linux-kernel - Re: [PATCH] sefltest/ima: support appended signatures (modsig)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-Id: <1567005598.6115.40.camel@linux.ibm.com>
Date:   Wed, 28 Aug 2019 11:19:58 -0400
From:   Mimi Zohar <zohar@...ux.ibm.com>
To:     shuah <shuah@...nel.org>, linux-integrity@...r.kernel.org
Cc:     Thiago Jung Bauermann <bauerman@...ux.ibm.com>,
        Petr Vorel <pvorel@...e.cz>, Jessica Yu <jeyu@...nel.org>,
        Dave Young <dyoung@...hat.com>,
        linux-kselftest@...r.kernel.org, linuxppc-dev@...ts.ozlabs.org,
        linux-kernel@...r.kernel.org
Subject: Re: [PATCH] sefltest/ima: support appended signatures (modsig)

On Wed, 2019-08-28 at 08:45 -0600, shuah wrote:
> Hi Mimi,
> 
> On 8/28/19 6:39 AM, Mimi Zohar wrote:
> > Detect and allow appended signatures.
> > 
> 
> Can you please add a couple of more sentences on the feature
> and what happens without it? I know this is a test for the
> feature, however, it will be useful for users and testers to
> know more about this test and the feature it is testing.

I've updated the patch description as requested.  

> Also, are there test skip conditions to be concerned about?

The kexec selftests tests the coordination of the different methods of
verifying the kexec kernel image.  As the appended signature support
is part of IMA, there is no new skip conditions.

> Is there a dependency on another tree or would like me to take
> this through kselftest tree?

I would prefer upstreaming this test with the rest of IMA support for
appended signatures.

thanks,

Mimi