From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <linux-kernel-owner@vger.kernel.org>
Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand
	id S1756445AbbEUWZL (ORCPT <rfc822;w@1wt.eu>);
	Thu, 21 May 2015 18:25:11 -0400
Received: from mail-lb0-f179.google.com ([209.85.217.179]:33919 "EHLO
	mail-lb0-f179.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org
	with ESMTP id S1755969AbbEUWZJ (ORCPT
	<rfc822;linux-kernel@vger.kernel.org>);
	Thu, 21 May 2015 18:25:09 -0400
MIME-Version: 1.0
In-Reply-To: <CAB=NE6VZ56JAq+6+DbfedP7uz5Uy=SkKnXe1QGhFG1dBy684fw@mail.gmail.com>
References: <20150515123513.16723.96340.stgit@warthog.procyon.org.uk>
 <555BD715.40202@kernel.org> <31772.1432128969@warthog.procyon.org.uk>
 <CALCETrUt+OO8sk=7j+rBToHujV7ONDzQ1Z6UMJ9HHUB44Jmtpw@mail.gmail.com>
 <20150520162059.GC10473@localhost> <20150521213829.GH23057@wotan.suse.de>
 <CALCETrUvf==bxwx80PT=F4bmZ4-BZVA47H_oh2t9mhgM4z8wmg@mail.gmail.com>
 <CAB=NE6UurGCp6QF992nTPW-QPQcpF9_O7LDxKsWToFTeWApy_w@mail.gmail.com>
 <CALCETrUC5DAz4vths-zxOb6py-M1bfWVF21_145K89wFiuM60g@mail.gmail.com> <CAB=NE6VZ56JAq+6+DbfedP7uz5Uy=SkKnXe1QGhFG1dBy684fw@mail.gmail.com>
From: Andy Lutomirski <luto@amacapital.net>
Date: Thu, 21 May 2015 15:24:46 -0700
Message-ID: <CALCETrXe2kdP73LhND9svDsuSwhok+661-B775Xk_=kOtoZfYQ@mail.gmail.com>
Subject: Re: [PATCH 0/8] MODSIGN: Use PKCS#7 for module signatures [ver #4]
To: "Luis R. Rodriguez" <mcgrof@suse.com>
Cc: David Howells <dhowells@redhat.com>, Andy Lutomirski <luto@kernel.org>,
        Rusty Russell <rusty@rustcorp.com.au>, Michal Marek <mmarek@suse.cz>,
        Matthew Garrett <mjg59@srcf.ucam.org>, keyrings@linux-nfs.org,
        Dmitry Kasatkin <dmitry.kasatkin@gmail.com>,
        "linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>,
        Seth Forshee <seth.forshee@canonical.com>,
        LSM List <linux-security-module@vger.kernel.org>,
        David Woodhouse <dwmw2@infradead.org>
Content-Type: text/plain; charset=UTF-8
Sender: linux-kernel-owner@vger.kernel.org
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org

On Thu, May 21, 2015 at 3:16 PM, Luis R. Rodriguez <mcgrof@suse.com> wrote:
> On Thu, May 21, 2015 at 3:06 PM, Andy Lutomirski <luto@amacapital.net> wrote:
>> Given that, I would say that merely shoving firmware files through the
>> module verifier as-is would not be okay.
>
> Replacing one dog and pony show for another is what is going on, what
> you describe and suggest seems best, and I welcome patches, it seems
> you know what you are talking about :)
>

Don't hold your breath.  My plate is over-full.  I'm probably a decent
reviewer of crypto, though.

--Andy