From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1755861AbaCNTZD (ORCPT ); Fri, 14 Mar 2014 15:25:03 -0400 Received: from mail-bn1lp0139.outbound.protection.outlook.com ([207.46.163.139]:56833 "EHLO na01-bn1-obe.outbound.protection.outlook.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S1754486AbaCNTY7 (ORCPT ); Fri, 14 Mar 2014 15:24:59 -0400 From: Matthew Garrett To: "gnomes@lxorguk.ukuu.org.uk" CC: "linux-kernel@vger.kernel.org" , "jmorris@namei.org" , "keescook@chromium.org" , "linux-security-module@vger.kernel.org" , "akpm@linux-foundation.org" , "hpa@zytor.com" , "jwboyer@fedoraproject.org" , "linux-efi@vger.kernel.org" , "gregkh@linuxfoundation.org" Subject: Re: Trusted kernel patchset for Secure Boot lockdown Thread-Topic: Trusted kernel patchset for Secure Boot lockdown Thread-Index: AQHPP7sUgdFEpLbAD0ahQ2OJgthmsQ== Date: Fri, 14 Mar 2014 19:24:55 +0000 Message-ID: <1394825094.1286.1.camel@x230> References: <1393445473-15068-1-git-send-email-matthew.garrett@nebula.com> <1394686919.25122.2.camel@x230> <1394726363.25122.16.camel@x230> <20140313212450.67f1de8e@alan.etchedpixels.co.uk> <1394746248.27846.3.camel@x230> <20140313232140.03bdaac3@alan.etchedpixels.co.uk> <1394762250.6416.24.camel@x230.lan> <20140314122231.17b9ca8a@alan.etchedpixels.co.uk> <1394801518.6416.38.camel@x230.lan> <20140314170655.0ce398a3@alan.etchedpixels.co.uk> <1394820664.26846.18.camel@x230.mview.int.nebula.com> In-Reply-To: <1394820664.26846.18.camel@x230.mview.int.nebula.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [2001:470:1f07:1371:6267:20ff:fec3:2318] x-forefront-prvs: 0150F3F97D x-forefront-antispam-report: SFV:NSPM;SFS:(10009001)(6009001)(428001)(24454002)(377424004)(189002)(199002)(59766001)(83072002)(93136001)(19580395003)(19580405001)(83322001)(33716001)(85852003)(77982001)(46102001)(92566001)(81342001)(80022001)(92726001)(65816001)(51856001)(33646001)(81542001)(94946001)(87936001)(95666003)(94316002)(79102001)(2656002)(87266001)(20776003)(95416001)(74366001)(93516002)(49866001)(63696002)(90146001)(47976001)(50986001)(56816005)(47736001)(74876001)(4396001)(74706001)(86362001)(97336001)(97186001)(69226001)(77096001)(74662001)(80976001)(31966008)(47446002)(81686001)(74502001)(53806001)(76482001)(56776001)(76796001)(76786001)(81816001)(54356001)(54316002)(85306002);DIR:OUT;SFP:1101;SCL:1;SRVR:BN1PR05MB453;H:BN1PR05MB423.namprd05.prod.outlook.com;FPR:BC32C22B.8D255E01.FA609408.44E279A1.20125;MLV:sfv;PTR:InfoNoRecords;MX:1;A:1;LANG:en; Content-Type: text/plain; charset="utf-8" Content-ID: <2290C0ED0C7929498E01598672FDE139@namprd05.prod.outlook.com> MIME-Version: 1.0 X-OriginatorOrg: nebula.com Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from base64 to 8bit by mail.home.local id s2EJPCaQ018982 On Fri, 2014-03-14 at 14:11 -0400, Matthew Garrett wrote: > The fact that you keep saying measured really does make me suspect that > you misunderstand the problem. There's no measurement involved, there's > simply an assertion that the firmware (which you're forced to trust) > chose, via some policy you may be unaware of, to trust the booted > kernel. As an example, imagine a platform with the bootloader and kernel on read-only media. The platform can assert that the kernel is trusted even if there's no measurement of the kernel. -- Matthew Garrett {.n++%ݶw{.n+{G{ayʇڙ,jfhz_(階ݢj"mG?