Re: [PATCH 0/3] BPF signature verification
From: Blaise Boscaccy <hidden>
Date: 2025-06-02 15:01:36
Also in:
bpf, keyrings, linux-crypto, lkml
From: Blaise Boscaccy <hidden>
Date: 2025-06-02 15:01:36
Also in:
bpf, keyrings, linux-crypto, lkml
KP Singh [off-list ref] writes:
quoted
And I'm saying that they are, based on wanting visibility in the LSM layer, passing that along to the end user, and wanting to be able to show correctness, along with mitigating an entire vector of supply chain attacks targeting gen.c.What supply chain attack?I asked this earlier, you never replied, what does a supply chain attack here really look like?
I responded to that here: https://lore.kernel.org/linux-security-module/87iklhn6ed.fsf@microsoft.com/ (local) Warmest Regards, Blaise
- KPquoted
So in summary, your objection to this is that you feel it's simply "not needed", and those above risks/design problems aren't actually an issue?quoted
Let's have this discussion in the patch series, much easier to discuss with the code.I think we've all been waiting for that. Yes, lets.