From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by smtp.lore.kernel.org (Postfix) with ESMTP id EDC9BC83F1B for ; Fri, 11 Jul 2025 14:01:25 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id 6AE3D6B009C; Fri, 11 Jul 2025 10:01:25 -0400 (EDT) Received: by kanga.kvack.org (Postfix, from userid 40) id 685766B00A1; Fri, 11 Jul 2025 10:01:25 -0400 (EDT) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id 59B1D6B00A4; Fri, 11 Jul 2025 10:01:25 -0400 (EDT) X-Delivered-To: linux-mm@kvack.org Received: from relay.hostedemail.com (smtprelay0012.hostedemail.com [216.40.44.12]) by kanga.kvack.org (Postfix) with ESMTP id 4983F6B009C for ; Fri, 11 Jul 2025 10:01:25 -0400 (EDT) Received: from smtpin10.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay06.hostedemail.com (Postfix) with ESMTP id ACC24112308 for ; Fri, 11 Jul 2025 14:01:24 +0000 (UTC) X-FDA: 83652146088.10.D22DC24 Received: from mx0a-001b2d01.pphosted.com (mx0a-001b2d01.pphosted.com [148.163.156.1]) by imf25.hostedemail.com (Postfix) with ESMTP id 27444A002E for ; Fri, 11 Jul 2025 14:01:21 +0000 (UTC) Authentication-Results: imf25.hostedemail.com; dkim=pass header.d=ibm.com header.s=pp1 header.b=AyP2paRy; dmarc=pass (policy=none) header.from=ibm.com; spf=pass (imf25.hostedemail.com: domain of japo@linux.ibm.com designates 148.163.156.1 as permitted sender) smtp.mailfrom=japo@linux.ibm.com ARC-Seal: i=1; s=arc-20220608; d=hostedemail.com; t=1752242482; a=rsa-sha256; cv=none; b=x3FD1bSPdmXB9sjaQdLDEbjLvFs8RPj/f1YB0+/zLLMQqElH7VHygiZtWx3CGwQgkm0ahI YD60tsveJorZRm077FHrAISCEb/bUCAYMY3VaOe0KgzGKj3Qq8Gtu5mKOjfPXsm/VarewJ EKkfh2mf80pLxjmcyMCfTBZ1U6jHBXs= ARC-Authentication-Results: i=1; imf25.hostedemail.com; dkim=pass header.d=ibm.com header.s=pp1 header.b=AyP2paRy; dmarc=pass (policy=none) header.from=ibm.com; spf=pass (imf25.hostedemail.com: domain of japo@linux.ibm.com designates 148.163.156.1 as permitted sender) smtp.mailfrom=japo@linux.ibm.com ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=hostedemail.com; s=arc-20220608; t=1752242482; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=D/TxXPoBPeCkGtl2Jec4I0MqJ5jitp2Yb5CeKqPQMiY=; b=SXfoK9qXziBjbIHoADny7SRQemorgCniLvvKaA4H1pI6Ky8acY3oxdHm9CyK7IoMzfyK2k LTlSgFFpoolQv/ueL9I89AL4WwH/myOgmAiI3B9t6WjUDgtDzDM7t79yIMLk82CQAJQPCj KaxcGjWU8o7HHfs8WCsuKf33LkZbL0w= Received: from pps.filterd (m0353729.ppops.net [127.0.0.1]) by mx0a-001b2d01.pphosted.com (8.18.1.2/8.18.1.2) with ESMTP id 56BB7eVO015362; Fri, 11 Jul 2025 14:01:19 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ibm.com; h=cc :content-type:date:from:in-reply-to:message-id:mime-version :references:subject:to; s=pp1; bh=D/TxXPoBPeCkGtl2Jec4I0MqJ5jitp 2Yb5CeKqPQMiY=; b=AyP2paRyw61iAW85rXNDcBnsH5mM9p3O3poZgHa32APo6W ZfQJaHgK0nB04JjRx/dEvEvmlj4qTYy5FRaq0TrwQ2Hh+ih2wmGlJFThQCP/M7qL Ba593mq3fjgd5d1hgWHCtVeySYi4E/UbQUJt69hH0Pkl+AtTOVujWnIDwYgEG0wt ngP/RXfm4Do1zm5z0QFNo3nP8TphyhDfo8/wWbhczxqHojbeB83cXmCaL9ax/umA 0beyGtpYecB/rpVt5/25XpIrK0uGNFStRlb9z2B2DJjQvIMPvOoZrCM0uvxte5Q0 5JlEK8qdzZVKxl9DpZ5M+zu9UK7iP3218OMxDZOw== Received: from ppma12.dal12v.mail.ibm.com (dc.9e.1632.ip4.static.sl-reverse.com [50.22.158.220]) by mx0a-001b2d01.pphosted.com (PPS) with ESMTPS id 47t3xdh9kx-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 11 Jul 2025 14:01:18 +0000 (GMT) Received: from pps.filterd (ppma12.dal12v.mail.ibm.com [127.0.0.1]) by ppma12.dal12v.mail.ibm.com (8.18.1.2/8.18.1.2) with ESMTP id 56BA8WA6021561; Fri, 11 Jul 2025 14:01:17 GMT Received: from smtprelay04.fra02v.mail.ibm.com ([9.218.2.228]) by ppma12.dal12v.mail.ibm.com (PPS) with ESMTPS id 47qecu37e8-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 11 Jul 2025 14:01:17 +0000 Received: from smtpav07.fra02v.mail.ibm.com (smtpav07.fra02v.mail.ibm.com [10.20.54.106]) by smtprelay04.fra02v.mail.ibm.com (8.14.9/8.14.9/NCO v10.0) with ESMTP id 56BE1FBM34800170 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Fri, 11 Jul 2025 14:01:15 GMT Received: from smtpav07.fra02v.mail.