From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-1.5 required=3.0 tests=HEADER_FROM_DIFFERENT_DOMAINS, RDNS_NONE,SIGNED_OFF_BY,SPF_HELO_NONE,SPF_NONE,URIBL_BLOCKED autolearn=no autolearn_force=no version=3.4.0 Received: from mx0a-001b2d01.pphosted.com ([148.163.156.1]:20394 "EHLO mx0a-001b2d01.pphosted.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1729848AbgCKPny (ORCPT ); Wed, 11 Mar 2020 11:43:54 -0400 Received: from pps.filterd (m0098404.ppops.net [127.0.0.1]) by mx0a-001b2d01.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id 02BFf1Gp099444 for ; Wed, 11 Mar 2020 11:43:53 -0400 Received: from e06smtp05.uk.ibm.com (e06smtp05.uk.ibm.com [195.75.94.101]) by mx0a-001b2d01.pphosted.com with ESMTP id 2yq291terd-1 (version=TLSv1.2 cipher=AES256-GCM-SHA384 bits=256 verify=NOT) for ; Wed, 11 Mar 2020 11:43:51 -0400 Received: from localhost by e06smtp05.uk.ibm.com with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted for from ; Wed, 11 Mar 2020 15:43:01 -0000 Subject: Re: [PATCH v3] ima: add a new CONFIG for loading arch-specific policies From: Mimi Zohar To: Nayna Jain , linux-integrity@vger.kernel.org, linuxppc-dev@lists.ozlabs.org, linux-efi@vger.kernel.org, linux-s390@vger.kernel.org, x86@kernel.org Cc: Ard Biesheuvel , Philipp Rudo , Michael Ellerman , Thomas Gleixner , linux-kernel@vger.kernel.org, Nayna Jain Date: Wed, 11 Mar 2020 11:42:55 -0400 In-Reply-To: <1583715471-15525-1-git-send-email-nayna@linux.ibm.com> References: <1583715471-15525-1-git-send-email-nayna@linux.ibm.com> Content-Type: text/plain; charset="UTF-8" Mime-Version: 1.0 Content-Transfer-Encoding: 8bit Message-Id: <1583941375.5293.33.camel@linux.ibm.com> Sender: linux-kernel-owner@vger.kernel.org List-ID: On Sun, 2020-03-08 at 20:57 -0400, Nayna Jain wrote: > From: Nayna Jain > > Every time a new architecture defines the IMA architecture specific > functions - arch_ima_get_secureboot() and arch_ima_get_policy(), the IMA > include file needs to be updated. To avoid this "noise", this patch > defines a new IMA Kconfig IMA_SECURE_AND_OR_TRUSTED_BOOT option, allowing > the different architectures to select it. > > Suggested-by: Linus Torvalds > Signed-off-by: Nayna Jain > Acked-by: Ard Biesheuvel > Cc: Philipp Rudo > Cc: Michael Ellerman Thanks, Michael for the suggestion of using "imply".  Seems to be working nicely.  Thanks, Nayna.  I pushed this patch out to next- integrity-testing.  Could we get some tags on this version of the patch? thanks, Mimi