Re: [RFC v3 PATCH 0/2] Introduce Security Version to EFI Stub

2017-12-08 Thread Gary Lin
On Thu, Dec 07, 2017 at 02:26:57PM +, Alan Cox wrote: > On Tue, 5 Dec 2017 18:01:46 +0800 > Gary Lin wrote: > > > The series of patches introduce Security Version to EFI stub. > > > > Security Version is a monotonically increasing number and designed to > >

Re: [RFC v3 PATCH 0/2] Introduce Security Version to EFI Stub

2017-12-08 Thread Gary Lin
On Thu, Dec 07, 2017 at 11:35:52AM +0100, Ingo Molnar wrote: > > > * Gary Lin wrote: > > > On Thu, Dec 07, 2017 at 09:18:16AM +0100, Ingo Molnar wrote: > > > > > > * Gary Lin wrote: > > > > > > > On Thu, Dec 07, 2017 at 07:09:27AM

Re: [RFC v3 PATCH 0/2] Introduce Security Version to EFI Stub

2017-12-07 Thread Gary Lin
On Thu, Dec 07, 2017 at 09:18:16AM +0100, Ingo Molnar wrote: > > * Gary Lin wrote: > > > On Thu, Dec 07, 2017 at 07:09:27AM +0100, Ingo Molnar wrote: > > > > > > * Gary Lin wrote: > > > > > > > On Wed, Dec 06, 2017 at 07:37:34PM +01

Re: [RFC v3 PATCH 0/2] Introduce Security Version to EFI Stub

2017-12-06 Thread Gary Lin
On Thu, Dec 07, 2017 at 07:09:27AM +0100, Ingo Molnar wrote: > > * Gary Lin wrote: > > > On Wed, Dec 06, 2017 at 07:37:34PM +0100, Ingo Molnar wrote: > > > > > > * Gary Lin wrote: > > > > > > > On Tue, Dec 05, 2017 at 04:14:26PM -0500, J

Re: [RFC v3 PATCH 0/2] Introduce Security Version to EFI Stub

2017-12-06 Thread Gary Lin
On Wed, Dec 06, 2017 at 07:37:34PM +0100, Ingo Molnar wrote: > > * Gary Lin wrote: > > > On Tue, Dec 05, 2017 at 04:14:26PM -0500, Josh Boyer wrote: > > > On Tue, Dec 5, 2017 at 5:01 AM, Gary Lin wrote: > > > > The series of patches in

Re: [RFC v3 PATCH 0/2] Introduce Security Version to EFI Stub

2017-12-05 Thread Gary Lin
On Tue, Dec 05, 2017 at 04:14:26PM -0500, Josh Boyer wrote: > On Tue, Dec 5, 2017 at 5:01 AM, Gary Lin wrote: > > The series of patches introduce Security Version to EFI stub. > > > > Security Version is a monotonically increasing number and designed to > > preve

[RFC v3 PATCH 2/2] arm64/efi: Introduce Security Version to ARM64

2017-12-05 Thread Gary Lin
4K padding area of the EFI header. (*) PE Format: The .rsrc Section https://msdn.microsoft.com/zh-tw/library/windows/desktop/ms680547(v=vs.85).aspx#the_.rsrc_section Cc: Catalin Marinas Cc: Will Deacon Cc: Matt Fleming Cc: Ard Biesheuvel Cc: Joey Lee Signed-off-by: Gary Lin --- arch

[RFC v3 PATCH 0/2] Introduce Security Version to EFI Stub

2017-12-05 Thread Gary Lin
Kconfig names and add help. - Remove the signer name hack in build.c. Cc: "H. Peter Anvin" Cc: Thomas Gleixner Cc: Ard Biesheuvel Cc: Ingo Molnar Cc: Matt Fleming Cc: Catalin Marinas Cc: Will Deacon Cc: Joey Lee Signed-off-by: Gary Lin Gary Lin (2): x86/efi: Introduce

[RFC v3 PATCH 1/2] x86/efi: Introduce Security Version to x86

2017-12-05 Thread Gary Lin
s680547(v=vs.85).aspx#the_.rsrc_section Cc: "H. Peter Anvin" Cc: Thomas Gleixner Cc: Ard Biesheuvel Cc: Ingo Molnar Cc: Matt Fleming Cc: Joey Lee Signed-off-by: Gary Lin --- arch/x86/boot/header.S | 55 drivers/firmware/efi/Kconfig

