[{"id":1761437,"web_url":"http://patchwork.ozlabs.org/comment/1761437/","msgid":"<CAMQa7Bi5ot3KyLkLNGpCAmABb9u_7huL1k9s-+E8VFEvBTWnCQ@mail.gmail.com>","list_archive_url":null,"date":"2017-09-01T02:13:57","subject":"Re: [ovs-dev] [PATCH v3 0/3] updated selinux policy for Open vSwitch","submitter":{"id":17389,"url":"http://patchwork.ozlabs.org/api/people/17389/","name":"Ansis","email":"ansisatteka@gmail.com"},"content":"On 31 August 2017 at 16:22, Aaron Conole <aconole@redhat.com> wrote:\n> This series brings about a policy update to openvswitch allowing it to\n> run on a RHEL / Fedora system, even as a non-root user, with selinux set\n> to Enforcing.\n>\n> The first two patches make some changes to the way the selinux policy is\n> built to have a macro-like effect, allowing the dpdk policy to be enabled\n> or disabled based on the build.  This is chosen instead of using an selinux\n> boolean, because it is more transparent to the end user.\n>\n> All of this work was tested by passing traffic, including via a dpdk bridge.\n>\n> I'm hoping that this can be backported to the 2.8 branch (since it would be\n> needed to make fedora 2.8 make sense), but if not, we can always do the manual\n> backport\n>\nI already pushed your patches to master branch. However, before\nback-porting them to 2.8 I think more testing is required. For\nexample:\n\n1. The documentation should reflect the renaming to openvswitch.te.in\n\n# git grep \"openvswitch\\.te\"\nDocumentation/howto/selinux.rst:``selinux/openvswitch.te`` file in the\nOVS source tree and try to add white\n\n\n2. I think your patch breaks the rpm packages built with rpmbuild -bb\n--without check rhel/openvswitch.spec\n\nI know that there are users out there using this rhel/openvswitch.spec\nopposed to rhel/openvswitch-fedora.spec on RHEL and CentOS.","headers":{"Return-Path":"<ovs-dev-bounces@openvswitch.org>","X-Original-To":["incoming@patchwork.ozlabs.org","dev@openvswitch.org"],"Delivered-To":["patchwork-incoming@bilbo.ozlabs.org","ovs-dev@mail.linuxfoundation.org"],"Authentication-Results":["ozlabs.org;\n\tspf=pass (mailfrom) smtp.mailfrom=openvswitch.org\n\t(client-ip=140.211.169.12; helo=mail.linuxfoundation.org;\n\tenvelope-from=ovs-dev-bounces@openvswitch.org;\n\treceiver=<UNKNOWN>)","ozlabs.org;\n\tdkim=fail reason=\"signature verification failed\" (2048-bit key;\n\tunprotected) header.d=gmail.com header.i=@gmail.com\n\theader.b=\"JVzb9qPW\"; dkim-atps=neutral"],"Received":["from mail.linuxfoundation.org (mail.linuxfoundation.org\n\t[140.211.169.12])\n\t(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256\n\tbits)) (No client certificate requested)\n\tby ozlabs.org (Postfix) with ESMTPS id 3xk2qK24jmz9s4s\n\tfor <incoming@patchwork.ozlabs.org>;\n\tFri,  1 Sep 2017 12:14:04 +1000 (AEST)","from mail.linux-foundation.org (localhost [127.0.0.1])\n\tby mail.linuxfoundation.org (Postfix) with ESMTP id 5260EE38;\n\tFri,  1 Sep 2017 02:14:00 +0000 (UTC)","from smtp1.linuxfoundation.org (smtp1.linux-foundation.org\n\t[172.17.192.35])\n\tby mail.linuxfoundation.org (Postfix) with ESMTPS id CD96CE2F\n\tfor <dev@openvswitch.org>; Fri,  1 Sep 2017 02:13:58 +0000 (UTC)","from mail-io0-f194.google.com (mail-io0-f194.google.com\n\t[209.85.223.194])\n\tby smtp1.linuxfoundation.org (Postfix) with ESMTPS id 7DDDBF8\n\tfor <dev@openvswitch.org>; Fri,  1 Sep 2017 02:13:58 +0000 (UTC)","by mail-io0-f194.google.com with SMTP id f99so1596833ioi.0\n\tfor <dev@openvswitch.org>; Thu, 31 Aug 2017 19:13:58 -0700 (PDT)","by 10.107.8.138 with HTTP; Thu, 31 Aug 2017 19:13:57 -0700 (PDT)"],"X-Greylist":"whitelisted by SQLgrey-1.7.6","DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;\n\th=mime-version:in-reply-to:references:from:date:message-id:subject:to\n\t:cc; bh=8az6PaHzfIPWInzqtqjqkjRcgAcIQUhGeIHaYOBtKiw=;\n\tb=JVzb9qPWHjh2HtkqjkwlEQM8gmTFAiY624yufvcyUfDxm+WGgVO0lsTwjpkjwsqB+A\n\t+R9YYe17XldQseWEvBZPRBGW3JvXInfw2H2yxr6ztHUDgExEAWHGu8JWcshWQlr0gWd1\n\tGyB/5/0ifR6V6i4379z0AZt1doB2CNjXrtL3VaShyQ9yAT/zzwFSbKTOnTcUswi/all1\n\tfr1vM7P4IC3y5jJuHBSyQybsLz+GHkYYEwRfxbj68lcNSGwKKyf/xMTNurMpMsIPHi4S\n\tDkjEb37BvC59ED3gOfQ3shuQXd69nrlqsjlvMTviAuxwde3+MdwuRLucIAciP6FKpzf1\n\tb/rQ==","X-Google-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n\td=1e100.net; s=20161025;\n\th=x-gm-message-state:mime-version:in-reply-to:references:from:date\n\t:message-id:subject:to:cc;\n\tbh=8az6PaHzfIPWInzqtqjqkjRcgAcIQUhGeIHaYOBtKiw=;\n\tb=aTmxTxVE0ElTDhN5OteQ3TKlePDjQXvPt4/9eTluHrHMha4jCGMk4yeqZFcZBJ912Z\n\tvDnhJVlUGhsX/KqhVVDUJv2KNi4ye1ODNKZFFtg2+2vDWinA2qrrNKYTR0spJ6uwdrEA\n\tF4dWCdY5xuhwZENpVWIrDrePY0czu3V8md2RG13+5Y/UAJ83R6drUlQ/s0jiCaf8gqYQ\n\tmOgk4hmcR69LO/Bb1kpeYZBljzGPbHI6Z2C1mKg4Ocs0ZE8fubdPILhcsl8rrSYfEttF\n\tl6y0bvnKsslT+YEYcm8zz3uTawkronI6yia38gBLSjJLtZyptYyJPcoscNhiOrSrm02u\n\t8IAg==","X-Gm-Message-State":"AHPjjUiEZu0TZ6tOHv3BRol20h6X0o8VNwEtmndnMtB5j52y1VqamFlJ\n\tKkvEtt9JmTZF6athefzBQq7EKnNfiA==","X-Google-Smtp-Source":"ADKCNb4UcWjBfPvlGOWyKXBCKMRRaomnE7U0QXduYKrwamAQ0kifidQNmxRO9wIFxLW8rslvF+bYLMWTUjtSBn3X5WM=","X-Received":"by 10.107.131.28 with SMTP id f28mr346853iod.137.1504232037644; \n\tThu, 31 Aug 2017 19:13:57 -0700 (PDT)","MIME-Version":"1.0","In-Reply-To":"<20170831232245.3644-1-aconole@redhat.com>","References":"<20170831232245.3644-1-aconole@redhat.com>","From":"Ansis Atteka <ansisatteka@gmail.com>","Date":"Thu, 31 Aug 2017 