Re: [RFC][PATCH] device mapper: Add builtin function dm_get_status()

[RFC PATCH v7 00/16] Integrity Policy Enforcement (IPE) · <hidden> · 2021-10-13
[RFC PATCH v7 01/16] security: add ipe lsm & initial context creation · <hidden> · 2021-10-13
[RFC PATCH v7 04/16] ipe: add userspace interface · <hidden> · 2021-10-13
RE: [RFC PATCH v7 04/16] ipe: add userspace interface · Roberto Sassu <roberto.sassu@huawei.com> · 2021-11-03
Re: [RFC PATCH v7 04/16] ipe: add userspace interface · Deven Bowers <hidden> · 2021-11-04
[RFC PATCH v7 03/16] ipe: add evaluation loop · <hidden> · 2021-10-13
[RFC PATCH v7 02/16] ipe: add policy parser · <hidden> · 2021-10-13
[RFC PATCH v7 10/16] fs|dm-verity: add block_dev LSM blob and submit dm-verity data · <hidden> · 2021-10-13
[RFC PATCH v7 15/16] ipe: kunit tests · <hidden> · 2021-10-13
[RFC PATCH v7 16/16] documentation: add ipe documentation · <hidden> · 2021-10-13
[RFC PATCH v7 13/16] ipe: enable support for fs-verity as a trust provider · <hidden> · 2021-10-13
[RFC PATCH v7 14/16] scripts: add boot policy generation program · <hidden> · 2021-10-13
RE: [RFC PATCH v7 14/16] scripts: add boot policy generation program · Roberto Sassu <roberto.sassu@huawei.com> · 2021-11-03
RE: [RFC PATCH v7 14/16] scripts: add boot policy generation program · Roberto Sassu <roberto.sassu@huawei.com> · 2021-11-03
Re: [RFC PATCH v7 14/16] scripts: add boot policy generation program · Deven Bowers <hidden> · 2021-11-04
[RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature · <hidden> · 2021-10-13
Re: [RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature · Eric Biggers <ebiggers@kernel.org> · 2021-10-13
Re: [RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature · Deven Bowers <hidden> · 2021-10-15
Re: [RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature · Eric Biggers <ebiggers@kernel.org> · 2021-10-15
RE: [RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature · Roberto Sassu <roberto.sassu@huawei.com> · 2021-10-20
RE: [RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature · Roberto Sassu <roberto.sassu@huawei.com> · 2021-10-22
Re: [RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature · Deven Bowers <hidden> · 2021-10-26
RE: [RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature · Roberto Sassu <roberto.sassu@huawei.com> · 2021-10-27
Re: [RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature · Deven Bowers <hidden> · 2021-10-26
RE: [RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature · Roberto Sassu <roberto.sassu@huawei.com> · 2021-10-27
Re: [RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature · Eric Biggers <ebiggers@kernel.org> · 2021-10-28
Re: [RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature · Deven Bowers <hidden> · 2021-10-28
RE: [RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature · Roberto Sassu <roberto.sassu@huawei.com> · 2021-11-03
Re: [RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature · Deven Bowers <hidden> · 2021-11-04
[RFC PATCH v7 11/16] ipe: add support for dm-verity as a trust provider · <hidden> · 2021-10-13
RE: [RFC PATCH v7 11/16] ipe: add support for dm-verity as a trust provider · Roberto Sassu <roberto.sassu@huawei.com> · 2021-11-25
Re: [RFC PATCH v7 11/16] ipe: add support for dm-verity as a trust provider · Deven Bowers <hidden> · 2021-11-30
[RFC][PATCH] device mapper: Add builtin function dm_get_status() · Roberto Sassu <roberto.sassu@huawei.com> · 2021-12-01
RE: [RFC][PATCH] device mapper: Add builtin function dm_get_status() · Roberto Sassu <roberto.sassu@huawei.com> · 2021-12-01
