Re: [RFC PATCH v3 1/3] ima: extend clone() with IMA namespace support

On Mon, Apr 02, 2018 at 07:20:54AM -0400, Stefan Berger wrote: Good morning to everyone. > On 03/29/2018 01:44 PM, Dr. Greg Wettstein wrote: > >On Mar 28, 8:44am, Stefan Berger wrote: > >} Subject: Re: [RFC PATCH v3 1/3] ima: extend clone() with IMA namespace > >sup > &

Re: [RFC PATCH v3 1/3] ima: extend clone() with IMA namespace support

On Mon, Apr 02, 2018 at 07:20:54AM -0400, Stefan Berger wrote: Good morning to everyone. > On 03/29/2018 01:44 PM, Dr. Greg Wettstein wrote: > >On Mar 28, 8:44am, Stefan Berger wrote: > >} Subject: Re: [RFC PATCH v3 1/3] ima: extend clone() with IMA namespace > >sup > &

Re: [RFC PATCH v3 1/3] ima: extend clone() with IMA namespace support

On Mar 28, 8:44am, Stefan Berger wrote: } Subject: Re: [RFC PATCH v3 1/3] ima: extend clone() with IMA namespace sup Good morning, I hope the week is going well for everyone. > On 03/28/2018 08:14 AM, Dr. Greg Wettstein wrote: > > On Wed, Mar 28, 2018 at 07:10:12AM -0400, Stefan Ber

Re: [RFC PATCH v3 1/3] ima: extend clone() with IMA namespace support

On Mar 28, 8:44am, Stefan Berger wrote: } Subject: Re: [RFC PATCH v3 1/3] ima: extend clone() with IMA namespace sup Good morning, I hope the week is going well for everyone. > On 03/28/2018 08:14 AM, Dr. Greg Wettstein wrote: > > On Wed, Mar 28, 2018 at 07:10:12AM -0400, Stefan Ber

Re: [RFC PATCH v3 1/3] ima: extend clone() with IMA namespace support

On Wed, Mar 28, 2018 at 07:10:12AM -0400, Stefan Berger wrote: Good morning, I hope the day is starting out well for everyone. > On 03/27/2018 07:01 PM, Eric W. Biederman wrote: > >Stefan Berger writes: > > > >>From: Yuqiong Sun > >> > >>Add new

Re: [RFC PATCH v3 1/3] ima: extend clone() with IMA namespace support

On Wed, Mar 28, 2018 at 07:10:12AM -0400, Stefan Berger wrote: Good morning, I hope the day is starting out well for everyone. > On 03/27/2018 07:01 PM, Eric W. Biederman wrote: > >Stefan Berger writes: > > > >>From: Yuqiong Sun > >> > >>Add new CONFIG_IMA_NS config option. Let clone() create

Re: Avoid speculative indirect calls in kernel

On Jan 5, 12:12pm, Alan Cox wrote: } Subject: Re: Avoid speculative indirect calls in kernel Good morning to everyone, a bit behind on mail given everything which has been going on. > On Fri, 5 Jan 2018 01:54:13 +0100 (CET) > Thomas Gleixner wrote: > > > On Thu, 4 Jan 2018,

Re: Avoid speculative indirect calls in kernel

On Jan 5, 12:12pm, Alan Cox wrote: } Subject: Re: Avoid speculative indirect calls in kernel Good morning to everyone, a bit behind on mail given everything which has been going on. > On Fri, 5 Jan 2018 01:54:13 +0100 (CET) > Thomas Gleixner wrote: > > > On Thu, 4 Jan 2018, Jon Masters wrote:

Re: [PATCH v6 00/11] Intel SGX Driver

as well, since the issues are all related. > On Thu, Jan 04, 2018 at 03:06:43AM -0600, Dr. Greg Wettstein wrote: > > If we are talking about the issues motivating the KPTI work I don't > > have any useful information beyond what is raging through the industry > > right now.

