From mboxrd@z Thu Jan 1 00:00:00 1970 Return-path: Received: from mx0b-001b2d01.pphosted.com ([148.163.158.5] helo=mx0a-001b2d01.pphosted.com) by bombadil.infradead.org with esmtps (Exim 4.92.3 #3 (Red Hat Linux)) id 1iKYMZ-0000dI-FC for kexec@lists.infradead.org; Wed, 16 Oct 2019 01:44:33 +0000 Received: from pps.filterd (m0098421.ppops.net [127.0.0.1]) by mx0a-001b2d01.pphosted.com (8.16.0.27/8.16.0.27) with SMTP id x9G1fhB2101689 for ; Tue, 15 Oct 2019 21:44:28 -0400 Received: from e06smtp01.uk.ibm.com (e06smtp01.uk.ibm.com [195.75.94.97]) by mx0a-001b2d01.pphosted.com with ESMTP id 2vnnwmws6t-1 (version=TLSv1.2 cipher=AES256-GCM-SHA384 bits=256 verify=NOT) for ; Tue, 15 Oct 2019 21:44:28 -0400 Received: from localhost by e06smtp01.uk.ibm.com with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted for from ; Wed, 16 Oct 2019 02:44:26 +0100 Subject: Re: [PATCH V4 0/2] Add support for arm64 to carry ima measurement From: Mimi Zohar Date: Tue, 15 Oct 2019 21:44:16 -0400 In-Reply-To: <0053eb68-0905-4679-c97a-00c5cb6f1abb@arm.com> References: <20191011003600.22090-1-prsriva@linux.microsoft.com> <87d92514-e5e4-a79f-467f-f24a4ed279b6@arm.com> <0053eb68-0905-4679-c97a-00c5cb6f1abb@arm.com> Mime-Version: 1.0 Message-Id: <1571190256.5250.200.camel@linux.ibm.com> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sender: "kexec" Errors-To: kexec-bounces+dwmw2=infradead.org@lists.infradead.org To: James Morse , prsriva , Thiago Jung Bauermann Cc: mark.rutland@arm.com, jean-philippe@linaro.org, arnd@arndb.de, yamada.masahiro@socionext.com, sboyd@kernel.org, catalin.marinas@arm.com, ard.biesheuvel@linaro.org, kexec@lists.infradead.org, linux-kernel@vger.kernel.org, takahiro.akashi@linaro.org, duwe@lst.de, bauerman@linux.ibm.com, allison@lohutok.net, linux-integrity@vger.kernel.org, tglx@linutronix.de, linux-arm-kernel@lists.infradead.org SGkgSmFtZXMsCgpPbiBUdWUsIDIwMTktMTAtMTUgYXQgMTg6MzkgKzAxMDAsIEphbWVzIE1vcnNl IHdyb3RlOgo+IElmIFNlY3VyZUJvb3QgaXNuJ3QgcmVsZXZhbnQsIEknbSBjb25mdXNlZCBhcyB0 byB3aHkga2V4ZWNfZmlsZV9sb2FkKCkgaXMuCj4gCj4gSSB0aG91Z2h0IGtleGVjX2ZpbGVfbG9h ZCgpIG9ubHkgZXhpc3RlZCBiZWNhdXNlIFNlY3VyZUJvb3Qgc3lzdGVtcyBuZWVkIHRvIHZhbGlk YXRlIHRoZQo+IG5ldyBPUyBpbWFnZXMncyBzaWduYXR1cmUgYmVmb3JlIGxvYWRpbmcgaXQsIGFu ZCB3ZSBjYW4ndCB0cnVzdCB1c2VyLXNwYWNlIGNhbGxpbmcgS2V4ZWMKPiB0byBkbyB0aGlzLgo+ IAo+IElmIHRoZXJlIGlzIG5vIHNlY3VyZSBib290LCB3aHkgZG9lcyB0aGlzIHRoaW5nIG9ubHkg d29yayB3aXRoIGtleGVjX2ZpbGVfbG9hZCgpPwo+IChnb29kIG5ld3MhIFdpdGggdGhlIFVFRkkg bWVtcmVzZXZlIHRhYmxlLCBpdCBzaG91bGQgd29yayB0cmFuc3BhcmVudGx5IHdpdGggcmVndWxh ciBrZXhlYwo+IHRvbykKCkknbSBzbyBzb3JyeSBmb3IgdGhlIGNvbmZ1c2lvbi4gwqBJTUEgd2Fz IG9yaWdpbmFsbHkgbGltaXRlZCB0bwpleHRlbmRpbmcgdHJ1c3RlZCBib290IGNvbmNlcHRzIHRv IHRoZSBPUy4gwqBBcyBvZiBMaW51eCAzLjEwLCBJTUEKYWRkZWQgc3VwcG9ydCBmb3IgZXh0ZW5k