RE: [RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature

2021-11-03 Thread Roberto Sassu
> From: Deven Bowers [mailto:deven.de...@linux.microsoft.com] > Sent: Friday, October 15, 2021 9:26 PM > On 10/13/2021 12:24 PM, Eric Biggers wrote: > > On Wed, Oct 13, 2021 at 12:06:31PM -0700, > deven.de...@linux.microsoft.com wrote: > >> From: Fan Wu > >> > >> Add security_inode_setsecurity to

Re: [RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature

2021-10-28 Thread Deven Bowers
On 10/27/2021 8:48 PM, Eric Biggers wrote: On Tue, Oct 26, 2021 at 12:03:53PM -0700, Deven Bowers wrote: The proposed LSM (IPE) of this series will be the only one to need this information at the  moment. IPE’s goal is to have provide trust-based access control. Trust and Integrity are tied

Re: [RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature

2021-10-28 Thread Eric Biggers
On Tue, Oct 26, 2021 at 12:03:53PM -0700, Deven Bowers wrote: > > > The proposed LSM (IPE) of this series will be the only one to need > > > this information at the  moment. IPE’s goal is to have provide > > > trust-based access control. Trust and Integrity are tied together, > > > as you cannot

RE: [RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature

2021-10-27 Thread Roberto Sassu
> From: Deven Bowers [mailto:deven.de...@linux.microsoft.com] > Sent: Tuesday, October 26, 2021 9:04 PM > On 10/22/2021 9:31 AM, Roberto Sassu wrote: > >> From: Roberto Sassu [mailto:roberto.sa...@huawei.com] > >> Sent: Wednesday, October 20, 2021 5:09 PM > >>> From: Eric Biggers

RE: [RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature

2021-10-27 Thread Roberto Sassu
> From: Deven Bowers [mailto:deven.de...@linux.microsoft.com] > Sent: Tuesday, October 26, 2021 9:04 PM > On 10/15/2021 1:11 PM, Eric Biggers wrote: > > > On Fri, Oct 15, 2021 at 12:25:53PM -0700, Deven Bowers wrote: > >> On 10/13/2021 12:24 PM, Eric Biggers wrote: > >>> On Wed, Oct 13, 2021 at

Re: [RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature

2021-10-26 Thread Deven Bowers
On 10/15/2021 1:11 PM, Eric Biggers wrote: On Fri, Oct 15, 2021 at 12:25:53PM -0700, Deven Bowers wrote: On 10/13/2021 12:24 PM, Eric Biggers wrote: On Wed, Oct 13, 2021 at 12:06:31PM -0700,deven.de...@linux.microsoft.com wrote: From: Fan Wu Add security_inode_setsecurity to fsverity

Re: [RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature

2021-10-26 Thread Deven Bowers
On 10/22/2021 9:31 AM, Roberto Sassu wrote: From: Roberto Sassu [mailto:roberto.sa...@huawei.com] Sent: Wednesday, October 20, 2021 5:09 PM From: Eric Biggers [mailto:ebigg...@kernel.org] Sent: Friday, October 15, 2021 10:11 PM On Fri, Oct 15, 2021 at 12:25:53PM -0700, Deven Bowers wrote: On

RE: [RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature

2021-10-24 Thread Roberto Sassu
> From: Roberto Sassu [mailto:roberto.sa...@huawei.com] > Sent: Wednesday, October 20, 2021 5:09 PM > > From: Eric Biggers [mailto:ebigg...@kernel.org] > > Sent: Friday, October 15, 2021 10:11 PM > > On Fri, Oct 15, 2021 at 12:25:53PM -0700, Deven Bowers wrote: > > > > > > On 10/13/2021 12:24 PM,

RE: [RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature

2021-10-20 Thread Roberto Sassu
> From: Eric Biggers [mailto:ebigg...@kernel.org] > Sent: Friday, October 15, 2021 10:11 PM > On Fri, Oct 15, 2021 at 12:25:53PM -0700, Deven Bowers wrote: > > > > On 10/13/2021 12:24 PM, Eric Biggers wrote: > > > On Wed, Oct 13, 2021 at 12:06:31PM -0700, > deven.de...@linux.microsoft.com wrote: >

Re: [RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature

2021-10-15 Thread Eric Biggers
On Fri, Oct 15, 2021 at 12:25:53PM -0700, Deven Bowers wrote: > > On 10/13/2021 12:24 PM, Eric Biggers wrote: > > On Wed, Oct 13, 2021 at 12:06:31PM -0700, deven.de...@linux.microsoft.com > > wrote: > > > From: Fan Wu > > > > > > Add security_inode_setsecurity to fsverity signature

Re: [RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature

2021-10-15 Thread Deven Bowers
On 10/13/2021 12:24 PM, Eric Biggers wrote: On Wed, Oct 13, 2021 at 12:06:31PM -0700, deven.de...@linux.microsoft.com wrote: From: Fan Wu Add security_inode_setsecurity to fsverity signature verification. This can let LSMs save the signature data and digest hashes provided by fsverity. Can

Re: [RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature

2021-10-13 Thread Eric Biggers
On Wed, Oct 13, 2021 at 12:06:31PM -0700, deven.de...@linux.microsoft.com wrote: > From: Fan Wu > > Add security_inode_setsecurity to fsverity signature verification. > This can let LSMs save the signature data and digest hashes provided > by fsverity. Can you elaborate on why LSMs need this