Re: [Linux-ima-devel] [RFC PATCH 1/5] ima: extend clone() with IMA namespace support

2017-07-31 Thread Mimi Zohar
On Fri, 2017-07-28 at 14:19 +, Magalhaes, Guilherme (Brazil R CL) wrote: > > > Each measurement entry in the list could have new fields to identify > > > the namespace. Since the namespaces can be reused, a timestamp or > > > others fields could be added to uniquely identify the namespace id.

Re: [Linux-ima-devel] [RFC PATCH 1/5] ima: extend clone() with IMA namespace support

2017-07-31 Thread Mimi Zohar
On Fri, 2017-07-28 at 14:19 +, Magalhaes, Guilherme (Brazil R CL) wrote: > > > Each measurement entry in the list could have new fields to identify > > > the namespace. Since the namespaces can be reused, a timestamp or > > > others fields could be added to uniquely identify the namespace id.

RE: [Linux-ima-devel] [RFC PATCH 1/5] ima: extend clone() with IMA namespace support

2017-07-28 Thread Magalhaes, Guilherme (Brazil R)
> > Each measurement entry in the list could have new fields to identify > > the namespace. Since the namespaces can be reused, a timestamp or > > others fields could be added to uniquely identify the namespace id. > > The more fields included in the measurement list, the more > measurements will

RE: [Linux-ima-devel] [RFC PATCH 1/5] ima: extend clone() with IMA namespace support

2017-07-28 Thread Magalhaes, Guilherme (Brazil R)
> > Each measurement entry in the list could have new fields to identify > > the namespace. Since the namespaces can be reused, a timestamp or > > others fields could be added to uniquely identify the namespace id. > > The more fields included in the measurement list, the more > measurements will

Re: [Linux-ima-devel] [RFC PATCH 1/5] ima: extend clone() with IMA namespace support

2017-07-27 Thread Stefan Berger
On 07/27/2017 03:39 PM, Magalhaes, Guilherme (Brazil R) wrote: There's a vTPM proxy driver in the kernel that enables spawning a frontend /dev/tpm%d and an anonymous backend file descriptor where a vTPM can listen on for TPM commands. I integrated this with 'swtpm' and I have been working on

Re: [Linux-ima-devel] [RFC PATCH 1/5] ima: extend clone() with IMA namespace support

2017-07-27 Thread Stefan Berger
On 07/27/2017 03:39 PM, Magalhaes, Guilherme (Brazil R) wrote: There's a vTPM proxy driver in the kernel that enables spawning a frontend /dev/tpm%d and an anonymous backend file descriptor where a vTPM can listen on for TPM commands. I integrated this with 'swtpm' and I have been working on

RE: [Linux-ima-devel] [RFC PATCH 1/5] ima: extend clone() with IMA namespace support

2017-07-27 Thread Magalhaes, Guilherme (Brazil R)
mes Bottomley > <james.bottom...@hansenpartnership.com>; linux-security-module security-mod...@vger.kernel.org>; ima-devel de...@lists.sourceforge.net>; Yuqiong Sun <s...@us.ibm.com> > Subject: Re: [Linux-ima-devel] [RFC PATCH 1/5] ima: extend clone() with IMA > nam

RE: [Linux-ima-devel] [RFC PATCH 1/5] ima: extend clone() with IMA namespace support

2017-07-27 Thread Magalhaes, Guilherme (Brazil R)
ation.org>; linux-kernel ; David Safford > ; James Bottomley > ; linux-security-module security-mod...@vger.kernel.org>; ima-devel de...@lists.sourceforge.net>; Yuqiong Sun > Subject: Re: [Linux-ima-devel] [RFC PATCH 1/5] ima: extend clone() with IMA > namespace support > > O

Re: [Linux-ima-devel] [RFC PATCH 1/5] ima: extend clone() with IMA namespace support

2017-07-27 Thread Stefan Berger
hansenpartnership.com>; linux-security-module ; ima-devel ; Yuqiong Sun <s...@us.ibm.com> Subject: Re: [Linux-ima-devel] [RFC PATCH 1/5] ima: extend clone() with IMA namespace support On Thu, 2017-07-27 at 12:51 +, Magalhaes, Guilherme (Brazil R CL) wrote: On Tue, 2017-07-25 at 16:

Re: [Linux-ima-devel] [RFC PATCH 1/5] ima: extend clone() with IMA namespace support

2017-07-27 Thread Stefan Berger
; linux-kernel ; David Safford ; James Bottomley ; linux-security-module ; ima-devel ; Yuqiong Sun Subject: Re: [Linux-ima-devel] [RFC PATCH 1/5] ima: extend clone() with IMA namespace support On Thu, 2017-07-27 at 12:51 +, Magalhaes, Guilherme (Brazil R CL) wrote: On Tue, 2017-07-25 at 16:08

RE: [Linux-ima-devel] [RFC PATCH 1/5] ima: extend clone() with IMA namespace support

2017-07-27 Thread Magalhaes, Guilherme (Brazil R)
ip.com>; linux-security-module security-mod...@vger.kernel.org>; ima-devel de...@lists.sourceforge.net>; Yuqiong Sun <s...@us.ibm.com> > Subject: Re: [Linux-ima-devel] [RFC PATCH 1/5] ima: extend clone() with IMA > namespace support > > On Thu, 2017-07-27 at 12:51 +

RE: [Linux-ima-devel] [RFC PATCH 1/5] ima: extend clone() with IMA namespace support

2017-07-27 Thread Magalhaes, Guilherme (Brazil R)
David Safford > ; James Bottomley > ; linux-security-module security-mod...@vger.kernel.org>; ima-devel de...@lists.sourceforge.net>; Yuqiong Sun > Subject: Re: [Linux-ima-devel] [RFC PATCH 1/5] ima: extend clone() with IMA > namespace support > > On Thu, 2017-07-27 at

Re: [Linux-ima-devel] [RFC PATCH 1/5] ima: extend clone() with IMA namespace support

2017-07-27 Thread Mimi Zohar
On Thu, 2017-07-27 at 12:51 +, Magalhaes, Guilherme (Brazil R CL) wrote: > > > > On Tue, 2017-07-25 at 16:08 -0500, Serge E. Hallyn wrote: > > > On Tue, Jul 25, 2017 at 04:57:57PM -0400, Mimi Zohar wrote: > > > > On Tue, 2017-07-25 at 15:46 -0500, Serge E. Hallyn wrote: > > > > > On Tue, Jul

Re: [Linux-ima-devel] [RFC PATCH 1/5] ima: extend clone() with IMA namespace support

2017-07-27 Thread Mimi Zohar
On Thu, 2017-07-27 at 12:51 +, Magalhaes, Guilherme (Brazil R CL) wrote: > > > > On Tue, 2017-07-25 at 16:08 -0500, Serge E. Hallyn wrote: > > > On Tue, Jul 25, 2017 at 04:57:57PM -0400, Mimi Zohar wrote: > > > > On Tue, 2017-07-25 at 15:46 -0500, Serge E. Hallyn wrote: > > > > > On Tue, Jul

RE: [Linux-ima-devel] [RFC PATCH 1/5] ima: extend clone() with IMA namespace support

2017-07-27 Thread Magalhaes, Guilherme (Brazil R)
;; ima-devel de...@lists.sourceforge.net>; Yuqiong Sun <s...@us.ibm.com> > Subject: Re: [Linux-ima-devel] [RFC PATCH 1/5] ima: extend clone() with IMA > namespace support > > On Tue, 2017-07-25 at 16:08 -0500, Serge E. Hallyn wrote: > > On Tue, Jul 25, 2017 at 04:57:57PM -040

RE: [Linux-ima-devel] [RFC PATCH 1/5] ima: extend clone() with IMA namespace support

2017-07-27 Thread Magalhaes, Guilherme (Brazil R)
gt; ; linux-security-module security-mod...@vger.kernel.org>; ima-devel de...@lists.sourceforge.net>; Yuqiong Sun > Subject: Re: [Linux-ima-devel] [RFC PATCH 1/5] ima: extend clone() with IMA > namespace support > > On Tue, 2017-07-25 at 16:08 -0500, Serge E. Hallyn wrote: >