Re: [PATCH v6 00/11] Intel SGX Driver

as well, since the issues are all related. > On Thu, Jan 04, 2018 at 03:06:43AM -0600, Dr. Greg Wettstein wrote: > > If we are talking about the issues motivating the KPTI work I don't > > have any useful information beyond what is raging through the industry > > right now.

Re: [PATCH v6 00/11] Intel SGX Driver

On Jan 4, 3:27pm, Greg Kroah-Hartman wrote: } Subject: Re: [PATCH v6 00/11] Intel SGX Driver Wild day, enjoyed by all I'm sure. > On Thu, Jan 04, 2018 at 03:17:24PM +0100, Cedric Blancher wrote: > > So how does this protect against the MELTDOWN attack (CVE-2017-5754) > > and the MELTATOMBOMBA4

Re: [PATCH v6 00/11] Intel SGX Driver

On Jan 4, 3:27pm, Greg Kroah-Hartman wrote: } Subject: Re: [PATCH v6 00/11] Intel SGX Driver Wild day, enjoyed by all I'm sure. > On Thu, Jan 04, 2018 at 03:17:24PM +0100, Cedric Blancher wrote: > > So how does this protect against the MELTDOWN attack (CVE-2017-5754) > > and the MELTATOMBOMBA4

Re: [PATCH v6 00/11] Intel SGX Driver

On Jan 3, 10:48am, Pavel Machek wrote: } Subject: Re: [PATCH v6 00/11] Intel SGX Driver > Hi! Good morning. > :-). Stuff proceeds as usual. Too bad it is raining outside, instead > of snowing. -19C here, so we have snow... :-) > > > So ... even with SGX, host can generate bitflips in the

Re: [PATCH v6 00/11] Intel SGX Driver

On Jan 3, 10:48am, Pavel Machek wrote: } Subject: Re: [PATCH v6 00/11] Intel SGX Driver > Hi! Good morning. > :-). Stuff proceeds as usual. Too bad it is raining outside, instead > of snowing. -19C here, so we have snow... :-) > > > So ... even with SGX, host can generate bitflips in the

Re: [PATCH v6 00/11] Intel SGX Driver

On Dec 27, 9:46pm, Pavel Machek wrote: } Subject: Re: [PATCH v6 00/11] Intel SGX Driver > Hi! Good evening Pavel et.al., I hope the New Year has started well for everyone. > > > Would you list guarantees provided by SGX? > > > > Obviously, confidentiality and integrity. SGX was designed to

Re: [PATCH v6 00/11] Intel SGX Driver

On Dec 27, 9:46pm, Pavel Machek wrote: } Subject: Re: [PATCH v6 00/11] Intel SGX Driver > Hi! Good evening Pavel et.al., I hope the New Year has started well for everyone. > > > Would you list guarantees provided by SGX? > > > > Obviously, confidentiality and integrity. SGX was designed to

Re: [PATCH v6 00/11] Intel SGX Driver

On Dec 12, 3:07pm, Pavel Machek wrote: } Subject: Re: [PATCH v6 00/11] Intel SGX Driver Good morning, I hope this note finds the holiday season going well for everyone. This note is a bit delayed due to the holidays, my apologies. Pretty wide swath on this e-mail but will include the copy list

Re: [PATCH v6 00/11] Intel SGX Driver

On Dec 12, 3:07pm, Pavel Machek wrote: } Subject: Re: [PATCH v6 00/11] Intel SGX Driver Good morning, I hope this note finds the holiday season going well for everyone. This note is a bit delayed due to the holidays, my apologies. Pretty wide swath on this e-mail but will include the copy list

Re: [RFC 04/11] ima: add support to namespace securityfs file

On Mon, May 29, 2017 at 01:32:38PM -0400, Mimi Zohar wrote: > Hi Guilherme, > > (Wow, you should did Cc a lot of people.) Indeed. We have namespaced a significant amount of the IMA code so we will continue the broadcast, under the assumption that this is of general interest to the community.

