From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id C0DF8C433F5 for ; Wed, 27 Oct 2021 08:46:48 +0000 (UTC) Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.133.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id 33F1D60F9D for ; Wed, 27 Oct 2021 08:46:48 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.4.1 mail.kernel.org 33F1D60F9D Authentication-Results: mail.kernel.org; dmarc=fail (p=none dis=none) header.from=huawei.com Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=redhat.com Received: from mimecast-mx01.redhat.com (mimecast-mx01.redhat.com [209.132.183.4]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-150-BhyLY90JNQGKuK6jikxMxg-1; Wed, 27 Oct 2021 04:46:43 -0400 X-MC-Unique: BhyLY90JNQGKuK6jikxMxg-1 Received: from smtp.corp.redhat.com (int-mx03.intmail.prod.int.phx2.redhat.com [10.5.11.13]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mimecast-mx01.redhat.com (Postfix) with ESMTPS id B78528066FB; Wed, 27 Oct 2021 08:46:38 +0000 (UTC) Received: from colo-mx.corp.redhat.com (colo-mx01.intmail.prod.int.phx2.redhat.com [10.5.11.20]) by smtp.corp.redhat.com (Postfix) with ESMTPS id 95C0960862; Wed, 27 Oct 2021 08:46:38 +0000 (UTC) Received: from lists01.pubmisc.prod.ext.phx2.redhat.com (lists01.pubmisc.prod.ext.phx2.redhat.com [10.5.19.33]) by colo-mx.corp.redhat.com (Postfix) with ESMTP id 0B9911800B9E; Wed, 27 Oct 2021 08:46:38 +0000 (UTC) Received: from smtp.corp.redhat.com (int-mx05.intmail.prod.int.rdu2.redhat.com [10.11.54.5]) by lists01.pubmisc.prod.ext.phx2.redhat.com (8.13.8/8.13.8) with ESMTP id 19R8g8bY024477 for ; Wed, 27 Oct 2021 04:42:08 -0400 Received: by smtp.corp.redhat.com (Postfix) id EC35851E1; Wed, 27 Oct 2021 08:42:07 +0000 (UTC) Received: from mimecast-mx02.redhat.com (mimecast04.extmail.prod.ext.rdu2.redhat.com [10.11.55.20]) by smtp.corp.redhat.com (Postfix) with ESMTPS id E6AE851DD for ; Wed, 27 Oct 2021 08:42:03 +0000 (UTC) Received: from us-smtp-1.mimecast.com (us-smtp-delivery-1.mimecast.com [205.139.110.120]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mimecast-mx02.redhat.com (Postfix) with ESMTPS id 2B8CC10AF7C0 for ; Wed, 27 Oct 2021 08:42:03 +0000 (UTC) Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-294-VIg-fSj9Mj2y0E8pw3CIAw-1; Wed, 27 Oct 2021 04:41:59 -0400 X-MC-Unique: VIg-fSj9Mj2y0E8pw3CIAw-1 Received: from fraeml713-chm.china.huawei.com (unknown [172.18.147.206]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4HfMWP5vgbz6H7dv; Wed, 27 Oct 2021 16:37:21 +0800 (CST) Received: from fraeml714-chm.china.huawei.com (10.206.15.33) by fraeml713-chm.china.huawei.com (10.206.15.32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2308.15; Wed, 27 Oct 2021 10:41:56 +0200 Received: from fraeml714-chm.china.huawei.com ([10.206.15.33]) by fraeml714-chm.china.huawei.com ([10.206.15.33]) with mapi id 15.01.2308.015; Wed, 27 Oct 2021 10:41:56 +0200 From: Roberto Sassu To: Deven Bowers , Eric Biggers Thread-Topic: [RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature Thread-Index: AQHXwGWUN6BqcPCg3Uma5jdt5usPz6vRLYAAgAMlHYCAAAy0gIAHoD6wgAM9LeCABllegIABBN/w Date: Wed, 27 Oct 2021 08:41:56 +0000 Message-ID: <7ba78ee8bf444fe99e1e7346dad475b7@huawei.com> References: <1634151995-16266-1-git-send-email-deven.desai@linux.microsoft.com> <1634151995-16266-13-git-send-email-deven.desai@linux.microsoft.com> <9089bdb0-b28a-9fa0-c510-00fa275af621@linux.microsoft.com> <5c1f800ba554485cb3659da689d2079a@huawei.com> <40f70c77-80eb-2716-be77-9cbcf4770b8a@linux.microsoft.com> In-Reply-To: <40f70c77-80eb-2716-be77-9cbcf4770b8a@linux.microsoft.com> Accept-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.221.98.153] MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mimecast-Impersonation-Protect: Policy=CLT - Impersonation Protection Definition; Similar Internal Domain=false; Similar Monitored External Domain=false; Custom External Domain=false; Mimecast External Domain=false; Newly Observed Domain=false; Internal User Name=false; Custom Display Name List=false; Reply-to Address Mismatch=false; Targeted Threat Dictionary=false; Mimecast Threat Dictionary=false; Custom Threat Dictionary=false X-Scanned-By: MIMEDefang 2.79 on 10.11.54.5 X-MIME-Autoconverted: from base64 to 8bit by lists01.pubmisc.prod.ext.phx2.redhat.com id 19R8g8bY024477 X-loop: dm-devel@redhat.com Cc: "axboe@kernel.dk" , "linux-security-module@vger.kernel.org" , "tytso@mit.edu" , "paul@paul-moore.com" , "snitzer@redhat.com" , "corbet@lwn.net" , "jannh@google.com" , "linux-doc@vger.kernel.org" , "jmorris@namei.org" , "eparis@redhat.com" , "linux-kernel@vger.kernel.org" , "linux-block@vger.kernel.org" , "dm-devel@redhat.com" , "linux-audit@redhat.com" , "linux-fscrypt@vger.kernel.org" , "linux-integrity@vger.kernel.org" , "agk@redhat.com" , "serge@hallyn.com" Subject: Re: [dm-devel] [RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature X-BeenThere: dm-devel@redhat.com X-Mailman-Version: 2.1.12 Precedence: junk List-Id: device-mapper development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: dm-devel-bounces@redhat.com Errors-To: dm-devel-bounces@redhat.com X-Scanned-By: MIMEDefang 2.79 on 10.5.11.13 Authentication-Results: relay.mimecast.com; auth=pass smtp.auth=CUSA124A263 smtp.mailfrom=dm-devel-bounces@redhat.com X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Language: en-US Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 PiBGcm9tOiBEZXZlbiBCb3dlcnMgW21haWx0bzpkZXZlbi5kZXNhaUBsaW51eC5taWNyb3NvZnQu Y29tXQo+IFNlbnQ6IFR1ZXNkYXksIE9jdG9iZXIgMjYsIDIwMjEgOTowNCBQTQo+IE9uIDEwLzIy LzIwMjEgOTozMSBBTSwgUm9iZXJ0byBTYXNzdSB3cm90ZToKPiA+PiBGcm9tOiBSb2JlcnRvIFNh c3N1IFttYWlsdG86cm9iZXJ0by5zYXNzdUBodWF3ZWkuY29tXQo+ID4+IFNlbnQ6IFdlZG5lc2Rh eSwgT2N0b2JlciAyMCwgMjAyMSA1OjA5IFBNCj4gPj4+IEZyb206IEVyaWMgQmlnZ2VycyBbbWFp bHRvOmViaWdnZXJzQGtlcm5lbC5vcmddCj4gPj4+IFNlbnQ6IEZyaWRheSwgT2N0b2JlciAxNSwg MjAyMSAxMDoxMSBQTQo+ID4+PiBPbiBGcmksIE9jdCAxNSwgMjAyMSBhdCAxMjoyNTo1M1BNIC0w NzAwLCBEZXZlbiBCb3dlcnMgd3JvdGU6Cj4gPj4+PiBPbiAxMC8xMy8yMDIxIDEyOjI0IFBNLCBF cmljIEJpZ2dlcnMgd3JvdGU6Cj4gPj4+Pj4gT24gV2VkLCBPY3QgMTMsIDIwMjEgYXQgMTI6MDY6 MzFQTSAtMDcwMCwKPiA+Pj4gZGV2ZW4uZGVzYWlAbGludXgubWljcm9zb2Z0LmNvbSAgd3JvdGU6 Cj4gPj4+Pj4+IEZyb206IEZhbiBXdTx3dWZhbkBsaW51eC5taWNyb3NvZnQuY29tPgo+ID4+Pj4+ Pgo+ID4+Pj4+PiBBZGQgc2VjdXJpdHlfaW5vZGVfc2V0c2VjdXJpdHkgdG8gZnN2ZXJpdHkgc2ln bmF0dXJlIHZlcmlmaWNhdGlvbi4KPiA+Pj4+Pj4gVGhpcyBjYW4gbGV0IExTTXMgc2F2ZSB0aGUg c2lnbmF0dXJlIGRhdGEgYW5kIGRpZ2VzdCBoYXNoZXMgcHJvdmlkZWQKPiA+Pj4+Pj4gYnkgZnN2 ZXJpdHkuCj4gPj4+Pj4gQ2FuIHlvdSBlbGFib3JhdGUgb24gd2h5IExTTXMgbmVlZCB0aGlzIGlu Zm9ybWF0aW9uPwo+ID4+Pj4gVGhlIHByb3Bvc2VkIExTTSAoSVBFKSBvZiB0aGlzIHNlcmllcyB3 aWxsIGJlIHRoZSBvbmx5IG9uZSB0byBuZWVkCj4gPj4+PiB0aGlzIGluZm9ybWF0aW9uIGF0IHRo ZcKgIG1vbWVudC4gSVBF4oCZcyBnb2FsIGlzIHRvIGhhdmUgcHJvdmlkZQo+ID4+Pj4gdHJ1c3Qt YmFzZWQgYWNjZXNzIGNvbnRyb2wuIFRydXN0IGFuZCBJbnRlZ3JpdHkgYXJlIHRpZWQgdG9nZXRo ZXIsCj4gPj4+PiBhcyB5b3UgY2Fubm90IHByb3ZlIHRydXN0IHdpdGhvdXQgcHJvdmluZyBpbnRl Z3JpdHkuCj4gPj4+IEkgdGhpbmsgeW91IG1lYW4gYXV0aGVudGljaXR5LCBub3QgaW50ZWdyaXR5 Pwo+ID4+Pgo+ID4+PiBBbHNvIGhvdyBkb2VzIHRoaXMgZGlmZmVyIGZyb20gSU1BPyAgSSBrbm93 IHRoYXQgSU1BIGRvZXNuJ3Qgc3VwcG9ydCBmcy0KPiB2ZXJpdHkKPiA+Pj4gZmlsZSBoYXNoZXMs IGJ1dCB0aGF0IGNvdWxkIGJlIGNoYW5nZWQuICBXaHkgbm90IGV4dGVuZCBJTUEgdG8gY292ZXIg eW91cgo+IHVzZQo+ID4+PiBjYXNlKHMpPwo+ID4+Pgo+ID4+Pj4gSVBFIG5lZWRzIHRoZSBkaWdl c3QgaW5mb3JtYXRpb24gdG8gYmUgYWJsZSB0byBjb21wYXJlIGEgZGlnZXN0Cj4gPj4+PiBwcm92 aWRlZCBieSB0aGUgcG9saWN5IGF1dGhvciwgYWdhaW5zdCB0aGUgZGlnZXN0IGNhbGN1bGF0ZWQg YnkKPiA+Pj4+IGZzdmVyaXR5IHRvIG1ha2UgYSBkZWNpc2lvbiBvbiB3aGV0aGVyIHRoYXQgc3Bl Y2lmaWMgZmlsZSwgcmVwcmVzZW50ZWQKPiA+Pj4+IGJ5IHRoZSBkaWdlc3QgaXMgYXV0aG9yaXpl ZCBmb3IgdGhlIGFjdGlvbnMgc3BlY2lmaWVkIGluIHRoZSBwb2xpY3kuCj4gPj4+Pgo+ID4+Pj4g QSBtb3JlIGNvbmNyZXRlIGV4YW1wbGUsIGlmIGFuIElQRSBwb2xpY3kgYXV0aG9yIHdyaXRlczoK PiA+Pj4+Cj4gPj4+PiAgwqDCoMKgIG9wPUVYRUNVVEUgZnN2ZXJpdHlfZGlnZXN0PTxIZXhEaWdl c3QgPiBhY3Rpb249REVOWQo+ID4+Pj4KPiA+Pj4+IElQRSB0YWtlcyB0aGUgZGlnZXN0IHByb3Zp ZGVkIGJ5IHRoaXMgc2VjdXJpdHkgaG9vaywgc3RvcmVzIGl0Cj4gPj4+PiBpbiBJUEUncyBzZWN1 cml0eSBibG9iIG9uIHRoZSBpbm9kZS4gSWYgdGhpcyBmaWxlIGlzIGxhdGVyCj4gPj4+PiBleGVj dXRlZCwgSVBFIGNvbXBhcmVzIHRoZSBkaWdlc3Qgc3RvcmVkIGluIHRoZSBMU00gYmxvYiwKPiA+ Pj4+IHByb3ZpZGVkIGJ5IHRoaXMgaG9vaywgYWdhaW5zdCA8SGV4RGlnZXN0PiBpbiB0aGUgcG9s aWN5LCBpZgo+ID4+Pj4gaXQgbWF0Y2hlcywgaXQgZGVuaWVzIHRoZSBhY2Nlc3MsIHBlcmZvcm1p bmcgYSByZXZvY2F0aW9uCj4gPj4+PiBvZiB0aGF0IGZpbGUuCj4gPj4+IERvIHlvdSBoYXZlIGEg YmV0dGVyIGV4YW1wbGU/ICBUaGlzIG9uZSBpcyBwcmV0dHkgdXNlbGVzcyBzaW5jZSBvbmUgY2Fu IGdldAo+ID4+PiBhcm91bmQgaXQganVzdCBieSBleGVjdXRpbmcgYSBmaWxlIHRoYXQgZG9lc24n dCBoYXZlIGZzLXZlcml0eSBlbmFibGVkLgo+ID4+IEkgd2FzIHdvbmRlcmluZyBpZiB0aGUgZm9s bG93aW5nIHVzZSBjYXNlIGNhbiBiZSBzdXBwb3J0ZWQ6Cj4gPj4gYWxsb3cgdGhlIGV4ZWN1dGlv biBvZiBmaWxlcyBwcm90ZWN0ZWQgd2l0aCBmc3Zlcml0eSBpZiB0aGUgcm9vdAo+ID4+IGRpZ2Vz dCBpcyBmb3VuZCBhbW9uZyByZWZlcmVuY2UgdmFsdWVzIChpbnN0ZWFkIG9mIHByb3ZpZGluZwo+ ID4+IHRoZW0gb25lIGJ5IG9uZSBpbiB0aGUgcG9saWN5KS4KPiA+Pgo+ID4+IFNvbWV0aGluZyBs aWtlOgo+ID4+Cj4gPj4gb3A9RVhFQ1VURSBmc3Zlcml0eV9kaWdlc3Q9ZGlnbGltIGFjdGlvbj1B