Re: ❌ FAIL: Test report for 5.18.13-200.fc36 (fedora-36)

2022-07-26 Thread Ondrej Mosnacek
ke[2]: *** [Makefile:43: all] Error 2 make[2]: Leaving directory '/root/selinux-testsuite/tests/module_load' Looks like https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1912 will need to be picked also into the Fedora stable kernel branch(es). -- Ondrej Mosnacek Senior Software

Re: [OS-BUILD PATCHv2] kernel.spec: Add glibc-static build requirement

2022-01-18 Thread Ondrej Mosnacek
said about a known > compile but across *any* environment. Then how about adding `BuildConflicts: glibc-static` (+ an explaining comment) to kernel.spec? https://rpm-software-management.github.io/rpm/manual/spec.html#buildconflicts -- Ondrej Mosnacek Software Engineer, Li

Re: Ars claims: Fedora 32 is sluggish

2021-02-11 Thread Ondrej Mosnacek
ut I > couldn't find any discussions about it. CCing the Fedora kernel list and Justin. At the ARK tree level, the change was introduced in this commit, with no explanation: https://gitlab.com/cki-project/kernel-ark/commit/9d69ad49ab90db607e2

Re: [OS-BUILD PATCHv2] all: s390x: Increase CONFIG_PCI_NR_FUNCTIONS to 512 (#1888735)

2021-01-18 Thread Ondrej Mosnacek
S | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) With the updated commit message: Rescind-nacked-by: Ondrej Mosnacek Thanks! -- Ondrej Mosnacek Software Engineer, Platform Security - SELinux kernel Red Hat, Inc. ___ kernel mail

Re: [OS-BUILD PATCH] all: s390x: Increase CONFIG_PCI_NR_FUNCTIONS to 512 (#1888735)

2021-01-18 Thread Ondrej Mosnacek
se for an empty/unhelpful commit message. Even less so when it's not public. Nacked-by: Ondrej Mosnacek -- Ondrej Mosnacek Software Engineer, Platform Security - SELinux kernel Red Hat, Inc. ___ kernel mailing list -- kernel@lists.fedoraproject.org To u

Re: [OS-BUILD PATCHv3] New configs in drivers/crypto

2020-12-17 Thread Ondrej Mosnacek
mp;& TLS_DEVICE > [=y] >Location: > -> Cryptographic API (CRYPTO [=y]) >-> Hardware crypto devices (CRYPTO_HW [=y]) > Selects: CRYPTO_DEV_CHELSIO [=m] > > Cc: Herbert Xu > Cc: "David S. Miller" > Cc: Ondrej Mosnacek > &

Re: [OS-BUILD PATCH] [redhat] New configs in drivers/crypto

2020-10-20 Thread Ondrej Mosnacek
-> Hardware crypto devices (CRYPTO_HW [=y]) > -> Support for s390 cryptographic adapters (ZCRYPT [=m]) > > --- > > Cc: Herbert Xu > Cc: "David S. Miller" > Cc: Ondrej Mosnacek > Signed-off-by: Fedora Kernel Team > --- > .../common/ge

Re: [OS-BUILD PATCH] New configs in drivers/crypto

2020-10-20 Thread Ondrej Mosnacek
mp;& TLS_DEVICE > [=y] >Location: > -> Cryptographic API (CRYPTO [=y]) >-> Hardware crypto devices (CRYPTO_HW [=y]) > Selects: CRYPTO_DEV_CHELSIO [=m] > > Cc: Herbert Xu > Cc: "David S. Miller" > Cc: Ondrej Mosnacek > --- &

Re: [OS-BUILD PATCH] [redhat] New configs in crypto/Kconfig

2020-10-20 Thread Ondrej Mosnacek
is. > > Symbol: CRYPTO_USER_API_RNG_CAVP [=n] > Type : bool > Defined at crypto/Kconfig:1895 >Prompt: Enable CAVP testing of DRBG >Depends on: CRYPTO [=y] && CRYPTO_USER_API_RNG [=y] && CRYPTO_DRBG [=y] >Location: > -> Cryptographic API (CRYPTO [=y])

Re: [OS-BUILD PATCH] configs: enable CONFIG_CRYPTO_CTS=y so cts(cbc(aes)) is available in FIPS mode

2020-10-14 Thread Ondrej Mosnacek
the patch LGTM (and I'm the one who asked Vladis to "forward-port" this from RHEL), so: Acked-by: Ondrej Mosnacek Thanks, Vladis! -- Ondrej Mosnacek Software Engineer, Platform Security - SELinux kernel Red Hat, Inc. ___ kernel mailing list