Re: [RFC 04/11] ima: add support to namespace securityfs file

On Mon, May 29, 2017 at 01:32:38PM -0400, Mimi Zohar wrote: > Hi Guilherme, > > (Wow, you should did Cc a lot of people.) Indeed. We have namespaced a significant amount of the IMA code so we will continue the broadcast, under the assumption that this is of general interest to the community.

Re: [PATCH v2 6/7] tpm: expose spaces via a device link /dev/tpms

stein, Ph.D. Enjellic Systems Development, LLC. 4206 N. 19th Ave. Specializing in information infra-structure Fargo, ND 58102development. PH: 701-281-1686 FAX: 701-281-3949 EMAIL: g...@enjellic.com -- "You've got to be kidding me Nate. You've seen the shit that has come through my office in the last two hours. You think I'm even remotely worried about one SATA cable being six inches longer than the other." -- Dr. Greg Wettstein Resurrection

Re: [PATCH v2 6/7] tpm: expose spaces via a device link /dev/tpms

formation infra-structure Fargo, ND 58102 development. PH: 701-281-1686 FAX: 701-281-3949 EMAIL: g...@enjellic.com -- "You've got to be kidding me Nate. You've seen the shit that has come through my office in the last two hours. You think I'm even remotely worried about one SATA cable being six inches longer than the other." -- Dr. Greg Wettstein Resurrection

Re: [tpmdd-devel] [RFC] tpm2-space: add handling for global session exhaustion

On Fri, Feb 17, 2017 at 02:37:12PM +0200, Jarkko Sakkinen wrote: Hi, I hope the week is ending well for everyone. > On Fri, Feb 17, 2017 at 03:56:26AM -0600, Dr. Greg Wettstein wrote: > > On Thu, Feb 16, 2017 at 10:33:04PM +0200, Jarkko Sakkinen wrote: > > > > Goo

Re: [tpmdd-devel] [RFC] tpm2-space: add handling for global session exhaustion

On Fri, Feb 17, 2017 at 02:37:12PM +0200, Jarkko Sakkinen wrote: Hi, I hope the week is ending well for everyone. > On Fri, Feb 17, 2017 at 03:56:26AM -0600, Dr. Greg Wettstein wrote: > > On Thu, Feb 16, 2017 at 10:33:04PM +0200, Jarkko Sakkinen wrote: > > > > Goo

Re: [tpmdd-devel] [RFC] tpm2-space: add handling for global session exhaustion

On Thu, Feb 16, 2017 at 10:33:04PM +0200, Jarkko Sakkinen wrote: Good morning to everyone. > On Thu, Feb 16, 2017 at 02:06:42PM -0600, Dr. Greg Wettstein wrote: > > Just as an aside, has anyone given any thought about TPM2 resource > > management in things like TXT/tbo

Re: [tpmdd-devel] [RFC] tpm2-space: add handling for global session exhaustion

On Thu, Feb 16, 2017 at 10:33:04PM +0200, Jarkko Sakkinen wrote: Good morning to everyone. > On Thu, Feb 16, 2017 at 02:06:42PM -0600, Dr. Greg Wettstein wrote: > > Just as an aside, has anyone given any thought about TPM2 resource > > management in things like TXT/tbo

Re: [tpmdd-devel] [RFC] tpm2-space: add handling for global session exhaustion

On Thu, Feb 16, 2017 at 09:04:47AM -0500, Ken Goldman wrote: Good morning to everyone, leveraging some time between planes. > On 2/14/2017 9:38 AM, Dr. Greg Wettstein wrote: > > > >I don't think there is any doubt that running cryptographic primitives > >in userspace

Re: [tpmdd-devel] [RFC] tpm2-space: add handling for global session exhaustion

On Thu, Feb 16, 2017 at 09:04:47AM -0500, Ken Goldman wrote: Good morning to everyone, leveraging some time between planes. > On 2/14/2017 9:38 AM, Dr. Greg Wettstein wrote: > > > >I don't think there is any doubt that running cryptographic primitives > >in userspace

