Re: [PATCH 10/15] acpi: Ignore acpi_rsdp kernel parameter in a secure boot environment

2013-02-20 Thread Josh Boyer
On Sun, Feb 17, 2013 at 05:00:23PM +0800, Dave Young wrote: > On Tue, Jan 29, 2013 at 12:42 AM, Matthew Garrett > wrote: > > From: Josh Boyer > > > > This option allows userspace to pass the RSDP address to the kernel. This > > could potentially be used to circumve

[PATCH] bluetooth: Add support for atheros 04ca:3004 device to ath3k

2013-02-19 Thread Josh Boyer
...@mail.ru Signed-off-by: Josh Boyer --- drivers/bluetooth/ath3k.c | 2 ++ drivers/bluetooth/btusb.c | 1 + 2 files changed, 3 insertions(+) diff --git a/drivers/bluetooth/ath3k.c b/drivers/bluetooth/ath3k.c index 33c9a44..b9908dd 100644 --- a/drivers/bluetooth/ath3k.c +++ b/drivers/bluetooth/ath3k.c

Re: [GIT PULL] (xen) bug-fixes for v3.8-rc7

2013-02-14 Thread Josh Boyer
On Wed, Feb 13, 2013 at 3:50 PM, Konrad Rzeszutek Wilk wrote: > - CVE-2013-0228/XSA-42: x86/xen: don't assume %ds is usable in xen_iret for > 32-bit PVOPS. > Jan Beulich (1): > x86/xen: don't assume %ds is usable in xen_iret for 32-bit PVOPS. Should that one be CC'd to stable? josh -- T

[PATCH] pstore: Create a convenient mount point for pstore

2013-02-11 Thread Josh Boyer
s will put pstore on par with things like cgroups and efivarfs. Signed-off-by: Josh Boyer --- Documentation/ABI/testing/pstore | 10 +- fs/pstore/inode.c| 18 +- 2 files changed, 22 insertions(+), 6 deletions(-) diff --git a/Documentation/ABI/testin

Re: Odd ENOMEM being returned in 3.8-rcX

2013-02-08 Thread Josh Boyer
: "Eric W. Biederman" Tested-by: Josh Boyer > --- > kernel/pid.c |2 +- > 1 files changed, 1 insertions(+), 1 deletions(-) > > diff --git a/kernel/pid.c b/kernel/pid.c > index de9af60..f2c6a68 100644 > --- a/kernel/pid.c > +++ b/kernel/pid.c > @@ -331,7 +33

Re: Odd ENOMEM being returned in 3.8-rcX

2013-02-08 Thread Josh Boyer
On Fri, Feb 08, 2013 at 12:45:47PM -0800, Eric W. Biederman wrote: > Josh Boyer writes: > > > < Two emails fly past each other in the night > > > Yep. > > >> My best guess in some dark corner of mock has untested code to unshare a > >> pid namespace

Re: [PATCH] x86: Lock down MSR writing in secure boot

2013-02-08 Thread Josh Boyer
On Fri, Feb 8, 2013 at 4:07 PM, Matthew Garrett wrote: > On Fri, 2013-02-08 at 13:02 -0800, Kees Cook wrote: > >> I don't find it unreasonable to drop all caps and lose access to >> sensitive things. :) That's sort of the point, really. I think a cap >> is the best match. It seems like it should e

Re: Odd ENOMEM being returned in 3.8-rcX

2013-02-08 Thread Josh Boyer
On Fri, Feb 08, 2013 at 12:36:08PM -0800, Eric W. Biederman wrote: > Josh Boyer writes: > >> OK. I've bisected this down to: > >> > >> 50804fe3737ca6a5942fdc2057a18a8141d00141 is the first bad commit > >> commit 50804fe3737ca6a5942fdc2057a18a8141d001

Re: Odd ENOMEM being returned in 3.8-rcX

2013-02-08 Thread Josh Boyer
On Fri, Feb 08, 2013 at 12:13:09PM -0800, Eric W. Biederman wrote: > Josh Boyer writes: > >> Right, agreed. As I said, I think that is mostly a secondary issue. > >> Hopefully it will be easy to fix once we figure out why we're getting > >> the ENOMEM error

Re: Odd ENOMEM being returned in 3.8-rcX

2013-02-08 Thread Josh Boyer
On Fri, Feb 08, 2013 at 01:19:49PM -0500, Josh Boyer wrote: > On Thu, Feb 07, 2013 at 07:35:01PM -0500, Josh Boyer wrote: > > On Thu, Feb 07, 2013 at 02:15:02PM -0800, Andrew Morton wrote: > > > On Thu, 7 Feb 2013 16:57:42 -0500 > > > Josh Boyer w

Re: Odd ENOMEM being returned in 3.8-rcX

2013-02-08 Thread Josh Boyer
On Thu, Feb 07, 2013 at 07:35:01PM -0500, Josh Boyer wrote: > On Thu, Feb 07, 2013 at 02:15:02PM -0800, Andrew Morton wrote: > > On Thu, 7 Feb 2013 16:57:42 -0500 > > Josh Boyer wrote: > > > > > Hi All, > > > > > > We've hit a weird error in

Re: Odd ENOMEM being returned in 3.8-rcX

2013-02-07 Thread Josh Boyer
On Thu, Feb 07, 2013 at 02:15:02PM -0800, Andrew Morton wrote: > On Thu, 7 Feb 2013 16:57:42 -0500 > Josh Boyer wrote: > > > Hi All, > > > > We've hit a weird error in Fedora using the 3.8-rcX kernels. It seems > > the mock tool is getting back ENO