Re: [RFC][PATCH] device mapper: Add builtin function dm_get_status() · Christoph Hellwig <hch@infradead.org> · 2021-12-02
RE: [RFC][PATCH] device mapper: Add builtin function dm_get_status() · Roberto Sassu <roberto.sassu@huawei.com> · 2021-12-02
Re: [RFC][PATCH] device mapper: Add builtin function dm_get_status() · Christoph Hellwig <hch@infradead.org> · 2021-12-02
RE: [RFC][PATCH] device mapper: Add builtin function dm_get_status() · Roberto Sassu <roberto.sassu@huawei.com> · 2021-12-02
Re: [RFC][PATCH] device mapper: Add builtin function dm_get_status() · Christoph Hellwig <hch@infradead.org> · 2021-12-03
RE: [RFC][PATCH] device mapper: Add builtin function dm_get_status() · Roberto Sassu <roberto.sassu@huawei.com> · 2021-12-03
RE: [RFC][PATCH] device mapper: Add builtin function dm_get_status() · Roberto Sassu <roberto.sassu@huawei.com> · 2021-12-06
[RFC PATCH v7 09/16] ipe: introduce 'boot_verified' as a trust provider · <hidden> · 2021-10-13
[RFC PATCH v7 06/16] uapi|audit: add trust audit message definitions · <hidden> · 2021-10-13
[RFC PATCH v7 05/16] ipe: add LSM hooks on execution and kernel read · <hidden> · 2021-10-13
Re: [RFC PATCH v7 05/16] ipe: add LSM hooks on execution and kernel read · Casey Schaufler <casey@schaufler-ca.com> · 2021-10-13
Re: [RFC PATCH v7 05/16] ipe: add LSM hooks on execution and kernel read · Deven Bowers <hidden> · 2021-10-15
RE: [RFC PATCH v7 05/16] ipe: add LSM hooks on execution and kernel read · Roberto Sassu <roberto.sassu@huawei.com> · 2021-10-25
Re: [RFC PATCH v7 05/16] ipe: add LSM hooks on execution and kernel read · Deven Bowers <hidden> · 2021-10-26
RE: [RFC PATCH v7 05/16] ipe: add LSM hooks on execution and kernel read · Roberto Sassu <roberto.sassu@huawei.com> · 2021-10-27
[RFC PATCH v7 07/16] ipe: add auditing support · <hidden> · 2021-10-13
Re: [RFC PATCH v7 07/16] ipe: add auditing support · Steve Grubb <hidden> · 2021-10-13
Re: [RFC PATCH v7 07/16] ipe: add auditing support · Deven Bowers <hidden> · 2021-10-15
Re: [RFC PATCH v7 07/16] ipe: add auditing support · Steve Grubb <hidden> · 2021-11-02
Re: [RFC PATCH v7 07/16] ipe: add auditing support · Deven Bowers <hidden> · 2021-11-04
Re: [RFC PATCH v7 07/16] ipe: add auditing support · Randy Dunlap <hidden> · 2021-10-13
Re: [RFC PATCH v7 07/16] ipe: add auditing support · Deven Bowers <hidden> · 2021-10-15
Re: [RFC PATCH v7 07/16] ipe: add auditing support · Randy Dunlap <hidden> · 2021-10-15
Re: [RFC PATCH v7 07/16] ipe: add auditing support · Deven Bowers <hidden> · 2021-10-26
[RFC PATCH v7 08/16] ipe: add permissive toggle · <hidden> · 2021-10-13
RE: [RFC PATCH v7 00/16] Integrity Policy Enforcement (IPE) · Roberto Sassu <roberto.sassu@huawei.com> · 2021-10-25
Re: [RFC PATCH v7 00/16] Integrity Policy Enforcement (IPE) · Deven Bowers <hidden> · 2021-10-26
RE: [RFC PATCH v7 00/16] Integrity Policy Enforcement (IPE) · Roberto Sassu <roberto.sassu@huawei.com> · 2021-10-27
Re: [RFC PATCH v7 00/16] Integrity Policy Enforcement (IPE) · Deven Bowers <hidden> · 2021-10-28

From: Christoph Hellwig <hch@infradead.org>
Date: 2021-12-03 06:52:30
Also in: dm-devel, linux-block, linux-doc, linux-fscrypt, linux-integrity, lkml

On Thu, Dec 02, 2021 at 09:29:52AM +0000, Roberto Sassu wrote:

The problem being solved is how to grant access to files
which satisfy a property defined in the policy.

If you have want to enforce access to files in the block layer using
a specific stacking block driver you don't just have one layering
violation but a bunch of them.  Please go back to the drawing board.

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help