Re: [RFC v2 PATCH] x86/boot: Add the secdata section to the setup header

2017-10-02 Thread Gary Lin
On Fri, Sep 08, 2017 at 01:59:00PM -0700, h...@zytor.com wrote: > On September 8, 2017 2:45:10 AM PDT, Gary Lin wrote: > >On Thu, Sep 07, 2017 at 02:16:21PM -0700, h...@zytor.com wrote: > >> On September 7, 2017 2:44:51 AM PDT, Gary Lin wrote: > >> >On Thu, Jun 01,

Re: [RFC v2 PATCH] x86/boot: Add the secdata section to the setup header

2017-09-10 Thread Gary Lin
On Fri, Sep 08, 2017 at 01:59:00PM -0700, h...@zytor.com wrote: > On September 8, 2017 2:45:10 AM PDT, Gary Lin wrote: > >On Thu, Sep 07, 2017 at 02:16:21PM -0700, h...@zytor.com wrote: > >> On September 7, 2017 2:44:51 AM PDT, Gary Lin wrote: > >> >On Thu, Jun 01,

Re: [RFC v2 PATCH] x86/boot: Add the secdata section to the setup header

2017-09-08 Thread Gary Lin
On Thu, Sep 07, 2017 at 02:16:21PM -0700, h...@zytor.com wrote: > On September 7, 2017 2:44:51 AM PDT, Gary Lin wrote: > >On Thu, Jun 01, 2017 at 08:46:26AM +, Ard Biesheuvel wrote: > >> On 1 June 2017 at 08:11, Gary Lin wrote: > >> > On Fri, May 12, 2017 at 04

Re: [RFC v2 PATCH] x86/boot: Add the secdata section to the setup header

2017-09-07 Thread Gary Lin
On Thu, Jun 01, 2017 at 08:46:26AM +, Ard Biesheuvel wrote: > On 1 June 2017 at 08:11, Gary Lin wrote: > > On Fri, May 12, 2017 at 04:05:34PM +0800, Gary Lin wrote: > >> A new section, secdata, in the setup header is introduced to store the > >> distro-specifi

[RFC v2 PATCH] x86/boot: Add the secdata section to the setup header

2017-07-09 Thread Gary Lin
elp. - Remove the signer name hack in build.c. Cc: Ard Biesheuvel Cc: "H. Peter Anvin" Cc: Thomas Gleixner Cc: Ingo Molnar Cc: Joey Lee Signed-off-by: Gary Lin --- arch/x86/Kconfig | 28 arch/x86/boot/header.S| 14 +

Re: [RFC v2 PATCH] x86/boot: Add the secdata section to the setup header

2017-06-01 Thread Gary Lin
On Thu, Jun 01, 2017 at 08:46:26AM +, Ard Biesheuvel wrote: > On 1 June 2017 at 08:11, Gary Lin wrote: > > On Fri, May 12, 2017 at 04:05:34PM +0800, Gary Lin wrote: > >> A new section, secdata, in the setup header is introduced to store the > >> distro-specifi

Re: [RFC v2 PATCH] x86/boot: Add the secdata section to the setup header

2017-06-01 Thread Gary Lin
On Fri, May 12, 2017 at 04:05:34PM +0800, Gary Lin wrote: > A new section, secdata, in the setup header is introduced to store the > distro-specific security version which is designed to help the > bootloader to warn the user when loading a less secure or vulnerable > kernel. The sec

[RFC v2 PATCH] x86/boot: Add the secdata section to the setup header

2017-05-12 Thread Gary Lin
: "H. Peter Anvin" Cc: Thomas Gleixner Cc: Ingo Molnar Cc: Joey Lee Signed-off-by: Gary Lin --- arch/x86/Kconfig | 28 arch/x86/boot/header.S| 14 +- arch/x86/boot/setup.ld| 1 + arch/x86/boot

Re: [RFC PATCH] x86/boot: Add the secdata section to the setup header

2017-05-07 Thread Gary Lin
On Sat, May 06, 2017 at 01:34:49PM -0400, Brian Gerst wrote: > On Fri, May 5, 2017 at 5:26 AM, Gary Lin wrote: > > This is a different approach to replace my previous implementation of > > Security Version(*). Instead of using the fields in the PE/COFF header, > > this commi