aW5nIHNlY3VyZSBib290IGNvbmNlcHRzIGFuZCBhdWRpdGluZyBmaWxlCmhhc2hlcyAoY29tbWl0 IGU3YzU2OGUwZmQwY2YpLgoKVHJ1ZSwga2V4ZWNfZmlsZV9sb2FkIGlzIHJlcXVpcmVkIGZvciB2 ZXJpZnlpbmcgdGhlIGtleGVjIGtlcm5lbAppbWFnZSwgYnV0IGl0IGlzIGFsc28gcmVxdWlyZWQg Zm9yIG1lYXN1cmluZyB0aGUga2V4ZWMga2VybmVsIGltYWdlIGFzCndlbGwuCgpBZnRlciByZWFk aW5nIHRoZSBrZXJuZWwgaW1hZ2UgaW50byBtZW1vcnkgKGtlcm5lbF9yZWFkX2ZpbGVfZnJvbV9m ZCksCnRoZSBoYXNoIGlzIGNhbGN1bGF0ZWQgYW5kIHRoZW4gYWRkZWQgdG8gdGhlIElNQSBtZWFz dXJlbWVudCBsaXN0IGFuZAp1c2VkIHRvIGV4dGVuZCB0aGUgVFBNLiDCoEFsbCBvZiB0aGlzIGlz IGJhc2VkIG9uIHRoZSBJTUEgcG9saWN5LAppbmNsdWRpbmcgdGhlIFRQTSBQQ1IuCgo+IAo+ID4g SSBhbSBub3Qgc3VyZSBpZiBpIGFkZHJlc3NlZCBhbGwgeW91ciBjb25jZXJucywgcGxlYXNlIGxl dCBtZSBrbm93Cj4gPiBpZiBpIG1pc3NlZCBhbnl0aGluZy4gVG8gbWUgbW9zdCBjb25jZXJucyBs b29rIHRvIGJlIHRvd2FyZHMgdGhlIGtleGVjIGNhc2UgYW5kIGRlcGVuZGVuY3kKPiA+IG9uIGhh cmR3YXJlKEFDUEkvVFBNKSBkdXJpbmcgYm9vdCBhbmQgZWFybHkgYm9vdCBzZXJ2aWNlcywgd2hl cmUgYXMgY2FycnlpbmcgdGhlIGxvZ3MgaXMKPiA+IG9ubHkgZHVyaW5nIHRoZSBrZXhlY19maWxl X2xvYWQgc3lzIGNhbGwgYW5kIGRvZXMgbm90IGludGVyZmVyZSB3aXRoIHRoYXQgY29kZSBwYXRo Lgo+ID4gSU1BIGRvY3VtZW50YXRpb246IGh0dHBzOi8vc291cmNlZm9yZ2UubmV0L3AvbGludXgt aW1hL3dpa2kvSG9tZS8KPiAKPiBTdXBwb3J0aW5nIEFDUEkgaW4gdGhlIHNhbWUgd2F5IGlzIHNv bWV0aGluZyB3ZSBuZWVkIHRvIGRvIGZyb20gZGF5IG9uZS4ga2V4ZWNfZmlsZV9sb2FkKCkKPiBh bHJlYWR5IGRvZXMgdGhpcy4gSSdtIG5vdCBzdXJlICJvbmx5IGtleGVjX2ZpbGVfbG9hZCgpIiBp cyBhIGp1c3RpZmlhYmxlIHJlc3RyaWN0aW9uLi4uCgpUaGUgVFBNIFBDUnMgYXJlIG5vdCByZXNl dCBvbiBhIHNvZnQgcmVib290LiDCoEFzIGEgcmVzdWx0LCBpbiBvcmRlciB0bwp2YWxpZGF0ZSB0 aGUgSU1BIG1lYXN1cmVtZW50IGxpc3QgYWdhaW5zdCB0aGUgVFBNIFBDUnMsIHRoZSBJTUEKbWVh c3VyZW1lbnQgbGlzdCBpcyBzYXZlZCBvbiBrZXhlYyBsb2FkLCByZXN0b3JlZCBvbiBib290LCBh bmQgdGhlbgp0aGUgbWVtb3J5IGFsbG9jYXRlZCBmb3IgY2FycnlpbmcgdGhlIG1lYXN1cmVtZW50 IGxpc3QgYWNyb3NzIGtleGVjIGlzCmZyZWVkLgoKV2hlcmUvaG93IHRvIHNhdmUgdGhlIElNQSBt ZWFzdXJlbWVudCBsaXN0IGlzIGFyY2hpdGVjdHVyZSBkZXBlbmRlbnQuCsKgVGhpYWdvIEJhdWVy bWFubiBpbXBsZW1lbnRlZCBhbGxvY2F0aW5nIGFuZCBmcmVlaW5nIHRoZSBtZWFzdXJlbWVudAps aXN0IG1lbW9yeSBmb3IgUG93ZXIuCgpNaW1pCgoKX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX18Ka2V4ZWMgbWFpbGluZyBsaXN0CmtleGVjQGxpc3RzLmluZnJh ZGVhZC5vcmcKaHR0cDovL2xpc3RzLmluZnJhZGVhZC5vcmcvbWFpbG1hbi9saXN0aW5mby9rZXhl Ywo= From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-2.3 required=3.0 tests=HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS,USER_AGENT_SANE_2 autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 29B28ECE58F for ; Wed, 16 Oct 2019 01:44:31 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id EFB7D214AE for ; Wed, 16 Oct 2019 01:44:30 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1728008AbfJPBoa (ORCPT ); Tue, 15 Oct 2019 21:44:30 -0400 Received: from mx0b-001b2d01.pphosted.com ([148.163.158.5]:17874 "EHLO mx0a-001b2d01.pphosted.