All of lore.kernel.org
 help / color / mirror / Atom feed
From: Mimi Zohar <zohar@linux.vnet.ibm.com>
To: David Laight <David.Laight@ACULAB.COM>
Cc: "linuxppc-dev@lists.ozlabs.org" <linuxppc-dev@lists.ozlabs.org>,
	"kexec@lists.infradead.org" <kexec@lists.infradead.org>,
	"linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>,
	"linux-ima-devel@lists.sourceforge.net"
	<linux-ima-devel@lists.sourceforge.net>,
	"linux-security-module@vger.kernel.org"
	<linux-security-module@vger.kernel.org>,
	'Thiago Jung Bauermann' <bauerman@linux.vnet.ibm.com>,
	Dave Young <dyoung@redhat.com>
Subject: Re: [PATCH 1/7] ima: on soft reboot, restore the measurement list
Date: Tue, 09 Aug 2016 10:02:57 -0400	[thread overview]
Message-ID: <1470751377.2881.137.camel@linux.vnet.ibm.com> (raw)
In-Reply-To: <063D6719AE5E284EB5DD2968C1650D6D5F50D431@AcuExch.aculab.com>

On Tue, 2016-08-09 at 13:35 +0000, David Laight wrote:

> Also why '__packed' - guarantees sub-optimal code generation.
> Much better to include explicit padding to align everything.

This patch set does not define a new format, but piggy backs on top of
the existing <securityfs>/ima/binary_runtime_measurements list.  The
prefixed buffer header includes a version, so that if in the future we
need to modify the format, we would be able to.

In terms of the prefixed header, how would you define the fields:
version, buffer size, number of measurements? 

Mimi


_______________________________________________
kexec mailing list
kexec@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/kexec

WARNING: multiple messages have this Message-ID (diff)
From: Mimi Zohar <zohar@linux.vnet.ibm.com>
To: David Laight <David.Laight@ACULAB.COM>
Cc: "'Thiago Jung Bauermann'" <bauerman@linux.vnet.ibm.com>,
	Dave Young <dyoung@redhat.com>,
	"kexec@lists.infradead.org" <kexec@lists.infradead.org>,
	"linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>,
	"linux-security-module@vger.kernel.org"
	<linux-security-module@vger.kernel.org>,
	"linux-ima-devel@lists.sourceforge.net"
	<linux-ima-devel@lists.sourceforge.net>,
	"linuxppc-dev@lists.ozlabs.org" <linuxppc-dev@lists.ozlabs.org>
Subject: Re: [PATCH 1/7] ima: on soft reboot, restore the measurement list
Date: Tue, 09 Aug 2016 10:02:57 -0400	[thread overview]
Message-ID: <1470751377.2881.137.camel@linux.vnet.ibm.com> (raw)
In-Reply-To: <063D6719AE5E284EB5DD2968C1650D6D5F50D431@AcuExch.aculab.com>

On Tue, 2016-08-09 at 13:35 +0000, David Laight wrote:

> Also why '__packed' - guarantees sub-optimal code generation.
> Much better to include explicit padding to align everything.

This patch set does not define a new format, but piggy backs on top of
the existing <securityfs>/ima/binary_runtime_measurements list.  The
prefixed buffer header includes a version, so that if in the future we
need to modify the format, we would be able to.

In terms of the prefixed header, how would you define the fields:
version, buffer size, number of measurements? 

Mimi

  reply	other threads:[~2016-08-09 14:03 UTC|newest]