Re: [tpmdd-devel] [RFC] tpm2-space: add handling for global session exhaustion

On Fri, Feb 10, 2017 at 04:13:05PM -0500, Kenneth Goldman wrote: Good morning to everyone. > James Bottomley wrote on > 02/10/2017 11:46:03 AM: > > > > quote: 810 milliseconds > > > verify signature: 635 milliseconds For those who may be interested in

Re: [tpmdd-devel] [RFC] tpm2-space: add handling for global session exhaustion

On Fri, Feb 10, 2017 at 04:13:05PM -0500, Kenneth Goldman wrote: Good morning to everyone. > James Bottomley wrote on > 02/10/2017 11:46:03 AM: > > > > quote: 810 milliseconds > > > verify signature: 635 milliseconds For those who may be interested in this sort of thing I grabbed a few

Re: [tpmdd-devel] [RFC] tpm2-space: add handling for global session exhaustion

On Feb 9, 11:24am, James Bottomley wrote: } Subject: Re: [tpmdd-devel] [RFC] tpm2-space: add handling for global sessi Good morning to everyone. > On Thu, 2017-02-09 at 03:06 -0600, Dr. Greg Wettstein wrote: > > Referring back to Ken's comments about having 20+ clients waiting to >

Re: [tpmdd-devel] [RFC] tpm2-space: add handling for global session exhaustion

On Feb 9, 11:24am, James Bottomley wrote: } Subject: Re: [tpmdd-devel] [RFC] tpm2-space: add handling for global sessi Good morning to everyone. > On Thu, 2017-02-09 at 03:06 -0600, Dr. Greg Wettstein wrote: > > Referring back to Ken's comments about having 20+ clients waiting to >

Re: [tpmdd-devel] [RFC] tpm2-space: add handling for global session exhaustion

On Jan 30, 11:58pm, Jarkko Sakkinen wrote: } Subject: Re: [tpmdd-devel] [RFC] tpm2-space: add handling for global sessi Good morning, I hope the day is going well for everyone. > I'm kind dilating to an opinion that we would leave this commit out > from the first kernel release that will contain

Re: [tpmdd-devel] [RFC] tpm2-space: add handling for global session exhaustion

On Jan 30, 11:58pm, Jarkko Sakkinen wrote: } Subject: Re: [tpmdd-devel] [RFC] tpm2-space: add handling for global sessi Good morning, I hope the day is going well for everyone. > I'm kind dilating to an opinion that we would leave this commit out > from the first kernel release that will contain

Re: [PATCH] tpm: Restore functionality to xen vtpm driver.

On Jan 20, 5:22pm, Boris Ostrovsky wrote: } Subject: Re: [PATCH] tpm: Restore functionality to xen vtpm driver. > On 01/20/2017 10:00 AM, Dr. Greg Wettstein wrote: > > Functionality of the xen-tpmfront driver was lost secondary to > > the introduction of xenbus mul

Re: [PATCH] tpm: Restore functionality to xen vtpm driver.

On Jan 20, 5:22pm, Boris Ostrovsky wrote: } Subject: Re: [PATCH] tpm: Restore functionality to xen vtpm driver. > On 01/20/2017 10:00 AM, Dr. Greg Wettstein wrote: > > Functionality of the xen-tpmfront driver was lost secondary to > > the introduction of xenbus mul

[PATCH] tpm: Restore functionality to xen vtpm driver.

ase in which multi-page xenbus support was introduced. Daniel De Graaf formulated the fix by code inspection after the regression point was located. Cc: <sta...@vger.kernel.org> # 4.1- Suggested-by: Daniel De Graaf <dgde...@tycho.nsa.gov> Signed-off-by: Dr. Greg Wettstein <g...@enje

[PATCH] tpm: Restore functionality to xen vtpm driver.

ase in which multi-page xenbus support was introduced. Daniel De Graaf formulated the fix by code inspection after the regression point was located. Cc: # 4.1- Suggested-by: Daniel De Graaf Signed-off-by: Dr. Greg Wettstein --- drivers/char/tpm/xen-tpmfront.c | 2 +- 1 file changed, 1 ins