TExPVwo+ID4gTG9va3MgbGlrZSBpdCB3b3Jrcy4gSSBtb2RpZmllZCBJUEUgdG8gcXVlcnkgdGhl IHJvb3QgZGlnZXN0Cj4gPiBvZiBhbiBmc3Zlcml0eS1wcm90ZWN0ZWQgZmlsZSBpbiBESUdMSU0u Cj4gPgo+ID4gIyBjYXQgaXBlLXBvbGljeQo+ID4gcG9saWN5X25hbWU9IkFsbG93RlNWZXJpdHlL bW9kdWxlcyIgcG9saWN5X3ZlcnNpb249MC4wLjEKPiA+IERFRkFVTFQgYWN0aW9uPUFMTE9XCj4g PiBERUZBVUxUIG9wPUtNT0RVTEUgYWN0aW9uPURFTlkKPiA+IG9wPUtNT0RVTEUgZnN2ZXJpdHlf ZGlnZXN0PWRpZ2xpbSBhY3Rpb249QUxMT1cKPiA+Cj4gPiBJUEUgc2V0dXA6Cj4gPiAjIGNhdCBp cGUtcG9saWN5LnA3cyA+IC9zeXMva2VybmVsL3NlY3VyaXR5L2lwZS9uZXdfcG9saWN5Cj4gPiAj IGVjaG8gLW4gMSA+ICAvc3lzL2tlcm5lbC9zZWN1cml0eS9pcGUvcG9saWNpZXMvQWxsb3dGU1Zl cml0eUttb2R1bGVzL2FjdGl2ZQo+ID4gIyBlY2hvIDEgPiAvc3lzL2tlcm5lbC9zZWN1cml0eS9p cGUvZW5mb3JjZQo+ID4KPiA+IElQRSBkZW5pZXMgbG9hZGluZyBvZiBrZXJuZWwgbW9kdWxlcyBu b3QgcHJvdGVjdGVkIGJ5IGZzdmVyaXR5Ogo+ID4gIyBpbnNtb2QgIC9saWIvbW9kdWxlcy81LjE1 LjAtcmMxKy9rZXJuZWwvZnMvZmF0L2ZhdC5rbwo+ID4gaW5zbW9kOiBFUlJPUjogY291bGQgbm90 IGluc2VydCBtb2R1bGUgL2xpYi9tb2R1bGVzLzUuMTUuMC0KPiByYzErL2tlcm5lbC9mcy9mYXQv ZmF0LmtvOiBQZXJtaXNzaW9uIGRlbmllZAo+ID4KPiA+IFByb3RlY3QgZmF0LmtvIHdpdGggZnN2 ZXJpdHk6Cj4gPiAjIGNwIC9saWIvbW9kdWxlcy81LjE1LjAtcmMxKy9rZXJuZWwvZnMvZmF0L2Zh dC5rbyAvZnN2ZXJpdHkKPiA+ICMgZnN2ZXJpdHkgZW5hYmxlIC9mc3Zlcml0eS9mYXQua28KPiA+ ICMgZnN2ZXJpdHkgbWVhc3VyZSAvZnN2ZXJpdHkvZmF0LmtvCj4gPgo+IHNoYTI1NjowNzliZTZk ODg2MzhlNTgxNDFlZTI0YmJhODk4MTM5MTdjNDRmYWE1NWFkYTRiZjVkODAzMzVlZmUxNTQKPiA3 ODAzIC9mc3Zlcml0eS9mYXQua28KPiA+Cj4gPiBJUEUgc3RpbGwgZGVuaWVzIHRoZSBsb2FkaW5n IG9mIGZhdC5rbyAocm9vdCBkaWdlc3Qgbm90IHVwbG9hZGVkIHRvIHRoZSBrZXJuZWwpOgo+ID4g IyBpbnNtb2QgL2ZzdmVyaXR5L2ZhdC5rbwo+ID4gaW5zbW9kOiBFUlJPUjogY291bGQgbm90IGlu c2VydCBtb2R1bGUgL2ZzdmVyaXR5L2ZhdC5rbzogUGVybWlzc2lvbiBkZW5pZWQKPiA+Cj4gPiBH ZW5lcmF0ZSBhIGRpZ2VzdCBsaXN0IHdpdGggdGhlIHJvb3QgZGlnZXN0IGFib3ZlIGFuZCB1cGxv YWQgaXQgdG8gdGhlIGtlcm5lbDoKPiA+ICMgLi9jb21wYWN0X2dlbiAtaQo+IDA3OWJlNmQ4ODYz OGU1ODE0MWVlMjRiYmE4OTgxMzkxN2M0NGZhYTU1YWRhNGJmNWQ4MDMzNWVmZTE1NDc4MDMgLWEK PiBzaGEyNTYgLWQgdGVzdCAtcyAtdCBmaWxlIC1mCj4gPiAjIGVjaG8gJFBXRC90ZXN0LzAtZmls ZV9saXN0LWNvbXBhY3QtCj4gMDc5YmU2ZDg4NjM4ZTU4MTQxZWUyNGJiYTg5ODEzOTE3YzQ0ZmFh NTVhZGE0YmY1ZDgwMzM1ZWZlMTU0NzgwMyA+Cj4gL3N5cy9rZXJuZWwvc2VjdXJpdHkvaW50ZWdy aXR5L2RpZ2xpbS9kaWdlc3RfbGlzdF9hZGQKPiA+Cj4gPiBJUEUgYWxsb3dzIHRoZSBsb2FkaW5n IG9mIGZhdC5rbzoKPiA+ICMgaW5zbW9kIC9mc3Zlcml0eS9mYXQua28KPiA+ICMKPiA+Cj4gPiBS ZWdhcmRpbmcgYXV0aGVudGljaXR5LCBub3Qgc2hvd24gaW4gdGhpcyBkZW1vLCBJUEUgd2lsbCBh bHNvCj4gPiBlbnN1cmUgdGhhdCB0aGUgcm9vdCBkaWdlc3QgaXMgc2lnbmVkIChkaWdsaW1fZGln ZXN0X2dldF9pbmZvKCkKPiA+IHJlcG9ydHMgdGhpcyBpbmZvcm1hdGlvbikuCj4gCj4gSSBhcG9s b2dpemUgZm9yIHRoZSBkZWxheSBpbiByZXNwb25zZXMsIGJ1dCBpdCBsb29rcyBsaWtlCj4geW91 J3ZlIGZpZ3VyZWQgaXQgb3V0LgoKTm8gcHJvYmxlbS4KCj4gVGhpcyBraW5kIG9mIHRoaW5nIGlz IGV4YWN0bHkgd2hhdCBJUEUncyBkZXNpZ24gaXMgc3VwcG9zZWQgdG8KPiBzb2x2ZSwgeW91IGhh dmUgc29tZSBvdGhlciBzeXN0ZW0gd2hpY2ggcHJvdmlkZXMgdGhlCj4gaW50ZWdyaXR5IG1lY2hh bmlzbSBhbmQgKG9wdGlvbmFsbHkpIGRldGVybWluZSBpZiBpdCBpcyB0cnVzdGVkIG9yCj4gbm90 LCBhbmQgSVBFIGNhbiBwcm92aWRlIHRoZSBwb2xpY3kgYXNwZWN0IHZlcnkgZWFzaWx5IHRvCj4g bWFrZSBhIHNldCBvZiBzeXN0ZW0td2lkZSByZXF1aXJlbWVudHMgYXJvdW5kIHlvdXIgbWVjaGFu aXNtLgo+IAo+IEknbSB2ZXJ5IHN1cHBvcnRpdmUgb2YgYWRkaW5nIHRoZSBmdW5jdGlvbmFsaXR5 LCBidXQgSSB3b25kZXIKPiBpZiBpdCBtYWtlcyBtb3JlIHNlbnNlIHRvIGhhdmUgZGlnaWxtJ3Mg ZXh0ZW5zaW9uIGJlIGEgc2VwYXJhdGUKPiBrZXkgaW5zdGVhZCBvZiB0aWVkIHRvIHRoZSBmc3Zl cml0eV9kaWdlc3Qga2V5IC0gc29tZXRoaW5nIGxpa2UKPiAKPiAgICAgb3A9RVhFQ1VURSBkaWds aW1fZnN2ZXJpdHk9VFJVRSBhY3Rpb249REVOWQo+IAo+IHRoYXQgd2F5IHRoZSBjb25kaXRpb24g dGhhdCBlbmFibGVzIHRoaXMgcHJvcGVydHkgY2FuIGRlcGVuZAo+IG9uIGRpZ2lsbSBpbiB0aGUg YnVpbGQsIGFuZCBpdCBzZXBhcmF0ZXMgdGhlIHR3byBzeXN0ZW1zJwo+IGludGVncmF0aW9ucyBp biBhIHNsaWdodGx5IG1vcmUgY2xlYW4gd2F5LgoKWWVzLCBJIGFncmVlLiBJdCBpcyBtdWNoIG1v cmUgY2xlYW4uCgo+IEFzIGFuIGFzaWRlLCBkaWQgeW91IGZpbmQgaXQgZGlmZmljdWx0IHRvIGV4 dGVuZD8KCk5vLCBpdCB3YXMgdmVyeSBzdHJhaWdodGZvcndhcmQuCgpSb2JlcnRvCgpIVUFXRUkg VEVDSE5PTE9HSUVTIER1ZXNzZWxkb3JmIEdtYkgsIEhSQiA1NjA2MwpNYW5hZ2luZyBEaXJlY3Rv cjogTGkgUGVuZywgWmhvbmcgUm9uZ2h1YQoKPiA+IFJvYmVydG8KPiA+Cj4gPiBIVUFXRUkgVEVD SE5PTE9HSUVTIER1ZXNzZWxkb3JmIEdtYkgsIEhSQiA1NjA2Mwo+ID4gTWFuYWdpbmcgRGlyZWN0 b3I6IExpIFBlbmcsIFpob25nIFJvbmdodWEKPiA+Cj4gPj4gRElHTElNIGlzIGEgY29tcG9uZW50 IEknbSB3b3JraW5nIG9uIHRoYXQgZ2VuZXJpY2FsbHkKPiA+PiBzdG9yZXMgZGlnZXN0cy4gVGhl IGN1cnJlbnQgdXNlIGNhc2UgaXMgdG8gc3RvcmUgZmlsZSBkaWdlc3RzCj4gPj4gZnJvbSBSUE1U QUdfRklMRURJR0VTVFMgYW5kIHVzZSB0aGVtIHdpdGggSU1BLCBidXQKPiA+PiB0aGUgZnN2ZXJp dHkgdXNlIGNhc2UgY291bGQgYmUgZWFzaWx5IHN1cHBvcnRlZCAoaWYgdGhlIHJvb3QKPiA+PiBk