Odd ENOMEM being returned in 3.8-rcX

2013-02-07 Thread Josh Boyer
Hi All, We've hit a weird error in Fedora using the 3.8-rcX kernels. It seems the mock tool is getting back ENOMEM when doing very simple things that normally just work. The 3.7 kernels on the same userspace work just fine. It seems just running 'mock init -v' is enough to cause the failure. B

Re: Problems with late 3.8-rc5 and 3.8-rc6 on i686

2013-02-07 Thread Josh Boyer
On Wed, Feb 6, 2013 at 8:52 PM, Bruno Wolff III wrote: > On Fri, Feb 01, 2013 at 14:13:32 -0600, > Bruno Wolff III wrote: >> >> I have been testing 3.8 kernels on Fedora. The last good kernel was >> 3.8.0-0.rc5.git1.1.fc19.i686.PAE. I tested 3.8.0-0.rc5.git2.1.fc19.i686.PAE, >> 3.8.0-0.rc5.git3

Re: [PATCH] TTY: do not reset master's packet mode

2013-02-01 Thread Josh Boyer
On Tue, Jan 15, 2013 at 5:26 PM, Jiri Slaby wrote: > Now that login from util-linux is forced to drop all references to a > TTY which it wants to hangup (to reach reference count 1) we are > seeing issues with telnet. When login closes its last reference to the > slave PTY, it also resets packet m

Re: [PATCH] fbcon: fix locking harder

2013-01-25 Thread Josh Boyer
On Thu, Jan 24, 2013 at 8:43 PM, Dave Airlie wrote: > Okay so Alan's patch handled the case where there was no registered fbcon, > however the other path entered in set_con2fb_map pit. > > In there we called fbcon_takeover, but we also took the console lock in a > couple > of places. So push the

Re: Kernel 3.7.* Problerm

2013-01-20 Thread Josh Boyer
On Sun, Jan 20, 2013 at 6:20 AM, Suho Park wrote: > I used the following method since 2.4 version > 1. copy .config from the old kernel > 2. make oldconfig > (2-1. make dep) > 3. make && make modules && make modules_install && make install > and then change the symbolic link of kernel header in /u

Re: [PATCH] MODSIGN: Add TAINT_NOKEY_MODULE

2013-01-16 Thread Josh Boyer
On Wed, Jan 16, 2013 at 02:04:50PM +1030, Rusty Russell wrote: > Josh Boyer writes: > > With module signing enabled but not in enforcing mode, we don't consider > > unsigned modules to be an error. However, if we encounter an unsigned > > module we currently taint

Re: [PATCH] MODSIGN: Add TAINT_NOKEY_MODULE

2013-01-16 Thread Josh Boyer
On Wed, Jan 16, 2013 at 02:04:50PM +1030, Rusty Russell wrote: > Josh Boyer writes: > > With module signing enabled but not in enforcing mode, we don't consider > > unsigned modules to be an error. However, if we encounter an unsigned > > module we currently taint

[PATCH] MODSIGN: Add TAINT_NOKEY_MODULE

2013-01-15 Thread Josh Boyer
similar to the TAINT_OOT_MODULE and TAINT_WARN cases. Reported-by: Frank Ch. Eigler Signed-off-by: Josh Boyer --- include/linux/kernel.h | 1 + kernel/module.c| 4 +++- kernel/panic.c | 3 +++ 3 files changed, 7 insertions(+), 1 deletion(-) diff --git a/include/linux/kernel.h

Re: MODSIGN: Modules fail signature verification with -ENOKEY

2013-01-12 Thread Josh Boyer
On Sat, Jan 12, 2013 at 1:28 AM, Chris Samuel wrote: > /* Please CC, not on LKML */ > > Hi Josh, > > > On 12/01/13 00:44, Josh Boyer wrote: > >> Check the installed modules. A simple: >> >> hexdump -C | tail -n 20 >> >> should be enough

Re: [PATCH] MODSIGN: Warn when sign check fails due to -ENOKEY

2013-01-11 Thread Josh Boyer
On Fri, Jan 11, 2013 at 4:44 AM, Chris Samuel wrote: > /* Please CC me in responses, I am not subscribed to LKML */ > > Currently if a signature check fails on module load due to not having > the appropriate key (-ENOKEY) and we are not doing strict checking > there is no information provided to t

Re: MODSIGN: Modules fail signature verification with -ENOKEY

2013-01-11 Thread Josh Boyer
On Fri, Jan 11, 2013 at 4:41 AM, Chris Samuel wrote: > /* > * Rusty requested I send this to LKML, please CC me in on responses as > * I am not subscribed to LKML for sanity reasons. :-) > */ > > Hi Rusty, David, LKML, > > I suspect this is pilot error, or a deficiency in the Debian/Ubuntu > ma

Re: Pull "Load keys from signed PE binaries" branch into linux-next

2013-01-10 Thread Josh Boyer
e one Kees already made about the public_key_verify_signature_2 function. Feel free to add a: Reviewed-by: Josh Boyer josh -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/major

Re: USB autosuspend vs. URB submission

2013-01-08 Thread Josh Boyer
On Tue, Jan 08, 2013 at 10:51:20AM -0500, Alan Stern wrote: > On Mon, 7 Jan 2013, Josh Boyer wrote: > > > Hi, > > > > We've had a few reports in Fedora of users hitting the WARN_ONCE in > > drivers/usb/core/urb.c that prints a warning about a usb_submit_ur

USB autosuspend vs. URB submission

2013-01-07 Thread Josh Boyer
Hi, We've had a few reports in Fedora of users hitting the WARN_ONCE in drivers/usb/core/urb.c that prints a warning about a usb_submit_urb being called on an active URB. One of them[1] is from the ums_realtek driver and the other[2] is from the uvcvideo driver. However, I noticed that in both i

