From: ebiederm@xmission.com (Eric W. Biederman) To: Thiago Jung Bauermann <bauerman@linux.vnet.ibm.com> Cc: Mimi Zohar <zohar@linux.vnet.ibm.com>, Andrew Morton <akpm@linux-foundation.org>, linux-security-module <linux-security-module@vger.kernel.org>, linux-ima-devel@lists.sourceforge.net, Dave Young <dyoung@redhat.com>, kexec@lists.infradead.org, linuxppc-dev@lists.ozlabs.org, linux-kernel@vger.kernel.org, Stephen Rothwell <sfr@canb.auug.org.au> Subject: Re: [PATHC v2 0/9] ima: carry the measurement list across kexec Date: Thu, 29 Sep 2016 16:43:08 -0500 [thread overview] Message-ID: <87eg42xtzn.fsf@x220.int.ebiederm.org> (raw) In-Reply-To: <1743059.2ZOQaNILxh@hactar> (Thiago Jung Bauermann's message of "Mon, 26 Sep 2016 15:31:38 -0300") Thiago Jung Bauermann <bauerman@linux.vnet.ibm.com> writes: > Hello Eric, > > Am Dienstag, 20 September 2016, 11:07:29 schrieb Eric W. Biederman: >> A semi-generic concept called a hand-over buffer seems to be a >> construction of infrustructure for no actual reason that will just >> result in confusion. There are lots of things that are handed over, the >> flattend device tree, ramdisks, bootparams on x86, etc, etc. ima is not >> special in this execpt for being perhaps the first addition that we are >> going to want the option of including on most architectures. > > Ok, I understand. I decided to implement a generic concept because I thought > that proposing a feature that is more useful than what I need it for would > increase its chance of being accepted. It's interesting to see that it had > the opposite effect. Yes. In this case it was not clear that anyone else could use it, and being less generic you can tweak the needs of the code to ima without anyone having to worry about it. So thank you very much for making the code more specific to the circumstances. > I reworked and simplified the code and folded the hand-over buffer patches > into Mimi's patch series to carry the measurement list across kexec. The > kexec buffer code is in the following patches now: > > [PATCH v5 01/10] powerpc: ima: Get the kexec buffer passed by the previous > kernel > [PATCH v5 05/10] powerpc: ima: Send the kexec buffer to the next > kernel That plus [PATCH v5 06/10] ima: on soft reboot, save the measurement list > Each patch has a changelog listing what I changed to make it specific to > IMA. I am a little sad to see you needed to modify kexec_file.c to get where you were going, but that isn't a huge issue either way. Eric
WARNING: multiple messages have this Message-ID (diff)
From: ebiederm@xmission.com (Eric W. Biederman) To: Thiago Jung Bauermann <bauerman@linux.vnet.ibm.com> Cc: Stephen Rothwell <sfr@canb.auug.org.au>, Mimi Zohar <zohar@linux.vnet.ibm.com>, kexec@lists.infradead.org, linuxppc-dev@lists.ozlabs.org, linux-kernel@vger.kernel.org, linux-security-module <linux-security-module@vger.kernel.org>, linux-ima-devel@lists.sourceforge.net, Andrew Morton <akpm@linux-foundation.org>, Dave Young <dyoung@redhat.com> Subject: Re: [PATHC v2 0/9] ima: carry the measurement list across kexec Date: Thu, 29 Sep 2016 16:43:08 -0500 [thread overview] Message-ID: <87eg42xtzn.fsf@x220.int.ebiederm.org> (raw) In-Reply-To: <1743059.2ZOQaNILxh@hactar> (Thiago Jung Bauermann's message of "Mon, 26 Sep 2016 15:31:38 -0300") Thiago Jung Bauermann <bauerman@linux.vnet.ibm.com> writes: > Hello Eric, > > Am Dienstag, 20 September 2016, 11:07:29 schrieb Eric W. Biederman: >> A semi-generic concept called a hand-over buffer seems to be a >> construction of infrustructure for no actual reason that will just >> result in confusion. There are lots of things that are handed over, the >> flattend device tree, ramdisks, bootparams on x86, etc, etc. ima is not >> special in this execpt for being perhaps the first addition that we are >> going to want the option of including on most architectures. > > Ok, I understand. I decided to implement a generic concept because I thought > that proposing a feature that is more useful than what I need it for would > increase its chance of being accepted. It's interesting to see that it had > the opposite effect. Yes. In this case it was not clear that anyone else could use it, and being less generic you can tweak the needs of the code to ima without anyone having to worry about it. So thank you very much for making the code more specific to the circumstances. > I reworked and simplified the code and folded the