linux-kernel - RE: [DISCUSSION PATCH 00/41] random: possible ways towards NIST SP800-90B compliance

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <CY4PR0401MB3652EA0FFA3CD9679172B02CC3310@CY4PR0401MB3652.namprd04.prod.outlook.com>
Date:   Fri, 2 Oct 2020 15:39:35 +0000
From:   "Van Leeuwen, Pascal" <pvanleeuwen@...bus.com>
To:     Greg Kroah-Hartman <gregkh@...uxfoundation.org>
CC:     Torsten Duwe <duwe@....de>, "Theodore Y. Ts'o" <tytso@....edu>,
        "linux-crypto@...r.kernel.org" <linux-crypto@...r.kernel.org>,
        Nicolai Stange <nstange@...e.de>,
        LKML <linux-kernel@...r.kernel.org>,
        Arnd Bergmann <arnd@...db.de>,
        "Eric W. Biederman" <ebiederm@...ssion.com>,
        "Alexander E. Patrakov" <patrakov@...il.com>,
        "Ahmed S. Darwish" <darwish.07@...il.com>,
        Willy Tarreau <w@....eu>,
        Matthew Garrett <mjg59@...f.ucam.org>,
        Vito Caputo <vcaputo@...garu.com>,
        Andreas Dilger <adilger.kernel@...ger.ca>,
        Jan Kara <jack@...e.cz>, Ray Strode <rstrode@...hat.com>,
        William Jon McCann <mccann@....edu>,
        zhangjs <zachary@...shancloud.com>,
        Andy Lutomirski <luto@...nel.org>,
        Florian Weimer <fweimer@...hat.com>,
        Lennart Poettering <mzxreary@...inter.de>,
        Peter Matthias <matthias.peter@....bund.de>,
        Marcelo Henrique Cerri <marcelo.cerri@...onical.com>,
        Neil Horman <nhorman@...hat.com>,
        Randy Dunlap <rdunlap@...radead.org>,
        Julia Lawall <julia.lawall@...ia.fr>,
        Dan Carpenter <dan.carpenter@...cle.com>,
        Andy Lavr <andy.lavr@...il.com>,
        Eric Biggers <ebiggers@...nel.org>,
        "Jason A. Donenfeld" <Jason@...c4.com>,
        Stephan Müller <smueller@...onox.de>,
        Petr Tesarik <ptesarik@...e.cz>
Subject: RE: [DISCUSSION PATCH 00/41] random: possible ways towards NIST
 SP800-90B compliance

