diff for duplicates of <1505027603.3224.56.camel@linux.vnet.ibm.com> diff --git a/a/1.txt b/N1/1.txt index b0df2ff..f9267cd 100644 --- a/a/1.txt +++ b/N1/1.txt @@ -21,7 +21,7 @@ On Fri, 2017-09-08 at 18:38 -0400, Theodore Ts'o wrote: > impact, since we don't need to lock down the file while the kernel > needs to run SHA1 on potentially gigabytes worth of file data.) > * Most use cases for file-level checksums are for files that -> don?t change over time (e.g., for Video, Audio, Backup files, +> don’t change over time (e.g., for Video, Audio, Backup files, > etc.) This allows us to provide a cheap and efficient way to > provide checksum protect against storage-level corruption > fairly easily. So by supporting both SHA and CRC-32, we can @@ -32,7 +32,7 @@ On Fri, 2017-09-08 at 18:38 -0400, Theodore Ts'o wrote: > functionality. >From a file integrity perspective this would be interesting, but that -only addresses IMA-appraisal, not IMA-integrity or IMA-audit. ?We +only addresses IMA-appraisal, not IMA-integrity or IMA-audit. We would still need to calculate the file hash to be included in the measurement list and used for auditing. @@ -40,8 +40,3 @@ Have you done any work on protecting the directory information itself (eg. file names) using Merkle trees? Mimi - --- -To unsubscribe from this list: send the line "unsubscribe linux-security-module" in -the body of a message to majordomo at vger.kernel.org -More majordomo info at http://vger.kernel.org/majordomo-info.html diff --git a/a/content_digest b/N1/content_digest index 04f4125..f92082f 100644 --- a/a/content_digest +++ b/N1/content_digest @@ -2,10 +2,15 @@ "ref\0CA+55aFw8wgA+jhBOhnY-TSdbPgiYcrFiipCV=rsS1=GQEN+JgQ@mail.gmail.com\0" "ref\0alpine.LRH.2.21.1709081448090.7880@namei.org\0" "ref\020170908223806.7yv6eohtsispwgas@thunk.org\0" - "From\0zohar@linux.vnet.ibm.com (Mimi Zohar)\0" - "Subject\0[GIT PULL] Security subsystem updates for 4.14\0" + "From\0Mimi Zohar <zohar@linux.vnet.ibm.com>\0" + "Subject\0Re: [GIT PULL] Security subsystem updates for 4.14\0" "Date\0Sun, 10 Sep 2017 03:13:23 -0400\0" - "To\0linux-security-module@vger.kernel.org\0" + "To\0Theodore Ts'o <tytso@mit.edu>" + " James Morris <jmorris@namei.org>\0" + "Cc\0Linus Torvalds <torvalds@linux-foundation.org>" + Linux Kernel Mailing List <linux-kernel@vger.kernel.org> + LSM List <linux-security-module@vger.kernel.org> + " Christoph Hellwig <hch@infradead.org>\0" "\00:1\0" "b\0" "On Fri, 2017-09-08 at 18:38 -0400, Theodore Ts'o wrote:\n" @@ -31,7 +36,7 @@ "> \timpact, since we don't need to lock down the file while the kernel\n" "> \tneeds to run SHA1 on potentially gigabytes worth of file data.)\n" "> * Most use cases for file-level checksums are for files that\n" - "> don?t change over time (e.g., for Video, Audio, Backup files,\n" + "> don\342\200\231t change over time (e.g., for Video, Audio, Backup files,\n" "> etc.) This allows us to provide a cheap and efficient way to\n" "> provide checksum protect against storage-level corruption\n" "> fairly easily. So by supporting both SHA and CRC-32, we can\n" @@ -42,18 +47,13 @@ "> functionality.\n" "\n" ">From a file integrity perspective this would be interesting, but that\n" - "only addresses IMA-appraisal, not IMA-integrity or IMA-audit. ?We\n" + "only addresses IMA-appraisal, not IMA-integrity or IMA-audit. \302\240We\n" "would still need to calculate the file hash to be included in the\n" "measurement list and used for auditing.\n" "\n" "Have you done any work on protecting the directory information itself\n" "(eg. file names) using Merkle trees?\n" "\n" - "Mimi\n" - "\n" - "--\n" - "To unsubscribe from this list: send the line \"unsubscribe linux-security-module\" in\n" - "the body of a message to majordomo at vger.kernel.org\n" - More majordomo info at http://vger.kernel.org/majordomo-info.html + Mimi -df62ea2f60ecad8617d1334c117239169e2da40558aaeeb25eaeeeade06ee14f +f899e2818aaf61be030ee0ba5b91cb7f3d160c311e5c7775ff103de3288084d7
This is an external index of several public inboxes, see mirroring instructions on how to clone and mirror all data and code used by this external index.