All of lore.kernel.org
 help / color / mirror / Atom feed
From: Mimi Zohar <zohar@linux.vnet.ibm.com>
To: hpa@zytor.com, Taras Kondratiuk <takondra@cisco.com>,
	Al Viro <viro@zeniv.linux.org.uk>, Arnd Bergmann <arnd@arndb.de>,
	Rob Landley <rob@landley.net>, Jonathan Corbet <corbet@lwn.net>,
	James McMechan <james.w.mcmechan@gmail.com>
Cc: initramfs@vger.kernel.org, Victor Kamensky <kamensky@cisco.com>,
	linux-doc@vger.kernel.org, linux-kernel@vger.kernel.org,
	linux-security-module@vger.kernel.org,
	xe-linux-external@cisco.com
Subject: Re: [PATCH v3 01/15] Documentation: add newcx initramfs format description
Date: Sat, 17 Feb 2018 19:47:06 -0500	[thread overview]
Message-ID: <1518914826.5667.288.camel@linux.vnet.ibm.com> (raw)
In-Reply-To: <117FCFDB-EA4C-4C0C-A01E-7C6C86693E6F@zytor.com>

On Sat, 2018-02-17 at 16:26 -0800, hpa@zytor.com wrote:

> Do you have a description of the gaps you have identified?

Probably the 2016 Linux Security Summit (LSS) integrity status update
has the best list.

http://events17.linuxfoundation.org/sites/events/files/slides/LSS2016-
LinuxIntegritySubsystemStatus.pdf

Mimi


WARNING: multiple messages have this Message-ID (diff)
From: zohar@linux.vnet.ibm.com (Mimi Zohar)
To: linux-security-module@vger.kernel.org
Subject: [PATCH v3 01/15] Documentation: add newcx initramfs format description
Date: Sat, 17 Feb 2018 19:47:06 -0500	[thread overview]
Message-ID: <1518914826.5667.288.camel@linux.vnet.ibm.com> (raw)
In-Reply-To: <117FCFDB-EA4C-4C0C-A01E-7C6C86693E6F@zytor.com>

On Sat, 2018-02-17 at 16:26 -0800, hpa at zytor.com wrote:

> Do you have a description of the gaps you have identified?

Probably the 2016 Linux Security Summit (LSS) integrity status update
has the best list.

http://events17.linuxfoundation.org/sites/events/files/slides/LSS2016-
LinuxIntegritySubsystemStatus.pdf

Mimi

--
To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
the body of a message to majordomo at vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

  reply	other threads:[~2018-02-18  0:47 UTC|newest]

