Re: [PATCH V2 01/10] Secure boot: Add new capability

2012-10-20 Thread Matt Fleming
On Sat, 2012-10-20 at 08:15 +0800, joeyli wrote: > Hi Matt, > > Sorry for bother you! > > I didn't see this Matthew's patchset merged in EFI git tree. Do you have > plan to merge it? Or those patches need wait different subsystem leaders > merge. I don't think it makes sense for the secure

Re: [PATCH V2 01/10] Secure boot: Add new capability

2012-10-20 Thread Matt Fleming
On Sat, 2012-10-20 at 08:15 +0800, joeyli wrote: Hi Matt, Sorry for bother you! I didn't see this Matthew's patchset merged in EFI git tree. Do you have plan to merge it? Or those patches need wait different subsystem leaders merge. I don't think it makes sense for the secure boot patch

Re: [PATCH V2 01/10] Secure boot: Add new capability

2012-10-19 Thread joeyli
Hi Matt, Sorry for bother you! I didn't see this Matthew's patchset merged in EFI git tree. Do you have plan to merge it? Or those patches need wait different subsystem leaders merge. Thanks a lot! Joey Lee 於 四，2012-09-20 於 10:40 -0400，Matthew Garrett 提到： > Secure boot adds certain policy

Re: [PATCH V2 01/10] Secure boot: Add new capability

2012-10-19 Thread joeyli
Hi Matt, Sorry for bother you! I didn't see this Matthew's patchset merged in EFI git tree. Do you have plan to merge it? Or those patches need wait different subsystem leaders merge. Thanks a lot! Joey Lee 於 四，2012-09-20 於 10:40 -0400，Matthew Garrett 提到： Secure boot adds certain policy

Re: [PATCH V2 01/10] Secure boot: Add new capability

2012-09-27 Thread Serge Hallyn
Quoting Matthew Garrett (m...@redhat.com): > Secure boot adds certain policy requirements, including that root must not > be able to do anything that could cause the kernel to execute arbitrary code. > The simplest way to handle this would seem to be to add a new capability > and gate various

Re: [PATCH V2 01/10] Secure boot: Add new capability

2012-09-27 Thread Serge Hallyn
Quoting Matthew Garrett (m...@redhat.com): Secure boot adds certain policy requirements, including that root must not be able to do anything that could cause the kernel to execute arbitrary code. The simplest way to handle this would seem to be to add a new capability and gate various

[PATCH V2 01/10] Secure boot: Add new capability

2012-09-20 Thread Matthew Garrett
Secure boot adds certain policy requirements, including that root must not be able to do anything that could cause the kernel to execute arbitrary code. The simplest way to handle this would seem to be to add a new capability and gate various functionality on that. We'll then strip it from the

[PATCH V2 01/10] Secure boot: Add new capability

2012-09-20 Thread Matthew Garrett
Secure boot adds certain policy requirements, including that root must not be able to do anything that could cause the kernel to execute arbitrary code. The simplest way to handle this would seem to be to add a new capability and gate various functionality on that. We'll then strip it from the