From mboxrd@z Thu Jan 1 00:00:00 1970 Authentication-Results: passt.top; dmarc=pass (p=quarantine dis=none) header.from=redhat.com Authentication-Results: passt.top; dkim=pass (1024-bit key; unprotected) header.d=redhat.com header.i=@redhat.com header.a=rsa-sha256 header.s=mimecast20190719 header.b=GUnwRqOA; dkim-atps=neutral Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.133.124]) by passt.top (Postfix) with ESMTPS id 55F4F5A0262 for ; Thu, 02 Apr 2026 15:37:04 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1775137023; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=oz60Xw6QcfUb1c3oLoUkYOe7LNedLx1m/gP1TjlcHUo=; b=GUnwRqOAXYamgeED6ooEzw2+pPI6vx47dwMqKkTXkAqzVyn4z18NapOOU4cK0X5bvy0hL9 k9WgVsNKoeCIMOGZBCidiP07LdavlzbBxSWViXAaBZu1FYSboZ6ZjHQnDlaccuN+4r9cL3 zDAnuECEDehuU4F7yBSSszc9V3zg6gY= Received: from mail-wr1-f69.google.com (mail-wr1-f69.google.com [209.85.221.69]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-448-awXpINRYP72BZs_84CCIeg-1; Thu, 02 Apr 2026 09:37:02 -0400 X-MC-Unique: awXpINRYP72BZs_84CCIeg-1 X-Mimecast-MFC-AGG-ID: awXpINRYP72BZs_84CCIeg_1775137021 Received: by mail-wr1-f69.google.com with SMTP id ffacd0b85a97d-43d121c4271so641495f8f.3 for ; Thu, 02 Apr 2026 06:37:01 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1775137021; x=1775741821; h=content-transfer-encoding:in-reply-to:content-language:references :cc:to:from:subject:user-agent:mime-version:date:message-id:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=oz60Xw6QcfUb1c3oLoUkYOe7LNedLx1m/gP1TjlcHUo=; b=INgY6q4+tW07O9aBADCCWdNb6WZoJnFfh2IdbAFqRSb8qy0ZKWc7cZ+YPLVvVFvyVj XlrJFYsYQS4lUvU84Rp0gc2s3+ghu5kXntA9n/DHciyuL0MCbJQx6RBCxfXk9dKp0zAu RieKICEidSuASRsUFHaINT4o8EvEfP/7Kr8LsPcDnGTNQP8hV26rI1BHY4o6XTY3qqkE 7Wb831fix8vTx5yVW3yqMuOfa8R2FBlO9i3dSSZTSIQBO6FrlnL2LGO64xHO+M/stpTc VKCz5WK7s80+uz0aF/keH2aYPhMihfw8det2UwQmeyReZcNvY/1ubxPepBLTd3sBw5oM e3hw== X-Gm-Message-State: AOJu0YzfCgFTM0v+PERY3jYKoKG8m9U/NUMsSuOIgMIfmuiOg6AVoS+h i8AtygyAz01GM/oj8FtX23szzkbpOovlqfcOnyZNW4rGEPeABifoasTyNgWNeFH10JNG2RY/Elt