Re: [RFC PATCH] x86/boot: Add the secdata section to the setup header

2017-05-07 Thread Gary Lin
On Sat, May 06, 2017 at 01:12:10AM -0700, h...@zytor.com wrote: > On May 5, 2017 2:26:39 AM PDT, Gary Lin wrote: > >This is a different approach to replace my previous implementation of > >Security Version(*). Instead of using the fields in the PE/COFF header, > >this commi

[RFC PATCH] x86/boot: Add the secdata section to the setup header

2017-05-05 Thread Gary Lin
t's flexible to change. Any comment and suggestion are welcome. (*) https://github.com/lcp/shim/wiki/Security-Version Cc: Ard Biesheuvel Cc: "H. Peter Anvin" Cc: Thomas Gleixner Cc: Ingo Molnar Cc: Joey Lee Signed-off-by: Gary Lin --- arch/x86/Kconfig | 14

Re: [PATCH v2] efi: Config options to assign versions in the PE-COFF header

2017-04-17 Thread Gary Lin
On Mon, Apr 17, 2017 at 11:09:38AM -0700, Roy Franz (HPE) wrote: > On Thu, Apr 13, 2017 at 12:47 AM, Gary Lin wrote: > > On Thu, Apr 13, 2017 at 08:26:04AM +0100, Ard Biesheuvel wrote: > >> On 13 April 2017 at 04:58, Gary Lin wrote: > >> > This commit adds the n

Re: [RFC PATCH] x86: Config options to assign versions in the PE-COFF header

2017-04-13 Thread Gary Lin
On Thu, Apr 13, 2017 at 03:21:20PM -0700, h...@zytor.com wrote: > On April 11, 2017 3:20:41 AM PDT, Gary Lin wrote: > >This commit adds the new config options to allow the user to modify the > >following fields in the PE-COFF header. > > > >UINT16 MajorOpera

Re: [PATCH v2] efi: Config options to assign versions in the PE-COFF header

2017-04-13 Thread Gary Lin
On Thu, Apr 13, 2017 at 08:26:04AM +0100, Ard Biesheuvel wrote: > On 13 April 2017 at 04:58, Gary Lin wrote: > > This commit adds the new config options to allow the user to modify the > > following fields in the PE-COFF header. > > > > UINT16 MajorOperat

[PATCH v2] efi: Config options to assign versions in the PE-COFF header

2017-04-12 Thread Gary Lin
ey Lee Cc: Vojtech Pavlik Signed-off-by: Gary Lin --- arch/arm/Kconfig | 24 arch/arm/boot/compressed/efi-header.S | 8 arch/arm64/Kconfig| 24 arch/arm64/kernel/head.S | 8

Re: [RFC PATCH] x86: Config options to assign versions in the PE-COFF header

2017-04-11 Thread Gary Lin
On Tue, Apr 11, 2017 at 06:37:54PM +0100, Ard Biesheuvel wrote: > On 11 April 2017 at 11:20, Gary Lin wrote: > > This commit adds the new config options to allow the user to modify the > > following fields in the PE-COFF header. > > > > UINT16 MajorOperat

[RFC PATCH] x86: Config options to assign versions in the PE-COFF header

2017-04-11 Thread Gary Lin
: Thomas Gleixner Cc: Ingo Molnar Cc: "H. Peter Anvin" Cc: Masahiro Yamada Cc: Michal Marek Cc: Matt Fleming Cc: Ard Biesheuvel Cc: Joey Lee Cc: Vojtech Pavlik Signed-off-by: Gary Lin Tested-by: Joey Lee --- arch/x86/Kconfig | 24 +++ arch/x86/boot/Makefile | 10 ++

[PATCH] bpf: update the comment about the length of analysis

2017-03-01 Thread Gary Lin
ned-off-by: Gary Lin --- kernel/bpf/verifier.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/kernel/bpf/verifier.c b/kernel/bpf/verifier.c index cdc43b899f28..0960f65c6da7 100644 --- a/kernel/bpf/verifier.c +++ b/kernel/bpf/verifier.c @@ -33,7 +33,7 @@ * - out of bounds or