[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <3d959e693630e7f45a60df2c63be7815cb8136ad.camel@linux.ibm.com>
Date: Fri, 23 Dec 2022 14:45:02 -0500
From: Mimi Zohar <zohar@...ux.ibm.com>
To: Eric Snowberg <eric.snowberg@...cle.com>
Cc: Jarkko Sakkinen <jarkko@...nel.org>, Coiby Xu <coxu@...hat.com>,
David Howells <dhowells@...hat.com>,
David Woodhouse <dwmw2@...radead.org>,
"herbert@...dor.apana.org.au" <herbert@...dor.apana.org.au>,
"davem@...emloft.net" <davem@...emloft.net>,
"dmitry.kasatkin@...il.com" <dmitry.kasatkin@...il.com>,
"paul@...l-moore.com" <paul@...l-moore.com>,
"jmorris@...ei.org" <jmorris@...ei.org>,
"serge@...lyn.com" <serge@...lyn.com>,
"pvorel@...e.cz" <pvorel@...e.cz>,
"noodles@...com" <noodles@...com>, "tiwai@...e.de" <tiwai@...e.de>,
Kanth Ghatraju <kanth.ghatraju@...cle.com>,
Konrad Wilk <konrad.wilk@...cle.com>,
Elaine Palmer <erpalmer@...ux.vnet.ibm.com>,
"keyrings@...r.kernel.org" <keyrings@...r.kernel.org>,
"linux-kernel@...r.kernel.org" <linux-kernel@...r.kernel.org>,
"linux-crypto@...r.kernel.org" <linux-crypto@...r.kernel.org>,
"linux-integrity@...r.kernel.org" <linux-integrity@...r.kernel.org>,
"linux-security-module@...r.kernel.org"
<linux-security-module@...r.kernel.org>
Subject: Re: [PATCH v3 00/10] Add CA enforcement keyring restrictions
On Fri, 2022-12-23 at 18:17 +0000, Eric Snowberg wrote:
> >> Fair enough. If this will be viewed as justification for adding the additional
> >> code, I can work on adding it. Above you mentioned a warning would be needed
> >> at a minimum and a restriction could be placed behind a Kconfig. How about for
> >> the default case I add the warning and when compiling with
> >> INTEGRITY_CA_MACHINE_KEYRING the restriction will be enforced.
> >
> > Sounds good to me. To avoid misunderstandings, will there be a Kconfig
> > menu with 3 options?
>
> I will add the three options in the next round.
>
> > There were a couple of other comments having to
> > do with variable names. Will you address them as well?
>
> And take care of the variable name changes. I won’t get back to this until January.
Enjoy your vacation and the holidays. Looking forward to the next
version.
--
thanks,
Mimi
Powered by blists - more mailing lists