Re: [PATCH] IMA: Handle early boot data measurement

2020-08-25 Thread Mimi Zohar
On Tue, 2020-08-25 at 12:35 -0700, Lakshmi Ramasubramanian wrote: > On 8/25/20 11:03 AM, Mimi Zohar wrote: > > On Tue, 2020-08-25 at 10:55 -0700, Lakshmi Ramasubramanian wrote: > > > On 8/25/20 10:42 AM, Mimi Zohar wrote: > > > > > > > > > Please limit the changes in this patch to renaming the fun

Re: [PATCH] IMA: Handle early boot data measurement

2020-08-25 Thread Lakshmi Ramasubramanian
On 8/25/20 11:03 AM, Mimi Zohar wrote: On Tue, 2020-08-25 at 10:55 -0700, Lakshmi Ramasubramanian wrote: On 8/25/20 10:42 AM, Mimi Zohar wrote: Please limit the changes in this patch to renaming the functions and/or files. For example, adding "measure_payload_hash" should be a separate patch,

Re: [PATCH] IMA: Handle early boot data measurement

2020-08-25 Thread Mimi Zohar
On Tue, 2020-08-25 at 10:55 -0700, Lakshmi Ramasubramanian wrote: > On 8/25/20 10:42 AM, Mimi Zohar wrote: > > > > > Please limit the changes in this patch to renaming the functions and/or > > > > files. For example, adding "measure_payload_hash" should be a separate > > > > patch, not hidden her

Re: [PATCH] IMA: Handle early boot data measurement

2020-08-25 Thread Lakshmi Ramasubramanian
On 8/25/20 10:42 AM, Mimi Zohar wrote: Please limit the changes in this patch to renaming the functions and/or files. For example, adding "measure_payload_hash" should be a separate patch, not hidden here. Thanks for the feedback Mimi. I'll split this into 2 patches: PATCH 1: Rename files

Re: [PATCH] IMA: Handle early boot data measurement

2020-08-25 Thread Mimi Zohar
On Tue, 2020-08-25 at 08:46 -0700, Lakshmi Ramasubramanian wrote: > On 8/25/20 8:40 AM, Mimi Zohar wrote: > > On Fri, 2020-08-21 at 16:12 -0700, Lakshmi Ramasubramanian wrote: > > > The current implementation of early boot measurement in > > > the IMA subsystem is very specific to asymmetric keys.

Re: [PATCH] IMA: Handle early boot data measurement

2020-08-25 Thread Lakshmi Ramasubramanian
On 8/25/20 8:40 AM, Mimi Zohar wrote: On Fri, 2020-08-21 at 16:12 -0700, Lakshmi Ramasubramanian wrote: The current implementation of early boot measurement in the IMA subsystem is very specific to asymmetric keys. It does not handle early boot measurement of data from other subsystems such as L

Re: [PATCH] IMA: Handle early boot data measurement

2020-08-25 Thread Mimi Zohar
On Fri, 2020-08-21 at 16:12 -0700, Lakshmi Ramasubramanian wrote: > The current implementation of early boot measurement in > the IMA subsystem is very specific to asymmetric keys. It does not > handle early boot measurement of data from other subsystems such as > Linux Security Module (LSM), Devic

[PATCH] IMA: Handle early boot data measurement

2020-08-21 Thread Lakshmi Ramasubramanian
The current implementation of early boot measurement in the IMA subsystem is very specific to asymmetric keys. It does not handle early boot measurement of data from other subsystems such as Linux Security Module (LSM), Device-Mapper, etc. As a result data, provided by these subsystems during syste