linux-kernel - Re: HSI framework for linux-next

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20111123172650.GA1637@earth.universe>
Date:	Wed, 23 Nov 2011 18:26:50 +0100
From:	Sebastian Reichel <sre@...ian.org>
To:	Stephen Rothwell <sfr@...b.auug.org.au>
Cc:	Carlos Chinea <carlos.chinea@...ia.com>,
	linux-next@...r.kernel.org, linux-kernel@...r.kernel.org,
	"linux-omap@...r.kernel.org" <linux-omap@...r.kernel.org>,
	ext Linus Walleij <linus.walleij@...aro.org>,
	"peter_henn@....de" <peter_henn@....de>,
	"sjur.brandeland@...ricsson.com" <sjur.brandeland@...ricsson.com>,
	"govindraj.ti@...il.com" <govindraj.ti@...il.com>,
	"pawel.szyszuk@...ricsson.com" <pawel.szyszuk@...ricsson.com>
Subject: Re: HSI framework for linux-next

On Wed, Nov 09, 2011 at 08:51:40AM +1100, Stephen Rothwell wrote:
> Hi Carlos,
> 
> On Fri, 28 Oct 2011 12:27:46 +0300 Carlos Chinea <carlos.chinea@...ia.com> wrote:
> > ...
> 
> Right, so -rc1 has been released so I can consider this.  Just a couple of things:
> 
> 	Linus (and the rest of us) is being a bit nmore paranoid about
> where to fetch trees from.  Public git hosters (like gitorious) can be
> problematic since it is hard for us to verify the owners of trees
> reliably.  You either need to apply for a kernel.org account, or you will
> need to add a signed tag to your tree before asking Linus to pull from
> it.  And that atg will have to be singned with a GPG key that can be
> verified by Linus ...
> 
> 	I am not sure how to translate that gitorious URI above into a
> simple, publically fetchable URI (git://gitorious.org...).

It has been two weeks. Did I miss any status updates?

Here's the git fetchable URI: git://gitorious.org/kernel-hsi/kernel-hsi.git
The existing tag is not signed though.

-- Sebastian

Download attachment "signature.asc" of type "application/pgp-signature" (837 bytes)