From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id D6F2CC433EF for ; Tue, 14 Dec 2021 18:24:04 +0000 (UTC) Received: from mimecast-mx01.redhat.com (mimecast-mx01.redhat.com [209.132.183.4]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id us-mta-441-jlb6XynUOVK8FKxpR-CimQ-1; Tue, 14 Dec 2021 13:23:59 -0500 X-MC-Unique: jlb6XynUOVK8FKxpR-CimQ-1 Received: from smtp.corp.redhat.com (int-mx06.intmail.prod.int.phx2.redhat.com [10.5.11.16]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mimecast-mx01.redhat.com (Postfix) with ESMTPS id 237501853031; Tue, 14 Dec 2021 18:23:56 +0000 (UTC) Received: from colo-mx.corp.redhat.com (colo-mx01.intmail.prod.int.phx2.redhat.com [10.5.11.20]) by smtp.corp.redhat.com (Postfix) with ESMTPS id C86349AA5E; Tue, 14 Dec 2021 18:23:55 +0000 (UTC) Received: from lists01.pubmisc.prod.ext.phx2.redhat.com (lists01.pubmisc.prod.ext.phx2.redhat.com [10.5.19.33]) by colo-mx.corp.redhat.com (Postfix) with ESMTP id 951E21806D2F; Tue, 14 Dec 2021 18:23:55 +0000 (UTC) Received: from smtp.corp.redhat.com (int-mx10.intmail.prod.int.rdu2.redhat.com [10.11.54.10]) by lists01.pubmisc.prod.ext.phx2.redhat.com (8.13.8/8.13.8) with ESMTP id 1BEDYFMS002107 for ; Tue, 14 Dec 2021 08:34:15 -0500 Received: by smtp.corp.redhat.com (Postfix) id 74E0A401E22; Tue, 14 Dec 2021 13:34:15 +0000 (UTC) Received: from mimecast-mx02.redhat.com (mimecast01.extmail.prod.ext.rdu2.redhat.com [10.11.55.17]) by smtp.corp.redhat.com (Postfix) with ESMTPS id 715B5401474 for ; Tue, 14 Dec 2021 13:34:15 +0000 (UTC) Received: from us-smtp-1.mimecast.com (us-smtp-1.mimecast.com [207.211.31.81]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mimecast-mx02.redhat.com (Postfix) with ESMTPS id 524B085A5B5 for ; Tue, 14 Dec 2021 13:34:15 +0000 (UTC) Received: from mga14.intel.com (mga14.intel.com [192.55.52.115]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id us-mta-67-V19EH3QJPSuszfI5RRH15A-1; Tue, 14 Dec 2021 08:34:13 -0500 X-MC-Unique: V19EH3QJPSuszfI5RRH15A-1 X-IronPort-AV: E=McAfee;i="6200,9189,10197"; a="239199892" X-IronPort-AV: E=Sophos;i="5.88,205,1635231600"; d="scan'208";a="239199892" Received: from orsmga001.jf.intel.com ([10.7.209.18]) by fmsmga103.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 14 Dec 2021 05:34:12 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.88,205,1635231600"; d="scan'208";a="545166088" Received: from lkp-server02.sh.intel.com (HELO 9f38c0981d9f) ([10.239.97.151]) by orsmga001.jf.intel.com with ESMTP; 14 Dec 2021 05:34:09 -0800 Received: from kbuild by 9f38c0981d9f with local (Exim 4.92) (envelope-from ) id 1mx7wW-0000MY-VW; Tue, 14 Dec 2021 13:34:08 +0000 Date: Tue, 14 Dec 2021 21:33:10 +0800 From: kernel test robot To: Casey Schaufler , casey.schaufler@intel.com, jmorris@namei.org, linux-security-module@vger.kernel.org, selinux@vger.kernel.org Subject: Re: [PATCH v31 01/28] integrity: disassociate ima_filter_rule from security_audit_rule Message-ID: <202112142134.jipW98iP-lkp@intel.com> References: <20211213234034.111891-2-casey@schaufler-ca.com> MIME-Version: 1.0 In-Reply-To: <20211213234034.111891-2-casey@schaufler-ca.com> User-Agent: Mutt/1.10.1 (2018-07-13) X-Mimecast-Impersonation-Protect: Policy=CLT - Impersonation Protection Definition; Similar Internal Domain=false; Similar Monitored External Domain=false; Custom External Domain=false; Mimecast External Domain=false; Newly Observed Domain=false; Internal User Name=false; Custom Display Name List=false; Reply-to Address Mismatch=false; Targeted Threat Dictionary=false; Mimecast Threat Dictionary=false; Custom Threat Dictionary=false X-Scanned-By: MIMEDefang 2.85 on 10.11.54.10 X-loop: linux-audit@redhat.com X-Mailman-Approved-At: Tue, 14 Dec 2021 13:23:33 -0500 Cc: john.johansen@canonical.com, kbuild-all@lists.01.org, linux-audit@redhat.com