Re: [PATCH] ima: define '_ima' as a builtin 'trusted' keyring

2013-10-31 Thread Dmitry Kasatkin
On 31/10/13 14:43, Mimi Zohar wrote: > On Thu, 2013-10-31 at 14:23 +0200, Dmitry Kasatkin wrote: >> On 31/10/13 14:03, Mimi Zohar wrote: >>> On Thu, 2013-10-31 at 10:30 +0200, Dmitry Kasatkin wrote: On 30/10/13 20:54, Mimi Zohar wrote: > Require all keys added to the IMA keyring be signed

Re: [PATCH] ima: define '_ima' as a builtin 'trusted' keyring

2013-10-31 Thread Mimi Zohar
On Thu, 2013-10-31 at 14:23 +0200, Dmitry Kasatkin wrote: > On 31/10/13 14:03, Mimi Zohar wrote: > > On Thu, 2013-10-31 at 10:30 +0200, Dmitry Kasatkin wrote: > >> On 30/10/13 20:54, Mimi Zohar wrote: > >>> Require all keys added to the IMA keyring be signed by an > >>> existing trusted key on the

Re: [PATCH] ima: define '_ima' as a builtin 'trusted' keyring

2013-10-31 Thread Dmitry Kasatkin
On 31/10/13 14:03, Mimi Zohar wrote: > On Thu, 2013-10-31 at 10:30 +0200, Dmitry Kasatkin wrote: >> On 30/10/13 20:54, Mimi Zohar wrote: >>> Require all keys added to the IMA keyring be signed by an >>> existing trusted key on the system trusted keyring. >>> >>> Changelog: >>> - define stub integri

Re: [PATCH] ima: define '_ima' as a builtin 'trusted' keyring

2013-10-31 Thread Mimi Zohar
On Thu, 2013-10-31 at 10:30 +0200, Dmitry Kasatkin wrote: > On 30/10/13 20:54, Mimi Zohar wrote: > > Require all keys added to the IMA keyring be signed by an > > existing trusted key on the system trusted keyring. > > > > Changelog: > > - define stub integrity_init_keyring() function (reported-by

Re: [PATCH] ima: define '_ima' as a builtin 'trusted' keyring

2013-10-31 Thread Dmitry Kasatkin
On 30/10/13 20:54, Mimi Zohar wrote: > Require all keys added to the IMA keyring be signed by an > existing trusted key on the system trusted keyring. > > Changelog: > - define stub integrity_init_keyring() function (reported-by Fengguang Wu) > - differentiate between regular and trusted keyring na

[PATCH] ima: define '_ima' as a builtin 'trusted' keyring

2013-10-30 Thread Mimi Zohar
Require all keys added to the IMA keyring be signed by an existing trusted key on the system trusted keyring. Changelog: - define stub integrity_init_keyring() function (reported-by Fengguang Wu) - differentiate between regular and trusted keyring names. - replace printk with pr_info (D. Kasatkin)