linux-kernel - Re: [PATCH v6 01/17] ima: Add IMA namespace support

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <408db836-71bb-c8a9-1631-c5c1213ab746@linux.ibm.com>
Date:   Wed, 15 Dec 2021 21:34:19 -0500
From:   Stefan Berger <stefanb@...ux.ibm.com>
To:     Mimi Zohar <zohar@...ux.ibm.com>, linux-integrity@...r.kernel.org
Cc:     serge@...lyn.com, christian.brauner@...ntu.com,
        containers@...ts.linux.dev, dmitry.kasatkin@...il.com,
        ebiederm@...ssion.com, krzysztof.struczynski@...wei.com,
        roberto.sassu@...wei.com, mpeters@...hat.com, lhinds@...hat.com,
        lsturman@...hat.com, puiterwi@...hat.com, jejb@...ux.ibm.com,
        jamjoom@...ibm.com, linux-kernel@...r.kernel.org,
        paul@...l-moore.com, rgb@...hat.com,
        linux-security-module@...r.kernel.org, jmorris@...ei.org,
        James Bottomley <James.Bottomley@...senPartnership.com>
Subject: Re: [PATCH v6 01/17] ima: Add IMA namespace support


On 12/15/21 16:10, Mimi Zohar wrote:
> Hi Stefan,
>
> On Fri, 2021-12-10 at 14:47 -0500, Stefan Berger wrote:
>> Implement an IMA namespace data structure that gets created alongside a
>> user namespace with CLONE_NEWUSER. This lays down the foundation for
>> namespacing the different aspects of IMA (eg. IMA-audit, IMA-measurement,
>> IMA-appraisal).
>>
>> Signed-off-by: Stefan Berger <stefanb@...ux.ibm.com>
>> Suggested-by: James Bottomley <James.Bottomley@...senPartnership.com>
> Thanks, this patch set is looking a lot better.  Hopefully it isn't
> premature for generic comments:
>
> - With the SPDX line, the license info should be removed.

Removed the references to GPL.


>
> thanks,
>
> Mimi
>