Minor bash completion update for semanage ports

2018-02-13 Thread Lee Stubbs
Based on the semanage-port documentation, I believe the semanage ports type bash autocompletion may be missing a '-'. Please see the attached patch file for a possible update. -Lee From 064409c216c8f64c30f40f507cacf15f16672e50 Mon Sep 17 00:00:00 2001 From: Lee Stubbs Date: Mon, 12 Feb 2018 20:49

Re: FYI: selinux/next rebased to v4.16-rc1

2018-02-13 Thread Richard Haines via Selinux
On Mon, 2018-02-12 at 16:13 -0500, Paul Moore wrote: > A quick note to let you know that I've just rebased the selinux/next > branch to v4.16-rc1. Over the next day or two I'm going to be > working > through the backlog of kernel patches, most notably the SCTP work. > I've just rebuilt the SCTP

Re: FYI: selinux/next rebased to v4.16-rc1

2018-02-13 Thread Paul Moore
On Tue, Feb 13, 2018 at 11:22 AM, Richard Haines wrote: > On Mon, 2018-02-12 at 16:13 -0500, Paul Moore wrote: >> A quick note to let you know that I've just rebased the selinux/next >> branch to v4.16-rc1. Over the next day or two I'm going to be >> working >> through the backlog of kernel patch

Re: Minor bash completion update for semanage ports

2018-02-13 Thread William Roberts
On Mon, Feb 12, 2018 at 5:58 PM, Lee Stubbs wrote: > Based on the semanage-port documentation, I believe the semanage ports type > bash autocompletion may be missing a '-'. Please see the attached patch file This isn't how we take patches on the list, please use git send-email. With that said, t

[PATCH V6 0/4] Add SELinux SCTP protocol support

2018-02-13 Thread Richard Haines via Selinux
These patches have been built on Fedora 27 with kernel-4.16.0-0.rc1 plus the following userspace patches to enable testing: 1) Updates to libsepol 2.7 to support the sctp portcon statement. The patch is available from: http://arctic.selinuxproject.org/~rhaines/selinux-sctp/ se

[PATCH V6 4/4] selinux: Add SCTP support

2018-02-13 Thread Richard Haines via Selinux
The SELinux SCTP implementation is explained in: Documentation/security/SELinux-sctp.rst Signed-off-by: Richard Haines --- Documentation/security/SELinux-sctp.rst | 157 ++ security/selinux/hooks.c| 280 +--- security/selinux/include/cl

[PATCH V6 1/4] security: Add support for SCTP security hooks

2018-02-13 Thread Richard Haines via Selinux
The SCTP security hooks are explained in: Documentation/security/LSM-sctp.rst Signed-off-by: Richard Haines --- Documentation/security/LSM-sctp.rst | 175 include/linux/lsm_hooks.h | 36 include/linux/security.h| 25 ++ se

[PATCH V6 3/4] sctp: Add LSM hooks

2018-02-13 Thread Richard Haines via Selinux
Add security hooks allowing security modules to exercise access control over SCTP. Signed-off-by: Richard Haines --- include/net/sctp/structs.h | 10 include/uapi/linux/sctp.h | 1 + net/sctp/sm_make_chunk.c | 12 + net/sctp/sm_statefuns.c| 18 ++ net/sctp/so

[PATCH V6 2/4] sctp: Add ip option support

2018-02-13 Thread Richard Haines via Selinux
Add ip option support to allow LSM security modules to utilise CIPSO/IPv4 and CALIPSO/IPv6 services. Signed-off-by: Richard Haines --- include/net/sctp/sctp.h| 4 +++- include/net/sctp/structs.h | 2 ++ net/sctp/chunk.c | 12 +++- net/sctp/ipv6.c| 42 +

Re: FYI: selinux/next rebased to v4.16-rc1

2018-02-13 Thread Richard Haines via Selinux
On Tue, 2018-02-13 at 12:55 -0500, Paul Moore wrote: > On Tue, Feb 13, 2018 at 11:22 AM, Richard Haines > wrote: > > On Mon, 2018-02-12 at 16:13 -0500, Paul Moore wrote: > > > A quick note to let you know that I've just rebased the > > > selinux/next > > > branch to v4.16-rc1. Over the next day o