Re: [tpmdd-devel] [PATCH RFC 0/4] RFC: in-kernel resource manager

On Jan 3, 5:21pm, Ken Goldman wrote: } Subject: Re: [tpmdd-devel] [PATCH RFC 0/4] RFC: in-kernel resource manager Good morning, I hope this note finds the day going well for everyone. > On 1/3/2017 4:47 PM, Jason Gunthorpe wrote: > > > > I think we should also consider TPM 1.2 support in all of

Re: [tpmdd-devel] [PATCH RFC 0/4] RFC: in-kernel resource manager

On Jan 3, 5:21pm, Ken Goldman wrote: } Subject: Re: [tpmdd-devel] [PATCH RFC 0/4] RFC: in-kernel resource manager Good morning, I hope this note finds the day going well for everyone. > On 1/3/2017 4:47 PM, Jason Gunthorpe wrote: > > > > I think we should also consider TPM 1.2 support in all of

[PATCH] tpm: Restore functionality to xen vtpm driver.

ase in which multi-page xenbus support was introduced. Daniel De Graaf formulated the fix by code inspection after the regression point was located. Signed-off-by: Dr. Greg Wettstein <g...@enjellic.com> --- drivers/char/tpm/xen-tpmfront.c | 2 +- 1 file changed, 1 insertion(+), 1 delet

[PATCH] tpm: Restore functionality to xen vtpm driver.

ase in which multi-page xenbus support was introduced. Daniel De Graaf formulated the fix by code inspection after the regression point was located. Signed-off-by: Dr. Greg Wettstein --- drivers/char/tpm/xen-tpmfront.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/

Re: [PATCH 0/6] Intel Secure Guard Extensions

On Sun, May 08, 2016 at 06:32:10PM -0700, Andy Lutomirski wrote: Good morning, running behind on e-mail this week but wanted to get some reflections out on Andy's well taken comments and concerns. > On May 8, 2016 2:59 AM, "Dr. Greg Wettstein" <g...@enjellic.com> wrote: &

Re: [PATCH 0/6] Intel Secure Guard Extensions

On Sun, May 08, 2016 at 06:32:10PM -0700, Andy Lutomirski wrote: Good morning, running behind on e-mail this week but wanted to get some reflections out on Andy's well taken comments and concerns. > On May 8, 2016 2:59 AM, "Dr. Greg Wettstein" wrote: > > > > > &

Re: [PATCH 0/6] Intel Secure Guard Extensions

On Mon, May 09, 2016 at 08:27:04AM +0200, Thomas Gleixner wrote: Good morning. > > On Fri, 6 May 2016, Jarkko Sakkinen wrote: > > I fully understand if you (and others) want to keep this standpoint but > > what if we could get it to staging after I've revised it with suggested > > > This should

Re: [PATCH 0/6] Intel Secure Guard Extensions

On Mon, May 09, 2016 at 08:27:04AM +0200, Thomas Gleixner wrote: Good morning. > > On Fri, 6 May 2016, Jarkko Sakkinen wrote: > > I fully understand if you (and others) want to keep this standpoint but > > what if we could get it to staging after I've revised it with suggested > > > This should

Re: [PATCH 0/6] Intel Secure Guard Extensions

Hi, I hope the weekend is going well for everyone. On Fri, May 06, 2016 at 02:39:44PM +0300, Jarkko Sakkinen wrote: > On Tue, May 03, 2016 at 04:06:27AM -0500, Dr. Greg Wettstein wrote: > > It would be helpful and instructive for anyone involved in this debate > > to review th

Re: [PATCH 0/6] Intel Secure Guard Extensions

Hi, I hope the weekend is going well for everyone. On Fri, May 06, 2016 at 02:39:44PM +0300, Jarkko Sakkinen wrote: > On Tue, May 03, 2016 at 04:06:27AM -0500, Dr. Greg Wettstein wrote: > > It would be helpful and instructive for anyone involved in this debate > > to review th