Re: [PATCH] MODSIGN: Don't taint unless signature enforcing is enabled

2013-01-07 Thread Josh Boyer
On Mon, Jan 07, 2013 at 11:39:47AM +1030, Rusty Russell wrote: > Josh Boyer writes: > > With module signing enabled but not in enforcing mode, we don't consider > > unsigned modules to be an error. However, we only mark sig_ok as true if > > a signature verified. Th

[PATCH] MODSIGN: Don't taint unless signature enforcing is enabled

2013-01-04 Thread Josh Boyer
ables lockdep. Tainting the module and kernel when we don't consider something to be an error seems excessive. This marks sig_ok as true if we aren't in enforcing mode. Reported-by: Frank Ch. Eigler Signed-off-by: Josh Boyer --- kernel/module.c | 4 +++- 1 file changed, 3 insertions

Re: Oops on aoe module removal

2013-01-04 Thread Josh Boyer
On Thu, Jan 03, 2013 at 04:00:46PM -0500, Josh Boyer wrote: > On Thu, Jan 03, 2013 at 02:50:46PM -0600, Ed Cashin wrote: > > >>> The blk_alloc_queue has already done a bdi_init, so do not bdi_init > > >>> again in > > >>> aoeblk_gdalloc. > >

Re: "Hangcheck timer elapsed... GPU hung" in 3.8.0-rc2

2013-01-03 Thread Josh Boyer
On Thu, Jan 3, 2013 at 3:46 PM, J. Bruce Fields wrote: > I got a crash after a few minutes of running 3.8.0-rc2, was able to > switch to a vt and look at dmesg: > > [ 490.962545] [drm:i915_hangcheck_hung] *ERROR* Hangcheck timer elapsed... > GPU hung > [ 490.963019] [drm] capturing error ev

Re: Oops on aoe module removal

2013-01-03 Thread Josh Boyer
On Thu, Jan 03, 2013 at 02:50:46PM -0600, Ed Cashin wrote: > >>> The blk_alloc_queue has already done a bdi_init, so do not bdi_init again > >>> in > >>> aoeblk_gdalloc. > >>> > >>> The patch below applies to v3.5.6, with its v47 aoe driver. On my system > >>> it > >>> eliminates the list_del c

Oops on aoe module removal

2013-01-03 Thread Josh Boyer
Hello, We have a user that has reported an oops when removing the aoe module. This seems to have been happening since the 3.4 kernel, as you can see in this bug: https://bugzilla.redhat.com/show_bug.cgi?id=853064 The recreate steps and oops output from a 3.6.11 kernel is below. Any thoughts on w

[PATCH RESEND] Documentation: kernel-parameters.txt remove capability.disable

2012-12-18 Thread Josh Boyer
Hallyn Signed-off-by: Josh Boyer --- Resend: I sent this back in June. It didn't stick: https://lkml.org/lkml/2012/6/25/538 Documentation/kernel-parameters.txt | 6 -- 1 file changed, 6 deletions(-) diff --git a/Documentation/kernel-parameters.txt b/Documentation/kernel-parameter

Re: [PATCH] fb: Rework locking to fix lock ordering on takeover

2012-12-18 Thread Josh Boyer
On Wed, Nov 21, 2012 at 7:53 AM, Alan Cox wrote: > On Wed, 21 Nov 2012 07:45:45 -0500 > Josh Boyer wrote: > >> On Fri, Nov 16, 2012 at 2:27 PM, Alan Cox wrote: >> > >> > [The fb maintainer appears to be absent at the moment]. >> > >> > This

Re: [ 67/89] drm/radeon: properly track the crtc not_enabled case evergreen_mc_stop()

2012-12-04 Thread Josh Boyer
On Mon, Dec 3, 2012 at 6:40 PM, Deucher, Alexander wrote: >> > The original patches should go into 3.6 kernels as well: >> > >> http://git.kernel.org/?p=linux/kernel/git/torvalds/linux.git;a=commitdiff;h=4 >> a15903db02026728d0cf2755c6fabae16b8db6a >> > >> http://git.kernel.org/?p=linux/kernel/git

Re: [ 67/89] drm/radeon: properly track the crtc not_enabled case evergreen_mc_stop()

2012-12-03 Thread Josh Boyer
On Mon, Dec 3, 2012 at 10:35 AM, Deucher, Alexander wrote: >> -Original Message- >> From: Josh Boyer [mailto:jwbo...@gmail.com] >> Sent: Monday, December 03, 2012 10:25 AM >> To: Ben Hutchings; Greg KH >> Cc: linux-kernel@vger.kernel.org; sta.

Re: [ 67/89] drm/radeon: properly track the crtc not_enabled case evergreen_mc_stop()

2012-12-03 Thread Josh Boyer
On Mon, Dec 3, 2012 at 9:32 AM, Ben Hutchings wrote: > 3.2-stable review patch. If anyone has any objections, please let me know. > > -- > > From: Alex Deucher > > commit 804cc4a0ad3a896ca295f771a28c6eb36ced7903 upstream. > > The save struct is not initialized previously so expli

Re: [GIT PULL 0/8] perf/urgent fixes

2012-11-28 Thread Josh Boyer
On Fri, Nov 23, 2012 at 7:20 PM, Arnaldo Carvalho de Melo wrote: > Hi Ingo, > > Tested using a cross-compiler and directly on a Raspberry pi (ARM) > with > raspbian. > > Please consider pulling. > > - Arnaldo > > The following changes since commit 18423d3562f396206e0928a71177eeb2e