Thread overview: 62+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2016-08-04 12:24 [PATCH 0/7] ima: carry the measurement list across kexec Mimi Zohar
2016-08-04 12:24 ` Mimi Zohar
2016-08-04 12:24 ` [PATCH 1/7] ima: on soft reboot, restore the measurement list Mimi Zohar
2016-08-04 12:24   ` Mimi Zohar
2016-08-05  8:44   ` Petko Manolov
2016-08-05  8:44     ` Petko Manolov
2016-08-05 13:34     ` Mimi Zohar
2016-08-05 13:34       ` Mimi Zohar
2016-08-05 15:56       ` Petko Manolov
2016-08-05 15:56         ` Petko Manolov
2016-08-09 10:59   ` Michael Ellerman
2016-08-09 10:59     ` Michael Ellerman
2016-08-09 13:01     ` Mimi Zohar
2016-08-09 13:01       ` Mimi Zohar
2016-08-09 13:19       ` Thiago Jung Bauermann
2016-08-09 13:19         ` Thiago Jung Bauermann
2016-08-09 13:35         ` David Laight
2016-08-09 13:35           ` David Laight
2016-08-09 13:35           ` David Laight
2016-08-09 14:02           ` Mimi Zohar [this message]
2016-08-09 14:02             ` Mimi Zohar
2016-08-09 13:55         ` Mimi Zohar
2016-08-09 13:55           ` Mimi Zohar
2016-08-09 14:06           ` Mimi Zohar
2016-08-09 14:06             ` Mimi Zohar
2016-08-09 23:13         ` Samuel Mendoza-Jonas
2016-08-09 23:13           ` Samuel Mendoza-Jonas
2016-08-10  3:41         ` Michael Ellerman
2016-08-10  3:41           ` Michael Ellerman
2016-08-10  5:05           ` Thiago Jung Bauermann
2016-08-10  5:05             ` Thiago Jung Bauermann
2016-08-10  9:52             ` Michael Ellerman
2016-08-10  9:52               ` Michael Ellerman
2016-08-10 12:54               ` Mimi Zohar
2016-08-10 12:54                 ` Mimi Zohar
2016-08-10 14:32                 ` [Linux-ima-devel] " Petko Manolov
2016-08-10 14:32                   ` Petko Manolov
2016-08-10 14:40                   ` David Laight
2016-08-10 14:40                     ` David Laight
2016-08-10 14:40                     ` David Laight
2016-08-10 15:48                     ` Petko Manolov
2016-08-10 15:48                       ` Petko Manolov
2016-08-04 12:24 ` [PATCH 2/7] ima: permit duplicate measurement list entries Mimi Zohar
2016-08-04 12:24   ` Mimi Zohar
2016-08-04 12:24 ` [PATCH 3/7] ima: maintain memory size needed for serializing the measurement list Mimi Zohar
2016-08-04 12:24   ` Mimi Zohar
2016-08-04 12:24 ` [PATCH 4/7] ima: serialize the binary_runtime_measurements Mimi Zohar
2016-08-04 12:24   ` Mimi Zohar
2016-08-04 12:24 ` [PATCH 5/7] ima: on soft reboot, save the measurement list Mimi Zohar
2016-08-04 12:24   ` Mimi Zohar
2016-08-04 12:24 ` [PATCH 6/7] ima: store the builtin/custom template definitions in a list Mimi Zohar
2016-08-04 12:24   ` Mimi Zohar
2016-08-04 12:24 ` [PATCH 7/7] ima: support restoring multiple template formats Mimi Zohar
2016-08-04 12:24   ` Mimi Zohar
2016-08-09  5:19 ` [PATCH 0/7] ima: carry the measurement list across kexec Balbir Singh
2016-08-09  5:19   ` Balbir Singh
2016-08-09 12:36   ` Mimi Zohar
2016-08-09 12:36     ` Mimi Zohar
2016-08-11  7:38     ` Balbir Singh
2016-08-11  7:38       ` Balbir Singh
2016-08-11 11:25       ` Mimi Zohar
2016-08-11 11:25         ` Mimi Zohar

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1470751377.2881.137.camel@linux.vnet.ibm.com \
    --to=zohar@linux.vnet.ibm.com \
    --cc=David.Laight@ACULAB.COM \
    --cc=bauerman@linux.vnet.ibm.com \
    --cc=dyoung@redhat.com \
    --cc=kexec@lists.infradead.org \
    --cc=linux-ima-devel@lists.sourceforge.net \
    --cc=linux-kernel@vger.kernel.org \
    --cc=linux-security-module@vger.kernel.org \
    --cc=linuxppc-dev@lists.ozlabs.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.