S3Gx8hKie8Nz5Rfp2xoDoZlN4dwGqIDoMAKMX3gnb8Xkbw5IUo0jY0w== X-Gm-Gg: AeBDievZSWT1PCZMsWT/tHoLgJb3v17VH/yjTYGQ+Tz9OcxviD5gpzL+OeJHMAGzYKC HMMG+6azbfahdRsoZqbWNVPZWktvH0hld0Ng3PQU2slv/kjMce2FJt3GGuH898KCR0a5tpvrFfD Gr9maC9wIrgzywQ4eQrjR8NPalwhTXyFiEHsyi/HdGdVYUzRSJmfNnpjnHgLyeRj2oqr7fO39RB JNYJhsCgDUrjk7Z2bbLU572x8IIFcYw2vf/2TdY+cT2iUUg7qm6YA0/Kdz2JIDkGW0bHYNgzAx2 wgf7oSJytLg2ZSPsoNbfvHmSRAiXXzz9Rj4RQcyNkmPGddFyTRle/LNJO7bgXmqDqhiXrkrHBqM jWjW2QXBm9NT2RollJVykXEtQqzw= X-Received: by 2002:a05:6000:230c:b0:43b:4273:a6ce with SMTP id ffacd0b85a97d-43d1504d2b4mr14351126f8f.3.1775137020703; Thu, 02 Apr 2026 06:37:00 -0700 (PDT) X-Received: by 2002:a05:6000:230c:b0:43b:4273:a6ce with SMTP id ffacd0b85a97d-43d1504d2b4mr14350992f8f.3.1775137019862; Thu, 02 Apr 2026 06:36:59 -0700 (PDT) Received: from [192.168.188.22] ([80.243.52.136]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-43d1e2a6f73sm8615828f8f.8.2026.04.02.06.36.58 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Thu, 02 Apr 2026 06:36:59 -0700 (PDT) Message-ID: <243f48b3-ccfa-437f-ac46-9229519b206b@redhat.com> Date: Thu, 2 Apr 2026 15:36:58 +0200 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH] SELinux: Dontaudit access to dri devices From: Paul Holzinger To: Stefano Brivio , Johannes Segitz References: <20260330110557.2569119-1-jsegitz@suse.de> <20260330171541.15a8b5d0@elisabeth> <20260331214758.227f3fac@elisabeth> <3b5af0d8-1f88-4190-b4ac-5bab780b2781@redhat.com> In-Reply-To: <3b5af0d8-1f88-4190-b4ac-5bab780b2781@redhat.com> X-Mimecast-Spam-Score: 0 X-Mimecast-MFC-PROC-ID: YK6dfnEXYYtRbGZOuqZycFYYYUsRzUq0lq3Cjep8qWI_1775137021 X-Mimecast-Originator: redhat.com Content-Language: en-US Content-Type: text/plain; charset="utf-8"; format="flowed" Content-Transfer-Encoding: base64 Message-ID-Hash: 4CFYX6HEJ733KOM7PPKRFOROEGEAA7EK X-Message-ID-Hash: 4CFYX6HEJ733KOM7PPKRFOROEGEAA7EK X-MailFrom: pholzing@redhat.