Re: [PATCH] perf tools: fix build for various architectures

2012-11-27 Thread Josh Boyer
On Tue, Nov 27, 2012 at 7:16 AM, Mark Rutland wrote: > The UAPI changes broke the perf tool, and as of 3.7-rc7, it > still won't build for arm: > > In file included from util/../perf.h:81:0, > from util/cache.h:7, > from perf.c:12: >

Re: [PATCH] fb: Rework locking to fix lock ordering on takeover

2012-11-21 Thread Josh Boyer
On Fri, Nov 16, 2012 at 2:27 PM, Alan Cox wrote: > > [The fb maintainer appears to be absent at the moment]. > > This is needed to fix a pile of lockdep splats that now show up because > console_lock() > is being properly audited. Hugh Dickins and Sasha Levin have tested it and > both reports >

Re: [PATCH] UAPI: Strip the _UAPI prefix from header guards during header installation

2012-11-20 Thread Josh Boyer
> /usr/include/linux/sysinfo.h:7:8: note: originally defined here > > Reported-by: Tomasz Torcz > Signed-off-by: David Howells > Acked-by: Josh Boyer It would be good to get this patch into 3.7 so that the installed headers aren't broken in subtle ways. I've c

Re: [GIT pull] perf fixes for 3.7

2012-11-20 Thread Josh Boyer
On Tue, Nov 20, 2012 at 12:07 PM, Thomas Gleixner wrote: > Linus, > > please pull the latest perf-urgent-for-linus git tree from: > >git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git > perf-urgent-for-linus > > * Fix to lookup the installed breakpoint(s) on the correct cpu > * Two fix

Re: [PATCH] Revert "mm: remove __GFP_NO_KSWAPD"

2012-11-20 Thread Josh Boyer
On Fri, Nov 16, 2012 at 3:06 PM, Mel Gorman wrote: > On Fri, Nov 16, 2012 at 02:14:47PM -0500, Josh Boyer wrote: >> On Mon, Nov 12, 2012 at 6:37 AM, Mel Gorman wrote: >> > With "mm: vmscan: scale number of pages reclaimed by reclaim/compaction >> > based on fa

Re: [PATCH] vt: Drop K_OFF for VC_MUTE

2012-11-20 Thread Josh Boyer
red to handle it > throwing -EINVAL for old kernel compatibility, so userspace will degrade > gracefully. > > Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=859485 > Cc: Arthur Taylor > Cc: Greg Kroah-Hartman > Tested-by: Josh Boyer > Signed-off-by: Adam Jackson W

Re: [PATCH 31/32] perf powerpc: Use uapi/unistd.h to fix build error

2012-11-19 Thread Josh Boyer
On Mon, Nov 19, 2012 at 10:07 AM, Arnaldo Carvalho de Melo wrote: > Em Mon, Nov 19, 2012 at 08:29:09AM -0500, Josh Boyer escreveu: >> On Sun, Nov 18, 2012 at 9:29 AM, Arnaldo Carvalho de Melo >> wrote: >> > From: Sukadev Bhattiprolu > >> > Use the 'un

Re: [PATCH 31/32] perf powerpc: Use uapi/unistd.h to fix build error

2012-11-19 Thread Josh Boyer
On Sun, Nov 18, 2012 at 9:29 AM, Arnaldo Carvalho de Melo wrote: > From: Sukadev Bhattiprolu > > Use the 'unistd.h' from arch/powerpc/include/uapi to build the perf tool. This would work for powerpc, but at least s390x and ARM have the same build issue. Why would we fix this piecemeal per-arch?

Re: [PATCH] Revert "mm: remove __GFP_NO_KSWAPD"

2012-11-16 Thread Josh Boyer
On Mon, Nov 12, 2012 at 6:37 AM, Mel Gorman wrote: > With "mm: vmscan: scale number of pages reclaimed by reclaim/compaction > based on failures" reverted, Zdenek Kabelac reported the following > > Hmm, so it's just took longer to hit the problem and observe > kswapd0 spinning on

Re: [GIT PULL] UAPI: perf fixes

2012-11-13 Thread Josh Boyer
On Tue, Nov 13, 2012 at 10:24 AM, David Howells wrote: > Josh Boyer wrote: > >> This patch seems to break building perf on ppc64. It fails with: >> >> + make -j16 -C tools/perf -s V=1 WERROR=0 HAVE_CPLUS_DEMANGLE=1 prefix=/usr >> all >> >> >> &g

Re: [GIT PULL] UAPI: perf fixes

2012-11-13 Thread Josh Boyer
On Tue, Nov 13, 2012 at 6:12 AM, David Howells wrote: > David Howells wrote: > >> Josh Boyer wrote: >> >> > This patch seems to break building perf on ppc64. It fails with: >> >> Hmmm... Getting my hands on an ARM or ppc/ppc64 box running Fedora is a

Re: [GIT PULL] UAPI: perf fixes

2012-11-12 Thread Josh Boyer
On Thu, Nov 8, 2012 at 7:51 AM, David Howells wrote: > > (6) Make perf work for x86 by adding -I flags and changing long #includes > with "../../include" in them into short type things. This patch seems to break building perf on ppc64. It fails with: + make -j16 -C tools/perf -s V=1 WERR

Re: [PATCH v2] MODSIGN: Only sign modules if built in-tree

2012-11-06 Thread Josh Boyer
On Tue, Nov 06, 2012 at 12:04:02PM +1030, Rusty Russell wrote: > Josh Boyer writes: > > On Mon, Nov 05, 2012 at 12:31:39PM +1030, Rusty Russell wrote: > >> Josh Boyer writes: > >> > diff --git a/Makefile b/Makefile > >> > index 14c93b3..7e27d51 100644 &