X-BeenThere: linux-audit@redhat.com X-Mailman-Version: 2.1.12 Precedence: junk List-Id: Linux Audit Discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com X-Scanned-By: MIMEDefang 2.79 on 10.5.11.16 Authentication-Results: relay.mimecast.com; auth=pass smtp.auth=CUSA124A263 smtp.mailfrom=linux-audit-bounces@redhat.com X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Disposition: inline Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi Casey, I love your patch! Yet something to improve: [auto build test ERROR on nf-next/master] [also build test ERROR on nf/master linus/master jmorris-security/next-testing v5.16-rc5] [cannot apply to pcmoore-audit/next] [If your patch is applied to the wrong git tree, kindly drop us a note. And when submitting patch, we suggest to use '--base' as documented in https://git-scm.com/docs/git-format-patch] url: https://github.com/0day-ci/linux/commits/Casey-Schaufler/integrity-disassociate-ima_filter_rule-from-security_audit_rule/20211214-084057 base: https://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next.git master config: openrisc-randconfig-r012-20211213 (https://download.01.org/0day-ci/archive/20211214/202112142134.jipW98iP-lkp@intel.com/config) compiler: or1k-linux-gcc (GCC) 11.2.0 reproduce (this is a W=1 build): wget https://raw.githubusercontent.com/intel/lkp-tests/master/sbin/make.cross -O ~/bin/make.cross chmod +x ~/bin/make.cross # https://github.com/0day-ci/linux/commit/dcedf3ce1784c565747e19c7917ddbcd3422b821 git remote add linux-review https://github.com/0day-ci/linux git fetch --no-tags linux-review Casey-Schaufler/integrity-disassociate-ima_filter_rule-from-security_audit_rule/20211214-084057 git checkout dcedf3ce1784c565747e19c7917ddbcd3422b821 # save the config file to linux build tree mkdir build_dir COMPILER_INSTALL_PATH=$HOME/0day COMPILER=gcc-11.2.0 make.cross O=build_dir ARCH=openrisc SHELL=/bin/bash If you fix the issue, kindly add following tag as appropriate Reported-by: kernel test robot All errors (new ones prefixed by >>): security/integrity/ima/ima_policy.c: In function 'ima_lsm_free_rule': >> security/integrity/ima/ima_policy.c:360:17: error: implicit declaration of function 'ima_filter_rule_free'; did you mean 'ima_file_free'? [-Werror=implicit-function-declaration] 360 | ima_filter_rule_free(entry->lsm[i].rule); | ^~~~~~~~~~~~~~~~~~~~ | ima_file_free security/integrity/ima/ima_policy.c: In function 'ima_lsm_copy_rule': >> security/integrity/ima/ima_policy.c:409:17: error: implicit declaration of function 'ima_filter_rule_init' [-Werror=implicit-function-declaration] 409 | ima_filter_rule_init(nentry->lsm[i].type, Audit_equal, | ^~~~~~~~~~~~~~~~~~~~ security/integrity/ima/ima_policy.c: In function 'ima_match_rules': >> security/integrity/ima/ima_policy.c:625:30: error: implicit declaration of function 'ima_filter_rule_match' [-Werror=implicit-function-declaration] 625 | rc = ima_filter_rule_match(osid, rule->lsm[i].type, | ^~~~~~~~~~~~~~~~~~~~~ cc1: some warnings being treated as errors vim +360 security/integrity/ima/ima_policy.c 176377d97d6a3f Tyler Hicks 2020-08-11 354 b169424551930a Janne Karhunen 2019-06-14 355 static void ima_lsm_free_rule(struct ima_rule_entry *entry) b169424551930a Janne Karhunen 2019-06-14 356 { b169424551930a Janne Karhunen 2019-06-14 357 int i; b169424551930a Janne Karhunen 2019-06-14 358 b169424551930a Janne Karhunen 2019-06-14 359 for (i = 0; i < MAX_LSM_RULES; i++) { b8867eedcf76ca Tyler Hicks 2020-07-10 @360 ima_filter_rule_free(entry->lsm[i].rule); b169424551930a Janne Karhunen 2019-06-14 361 kfree(entry->lsm[i].args_p); b169424551930a Janne Karhunen 2019-06-14 362 } 465aee77aae857 Tyler Hicks 2020-07-09 363 } 465aee77aae857 Tyler Hicks 2020-07-09 364 465aee77aae857 Tyler Hicks 2020-07-09 365 static void