[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <CAHC9VhR7CEBmzjnruFaHHpepYWSRu0bvPUxYk_jz7oXRS5yJUw@mail.gmail.com>
Date: Mon, 19 Aug 2024 22:51:56 -0400
From: Paul Moore <paul@...l-moore.com>
To: Fan Wu <wufan@...ux.microsoft.com>
Cc: corbet@....net, zohar@...ux.ibm.com, jmorris@...ei.org, serge@...lyn.com,
tytso@....edu, ebiggers@...nel.org, axboe@...nel.dk, agk@...hat.com,
snitzer@...nel.org, mpatocka@...hat.com, eparis@...hat.com,
linux-doc@...r.kernel.org, linux-integrity@...r.kernel.org,
linux-security-module@...r.kernel.org, fsverity@...ts.linux.dev,
linux-block@...r.kernel.org, dm-devel@...ts.linux.dev, audit@...r.kernel.org,
linux-kernel@...r.kernel.org
Subject: Re: [PATCH v20 00/20] Integrity Policy Enforcement LSM (IPE)
On Tue, Aug 6, 2024 at 4:59 PM Paul Moore <paul@...l-moore.com> wrote:
> On Sat, Aug 3, 2024 at 2:08 AM Fan Wu <wufan@...ux.microsoft.com> wrote:
> >
> > IPE is a Linux Security Module that takes a complementary approach to
> > access control. Unlike traditional access control mechanisms that rely on
> > labels and paths for decision-making, IPE focuses on the immutable security
> > properties inherent to system components. These properties are fundamental
> > attributes or features of a system component that cannot be altered,
> > ensuring a consistent and reliable basis for security decisions.
> >
> > ...
>
> There was some minor merge fuzz, a handful of overly long lines in the
> comments, and some subject lines that needed some minor tweaking but
> overall I think this looks good. I only see one thing holding me back
> from merging this into the LSM tree: an updated ACK from the
> device-mapper folks; if we can get that within the next week or two
> that would be great.
I've just merged IPE into the lsm/dev branch, it should go up to Linus
during the next merge window. Thanks everyone!
--
paul-moore.com
Powered by blists - more mailing lists