From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
To: Kees Cook <kees@outflux.net>
Cc: Kees Cook <keescook@chromium.org>,
Ming Lei <ming.lei@canonical.com>,
Linux Kernel Mailing List <linux-kernel@vger.kernel.org>,
"Luis R. Rodriguez" <mcgrof@suse.com>,
James Morris <james.l.morris@oracle.com>,
David Howells <dhowells@redhat.com>,
"linux-doc@vger.kernel.org" <linux-doc@vger.kernel.org>,
linux-security-module <linux-security-module@vger.kernel.org>,
linux-firmware@kernel.org,
linux-wireless <linux-wireless@vger.kernel.org>
Subject: Re: [PATCH 6/7] firmware_class: add "fd" input file
Date: Mon, 21 Jul 2014 09:36:46 -0700 [thread overview]
Message-ID: <20140721163646.GA14431@kroah.com> (raw)
In-Reply-To: <20140721154307.GG5412@outflux.net>
On Mon, Jul 21, 2014 at 08:43:07AM -0700, Kees Cook wrote:
> On Mon, Jul 21, 2014 at 08:26:35AM -0700, Greg Kroah-Hartman wrote:
> > On Mon, Jul 21, 2014 at 08:08:16AM -0700, Kees Cook wrote:
> > > Perhaps it would be easier if I also sent the patch to udev's helper,
> > > so you could see how I propose handling the userspace change to using
> > > the new interface?
> >
> > As there is no more "udev firmware helper", I don't know what you would
> > be patching here. Firmware should always be loaded by the kernel
> > directly, udev isn't involved anyore at all.
> >
> > confused,
> >
> > greg k-h
>
> The kernel _can_ load directly (when the paths are configured correctly),
> but I'm not sure why you say udev isn't involved any more. It's been like
> this for years, and even the latest systemd shows the udev rule is still in
> place:
> http://cgit.freedesktop.org/systemd/systemd/tree/rules/50-firmware.rules
> and that the firmware loader is still in the source tree:
> http://cgit.freedesktop.org/systemd/systemd/tree/src/udev/udev-builtin-firmware.c
Ah, I thought that I had seen patches to delete this code on the systemd
mailing list in the past, I didn't realize they hadn't been accepted
yet.
But, with my current tree, in linux-next, it's really hard to select the
"external firmware loader" on purpose, as we want people to use the
in-kernel one if at all possible, and only fall back to the "legacy"
udev userspace loader if they are running on old userspace systems.
> Here's the patch for the new interface...
I'd really not like to add a new interface for this model when we are
trying to delete it entirely. Why not just rely on the in-kernel loader
instead for this new feature?
thanks,
greg k-h
next prev parent reply other threads:[~2014-07-21 16:36 UTC|newest]
Thread overview: 44+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-07-14 21:38 [PATCH 0/7] firmware validation Kees Cook
2014-07-14 21:38 ` [PATCH 1/7] doc: fix minor typos in firmware_class README Kees Cook
2014-07-20 2:20 ` Ming Lei
2014-07-14 21:38 ` [PATCH 2/7] test: add firmware_class loader test Kees Cook
2014-07-18 1:47 ` Greg Kroah-Hartman
2014-07-18 15:27 ` Kees Cook
2014-09-18 1:51 ` Sasha Levin
2014-09-18 16:56 ` Kees Cook
2014-07-14 21:38 ` [PATCH 3/7] security: introduce kernel_fw_from_file hook Kees Cook
2014-07-14 22:24 ` Luis R. Rodriguez
2014-07-14 22:31 ` Kees Cook
2014-07-22 19:39 ` Luis R. Rodriguez
2014-07-22 20:55 ` Kees Cook
2014-07-22 22:11 ` Luis R. Rodriguez
2014-07-22 22:20 ` Kees Cook
2014-07-22 22:25 ` Luis R. Rodriguez
2014-07-23 18:52 ` One Thousand Gnomes
2014-07-18 1:48 ` Greg Kroah-Hartman
2014-07-18 17:11 ` Mimi Zohar
2014-07-14 21:38 ` [PATCH 4/7] firmware_class: perform new LSM checks Kees Cook
2014-07-18 3:41 ` James Morris
2014-07-18 17:05 ` Kees Cook
2014-07-19 7:22 ` James Morris
2014-07-19 15:15 ` Kees Cook
2014-07-20 23:43 ` James Morris
2014-07-21 2:50 ` Mimi Zohar
2014-07-21 17:43 ` Greg Kroah-Hartman
2014-07-14 21:38 ` [PATCH 5/7] firmware_class: extract start loading logic Kees Cook
2014-07-20 3:06 ` Ming Lei
2014-07-14 21:38 ` [PATCH 6/7] firmware_class: add "fd" input file Kees Cook
2014-07-18 17:11 ` Mimi Zohar
2014-07-18 19:04 ` Kees Cook
2014-07-20 3:04 ` Ming Lei
2014-07-20 17:43 ` Kees Cook
2014-07-21 1:42 ` Ming Lei
2014-07-21 15:08 ` Kees Cook
2014-07-21 15:26 ` Greg Kroah-Hartman
2014-07-21 15:43 ` Kees Cook
2014-07-21 16:36 ` Greg Kroah-Hartman [this message]
2014-07-21 17:27 ` Kees Cook
2014-07-21 17:43 ` Greg Kroah-Hartman
2014-07-14 21:38 ` [PATCH 7/7] test: add "fd" firmware loading test to selftests Kees Cook
2014-07-18 1:49 ` [PATCH 0/7] firmware validation Greg Kroah-Hartman
2014-07-23 18:53 ` One Thousand Gnomes
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20140721163646.GA14431@kroah.com \
--to=gregkh@linuxfoundation.org \
--cc=dhowells@redhat.com \
--cc=james.l.morris@oracle.com \
--cc=kees@outflux.net \
--cc=keescook@chromium.org \
--cc=linux-doc@vger.kernel.org \
--cc=linux-firmware@kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-security-module@vger.kernel.org \
--cc=linux-wireless@vger.kernel.org \
--cc=mcgrof@suse.com \
--cc=ming.lei@canonical.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.