ima_free_rule(struct ima_rule_entry *entry) 465aee77aae857 Tyler Hicks 2020-07-09 366 { 465aee77aae857 Tyler Hicks 2020-07-09 367 if (!entry) 465aee77aae857 Tyler Hicks 2020-07-09 368 return; 465aee77aae857 Tyler Hicks 2020-07-09 369 465aee77aae857 Tyler Hicks 2020-07-09 370 /* 465aee77aae857 Tyler Hicks 2020-07-09 371 * entry->template->fields may be allocated in ima_parse_rule() but that 465aee77aae857 Tyler Hicks 2020-07-09 372 * reference is owned by the corresponding ima_template_desc element in 465aee77aae857 Tyler Hicks 2020-07-09 373 * the defined_templates list and cannot be freed here 465aee77aae857 Tyler Hicks 2020-07-09 374 */ 465aee77aae857 Tyler Hicks 2020-07-09 375 kfree(entry->fsname); 176377d97d6a3f Tyler Hicks 2020-08-11 376 ima_free_rule_opt_list(entry->keyrings); 465aee77aae857 Tyler Hicks 2020-07-09 377 ima_lsm_free_rule(entry); b169424551930a Janne Karhunen 2019-06-14 378 kfree(entry); b169424551930a Janne Karhunen 2019-06-14 379 } b169424551930a Janne Karhunen 2019-06-14 380 b169424551930a Janne Karhunen 2019-06-14 381 static struct ima_rule_entry *ima_lsm_copy_rule(struct ima_rule_entry *entry) b169424551930a Janne Karhunen 2019-06-14 382 { b169424551930a Janne Karhunen 2019-06-14 383 struct ima_rule_entry *nentry; 483ec26eed42bf Janne Karhunen 2020-01-15 384 int i; b169424551930a Janne Karhunen 2019-06-14 385 b169424551930a Janne Karhunen 2019-06-14 386 /* b169424551930a Janne Karhunen 2019-06-14 387 * Immutable elements are copied over as pointers and data; only b169424551930a Janne Karhunen 2019-06-14 388 * lsm rules can change b169424551930a Janne Karhunen 2019-06-14 389 */ f60c826d031817 Alex Dewar 2020-09-09 390 nentry = kmemdup(entry, sizeof(*nentry), GFP_KERNEL); f60c826d031817 Alex Dewar 2020-09-09 391 if (!nentry) f60c826d031817 Alex Dewar 2020-09-09 392 return NULL; f60c826d031817 Alex Dewar 2020-09-09 393 c593642c8be046 Pankaj Bharadiya 2019-12-09 394 memset(nentry->lsm, 0, sizeof_field(struct ima_rule_entry, lsm)); b169424551930a Janne Karhunen 2019-06-14 395 b169424551930a Janne Karhunen 2019-06-14 396 for (i = 0; i < MAX_LSM_RULES; i++) { 483ec26eed42bf Janne Karhunen 2020-01-15 397 if (!entry->lsm[i].args_p) b169424551930a Janne Karhunen 2019-06-14 398 continue; b169424551930a Janne Karhunen 2019-06-14 399 b169424551930a Janne Karhunen 2019-06-14 400 nentry->lsm[i].type = entry->lsm[i].type; 39e5993d0d452b Tyler Hicks 2020-07-09 401 nentry->lsm[i].args_p = entry->lsm[i].args_p; 39e5993d0d452b Tyler Hicks 2020-07-09 402 /* 39e5993d0d452b Tyler Hicks 2020-07-09 403 * Remove the reference from entry so that the associated 39e5993d0d452b Tyler Hicks 2020-07-09 404 * memory will not be freed during a later call to 39e5993d0d452b Tyler Hicks 2020-07-09 405 * ima_lsm_free_rule(entry). 39e5993d0d452b Tyler Hicks 2020-07-09 406 */ 39e5993d0d452b Tyler Hicks 2020-07-09 407 entry->lsm[i].args_p = NULL; b169424551930a Janne Karhunen 2019-06-14 408 b8867eedcf76ca Tyler Hicks 2020-07-10 @409 ima_filter_rule_init(nentry->lsm[i].type, Audit_equal, b169424551930a Janne Karhunen 2019-06-14 410 nentry->lsm[i].args_p, b169424551930a Janne Karhunen 2019-06-14 411 &nentry->lsm[i].rule); 483ec26eed42bf Janne Karhunen 2020-01-15 412 if (!nentry->lsm[i].rule) 483ec26eed42bf Janne Karhunen 2020-01-15 413 pr_warn("rule for LSM \'%s\' is undefined\n", aa0c0227d33171 Tyler Hicks 2020-07-09 414 nentry->lsm[i].args_p); b169424551930a Janne Karhunen 2019-06-14 415 } b169424551930a Janne Karhunen 2019-06-14 416 return nentry; b169424551930a Janne Karhunen 2019-06-14 417 } b169424551930a Janne Karhunen 2019-06-14 418 --- 0-DAY CI Kernel Test Service, Intel Corporation https://lists.01.org/hyperkitty/list/kbuild-all@lists.01.org -- Linux-audit mailing list Linux-audit@redhat.com https://listman.redhat.com/mailman/listinfo/linux-audit