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S1726786AbfJPBoa (ORCPT ); Tue, 15 Oct 2019 21:44:30 -0400 Received: from pps.filterd (m0098417.ppops.net [127.0.0.1]) by mx0a-001b2d01.pphosted.com (8.16.0.27/8.16.0.27) with SMTP id x9G1ffSw053390 for ; Tue, 15 Oct 2019 21:44:29 -0400 Received: from e06smtp01.uk.ibm.com (e06smtp01.uk.ibm.com [195.75.94.97]) by mx0a-001b2d01.pphosted.com with ESMTP id 2vnn837034-1 (version=TLSv1.2 cipher=AES256-GCM-SHA384 bits=256 verify=NOT) for ; Tue, 15 Oct 2019 21:44:28 -0400 Received: from localhost by e06smtp01.uk.ibm.com with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted for from ; Wed, 16 Oct 2019 02:44:26 +0100 Received: from b06cxnps4075.portsmouth.uk.ibm.com (9.149.109.197) by e06smtp01.uk.ibm.com (192.168.101.131) with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted; (version=TLSv1/SSLv3 cipher=AES256-GCM-SHA384 bits=256/256) Wed, 16 Oct 2019 02:44:21 +0100 Received: from d06av25.portsmouth.uk.ibm.com (d06av25.portsmouth.uk.ibm.com [9.149.105.61]) by b06cxnps4075.portsmouth.uk.ibm.com (8.14.9/8.14.9/NCO v10.0) with ESMTP id x9G1iK7p60162280 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Wed, 16 Oct 2019 01:44:20 GMT Received: from d06av25.portsmouth.uk.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id 64D9A11C052; Wed, 16 Oct 2019 01:44:20 +0000 (GMT) Received: from d06av25.portsmouth.uk.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id AC1D911C04C; Wed, 16 Oct 2019 01:44:17 +0000 (GMT) Received: from localhost.localdomain (unknown [9.85.156.20]) by d06av25.portsmouth.uk.ibm.com (Postfix) with ESMTP; Wed, 16 Oct 2019 01:44:17 +0000 (GMT) Subject: Re: [PATCH V4 0/2] Add support for arm64 to carry ima measurement From: Mimi Zohar To: James Morse , prsriva , Thiago Jung Bauermann Cc: linux-kernel@vger.kernel.org, linux-arm-kernel@lists.infradead.org, linux-integrity@vger.kernel.org, kexec@lists.infradead.org, mark.rutland@arm.com, jean-philippe@linaro.org, arnd@arndb.de, takahiro.akashi@linaro.org, sboyd@kernel.org, catalin.marinas@arm.com, yamada.masahiro@socionext.com, duwe@lst.de, bauerman@linux.ibm.com, tglx@linutronix.de, allison@lohutok.net, ard.biesheuvel@linaro.org Date: Tue, 15 Oct 2019 21:44:16 -0400 In-Reply-To: <0053eb68-0905-4679-c97a-00c5cb6f1abb@arm.com> References: <20191011003600.22090-1-prsriva@linux.microsoft.com> <87d92514-e5e4-a79f-467f-f24a4ed279b6@arm.com> <0053eb68-0905-4679-c97a-00c5cb6f1abb@arm.com> Content-Type: text/plain; charset="UTF-8" X-Mailer: Evolution 3.20.5 (3.20.5-1.fc24) Mime-Version: 1.0 Content-Transfer-Encoding: 8bit X-TM-AS-GCONF: 00 x-cbid: 19101601-4275-0000-0000-000003726CDA X-IBM-AV-DETECTION: SAVI=unused REMOTE=unused XFE=unused