Re: [PATCH 2/4] fs: define a firmware security filesystem named fwsecurityfs

2022-12-11 Thread Greg Kroah-Hartman
On Mon, Dec 12, 2022 at 11:58:56AM +1100, Andrew Donnellan wrote: > On Wed, 2022-11-23 at 13:57 -0500, Nayna wrote: > > > > Given there are no other exploiters for fwsecurityfs and there should > > be > > no platform-specific fs, would modifying sysfs now to let userspace > > create files

Re: [PATCH 2/4] fs: define a firmware security filesystem named fwsecurityfs

2022-12-11 Thread Andrew Donnellan
On Wed, 2022-11-23 at 13:57 -0500, Nayna wrote: > > Given there are no other exploiters for fwsecurityfs and there should > be > no platform-specific fs, would modifying sysfs now to let userspace > create files cleanly be the way forward? Or, if we should strongly > consider securityfs, which

Re: [PATCH 2/4] fs: define a firmware security filesystem named fwsecurityfs

2022-11-23 Thread Nayna
On 11/23/22 10:57, Greg Kroah-Hartman wrote: On Wed, Nov 23, 2022 at 10:05:49AM -0500, Nayna wrote: On 11/22/22 18:21, Nayna wrote: From the perspective of our use case, we need to expose firmware security objects to userspace for management. Not all of the objects pre-exist and we would

Re: [PATCH 2/4] fs: define a firmware security filesystem named fwsecurityfs

2022-11-23 Thread Greg Kroah-Hartman
On Wed, Nov 23, 2022 at 10:05:49AM -0500, Nayna wrote: > > On 11/22/22 18:21, Nayna wrote: > > > > From the perspective of our use case, we need to expose firmware > > security objects to userspace for management. Not all of the objects > > pre-exist and we would like to allow root to create

Re: [PATCH 2/4] fs: define a firmware security filesystem named fwsecurityfs

2022-11-23 Thread Nayna
On 11/22/22 18:21, Nayna wrote: From the perspective of our use case, we need to expose firmware security objects to userspace for management. Not all of the objects pre-exist and we would like to allow root to create them from userspace. From a unification perspective, I have considered

Re: [PATCH 2/4] fs: define a firmware security filesystem named fwsecurityfs

2022-11-22 Thread Nayna
On 11/19/22 06:48, Ritesh Harjani (IBM) wrote: Hello Nayna, Hi Ritesh, On 22/11/09 03:10PM, Nayna wrote: On 11/9/22 08:46, Greg Kroah-Hartman wrote: On Sun, Nov 06, 2022 at 04:07:42PM -0500, Nayna Jain wrote: securityfs is meant for Linux security subsystems to expose policies/logs or

Re: [PATCH 2/4] fs: define a firmware security filesystem named fwsecurityfs

2022-11-21 Thread Nayna
On 11/20/22 22:14, James Bottomley wrote: On Sun, 2022-11-20 at 17:13 +0100, Greg Kroah-Hartman wrote: On Sat, Nov 19, 2022 at 01:20:09AM -0500, Nayna wrote: On 11/17/22 16:27, Greg Kroah-Hartman wrote: On Mon, Nov 14, 2022 at 06:03:43PM -0500, Nayna wrote: On 11/10/22 04:58, Greg

Re: [PATCH 2/4] fs: define a firmware security filesystem named fwsecurityfs

2022-11-21 Thread Greg Kroah-Hartman
On Mon, Nov 21, 2022 at 12:33:55PM -0500, James Bottomley wrote: > On Mon, 2022-11-21 at 16:05 +0100, Greg Kroah-Hartman wrote: > > On Mon, Nov 21, 2022 at 09:03:18AM -0500, James Bottomley wrote: > > > On Mon, 2022-11-21 at 12:05 +0100, Greg Kroah-Hartman wrote: > > > > On Sun, Nov 20, 2022 at

Re: [PATCH 2/4] fs: define a firmware security filesystem named fwsecurityfs

2022-11-21 Thread James Bottomley
On Mon, 2022-11-21 at 16:05 +0100, Greg Kroah-Hartman wrote: > On Mon, Nov 21, 2022 at 09:03:18AM -0500, James Bottomley wrote: > > On Mon, 2022-11-21 at 12:05 +0100, Greg Kroah-Hartman wrote: > > > On Sun, Nov 20, 2022 at 10:14:26PM -0500, James Bottomley wrote: [...] > > > > I already explained

RE: [PATCH 2/4] fs: define a firmware security filesystem named fwsecurityfs

2022-11-21 Thread David Laight
From: James Bottomley > Sent: 21 November 2022 14:03 ... > > Then how does the networking code handle the namespace stuff in > > sysfs? > > That seems to work today, or am I missing something? > > have you actually tried? > > jejb@lingrow:~> sudo unshare --net bash > lingrow:/home/jejb # ls

Re: [PATCH 2/4] fs: define a firmware security filesystem named fwsecurityfs

2022-11-21 Thread Greg Kroah-Hartman
On Mon, Nov 21, 2022 at 09:03:18AM -0500, James Bottomley wrote: > On Mon, 2022-11-21 at 12:05 +0100, Greg Kroah-Hartman wrote: > > On Sun, Nov 20, 2022 at 10:14:26PM -0500, James Bottomley wrote: > > > On Sun, 2022-11-20 at 17:13 +0100, Greg Kroah-Hartman wrote: > > > > On Sat, Nov 19, 2022 at