aWdlc3QgaXMgc3RvcmVkIGluIHRoZSBSUE0gaGVhZGVyKS4KPiA+Pgo+ID4+IERJR0xJTSBhbHNv IHRlbGxzIHdoZXRoZXIgb3Igbm90IHRoZSBzaWduYXR1cmUgb2YgdGhlIHNvdXJjZQo+ID4+IGNv bnRhaW5pbmcgZmlsZSBkaWdlc3RzIChvciBmc3Zlcml0eSBkaWdlc3RzKSBpcyB2YWxpZCAodGhl IHNpZ25hdHVyZQo+ID4+IG9mIHRoZSBSUE0gaGVhZGVyIGlzIHRha2VuIGZyb20gUlBNVEFHX1JT QUhFQURFUikuCj4gPj4KPiA+PiBUaGUgbWVtb3J5IG9jY3VwYXRpb24gaXMgcmVsYXRpdmVseSBz bWFsbCBmb3IgZXhlY3V0YWJsZXMKPiA+PiBhbmQgc2hhcmVkIGxpYnJhcmllcy4gSSBwdWJsaXNo ZWQgYSBkZW1vIGZvciBGZWRvcmEgYW5kCj4gPj4gb3BlblNVU0Ugc29tZSB0aW1lIGFnbzoKPiA+ Pgo+ID4+IGh0dHBzOi8vbG9yZS5rZXJuZWwub3JnL2xpbnV4LQo+ID4+IGludGVncml0eS80OGNk NzM3YzUwNGQ0NTIwODM3N2RhYTI3ZDYyNTUzMUBodWF3ZWkuY29tLwo+ID4+Cj4gPj4gVGhhbmtz Cj4gPj4KPiA+PiBSb2JlcnRvCj4gPj4KPiA+PiBIVUFXRUkgVEVDSE5PTE9HSUVTIER1ZXNzZWxk b3JmIEdtYkgsIEhSQiA1NjA2Mwo+ID4+IE1hbmFnaW5nIERpcmVjdG9yOiBMaSBQZW5nLCBaaG9u ZyBSb25naHVhCgotLQpkbS1kZXZlbCBtYWlsaW5nIGxpc3QKZG0tZGV2ZWxAcmVkaGF0LmNvbQpo dHRwczovL2xpc3RtYW4ucmVkaGF0LmNvbS9tYWlsbWFuL2xpc3RpbmZvL2RtLWRldmVs From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 1A6E1C433EF for ; Wed, 27 Oct 2021 12:48:11 +0000 (UTC) Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.133.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id 4B3636103C for ; Wed, 27 Oct 2021 12:48:10 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.4.1 mail.kernel.org 4B3636103C Authentication-Results: mail.kernel.org; dmarc=fail (p=none dis=none) header.from=huawei.com Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=redhat.com Received: from mimecast-mx01.redhat.com (mimecast-mx01.redhat.com [209.132.183.4]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-468-it4JpA8ZPR2uowGrgzFSUA-1; Wed, 27 Oct 2021 08:48:04 -0400 X-MC-Unique: it4JpA8ZPR2uowGrgzFSUA-1 Received: from smtp.corp.redhat.com (int-mx05.intmail.prod.int.phx2.redhat.com [10.5.11.15]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mimecast-mx01.redhat.com (Postfix) with ESMTPS id CC39D19253E2; Wed, 27 Oct 2021 12:47:23 +0000 (UTC) Received: from colo-mx.corp.redhat.com (colo-mx02.intmail.prod.int.phx2.redhat.com [10.5.11.21]) by smtp.corp.redhat.com (Postfix) with ESMTPS id AE7F16A914; Wed, 27 Oct 2021 12:47:23 +0000 (UTC) Received: from lists01.pubmisc.prod.ext.phx2.redhat.com (lists01.pubmisc.prod.ext.phx2.redhat.com [10.5.19.33]) by colo-mx.corp.redhat.com (Postfix) with ESMTP id 8CCE45533F; Wed, 27 Oct 2021 12:47:23 +0000 (UTC) Received: from smtp.corp.redhat.com (int-mx01.intmail.prod.int.rdu2.redhat.com [10.11.54.1]) by lists01.pubmisc.prod.ext.phx2.redhat.com (8.13.8/8.13.8) with ESMTP id 19R8g3AJ024470 for ; Wed, 27 Oct 2021 04:42:04 -0400 Received: by smtp.corp.redhat.com (Postfix) id 50A7140CFD10; Wed, 27 Oct 2021 08:42:03 +0000 (UTC) Received: from mimecast-mx02.redhat.com (mimecast02.extmail.prod.ext.rdu2.redhat.com [10.11.55.18]) by smtp.corp.redhat.com (Postfix) with ESMTPS id 4AF5040CFD0C for ; Wed, 27 Oct 2021 08:42:03 +0000 (UTC) Received: from us-smtp-1.mimecast.com (us-smtp-delivery-1.mimecast.com [205.139.110.120]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mimecast-mx02.redhat.com (Postfix) with ESMTPS id 2BB2E800141 for ; Wed, 27 Oct 2021 08:42:03 +0000 (UTC) Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-294-VIg-fSj9Mj2y0E8pw3CIAw-1; Wed, 27 Oct 2021 04:41:59 -0400 X-MC-Unique: VIg-fSj9Mj2y0E8pw3CIAw-1 Received: from fraeml713-chm.china.huawei.com (unknown [172.18.147.206]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4HfMWP5vgbz6H7dv; Wed, 27 Oct 2021 16:37:21 +0800 (CST) Received: from fraeml714-chm.china.huawei.com (10.206.15.33) by fraeml713-chm.china.huawei.com (10.206.15.32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2308.15; Wed, 27 Oct 2021 10:41:56 +0200 Received: from fraeml714-chm.china.huawei.com ([10.206.15.33]) by fraeml714-chm.china.huawei.com ([10.206.15.33]) with mapi id 15.01.2308.015; Wed, 27 Oct 2021 10:41:56 +0200 From: Roberto Sassu To: Deven Bowers , Eric Biggers Subject: RE: [RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature Thread-Topic: [RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature Thread-Index: AQHXwGWUN6BqcPCg3Uma5jdt5usPz6vRLYAAgAMlHYCAAAy0gIAHoD6wgAM9LeCABllegIABBN/w Date: Wed, 27 Oct 2021 08:41:56 +0000 Message-ID: <7ba78ee8bf444fe99e1e7346dad475b7@huawei.com> References: <1634151995-16266-1-git-send-email-deven.desai@linux.microsoft.com> <1634151995-16266-13-git-send-email-deven.desai@linux.microsoft.com> <9089bdb0-b28a-9fa0-c510-00fa275af621@linux.microsoft.com> <5c1f800ba554485cb3659da689d2079a@huawei.com> <40f70c77-80eb-2716-be77-9cbcf4770b8a@linux.microsoft.com> In-Reply-To: <40f70c77-80eb-2716-be77-9cbcf4770b8a@linux.microsoft.com> Accept-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.221.98.153] MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mimecast-Impersonation-Protect: Policy=CLT - Impersonation Protection Definition; Similar Internal Domain=false; Similar Monitored External Domain=false; Custom External Domain=false; Mimecast External Domain=false; Newly Observed Domain=false; Internal User Name=false; Custom Display Name List=false; Reply-to Address Mismatch=false; Targeted Threat Dictionary=false; Mimecast Threat Dictionary=false; Custom Threat Dictionary=false X-Scanned-By: MIMEDefang 2.84 on 10.11.54.1 X-MIME-Autoconverted: from base64 to 8bit by lists01.pubmisc.prod.ext.phx2.redhat.com id 19R8g3AJ024470 X-loop: linux-audit@redhat.com X-Mailman-Approved-At: Wed, 27 Oct 2021 08:44:10 -0400 Cc: "axboe@kernel.dk" , "linux-security-module@vger.kernel.org" , "tytso@mit.edu" , "snitzer@redhat.com" , "corbet@lwn.net" , "jannh@google.com" , "linux-doc@vger.kernel.org" , "jmorris@namei.org" , "eparis@redhat.com" , "linux-kernel@vger.kernel.org" , "linux-block@vger.kernel.org" , "dm-devel@redhat.com" , "linux-audit@redhat.com" , "linux-fscrypt@vger.kernel.org" , "linux-integrity@vger.kernel.org" , "agk@redhat.com" , "serge@hallyn.com" X-BeenThere: linux-audit@redhat.com X-Mailman-Version: 2.1.12 Precedence: junk List-Id: Linux Audit Discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com X-Scanned-By: MIMEDefang 2.79 on 10.5.11.15 Authentication-Results: relay.mimecast.com; auth=pass smtp.auth=CUSA124A263 smtp.mailfrom=linux-audit-bounces@redhat.com X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Language: en-US Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 PiBGcm9tOiBEZXZlbiBCb3dlcnMgW21haWx0bzpkZXZlbi5kZXNhaUBsaW51eC5taWNyb3NvZnQu Y29tXQo+IFNlbnQ6IFR1ZXNkYXksIE9jdG9iZXIgMjYsIDIwMjEgOTowNCBQTQo+IE9uIDEwLzIy LzIwMjEgOTozMSBBTSwgUm9iZXJ0byBTYXNzdSB3cm90ZToKPiA+PiBGcm9tOiBSb2JlcnRvIFNh c3N1IFttYWlsdG86cm9iZXJ0by5zYXNzdUBodWF3ZWkuY29tXQo+ID4+IFNlbnQ6IFdlZG5lc2Rh eSwgT2N0b2JlciAyMCwgMjAyMSA1OjA5IFBNCj4gPj4+IEZyb206IEVyaWMgQmlnZ2VycyBbbWFp bHRvOmViaWdnZXJzQGtlcm5lbC5vcmddCj4gPj4+IFNlbnQ6IEZyaWRheSwgT2N0b2JlciAxNSwg MjAyMSAxMDoxMSBQTQo+ID4+PiBPbiBGcmksIE9jdCAxNSwgMjAyMSBhdCAxMjoyNTo1M1BNIC0w NzAwLCBEZXZlbiBCb3dlcnMgd3JvdGU6Cj4gPj4+PiBPbiAxMC8xMy8yMDIxIDEyOjI0IFBNLCBF cmljIEJpZ2dlcnMgd3JvdGU6Cj4gPj4+Pj4gT24gV2VkLCBPY3QgMTMsIDIwMjEgYXQgMTI6MDY6 MzFQTSAtMDcwMCwKPiA+Pj4gZGV2ZW4uZGVzYWlAbGludXgubWljcm9zb2Z0LmNvbSAgd3JvdGU6 Cj4gPj4+Pj4+IEZyb206IEZhbiBXdTx3dWZhbkBsaW51eC5taWNyb3NvZnQuY29tPgo+ID4+Pj4+ Pgo+ID4+Pj4+PiBBZGQgc2VjdXJpdHlfaW5vZGVfc2V0c2VjdXJpdHkgdG8gZnN2ZXJpdHkgc2ln bmF0dXJlIHZlcmlmaWNhdGlvbi4KPiA+Pj4+Pj4gVGhpcyBjYW4gbGV0IExTTXMgc2F2ZSB0aGUg c2lnbmF0dXJlIGRhdGEgYW5kIGRpZ2VzdCBoYXNoZXMgcHJvdmlkZWQKPiA+Pj4+Pj4gYnkgZnN2 ZXJpdHkuCj4gPj4+Pj4gQ2FuIHlvdSBlbGFib3JhdGUgb24gd2h5IExTTXMgbmVlZCB0aGlzIGlu Zm9ybWF0aW9uPwo+ID4+Pj4gVGhlIHByb3Bvc2VkIExTTSAoSVBFKSBvZiB0aGlzIHNlcmllcyB3 aWxsIGJlIHRoZSBvbmx5IG9uZSB0byBuZWVkCj4gPj4+PiB0aGlzIGluZm9ybWF0aW9uIGF0IHRo ZcKgIG1vbWVudC4gSVBF4oCZcyBnb2FsIGlzIHRvIGhhdmUgcHJvdmlkZQo+ID4+Pj4gdHJ1c3Qt YmFzZWQgYWNjZXNzIGNvbnRyb2wuIFRydXN0IGFuZCBJbnRlZ3JpdHkgYXJlIHRpZWQgdG9nZXRo ZXIsCj4gPj4+PiBhcyB5b3UgY2Fubm90IHByb3ZlIHRydXN0IHdpdGhvdXQgcHJvdmluZyBpbnRl Z3JpdHkuCj4gPj4+IEkgdGhpbmsgeW91IG1lYW4gYXV0aGVudGljaXR5LCBub3QgaW50ZWdyaXR5 Pwo+ID4+Pgo+ID4+PiBBbHNvIGhvdyBkb2VzIHRoaXMgZGlmZmVyIGZyb20gSU1BPyAgSSBrbm93 IHRoYXQgSU1BIGRvZXNuJ3Qgc3VwcG9ydCBmcy0KPiB2ZXJpdHkKPiA+Pj4gZmlsZSBoYXNoZXMs IGJ1dCB0aGF0IGNvdWxkIGJlIGNoYW5nZWQuICBXaHkgbm90IGV4dGVuZCBJTUEgdG8gY292ZXIg eW91cgo+IHVzZQo+ID4+PiBjYXNlKHMpPwo+ID4+Pgo+ID4+Pj4gSVBFIG5lZWRzIHRoZSBkaWdl c3QgaW5mb3JtYXRpb24gdG8gYmUgYWJsZSB0byBjb21wYXJlIGEgZGlnZXN0Cj4gPj4+PiBwcm92 aWRlZCBieSB0aGUgcG9saWN5IGF1dGhvciwgYWdhaW5zdCB0aGUgZGlnZXN0IGNhbGN1bGF0ZWQg YnkKPiA+Pj4+IGZzdmVyaXR5IHRvIG1ha2UgYSBkZWNpc2lvbiBvbiB3aGV0aGVyIHRoYXQgc3Bl Y2lmaWMgZmlsZSwgcmVwcmVzZW50ZWQKPiA+Pj4+IGJ5IHRoZSBkaWdlc3QgaXMgYXV0aG9yaXpl ZCBmb3IgdGhlIGFjdGlvbnMgc3BlY2lmaWVkIGluIHRoZSBwb2xpY3kuCj4gPj4+Pgo+ID4+Pj4g QSBtb3JlIGNvbmNyZXRlIGV4YW1wbGUsIGlmIGFuIElQRSBwb2xpY3kgYXV0aG9yIHdyaXRlczoK PiA+Pj4+Cj4gPj4+PiAgwqDCoMKgIG9wPUVYRUNVVEUgZnN2ZXJpdHlfZGlnZXN0PTxIZXhEaWdl c3QgPiBhY3Rpb249REVOWQo+ID4+Pj4KPiA+Pj4+IElQRSB0YWtlcyB0aGUgZGlnZXN0IHByb3Zp ZGVkIGJ5IHRoaXMgc2VjdXJpdHkgaG9vaywgc3RvcmVzIGl0Cj4gPj4+PiBpbiBJUEUncyBzZWN1 cml0eSBibG9iIG9uIHRoZSBpbm9kZS4gSWYgdGhpcyBmaWxlIGlzIGxhdGVyCj4gPj4+PiBleGVj