Re: [PATCH RFC 0/4] Add firmware signature file check

2012-11-05 Thread Josh Boyer
On Mon, Nov 5, 2012 at 12:18 PM, Takashi Iwai wrote: > Hi, > > this is a patch series to add the support for firmware signature > check. At this time, the kernel checks extra signature file (*.sig) > for each firmware, instead of embedded signature. > It's just a quick hack using the existing mod

Re: [PATCH v2] MODSIGN: Only sign modules if built in-tree

2012-11-05 Thread Josh Boyer
On Mon, Nov 05, 2012 at 12:31:39PM +1030, Rusty Russell wrote: > Josh Boyer writes: > > diff --git a/Makefile b/Makefile > > index 14c93b3..7e27d51 100644 > > --- a/Makefile > > +++ b/Makefile > > @@ -722,8 +722,14 @@ export mod_strip_cmd > > ifeq

Re: [PATCH v2] MODSIGN: Only sign modules if built in-tree

2012-11-05 Thread Josh Boyer
On Mon, Nov 05, 2012 at 12:31:39PM +1030, Rusty Russell wrote: > Josh Boyer writes: > > diff --git a/Makefile b/Makefile > > index 14c93b3..7e27d51 100644 > > --- a/Makefile > > +++ b/Makefile > > @@ -722,8 +722,14 @@ export mod_strip_cmd > > ifeq

Re: [PATCH v2] MODSIGN: Add modules_sign make target

2012-11-02 Thread Josh Boyer
On Fri, Nov 02, 2012 at 01:49:14PM +1030, Rusty Russell wrote: > Josh Boyer writes: > > > On Thu, Nov 01, 2012 at 06:03:18PM +1030, Rusty Russell wrote: > >> Josh Boyer writes: > >> > >> > If CONFIG_MODULE_SIG is set, and 'make modules_sign&#

[PATCH v2] MODSIGN: Only sign modules if built in-tree

2012-11-02 Thread Josh Boyer
i/dah di_dynamic.ko] Error 2 will prevent such modules from successfully being installed. This changes the mod_sign_cmd to only sign the modules if they are built in-tree. Those built externally can sign them manually. Reported-by: Bruno Wolff III Suggested-by: Rusty Russell Signed-off-by: Josh

Re: [PATCH] MODSIGN: Only sign modules if built in-tree

2012-11-01 Thread Josh Boyer
On Thu, Nov 01, 2012 at 07:26:55AM -0400, Josh Boyer wrote: > > I prefer something like this (untested): > > > > diff --git a/Makefile b/Makefile > > index 42d0e56..cb66c8d 100644 > > --- a/Makefile > > +++ b/Makefile > > @@ -722,8 +722,14 @@ export mod_s

Re: [PATCH] MODSIGN: Only sign modules if built in-tree

2012-11-01 Thread Josh Boyer
On Thu, Nov 01, 2012 at 05:38:15PM +1030, Rusty Russell wrote: > Josh Boyer writes: > > When building out-of-tree modules, the current modules_install target > > will attempt to sign them if module signing is enabled. This will only > > work if the signing keys are pres

Re: [PATCH v2] MODSIGN: Add modules_sign make target

2012-11-01 Thread Josh Boyer
On Thu, Nov 01, 2012 at 06:03:18PM +1030, Rusty Russell wrote: > Josh Boyer writes: > > > If CONFIG_MODULE_SIG is set, and 'make modules_sign' is called then this > > patch will cause the modules to get a signature appended. The make target > > is intended to

Re: [RFC] Second attempt at kernel secure boot support

2012-10-31 Thread Josh Boyer
On Wed, Oct 31, 2012 at 12:04 PM, Jiri Kosina wrote: > On Wed, 31 Oct 2012, Josh Boyer wrote: > >> I have a patch that disables that. I imagine it will be included in the >> next submission of the patchset. >> >> You can find it here in the meantime: >> &g

Re: [RFC] Second attempt at kernel secure boot support

2012-10-31 Thread Josh Boyer
On Wed, Oct 31, 2012 at 10:50 AM, Jiri Kosina wrote: > On Mon, 29 Oct 2012, Matthew Garrett wrote: > >> > > This is pretty much identical to the first patchset, but with the >> > > capability >> > > renamed (CAP_COMPROMISE_KERNEL) and the kexec patch dropped. If anyone >> > > wants >> > > to dep

[PATCH v2] MODSIGN: Add modules_sign make target

2012-10-31 Thread Josh Boyer
ed to produce signed modules after they have been processed by distribution build scripts. Signed-off-by: Josh Boyer --- v2: Not word-wrapped this time (hopefully) Makefile | 6 ++ scripts/Makefile.modsign | 32 2 files changed, 38 insert

[PATCH] MODSIGN: Only sign modules if built in-tree

2012-10-31 Thread Josh Boyer
dahdi/dahdi_dynamic.ko] Error 2 will prevent such modules from successfully being installed. This changes the mod_sign_cmd to only sign the modules if they are built in-tree. Those built externally can sign them manually. Reported-by: Bruno Wolff III Signed-off-by: Josh Boyer --- Makefile | 4 ++

Re: [PATCH V3 07/10] Secure boot: Add a dummy kernel parameter that will switch on Secure Boot mode

2012-10-30 Thread Josh Boyer
On Mon, Oct 29, 2012 at 05:00:06PM +0800, joeyli wrote: > Hi Josh, > Tahashi has a good idea for use strtobool to allow > 'secureboot_enable=yes' works. Please consider the following change. > > > Thanks a lot! > Joey Lee > > >From f6841a476f3d332fe7b04cb716e0b518cccd5055 Mon Sep 17 00:00:00 20

[PATCH] tools: Allow tools to be installed in a user specified location

2012-10-30 Thread Josh Boyer
location of these tools. Signed-off-by: Josh Boyer --- diff --git a/tools/power/x86/turbostat/Makefile b/tools/power/x86/turbostat/Makefile index f856495..984cc00 100644 --- a/tools/power/x86/turbostat/Makefile +++ b/tools/power/x86/turbostat/Makefile @@ -1,3 +1,5 @@ +DESTDIR ?= + turbostat

Re: RFC: sign the modules at install time

2012-10-19 Thread Josh Boyer
On Thu, Oct 18, 2012 at 9:16 PM, Rusty Russell wrote: > Josh Boyer writes: >> On Thu, Oct 18, 2012 at 2:46 PM, Linus Torvalds >> wrote: >>> On Wed, Oct 17, 2012 at 10:34 PM, Rusty Russell >>> wrote: >>>> >>>> Hacking the keyid and signe

Re: RFC: sign the modules at install time

2012-10-19 Thread Josh Boyer
On Thu, Oct 18, 2012 at 8:48 PM, Rusty Russell wrote: > Josh Boyer writes: >> It might even be able to be moved entirely into scripts/Makefile.modinst >> but I haven't gotten that far yet. > > Thanks, I'll add this. Excellent. > Note it was word-wrapped here

Re: RFC: sign the modules at install time

2012-10-18 Thread Josh Boyer
It might even be able to be moved entirely into scripts/Makefile.modinst but I haven't gotten that far yet. josh --- >From d83055aec38e5717957e621d94fff67241ef803d Mon Sep 17 00:00:00 2001 From: Josh Boyer Date: Mon, 24 Sep 2012 10:46:36 -0400 Subject: [PATCH] MODSIGN: Add modules_sign

Re: RFC: sign the modules at install time

2012-10-18 Thread Josh Boyer
On Thu, Oct 18, 2012 at 03:01:08PM +1030, Rusty Russell wrote: > Linus Torvalds writes: > > On Wed, Oct 17, 2012 at 3:19 PM, David Howells wrote: > >> > >> It's probably even better to just get rid of all the automatic module > >> signing > >> stuff completely and leave the sign-file script for

Re: RFC: sign the modules at install time

2012-10-17 Thread Josh Boyer
On Wed, Oct 17, 2012 at 7:21 PM, Linus Torvalds wrote: > On Wed, Oct 17, 2012 at 4:07 PM, Linus Torvalds > wrote: >> >> Hmm. It *should* work for them too, because the debuginfo modules stay >> around in the object tree, and never get stripped there. None of this >> is different from what we used

Re: RFC: sign the modules at install time

2012-10-17 Thread Josh Boyer
On Wed, Oct 17, 2012 at 7:07 PM, Linus Torvalds wrote: > On Wed, Oct 17, 2012 at 3:26 PM, Josh Boyer wrote: >> >> The downside is that it won't work for distros. Or at least the distros >> using RPM's debuginfo subpackage mechanism. > > Hmm. It *should* wor

Re: RFC: sign the modules at install time

2012-10-17 Thread Josh Boyer
On Wed, Oct 17, 2012 at 4:36 PM, Linus Torvalds wrote: > This was based on the complaint from Davem that the "make > allmodconfig" build got way slower because module signing takes a > while. > > And quite frankly, the whole "extra strip and sign" thing at modpost > time was just nasty ugly code.

Re: USB keyboard backlight powering down.

2012-10-17 Thread Josh Boyer
On Wed, Oct 17, 2012 at 09:09:56AM -0400, Gerry Reno wrote: > >> This was the udev bug I was referring to, which I think is causing the > >> keyboard to have auto-suspend enabled: > >> > >> https://bugzilla.redhat.com/show_bug.cgi?id=825284 > >> > >> udev shouldn't be enabling auto-suspend of USB h

Re: USB keyboard backlight powering down.

2012-10-17 Thread Josh Boyer
On Tue, Oct 16, 2012 at 10:35:24AM -0700, Sarah Sharp wrote: > On Tue, Oct 16, 2012 at 09:54:36AM -0700, Greg Kroah-Hartman wrote: > > On Tue, Oct 16, 2012 at 12:45:56PM -0400, Michael Spang wrote: > > > On Tue, Oct 16, 2012 at 11:20 AM, Dave Jones wrote: > > > > Gerry (CC'd) reported a bug to us

Re: [PATCH 2/2] firmware: Add /proc/fw_path entry to list the firmware paths

2012-10-10 Thread Josh Boyer
On Wed, Oct 10, 2012 at 9:36 AM, Greg Kroah-Hartman wrote: > On Wed, Oct 10, 2012 at 11:56:25AM +0100, Dimitris Papastamos wrote: >> This patch provides the aforementioned procfs file that lists >> the default firmware paths that are used during firmware lookup. >> >> The file contains a white spa

Re: udev breakages - was: Re: Need of an ".async_probe()" type of callback at driver's core - Was: Re: [PATCH] [media] drxk: change it to use request_firmware_nowait()

2012-10-04 Thread Josh Boyer
On Wed, Oct 3, 2012 at 6:58 PM, Linus Torvalds wrote: > On Wed, Oct 3, 2012 at 3:48 PM, Andy Walls wrote: >> >> I don't know if you can remove the /sys/.../firmware ABI altogether, because >> there is at least one, somewhat popular udev replacement that also uses it: >> mdev >> >> http://git.bu