> -----Original Message-----
> From: Greg Kroah-Hartman <gregkh@...uxfoundation.org>
> Sent: Friday, October 2, 2020 5:13 PM
> To: Van Leeuwen, Pascal <pvanleeuwen@...bus.com>
> Cc: Torsten Duwe <duwe@....de>; Theodore Y. Ts'o <tytso@....edu>; linux-crypto@...r.kernel.org; Nicolai Stange
> <nstange@...e.de>; LKML <linux-kernel@...r.kernel.org>; Arnd Bergmann <arnd@...db.de>; Eric W. Biederman
> <ebiederm@...ssion.com>; Alexander E. Patrakov <patrakov@...il.com>; Ahmed S. Darwish <darwish.07@...il.com>; Willy
> Tarreau <w@....eu>; Matthew Garrett <mjg59@...f.ucam.org>; Vito Caputo <vcaputo@...garu.com>; Andreas Dilger
> <adilger.kernel@...ger.ca>; Jan Kara <jack@...e.cz>; Ray Strode <rstrode@...hat.com>; William Jon McCann <mccann@....edu>;
> zhangjs <zachary@...shancloud.com>; Andy Lutomirski <luto@...nel.org>; Florian Weimer <fweimer@...hat.com>; Lennart
> Poettering <mzxreary@...inter.de>; Peter Matthias <matthias.peter@....bund.de>; Marcelo Henrique Cerri
> <marcelo.cerri@...onical.com>; Neil Horman <nhorman@...hat.com>; Randy Dunlap <rdunlap@...radead.org>; Julia Lawall
> <julia.lawall@...ia.fr>; Dan Carpenter <dan.carpenter@...cle.com>; Andy Lavr <andy.lavr@...il.com>; Eric Biggers
> <ebiggers@...nel.org>; Jason A. Donenfeld <Jason@...c4.com>; Stephan Müller <smueller@...onox.de>; Petr Tesarik
> <ptesarik@...e.cz>
> Subject: Re: [DISCUSSION PATCH 00/41] random: possible ways towards NIST SP800-90B compliance
>
> <<< External Email >>>
> On Fri, Oct 02, 2020 at 02:34:44PM +0000, Van Leeuwen, Pascal wrote:
> >
> >
> >
> > > -----Original Message-----
> > > From: Greg Kroah-Hartman <gregkh@...uxfoundation.org>
> > > Sent: Friday, October 2, 2020 4:04 PM
> > > To: Van Leeuwen, Pascal <pvanleeuwen@...bus.com>
> > > Cc: Torsten Duwe <duwe@....de>; Theodore Y. Ts'o <tytso@....edu>; linux-crypto@...r.kernel.org; Nicolai Stange
> > > <nstange@...e.de>; LKML <linux-kernel@...r.kernel.org>; Arnd Bergmann <arnd@...db.de>; Eric W. Biederman
> > > <ebiederm@...ssion.com>; Alexander E. Patrakov <patrakov@...il.com>; Ahmed S. Darwish <darwish.07@...il.com>; Willy
> > > Tarreau <w@....eu>; Matthew Garrett <mjg59@...f.ucam.org>; Vito Caputo <vcaputo@...garu.com>; Andreas Dilger
> > > <adilger.kernel@...ger.ca>; Jan Kara <jack@...e.cz>; Ray Strode <rstrode@...hat.com>; William Jon McCann
> <mccann@....edu>;
> > > zhangjs <zachary@...shancloud.com>; Andy Lutomirski <luto@...nel.org>; Florian Weimer <fweimer@...hat.com>; Lennart
> > > Poettering <mzxreary@...inter.de>; Peter Matthias <matthias.peter@....bund.de>; Marcelo Henrique Cerri
> > > <marcelo.cerri@...onical.com>; Neil Horman <nhorman@...hat.com>; Randy Dunlap <rdunlap@...radead.org>; Julia Lawall
> > > <julia.lawall@...ia.fr>; Dan Carpenter <dan.carpenter@...cle.com>; Andy Lavr <andy.lavr@...il.com>; Eric Biggers
> > > <ebiggers@...nel.org>; Jason A. Donenfeld <Jason@...c4.com>; Stephan Müller <smueller@...onox.de>; Petr Tesarik
> > > <ptesarik@...e.cz>
> > > Subject: Re: [DISCUSSION PATCH 00/41] random: possible ways towards NIST SP800-90B compliance
> > >
> > > <<< External Email >>>
> > > On Fri, Oct 02, 2020 at 01:35:18PM +0000, Van Leeuwen, Pascal wrote:
> > > > ** This message and any attachments are for the sole use of the intended recipient(s). It may contain information that is
> > > confidential and privileged. If you are not the intended recipient of this message, you are prohibited from printing, copying,
> > > forwarding or saving it. Please delete the message and attachments and notify the sender immediately. **
> > >
> > > As per my legal department requests, this is now ignored and deleted on
> > > my system...
> > >
> > > Hint, it's not a valid footer for public mailing lists...
> > >
> > > greg k-h
> > It's automatically added by our company mail server ... not something I can control at all :-(
>
> Then your company can not contribute in Linux kernel development, as
> this is obviously not allowed by such a footer.
>
Interesting, this has never been raised as a problem until today ...
Going back through my mail archive, it looks like they started automatically adding that some
3 months ago. Not that they informed anyone about that, it just silently happened.

> Please work with your IT and legal department to fix this.
>
Eh ... Greg ... that's not how that works in the real world. In the real world, legal and IT lay
down the law and you just comply with that (or hack your way around it, if you can ;-).

I'm already fighting the good fight trying to keep control of my development machines
because IT would just love to get rid of those (since not under IT control .... oh dear ...)
And obviously, you cannot do kernel development on a machine without root access.
It's annoying enough already to require IT support to provide explicit permission to open
the task manager on my own company laptop ... grmbl.

>
> thanks,
>
> greg k-h

Regards,
Pascal van Leeuwen
Silicon IP Architect Multi-Protocol Engines, Rambus Security
Rambus ROTW Holding BV
+31-73 6581953

Note: The Inside Secure/Verimatrix Silicon IP team was recently acquired by Rambus.
Please be so kind to update your e-mail address book with my new e-mail address.


** This message and any attachments are for the sole use of the intended recipient(s). It may contain information that is confidential and privileged. If you are not the intended recipient of this message, you are prohibited from printing, copying, forwarding or saving it. Please delete the message and attachments and notify the sender immediately. **

Rambus Inc.<http://www.rambus.com>