19:13:57 -0700","Message-ID":"<CAMQa7Bi5ot3KyLkLNGpCAmABb9u_7huL1k9s-+E8VFEvBTWnCQ@mail.gmail.com>","To":"Aaron Conole <aconole@redhat.com>","X-Spam-Status":"No, score=0.4 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,\n\tDKIM_VALID_AU,FREEMAIL_FROM,RCVD_IN_DNSWL_NONE,RCVD_IN_SORBS_SPAM\n\tautolearn=disabled version=3.3.1","X-Spam-Checker-Version":"SpamAssassin 3.3.1 (2010-03-16) on\n\tsmtp1.linux-foundation.org","Cc":"\"<dev@openvswitch.org>\" <dev@openvswitch.org>,\n\tFlavio Leitner <fbl@sysclose.org>, Ansis Atteka <aatteka@ovn.org>","Subject":"Re: [ovs-dev] [PATCH v3 0/3] updated selinux policy for Open vSwitch","X-BeenThere":"ovs-dev@openvswitch.org","X-Mailman-Version":"2.1.12","Precedence":"list","List-Id":"<ovs-dev.openvswitch.org>","List-Unsubscribe":"<https://mail.openvswitch.org/mailman/options/ovs-dev>,\n\t<mailto:ovs-dev-request@openvswitch.org?subject=unsubscribe>","List-Archive":"<http://mail.openvswitch.org/pipermail/ovs-dev/>","List-Post":"<mailto:ovs-dev@openvswitch.org>","List-Help":"<mailto:ovs-dev-request@openvswitch.org?subject=help>","List-Subscribe":"<https://mail.openvswitch.org/mailman/listinfo/ovs-dev>,\n\t<mailto:ovs-dev-request@openvswitch.org?subject=subscribe>","Content-Type":"text/plain; charset=\"us-ascii\"","Content-Transfer-Encoding":"7bit","Sender":"ovs-dev-bounces@openvswitch.org","Errors-To":"ovs-dev-bounces@openvswitch.org"}},{"id":1761857,"web_url":"http://patchwork.ozlabs.org/comment/1761857/","msgid":"<f7tk21i2v5o.fsf@dhcp-25-97.bos.redhat.com>","list_archive_url":null,"date":"2017-09-01T17:20:03","subject":"Re: [ovs-dev] [PATCH v3 0/3] updated selinux policy for Open vSwitch","submitter":{"id":67184,"url":"http://patchwork.ozlabs.org/api/people/67184/","name":"Aaron Conole","email":"aconole@redhat.com"},"content":"Ansis Atteka <ansisatteka@gmail.com> writes:\n\n> On 31 August 2017 at 16:22, Aaron Conole <aconole@redhat.com> wrote:\n>> This series brings about a policy update to openvswitch allowing it to\n>> run on a RHEL / Fedora system, even as a non-root user, with selinux set\n>> to Enforcing.\n>>\n>> The first two patches make some changes to the way the selinux policy is\n>> built to have a macro-like effect, allowing the dpdk policy to be enabled\n>> or disabled based on the build.  This is chosen instead of using an selinux\n>> boolean, because it is more transparent to the end user.\n>>\n>> All of this work was tested by passing traffic, including via a dpdk bridge.\n>>\n>> I'm hoping that this can be backported to the 2.8 branch (since it would be\n>> needed to make fedora 2.8 make sense), but if not, we can always do the manual\n>> backport\n>>\n> I already pushed your patches to master branch. However, before\n> back-porting them to 2.8 I think more testing is required. For\n> example:\n\nAgreed.  I addressed your concerns, and also found a really\nembarrassingly stupid mistake.\n\nI plan on continuing to test it anyway.  I'll be making some beer this\nweekend so I should have some spare cycles to kick stuff off.\n\nThanks for all your help, Ansis!\n\n-Aaron","headers":{"Return-Path":"<ovs-dev-bounces@openvswitch.org>","X-Original-To":["incoming@patchwork.ozlabs.org","dev@openvswitch.org"],"Delivered-To":["patchwork-incoming@bilbo.ozlabs.org","ovs-dev@mail.linuxfoundation.org"],"Authentication-Results":["ozlabs.org;\n\tspf=pass (mailfrom) smtp.mailfrom=openvswitch.org\n\t(client-ip=140.211.169.12; helo=mail.linuxfoundation.org;\n\tenvelope-from=ovs-dev-bounces@openvswitch.org;\n\treceiver=<UNKNOWN>)","ext-mx08.extmail.prod.ext.phx2.redhat.com;\n\tdmarc=none (p=none dis=none) header.from=redhat.com","ext-mx08.extmail.prod.ext.phx2.redhat.com;\n\tspf=fail smtp.mailfrom=aconole@redhat.com"],"Received":["from mail.linuxfoundation.org (mail.linuxfoundation.org\n\t[140.211.169.12])\n\t(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256\n\tbits)) (No client certificate requested)\n\tby ozlabs.org (Postfix) with ESMTPS id 3xkQyd3ljLz9t2x\n\tfor <incoming@patchwork.ozlabs.org>;\n\tSat,  2 Sep 2017 03:21:45 +1000 (AEST)","from mail.linux-foundation.org (localhost [127.0.0.1])\n\tby mail.linuxfoundation.org (Postfix) with ESMTP id D544DB1D;\n\tFri,  1 Sep 2017 17:20:06 +0000 (UTC)","from smtp1.linuxfoundation.org (smtp1.linux-foundation.org\n\t[172.17.192.35])\n\tby mail.linuxfoundation.org (Postfix) with ESMTPS id 1C021AB9\n\tfor <dev@openvswitch.org>; Fri,  1 Sep 2017 17:20:06 +0000 (UTC)","from mx1.redhat.com (mx1.redhat.com [209.132.183.28])\n\tby smtp1.linuxfoundation.org (Postfix) with ESMTPS id CDACA455\n\tfor <dev@openvswitch.org>; Fri,  1 Sep 2017 17:20:05 +0000 (UTC)","from smtp.corp.redhat.com\n\t(int-mx02.intmail.prod.int.phx2.redhat.com [10.5.11.12])\n\t(using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))\n\t(No client certificate requested)\n\tby mx1.redhat.com (Postfix) with ESMTPS id 392CFC056828;\n\tFri,  1 Sep 2017 17:20:05 +0000 (UTC)","from dhcp-25-97.bos.redhat.com (unknown [10.18.25.172])\n\tby smtp.corp.redhat.com (Postfix) with ESMTPS id 6E09E7B08B;\n\tFri,  1 Sep 2017 17:20:04 +0000 (UTC)"],"X-Greylist":["domain auto-whitelisted by SQLgrey-1.7.6","Sender IP whitelisted, not delayed by milter-greylist-4.5.16\n\t(mx1.redhat.com [10.5.110.32]);\n\tFri, 01 Sep 2017 17:20:05 +0000 (UTC)"],"DMARC-Filter":"OpenDMARC Filter v1.3.2 mx1.redhat.com 392CFC056828","From":"Aaron Conole <aconole@redhat.com>","To":"Ansis Atteka <ansisatteka@gmail.com>","References":"<20170831232245.3644-1-aconole@redhat.com>\n\t<CAMQa7Bi5ot3KyLkLNGpCAmABb9u_7huL1k9s-+E8VFEvBTWnCQ@mail.gmail.com>","Date":"Fri, 01 Sep 2017 13:20:03 -0400","In-Reply-To":"<CAMQa7Bi5ot3KyLkLNGpCAmABb9u_7huL1k9s-+E8VFEvBTWnCQ@mail.gmail.com>\n\t(Ansis Atteka's message of \"Thu, 31 Aug 2017 19:13:57 -0700\")","Message-ID":"<f7tk21i2v5o.fsf@dhcp-25-97.bos.redhat.com>","User-Agent":"Gnus/5.13 (Gnus v5.13) Emacs/26.0.50 (gnu/linux)","MIME-Version":"1.0","X-Scanned-By":"MIMEDefang 2.79 on 10.5.11.12","X-Spam-Status":"No, score=-5.0 required=5.0 tests=RCVD_IN_DNSWL_HI,\n\tRP_MATCHES_RCVD autolearn=disabled version=3.3.1","X-Spam-Checker-Version":"SpamAssassin 3.3.1 (2010-03-16) on\n\tsmtp1.linux-foundation.org","Cc":"\"<dev@openvswitch.org>\" <dev@openvswitch.org>,\n\tFlavio Leitner <fbl@sysclose.org>, Ansis Atteka <aatteka@ovn.org>","Subject":"Re: [ovs-dev] [PATCH v3 0/3] updated selinux policy for Open vSwitch","X-BeenThere":"ovs-dev@openvswitch.org","X-Mailman-Version":"2.1.12","Precedence":"list","List-Id":"<ovs-dev.openvswitch.org>","List-Unsubscribe":"<https://mail.openvswitch.org/mailman/options/ovs-dev>,\n\t<mailto:ovs-dev-request@openvswitch.org?subject=unsubscribe>","List-Archive":"<http://mail.openvswitch.org/pipermail/ovs-dev/>","List-Post":"<mailto:ovs-dev@openvswitch.org>","List-Help":"<mailto:ovs-dev-request@openvswitch.org?subject=help>","List-Subscribe":"<https://mail.openvswitch.org/mailman/listinfo/ovs-dev>,\n\t<mailto:ovs-dev-request@openvswitch.org?subject=subscribe>","Content-Type":"text/plain; charset=\"us-ascii\"","Content-Transfer-Encoding":"7bit","Sender":"ovs-dev-bounces@openvswitch.org","Errors-To":"ovs-dev-bounces@openvswitch.org"}},{"id":1761954,"web_url":"http://patchwork.ozlabs.org/comment/1761954/","msgid":"<CAMQa7Biiia5WU-H=PNPqpUdfhcoYxk7ACbvgh-iaN0E7acTKfA@mail.gmail.com>","list_archive_url":null,"date":"2017-09-01T19:50:01","subject":"Re: [ovs-dev] [PATCH v3 0/3] updated selinux policy for Open vSwitch","submitter":{"id":17389,"url":"http://patchwork.ozlabs.org/api/people/17389/","name":"Ansis","email":"ansisatteka@gmail.com"},"content":"On 1 September 2017 at 10:20, Aaron Conole <aconole@redhat.com> wrote:\n> Ansis Atteka <ansisatteka@gmail.com> writes:\n>\n>> On 31 August 2017 at 16:22, Aaron Conole <aconole@redhat.com> wrote:\n>>> This series brings about a policy update to openvswitch allowing it to\n>>> run on a RHEL / Fedora system, even as a non-root user, with selinux set\n>>> to Enforcing.\n>>>\n>>> The first two patches make some changes to the way the selinux policy is\n>>> built to have a macro-like effect, allowing the dpdk policy to be enabled\n>>> or disabled based on the build.  This is chosen instead of using an selinux\n>>> boolean, because it is more transparent to the end user.\n>>>\n>>> All of this work was tested by passing traffic, including via a dpdk bridge.\n>>>\n>>> I'm hoping that this can be backported to the 2.8 branch (since it would be\n>>> needed to make fedora 2.8 make sense), but if not, we can always do the manual\n>>> backport\n>>>\n>> I already pushed your patches to master branch. However, before\n>> back-porting them to 2.8 I think more testing is required. For\n>> example:\n>\n> Agreed.  I addressed your concerns, and also found a really\n> embarrassingly stupid mistake.\n>\n> I plan on continuing to test it anyway.  I'll be making some beer this\n> weekend so I should have some spare cycles to kick stuff off.\n>\n> Thanks for all your help, Ansis!\n>\n\nThanks for jumping in quickly and addressing all the remaining issues.\nSecond series look good to me. I will back-port all 6 patches to\nbranch-2.8 now. Thank you!","headers":{"Return-Path":"<ovs-dev-bounces@openvswitch.org>","X-Original-To":["incoming@patchwork.ozlabs.org","dev@openvswitch.org"],"Delivered-To":["patchwork-incoming@bilbo.ozlabs.org","ovs-dev@mail.linuxfoundation.org"],"Authentication-Results":["ozlabs.org;\n\tspf=pass (mailfrom) smtp.mailfrom=openvswitch.org\n\t(client-ip=140.211.169.12; helo=mail.linuxfoundation.org;\n\tenvelope-from=ovs-dev-bounces@openvswitch.org;\n\treceiver=<UNKNOWN>)","ozlabs.org;\n\tdkim=fail reason=\"signature verification failed\" (2048-bit key;\n\tunprotected) header.d=gmail.com header.i=@gmail.com\n\theader.b=\"kFDGU3NM\"; dkim-atps=neutral"],"Received":["from mail.linuxfoundation.org (mail.linuxfoundation.org\n\t[140.211.169.12])\n\t(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256\n\tbits)) (No client certificate requested)\n\tby ozlabs.org (Postfix) with ESMTPS id 3xkVFq3P6Mz9sPt\n\tfor <incoming@patchwork.ozlabs.org>;\n\tSat,  2 Sep 2017 05:50:07 +1000 (AEST)","from mail.linux-foundation.org (localhost [127.0.0.1])\n\tby mail.linuxfoundation.org (Postfix) with ESMTP id 5FB0CC97;\n\tFri,  1 Sep 2017 19:50:04 +0000 (UTC)","from smtp1.linuxfoundation.org (smtp1.linux-foundation.org\n\t[172.17.192.35])\n\tby mail.linuxfoundation.org (Postfix) with ESMTPS id 84B54BF2\n\tfor <dev@openvswitch.org>; Fri,  1 Sep 2017 19:50:03 +0000 (UTC)","from mail-io0-f196.google.com (mail-io0-f196.google.com\n\t[209.85.223.196])\n\tby smtp1.linuxfoundation.org (Postfix) with ESMTPS id 3A6FD8A\n\tfor <dev@openvswitch.org>; Fri,  1 Sep 2017 19:50:03 +0000 (UTC)","by mail-io0-f196.google.com with SMTP id n74so1103629ioe.2\n\tfor <dev@openvswitch.org>; Fri, 01 Sep 2017 12:50:03 -0700 (PDT)","by 10.107.8.138 with HTTP; Fri, 1 Sep 2017 12:50:01 -0700 (PDT)"],"X-Greylist":"whitelisted by SQLgrey-1.7.6","DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;\n\th=mime-version:in-reply-to:references:from:date:message-id:subject:to\n\t:cc; bh=ALH4/lU3QorHty0+kYZ/bIKtIjwm2tOW0WbS80kgYWI=;\n\tb=kFDGU3NMQ5dshIPVqJb+JCmqsemy/+52TokPlfvYLix6FzFlGv2IuCKCSGAanyBozw\n\t3tDAXpgIgHBH4G5ZgcyXiL+RV4qm7SFlThgelrpA9K1gbZpU5NjO3iAxz6ovdd+4bM9A\n\tlV0axgKd0uWndp/WE3o0N1HHrk5Iy8JAjsv0KtYfC33Ho4wD5iXHUR283N7q7xe26O7R\n\tKTuqKC1mZFgLBRGGNFr3vMx4Upzs5+xwEDNJC3hk/FTjHD7sUV5v/i1fP1SPwjJicGZY\n\tnbBbJbSHgDR/kM8g7jCFo0I8HYlTUQeXTcCSqQCuCtamvLk4m4gaVrEwbHZhssPgwKg5\n\tlrmw==","X-Google-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n\td=1e100.net; s=20161025;\n\th=x-gm-message-state:mime-version:in-reply-to:references:from:date\n\t:message-id:subject:to:cc;\n\tbh=ALH4/lU3QorHty0+kYZ/bIKtIjwm2tOW0WbS80kgYWI=;\n\tb=Cd2/My1wTLCz4UtYnMxjMI/jcVVaKas3a+ky1aSDZ2Gi5rIqz/IoZFS2IvUuf+hZIO\n\tL/646t2Y8TcX6lkzLaP8kEidkYgSeNWTZ2DldUP5cVZ0IvckNriyuqGqdmS0tXo9Porm\n\tEj0JCaExizVUGMvld1AAQULcTGVeGSB2hY7K3ZUbK+z2RuCJ/jBGqmycuCDWq+AxwRIw\n\tkS5Wcf8zkTkB7DEyeacGVXGBrRKsHY3am6bwlTyCwbVNqRh1KmbCtQTsQvkpQ9L26ntE\n\tbpLExYpTQ4Pbtd3z4tIq4pjwEJOsrOTBz6A4wMHaRQRXNvIpMZXqs9ctU7Oo+8ZOQCpC\n\tvKsw==","X-Gm-Message-State":"AHPjjUgbzSRDCL96MLUTDfPb46XDmG3aE8ilu1C9oofiKtmWbv4Q4YZT\n\t31tVoVl62QJTs8CqzzXGYXyKtv7Rdw==","X-Google-Smtp-Source":"ADKCNb5rb7U5cd+wNHF6qPnA8qXy6U9BO80+l198QmsP8Aq1NlGTlXtN5hiOHsPyI4588gsG9t7NCU+7iOX8WxlIpwY=","X-Received":"by 10.107.10.28 with SMTP id u28mr2357511ioi.251.1504295402409; \n\tFri, 01 Sep 2017 12:50:02 -0700 (PDT)","MIME-Version":"1.0","In-Reply-To":"<f7tk21i2v5o.fsf@dhcp-25-97.bos.redhat.com>","References":"<20170831232245.3644-1-aconole@redhat.com>\n\t<CAMQa7Bi5ot3KyLkLNGpCAmABb9u_7huL1k9s-+E8VFEvBTWnCQ@mail.gmail.com>\n\t<f7tk21i2v5o.fsf@dhcp-25-97.bos.redhat.com>","From":"Ansis Atteka <ansisatteka@gmail.com>","Date":"Fri, 1 Sep 2017 12:50:01 -0700","Message-ID":"<CAMQa7Biiia5WU-H=PNPqpUdfhcoYxk7ACbvgh-iaN0E7acTKfA@mail.gmail.com>","To":"Aaron Conole <aconole@redhat.com>, Justin Pettit <jpettit@ovn.org>","X-Spam-Status":"No, score=0.4 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,\n\tDKIM_VALID_AU,FREEMAIL_FROM,RCVD_IN_DNSWL_NONE,RCVD_IN_SORBS_SPAM\n\tautolearn=disabled version=3.3.1","X-Spam-Checker-Version":"SpamAssassin 3.3.1 (2010-03-16) on\n\tsmtp1.linux-foundation.org","Cc":"\"<dev@openvswitch.org>\" <dev@openvswitch.org>,\n\tFlavio Leitner <fbl@sysclose.org>, Ansis Atteka <aatteka@ovn.org>","Subject":"Re: [ovs-dev] [PATCH v3 0/3] updated selinux policy for Open vSwitch","X-BeenThere":"ovs-dev@openvswitch.org","X-Mailman-Version":"2.1.12","Precedence":"list","List-Id":"<ovs-dev.openvswitch.org>","List-Unsubscribe":"<https://mail.openvswitch.org/mailman/options/ovs-dev>,\n\t<mailto:ovs-dev-request@openvswitch.org?subject=unsubscribe>","List-Archive":"<http://mail.openvswitch.org/pipermail/ovs-dev/>","List-Post":"<mailto:ovs-dev@openvswitch.org>","List-Help":"<mailto:ovs-dev-request@openvswitch.org?subject=help>","List-Subscribe":"<https://mail.openvswitch.org/mailman/listinfo/ovs-dev>,\n\t<mailto:ovs-dev-request@openvswitch.org?subject=subscribe>","Content-Type":"text/plain; charset=\"us-ascii\"","Content-Transfer-Encoding":"7bit","Sender":"ovs-dev-bounces@openvswitch.org","Errors-To":"ovs-dev-bounces@openvswitch.org"}},{"id":1762047,"web_url":"http://patchwork.ozlabs.org/comment/1762047/","msgid":"<2230BDFA-11CE-4D64-9D54-4A64DB3D7BA3@ovn.org>","list_archive_url":null,"date":"2017-09-02T00:24:14","subject":"Re: [ovs-dev] [PATCH v3 0/3] updated selinux policy for Open vSwitch","submitter":{"id":67602,"url":"http://patchwork.ozlabs.org/api/people/67602/","name":"Justin Pettit","email":"jpettit@ovn.org"},"content":"> On Sep 1, 2017, at 12:50 PM, Ansis Atteka <ansisatteka@gmail.com> wrote:\n> \n> Thanks for jumping in quickly and addressing all the remaining issues.\n> Second series look good to me. I will back-port all 6 patches to\n> branch-2.8 now. Thank you!\n\nI see that Ansis and Alin have pushed recent changes to branch-2.8.  I'm getting ready to release 2.8.0.  I assume we want those changes to be part of that?  Anything else?\n\nThanks,\n\n--Justin","headers":{"Return-Path":"<ovs-dev-bounces@openvswitch.org>","X-Original-To":["incoming@patchwork.ozlabs.org","dev@openvswitch.org"],"Delivered-To":["patchwork-incoming@bilbo.ozlabs.org","ovs-dev@mail.linuxfoundation.org"],"Authentication-Results":"ozlabs.org;\n\tspf=pass (mailfrom) smtp.mailfrom=openvswitch.org\n\t(client-ip=140.211.169.12; helo=mail.linuxfoundation.org;\n\tenvelope-from=ovs-dev-bounces@openvswitch.org;\n\treceiver=<UNKNOWN>)","Received":["from mail.linuxfoundation.org (mail.linuxfoundation.org\n\t[140.211.169.12])\n\t(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256\n\tbits)) (No client certificate requested)\n\tby ozlabs.org (Postfix) with ESMTPS id 3xkcLH5NNwz9sPt\n\tfor <incoming@patchwork.ozlabs.org>;\n\tSat,  2 Sep 2017 10:24:23 +1000 (AEST)","from mail.linux-foundation.org (localhost [127.0.0.1])\n\tby mail.linuxfoundation.org (Postfix) with ESMTP id CA3AFE82;\n\tSat,  2 Sep 2017 00:24:20 +0000 (UTC)","from smtp1.linuxfoundation.org (smtp1.linux-foundation.org\n\t[172.17.192.35])\n\tby mail.linuxfoundation.org (Postfix) with ESMTPS id BB703E77\n\tfor <dev@openvswitch.org>; Sat,  2 Sep 2017 00:24:19 +0000 (UTC)","from mail-pf0-f194.google.com (mail-pf0-f194.google.com\n\t[209.85.192.194])\n\tby smtp1.linuxfoundation.org (Postfix) with ESMTPS id 6BBB9433\n\tfor <dev@openvswitch.org>; Sat,  2 Sep 2017 00:24:19 +0000 (UTC)","by mail-pf0-f194.google.com with SMTP id k3so962325pfc.3\n\tfor <dev@openvswitch.org>; Fri, 01 Sep 2017 17:24:19 -0700 (PDT)","from [10.0.1.2] ([98.234.50.139]) by smtp.gmail.com with ESMTPSA id\n\ta15sm1803831pfl.1.2017.09.01.17.24.17\n\t(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);\n\tFri, 01 Sep 2017 17:24:17 -0700 (PDT)"],"X-Greylist":"whitelisted by SQLgrey-1.7.6","X-Google-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n\td=1e100.net; s=20161025;\n\th=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc\n\t:content-transfer-encoding:message-id:references:to;\n\tbh=3eBhJyXSoCLusLzvlnwvj3CPjityA8ioytDolkuHMRg=;\n\tb=hok5+j4yqAN33UVqYJXBGEkjLpJhU2EJnxCGnDBBdOMCOwFVo/hFYqh5/xIMRzlT71\n\tejGak+EWko1zbqR+Jc+NmdJvjhtCSKk/GOeClYn2jGkaDM5fvn2IoevTkcc54cc3yYXO\n\t1GOun1nd+ECIYWI6QXk/Ik1tNe2kJ2FuQ7kauttq6ryigZjYm8tXEgVSbVTQy3fNkTHI\n\ttALcbvO1BZPclKVIgEkFBOAbIpXU0P6m35k+5LJIz4psOxVp6aWnUz4B36fL9VY8JEb2\n\taa/DVjnd1HS0dCIhn8LYCQ+uDk+A0nMO+Tn+YPIwj4+Cl7oeKngQR++jiTqz3Jdv+j8s\n\tt2Jg==","X-Gm-Message-State":"AHPjjUj+u3Abx/0h0lgPz4P0vDiRcCxyVAp+tGTk3EdkqHnfNuBzJNCv\n\tx96wunF7jQOleQ==","X-Google-Smtp-Source":"ADKCNb4DdMN5o+KPSgzJVOQsF/FW794OEwgSicHPnhiym4SAta7zMuTb5m7SX2u4wZgoqVB5cf3GOg==","X-Received":"by 10.98.100.88 with SMTP id y85mr4142678pfb.49.1504311859066;\n\tFri, 01 Sep 2017 17:24:19 -0700 (PDT)","Mime-Version":"1.0 (Mac OS X Mail 10.3 \\(3273\\))","From":"Justin Pettit <jpettit@ovn.org>","In-Reply-To":"<CAMQa7Biiia5WU-H=PNPqpUdfhcoYxk7ACbvgh-iaN0E7acTKfA@mail.gmail.com>","Date":"Fri, 1 Sep 2017 17:24:14 -0700","Message-Id":"<2230BDFA-11CE-4D64-9D54-4A64DB3D7BA3@ovn.org>","References":"<20170831232245.3644-1-aconole@redhat.com>\n\t<CAMQa7Bi5ot3KyLkLNGpCAmABb9u_7huL1k9s-+E8VFEvBTWnCQ@mail.gmail.com>\n\t<f7tk21i2v5o.fsf@dhcp-25-97.bos.redhat.com>\n\t<CAMQa7Biiia5WU-H=PNPqpUdfhcoYxk7ACbvgh-iaN0E7acTKfA@mail.gmail.com>","To":"Ansis Atteka <ansisatteka@gmail.com>","X-Mailer":"Apple Mail (2.3273)","X-Spam-Status":"No, score=0.0 required=5.0 tests=FREEMAIL_FROM,\n\tRCVD_IN_DNSWL_NONE autolearn=disabled version=3.3.1","X-Spam-Checker-Version":"SpamAssassin 3.3.1 (2010-03-16) on\n\tsmtp1.linux-foundation.org","Cc":"\"<dev@openvswitch.org>\" <dev@openvswitch.org>,\n\tFlavio Leitner <fbl@sysclose.org>, Ansis Atteka <aatteka@ovn.org>","Subject":"Re: [ovs-dev] [PATCH v3 0/3] updated selinux policy for Open vSwitch","X-BeenThere":"ovs-dev@openvswitch.org","X-Mailman-Version":"2.1.12","Precedence":"list","List-Id":"<ovs-dev.openvswitch.org>","List-Unsubscribe":"<https://mail.openvswitch.org/mailman/options/ovs-dev>,\n\t<mailto:ovs-dev-request@openvswitch.org?subject=unsubscribe>","List-Archive":"<http://mail.openvswitch.org/pipermail/ovs-dev/>","List-Post":"<mailto:ovs-dev@openvswitch.org>","List-Help":"<mailto:ovs-dev-request@openvswitch.org?subject=help>","List-Subscribe":"<https://mail.openvswitch.org/mailman/listinfo/ovs-dev>,\n\t<mailto:ovs-dev-request@openvswitch.org?subject=subscribe>","Content-Type":"text/plain; charset=\"us-ascii\"","Content-Transfer-Encoding":"7bit","Sender":"ovs-dev-bounces@openvswitch.org","Errors-To":"ovs-dev-bounces@openvswitch.org"}},{"id":1762053,"web_url":"http://patchwork.ozlabs.org/comment/1762053/","msgid":"<6FDA0CACF4BC624BBE12167875D71C9B40A5A4C3@CBSEX1.cloudbase.local>","list_archive_url":null,"date":"2017-09-02T01:30:57","subject":"Re: [ovs-dev] [PATCH v3 0/3] updated selinux policy for Open vSwitch","submitter":{"id":67146,"url":"http://patchwork.ozlabs.org/api/people/67146/","name":"Alin Serdean","email":"aserdean@cloudbasesolutions.com"},"content":"> -----Original Message-----\n> From: Justin Pettit [mailto:jpettit@ovn.org]\n> Sent: Saturday, September 2, 2017 3:24 AM\n> To: Ansis Atteka <ansisatteka@gmail.com>\n> Cc: Aaron Conole <aconole@redhat.com>; <dev@openvswitch.org>\n> <dev@openvswitch.org>; Ansis Atteka <aatteka@ovn.org>; Jean Hsiao\n> <jhsiao@redhat.com>; Flavio Leitner <fbl@sysclose.org>; Alin Serdean\n> <aserdean@cloudbasesolutions.com>\n> Subject: Re: [PATCH v3 0/3] updated selinux policy for Open vSwitch\n> \n> \n> > On Sep 1, 2017, at 12:50 PM, Ansis Atteka <ansisatteka@gmail.com> wrote:\n> >\n> > Thanks for jumping in quickly and addressing all the remaining issues.\n> > Second series look good to me. I will back-port all 6 patches to\n> > branch-2.8 now. Thank you!\n> \n> I see that Ansis and Alin have pushed recent changes to branch-2.8.  I'm\n> getting ready to release 2.8.0.  I assume we want those changes to be part of\n> that?  Anything else?\n> \n> Thanks,\n> \n> --Justin\n> \n[Alin Serdean] It would be nice, but not mandatory in my opinion. Most of the Windows users will search for a MSI rather than compiling from source.