dXRlZCwgSVBFIGNvbXBhcmVzIHRoZSBkaWdlc3Qgc3RvcmVkIGluIHRoZSBMU00gYmxvYiwKPiA+ Pj4+IHByb3ZpZGVkIGJ5IHRoaXMgaG9vaywgYWdhaW5zdCA8SGV4RGlnZXN0PiBpbiB0aGUgcG9s aWN5LCBpZgo+ID4+Pj4gaXQgbWF0Y2hlcywgaXQgZGVuaWVzIHRoZSBhY2Nlc3MsIHBlcmZvcm1p bmcgYSByZXZvY2F0aW9uCj4gPj4+PiBvZiB0aGF0IGZpbGUuCj4gPj4+IERvIHlvdSBoYXZlIGEg YmV0dGVyIGV4YW1wbGU/ICBUaGlzIG9uZSBpcyBwcmV0dHkgdXNlbGVzcyBzaW5jZSBvbmUgY2Fu IGdldAo+ID4+PiBhcm91bmQgaXQganVzdCBieSBleGVjdXRpbmcgYSBmaWxlIHRoYXQgZG9lc24n dCBoYXZlIGZzLXZlcml0eSBlbmFibGVkLgo+ID4+IEkgd2FzIHdvbmRlcmluZyBpZiB0aGUgZm9s bG93aW5nIHVzZSBjYXNlIGNhbiBiZSBzdXBwb3J0ZWQ6Cj4gPj4gYWxsb3cgdGhlIGV4ZWN1dGlv biBvZiBmaWxlcyBwcm90ZWN0ZWQgd2l0aCBmc3Zlcml0eSBpZiB0aGUgcm9vdAo+ID4+IGRpZ2Vz dCBpcyBmb3VuZCBhbW9uZyByZWZlcmVuY2UgdmFsdWVzIChpbnN0ZWFkIG9mIHByb3ZpZGluZwo+ ID4+IHRoZW0gb25lIGJ5IG9uZSBpbiB0aGUgcG9saWN5KS4KPiA+Pgo+ID4+IFNvbWV0aGluZyBs aWtlOgo+ID4+Cj4gPj4gb3A9RVhFQ1VURSBmc3Zlcml0eV9kaWdlc3Q9ZGlnbGltIGFjdGlvbj1B TExPVwo+ID4gTG9va3MgbGlrZSBpdCB3b3Jrcy4gSSBtb2RpZmllZCBJUEUgdG8gcXVlcnkgdGhl IHJvb3QgZGlnZXN0Cj4gPiBvZiBhbiBmc3Zlcml0eS1wcm90ZWN0ZWQgZmlsZSBpbiBESUdMSU0u Cj4gPgo+ID4gIyBjYXQgaXBlLXBvbGljeQo+ID4gcG9saWN5X25hbWU9IkFsbG93RlNWZXJpdHlL bW9kdWxlcyIgcG9saWN5X3ZlcnNpb249MC4wLjEKPiA+IERFRkFVTFQgYWN0aW9uPUFMTE9XCj4g PiBERUZBVUxUIG9wPUtNT0RVTEUgYWN0aW9uPURFTlkKPiA+IG9wPUtNT0RVTEUgZnN2ZXJpdHlf ZGlnZXN0PWRpZ2xpbSBhY3Rpb249QUxMT1cKPiA+Cj4gPiBJUEUgc2V0dXA6Cj4gPiAjIGNhdCBp cGUtcG9saWN5LnA3cyA+IC9zeXMva2VybmVsL3NlY3VyaXR5L2lwZS9uZXdfcG9saWN5Cj4gPiAj IGVjaG8gLW4gMSA+ICAvc3lzL2tlcm5lbC9zZWN1cml0eS9pcGUvcG9saWNpZXMvQWxsb3dGU1Zl cml0eUttb2R1bGVzL2FjdGl2ZQo+ID4gIyBlY2hvIDEgPiAvc3lzL2tlcm5lbC9zZWN1cml0eS9p cGUvZW5mb3JjZQo+ID4KPiA+IElQRSBkZW5pZXMgbG9hZGluZyBvZiBrZXJuZWwgbW9kdWxlcyBu b3QgcHJvdGVjdGVkIGJ5IGZzdmVyaXR5Ogo+ID4gIyBpbnNtb2QgIC9saWIvbW9kdWxlcy81LjE1 LjAtcmMxKy9rZXJuZWwvZnMvZmF0L2ZhdC5rbwo+ID4gaW5zbW9kOiBFUlJPUjogY291bGQgbm90 IGluc2VydCBtb2R1bGUgL2xpYi9tb2R1bGVzLzUuMTUuMC0KPiByYzErL2tlcm5lbC9mcy9mYXQv ZmF0LmtvOiBQZXJtaXNzaW9uIGRlbmllZAo+ID4KPiA+IFByb3RlY3QgZmF0LmtvIHdpdGggZnN2 ZXJpdHk6Cj4gPiAjIGNwIC9saWIvbW9kdWxlcy81LjE1LjAtcmMxKy9rZXJuZWwvZnMvZmF0L2Zh dC5rbyAvZnN2ZXJpdHkKPiA+ICMgZnN2ZXJpdHkgZW5hYmxlIC9mc3Zlcml0eS9mYXQua28KPiA+ ICMgZnN2ZXJpdHkgbWVhc3VyZSAvZnN2ZXJpdHkvZmF0LmtvCj4gPgo+IHNoYTI1NjowNzliZTZk ODg2MzhlNTgxNDFlZTI0YmJhODk4MTM5MTdjNDRmYWE1NWFkYTRiZjVkODAzMzVlZmUxNTQKPiA3 ODAzIC9mc3Zlcml0eS9mYXQua28KPiA+Cj4gPiBJUEUgc3RpbGwgZGVuaWVzIHRoZSBsb2FkaW5n IG9mIGZhdC5rbyAocm9vdCBkaWdlc3Qgbm90IHVwbG9hZGVkIHRvIHRoZSBrZXJuZWwpOgo+ID4g IyBpbnNtb2QgL2ZzdmVyaXR5L2ZhdC5rbwo+ID4gaW5zbW9kOiBFUlJPUjogY291bGQgbm90IGlu c2VydCBtb2R1bGUgL2ZzdmVyaXR5L2ZhdC5rbzogUGVybWlzc2lvbiBkZW5pZWQKPiA+Cj4gPiBH ZW5lcmF0ZSBhIGRpZ2VzdCBsaXN0IHdpdGggdGhlIHJvb3QgZGlnZXN0IGFib3ZlIGFuZCB1cGxv YWQgaXQgdG8gdGhlIGtlcm5lbDoKPiA+ICMgLi9jb21wYWN0X2dlbiAtaQo+IDA3OWJlNmQ4ODYz OGU1ODE0MWVlMjRiYmE4OTgxMzkxN2M0NGZhYTU1YWRhNGJmNWQ4MDMzNWVmZTE1NDc4MDMgLWEK PiBzaGEyNTYgLWQgdGVzdCAtcyAtdCBmaWxlIC1mCj4gPiAjIGVjaG8gJFBXRC90ZXN0LzAtZmls ZV9saXN0LWNvbXBhY3QtCj4gMDc5YmU2ZDg4NjM4ZTU4MTQxZWUyNGJiYTg5ODEzOTE3YzQ0ZmFh NTVhZGE0YmY1ZDgwMzM1ZWZlMTU0NzgwMyA+Cj4gL3N5cy9rZXJuZWwvc2VjdXJpdHkvaW50ZWdy aXR5L2RpZ2xpbS9kaWdlc3RfbGlzdF9hZGQKPiA+Cj4gPiBJUEUgYWxsb3dzIHRoZSBsb2FkaW5n IG9mIGZhdC5rbzoKPiA+ICMgaW5zbW9kIC9mc3Zlcml0eS9mYXQua28KPiA+ICMKPiA+Cj4gPiBS ZWdhcmRpbmcgYXV0aGVudGljaXR5LCBub3Qgc2hvd24gaW4gdGhpcyBkZW1vLCBJUEUgd2lsbCBh bHNvCj4gPiBlbnN1cmUgdGhhdCB0aGUgcm9vdCBkaWdlc3QgaXMgc2lnbmVkIChkaWdsaW1fZGln ZXN0X2dldF9pbmZvKCkKPiA+IHJlcG9ydHMgdGhpcyBpbmZvcm1hdGlvbikuCj4gCj4gSSBhcG9s b2dpemUgZm9yIHRoZSBkZWxheSBpbiByZXNwb25zZXMsIGJ1dCBpdCBsb29rcyBsaWtlCj4geW91 J3ZlIGZpZ3VyZWQgaXQgb3V0LgoKTm8gcHJvYmxlbS4KCj4gVGhpcyBraW5kIG9mIHRoaW5nIGlz IGV4YWN0bHkgd2hhdCBJUEUncyBkZXNpZ24gaXMgc3VwcG9zZWQgdG8KPiBzb2x2ZSwgeW91IGhh dmUgc29tZSBvdGhlciBzeXN0ZW0gd2hpY2ggcHJvdmlkZXMgdGhlCj4gaW50ZWdyaXR5IG1lY2hh bmlzbSBhbmQgKG9wdGlvbmFsbHkpIGRldGVybWluZSBpZiBpdCBpcyB0cnVzdGVkIG9yCj4gbm90 LCBhbmQgSVBFIGNhbiBwcm92aWRlIHRoZSBwb2xpY3kgYXNwZWN0IHZlcnkgZWFzaWx5IHRvCj4g bWFrZSBhIHNldCBvZiBzeXN0ZW0td2lkZSByZXF1aXJlbWVudHMgYXJvdW5kIHlvdXIgbWVjaGFu aXNtLgo+IAo+IEknbSB2ZXJ5IHN1cHBvcnRpdmUgb2YgYWRkaW5nIHRoZSBmdW5jdGlvbmFsaXR5 LCBidXQgSSB3b25kZXIKPiBpZiBpdCBtYWtlcyBtb3JlIHNlbnNlIHRvIGhhdmUgZGlnaWxtJ3Mg ZXh0ZW5zaW9uIGJlIGEgc2VwYXJhdGUKPiBrZXkgaW5zdGVhZCBvZiB0aWVkIHRvIHRoZSBmc3Zl cml0eV9kaWdlc3Qga2V5IC0gc29tZXRoaW5nIGxpa2UKPiAKPiAgICAgb3A9RVhFQ1VURSBkaWds aW1fZnN2ZXJpdHk9VFJVRSBhY3Rpb249REVOWQo+IAo+IHRoYXQgd2F5IHRoZSBjb25kaXRpb24g dGhhdCBlbmFibGVzIHRoaXMgcHJvcGVydHkgY2FuIGRlcGVuZAo+IG9uIGRpZ2lsbSBpbiB0aGUg