| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Fri, 03 Oct 2014 15:49:44 +0300 From: Dmitry Kasatkin <d.kasatkin@...sung.com> To: David Howells <dhowells@...hat.com> Cc: zohar@...ux.vnet.ibm.com, linux-ima-devel@...ts.sourceforge.net, linux-security-module@...r.kernel.org, jmorris@...ei.org, rusty@...tcorp.com.au, keyrings@...ux-nfs.org, linux-kernel@...r.kernel.org, dmitry.kasatkin@...il.com Subject: Re: [PATCH 3/4] module: search the key only by keyid On 03/10/14 15:46, David Howells wrote: > Dmitry Kasatkin <d.kasatkin@...sung.com> wrote: > >> Latest KEYS code change the way keys identified and module >> signing keys are not searchable anymore with original id. >> >> This patch fixes this problem without change module signature >> data. > This isn't sufficient. The key search must also include the signer. > IMA uses "id:<id>" partial matching.. There is no signer in the signature. It is added as "last resort" It is here... the same but I renamed with finger print.. http://git.kernel.org/cgit/linux/kernel/git/kasatkin/linux-digsig.git/commit/?h=keys-fixes&id=f036bb9a4c1b3c548f315226d3284e6a91d284e7 - Dmitry > David > -- > To unsubscribe from this list: send the line "unsubscribe linux-security-module" in > the body of a message to majordomo@...r.kernel.org > More majordomo info at http://vger.kernel.org/majordomo-info.html > -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists