Re: [PATCH net-next] [RESEND] wireguard: disable in FIPS mode

2021-04-08 Thread Ondrej Mosnacek
question, apart from the different RFC standard, what's the > relation/difference between crypto/chacha20poly1305.c and > lib/crypto/chacha20poly1305.c? > > Thanks > Hangbin > -- Ondrej Mosnacek Software Engineer, Linux Security - SELinux kernel Red Hat, Inc.

Re: general protection fault in security_inode_getattr

2020-08-24 Thread Ondrej Mosnacek
dc00 > FS: 7f292d4ef700() GS:8880ae90() knlGS: > CS: 0010 DS: ES: CR0: 80050033 > CR2: 7fef820e7000 CR3: 937fd000 CR4: 001506e0 > DR0: DR1: DR2: > DR3: DR6: fffe0ff0 DR7: 0400 > -- Ondrej Mosnacek Software Engineer, Platform Security - SELinux kernel Red Hat, Inc.

Re: general protection fault in selinux_socket_recvmsg

2020-05-23 Thread Ondrej Mosnacek
; > > --- > This bug is generated by a bot. It may contain errors. > See https://goo.gl/tpsmEJ for more information about syzbot. > syzbot engineers can be reached at syzkal...@googlegroups.com. > > syzbot will keep track of this bug report. See: > https://goo.gl/tpsmEJ#status for how to communicate with syzbot. > syzbot can test patches for this bug, for details see: > https://goo.gl/tpsmEJ#testing-patches > -- Ondrej Mosnacek Software Engineer, Security Technologies Red Hat, Inc.

Re: [PATCH net] sctp: add chunks to sk_backlog when the newsk sk_socket is not set

2019-10-08 Thread Ondrej Mosnacek
else > @@ -336,7 +336,13 @@ int sctp_backlog_rcv(struct sock *sk, struct sk_buff > *skb) > if (backloged) > return 0; > } else { > - sctp_inq_push(inqueue, chunk); > + if (!sctp_newsk_ready(sk)) { > + if (!sk_add_backlog(sk, skb, sk->sk_rcvbuf)) > + return 0; > + sctp_chunk_free(chunk); > + } else { > + sctp_inq_push(inqueue, chunk); > + } > } > > done: > -- > 2.1.0 > -- Ondrej Mosnacek Software Engineer, Security Technologies Red Hat, Inc.

Re: [PATCH ghak90 V6 04/10] audit: log container info of syscalls

2019-05-30 Thread Ondrej Mosnacek
t-testsuite/issues/64 > > Please see the github audit wiki for the feature overview: > > https://github.com/linux-audit/audit-kernel/wiki/RFE-Audit-Container-ID > > Signed-off-by: Richard Guy Briggs > > Acked-by: Serge Hallyn > > Acked-by: Steve Grubb > &

Re: [PATCH ghak90 V5 02/10] audit: add container id

2019-03-27 Thread Ondrej Mosnacek
Guy Briggs > Acked-by: Serge Hallyn > Acked-by: Steve Grubb > Signed-off-by: Richard Guy Briggs Note that you have duplicate Signed-off here ^^ Took me a while to understand the flow in audit_set_contid(), but once understood it all made perfect sense, so: Reviewed-by: Ondrej