hand-over buffer patches > into Mimi's patch series to carry the measurement list across kexec. The > kexec buffer code is in the following patches now: > > [PATCH v5 01/10] powerpc: ima: Get the kexec buffer passed by the previous > kernel > [PATCH v5 05/10] powerpc: ima: Send the kexec buffer to the next > kernel That plus [PATCH v5 06/10] ima: on soft reboot, save the measurement list > Each patch has a changelog listing what I changed to make it specific to > IMA. I am a little sad to see you needed to modify kexec_file.c to get where you were going, but that isn't a huge issue either way. Eric _______________________________________________ kexec mailing list kexec@lists.infradead.org http://lists.infradead.org/mailman/listinfo/kexec
next prev parent reply other threads:[~2016-09-29 21:45 UTC|newest] Thread overview: 48+ messages / expand[flat|nested] mbox.gz Atom feed top 2016-08-30 22:40 [PATHC v2 0/9] ima: carry the measurement list across kexec Mimi Zohar 2016-08-30 22:40 ` Mimi Zohar 2016-08-30 22:40 ` [PATHC v2 1/9] ima: on soft reboot, restore the measurement list Mimi Zohar 2016-08-30 22:40 ` Mimi Zohar 2016-08-30 22:40 ` [PATHC v2 2/9] ima: permit duplicate measurement list entries Mimi Zohar 2016-08-30 22:40 ` Mimi Zohar 2016-08-30 22:40 ` [PATHC v2 3/9] ima: maintain memory size needed for serializing the measurement list Mimi Zohar 2016-08-30 22:40 ` Mimi Zohar 2016-08-30 22:40 ` [PATHC v2 4/9] ima: serialize the binary_runtime_measurements Mimi Zohar 2016-08-30 22:40 ` Mimi Zohar 2016-08-30 22:40 ` [PATHC v2 5/9] ima: on soft reboot, save the measurement list Mimi Zohar 2016-08-30 22:40 ` Mimi Zohar 2016-09-01 1:57 ` Dave Young 2016-09-01 1:57 ` Dave Young 2016-09-02 13:22 ` Mimi Zohar 2016-09-02 13:22 ` Mimi Zohar 2016-08-30 22:40 ` [PATHC v2 6/9] ima: store the builtin/custom template definitions in a list Mimi Zohar 2016-08-30 22:40 ` Mimi Zohar 2016-08-30 22:40 ` [PATHC v2 7/9] ima: support restoring multiple template formats Mimi Zohar 2016-08-30 22:40 ` Mimi Zohar 2016-08-30 22:40 ` [PATHC v2 8/9] ima: define a canonical binary_runtime_measurements list format Mimi Zohar 2016-08-30 22:40 ` Mimi Zohar 2016-08-30 22:40 ` [PATHC v2 9/9] ima: platform-independent hash value Mimi Zohar 2016-08-30 22:40 ` Mimi Zohar 2016-08-31 20:50 ` [PATHC v2 0/9] ima: carry the measurement list across kexec Andrew Morton 2016-08-31 20:50 ` Andrew Morton 2016-08-31 22:38 ` Mimi Zohar 2016-08-31 22:38 ` Mimi Zohar 2016-09-15 15:44 ` Mimi Zohar 2016-09-15 15:44 ` Mimi Zohar 2016-09-16 19:47 ` Eric W. Biederman 2016-09-16 19:47 ` Eric W. Biederman 2016-09-16 21:03 ` Eric W. Biederman 2016-09-16 21:03 ` Eric W. Biederman 2016-09-16 23:32 ` Thiago Jung Bauermann 2016-09-16 23:32 ` Thiago Jung Bauermann 2016-09-17 5:17 ` Eric W. Biederman 2016-09-17 5:17 ` Eric W. Biederman 2016-09-18 21:25 ` Thiago Jung Bauermann 2016-09-18 21:25 ` Thiago Jung Bauermann 2016-09-20 16:07 ` Eric W. Biederman 2016-09-20 16:07 ` Eric W. Biederman 2016-09-26 18:31 ` Thiago Jung Bauermann 2016-09-26 18:31 ` Thiago Jung Bauermann 2016-09-29 21:43 ` Eric W. Biederman [this message] 2016-09-29 21:43 ` Eric W. Biederman 2016-09-29 22:21 ` Thiago Jung Bauermann 2016-09-29 22:21 ` Thiago Jung Bauermann
Reply instructions: You may reply publicly to this message via plain-text email using any one of the following methods: * Save the following mbox file, import it into your mail client, and reply-to-all from there: mbox Avoid top-posting and favor interleaved quoting: https://en.wikipedia.org/wiki/Posting_style#Interleaved_style * Reply using the --to, --cc, and --in-reply-to switches of git-send-email(1): git send-email \ --in-reply-to=87eg42xtzn.fsf@x220.int.ebiederm.org \ --to=ebiederm@xmission.com \ --cc=akpm@linux-foundation.org \ --cc=bauerman@linux.vnet.ibm.com \ --cc=dyoung@redhat.com \ --cc=kexec@lists.infradead.org \ --cc=linux-ima-devel@lists.sourceforge.net \ --cc=linux-kernel@vger.kernel.org \ --cc=linux-security-module@vger.kernel.org \ --cc=linuxppc-dev@lists.ozlabs.org \ --cc=sfr@canb.auug.org.au \ --cc=zohar@linux.vnet.ibm.com \ /path/to/YOUR_REPLY https://kernel.org/pub/software/scm/git/docs/git-send-email.html * If your mail client supports setting the In-Reply-To header via mailto: links, try the mailto: linkBe sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes, see mirroring instructions on how to clone and mirror all data and code used by this external index.