YnVpbGQsIGFuZCBpdCBzZXBhcmF0ZXMgdGhlIHR3byBzeXN0ZW1zJwo+IGludGVncmF0aW9ucyBp biBhIHNsaWdodGx5IG1vcmUgY2xlYW4gd2F5LgoKWWVzLCBJIGFncmVlLiBJdCBpcyBtdWNoIG1v cmUgY2xlYW4uCgo+IEFzIGFuIGFzaWRlLCBkaWQgeW91IGZpbmQgaXQgZGlmZmljdWx0IHRvIGV4 dGVuZD8KCk5vLCBpdCB3YXMgdmVyeSBzdHJhaWdodGZvcndhcmQuCgpSb2JlcnRvCgpIVUFXRUkg VEVDSE5PTE9HSUVTIER1ZXNzZWxkb3JmIEdtYkgsIEhSQiA1NjA2MwpNYW5hZ2luZyBEaXJlY3Rv cjogTGkgUGVuZywgWmhvbmcgUm9uZ2h1YQoKPiA+IFJvYmVydG8KPiA+Cj4gPiBIVUFXRUkgVEVD SE5PTE9HSUVTIER1ZXNzZWxkb3JmIEdtYkgsIEhSQiA1NjA2Mwo+ID4gTWFuYWdpbmcgRGlyZWN0 b3I6IExpIFBlbmcsIFpob25nIFJvbmdodWEKPiA+Cj4gPj4gRElHTElNIGlzIGEgY29tcG9uZW50 IEknbSB3b3JraW5nIG9uIHRoYXQgZ2VuZXJpY2FsbHkKPiA+PiBzdG9yZXMgZGlnZXN0cy4gVGhl IGN1cnJlbnQgdXNlIGNhc2UgaXMgdG8gc3RvcmUgZmlsZSBkaWdlc3RzCj4gPj4gZnJvbSBSUE1U QUdfRklMRURJR0VTVFMgYW5kIHVzZSB0aGVtIHdpdGggSU1BLCBidXQKPiA+PiB0aGUgZnN2ZXJp dHkgdXNlIGNhc2UgY291bGQgYmUgZWFzaWx5IHN1cHBvcnRlZCAoaWYgdGhlIHJvb3QKPiA+PiBk aWdlc3QgaXMgc3RvcmVkIGluIHRoZSBSUE0gaGVhZGVyKS4KPiA+Pgo+ID4+IERJR0xJTSBhbHNv IHRlbGxzIHdoZXRoZXIgb3Igbm90IHRoZSBzaWduYXR1cmUgb2YgdGhlIHNvdXJjZQo+ID4+IGNv bnRhaW5pbmcgZmlsZSBkaWdlc3RzIChvciBmc3Zlcml0eSBkaWdlc3RzKSBpcyB2YWxpZCAodGhl IHNpZ25hdHVyZQo+ID4+IG9mIHRoZSBSUE0gaGVhZGVyIGlzIHRha2VuIGZyb20gUlBNVEFHX1JT QUhFQURFUikuCj4gPj4KPiA+PiBUaGUgbWVtb3J5IG9jY3VwYXRpb24gaXMgcmVsYXRpdmVseSBz bWFsbCBmb3IgZXhlY3V0YWJsZXMKPiA+PiBhbmQgc2hhcmVkIGxpYnJhcmllcy4gSSBwdWJsaXNo ZWQgYSBkZW1vIGZvciBGZWRvcmEgYW5kCj4gPj4gb3BlblNVU0Ugc29tZSB0aW1lIGFnbzoKPiA+ Pgo+ID4+IGh0dHBzOi8vbG9yZS5rZXJuZWwub3JnL2xpbnV4LQo+ID4+IGludGVncml0eS80OGNk NzM3YzUwNGQ0NTIwODM3N2RhYTI3ZDYyNTUzMUBodWF3ZWkuY29tLwo+ID4+Cj4gPj4gVGhhbmtz Cj4gPj4KPiA+PiBSb2JlcnRvCj4gPj4KPiA+PiBIVUFXRUkgVEVDSE5PTE9HSUVTIER1ZXNzZWxk b3JmIEdtYkgsIEhSQiA1NjA2Mwo+ID4+IE1hbmFnaW5nIERpcmVjdG9yOiBMaSBQZW5nLCBaaG9u ZyBSb25naHVhCgotLQpMaW51eC1hdWRpdCBtYWlsaW5nIGxpc3QKTGludXgtYXVkaXRAcmVkaGF0 LmNvbQpodHRwczovL2xpc3RtYW4ucmVkaGF0LmNvbS9tYWlsbWFuL2xpc3RpbmZvL2xpbnV4LWF1 ZGl0 From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 1FE8FC433FE for ; Wed, 27 Oct 2021 08:42:01 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id F144761075 for ; Wed, 27 Oct 2021 08:42:00 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S239512AbhJ0IoY (ORCPT ); Wed, 27 Oct 2021 04:44:24 -0400 Received: from frasgout.his.huawei.com ([185.176.79.56]:4031 "EHLO frasgout.his.huawei.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S239407AbhJ0IoY (ORCPT ); Wed, 27 Oct 2021 04:44:24 -0400 Received: from fraeml713-chm.china.huawei.com (unknown [172.18.147.206]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4HfMWP5vgbz6H7dv; Wed, 27 Oct 2021 16:37:21 +0800 (CST) Received: from fraeml714-chm.china.huawei.com (10.206.15.33) by fraeml713-chm.china.huawei.com (10.206.15.32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2308.15; Wed, 27 Oct 2021 10:41:56 +0200 Received: from fraeml714-chm.china.huawei.com ([10.206.15.33]) by fraeml714-chm.china.huawei.com ([10.206.15.33]) with mapi id 15.01.2308.015; Wed, 27 Oct 2021 10:41:56 +0200 From: Roberto Sassu To: Deven Bowers , Eric Biggers CC: "corbet@lwn.net" , "axboe@kernel.dk" , "agk@redhat.com" , "snitzer@redhat.com" , "tytso@mit.edu" , "paul@paul-moore.com" , "eparis@redhat.com" , "jmorris@namei.org" , "serge@hallyn.com" , "jannh@google.com" , "dm-devel@redhat.com" , "linux-doc@vger.kernel.org" , "linux-kernel@vger.kernel.org" , "linux-block@vger.kernel.org" , "linux-fscrypt@vger.kernel.org" , "linux-audit@redhat.com" , "linux-security-module@vger.kernel.org" , "linux-integrity@vger.kernel.org" Subject: RE: [RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature Thread-Topic: [RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature Thread-Index: AQHXwGWUN6BqcPCg3Uma5jdt5usPz6vRLYAAgAMlHYCAAAy0gIAHoD6wgAM9LeCABllegIABBN/w Date: Wed, 27 Oct 2021 08:41:56 +0000 Message-ID: <7ba78ee8bf444fe99e1e7346dad475b7@huawei.com> References: <1634151995-16266-1-git-send-email-deven.desai@linux.microsoft.com> <1634151995-16266-13-git-send-email-deven.desai@linux.microsoft.com> <9089bdb0-b28a-9fa0-c510-00fa275af621@linux.microsoft.com> <5c1f800ba554485cb3659da689d2079a@huawei.com> <40f70c77-80eb-2716-be77-9cbcf4770b8a@linux.microsoft.com> In-Reply-To: <40f70c77-80eb-2716-be77-9cbcf4770b8a@linux.microsoft.