\nThe following series would be nice to be added on 2.8, because that gets published via pypi (https://pypi.python.org/pypi/ovs), but unfortunately it lacks reviews\nhttps://patchwork.ozlabs.org/patch/805943/\nhttps://patchwork.ozlabs.org/patch/805945/\n\nThanks,\nAlin.","headers":{"Return-Path":"<ovs-dev-bounces@openvswitch.org>","X-Original-To":["incoming@patchwork.ozlabs.org","dev@openvswitch.org"],"Delivered-To":["patchwork-incoming@bilbo.ozlabs.org","ovs-dev@mail.linuxfoundation.org"],"Authentication-Results":"ozlabs.org;\n\tspf=pass (mailfrom) smtp.mailfrom=openvswitch.org\n\t(client-ip=140.211.169.12; helo=mail.linuxfoundation.org;\n\tenvelope-from=ovs-dev-bounces@openvswitch.org;\n\treceiver=<UNKNOWN>)","Received":["from mail.linuxfoundation.org (mail.linuxfoundation.org\n\t[140.211.169.12])\n\t(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256\n\tbits)) (No client certificate requested)\n\tby ozlabs.org (Postfix) with ESMTPS id 3xkdqF1P4Wz9sQl\n\tfor <incoming@patchwork.ozlabs.org>;\n\tSat,  2 Sep 2017 11:31:04 +1000 (AEST)","from mail.linux-foundation.org (localhost [127.0.0.1])\n\tby mail.linuxfoundation.org (Postfix) with ESMTP id AA9F6CF9;\n\tSat,  2 Sep 2017 01:31:01 +0000 (UTC)","from smtp1.linuxfoundation.org (smtp1.linux-foundation.org\n\t[172.17.192.35])\n\tby mail.linuxfoundation.org (Postfix) with ESMTPS id 93EEECF9\n\tfor <dev@openvswitch.org>; Sat,  2 Sep 2017 01:31:00 +0000 (UTC)","from mail.cloudbasesolutions.com (mail.cloudbasesolutions.com\n\t[91.232.152.5])\n\tby smtp1.linuxfoundation.org (Postfix) with ESMTP id E1D59448\n\tfor <dev@openvswitch.org>; Sat,  2 Sep 2017 01:30:59 +0000 (UTC)","from localhost (localhost [127.0.0.1])\n\tby mail.cloudbasesolutions.com (Postfix) with ESMTP id 04F81416FD;\n\tSat,  2 Sep 2017 04:30:59 +0300 (EEST)","from mail.cloudbasesolutions.com ([127.0.0.1])\n\tby localhost (mail.cloudbasesolutions.com [127.0.0.1]) (amavisd-new, \n\tport 10024)\n\twith ESMTP id SngND_vyIW1V; Sat,  2 Sep 2017 04:30:57 +0300 (EEST)","from mail.cloudbasesolutions.com (unknown [10.77.78.3])\n\tby mail.cloudbasesolutions.com (Postfix) with ESMTP id EDBC6416EF;\n\tSat,  2 Sep 2017 04:30:57 +0300 (EEST)","from CBSEX1.cloudbase.local ([10.77.78.3]) by\n\tCBSEX1.cloudbase.local ([10.77.78.3]) with mapi id 14.03.0361.001;\n\tSat, 2 Sep 2017 03:30:57 +0200"],"X-Greylist":"domain auto-whitelisted by SQLgrey-1.7.6","X-Virus-Scanned":"amavisd-new at cloudbasesolutions.com","From":"Alin Serdean <aserdean@cloudbasesolutions.com>","To":"Justin Pettit <jpettit@ovn.org>, Ansis Atteka <ansisatteka@gmail.com>","Thread-Topic":"[PATCH v3 0/3] updated selinux policy for Open vSwitch","Thread-Index":"AQHTI4HSFKuavQuTsk6yblpxO+QdZqKgyMqA","Date":"Sat, 2 Sep 2017 01:30:57 +0000","Message-ID":"<6FDA0CACF4BC624BBE12167875D71C9B40A5A4C3@CBSEX1.cloudbase.local>","References":"<20170831232245.3644-1-aconole@redhat.com>\n\t<CAMQa7Bi5ot3KyLkLNGpCAmABb9u_7huL1k9s-+E8VFEvBTWnCQ@mail.gmail.com>\n\t<f7tk21i2v5o.fsf@dhcp-25-97.bos.redhat.com>\n\t<CAMQa7Biiia5WU-H=PNPqpUdfhcoYxk7ACbvgh-iaN0E7acTKfA@mail.gmail.com>\n\t<2230BDFA-11CE-4D64-9D54-4A64DB3D7BA3@ovn.org>","In-Reply-To":"<2230BDFA-11CE-4D64-9D54-4A64DB3D7BA3@ovn.org>","Accept-Language":"en-US, it-IT","Content-Language":"en-US","X-MS-Has-Attach":"","X-MS-TNEF-Correlator":"","x-originating-ip":"[10.77.78.1]","MIME-Version":"1.0","X-Spam-Status":"No, score=-0.0 required=5.0 tests=RP_MATCHES_RCVD\n\tautolearn=disabled version=3.3.1","X-Spam-Checker-Version":"SpamAssassin 3.3.1 (2010-03-16) on\n\tsmtp1.linux-foundation.org","Cc":"\"<dev@openvswitch.org>\" <dev@openvswitch.org>,\n\tFlavio Leitner <fbl@sysclose.org>, Ansis Atteka <aatteka@ovn.org>","Subject":"Re: [ovs-dev] [PATCH v3 0/3] updated selinux policy for Open vSwitch","X-BeenThere":"ovs-dev@openvswitch.org","X-Mailman-Version":"2.1.12","Precedence":"list","List-Id":"<ovs-dev.openvswitch.org>","List-Unsubscribe":"<https://mail.openvswitch.org/mailman/options/ovs-dev>,\n\t<mailto:ovs-dev-request@openvswitch.org?subject=unsubscribe>","List-Archive":"<http://mail.openvswitch.org/pipermail/ovs-dev/>","List-Post":"<mailto:ovs-dev@openvswitch.org>","List-Help":"<mailto:ovs-dev-request@openvswitch.org?subject=help>","List-Subscribe":"<https://mail.openvswitch.org/mailman/listinfo/ovs-dev>,\n\t<mailto:ovs-dev-request@openvswitch.org?subject=subscribe>","Content-Type":"text/plain; charset=\"us-ascii\"","Content-Transfer-Encoding":"7bit","Sender":"ovs-dev-bounces@openvswitch.org","Errors-To":"ovs-dev-bounces@openvswitch.org"}},{"id":1762067,"web_url":"http://patchwork.ozlabs.org/comment/1762067/","msgid":"<09A860D3-7856-41C8-938E-DC31213CA67C@ovn.org>","list_archive_url":null,"date":"2017-09-02T02:56:18","subject":"Re: [ovs-dev] [PATCH v3 0/3] updated selinux policy for Open vSwitch","submitter":{"id":67602,"url":"http://patchwork.ozlabs.org/api/people/67602/","name":"Justin Pettit","email":"jpettit@ovn.org"},"content":"> On Sep 1, 2017, at 6:30 PM, Alin Serdean <aserdean@cloudbasesolutions.com> wrote:\n> \n> [Alin Serdean] It would be nice, but not mandatory in my opinion. Most of the Windows users will search for a MSI rather than compiling from source.\n> The following series would be nice to be added on 2.8, because that gets published via pypi (https://pypi.python.org/pypi/ovs), but unfortunately it lacks reviews\n> https://patchwork.ozlabs.org/patch/805943/\n> https://patchwork.ozlabs.org/patch/805945/\n\nI'd like to get the release out, but do you think these are important enough to hold off the release or can they wait for 2.8.1?