Thread (26 messages) 26 messages, 7 authors, 2025-06-04

Re: [PATCH 0/3] BPF signature verification

From: Blaise Boscaccy <hidden>
Date: 2025-06-02 15:01:36
Also in: bpf, keyrings, linux-crypto, lkml

KP Singh [off-list ref] writes:
quoted
And I'm saying that they are, based on wanting visibility in the LSM
layer, passing that along to the end user, and wanting to be able to
show correctness, along with mitigating an entire vector of supply chain
attacks targeting gen.c.
What supply chain attack?I asked this earlier, you never replied, what
does a supply chain attack here really look like?
I responded to that here:
https://lore.kernel.org/linux-security-module/87iklhn6ed.fsf@microsoft.com/ (local)

Warmest Regards,
Blaise
- KP
quoted
So in summary, your objection to this is that you feel it's simply "not
needed", and those above risks/design problems aren't actually an issue?
quoted
Let's have this discussion in the patch series, much easier to discuss
with the code.
I think we've all been waiting for that. Yes, lets.
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help