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: passt-dev@passt.top X-Mailman-Version: 3.3.8 Precedence: list List-Id: Development discussion and patches for passt Archived-At: Archived-At: List-Archive: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: DQpPbiAwMi8wNC8yMDI2IDE0OjI0LCBQYXVsIEhvbHppbmdlciB3cm90ZToNCj4gSGksDQo+DQo+ IE9uIDMxLzAzLzIwMjYgMjE6NDcsIFN0ZWZhbm8gQnJpdmlvIHdyb3RlOg0KPj4gT24gVHVlLCAz MSBNYXIgMjAyNiAwOTowMDo0NyArMDIwMA0KPj4gSm9oYW5uZXMgU2VnaXR6IDxqc2VnaXR6QHN1 c2UuZGU+IHdyb3RlOg0KPj4NCj4+PiBIaSwNCj4+Pg0KPj4+IE9uIE1vbiwgTWFyIDMwLCAyMDI2 IGF0IDA1OjE1OjQyUE0gKzAyMDAsIFN0ZWZhbm8gQnJpdmlvIHdyb3RlOg0KPj4+PiBPbiBNb24s IDMwIE1hciAyMDI2IDEzOjA1OjU3ICswMjAwIEpvaGFubmVzIFNlZ2l0eiANCj4+Pj4gPGpzZWdp dHpAc3VzZS5kZT4gd3JvdGU6DQo+Pj4+PiBDdXJyZW50bHkgcG9kbWFuIGNhbiBwYXNzIGEgRkQg dG8gYSBEUkkgZGV2aWNlIHRvIHBhc3RhLCBsZWFkaW5nIA0KPj4+Pj4gdG8gQVZDcw0KPj4+Pj4g bGlrZSB0aGlzOg0KPj4+Pj4gYXZjOsKgIGRlbmllZMKgIHsgcmVhZCB3cml0ZSB9DQo+Pj4+PiBj b21tPSJwYXN0YSIgcGF0aD0iL2Rldi9kcmkvcmVuZGVyRDEyOCINCj4+Pj4+IHNjb250ZXh0PXVu Y29uZmluZWRfdTp1bmNvbmZpbmVkX3I6cGFzdGFfdDpzMC1zMDpjMC5jMTAyMw0KPj4+Pj4gdGNv bnRleHQ9c3lzdGVtX3U6b2JqZWN0X3I6ZHJpX2RldmljZV90OnMwDQo+Pj4+PiB0Y2xhc3M9Y2hy X2ZpbGUNCj4+Pj4+IFRoZXNlIGFyZSBoYXJtbGVzcywgc28gZG9udGF1ZGl0IHRoZW0NCj4+Pj4+ DQo+Pj4+PiBTaWduZWQtb2ZmLWJ5OiBKb2hhbm5lcyBTZWdpdHogPGpzZWdpdHpAc3VzZS5kZT4N Cj4+Pj4gVGhhbmtzIGZvciB0aGUgcGF0Y2guDQo+Pj4+DQo+Pj4+IEknbSB3b25kZXJpbmcgaG93 IGNhbiB0aGlzIHN0aWxsIGhhcHBlbiB0aG91Z2gsIGFzIGNvbW1pdCAwOTYwM2NhYjI4ZjkNCj4+ Pj4gKCJwYXNzdCwgdXRpbDogQ2xvc2UgYW55IG9wZW4gZmlsZSB0aGF0IHRoZSBwYXJlbnQgbWln aHQgaGF2ZSBsZWFrZWQiKQ0KPj4+PiBzaG91bGQgdGFrZSBjYXJlIG9mIHRob3NlLiBEbyB5b3Ug aGFwcGVuIHRvIGtub3c/DQo+Pj4gTm8sIEkganVzdCByZWFkIHRoZSBjb2RlIGFuZCBpdCBzZWVt cyBsaWtlIHRoaXMgc2hvdWxkIHByZXZlbnQgdGhpcy4gSQ0KPj4+IHVuZm9ydHVuYXRlbHkgY2Fu J3QgZGVidWcgdGhpcyBpbiBkZXB0aCwgYmVjYXVzZSBpdCBkb2Vzbid0IGhhcHBlbiANCj4+PiBv biBteQ0KPj4+IHN5c3RlbS4gVGhlIHJlcG9ydGVyIGlzIGhlbHBmdWwgd2l0aCBkZWJ1Z2dpbmcs IGJ1dCBnb2luZyBpbnRvIGdkYiANCj4+PiBzZXNzaW9ucw0KPj4+IHdpdGggcmVtb3RlIGhhbmRz IGRvZXNuJ3Qgc291bmQgZmVhc2libGUgOykNCj4+IFllYWgsIEkgc2VlLiA6KSAuLi5JIGZpbmFs