Re: [PATCH] RTIC: selinux: ARM64: Move selinux_state to a separate page

2021-03-04 Thread Paul Moore
On Tue, Feb 16, 2021 at 5:19 AM Preeti Nagar wrote: > > The changes introduce a new security feature, RunTime Integrity Check > (RTIC), designed to protect Linux Kernel at runtime. The motivation > behind these changes is: > 1. The system protection offered by Security Enhancements(SE) for >

Re: [PATCH] RTIC: selinux: ARM64: Move selinux_state to a separate page

2021-02-22 Thread Marc Zyngier
On Mon, 22 Feb 2021 04:58:41 +, pna...@codeaurora.org wrote: > > On 2021-02-17 15:45, Marc Zyngier wrote: [...] > > +1 on that. Even if, as I suspect, this is targeting some unspecified > > hypervisor that is not KVM, the first course of action should be for > > this to be implemented in

Re: [PATCH] RTIC: selinux: ARM64: Move selinux_state to a separate page

2021-02-22 Thread peter enderborg
On 2/17/21 10:42 AM, Will Deacon wrote: > [Please include arm64 and kvm folks for threads involving the stage-2 MMU] > > On Tue, Feb 16, 2021 at 03:47:52PM +0530, Preeti Nagar wrote: >> The changes introduce a new security feature, RunTime Integrity Check >> (RTIC), designed to protect Linux

Re: [PATCH] RTIC: selinux: ARM64: Move selinux_state to a separate page

2021-02-21 Thread pnagar
On 2021-02-17 15:23, Ard Biesheuvel wrote: On Wed, 17 Feb 2021 at 10:42, Will Deacon wrote: [Please include arm64 and kvm folks for threads involving the stage-2 MMU] On Tue, Feb 16, 2021 at 03:47:52PM +0530, Preeti Nagar wrote: > The changes introduce a new security feature, RunTime

Re: [PATCH] RTIC: selinux: ARM64: Move selinux_state to a separate page

2021-02-21 Thread pnagar
On 2021-02-16 23:39, Nick Desaulniers wrote: On Tue, Feb 16, 2021 at 2:19 AM Preeti Nagar wrote: The changes introduce a new security feature, RunTime Integrity Check (RTIC), designed to protect Linux Kernel at runtime. The motivation behind these changes is: 1. The system protection offered

Re: [PATCH] RTIC: selinux: ARM64: Move selinux_state to a separate page

2021-02-21 Thread pnagar
On 2021-02-17 02:02, Miguel Ojeda wrote: On Tue, Feb 16, 2021 at 11:22 AM Preeti Nagar wrote: The changes introduce a new security feature, RunTime Integrity Check (RTIC), designed to protect Linux Kernel at runtime. The motivation behind these changes is: 1. The system protection offered by

Re: [PATCH] RTIC: selinux: ARM64: Move selinux_state to a separate page

2021-02-21 Thread pnagar
On 2021-02-17 15:45, Marc Zyngier wrote: On 2021-02-17 09:42, Will Deacon wrote: [Please include arm64 and kvm folks for threads involving the stage-2 MMU] On Tue, Feb 16, 2021 at 03:47:52PM +0530, Preeti Nagar wrote: The changes introduce a new security feature, RunTime Integrity Check

Re: [PATCH] RTIC: selinux: ARM64: Move selinux_state to a separate page

2021-02-17 Thread Marc Zyngier
On 2021-02-17 09:42, Will Deacon wrote: [Please include arm64 and kvm folks for threads involving the stage-2 MMU] On Tue, Feb 16, 2021 at 03:47:52PM +0530, Preeti Nagar wrote: The changes introduce a new security feature, RunTime Integrity Check (RTIC), designed to protect Linux Kernel at

Re: [PATCH] RTIC: selinux: ARM64: Move selinux_state to a separate page

2021-02-17 Thread Ard Biesheuvel
On Wed, 17 Feb 2021 at 10:42, Will Deacon wrote: > > [Please include arm64 and kvm folks for threads involving the stage-2 MMU] > > On Tue, Feb 16, 2021 at 03:47:52PM +0530, Preeti Nagar wrote: > > The changes introduce a new security feature, RunTime Integrity Check > > (RTIC), designed to

Re: [PATCH] RTIC: selinux: ARM64: Move selinux_state to a separate page

2021-02-17 Thread Will Deacon
[Please include arm64 and kvm folks for threads involving the stage-2 MMU] On Tue, Feb 16, 2021 at 03:47:52PM +0530, Preeti Nagar wrote: > The changes introduce a new security feature, RunTime Integrity Check > (RTIC), designed to protect Linux Kernel at runtime. The motivation > behind these

Re: [PATCH] RTIC: selinux: ARM64: Move selinux_state to a separate page

2021-02-16 Thread Miguel Ojeda
On Tue, Feb 16, 2021 at 11:22 AM Preeti Nagar wrote: > > The changes introduce a new security feature, RunTime Integrity Check > (RTIC), designed to protect Linux Kernel at runtime. The motivation > behind these changes is: > 1. The system protection offered by Security Enhancements(SE) for >

Re: [PATCH] RTIC: selinux: ARM64: Move selinux_state to a separate page

2021-02-16 Thread Nick Desaulniers
On Tue, Feb 16, 2021 at 2:19 AM Preeti Nagar wrote: > > The changes introduce a new security feature, RunTime Integrity Check > (RTIC), designed to protect Linux Kernel at runtime. The motivation > behind these changes is: > 1. The system protection offered by Security Enhancements(SE) for >

[PATCH] RTIC: selinux: ARM64: Move selinux_state to a separate page

2021-02-16 Thread Preeti Nagar
The changes introduce a new security feature, RunTime Integrity Check (RTIC), designed to protect Linux Kernel at runtime. The motivation behind these changes is: 1. The system protection offered by Security Enhancements(SE) for Android relies on the assumption of kernel integrity. If the kernel