Re: mount.nfs: Protocol error after upgrade to linux/master

2019-03-22 Thread Tetsuo Handa
On 2019/03/23 7:45, Kees Cook wrote: > It breaks the backward-compat for the "security=" line. If a system is > booted with CONFIG_LSM="minors...,apparmor" and "security=selinux", > neither apparmor nor selinux will be initialized. The logic on > "security=..." depends on the other LSMs being prese

Re: mount.nfs: Protocol error after upgrade to linux/master

2019-03-22 Thread Kees Cook
On Thu, Mar 21, 2019 at 2:10 PM Tetsuo Handa wrote: > > On 2019/03/22 1:38, Kees Cook wrote: > > This is mostly good. I'd like to keep the other LSMs listed though > > (similar to what I had originally) so that if a legacy-major doesn't > > initialize, later ones will be. I want to remove the conc

Re: mount.nfs: Protocol error after upgrade to linux/master

2019-03-21 Thread Tetsuo Handa
On 2019/03/22 1:38, Kees Cook wrote: > This is mostly good. I'd like to keep the other LSMs listed though > (similar to what I had originally) so that if a legacy-major doesn't > initialize, later ones will be. I want to remove the concept of > "major" LSMs. The only thing that should matter is ini

Re: mount.nfs: Protocol error after upgrade to linux/master

2019-03-21 Thread Kees Cook
On Tue, Mar 19, 2019 at 3:56 AM Tetsuo Handa wrote: > > Since Kees Cook seems to be busy now, here is my version... > > From 885553e4793d9af2d4e9e99c7d137b0ec7b5f8ad Mon Sep 17 00:00:00 2001 > From: Tetsuo Handa > Date: Tue, 19 Mar 2019 19:52:31 +0900 > Subject: [PATCH] LSM: Revive CONFIG_DEFAULT

Re: mount.nfs: Protocol error after upgrade to linux/master

2019-03-19 Thread Casey Schaufler
On 3/19/2019 3:56 AM, Tetsuo Handa wrote: Since Kees Cook seems to be busy now, here is my version... From 885553e4793d9af2d4e9e99c7d137b0ec7b5f8ad Mon Sep 17 00:00:00 2001 From: Tetsuo Handa Date: Tue, 19 Mar 2019 19:52:31 +0900 Subject: [PATCH] LSM: Revive CONFIG_DEFAULT_SECURITY_* for "make

Re: mount.nfs: Protocol error after upgrade to linux/master

2019-03-19 Thread Tetsuo Handa
Since Kees Cook seems to be busy now, here is my version... >From 885553e4793d9af2d4e9e99c7d137b0ec7b5f8ad Mon Sep 17 00:00:00 2001 From: Tetsuo Handa Date: Tue, 19 Mar 2019 19:52:31 +0900 Subject: [PATCH] LSM: Revive CONFIG_DEFAULT_SECURITY_* for "make oldconfig" Commit 70b62c25665f636c ("LoadP

Re: mount.nfs: Protocol error after upgrade to linux/master

2019-03-16 Thread Casey Schaufler
On 3/16/2019 1:08 AM, Tetsuo Handa wrote: On 2019/03/16 14:38, Kees Cook wrote: config LSM string "Ordered list of enabled LSMs" + default "yama,loadpin,safesetid,integrity,smack,selinux,tomoyo,apparmor" if DEFAULT_SECURITY_SMACK + default "yama,loadpin,safesetid,integr

Re: mount.nfs: Protocol error after upgrade to linux/master

2019-03-16 Thread Tetsuo Handa
On 2019/03/16 14:38, Kees Cook wrote: > config LSM > string "Ordered list of enabled LSMs" > + default > "yama,loadpin,safesetid,integrity,smack,selinux,tomoyo,apparmor" if > DEFAULT_SECURITY_SMACK > + default > "yama,loadpin,safesetid,integrity,tomoyo,selinux,smack,apparmor

Re: mount.nfs: Protocol error after upgrade to linux/master

2019-03-15 Thread Kees Cook
On Fri, Mar 15, 2019 at 10:24 PM Kees Cook wrote: > > On Fri, Mar 15, 2019 at 4:54 PM Jakub Kicinski > wrote: > > > > On Fri, 15 Mar 2019 12:01:05 -0700, Jakub Kicinski wrote: > > > On Fri, 15 Mar 2019 11:05:55 -0700, Jakub Kicinski wrote: > > > > Hi, > > > > > > > > I just upgraded from: > > > >

Re: mount.nfs: Protocol error after upgrade to linux/master

2019-03-15 Thread Kees Cook
On Fri, Mar 15, 2019 at 4:54 PM Jakub Kicinski wrote: > > On Fri, 15 Mar 2019 12:01:05 -0700, Jakub Kicinski wrote: > > On Fri, 15 Mar 2019 11:05:55 -0700, Jakub Kicinski wrote: > > > Hi, > > > > > > I just upgraded from: > > > > > > commit a3b1933d34d5bb26d7503752e3528315a9e28339 (net) > > > Merg

Re: mount.nfs: Protocol error after upgrade to linux/master

2019-03-15 Thread Jakub Kicinski
On Fri, 15 Mar 2019 12:01:05 -0700, Jakub Kicinski wrote: > On Fri, 15 Mar 2019 11:05:55 -0700, Jakub Kicinski wrote: > > Hi, > > > > I just upgraded from: > > > > commit a3b1933d34d5bb26d7503752e3528315a9e28339 (net) > > Merge: c6873d18cb4a 24319258660a > > Author: David S. Miller > > Date: M