\n\n--Justin","headers":{"Return-Path":"<ovs-dev-bounces@openvswitch.org>","X-Original-To":["incoming@patchwork.ozlabs.org","dev@openvswitch.org"],"Delivered-To":["patchwork-incoming@bilbo.ozlabs.org","ovs-dev@mail.linuxfoundation.org"],"Authentication-Results":"ozlabs.org;\n\tspf=pass (mailfrom) smtp.mailfrom=openvswitch.org\n\t(client-ip=140.211.169.12; helo=mail.linuxfoundation.org;\n\tenvelope-from=ovs-dev-bounces@openvswitch.org;\n\treceiver=<UNKNOWN>)","Received":["from mail.linuxfoundation.org (mail.linuxfoundation.org\n\t[140.211.169.12])\n\t(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256\n\tbits)) (No client certificate requested)\n\tby ozlabs.org (Postfix) with ESMTPS id 3xkgjs0SZzz9s75\n\tfor <incoming@patchwork.ozlabs.org>;\n\tSat,  2 Sep 2017 12:56:29 +1000 (AEST)","from mail.linux-foundation.org (localhost [127.0.0.1])\n\tby mail.linuxfoundation.org (Postfix) with ESMTP id 54F8FD27;\n\tSat,  2 Sep 2017 02:56:27 +0000 (UTC)","from smtp1.linuxfoundation.org (smtp1.linux-foundation.org\n\t[172.17.192.35])\n\tby mail.linuxfoundation.org (Postfix) with ESMTPS id 52A16D0B\n\tfor <dev@openvswitch.org>; Sat,  2 Sep 2017 02:56:25 +0000 (UTC)","from mail-pf0-f195.google.com (mail-pf0-f195.google.com\n\t[209.85.192.195])\n\tby smtp1.linuxfoundation.org (Postfix) with ESMTPS id 8003479\n\tfor <dev@openvswitch.org>; Sat,  2 Sep 2017 02:56:24 +0000 (UTC)","by mail-pf0-f195.google.com with SMTP id r25so1109286pfk.0\n\tfor <dev@openvswitch.org>; Fri, 01 Sep 2017 19:56:24 -0700 (PDT)","from [10.0.1.2] ([98.234.50.139]) by smtp.gmail.com with ESMTPSA id\n\tq192sm1860234pfq.24.2017.09.01.19.56.21\n\t(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);\n\tFri, 01 Sep 2017 19:56:22 -0700 (PDT)"],"X-Greylist":"whitelisted by SQLgrey-1.7.6","X-Google-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n\td=1e100.net; s=20161025;\n\th=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc\n\t:content-transfer-encoding:message-id:references:to;\n\tbh=NaDTlqrUQ7SML0+IF7u6Z8zV9pD8kLLLxOq0eLa7QlU=;\n\tb=fQQ7bDQCGfSs/i5faxdVkDJX3byK8uE8Xj9pydGdGzXB1qxWa8NlG/k1Ry80Zy3RGe\n\tfijvewdwFpCBY6RIH2Ndgc5f22nryiZqKV0B2VvVN/mznt85sMtOBfUW4WaxPfz+xKI3\n\tH/pR2mrPMhNqahUOBVNCTpwxvf1qqOkM5Bm/Ani6aFYhBHvZuPZb8wV7LMqL2Dvdzvoq\n\tRe2JEW/+H1QIpvr1sV3gYhWwUi7KbNP+77tFmN0NGgenIu5IfUfwwsig4UFdwyXawDOk\n\tEJNj+OxEhwZrC3aIWTBQvvqkKdlHJlaBOtN4HU9NXXrIIClARZt5XV+18tTk+mUbpjJ5\n\tgFXg==","X-Gm-Message-State":"AHPjjUim90aNvcnpdN06gJC3VaztLRoMqnaQUNlKN8pXqZVFrreNlqn6\n\tx5jCBOw6DAAoHw==","X-Google-Smtp-Source":"ADKCNb7ANsk5U0TbSh9xpeXKN1scK7f7JgZRovkNF1aXE/sGw1qCgRgi02eW5xnhA1fkv/qwUEKgCw==","X-Received":"by 10.84.236.73 with SMTP id h9mr4818333pln.379.1504320984120;\n\tFri, 01 Sep 2017 19:56:24 -0700 (PDT)","Mime-Version":"1.0 (Mac OS X Mail 10.3 \\(3273\\))","From":"Justin Pettit <jpettit@ovn.org>","In-Reply-To":"<6FDA0CACF4BC624BBE12167875D71C9B40A5A4C3@CBSEX1.cloudbase.local>","Date":"Fri, 1 Sep 2017 19:56:18 -0700","Message-Id":"<09A860D3-7856-41C8-938E-DC31213CA67C@ovn.org>","References":"<20170831232245.3644-1-aconole@redhat.com>\n\t<CAMQa7Bi5ot3KyLkLNGpCAmABb9u_7huL1k9s-+E8VFEvBTWnCQ@mail.gmail.com>\n\t<f7tk21i2v5o.fsf@dhcp-25-97.bos.redhat.com>\n\t<CAMQa7Biiia5WU-H=PNPqpUdfhcoYxk7ACbvgh-iaN0E7acTKfA@mail.gmail.com>\n\t<2230BDFA-11CE-4D64-9D54-4A64DB3D7BA3@ovn.org>\n\t<6FDA0CACF4BC624BBE12167875D71C9B40A5A4C3@CBSEX1.cloudbase.local>","To":"Alin Serdean <aserdean@cloudbasesolutions.com>","X-Mailer":"Apple Mail (2.3273)","X-Spam-Status":"No, score=0.5 required=5.0 tests=FREEMAIL_FROM,\n\tRCVD_IN_DNSWL_NONE,\n\tRCVD_IN_SORBS_SPAM autolearn=disabled version=3.3.1","X-Spam-Checker-Version":"SpamAssassin 3.3.1 (2010-03-16) on\n\tsmtp1.linux-foundation.org","Cc":"\"<dev@openvswitch.org>\" <dev@openvswitch.org>,\n\tFlavio Leitner <fbl@sysclose.org>, Ansis Atteka <aatteka@ovn.org>","Subject":"Re: [ovs-dev] [PATCH v3 0/3] updated selinux policy for Open vSwitch","X-BeenThere":"ovs-dev@openvswitch.org","X-Mailman-Version":"2.1.12","Precedence":"list","List-Id":"<ovs-dev.openvswitch.org>","List-Unsubscribe":"<https://mail.openvswitch.org/mailman/options/ovs-dev>,\n\t<mailto:ovs-dev-request@openvswitch.org?subject=unsubscribe>","List-Archive":"<http://mail.openvswitch.org/pipermail/ovs-dev/>","List-Post":"<mailto:ovs-dev@openvswitch.org>","List-Help":"<mailto:ovs-dev-request@openvswitch.org?subject=help>","List-Subscribe":"<https://mail.openvswitch.org/mailman/listinfo/ovs-dev>,\n\t<mailto:ovs-dev-request@openvswitch.org?subject=subscribe>","Content-Type":"text/plain; charset=\"us-ascii\"","Content-Transfer-Encoding":"7bit","Sender":"ovs-dev-bounces@openvswitch.org","Errors-To":"ovs-dev-bounces@openvswitch.org"}},{"id":1762068,"web_url":"http://patchwork.ozlabs.org/comment/1762068/","msgid":"<6FDA0CACF4BC624BBE12167875D71C9B40A5A67D@CBSEX1.cloudbase.local>","list_archive_url":null,"date":"2017-09-02T03:04:09","subject":"Re: [ovs-dev] [PATCH v3 0/3] updated selinux policy for Open vSwitch","submitter":{"id":67146,"url":"http://patchwork.ozlabs.org/api/people/67146/","name":"Alin Serdean","email":"aserdean@cloudbasesolutions.com"},"content":"> -----Original Message-----\n> From: Justin Pettit [mailto:jpettit@ovn.org]\n> Sent: Saturday, September 2, 2017 5:56 AM\n> To: Alin Serdean <aserdean@cloudbasesolutions.com>\n> Cc: Ansis Atteka <ansisatteka@gmail.com>; Aaron Conole\n> <aconole@redhat.com>; <dev@openvswitch.org> <dev@openvswitch.org>;\n> Ansis Atteka <aatteka@ovn.org>; Jean Hsiao <jhsiao@redhat.com>; Flavio\n> Leitner <fbl@sysclose.org>\n> Subject: Re: [PATCH v3 0/3] updated selinux policy for Open vSwitch\n> \n> \n> > On Sep 1, 2017, at 6:30 PM, Alin Serdean\n> <aserdean@cloudbasesolutions.com> wrote:\n> >\n> > [Alin Serdean] It would be nice, but not mandatory in my opinion. Most of\n> the Windows users will search for a MSI rather than compiling from source.