Thread overview: 90+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2018-02-16 20:33 [PATCH v3 00/15] extend initramfs archive format to support xattrs Taras Kondratiuk
2018-02-16 20:33 ` Taras Kondratiuk
2018-02-16 20:33 ` Taras Kondratiuk
     [not found] ` <1518813234-5874-1-git-send-email-takondra-FYB4Gu1CFyUAvxtiuMwx3w@public.gmane.org>
2018-02-16 20:33   ` [PATCH v3 01/15] Documentation: add newcx initramfs format description Taras Kondratiuk
2018-02-16 20:33     ` Taras Kondratiuk
2018-02-16 20:33     ` Taras Kondratiuk
2018-02-16 20:59     ` H. Peter Anvin
2018-02-16 20:59       ` H. Peter Anvin
2018-02-16 21:25       ` Rob Landley
2018-02-16 21:25         ` Rob Landley
2018-02-16 21:47         ` Victor Kamensky
2018-02-16 21:47           ` Victor Kamensky
     [not found]           ` <alpine.LRH.2.00.1802161336350.22409-fZ7xe+6E5F8pLdfb+Kaa2CW4+XlvGpQz@public.gmane.org>
2018-02-17  0:00             ` hpa-YMNOUZJC4hwAvxtiuMwx3w
2018-02-17  0:00               ` hpa
2018-02-17  0:00               ` hpa at zytor.com
     [not found]               ` <A5A0727C-B932-49F6-A7D7-AA7CAECECF96-YMNOUZJC4hwAvxtiuMwx3w@public.gmane.org>
2018-02-17 10:04                 ` Taras Kondratiuk
2018-02-17 10:04                   ` Taras Kondratiuk
2018-02-17 10:04                   ` Taras Kondratiuk
2018-02-17 17:32               ` Rob Landley
2018-02-17 17:32                 ` Rob Landley
2018-02-17 17:32                 ` Rob Landley
2018-02-18  0:15       ` Mimi Zohar
2018-02-18  0:15         ` Mimi Zohar
2018-02-18  0:24         ` hpa
2018-02-18  0:24           ` hpa at zytor.com
     [not found]         ` <1518912912.5667.277.camel-23VcF4HTsmIX0ybBhKVfKdBPR1lH4CV8@public.gmane.org>
2018-02-18  0:26           ` hpa-YMNOUZJC4hwAvxtiuMwx3w
2018-02-18  0:26             ` hpa
2018-02-18  0:26             ` hpa at zytor.com
2018-02-18  0:47             ` Mimi Zohar [this message]
2018-02-18  0:47               ` Mimi Zohar
2018-02-16 20:33   ` [PATCH v3 02/15] initramfs: replace states with function pointers Taras Kondratiuk
2018-02-16 20:33     ` Taras Kondratiuk
2018-02-16 20:33     ` Taras Kondratiuk
2018-02-16 20:33   ` [PATCH v3 14/14] selinux: delay sid population for rootfs till init is complete Taras Kondratiuk
2018-02-16 20:33     ` Taras Kondratiuk
2018-02-16 20:33     ` Taras Kondratiuk
2018-02-16 20:33 ` [PATCH v3 03/15] initramfs: store file name in name_buf Taras Kondratiuk
2018-02-16 20:33   ` Taras Kondratiuk
2018-02-16 20:33 ` [PATCH v3 04/15] initramfs: remove unnecessary symlinks processing shortcut Taras Kondratiuk
2018-02-16 20:33   ` Taras Kondratiuk
2018-02-16 20:33 ` [PATCH v3 05/15] initramfs: move files creation into separate state Taras Kondratiuk
2018-02-16 20:33   ` Taras Kondratiuk
2018-02-16 20:33 ` [PATCH v3 06/15] initramfs: separate reading cpio method from header Taras Kondratiuk
2018-02-16 20:33   ` Taras Kondratiuk
2018-02-16 20:33 ` [PATCH v3 07/15] initramfs: split header layout information from parsing function Taras Kondratiuk
2018-02-16 20:33   ` Taras Kondratiuk
2018-02-16 20:33 ` [PATCH v3 08/15] initramfs: add newcx format Taras Kondratiuk
2018-02-16 20:33   ` Taras Kondratiuk
2018-02-16 20:33 ` [PATCH v3 09/15] initramfs: set extended attributes Taras Kondratiuk
2018-02-16 20:33   ` Taras Kondratiuk
2018-02-16 20:33 ` [PATCH v3 10/15] gen_init_cpio: move header formatting into function Taras Kondratiuk
2018-02-16 20:33   ` Taras Kondratiuk
2018-02-16 20:33 ` [PATCH v3 11/15] gen_init_cpio: add newcx format Taras Kondratiuk
2018-02-16 20:33   ` Taras Kondratiuk
2018-02-16 20:33 ` [PATCH v3 12/15] gen_init_cpio: set extended attributes for " Taras Kondratiuk
2018-02-16 20:33   ` Taras Kondratiuk
2018-02-16 20:33 ` [PATCH v3 12/14] gen_initramfs_list.sh: add -x option to enable " Taras Kondratiuk
2018-02-16 20:33   ` Taras Kondratiuk
2018-02-16 20:33 ` [PATCH v3 13/15] " Taras Kondratiuk
2018-02-16 20:33   ` Taras Kondratiuk
2018-02-16 20:33 ` [PATCH v3 13/14] selinux: allow setxattr on rootfs so initramfs code can set them Taras Kondratiuk
2018-02-16 20:33   ` Taras Kondratiuk
2018-02-16 20:33 ` [PATCH v3 14/15] " Taras Kondratiuk
2018-02-16 20:33   ` Taras Kondratiuk
2018-02-20 19:01   ` Stephen Smalley
2018-02-20 19:01     ` Stephen Smalley
2018-03-11  3:07     ` Victor Kamensky
2018-03-11  3:07       ` Victor Kamensky
2018-03-11  3:07       ` Victor Kamensky
2018-03-11  3:07       ` Victor Kamensky
2018-03-20 16:33       ` [Non-DoD Source] " Stephen Smalley
2018-03-20 16:33         ` Stephen Smalley
2018-03-20 16:33         ` Stephen Smalley
2018-02-16 20:33 ` [PATCH v3 15/15] selinux: delay sid population for rootfs till init is complete Taras Kondratiuk
2018-02-16 20:33   ` Taras Kondratiuk
2018-02-20 18:56   ` Stephen Smalley
2018-02-20 18:56     ` Stephen Smalley
2018-03-07 16:51     ` Rob Landley
2018-03-07 16:51       ` Rob Landley
2018-03-07 16:51       ` Rob Landley
2018-03-07 17:26       ` Victor Kamensky
2018-03-07 17:26         ` Victor Kamensky
2018-03-07 17:26         ` Victor Kamensky
2018-03-11  3:08     ` Victor Kamensky
2018-03-11  3:08       ` Victor Kamensky
2018-03-11  3:08       ` Victor Kamensky
2018-03-11  3:08       ` Victor Kamensky
2018-03-20 16:30       ` [Non-DoD Source] " Stephen Smalley
2018-03-20 16:30         ` Stephen Smalley
2018-03-20 16:30         ` Stephen Smalley

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1518914826.5667.288.camel@linux.vnet.ibm.com \
    --to=zohar@linux.vnet.ibm.com \
    --cc=arnd@arndb.de \
    --cc=corbet@lwn.net \
    --cc=hpa@zytor.com \
    --cc=initramfs@vger.kernel.org \
    --cc=james.w.mcmechan@gmail.com \
    --cc=kamensky@cisco.com \
    --cc=linux-doc@vger.kernel.org \
    --cc=linux-kernel@vger.kernel.org \
    --cc=linux-security-module@vger.kernel.org \
    --cc=rob@landley.net \
    --cc=takondra@cisco.com \
    --cc=viro@zeniv.linux.org.uk \
    --cc=xe-linux-external@cisco.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.