Re: [PATCH 02/11] evm: Load EVM key in ima_load_x509() to avoid appraisal

[PATCH 01/11] evm: Execute evm_inode_init_security() only when the HMAC key is loaded · Roberto Sassu <roberto.sassu@huawei.com> · 2020-06-18
[PATCH 02/11] evm: Load EVM key in ima_load_x509() to avoid appraisal · Roberto Sassu <roberto.sassu@huawei.com> · 2020-06-18
Re: [PATCH 02/11] evm: Load EVM key in ima_load_x509() to avoid appraisal · Mimi Zohar <zohar@linux.ibm.com> · 2020-08-21
RE: [PATCH 02/11] evm: Load EVM key in ima_load_x509() to avoid appraisal · Roberto Sassu <roberto.sassu@huawei.com> · 2020-08-31
Re: [PATCH 02/11] evm: Load EVM key in ima_load_x509() to avoid appraisal · Mimi Zohar <zohar@linux.ibm.com> · 2020-08-31
[PATCH 03/11] evm: Refuse EVM_ALLOW_METADATA_WRITES only if the HMAC key is loaded · Roberto Sassu <roberto.sassu@huawei.com> · 2020-06-18
Re: [PATCH 03/11] evm: Refuse EVM_ALLOW_METADATA_WRITES only if the HMAC key is loaded · Mimi Zohar <zohar@linux.ibm.com> · 2020-08-21
RE: [PATCH 03/11] evm: Refuse EVM_ALLOW_METADATA_WRITES only if the HMAC key is loaded · Roberto Sassu <roberto.sassu@huawei.com> · 2020-08-31
Re: [PATCH 03/11] evm: Refuse EVM_ALLOW_METADATA_WRITES only if the HMAC key is loaded · Mimi Zohar <zohar@linux.ibm.com> · 2020-08-31
[PATCH 04/11] evm: Check size of security.evm before using it · Roberto Sassu <roberto.sassu@huawei.com> · 2020-06-18
Re: [PATCH 04/11] evm: Check size of security.evm before using it · Mimi Zohar <zohar@linux.ibm.com> · 2020-08-24
[PATCH 05/11] evm: Allow xattr/attr operations for portable signatures if check fails · Roberto Sassu <roberto.sassu@huawei.com> · 2020-06-18
Re: [PATCH 05/11] evm: Allow xattr/attr operations for portable signatures if check fails · Mimi Zohar <zohar@linux.ibm.com> · 2020-08-24
Re: [PATCH 01/11] evm: Execute evm_inode_init_security() only when the HMAC key is loaded · Mimi Zohar <zohar@linux.ibm.com> · 2020-08-21
Re: [PATCH 01/11] evm: Execute evm_inode_init_security() only when the HMAC key is loaded · Mimi Zohar <zohar@linux.ibm.com> · 2020-08-24
RE: [PATCH 01/11] evm: Execute evm_inode_init_security() only when the HMAC key is loaded · Roberto Sassu <roberto.sassu@huawei.com> · 2020-09-02
Re: [PATCH 01/11] evm: Execute evm_inode_init_security() only when the HMAC key is loaded · Mimi Zohar <zohar@linux.ibm.com> · 2020-09-02

From: Mimi Zohar <zohar@linux.ibm.com>
Date: 2020-08-31 19:27:06
Also in: linux-integrity, lkml

On Mon, 2020-08-31 at 09:44 +0000, Roberto Sassu wrote:

quoted

As much as possible IMA and EVM should remain independent of each
other.   Modifying integrity_load_x509() doesn't help.  This looks like
a good reason for calling another EVM function from within IMA.

Can I add your Reviewed-by?

Yes, that's fine.

Mimi

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help