Cover Letter Detail
Show a cover letter.
GET /api/covers/807648/?format=api
{ "id": 807648, "url": "http://patchwork.ozlabs.org/api/covers/807648/?format=api", "web_url": "http://patchwork.ozlabs.org/project/openvswitch/cover/20170830140035.22828-1-aconole@redhat.com/", "project": { "id": 47, "url": "http://patchwork.ozlabs.org/api/projects/47/?format=api", "name": "Open vSwitch", "link_name": "openvswitch", "list_id": "ovs-dev.openvswitch.org", "list_email": "ovs-dev@openvswitch.org", "web_url": "http://openvswitch.org/", "scm_url": "git@github.com:openvswitch/ovs.git", "webscm_url": "https://github.com/openvswitch/ovs", "list_archive_url": "", "list_archive_url_format": "", "commit_url_format": "" }, "msgid": "<20170830140035.22828-1-aconole@redhat.com>", "list_archive_url": null, "date": "2017-08-30T14:00:32", "name": "[ovs-dev,v2,0/3] updated selinux policy for Open vSwitch", "submitter": { "id": 67184, "url": "http://patchwork.ozlabs.org/api/people/67184/?format=api", "name": "Aaron Conole", "email": "aconole@redhat.com" }, "mbox": "http://patchwork.ozlabs.org/project/openvswitch/cover/20170830140035.22828-1-aconole@redhat.com/mbox/", "series": [ { "id": 620, "url": "http://patchwork.ozlabs.org/api/series/620/?format=api", "web_url": "http://patchwork.ozlabs.org/project/openvswitch/list/?series=620", "date": "2017-08-30T14:00:32", "name": "updated selinux policy for Open vSwitch", "version": 2, "mbox": "http://patchwork.ozlabs.org/series/620/mbox/" } ], "comments": "http://patchwork.ozlabs.org/api/covers/807648/comments/", "headers": { "Return-Path": "<ovs-dev-bounces@openvswitch.org>", "X-Original-To": [ "incoming@patchwork.ozlabs.org", "dev@openvswitch.org" ], "Delivered-To": [ "patchwork-incoming@bilbo.ozlabs.org", "ovs-dev@mail.linuxfoundation.org" ], "Authentication-Results": [ "ozlabs.org;\n\tspf=pass (mailfrom) smtp.mailfrom=openvswitch.org\n\t(client-ip=140.211.169.12; helo=mail.linuxfoundation.org;\n\tenvelope-from=ovs-dev-bounces@openvswitch.org;\n\treceiver=<UNKNOWN>)", "ext-mx06.extmail.prod.ext.phx2.redhat.com;\n\tdmarc=none (p=none dis=none) header.from=redhat.com", "ext-mx06.extmail.prod.ext.phx2.redhat.com;\n\tspf=fail smtp.mailfrom=aconole@redhat.com" ], "Received": [ "from mail.linuxfoundation.org (mail.linuxfoundation.org\n\t[140.211.169.12])\n\t(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256\n\tbits)) (No client certificate requested)\n\tby ozlabs.org (Postfix) with ESMTPS id 3xj6bf2ZgSz9s8J\n\tfor <incoming@patchwork.ozlabs.org>;\n\tThu, 31 Aug 2017 00:00:46 +1000 (AEST)", "from mail.linux-foundation.org (localhost [127.0.0.1])\n\tby mail.linuxfoundation.org (Postfix) with ESMTP id 685909BA;\n\tWed, 30 Aug 2017 14:00:44 +0000 (UTC)", "from smtp1.linuxfoundation.org (smtp1.linux-foundation.org\n\t[172.17.192.35])\n\tby mail.linuxfoundation.org (Postfix) with ESMTPS id ADD6440F\n\tfor <dev@openvswitch.org>; Wed, 30 Aug 2017 14:00:43 +0000 (UTC)", "from mx1.redhat.com (mx1.redhat.com [209.132.183.28])\n\tby smtp1.linuxfoundation.org (Postfix) with ESMTPS id 478741F2\n\tfor <dev@openvswitch.org>; Wed, 30 Aug 2017 14:00:43 +0000 (UTC)", "from smtp.corp.redhat.com\n\t(int-mx04.intmail.prod.int.phx2.redhat.com [10.5.11.14])\n\t(using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))\n\t(No client certificate requested)\n\tby mx1.redhat.com (Postfix) with ESMTPS id A6724267F2;\n\tWed, 30 Aug 2017 14:00:42 +0000 (UTC)", "from dhcp-25-97.bos.redhat.com (unknown [10.18.25.172])\n\tby smtp.corp.redhat.com (Postfix) with ESMTP id C82645D722;\n\tWed, 30 Aug 2017 14:00:41 +0000 (UTC)" ], "X-Greylist": [ "domain auto-whitelisted by SQLgrey-1.7.6", "Sender IP whitelisted, not delayed by milter-greylist-4.5.16\n\t(mx1.redhat.com [10.5.110.30]);\n\tWed, 30 Aug 2017 14:00:42 +0000 (UTC)" ], "DMARC-Filter": "OpenDMARC Filter v1.3.2 mx1.redhat.com A6724267F2", "From": "Aaron Conole <aconole@redhat.com>", "To": "dev@openvswitch.org", "Date": "Wed, 30 Aug 2017 10:00:32 -0400", "Message-Id": "<20170830140035.22828-1-aconole@redhat.com>", "X-Scanned-By": "MIMEDefang 2.79 on 10.5.11.14", "X-Spam-Status": "No, score=-5.0 required=5.0 tests=RCVD_IN_DNSWL_HI,\n\tRP_MATCHES_RCVD autolearn=disabled version=3.3.1", "X-Spam-Checker-Version": "SpamAssassin 3.3.1 (2010-03-16) on\n\tsmtp1.linux-foundation.org", "Cc": "Flavio Leitner <fbl@sysclose.org>, Ansis Atteka <aatteka@ovn.org>", "Subject": "[ovs-dev] [PATCH v2 0/3] updated selinux policy for Open vSwitch", "X-BeenThere": "ovs-dev@openvswitch.org", "X-Mailman-Version": "2.1.12", "Precedence": "list", "List-Id": "<ovs-dev.openvswitch.org>", "List-Unsubscribe": "<https://mail.openvswitch.org/mailman/options/ovs-dev>,\n\t<mailto:ovs-dev-request@openvswitch.org?subject=unsubscribe>", "List-Archive": "<http://mail.openvswitch.org/pipermail/ovs-dev/>", "List-Post": "<mailto:ovs-dev@openvswitch.org>", "List-Help": "<mailto:ovs-dev-request@openvswitch.org?subject=help>", "List-Subscribe": "<https://mail.openvswitch.org/mailman/listinfo/ovs-dev>,\n\t<mailto:ovs-dev-request@openvswitch.org?subject=subscribe>", "MIME-Version": "1.0", "Content-Type": "text/plain; charset=\"us-ascii\"", "Content-Transfer-Encoding": "7bit", "Sender": "ovs-dev-bounces@openvswitch.org", "Errors-To": "ovs-dev-bounces@openvswitch.org" }, "content": "This series brings about a policy update to openvswitch allowing it to\nrun on a RHEL / Fedora system, even as a non-root user, with selinux set\nto Enforcing.\n\nThe first two patches make some changes to the way the selinux policy is\nbuilt to have a macro-like effect, allowing the dpdk policy to be enabled\nor disabled based on the build. This is chosen instead of using an selinux\nboolean, because it is more transparent to the end user.\n\nAll of this work was tested by passing traffic, including via a dpdk bridge.\n\nI'm hoping that this can be backported to the 2.8 branch (since it would be\nneeded to make fedora 2.8 make sense), but if not, we can always do the manual\nbackport\n\nOriginal Series:\nhttps://mail.openvswitch.org/pipermail/ovs-dev/2017-August/337513.html\n\nv1->v2:\n* updated after PVP testing. There are still permissions needed to be added\n to libvirt / qemu, but that is outside the scope of Open vSwitch project.\n* Folded in Flavio Leitner's ACK\n\nAaron Conole (3):\n rhel: make the selinux policy intermediate\n makefile: hook up dpdkstrip preprocessor\n selinux: update policy to reflect non-root and dpdk support\n\n Makefile.am | 4 +++\n rhel/openvswitch-fedora.spec.in | 1 +\n selinux/automake.mk | 2 +-\n selinux/openvswitch-custom.te | 16 ------------\n selinux/openvswitch-custom.te.in | 54 ++++++++++++++++++++++++++++++++++++++++\n 5 files changed, 60 insertions(+), 17 deletions(-)\n delete mode 100644 selinux/openvswitch-custom.te\n create mode 100644 selinux/openvswitch-custom.te.in" }