Re: [OS-BUILD PATCH] configs: Disable CONFIG_SECURITY_SELINUX_DISABLE

2020-10-09 Thread Ondrej Mosnacek
ill > happen in about 3 weeks. If this gets acks by then, I can just wait > to merge until then, I don't think ELN has a huge rush on this one. > If it does not, I can do a redhat/configs/fedora commit, and then > remove it when this one gets acks. Ok

Re: [OS-BUILD PATCH] configs: Disable CONFIG_SECURITY_SELINUX_DISABLE

2020-10-08 Thread Ondrej Mosnacek
On Thu, Oct 8, 2020 at 2:32 PM Justin Forbes wrote: > On Thu, Oct 8, 2020 at 5:31 AM GitLab Bridge on behalf of omos > wrote: > > > > From: Ondrej Mosnacek > > > > The functionality has been deprecated upstream, so let's disable it > > procatively in Fe

Re: [OS-BUILD PATCH] Fix PATCHLEVEL for merge window

2020-06-11 Thread Ondrej Mosnacek
Makefiles, and the end result should always be the same. > > Signed-off-by: Justin M. Forbes LGTM, Acked-by: Ondrej Mosnacek -- Ondrej Mosnacek Software Engineer, Platform Security - SELinux kernel Red Hat, Inc. ___ kernel mailing list -- kernel@l

Re: [OS-BUILD PATCH] Makefile.common: Do not pre-maturely bump version number during merge window

2020-06-10 Thread Ondrej Mosnacek
t; kernel-5.7.0-0.rc0.20200608gitaf7b4801030c.1 But this is < kernel-5.7.0-1, which is older than this snapshot. Maybe we could at least change the first number in PREBUILD from 0 to 900 or something to make the version higher than any v5.7 based kernel build? -- Ondrej Mosnacek Softwa

Re: ❌ FAIL: Test report for kernel 5.7.0-0.rc6.1.cki.fc33 (ark)

2020-05-25 Thread Ondrej Mosnacek
h_btf_id=0}, 112) = -1 EINVAL (Invalid > argument) > > Failed verification: in-kernel BTF is malformed One other thing that might be related to this: The BPF test then started to fail also on 5.6 CKI stable kernels now (not at the same time as ARK) and it coincides with CONFIG_DEBUG_IN

Re: ❌ FAIL: Test report for kernel 5.7.0-0.rc6.1.cki.fc33 (ark)

2020-05-22 Thread Ondrej Mosnacek
ailures) is caused by a BPF/BTF-related issue, presumably caused/exposed by the CI ARK kernels being cross-compiled. It is being investigated. -- Ondrej Mosnacek Software Engineer, Security Technologies Red Hat, Inc. ___ kernel mailing list --

Re: dropping NSS DBM format support in F33+

2020-04-27 Thread Ondrej Mosnacek
On Mon, Apr 27, 2020 at 5:54 PM Paul Moore wrote: > On Sat, Apr 25, 2020 at 1:21 PM Justin Forbes wrote: > > On Sat, Apr 25, 2020 at 10:21 AM Daiki Ueno wrote: > > > > > > Hello Ondrej, > > > > > > Ondrej Mosnacek writes: > > > &g

Re: dropping NSS DBM format support in F33+

2020-04-25 Thread Ondrej Mosnacek
On Fri, Apr 24, 2020 at 11:12 PM Ondrej Mosnacek wrote: > On Fri, Apr 24, 2020 at 8:50 PM Ondrej Mosnacek wrote: > > On Wed, Apr 22, 2020 at 10:12 AM Daiki Ueno wrote: > > > Hello, > > > > > > I am not sure if this deserves a Fedora Change proposal, so I'd l

Re: dropping NSS DBM format support in F33+

2020-04-24 Thread Ondrej Mosnacek
On Fri, Apr 24, 2020 at 8:50 PM Ondrej Mosnacek wrote: > On Wed, Apr 22, 2020 at 10:12 AM Daiki Ueno wrote: > > Hello, > > > > I am not sure if this deserves a Fedora Change proposal, so I'd like to > > hear any opinions first before proceeding with the process. >

Re: dropping NSS DBM format support in F33+

2020-04-24 Thread Ondrej Mosnacek
Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedoraproject.org/archives/list/de...@lists.fedoraproject.org -- Ondrej Mosnacek So