Re: [PATCH V2 07/10] Secure boot: Add a dummy kernel parameter that will switch on Secure Boot mode

2012-09-27 Thread Serge Hallyn
Quoting Matthew Garrett (m...@redhat.com): > From: Josh Boyer > > This forcibly drops CAP_COMPROMISE_KERNEL from both cap_permitted and cap_bset > in the init_cred struct, which everything else inherits from. This works on > any machine and can be used to develop even if the box doesn't have UEF

Re: [PATCH V2 07/10] Secure boot: Add a dummy kernel parameter that will switch on Secure Boot mode

2012-09-21 Thread joeyli
於 四，2012-09-20 於 10:41 -0400，Matthew Garrett 提到： > From: Josh Boyer > > This forcibly drops CAP_COMPROMISE_KERNEL from both cap_permitted and cap_bset > in the init_cred struct, which everything else inherits from. This works on > any machine and can be used to develop even if the box doesn't ha

Re: [PATCH V2 07/10] Secure boot: Add a dummy kernel parameter that will switch on Secure Boot mode

2012-09-20 Thread Josh Boyer
On Thu, Sep 20, 2012 at 05:32:37PM +0100, Greg KH wrote: > On Thu, Sep 20, 2012 at 10:41:02AM -0400, Matthew Garrett wrote: > > From: Josh Boyer > > > > This forcibly drops CAP_COMPROMISE_KERNEL from both cap_permitted and > > cap_bset > > in the init_cred struct, which everything else inherits

Re: [PATCH V2 07/10] Secure boot: Add a dummy kernel parameter that will switch on Secure Boot mode

2012-09-20 Thread Greg KH
On Thu, Sep 20, 2012 at 10:41:02AM -0400, Matthew Garrett wrote: > From: Josh Boyer > > This forcibly drops CAP_COMPROMISE_KERNEL from both cap_permitted and cap_bset > in the init_cred struct, which everything else inherits from. This works on > any machine and can be used to develop even if th

[PATCH V2 07/10] Secure boot: Add a dummy kernel parameter that will switch on Secure Boot mode

2012-09-20 Thread Matthew Garrett
From: Josh Boyer This forcibly drops CAP_COMPROMISE_KERNEL from both cap_permitted and cap_bset in the init_cred struct, which everything else inherits from. This works on any machine and can be used to develop even if the box doesn't have UEFI. Signed-off-by: Josh Boyer --- kernel/cred.c | 1