Bug#850339: initramfs-tools: Support Linux Integrity

2017-01-23 Thread Stefan Berger
On 01/22/2017 10:39 PM, Ben Hutchings wrote: Control: tag -1 moreinfo On Thu, 5 Jan 2017 21:16:58 -0500 Stefan Berger <stef...@linux.vnet.ibm.com> wrote: Package: initramfs-tools Version: 0.103ubuntu4.3 Severity: wishlist Linux implements the Integrity Measurement Architectur

Bug#850339: [PATCH 3/3] initramfs-tools: Add scripts for loading IMA keys and policy

2017-01-11 Thread Stefan Berger
From: Stefan Berger <stef...@us.ibm.com> Add a script for loading certificates used by the Linux Integrity Measurement Architecture (IMA) for verifying file signatures. The script will first look for the availability of the .ima keyring and load all keys it finds on it. If the .ima k

Bug#850339: [PATCH 1/3] initramfs-tools: add script for loading kernel masterkey

2017-01-11 Thread Stefan Berger
From: Stefan Berger <stef...@us.ibm.com> We are adding a script for loading the kernel master key, which is a symmetric key that is used to decrypt other keys in the system. The kernel master key can either be a trusted or a user key. A config file /etc/default/masterkey allows to con

Bug#850339: [PATCH 2/3] initramfs-tools: Add script for loading EVM key

2017-01-11 Thread Stefan Berger
From: Stefan Berger <stef...@us.ibm.com> Add a script for loading the EVM (extended verification module) key. Either a symmetric key or an x.509 certificate can be loaded using the scripts. A config file /etc/default/evm allows to configure parameters of the key. Signed-off-by: Stefan

Bug#850340: dpkg: Add file signature support for Debian packages

2017-01-05 Thread Stefan Berger
Package: dpkg Version: 1.17.5ubuntu5.6 Severity: wishlist Tags: patch This is a request for adding file signatures in Debian packages and for installing those signatures as 'security.ima' extended attributes at package install time. We propose to embed the extended attribute in the PAX header of

Bug#850339: initramfs-tools: Support Linux Integrity

2017-01-05 Thread Stefan Berger
no debconf information >From 2cc02716745722b9ddf7ab849293034fea9cd424 Mon Sep 17 00:00:00 2001 From: Stefan Berger <stef...@us.ibm.com> Date: Thu, 5 Jan 2017 13:57:55 -0500 Subject: [PATCH 1/3] initramfs-tools: add script for loading kernel masterkey We are adding a script for loading the kerne

Bug#649033: [PATCH] tpm_tis: add delay after aborting command

2012-01-20 Thread Stefan Berger
On 01/20/2012 02:19 AM, Jonathan Nieder wrote: Upstream, Jurij wrote: | With this patch I was able to perform 500 tpm_tis.ko module | insert/remove cycles without ever experiencing a hang. Without the | patch it's sufficient to do 5-10 cycles before modprobe hangs on | module insertion for a

Bug#649033: [PATCH] tpm_tis: add delay after aborting command

2012-01-20 Thread Stefan Berger
On 01/20/2012 05:00 AM, Uwe Kleine-König wrote: Hello, So it looks like this is fixed by v3.3-rc1~105^2^2~13^2~4 (tpm_tis: add delay after aborting command, 2011-11-11). Jurij, what kernel were you testing against? It would be nice to pass this to Greg for inclusion in 3.2.y and perhaps

Bug#649033: [PATCH] tpm_tis: add delay after aborting command

2012-01-20 Thread Stefan Berger
On 01/20/2012 11:18 AM, Uwe Kleine-König wrote: Hello Stefan, On Fri, Jan 20, 2012 at 10:39:56AM -0500, Stefan Berger wrote: On 01/20/2012 05:00 AM, Uwe Kleine-König wrote: Hello, So it looks like this is fixed by v3.3-rc1~105^2^2~13^2~4 (tpm_tis: add delay after aborting command, 2011-11

Bug#649033: Fix kernel boot delay due to hang in tpm_tis

2012-01-11 Thread Stefan Berger
Can someone who experiences the delay during the boot please apply the patch below? Please let me know whether it solves the problem. This patch adds a delay after aborting a command. Some TPMs need this and will not process the subsequent command correctly otherwise. Signed-off-by: Stefan