From: Mimi Zohar <zohar@linux.vnet.ibm.com>
To: Dave Young <dyoung@redhat.com>
Cc: "Luis R. Rodriguez" <mcgrof@suse.com>,
kexec@lists.infradead.org, David Howells <dhowells@redhat.com>,
linux-security-module@vger.kernel.org,
linux-ima-devel@lists.sourceforge.net,
David Woodhouse <dwmw2@infradead.org>,
Vivek Goyal <vgoyal@redhat.com>
Subject: Re: [Linux-ima-devel] [PATCH v2 4/7] ima: measure and appraise kexec image and initramfs
Date: Tue, 29 Dec 2015 07:22:27 -0500 [thread overview]
Message-ID: <1451391747.3078.44.camel@linux.vnet.ibm.com> (raw)
In-Reply-To: <1451390772.3078.39.camel@linux.vnet.ibm.com>
On Tue, 2015-12-29 at 07:06 -0500, Mimi Zohar wrote:
> On Tue, 2015-12-29 at 16:21 +0800, Dave Young wrote:
> This policy flexibility is needed at least until all files come from
> software providers with file signatures. (RPM has been modified to
> include file signatures.) Even then, in terms of kexec, some distros
> generate the initramfs on the target host and, therefore, can not sign
> the initramfs. The local user could, however, sign the initramfs on
> their own system.
Sorry, instead of "local user" the "local system/host owner" would be
more appropriate.
Mimi
_______________________________________________
kexec mailing list
kexec@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/kexec
prev parent reply other threads:[~2015-12-29 12:23 UTC|newest]
Thread overview: 12+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <1450914903-5793-1-git-send-email-zohar@linux.vnet.ibm.com>
[not found] ` <1450914903-5793-5-git-send-email-zohar@linux.vnet.ibm.com>
2015-12-25 5:33 ` [Linux-ima-devel] [PATCH v2 4/7] ima: measure and appraise kexec image and initramfs Dave Young
2015-12-25 14:45 ` Mimi Zohar
2015-12-28 2:08 ` Dave Young
2015-12-28 12:50 ` Mimi Zohar
2015-12-28 12:51 ` Mimi Zohar
2015-12-28 14:29 ` Petko Manolov
2015-12-28 14:42 ` Mimi Zohar
2015-12-28 14:59 ` Petko Manolov
2015-12-28 15:34 ` Mimi Zohar
2015-12-29 8:21 ` Dave Young
2015-12-29 12:06 ` Mimi Zohar
2015-12-29 12:22 ` Mimi Zohar [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1451391747.3078.44.camel@linux.vnet.ibm.com \
--to=zohar@linux.vnet.ibm.com \
--cc=dhowells@redhat.com \
--cc=dwmw2@infradead.org \
--cc=dyoung@redhat.com \
--cc=kexec@lists.infradead.org \
--cc=linux-ima-devel@lists.sourceforge.net \
--cc=linux-security-module@vger.kernel.org \
--cc=mcgrof@suse.com \
--cc=vgoyal@redhat.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.