Re: [PATCH] make CONFIG_EXPERIMENTAL invisible and default

2012-10-03 Thread Josh Boyer
On Wed, Oct 3, 2012 at 1:46 PM, Frederic Weisbecker wrote: > On Wed, Oct 03, 2012 at 10:21:42AM -0700, Greg Kroah-Hartman wrote: >> On Wed, Oct 03, 2012 at 09:47:12AM -0700, Paul E. McKenney wrote: >> > On Wed, Oct 03, 2012 at 09:17:02AM -0700, Greg Kroah-Hartman wrote: >> > > On Wed, Oct 03, 2012

Re: [PATCH] make CONFIG_EXPERIMENTAL invisible and default

2012-10-03 Thread Josh Boyer
On Wed, Oct 3, 2012 at 12:15 PM, Kees Cook wrote: > On Wed, Oct 3, 2012 at 6:25 AM, Paul E. McKenney > wrote: >> On Tue, Oct 02, 2012 at 12:50:42PM -0700, Kees Cook wrote: >>> This config item has not carried much meaning for a while now and is >>> almost always enabled by default. As agreed duri

Re: [GIT PULL] Asymmetric keys and module signing

2012-10-02 Thread Josh Boyer
On Tue, Oct 02, 2012 at 12:58:03PM +0930, Rusty Russell wrote: > Josh Boyer writes: > > > On Sat, Sep 29, 2012 at 08:13:25AM +0100, David Howells wrote: > >> Rusty Russell wrote: > >> > >> > [2.808075] Loading module verification cert

Re: [GIT PULL] Asymmetric keys and module signing

2012-10-01 Thread Josh Boyer
On Sat, Sep 29, 2012 at 08:13:25AM +0100, David Howells wrote: > Rusty Russell wrote: > > > [2.808075] Loading module verification certificates > > [2.809331] X.509: Cert 6e03943da0f3b015ba6ed7f5e0cac4fe48680994 has > > expired > > [2.810500] MODSIGN: Problem loading in-kernel X.509

[PATCH V3 07/10] Secure boot: Add a dummy kernel parameter that will switch on Secure Boot mode

2012-09-25 Thread Josh Boyer
This forcibly drops CAP_COMPROMISE_KERNEL from both cap_permitted and cap_bset in the init_cred struct, which everything else inherits from. This works on any machine and can be used to develop even if the box doesn't have UEFI. Signed-off-by: Josh Boyer --- Documentation/kernel-parameter

Re: [PATCH V2 07/10] Secure boot: Add a dummy kernel parameter that will switch on Secure Boot mode

2012-09-20 Thread Josh Boyer
On Thu, Sep 20, 2012 at 05:32:37PM +0100, Greg KH wrote: > On Thu, Sep 20, 2012 at 10:41:02AM -0400, Matthew Garrett wrote: > > From: Josh Boyer > > > > This forcibly drops CAP_COMPROMISE_KERNEL from both cap_permitted and > > cap_bset > > in the init_cred struc

Re: [ 042/108] NFS: Alias the nfs module to nfs4

2012-09-12 Thread Josh Boyer
On Wed, Sep 12, 2012 at 9:24 PM, Myklebust, Trond wrote: > On Wed, 2012-09-12 at 21:08 -0400, Josh Boyer wrote: >> On Wed, Sep 12, 2012 at 7:28 PM, Greg Kroah-Hartman >> wrote: >> > From: Greg KH >> > >> > 3.5-stable review patch. If any

Re: [ 042/108] NFS: Alias the nfs module to nfs4

2012-09-12 Thread Josh Boyer
On Wed, Sep 12, 2012 at 7:28 PM, Greg Kroah-Hartman wrote: > From: Greg KH > > 3.5-stable review patch. If anyone has any objections, please let me know. > > -- > > commit 425e776d93a7a5070b77d4f458a5bab0f924652c upstream. > > This allows distros to remove the line from their mod

Re: [Xen-devel] [PATCH/RFC] Fix xsave bug on older Xen hypervisors

2012-09-11 Thread Josh Boyer
On Tue, Sep 11, 2012 at 7:37 AM, Konrad Rzeszutek Wilk wrote: > On Mon, Sep 10, 2012 at 07:40:47PM -0700, Matt Wilson wrote: >> > Yes, I can verify that a plain upstream kernel has problems in the first >> > place, which is why we are carrying a patch to simply disable xsave all >> > together in t

Re: [PATCH 0/5] Memory policy corruption fixes V2

2012-09-06 Thread Josh Boyer
On Tue, Aug 21, 2012 at 3:29 AM, Mel Gorman wrote: > On Mon, Aug 20, 2012 at 05:36:29PM +0100, Mel Gorman wrote: >> This is a rebase with some small changes to Kosaki's "mempolicy memory >> corruption fixlet" series. I had expected that Kosaki would have revised >> the series by now but it's been

Re: [PATCH 10/11] acpi: Ignore acpi_rsdp kernel parameter in a secure boot environment

2012-09-04 Thread Josh Boyer
On Tue, Sep 04, 2012 at 09:37:32PM +0100, Matthew Garrett wrote: > On Tue, Sep 04, 2012 at 09:37:42PM +0100, Alan Cox wrote: > > > Gotta say this capability name is confusing. Naming is > > > CAP_PRE_SECURE_BOOT or something along the lines might be a better > > > choice. When I just look at this n

Re: Logitech USB headset not working in 3.6-rc3

2012-08-29 Thread Josh Boyer
On Wed, Aug 29, 2012 at 01:07:53PM -0400, Josh Boyer wrote: > > Right. New patch attached. > > I'll try and get another kernel built with this later today. I'm at > Plumbers so it might have to wait a bit. OK, I got impatient with myself and got the kernel building s