Re: [PATCH 0/6] Intel Secure Guard Extensions

On Tue, May 03, 2016 at 05:38:40PM +0200, Pavel Machek wrote: > Hi! Good morning, I hope everyone's day is starting out well. > > I told my associates the first time I reviewed this technology that > > SGX has the ability to be a bit of a Pandora's box and it seems to be > > following that

Re: [PATCH 0/6] Intel Secure Guard Extensions

On Tue, May 03, 2016 at 05:38:40PM +0200, Pavel Machek wrote: > Hi! Good morning, I hope everyone's day is starting out well. > > I told my associates the first time I reviewed this technology that > > SGX has the ability to be a bit of a Pandora's box and it seems to be > > following that

Re: [PATCH 0/6] Intel Secure Guard Extensions

On May 2, 11:37am, "Austin S. Hemmelgarn" wrote: } Subject: Re: [PATCH 0/6] Intel Secure Guard Extensions Good morning, I hope the day is starting out well for everyone. > On 2016-04-29 16:17, Jarkko Sakkinen wrote: > > On Tue, Apr 26, 2016 at 09:00:10PM +0200, Pavel Machek wrote: > >> On Mon

Re: [PATCH 0/6] Intel Secure Guard Extensions

On May 2, 11:37am, "Austin S. Hemmelgarn" wrote: } Subject: Re: [PATCH 0/6] Intel Secure Guard Extensions Good morning, I hope the day is starting out well for everyone. > On 2016-04-29 16:17, Jarkko Sakkinen wrote: > > On Tue, Apr 26, 2016 at 09:00:10PM +0200, Pavel Machek wrote: > >> On Mon

Re: [PATCH 1/3] pmem: Initial version of persistent memory driver

On Mar 26, 9:32am, Christoph Hellwig wrote: } Subject: [PATCH 1/3] pmem: Initial version of persistent memory driver Hi, I hope the week has been going well for everyone. > From: Ross Zwisler > > PMEM is a new driver that presents a reserved range of memory as a > block device. This is

Re: [PATCH 1/3] pmem: Initial version of persistent memory driver

On Mar 26, 9:32am, Christoph Hellwig wrote: } Subject: [PATCH 1/3] pmem: Initial version of persistent memory driver Hi, I hope the week has been going well for everyone. From: Ross Zwisler ross.zwis...@linux.intel.com PMEM is a new driver that presents a reserved range of memory as a

Re: [Scst-devel] ANNOUNCE: Hugepage (HPD) block device driver.

On Jun 15, 8:43pm, Curtis wrote: } Subject: Re: [Scst-devel] ANNOUNCE: Hugepage (HPD) block device driver. > Greg, Hi Curtis, hope your is starting out well. > this project looks quite interesting, and I hope to try it out soon, > however I do have one question, though it may expose my

Re: [Scst-devel] ANNOUNCE: Hugepage (HPD) block device driver.

On Jun 15, 8:43pm, Curtis wrote: } Subject: Re: [Scst-devel] ANNOUNCE: Hugepage (HPD) block device driver. Greg, Hi Curtis, hope your is starting out well. this project looks quite interesting, and I hope to try it out soon, however I do have one question, though it may expose my ignorance

ANNOUNCE: Hugepage (HPD) block device driver.

Good morning, I hope this note finds the weekend going well for everyone. Izzy, our Golden Retriever, and I headed out to our lake place last weekend. I was fighting off a miserable early summer cold so I didn't feel up to cycling and the fish weren't biting so Izzy suggested we catch up on our

ANNOUNCE: Hugepage (HPD) block device driver.

Good morning, I hope this note finds the weekend going well for everyone. Izzy, our Golden Retriever, and I headed out to our lake place last weekend. I was fighting off a miserable early summer cold so I didn't feel up to cycling and the fish weren't biting so Izzy suggested we catch up on our