Re: [GIT] Security subsystem updates for 3.7

2012-10-03 Thread Mimi Zohar
On Wed, 2012-10-03 at 02:44 -0700, Eric W. Biederman wrote: > Linus Torvalds writes: > > > On Tue, Oct 2, 2012 at 4:35 AM, James Morris wrote: > >> Highlights: > >> > >> - Integrity: add local fs integrity verification to detect offline attacks > >> - Integrity: add digital signature

Re: [GIT] Security subsystem updates for 3.7

2012-10-03 Thread Mimi Zohar
On Wed, 2012-10-03 at 02:44 -0700, Eric W. Biederman wrote: Linus Torvalds torva...@linux-foundation.org writes: On Tue, Oct 2, 2012 at 4:35 AM, James Morris jmor...@namei.org wrote: Highlights: - Integrity: add local fs integrity verification to detect offline attacks - Integrity:

Re: [GIT] Security subsystem updates for 3.7

2012-10-02 Thread Linus Torvalds
On Tue, Oct 2, 2012 at 4:35 AM, James Morris wrote: > Highlights: > > - Integrity: add local fs integrity verification to detect offline attacks > - Integrity: add digital signature verification Ok, the integrity changes in particular clashed with the new user namespace support by Eric

[GIT] Security subsystem updates for 3.7

2012-10-02 Thread James Morris
Highlights: - Integrity: add local fs integrity verification to detect offline attacks - Integrity: add digital signature verification - Simple stacking of Yama with other LSMs (per LSS discussions) - IBM vTPM support on ppc64 - Add new driver for Infineon I2C TIS TPM - Smack: add rule revocation

[GIT] Security subsystem updates for 3.7

2012-10-02 Thread James Morris
Highlights: - Integrity: add local fs integrity verification to detect offline attacks - Integrity: add digital signature verification - Simple stacking of Yama with other LSMs (per LSS discussions) - IBM vTPM support on ppc64 - Add new driver for Infineon I2C TIS TPM - Smack: add rule revocation

Re: [GIT] Security subsystem updates for 3.7

2012-10-02 Thread Linus Torvalds
On Tue, Oct 2, 2012 at 4:35 AM, James Morris jmor...@namei.org wrote: Highlights: - Integrity: add local fs integrity verification to detect offline attacks - Integrity: add digital signature verification Ok, the integrity changes in particular clashed with the new user namespace support by