Re: Logitech USB headset not working in 3.6-rc3

2012-08-29 Thread Josh Boyer
On Wed, Aug 29, 2012 at 03:32:34PM +0200, Daniel Mack wrote: > On 29.08.2012 15:29, Takashi Iwai wrote: > > At Wed, 29 Aug 2012 13:26:25 +0200, > > Daniel Mack wrote: > >> > >> [1 ] > >> On 25.08.2012 14:17, Josh Boyer wrote: > >>> On Sa

Re: Logitech USB headset not working in 3.6-rc3

2012-08-25 Thread Josh Boyer
On Sat, Aug 25, 2012 at 02:13:58PM +0200, Daniel Mack wrote: > On 25.08.2012 14:07, Bruno Wolff III wrote: > > On Sat, Aug 25, 2012 at 14:02:51 +0200, > >Daniel Mack wrote: > >> > >> Can you revert commit e9ba389c5 ("ALSA: usb-audio: Fix > >> scheduling-while-atomic bug in PCM capture stream")

Re: Logitech USB headset not working in 3.6-rc3

2012-08-25 Thread Josh Boyer
On Sat, Aug 25, 2012 at 07:07:40AM -0500, Bruno Wolff III wrote: > On Sat, Aug 25, 2012 at 14:02:51 +0200, > Daniel Mack wrote: > > > >Can you revert commit e9ba389c5 ("ALSA: usb-audio: Fix > >scheduling-while-atomic bug in PCM capture stream") and see if that > > I can try that, but it takes a

Re: Logitech USB headset not working in 3.6-rc3

2012-08-24 Thread Josh Boyer
On Fri, Aug 24, 2012 at 11:30:12PM +0200, Daniel Mack wrote: > On Fri, Aug 24, 2012 at 9:08 PM, Josh Boyer wrote: > > Hi All, > > > > We've had a report[1] that the Logitech USB headset 0003:046D:0A0C isn't > > working with 3.6-rc3. It seems the last w

Logitech USB headset not working in 3.6-rc3

2012-08-24 Thread Josh Boyer
Hi All, We've had a report[1] that the Logitech USB headset 0003:046D:0A0C isn't working with 3.6-rc3. It seems the last working kernel was based on commit 10c63c9, and it first stopped working with a kernel based on commit 23dcfa6. There are only a few ALSA commits between those revisions, so h

Re: [PATCH] fbcon: fix race condition between console lock and cursor timer

2012-08-21 Thread Josh Boyer
On Tue, Aug 21, 2012 at 2:40 AM, Dave Airlie wrote: > So we've had a fair few reports of fbcon handover breakage between > efi/vesafb and i915 surface recently, so I dedicated a couple of > days to finding the problem. > > Essentially the last thing we saw was the conflicting framebuffer > message

Re: [RFC v2 7/7] modsig: build rules and scripts to generate keys and sign modules

2012-08-20 Thread Josh Boyer
On Mon, Aug 20, 2012 at 9:13 AM, Mimi Zohar wrote: > On Mon, 2012-08-20 at 08:32 -0400, Josh Boyer wrote: >> On Sun, Aug 19, 2012 at 9:05 PM, Mimi Zohar wrote: >> > On Fri, 2012-08-17 at 13:44 -0400, Josh Boyer wrote: >> >> On Fri, Aug 17, 2012 at 1:08 PM, Mimi Z

Re: [RFC v2 7/7] modsig: build rules and scripts to generate keys and sign modules

2012-08-20 Thread Josh Boyer
On Sun, Aug 19, 2012 at 9:05 PM, Mimi Zohar wrote: > On Fri, 2012-08-17 at 13:44 -0400, Josh Boyer wrote: >> On Fri, Aug 17, 2012 at 1:08 PM, Mimi Zohar wrote: >> >> I don't see a need for the kernel make system to ever delete a key. >> >> If one doesn'

Re: [RFC v2 7/7] modsig: build rules and scripts to generate keys and sign modules

2012-08-17 Thread Josh Boyer
On Fri, Aug 17, 2012 at 1:44 PM, Josh Boyer wrote: >> I still think the signed_modules_install script, renamed to something >> like ephemeral_signed_modules_install, is worthwhile and becomes a >> convience tool for the developer, wanting to use ephemeral keys. The >>

Re: [RFC v2 7/7] modsig: build rules and scripts to generate keys and sign modules

2012-08-17 Thread Josh Boyer
On Fri, Aug 17, 2012 at 1:08 PM, Mimi Zohar wrote: >> I don't see a need for the kernel make system to ever delete a key. >> If one doesn't exist, it should create one if the config options are >> set and leave it alone entirely after that. If one exists already, >> then it should leave it alone

Re: [RFC v2 7/7] modsig: build rules and scripts to generate keys and sign modules

2012-08-17 Thread Josh Boyer
On Thu, Aug 16, 2012 at 8:53 PM, Mimi Zohar wrote: >> >> The reason for "signed_modules_install" is to limit existence of private >> >> key. >> >> Private key is generate just before install, modules installed and >> >> signed, then key is destroyed. >> >> So existence of private key is limited t

Re: [RFC v2 7/7] modsig: build rules and scripts to generate keys and sign modules

2012-08-16 Thread Josh Boyer
On Thu, Aug 16, 2012 at 4:12 PM, Kasatkin, Dmitry wrote: >>> 1. signed_modules_install >>> This target creates an ephemeral key pair, signs the kernel modules with >>> the private key, destroys the private key, and embeds the public key in >>> the kernel. (Thanks to Dave Hansen for the target name

<    2   3   4   5   6   7   8   9   >