Re: [RFC PATCH v2 12/13] ib/core: Track which QPs are using which port and PKey index

2016-04-08 Thread Leon Romanovsky
On Thu, Apr 07, 2016 at 02:33:57AM +0300, Dan Jurgens wrote: > From: Daniel Jurgens > > --- a/drivers/infiniband/core/core_security.c > +++ b/drivers/infiniband/core/core_security.c > @@ -1,4 +1,5 @@ > -/* > +/* NEW COMMIT TO INSERT INTO REBASE

[PATCH net-next] security: drop the unused hook skb_owned_by

2016-04-08 Thread Paolo Abeni
The skb_owned_by hook was added with the commit ca10b9e9a8ca ("selinux: add a skb_owned_by() hook") and later removed when said commit was reverted. Later on, when switching to list of hooks, a field named 'skb_owned_by' was included into the security_hook_head struct, but without any users nor

Re: [PATCH 0/2 v2] Warn if module name different than output filename

2016-04-08 Thread Petr Lautrbach
On 04/07/2016 05:06 PM, James Carter wrote: > Since CIL treats files as modules and does not have a separate > module statement it can cause confusion when a Refpolicy module > has a name that is not the same as its base filename because older > SELinux userspaces will refer to the module by its

genhomedircon USERID and USERNAME patches

2016-04-08 Thread Jason Zaman
Hi all, I finally finished adding more templates to genhomedircon and a lot of general cleanups. The first few patches refactor the templating functions so they are smaller and easier to add new. All the common bits were taken out and they all take the user_entry_t struct instead of passing args

[PATCH 4/7] genhomedircon: make all write context funcs take user_entry struct

2016-04-08 Thread Jason Zaman
--- libsemanage/src/genhomedircon.c | 86 ++--- 1 file changed, 30 insertions(+), 56 deletions(-) diff --git a/libsemanage/src/genhomedircon.c b/libsemanage/src/genhomedircon.c index 61f503f..495f084 100644 --- a/libsemanage/src/genhomedircon.c +++

[PATCH 1/2 v3] policycoreutils/hll/pp: Warn if module name different than output filename

2016-04-08 Thread James Carter
Since CIL treats files as modules and does not have a separate module statement it can cause confusion when a Refpolicy module has a name that is not the same as its base filename because older SELinux userspaces will refer to the module by its module name while a CIL-based userspace will refer to

[PATCH 0/2 v3] Check if module name different than output filename

2016-04-08 Thread James Carter
Since CIL treats files as modules and does not have a separate module statement it can cause confusion when a Refpolicy module has a name that is not the same as its base filename because older SELinux userspaces will refer to the module by its module name while a CIL-based userspace will refer to

[PATCH 2/2 v3] checkpolicy: Fail if module name different than output base filename

2016-04-08 Thread James Carter
Since CIL treats files as modules and does not have a separate module statement it can cause confusion when a Refpolicy module has a name that is different than its base filename because older SELinux userspaces will refer to the module by its module name while a CIL-based userspace will refer to

Re: [PATCH net-next] security: drop the unused hook skb_owned_by

2016-04-08 Thread Paul Moore
On Friday, April 08, 2016 12:20:30 PM Paolo Abeni wrote: > The skb_owned_by hook was added with the commit ca10b9e9a8ca > ("selinux: add a skb_owned_by() hook") and later removed > when said commit was reverted. > > Later on, when switching to list of hooks, a field named > 'skb_owned_by' was