn_yfaAL6R1qRitIkQ3zVba se2GMNKCv42Z4LlEa6TVZnzW7d.s1xmc4I5nEbAM6as4EXDBMCURXjgZkS8G2BpYfHRXrvrLN9An Plqi._0rEVZ2rLX5T9oTpcEATS9cFX7LHkTPtZQDEEDSiq5419tp0MLu0nUE0Mzc_BaWFqe7j6MV lJUinby15mI.gtJVB88ANtxOgY0xa4bjspGMx0ECpJNHzOzwvRhcjz6fru4tXGfll_EI0ippPIKM W8anfa3hFd3u5KeQF0v38m8BShW4c229uA06WOCdxy16JBMDZNRX6wC8iiwbUX6O8zmrAjhjzGCq 8DBAN9gSguBrMmyQfB9o1y_vYNPbiRJhNk5BckAjmHuytY.ZPhAU6RKnJsxHUkntiUL3Yj_vuUv0 ZApsmGak9pq3qlG5QUcnQvs6v0DMvfgq50PynoFhABZkdJVH0q9P8DdveQcOMI7OKHSgrLik59kD zaAPDwdXDMgvaHXZGiHD_O7bBbCYplhKf2VkM9JNis2_GH.mGmPc0wDqk2xNoJsy_iRm4YJQmnZ1 Jw2c_L2ut7ybkHC9Psxxp_7UnGIAXvGz0NIIJuf8qh4T._FjQXNr69vuYWFV7T76pOB8boFnM5ja l7YhKZuFRVmZ5L9nsUvkc.gHXv1JPVQofrP2YOb4NQ0c2zJhGP9RqrTDcMjCUxhYdYydxislMlC9 5h9hTDI2E0ppdVWQHyCCtUufdASICa2N11Z._oEMpPJA4daZpCA_mE.C2jtNPkKssc5BJ9BN9lrt nLrLJj3TroWEET.3j7WUAXcboQKa9astOlpVySbvvahbPdIInXS0_eNLewaYQdPs9jgfKzFjlmfK T1srwHLociI00t176XO8hSn3oi0EoSBcwNnUUgDQU6Y_pXmS753OvERIzjlzBKsc_l58.0hGdfjW a2f_2_EOabiLHJtwbquFCYOboie.Js47cjFkCbFEceb5TxLWGaqgqoGFms5rdJF23KIRecTSMtda VUg-- X-Sonic-MF: X-Sonic-ID: dc9f098f-28ea-41ed-87ec-fab9cfeed3e1 Received: from sonic.gate.mail.ne1.yahoo.com by sonic311.consmr.mail.ne1.yahoo.com with HTTP; Mon, 28 Apr 2025 16:52:44 +0000 Received: by hermes--production-gq1-74d64bb7d7-4ndhm (Yahoo Inc. Hermes SMTP Server) with ESMTPA ID 0d3d3196c6fbd5ff60aed6348ba5f11a; Mon, 28 Apr 2025 16:32:29 +0000 (UTC) Message-ID: Date: Mon, 28 Apr 2025 09:32:28 -0700 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH] security,fs,nfs,net: update security_inode_listsecurity() interface To: Stephen Smalley Cc: paul@paul-moore.com, Trond Myklebust , Anna Schumaker , Alexander Viro , Christian Brauner , Jan Kara , James Morris , "Serge E. Hallyn" , Eric Dumazet , Kuniyuki Iwashima , Paolo Abeni , Willem de Bruijn , "David S. Miller" , Jakub Kicinski , Simon Horman , Ondrej Mosnacek , linux-nfs@vger.kernel.org, linux-kernel@vger.kernel.org, linux-fsdevel@vger.kernel.org, linux-security-module@vger.kernel.org, netdev@vger.kernel.org, selinux@vger.kernel.org, Casey Schaufler References: <20250428155535.6577-2-stephen.smalley.work@gmail.com> <988adabb-4236-4401-9db1-130687b0d84f@schaufler-ca.com> Content-Language: en-US From: Casey Schaufler In-Reply-To: Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Mailer: WebService/1.1.23737 mail.backend.jedi.jws.acl:role.jedi.acl.token.atz.jws.hermes.yahoo On 4/28/2025 9:23 AM, Stephen Smalley wrote: > On Mon, Apr 28, 2025 at 12:17 PM Casey Schaufler wrote: >> On 4/28/2025 8:55 AM, Stephen Smalley wrote: >>> Update the security_inode_listsecurity() interface to allow >>> use of the xattr_list_one() helper and update the hook >>> implementations. >>> >>> Link: https://lore.kernel.org/selinux/20250424152822.2719-1-stephen.smalley.work@gmail.com/ >>> >>> Signed-off-by: Stephen Smalley >>> --- >>> This patch is relative to the one linked above, which in theory is on >>> vfs.fixes but doesn't appear to have been pushed when I looked. >>> diff --git a/include/linux/lsm_hook_defs.h b/include/linux/lsm_hook_defs.h >>> index bf3bbac4e02a..3c3919dcdebc 100644 >>> --- a/include/linux/lsm_hook_defs.h >>> +++ b/include/linux/lsm_hook_defs.h >>> @@ -174,8 +174,8 @@ LSM_HOOK(int, -EOPNOTSUPP, inode_getsecurity, struct mnt_idmap *idmap, >>> struct inode *inode, const char *name, void **buffer, bool alloc) >>> LSM_HOOK(int, -EOPNOTSUPP, inode_setsecurity, struct inode *inode, >>> const char *name, const void *value, size_t size, int flags) >>> -LSM_HOOK(int, 0, inode_listsecurity, struct inode *inode, char *buffer, >>> - size_t buffer_size) >>> +LSM_HOOK(int, 0, inode_listsecurity, struct inode *inode, char **buffer, >>> + ssize_t *remaining_size) >> How about "rem", "rsize" or some other name instead of the overly long >> "remaining_size_"? > I don't especially care either way but was just being consistent with > the xattr_list_one() code. Sigh. Then I'd leave it as is.