From mboxrd@z Thu Jan 1 00:00:00 1970 From: James Morris Subject: Re: [RFC PATCH 1/5] ima: extend clone() with IMA namespace support Date: Wed, 14 Mar 2018 08:51:48 +1100 (AEDT) Message-ID: References: <20170720225033.21298-1-mkayaalp@linux.vnet.ibm.com> <20170720225033.21298-2-mkayaalp@linux.vnet.ibm.com> <20170725175317.GA727@mail.hallyn.com> <1501008554.3689.30.camel@HansenPartnership.com> <20170725190406.GA1883@mail.hallyn.com> <1501009739.3689.33.camel@HansenPartnership.com> <1501012082.27413.17.camel@linux.vnet.ibm.com> <645db815-7773-e351-5db7-89f38cd88c3d@linux.vnet.ibm.com> <20170725204622.GA4969@mail.hallyn.com> <97839865-b0ab-8e5d-114e-0603ef2edf6f@linux.vnet.ibm.com> <20180309025942.GA15295@mail.hallyn.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: containers-bounces-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org Errors-To: containers-bounces-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org To: Stefan Berger Cc: Mehmet Kayaalp , Mehmet Kayaalp , Yuqiong Sun , containers , linux-kernel , David Safford , James Bottomley , linux-security-module , ima-devel , Yuqiong Sun , Mimi Zohar List-Id: containers.vger.kernel.org On Tue, 13 Mar 2018, Stefan Berger wrote: > On 03/11/2018 06:58 PM, James Morris wrote: > > On Fri, 9 Mar 2018, Stefan Berger wrote: > > > > > Yuqiong is publishing a paper in this area. I believe the conference is > > > only > > > later this year. > > > > > > Our goals are to enable IMA measurements, appraisal, and auditing inside a > > > container using namespaces. > > This is excellent to have -- can you include this requirements analysis as > > a file Documentation/security on the next posting? > > > > Also, if you need a public space for managing these kinds of documents, > > consider utilizing > > http://kernsec.org/wiki/index.php/Linux_Kernel_Integrity > > Thanks for the pointer. I tried creating an account, but the interface > wouldn't let me. Who is managing it? Email me for an account, per the note on the front page. -- James Morris From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753116AbeCMVwW (ORCPT ); Tue, 13 Mar 2018 17:52:22 -0400 Received: from namei.org ([65.99.196.166]:52894 "EHLO namei.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752100AbeCMVwU (ORCPT ); Tue, 13 Mar 2018 17:52:20 -0400 Date: Wed, 14 Mar 2018 08:51:48 +1100 (AEDT) From: James Morris To: Stefan Berger cc: "Serge E. Hallyn" , Mehmet Kayaalp , Mehmet Kayaalp , Yuqiong Sun , containers , linux-kernel , David Safford , James Bottomley , linux-security-module , ima-devel , Yuqiong Sun , Mimi Zohar Subject: Re: [RFC PATCH 1/5] ima: extend clone() with IMA namespace support In-Reply-To: Message-ID: References: <20170720225033.21298-1-mkayaalp@linux.vnet.ibm.com> <20170720225033.21298-2-mkayaalp@linux.vnet.ibm.com> <20170725175317.GA727@mail.hallyn.com> <1501008554.3689.30.camel@HansenPartnership.com> <20170725190406.GA1883@mail.hallyn.com> <1501009739.3689.33.camel@HansenPartnership.com> <1501012082.27413.17.camel@linux.vnet.ibm.com> <645db815-7773-e351-5db7-89f38cd88c3d@linux.vnet.ibm.com> <20170725204622.GA4969@mail.hallyn.com> <97839865-b0ab-8e5d-114e-0603ef2edf6f@linux.vnet.ibm.com> <20180309025942.GA15295@mail.hallyn.com> User-Agent: Alpine 2.21 (LRH 202 2017-01-01) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Tue, 13 Mar 2018, Stefan Berger wrote: > On 03/11/2018 06:58 PM, James Morris wrote: > > On Fri, 9 Mar 2018, Stefan Berger wrote: > > > > > Yuqiong is publishing a paper in this area. I believe the conference is > > > only > > > later this year. > > > > > > Our goals are to enable IMA measurements, appraisal, and auditing inside a > > > container using namespaces. > > This is excellent to have -- can you include this requirements analysis as > > a file Documentation/security on the next posting? > > > > Also, if you need a public space for managing these kinds of documents, > > consider utilizing > > http://kernsec.org/wiki/index.php/Linux_Kernel_Integrity > > Thanks for the pointer. I tried creating an account, but the interface > wouldn't let me. Who is managing it? Email me for an account, per the note on the front page. -- James Morris From mboxrd@z Thu Jan 1 00:00:00 1970 From: jmorris@namei.org (James Morris) Date: Wed, 14 Mar 2018 08:51:48 +1100 (AEDT) Subject: [RFC PATCH 1/5] ima: extend clone() with IMA namespace support In-Reply-To: References: <20170720225033.21298-1-mkayaalp@linux.vnet.ibm.com> <20170720225033.21298-2-mkayaalp@linux.vnet.ibm.com> <20170725175317.GA727@mail.hallyn.com> <1501008554.3689.30.camel@HansenPartnership.com> <20170725190406.GA1883@mail.hallyn.com> <1501009739.3689.33.camel@HansenPartnership.com> <1501012082.27413.17.camel@linux.vnet.ibm.com> <645db815-7773-e351-5db7-89f38cd88c3d@linux.vnet.ibm.com> <20170725204622.GA4969@mail.hallyn.com> <97839865-b0ab-8e5d-114e-0603ef2edf6f@linux.vnet.ibm.com> <20180309025942.GA15295@mail.hallyn.com> Message-ID: To: linux-security-module@vger.kernel.org List-Id: linux-security-module.vger.kernel.org On Tue, 13 Mar 2018, Stefan Berger wrote: > On 03/11/2018 06:58 PM, James Morris wrote: > > On Fri, 9 Mar 2018, Stefan Berger wrote: > > > > > Yuqiong is publishing a paper in this area. I believe the conference is > > > only > > > later this year. > > > > > > Our goals are to enable IMA measurements, appraisal, and auditing inside a > > > container using namespaces. > > This is excellent to have -- can you include this requirements analysis as > > a file Documentation/security on the next posting? > > > > Also, if you need a public space for managing these kinds of documents, > > consider utilizing > > http://kernsec.org/wiki/index.php/Linux_Kernel_Integrity > > Thanks for the pointer. I tried creating an account, but the interface > wouldn't let me. Who is managing it? Email me for an account, per the note on the front page. -- James Morris -- To unsubscribe from this list: send the line "unsubscribe linux-security-module" in the body of a message to majordomo at vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html