\n> > The following series would be nice to be added on 2.8, because that\n> > gets published via pypi (https://pypi.python.org/pypi/ovs), but\n> > unfortunately it lacks reviews\n> > https://patchwork.ozlabs.org/patch/805943/\n> > https://patchwork.ozlabs.org/patch/805945/\n> \n> I'd like to get the release out, but do you think these are important enough\n> to hold off the release or can they wait for 2.8.1?\n> \n> --Justin\n> \n[Alin Serdean] It can wait for 2.8.1 in my opinion.\nA use case which is impacted by this, is neutron-ovs-agent (Openstack) using native implementation defined over TCP sockets.\nAs a workaround, users can use the name pipe implementation instead of the TCP sockets.\nThanks,\nAlin.","headers":{"Return-Path":"<ovs-dev-bounces@openvswitch.org>","X-Original-To":["incoming@patchwork.ozlabs.org","dev@openvswitch.org"],"Delivered-To":["patchwork-incoming@bilbo.ozlabs.org","ovs-dev@mail.linuxfoundation.org"],"Authentication-Results":"ozlabs.org;\n\tspf=pass (mailfrom) smtp.mailfrom=openvswitch.org\n\t(client-ip=140.211.169.12; helo=mail.linuxfoundation.org;\n\tenvelope-from=ovs-dev-bounces@openvswitch.org;\n\treceiver=<UNKNOWN>)","Received":["from mail.linuxfoundation.org (mail.linuxfoundation.org\n\t[140.211.169.12])\n\t(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256\n\tbits)) (No client certificate requested)\n\tby ozlabs.org (Postfix) with ESMTPS id 3xkgtn3nwnz9s7C\n\tfor <incoming@patchwork.ozlabs.org>;\n\tSat,  2 Sep 2017 13:04:17 +1000 (AEST)","from mail.linux-foundation.org (localhost [127.0.0.1])\n\tby mail.linuxfoundation.org (Postfix) with ESMTP id D149DE06;\n\tSat,  2 Sep 2017 03:04:14 +0000 (UTC)","from smtp1.linuxfoundation.org (smtp1.linux-foundation.org\n\t[172.17.192.35])\n\tby mail.linuxfoundation.org (Postfix) with ESMTPS id 89855DF9\n\tfor <dev@openvswitch.org>; Sat,  2 Sep 2017 03:04:13 +0000 (UTC)","from mail.cloudbasesolutions.com (mail.cloudbasesolutions.com\n\t[91.232.152.5])\n\tby smtp1.linuxfoundation.org (Postfix) with ESMTP id 66EF679\n\tfor <dev@openvswitch.org>; Sat,  2 Sep 2017 03:04:12 +0000 (UTC)","from localhost (localhost [127.0.0.1])\n\tby mail.cloudbasesolutions.com (Postfix) with ESMTP id 8456A42CBA;\n\tSat,  2 Sep 2017 06:04:11 +0300 (EEST)","from mail.cloudbasesolutions.com ([127.0.0.1])\n\tby localhost (mail.cloudbasesolutions.com [127.0.0.1]) (amavisd-new, \n\tport 10024)\n\twith ESMTP id Ifj4eBKmvWqY; Sat,  2 Sep 2017 06:04:10 +0300 (EEST)","from mail.cloudbasesolutions.com (unknown [10.77.78.3])\n\tby mail.cloudbasesolutions.com (Postfix) with ESMTP id D814241F21;\n\tSat,  2 Sep 2017 06:04:10 +0300 (EEST)","from CBSEX1.cloudbase.local ([10.77.78.3]) by\n\tCBSEX1.cloudbase.local ([10.77.78.3]) with mapi id 14.03.0361.001;\n\tSat, 2 Sep 2017 05:04:10 +0200"],"X-Greylist":"domain auto-whitelisted by SQLgrey-1.7.6","X-Virus-Scanned":"amavisd-new at cloudbasesolutions.com","From":"Alin Serdean <aserdean@cloudbasesolutions.com>","To":"Justin Pettit <jpettit@ovn.org>","Thread-Topic":"[PATCH v3 0/3] updated selinux policy for Open vSwitch","Thread-Index":"AQHTI4HSFKuavQuTsk6yblpxO+QdZqKgyMqA///8xACAACJ9cA==","Date":"Sat, 2 Sep 2017 03:04:09 +0000","Message-ID":"<6FDA0CACF4BC624BBE12167875D71C9B40A5A67D@CBSEX1.cloudbase.local>","References":"<20170831232245.3644-1-aconole@redhat.com>\n\t<CAMQa7Bi5ot3KyLkLNGpCAmABb9u_7huL1k9s-+E8VFEvBTWnCQ@mail.gmail.com>\n\t<f7tk21i2v5o.fsf@dhcp-25-97.bos.redhat.com>\n\t<CAMQa7Biiia5WU-H=PNPqpUdfhcoYxk7ACbvgh-iaN0E7acTKfA@mail.gmail.com>\n\t<2230BDFA-11CE-4D64-9D54-4A64DB3D7BA3@ovn.org>\n\t<6FDA0CACF4BC624BBE12167875D71C9B40A5A4C3@CBSEX1.cloudbase.local>\n\t<09A860D3-7856-41C8-938E-DC31213CA67C@ovn.org>","In-Reply-To":"<09A860D3-7856-41C8-938E-DC31213CA67C@ovn.org>","Accept-Language":"en-US, it-IT","Content-Language":"en-US","X-MS-Has-Attach":"","X-MS-TNEF-Correlator":"","x-originating-ip":"[10.77.78.1]","MIME-Version":"1.0","X-Spam-Status":"No, score=-0.0 required=5.0 tests=RP_MATCHES_RCVD\n\tautolearn=disabled version=3.3.1","X-Spam-Checker-Version":"SpamAssassin 3.3.1 (2010-03-16) on\n\tsmtp1.linux-foundation.org","Cc":"\"<dev@openvswitch.org>\" <dev@openvswitch.org>,\n\tFlavio Leitner <fbl@sysclose.org>, Ansis Atteka <aatteka@ovn.org>","Subject":"Re: [ovs-dev] [PATCH v3 0/3] updated selinux policy for Open vSwitch","X-BeenThere":"ovs-dev@openvswitch.org","X-Mailman-Version":"2.1.12","Precedence":"list","List-Id":"<ovs-dev.openvswitch.org>","List-Unsubscribe":"<https://mail.openvswitch.org/mailman/options/ovs-dev>,\n\t<mailto:ovs-dev-request@openvswitch.org?subject=unsubscribe>","List-Archive":"<http://mail.openvswitch.org/pipermail/ovs-dev/>","List-Post":"<mailto:ovs-dev@openvswitch.org>","List-Help":"<mailto:ovs-dev-request@openvswitch.org?subject=help>","List-Subscribe":"<https://mail.openvswitch.org/mailman/listinfo/ovs-dev>,\n\t<mailto:ovs-dev-request@openvswitch.org?subject=subscribe>","Content-Type":"text/plain; charset=\"us-ascii\"","Content-Transfer-Encoding":"7bit","Sender":"ovs-dev-bounces@openvswitch.org","Errors-To":"ovs-dev-bounces@openvswitch.org"}}]