Re: [PATCH 6/6] ima: Support appended signatures for appraisal

2017-04-27 Thread Mehmet Kayaalp
> On Apr 27, 2017, at 5:41 PM, Thiago Jung Bauermann > wrote: > > Am Mittwoch, 26. April 2017, 18:18:34 BRT schrieb Mehmet Kayaalp: >>> On Apr 20, 2017, at 7:41 PM, Thiago Jung Bauermann >>> wrote: >>> >>> This patch introduces the appended_imasig keyword to the IMA policy syntax >>> to speci

Re: [PATCH 6/6] ima: Support appended signatures for appraisal

2017-04-27 Thread Thiago Jung Bauermann
Am Mittwoch, 26. April 2017, 18:18:34 BRT schrieb Mehmet Kayaalp: > > On Apr 20, 2017, at 7:41 PM, Thiago Jung Bauermann > > wrote: > > > > This patch introduces the appended_imasig keyword to the IMA policy syntax > > to specify that a given hook should expect the file to have the IMA > > signat

Re: [PATCH 6/6] ima: Support appended signatures for appraisal

2017-04-26 Thread Mehmet Kayaalp
> On Apr 20, 2017, at 7:41 PM, Thiago Jung Bauermann > wrote: > > This patch introduces the appended_imasig keyword to the IMA policy syntax > to specify that a given hook should expect the file to have the IMA > signature appended to it. Here is how it can be used in a rule: > > appraise func

Re: [PATCH 6/6] ima: Support appended signatures for appraisal

2017-04-26 Thread Thiago Jung Bauermann
Hello Mimi, Thanks for your review. Am Mittwoch, 26. April 2017, 07:21:19 BRT schrieb Mimi Zohar: > On Tue, 2017-04-18 at 17:17 -0300, Thiago Jung Bauermann wrote: > > This patch introduces the appended_imasig keyword to the IMA policy syntax > > to specify that a given hook should expect the fil

Re: [PATCH 6/6] ima: Support appended signatures for appraisal

2017-04-26 Thread Mimi Zohar
Hi Thiago, On Tue, 2017-04-18 at 17:17 -0300, Thiago Jung Bauermann wrote: > This patch introduces the appended_imasig keyword to the IMA policy syntax > to specify that a given hook should expect the file to have the IMA > signature appended to it. Here is how it can be used in a rule: > > appr

Re: [PATCH 6/6] ima: Support appended signatures for appraisal

2017-04-20 Thread Thiago Jung Bauermann
AISE_APPENDED_SIG=y -- Thiago Jung Bauermann IBM Linux Technology Center >From e2d3143b13d6601f6a1f4936dfb569a04a1ce0cc Mon Sep 17 00:00:00 2001 From: Thiago Jung Bauermann Date: Mon, 20 Mar 2017 11:08:21 -0300 Subject: [PATCH 6/6] ima: Support appended signatures for appraisal This pat

Re: [PATCH 6/6] ima: Support appended signatures for appraisal

2017-04-19 Thread kbuild test robot
Hi Thiago, [auto build test ERROR on security/next] [also build test ERROR on v4.11-rc7 next-20170419] [cannot apply to integrity/next] [if your patch is applied to the wrong git tree, please drop us a note to help improve the system] url: https://github.com/0day-ci/linux/commits/Thiago-Jung

[PATCH 6/6] ima: Support appended signatures for appraisal

2017-04-18 Thread Thiago Jung Bauermann
This patch introduces the appended_imasig keyword to the IMA policy syntax to specify that a given hook should expect the file to have the IMA signature appended to it. Here is how it can be used in a rule: appraise func=KEXEC_KERNEL_CHECK appraise_type=appended_imasig appraise func=KEXEC_KERNEL_C