x-cbparentid: 19101601-4276-0000-0000-00003885806B Message-Id: <1571190256.5250.200.camel@linux.ibm.com> X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:,, definitions=2019-10-15_08:,, signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1908290000 definitions=main-1910160013 Sender: linux-integrity-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-integrity@vger.kernel.org Hi James, On Tue, 2019-10-15 at 18:39 +0100, James Morse wrote: > If SecureBoot isn't relevant, I'm confused as to why kexec_file_load() is. > > I thought kexec_file_load() only existed because SecureBoot systems need to validate the > new OS images's signature before loading it, and we can't trust user-space calling Kexec > to do this. > > If there is no secure boot, why does this thing only work with kexec_file_load()? > (good news! With the UEFI memreseve table, it should work transparently with regular kexec > too) I'm so sorry for the confusion.  IMA was originally limited to extending trusted boot concepts to the OS.  As of Linux 3.10, IMA added support for extending secure boot concepts and auditing file hashes (commit e7c568e0fd0cf). True, kexec_file_load is required for verifying the kexec kernel image, but it is also required for measuring the kexec kernel image as well. After reading the kernel image into memory (kernel_read_file_from_fd), the hash is calculated and then added to the IMA measurement list and used to extend the TPM.  All of this is based on the IMA policy, including the TPM PCR. > > > I am not sure if i addressed all your concerns, please let me know > > if i missed anything. To me most concerns look to be towards the kexec case and dependency > > on hardware(ACPI/TPM) during boot and early boot services, where as carrying the logs is > > only during the kexec_file_load sys call and does not interfere with that code path. > > IMA documentation: https://sourceforge.net/p/linux-ima/wiki/Home/ > > Supporting ACPI in the same way is something we need to do from day one. kexec_file_load() > already does this. I'm not sure "only kexec_file_load()" is a justifiable restriction... The TPM PCRs are not reset on a soft reboot.  As a result, in order to validate the IMA measurement list against the TPM PCRs, the IMA measurement list is saved on kexec load, restored on boot, and then the memory allocated for carrying the measurement list across kexec is freed. Where/how to save the IMA measurement list is architecture dependent.  Thiago Bauermann implemented allocating and freeing the measurement list memory for Power. Mimi From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-2.3 required=3.0 tests=DKIMWL_WL_HIGH,DKIM_SIGNED, DKIM_VALID,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_HELO_NONE, SPF_PASS,USER_AGENT_SANE_2 autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 8C1E5ECE59D for ; Wed, 16 Oct 2019 01:44:46 +0000 (UTC) Received: from bombadil.infradead.org (bombadil.infradead.org [198.137.202.