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id 985E720043; Fri, 11 Jul 2025 14:01:15 +0000 (GMT) Received: from smtpav07.fra02v.mail.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id 068D620040; Fri, 11 Jul 2025 14:01:15 +0000 (GMT) Received: from li-276bd24c-2dcc-11b2-a85c-945b6f05615c.ibm.com (unknown [9.87.156.131]) by smtpav07.fra02v.mail.ibm.com (Postfix) with ESMTPS; Fri, 11 Jul 2025 14:01:14 +0000 (GMT) Date: Fri, 11 Jul 2025 16:01:13 +0200 From: Jan Polensky To: Christian Brauner Cc: Vlastimil Babka , Mike Rapoport , jack@suse.cz, linux-fsdevel@vger.kernel.org, linux-mm@kvack.org, Paul Moore , linux-security-module@vger.kernel.org Subject: Re: [PATCH v1 1/1] fs: Fix use of incorrect flags with splice() on pipe from/to memfd Message-ID: References: <20250708154352.3913726-1-japo@linux.ibm.com> <20250710-geburt-aufbegehren-07813aabf939@brauner> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20250710-geburt-aufbegehren-07813aabf939@brauner> X-TM-AS-GCONF: 00 X-Proofpoint-ORIG-GUID: NPKe22MGOaSS_tJqN0PlMQVzjMIMgC2c X-Authority-Analysis: v=2.4 cv=MLRgmNZl c=1 sm=1 tr=0 ts=6871192e cx=c_pps a=bLidbwmWQ0KltjZqbj+ezA==:117 a=bLidbwmWQ0KltjZqbj+ezA==:17 a=kj9zAlcOel0A:10 a=Wb1JkmetP80A:10 a=K96QQe1A4WfBV4HAJsgA:9 a=CjuIK1q_8ugA:10 X-Proofpoint-GUID: NPKe22MGOaSS_tJqN0PlMQVzjMIMgC2c X-Proofpoint-Spam-Details-Enc: AW1haW4tMjUwNzExMDA5OCBTYWx0ZWRfXxLECziYPmq2f Nw1AvJLsTETGdj0VEwpauH6SPtQTgYh5xZC06uood2TUvFKi4QwZTs1nKz+3DNeGsq3hrJ/tTlI INHqH4EV/mHJ3AvlYPD71xU7dfzwdkqD8d5fGn6hyR5V0OUAvjFfBYsc9POZy9Q5LoIKDOIAuAt x5t7xctFFr0dwWpTgr9yuZERpVV+FkzeXGm0tOPfQsqUr1RuGCGHx5jhtVa3m+cgMVUbJWjGaun AR9sDqBBsW1A5RYkM2cH5PVwF497s9tfWNzC+cEqtdIR+cYie9fhUv3OrhtvRByLheZgtWk0Gi9 6fKg4mkAe0xkU+O9q2KjlD4SRdT7crsv3i5a9TxqAkg55mh0BrNXz6T2gETizGKJTxn/1/clsRM JGyvrfiRRM5Acx5yMCrulhx1LLFBqhMn8soZfNctMptgZ7wBfBjJCxOA5RPps0N4XPMM7zuA X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1099,Hydra:6.1.7,FMLib:17.12.80.40 definitions=2025-07-11_03,2025-07-09_01,2025-03-28_01 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 bulkscore=0 suspectscore=0 adultscore=0 priorityscore=1501 mlxscore=0 clxscore=1011 impostorscore=0 malwarescore=0 mlxlogscore=627 lowpriorityscore=0 phishscore=0 spamscore=0 classifier=spam authscore=0 authtc=n/a authcc= route=outbound adjust=0 reason=mlx scancount=1 engine=8.19.0-2505280000 definitions=main-2507110098 X-Rspamd-Server: rspam11 X-Rspam-User: X-Stat-Signature: e1igobie68tcbth8cqfyeuxww4gehwmd X-Rspamd-Queue-Id: 27444A002E X-HE-Tag: 1752242481-58361 X-HE-Meta: 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 CcK4rinQ XGSUUS/2niHeG7/WAngL1O6fzYeNByJHcwnZnkiXhWXY4etGwLYf8YRqqWUAElgNRKLj6zO3q5Ww8YCTLgSMKqbXBMKRm7DbeCC49LyqNi+uSPWXd+bQfXQfr9TAHFkdqgYM2HUQ+kI1iE0caCAiinoUKTuyn8ZEv6A7nXMnkombhNnQw4eh3y1Cjba3NkZlIn49PGqwWW0mA1r2lWYRcdRJ5Xcm8b7fiTwUlmXQKKOfUwtZHrs21+THfPuCd9jbv8HJ7IN4SVTOIqjfQ60R9hc7Qg+eRstOspxXKXy99Ctgcyt/Hzh8zm/X4yUanXLcYzMmM X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: List-Subscribe: List-Unsubscribe: On Thu, Jul 10, 2025 at 01:34:12PM +0200, Christian Brauner wrote: > On Tue, Jul 08, 2025 at 05:43:52PM +0200, Jan Polensky wrote: > > Fix use of incorrect flags when using splice() with pipe ends and [skip] > > + } > > That hides secret memory inodes from LSMs which is the exact opposite of > what the original commit was there to fix. I'm pretty sure that the > EACCES comes from the LSM layer because the relevant refpolicy or > however that works hasn't been updated to allow secret memory files to > use splice(). > > This is a chicken-and-egg problem withy anything that strips S_PRIVATE > from things that were previously S_PRIVATE. Yes, agree. I've already send a fix to LTP. Thank you for your reply.