&~iOzv^m ?I From mboxrd@z Thu Jan 1 00:00:00 1970 From: Matthew Garrett Subject: Re: Trusted kernel patchset for Secure Boot lockdown Date: Fri, 14 Mar 2014 19:24:55 +0000 Message-ID: <1394825094.1286.1.camel@x230> References: <1393445473-15068-1-git-send-email-matthew.garrett@nebula.com> <1394686919.25122.2.camel@x230> <1394726363.25122.16.camel@x230> <20140313212450.67f1de8e@alan.etchedpixels.co.uk> <1394746248.27846.3.camel@x230> <20140313232140.03bdaac3@alan.etchedpixels.co.uk> <1394762250.6416.24.camel@x230.lan> <20140314122231.17b9ca8a@alan.etchedpixels.co.uk> <1394801518.6416.38.camel@x230.lan> <20140314170655.0ce398a3@alan.etchedpixels.co.uk> <1394820664.26846.18.camel@x230.mview.int.nebula.com> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Return-path: In-Reply-To: <1394820664.26846.18.camel-OCPKQ0O/skbnpfJQjCtNlyaZ0x2G8ZQoAL8bYrjMMd8@public.gmane.org> Content-Language: en-US Content-ID: <2290C0ED0C7929498E01598672FDE139-HX+pjaQZbrqcE4WynfumptQqCkab/8FMAL8bYrjMMd8@public.gmane.org> Sender: linux-efi-owner-u79uwXL29TY76Z2rM5mHXA@public.gmane.org To: "gnomes-qBU/x9rampVanCEyBjwyrvXRex20P6io@public.gmane.org" Cc: "linux-kernel-u79uwXL29TY76Z2rM5mHXA@public.gmane.org" , "jmorris-gx6/JNMH7DfYtjvyW6yDsg@public.gmane.org" , "keescook-F7+t8E8rja9g9hUCZPvPmw@public.gmane.org" , "linux-security-module-u79uwXL29TY76Z2rM5mHXA@public.gmane.org" , "akpm-de/tnXTf+JLsfHDXvbKv3WD2FQJk+8+b@public.gmane.org" , "hpa-YMNOUZJC4hwAvxtiuMwx3w@public.gmane.org" , "jwboyer-rxtnV0ftBwyoClj4AeEUq9i2O/JbrIOy@public.gmane.org" , "linux-efi-u79uwXL29TY76Z2rM5mHXA@public.gmane.org" , "gregkh-hQyY1W1yCW8ekmWlsbkhG0B+6BGkLq7r@public.gmane.org" List-Id: linux-efi@vger.kernel.org T24gRnJpLCAyMDE0LTAzLTE0IGF0IDE0OjExIC0wNDAwLCBNYXR0aGV3IEdhcnJldHQgd3JvdGU6 DQoNCj4gVGhlIGZhY3QgdGhhdCB5b3Uga2VlcCBzYXlpbmcgbWVhc3VyZWQgcmVhbGx5IGRvZXMg bWFrZSBtZSBzdXNwZWN0IHRoYXQNCj4geW91IG1pc3VuZGVyc3RhbmQgdGhlIHByb2JsZW0uIFRo ZXJlJ3Mgbm8gbWVhc3VyZW1lbnQgaW52b2x2ZWQsIHRoZXJlJ3MNCj4gc2ltcGx5IGFuIGFzc2Vy dGlvbiB0aGF0IHRoZSBmaXJtd2FyZSAod2hpY2ggeW91J3JlIGZvcmNlZCB0byB0cnVzdCkNCj4g Y2hvc2UsIHZpYSBzb21lIHBvbGljeSB5b3UgbWF5IGJlIHVuYXdhcmUgb2YsIHRvIHRydXN0IHRo ZSBib290ZWQNCj4ga2VybmVsLg0KDQpBcyBhbiBleGFtcGxlLCBpbWFnaW5lIGEgcGxhdGZvcm0g d2l0aCB0aGUgYm9vdGxvYWRlciBhbmQga2VybmVsIG9uDQpyZWFkLW9ubHkgbWVkaWEuIFRoZSBw bGF0Zm9ybSBjYW4gYXNzZXJ0IHRoYXQgdGhlIGtlcm5lbCBpcyB0cnVzdGVkIGV2ZW4NCmlmIHRo ZXJlJ3Mgbm8gbWVhc3VyZW1lbnQgb2YgdGhlIGtlcm5lbC4NCg0KLS0gDQpNYXR0aGV3IEdhcnJl dHQgPG1hdHRoZXcuZ2FycmV0dEBuZWJ1bGEuY29tPg0K