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id 594EC2067B for ; Wed, 16 Oct 2019 01:44:46 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (2048-bit key) header.d=lists.infradead.org header.i=@lists.infradead.org header.b="U9KBWSUM" DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 594EC2067B Authentication-Results: mail.kernel.org; dmarc=fail (p=none dis=none) header.from=linux.ibm.com Authentication-Results: mail.kernel.org; spf=none smtp.mailfrom=linux-arm-kernel-bounces+infradead-linux-arm-kernel=archiver.kernel.org@lists.infradead.org DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=bombadil.20170209; h=Sender: Content-Transfer-Encoding:Content-Type:Cc:List-Subscribe:List-Help:List-Post: List-Archive:List-Unsubscribe:List-Id:Message-Id:Mime-Version:References: In-Reply-To:Date:To:From:Subject:Reply-To:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: List-Owner; bh=UHZDLw+pqD1EpMflNOMJXYz5AZ4hUujVHlJlw5iOrcI=; b=U9KBWSUMHYRqyb FwUgCYjO2Q6O7+pWCo9CpU91PzKzKaYKPlb8rQZ8CJhdAe78GP1TFaViCIqxJE5WbZciMJyD7sVxs hgemH31DVdOY65CSDU5xN/vqJFcVTXp6YtjaR8XK7LsxaVLp1kv5u4H8QyVQDDmwSD5z0uQ4EZ2mr VtOn9M2nXmYY3CObxPfy5RVcDqJio7nqc0Ktg9+UJEFwJFFYcK+vKO9XSZaxNd4tfVI4EVyoOUJjj Ox8avXJ/QQQtfwofoNLDSzDO0uKCORzstPpq+HMcax5LfF0Vz1LMNSL9kApQmhonxcRB0G24eCl+f 9SkQ07sSZQwBF9htV2Hw==; Received: from localhost ([127.0.0.1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.92.3 #3 (Red Hat Linux)) id 1iKYMd-0000eR-7E; Wed, 16 Oct 2019 01:44:35 +0000 Received: from mx0a-001b2d01.pphosted.com ([148.163.156.1]) by bombadil.infradead.org with esmtps (Exim 4.92.3 #3 (Red Hat Linux)) id 1iKYMZ-0000dK-Fb for linux-arm-kernel@lists.infradead.org; Wed, 16 Oct 2019 01:44:33 +0000 Received: from pps.filterd (m0098399.ppops.net [127.0.0.1]) by mx0a-001b2d01.pphosted.com (8.16.0.27/8.16.0.27) with SMTP id x9G1fghu120679 for ; Tue, 15 Oct 2019 21:44:29 -0400 Received: from e06smtp01.uk.ibm.com (e06smtp01.uk.ibm.com [195.75.94.97]) by mx0a-001b2d01.pphosted.com with ESMTP id 2vnp3b5jhg-1 (version=TLSv1.2 cipher=AES256-GCM-SHA384 bits=256 verify=NOT) for ; Tue, 15 Oct 2019 21:44:29 -0400 Received: from localhost by e06smtp01.uk.ibm.com with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted for from ; Wed, 16 Oct 2019 02:44:26 +0100 Received: from b06cxnps4075.portsmouth.uk.ibm.com (9.149.109.197) by e06smtp01.uk.ibm.com (192.168.101.131) with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted; (version=TLSv1/SSLv3 cipher=AES256-GCM-SHA384 bits=256/256) Wed, 16 Oct 2019 02:44:21 +0100 Received: from d06av25.portsmouth.uk.ibm.com (d06av25.portsmouth.uk.ibm.com [9.149.105.61]) by b06cxnps4075.portsmouth.uk.ibm.com (8.14.9/8.14.9/NCO v10.0) with ESMTP id x9G1iK7p60162280 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Wed, 16 Oct 2019 01:44:20 GMT Received: from d06av25.portsmouth.uk.