bHkgaGFkIGEgcXVpY2sgbG9vayBhdCBpdC4NCj4+DQo+PiBJIHRoaW5rIGl0J3MgYWN0dWFsbHkg Z29vZCB0aGF0IFNFTGludXggY2F1Z2h0IHRoaXMsIGJlY2F1c2UgKm1heWJlKiB3ZQ0KPj4ganVz dCBjYWxsIGNsb3NlX3JhbmdlKCkgdG9vIGxhdGUgYW5kIHRoaW5ncyB3b3VsZCBiZSBmaW5lIG90 aGVyd2lzZSwNCj4+IGJ1dCBpZiBub3QsIHdlIHdvdWxkIGxlYXZlIHBhc3RhIHJ1bm5pbmcgd2l0 aCBhY2Nlc3MgdG8gYW4gdW5yZWxhdGVkDQo+PiBkZXZpY2UsIHdoaWNoIGlzbid0IGdyZWF0LCBl dmVuIHRob3VnaCB3ZSBkb24ndCBydW4gYXMgcm9vdCBzbyBpdCdzDQo+PiB1bmxpa2VseSB3ZSBj b3VsZCByZWFsbHkgZG8gc29tZXRoaW5nIHdpdGggaXQuDQo+Pg0KPj4gQnkgdGhlIHdheSBJIHdv bmRlciBpZiBpdCdzIHNpbWlsYXIgdG8gdGhpcyByZXBvcnQ6DQo+Pg0KPj4gwqDCoCBodHRwczov L2J1Z3ppbGxhLnJlZGhhdC5jb20vc2hvd19idWcuY2dpP2lkPTIzNzQxOTcNCj4+DQo+PiB3aGlj aCBJIG5ldmVyIHJlYWxseSB0cmllZCB0byBmaWd1cmUgb3V0Lg0KPg0KPiBJIGRlc2NyaWJlZCBo ZXJlIEkgdGhpbms6IA0KPiBodHRwczovL2J1Z3ppbGxhLnJlZGhhdC5jb20vc2hvd19idWcuY2dp P2lkPTIzNzQyOTEjYzEwDQo+DQo+IFRoZXJlIGlzIG5ldmVyIHRpbWUgdG8gY2xvc2UgZmRzIGVh cmxpZXIsIGl0IHZhbGlkYXRlcyBzb21ldGltZSBkdXJpbmcgDQo+IGV4ZWN2ZSgpLiBNeSBndWVz cyBiZWNhdXNlIHRoYXQgaXMgdGhlIHBvaW50IHdoZXJlIGl0IHRyYW5zaXRpb25zIGludG8gDQo+ IHRoZSBwYXN0YV90IGNvbnRleHQgc28gaXQgY2hlY2tzIGFsbCBmaWxlcyBhZ2FpbnN0IHRoZSBu ZXcgcG9saWN5Pw0KPg0KPiBTbyBhbnkgbGVhayB3YXJuaW5ncyBhcmUgaW1wb3NzaWJsZSB0byBh dm9pZCBvbiB0aGUgcGFzdGEgc2lkZSBhbmQgDQo+IG11c3QgYmUgZml4ZWQgd2hlcmUgd2UgbGVh ayB0aGVtLg0KPg0KPiBKb2hhbm5lcyBpdCB3b3VsZCBiZSBnb29kIGlmIHlvdSBjYW4gZmluZCBv dXQgd2hlcmUgdGhhdCBmaWxlcyBnZXRzIA0KPiBvcGVuZWQ/IElzIGl0IFBvZG1hbj8gVGhlIGdv IHJ1bnRpbWUgdXNlcyBPX0NMT0VYRUMgYnV0IHdlIGRvIGhhdmUgDQo+IHNvbWUgbWFudWFsIG9w ZW4gY2FsbHMgd2hlcmUgd2UgbWlnaHQgZm9yZ2V0IGl0IGFuZCBhcyBzdWNoIGxlYWtzLCBpdCAN Cj4gd291bGQgYmUgZ29vZCB0byBmaW5kIGFuZCBmaXggdGhlbS4gSXQgd291bGQgYmUgZ29vZCBp ZiB5b3UgaGF2ZSBhIA0KPiByZXByb2R1Y2VyLg0KPg0KSSBkaWQgYSBxdWljayBzcG90IGNoZWNr IGluIFBvZG1hbiBhbmQgZm91bmQgYSBmZXcgcGxhY2VzIHdoZXJlIGEgZmQgDQptaWdodCBiZSBs ZWFrZWQ6IGh0dHBzOi8vZ2l0aHViLmNvbS9jb250YWluZXJzL3BvZG1hbi9wdWxsLzI4NDM0DQoN ClRoYXQgc2FpZCBJIGRvIG5vdCB0aGluayBhbnkgb2YgdGhlc2Ugd291bGQgZXhwbGFpbiBhbiBv cGVuIC9kZXYvZHJpIHBhdGguDQoNCi0tIA0KUGF1bCBIb2x6aW5nZXINCg0K