Re: [PATCH 2/4] fs: define a firmware security filesystem named fwsecurityfs

2022-11-21 Thread James Bottomley
On Mon, 2022-11-21 at 12:05 +0100, Greg Kroah-Hartman wrote: > On Sun, Nov 20, 2022 at 10:14:26PM -0500, James Bottomley wrote: > > On Sun, 2022-11-20 at 17:13 +0100, Greg Kroah-Hartman wrote: > > > On Sat, Nov 19, 2022 at 01:20:09AM -0500, Nayna wrote: > > > > > > > > On 11/17/22 16:27, Greg

Re: [PATCH 2/4] fs: define a firmware security filesystem named fwsecurityfs

2022-11-21 Thread Greg Kroah-Hartman
On Sun, Nov 20, 2022 at 10:14:26PM -0500, James Bottomley wrote: > On Sun, 2022-11-20 at 17:13 +0100, Greg Kroah-Hartman wrote: > > On Sat, Nov 19, 2022 at 01:20:09AM -0500, Nayna wrote: > > > > > > On 11/17/22 16:27, Greg Kroah-Hartman wrote: > > > > On Mon, Nov 14, 2022 at 06:03:43PM -0500,

Re: [PATCH 2/4] fs: define a firmware security filesystem named fwsecurityfs

2022-11-20 Thread James Bottomley
On Sun, 2022-11-20 at 17:13 +0100, Greg Kroah-Hartman wrote: > On Sat, Nov 19, 2022 at 01:20:09AM -0500, Nayna wrote: > > > > On 11/17/22 16:27, Greg Kroah-Hartman wrote: > > > On Mon, Nov 14, 2022 at 06:03:43PM -0500, Nayna wrote: > > > > On 11/10/22 04:58, Greg Kroah-Hartman wrote: [...] > > >

Re: [PATCH 2/4] fs: define a firmware security filesystem named fwsecurityfs

2022-11-20 Thread Greg Kroah-Hartman
On Sat, Nov 19, 2022 at 01:20:09AM -0500, Nayna wrote: > > On 11/17/22 16:27, Greg Kroah-Hartman wrote: > > On Mon, Nov 14, 2022 at 06:03:43PM -0500, Nayna wrote: > > > On 11/10/22 04:58, Greg Kroah-Hartman wrote: > > > > On Wed, Nov 09, 2022 at 03:10:37PM -0500, Nayna wrote: > > > > > On 11/9/22

Re: [PATCH 2/4] fs: define a firmware security filesystem named fwsecurityfs

2022-11-19 Thread Ritesh Harjani (IBM)
Hello Nayna, On 22/11/09 03:10PM, Nayna wrote: > > On 11/9/22 08:46, Greg Kroah-Hartman wrote: > > On Sun, Nov 06, 2022 at 04:07:42PM -0500, Nayna Jain wrote: > > > securityfs is meant for Linux security subsystems to expose policies/logs > > > or any other information. However, there are

Re: [PATCH 2/4] fs: define a firmware security filesystem named fwsecurityfs

2022-11-18 Thread Nayna
On 11/17/22 16:27, Greg Kroah-Hartman wrote: On Mon, Nov 14, 2022 at 06:03:43PM -0500, Nayna wrote: On 11/10/22 04:58, Greg Kroah-Hartman wrote: On Wed, Nov 09, 2022 at 03:10:37PM -0500, Nayna wrote: On 11/9/22 08:46, Greg Kroah-Hartman wrote: On Sun, Nov 06, 2022 at 04:07:42PM -0500,

Re: [PATCH 2/4] fs: define a firmware security filesystem named fwsecurityfs

2022-11-17 Thread Greg Kroah-Hartman
On Mon, Nov 14, 2022 at 06:03:43PM -0500, Nayna wrote: > > On 11/10/22 04:58, Greg Kroah-Hartman wrote: > > On Wed, Nov 09, 2022 at 03:10:37PM -0500, Nayna wrote: > > > On 11/9/22 08:46, Greg Kroah-Hartman wrote: > > > > On Sun, Nov 06, 2022 at 04:07:42PM -0500, Nayna Jain wrote: > > > > >

Re: [PATCH 2/4] fs: define a firmware security filesystem named fwsecurityfs

2022-11-14 Thread Nayna
On 11/10/22 04:58, Greg Kroah-Hartman wrote: On Wed, Nov 09, 2022 at 03:10:37PM -0500, Nayna wrote: On 11/9/22 08:46, Greg Kroah-Hartman wrote: On Sun, Nov 06, 2022 at 04:07:42PM -0500, Nayna Jain wrote: securityfs is meant for Linux security subsystems to expose policies/logs or any other

Re: [PATCH 2/4] fs: define a firmware security filesystem named fwsecurityfs

2022-11-10 Thread Greg Kroah-Hartman
On Wed, Nov 09, 2022 at 03:10:37PM -0500, Nayna wrote: > > On 11/9/22 08:46, Greg Kroah-Hartman wrote: > > On Sun, Nov 06, 2022 at 04:07:42PM -0500, Nayna Jain wrote: > > > securityfs is meant for Linux security subsystems to expose policies/logs > > > or any other information. However, there are

Re: [PATCH 2/4] fs: define a firmware security filesystem named fwsecurityfs

2022-11-09 Thread Nayna
On 11/9/22 08:46, Greg Kroah-Hartman wrote: On Sun, Nov 06, 2022 at 04:07:42PM -0500, Nayna Jain wrote: securityfs is meant for Linux security subsystems to expose policies/logs or any other information. However, there are various firmware security features which expose their variables for

Re: [PATCH 2/4] fs: define a firmware security filesystem named fwsecurityfs

2022-11-09 Thread Greg Kroah-Hartman
On Sun, Nov 06, 2022 at 04:07:42PM -0500, Nayna Jain wrote: > securityfs is meant for Linux security subsystems to expose policies/logs > or any other information. However, there are various firmware security > features which expose their variables for user management via the kernel. > There is