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id 64D9A11C052; Wed, 16 Oct 2019 01:44:20 +0000 (GMT) Received: from d06av25.portsmouth.uk.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id AC1D911C04C; Wed, 16 Oct 2019 01:44:17 +0000 (GMT) Received: from localhost.localdomain (unknown [9.85.156.20]) by d06av25.portsmouth.uk.ibm.com (Postfix) with ESMTP; Wed, 16 Oct 2019 01:44:17 +0000 (GMT) Subject: Re: [PATCH V4 0/2] Add support for arm64 to carry ima measurement From: Mimi Zohar To: James Morse , prsriva , Thiago Jung Bauermann Date: Tue, 15 Oct 2019 21:44:16 -0400 In-Reply-To: <0053eb68-0905-4679-c97a-00c5cb6f1abb@arm.com> References: <20191011003600.22090-1-prsriva@linux.microsoft.com> <87d92514-e5e4-a79f-467f-f24a4ed279b6@arm.com> <0053eb68-0905-4679-c97a-00c5cb6f1abb@arm.com> X-Mailer: Evolution 3.20.5 (3.20.5-1.fc24) Mime-Version: 1.0 X-TM-AS-GCONF: 00 x-cbid: 19101601-4275-0000-0000-000003726CDA X-IBM-AV-DETECTION: SAVI=unused REMOTE=unused XFE=unused x-cbparentid: 19101601-4276-0000-0000-00003885806B Message-Id: <1571190256.5250.200.camel@linux.ibm.com> X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-10-15_08:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1908290000 definitions=main-1910160013 X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20191015_184431_525715_F650D8A2 X-CRM114-Status: GOOD ( 25.99 ) X-BeenThere: linux-arm-kernel@lists.infradead.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: mark.rutland@arm.com, jean-philippe@linaro.org, arnd@arndb.de, yamada.masahiro@socionext.com, sboyd@kernel.org, catalin.marinas@arm.com, ard.biesheuvel@linaro.org, kexec@lists.infradead.org, linux-kernel@vger.kernel.org, takahiro.akashi@linaro.org, duwe@lst.de, bauerman@linux.ibm.com, allison@lohutok.net, linux-integrity@vger.kernel.org, tglx@linutronix.de, linux-arm-kernel@lists.infradead.org Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sender: "linux-arm-kernel" Errors-To: linux-arm-kernel-bounces+infradead-linux-arm-kernel=archiver.kernel.org@lists.infradead.org SGkgSmFtZXMsCgpPbiBUdWUsIDIwMTktMTAtMTUgYXQgMTg6MzkgKzAxMDAsIEphbWVzIE1vcnNl IHdyb3RlOgo+IElmIFNlY3VyZUJvb3QgaXNuJ3QgcmVsZXZhbnQsIEknbSBjb25mdXNlZCBhcyB0 byB3aHkga2V4ZWNfZmlsZV9sb2FkKCkgaXMuCj4gCj4gSSB0aG91Z2h0IGtleGVjX2ZpbGVfbG9h ZCgpIG9ubHkgZXhpc3RlZCBiZWNhdXNlIFNlY3VyZUJvb3Qgc3lzdGVtcyBuZWVkIHRvIHZhbGlk YXRlIHRoZQo+IG5ldyBPUyBpbWFnZXMncyBzaWduYXR1cmUgYmVmb3JlIGxvYWRpbmcgaXQsIGFu ZCB3ZSBjYW4ndCB0cnVzdCB1c2VyLXNwYWNlIGNhbGxpbmcgS2V4ZWMKPiB0byBkbyB0aGlzLgo+ IAo+IElmIHRoZXJlIGlzIG5vIHNlY3VyZSBib290LCB3aHkgZG9lcyB0aGlzIHRoaW5nIG9ubHkg d29yayB3aXRoIGtleGVjX2ZpbGVfbG9hZCgpPwo+IChnb29kIG5ld3MhIFdpdGggdGhlIFVFRkkg bWVtcmVzZXZlIHRhYmxlLCBpdCBzaG91bGQgd29yayB0cmFuc3BhcmVudGx5IHdpdGggcmVndWxh ciBrZXhlYwo+IHRvbykKCkknbSBzbyBzb3JyeSBmb3IgdGhlIGNvbmZ1c2lvbi4gwqBJTUEgd2Fz IG9yaWdpbmFsbHkgbGltaXRlZCB0bwpleHRlbmRpbmcgdHJ1c3RlZCBib290IGNvbmNlcHRzIHRv IHRoZSBPUy4gwqBBcyBvZiBMaW51eCAzLjEwLCBJTUEKYWRkZWQgc3VwcG9ydCBmb3IgZXh0ZW5k aW5nIHNlY3VyZSBib290IGNvbmNlcHRzIGFuZCBhdWRpdGluZyBmaWxlCmhhc2hlcyAoY29tbWl0 IGU3YzU2OGUwZmQwY2YpLgoKVHJ1ZSwga2V4ZWNfZmlsZV9sb2FkIGlzIHJlcXVpcmVkIGZvciB2 ZXJpZnlpbmcgdGhlIGtleGVjIGtlcm5lbAppbWFnZSwgYnV0IGl0IGlzIGFsc28gcmVxdWlyZWQg Zm9yIG1lYXN1cmluZyB0aGUga2V4ZWMga2VybmVsIGltYWdlIGFzCndlbGwuCgpBZnRlciByZWFk aW5nIHRoZSBrZXJuZWwgaW1hZ2UgaW50byBtZW1vcnkgKGtlcm5lbF9yZWFkX2ZpbGVfZnJvbV9m ZCksCnRoZSBoYXNoIGlzIGNhbGN1bGF0ZWQgYW5kIHRoZW4gYWRkZWQgdG8gdGhlIElNQSBtZWFz dXJlbWVudCBsaXN0IGFuZAp1c2VkIHRvIGV4dGVuZCB0aGUgVFBNLiDCoEFsbCBvZiB0aGlzIGlz IGJhc2VkIG9uIHRoZSBJTUEgcG9saWN5LAppbmNsdWRpbmcgdGhlIFRQTSBQQ1IuCgo+IAo+ID4g SSBhbSBub3Qgc3VyZSBpZiBpIGFkZHJlc3NlZCBhbGwgeW91ciBjb25jZXJucywgcGxlYXNlIGxl dCBtZSBrbm93Cj4gPiBpZiBpIG1pc3NlZCBhbnl0aGluZy4gVG8gbWUgbW9zdCBjb25jZXJucyBs b29rIHRvIGJlIHRvd2FyZHMgdGhlIGtleGVjIGNhc2UgYW5kIGRlcGVuZGVuY3kKPiA+IG9uIGhh cmR3YXJlKEFDUEkvVFBNKSBkdXJpbmcgYm9vdCBhbmQgZWFybHkgYm9vdCBzZXJ2aWNlcywgd2hl cmUgYXMgY2FycnlpbmcgdGhlIGxvZ3MgaXMKPiA+IG9ubHkgZHVyaW5nIHRoZSBrZXhlY19maWxl X2xvYWQgc3lzIGNhbGwgYW5kIGRvZXMgbm90IGludGVyZmVyZSB3aXRoIHRoYXQgY29kZSBwYXRo Lgo+ID4gSU1BIGRvY3VtZW50YXRpb246IGh0dHBzOi8vc291cmNlZm9yZ2UubmV0L3AvbGludXgt aW1hL3dpa2kvSG9tZS8KPiAKPiBTdXBwb3J0aW5nIEFDUEkgaW4gdGhlIHNhbWUgd2F5IGlzIHNv bWV0aGluZyB3ZSBuZWVkIHRvIGRvIGZyb20gZGF5IG9uZS4ga2V4ZWNfZmlsZV9sb2FkKCkKPiBh bHJlYWR5IGRvZXMgdGhpcy4gSSdtIG5vdCBzdXJlICJvbmx5IGtleGVjX2ZpbGVfbG9hZCgpIiBp cyBhIGp1c3RpZmlhYmxlIHJlc3RyaWN0aW9uLi4uCgpUaGUgVFBNIFBDUnMgYXJlIG5vdCByZXNl dCBvbiBhIHNvZnQgcmVib290LiDCoEFzIGEgcmVzdWx0LCBpbiBvcmRlciB0bwp2YWxpZGF0ZSB0 aGUgSU1BIG1lYXN1cmVtZW50IGxpc3QgYWdhaW5zdCB0aGUgVFBNIFBDUnMsIHRoZSBJTUEKbWVh c3VyZW1lbnQgbGlzdCBpcyBzYXZlZCBvbiBrZXhlYyBsb2FkLCByZXN0b3JlZCBvbiBib290LCBh bmQgdGhlbgp0aGUgbWVtb3J5IGFsbG9jYXRlZCBmb3IgY2FycnlpbmcgdGhlIG1lYXN1cmVtZW50 IGxpc3QgYWNyb3NzIGtleGVjIGlzCmZyZWVkLgoKV2hlcmUvaG93IHRvIHNhdmUgdGhlIElNQSBt ZWFzdXJlbWVudCBsaXN0IGlzIGFyY2hpdGVjdHVyZSBkZXBlbmRlbnQuCsKgVGhpYWdvIEJhdWVy bWFubiBpbXBsZW1lbnRlZCBhbGxvY2F0aW5nIGFuZCBmcmVlaW5nIHRoZSBtZWFzdXJlbWVudAps aXN0IG1lbW9yeSBmb3IgUG93ZXIuCgpNaW1pCgoKX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX18KbGludXgtYXJtLWtlcm5lbCBtYWlsaW5nIGxpc3QKbGludXgt YXJtLWtlcm5lbEBsaXN0cy5pbmZyYWRlYWQub3JnCmh0dHA6Ly9saXN0cy5pbmZyYWRlYWQub3Jn L21haWxtYW4vbGlzdGluZm8vbGludXgtYXJtLWtlcm5lbAo=