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.221.98.153] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Precedence: bulk List-ID: X-Mailing-List: linux-block@vger.kernel.org PiBGcm9tOiBEZXZlbiBCb3dlcnMgW21haWx0bzpkZXZlbi5kZXNhaUBsaW51eC5taWNyb3NvZnQu Y29tXQ0KPiBTZW50OiBUdWVzZGF5LCBPY3RvYmVyIDI2LCAyMDIxIDk6MDQgUE0NCj4gT24gMTAv MjIvMjAyMSA5OjMxIEFNLCBSb2JlcnRvIFNhc3N1IHdyb3RlOg0KPiA+PiBGcm9tOiBSb2JlcnRv IFNhc3N1IFttYWlsdG86cm9iZXJ0by5zYXNzdUBodWF3ZWkuY29tXQ0KPiA+PiBTZW50OiBXZWRu ZXNkYXksIE9jdG9iZXIgMjAsIDIwMjEgNTowOSBQTQ0KPiA+Pj4gRnJvbTogRXJpYyBCaWdnZXJz IFttYWlsdG86ZWJpZ2dlcnNAa2VybmVsLm9yZ10NCj4gPj4+IFNlbnQ6IEZyaWRheSwgT2N0b2Jl ciAxNSwgMjAyMSAxMDoxMSBQTQ0KPiA+Pj4gT24gRnJpLCBPY3QgMTUsIDIwMjEgYXQgMTI6MjU6 NTNQTSAtMDcwMCwgRGV2ZW4gQm93ZXJzIHdyb3RlOg0KPiA+Pj4+IE9uIDEwLzEzLzIwMjEgMTI6 MjQgUE0sIEVyaWMgQmlnZ2VycyB3cm90ZToNCj4gPj4+Pj4gT24gV2VkLCBPY3QgMTMsIDIwMjEg YXQgMTI6MDY6MzFQTSAtMDcwMCwNCj4gPj4+IGRldmVuLmRlc2FpQGxpbnV4Lm1pY3Jvc29mdC5j b20gIHdyb3RlOg0KPiA+Pj4+Pj4gRnJvbTogRmFuIFd1PHd1ZmFuQGxpbnV4Lm1pY3Jvc29mdC5j b20+DQo+ID4+Pj4+Pg0KPiA+Pj4+Pj4gQWRkIHNlY3VyaXR5X2lub2RlX3NldHNlY3VyaXR5IHRv IGZzdmVyaXR5IHNpZ25hdHVyZSB2ZXJpZmljYXRpb24uDQo+ID4+Pj4+PiBUaGlzIGNhbiBsZXQg TFNNcyBzYXZlIHRoZSBzaWduYXR1cmUgZGF0YSBhbmQgZGlnZXN0IGhhc2hlcyBwcm92aWRlZA0K PiA+Pj4+Pj4gYnkgZnN2ZXJpdHkuDQo+ID4+Pj4+IENhbiB5b3UgZWxhYm9yYXRlIG9uIHdoeSBM U01zIG5lZWQgdGhpcyBpbmZvcm1hdGlvbj8NCj4gPj4+PiBUaGUgcHJvcG9zZWQgTFNNIChJUEUp IG9mIHRoaXMgc2VyaWVzIHdpbGwgYmUgdGhlIG9ubHkgb25lIHRvIG5lZWQNCj4gPj4+PiB0aGlz IGluZm9ybWF0aW9uIGF0IHRoZcKgIG1vbWVudC4gSVBF4oCZcyBnb2FsIGlzIHRvIGhhdmUgcHJv dmlkZQ0KPiA+Pj4+IHRydXN0LWJhc2VkIGFjY2VzcyBjb250cm9sLiBUcnVzdCBhbmQgSW50ZWdy aXR5IGFyZSB0aWVkIHRvZ2V0aGVyLA0KPiA+Pj4+IGFzIHlvdSBjYW5ub3QgcHJvdmUgdHJ1c3Qg d2l0aG91dCBwcm92aW5nIGludGVncml0eS4NCj4gPj4+IEkgdGhpbmsgeW91IG1lYW4gYXV0aGVu dGljaXR5LCBub3QgaW50ZWdyaXR5Pw0KPiA+Pj4NCj4gPj4+IEFsc28gaG93IGRvZXMgdGhpcyBk aWZmZXIgZnJvbSBJTUE/ICBJIGtub3cgdGhhdCBJTUEgZG9lc24ndCBzdXBwb3J0IGZzLQ0KPiB2 ZXJpdHkNCj4gPj4+IGZpbGUgaGFzaGVzLCBidXQgdGhhdCBjb3VsZCBiZSBjaGFuZ2VkLiAgV2h5 IG5vdCBleHRlbmQgSU1BIHRvIGNvdmVyIHlvdXINCj4gdXNlDQo+ID4+PiBjYXNlKHMpPw0KPiA+ Pj4NCj4gPj4+PiBJUEUgbmVlZHMgdGhlIGRpZ2VzdCBpbmZvcm1hdGlvbiB0byBiZSBhYmxlIHRv IGNvbXBhcmUgYSBkaWdlc3QNCj4gPj4+PiBwcm92aWRlZCBieSB0aGUgcG9saWN5IGF1dGhvciwg YWdhaW5zdCB0aGUgZGlnZXN0IGNhbGN1bGF0ZWQgYnkNCj4gPj4+PiBmc3Zlcml0eSB0byBtYWtl IGEgZGVjaXNpb24gb24gd2hldGhlciB0aGF0IHNwZWNpZmljIGZpbGUsIHJlcHJlc2VudGVkDQo+ ID4+Pj4gYnkgdGhlIGRpZ2VzdCBpcyBhdXRob3JpemVkIGZvciB0aGUgYWN0aW9ucyBzcGVjaWZp ZWQgaW4gdGhlIHBvbGljeS4NCj4gPj4+Pg0KPiA+Pj4+IEEgbW9yZSBjb25jcmV0ZSBleGFtcGxl LCBpZiBhbiBJUEUgcG9saWN5IGF1dGhvciB3cml0ZXM6DQo+ID4+Pj4NCj4gPj4+PiAgwqDCoMKg IG9wPUVYRUNVVEUgZnN2ZXJpdHlfZGlnZXN0PTxIZXhEaWdlc3QgPiBhY3Rpb249REVOWQ0KPiA+ Pj4+DQo+ID4+Pj4gSVBFIHRha2VzIHRoZSBkaWdlc3QgcHJvdmlkZWQgYnkgdGhpcyBzZWN1cml0 eSBob29rLCBzdG9yZXMgaXQNCj4gPj4+PiBpbiBJUEUncyBzZWN1cml0eSBibG9iIG9uIHRoZSBp bm9kZS4gSWYgdGhpcyBmaWxlIGlzIGxhdGVyDQo+ID4+Pj4gZXhlY3V0ZWQsIElQRSBjb21wYXJl cyB0aGUgZGlnZXN0IHN0b3JlZCBpbiB0aGUgTFNNIGJsb2IsDQo+ID4+Pj4gcHJvdmlkZWQgYnkg dGhpcyBob29rLCBhZ2FpbnN0IDxIZXhEaWdlc3Q+IGluIHRoZSBwb2xpY3ksIGlmDQo+ID4+Pj4g aXQgbWF0Y2hlcywgaXQgZGVuaWVzIHRoZSBhY2Nlc3MsIHBlcmZvcm1pbmcgYSByZXZvY2F0aW9u DQo+ID4+Pj4gb2YgdGhhdCBmaWxlLg0KPiA+Pj4gRG8geW91IGhhdmUgYSBiZXR0ZXIgZXhhbXBs ZT8gIFRoaXMgb25lIGlzIHByZXR0eSB1c2VsZXNzIHNpbmNlIG9uZSBjYW4gZ2V0DQo+ID4+PiBh cm91bmQgaXQganVzdCBieSBleGVjdXRpbmcgYSBmaWxlIHRoYXQgZG9lc24ndCBoYXZlIGZzLXZl cml0eSBlbmFibGVkLg0KPiA+PiBJIHdhcyB3b25kZXJpbmcgaWYgdGhlIGZvbGxvd2luZyB1c2Ug Y2FzZSBjYW4gYmUgc3VwcG9ydGVkOg0KPiA+PiBhbGxvdyB0aGUgZXhlY3V0aW9uIG9mIGZpbGVz IHByb3RlY3RlZCB3aXRoIGZzdmVyaXR5IGlmIHRoZSByb290DQo+ID4+IGRpZ2VzdCBpcyBmb3Vu ZCBhbW9uZyByZWZlcmVuY2UgdmFsdWVzIChpbnN0ZWFkIG9mIHByb3ZpZGluZw0KPiA+PiB0aGVt IG9uZSBieSBvbmUgaW4gdGhlIHBvbGljeSkuDQo+ID4+DQo+ID4+IFNvbWV0aGluZyBsaWtlOg0K PiA+Pg0KPiA+PiBvcD1FWEVDVVRFIGZzdmVyaXR5X2RpZ2VzdD1kaWdsaW0gYWN0aW9uPUFMTE9X DQo+ID4gTG9va3MgbGlrZSBpdCB3b3Jrcy4gSSBtb2RpZmllZCBJUEUgdG8gcXVlcnkgdGhlIHJv b3QgZGlnZXN0DQo+ID4gb2YgYW4gZnN2ZXJpdHktcHJvdGVjdGVkIGZpbGUgaW4gRElHTElNLg0K PiA+DQo+ID4gIyBjYXQgaXBlLXBvbGljeQ0KPiA+IHBvbGljeV9uYW1lPSJBbGxvd0ZTVmVyaXR5 S21vZHVsZXMiIHBvbGljeV92ZXJzaW9uPTAuMC4xDQo+ID4gREVGQVVMVCBhY3Rpb249QUxMT1cN Cj4gPiBERUZBVUxUIG9wPUtNT0RVTEUgYWN0aW9uPURFTlkNCj4gPiBvcD1LTU9EVUxFIGZzdmVy aXR5X2RpZ2VzdD1kaWdsaW0gYWN0aW9uPUFMTE9XDQo+ID4NCj4gPiBJUEUgc2V0dXA6DQo+ID4g IyBjYXQgaXBlLXBvbGljeS5wN3MgPiAvc3lzL2tlcm5lbC9zZWN1cml0eS9pcGUvbmV3X3BvbGlj eQ0KPiA+ICMgZWNobyAtbiAxID4gIC9zeXMva2VybmVsL3NlY3VyaXR5L2lwZS9wb2xpY2llcy9B bGxvd0ZTVmVyaXR5S21vZHVsZXMvYWN0aXZlDQo+ID4gIyBlY2hvIDEgPiAvc3lzL2tlcm5lbC9z ZWN1cml0eS9pcGUvZW5mb3JjZQ0KPiA+DQo+ID4gSVBFIGRlbmllcyBsb2FkaW5nIG9mIGtlcm5l bCBtb2R1bGVzIG5vdCBwcm90ZWN0ZWQgYnkgZnN2ZXJpdHk6DQo+ID4gIyBpbnNtb2QgIC9saWIv bW9kdWxlcy81LjE1LjAtcmMxKy9rZXJuZWwvZnMvZmF0L2ZhdC5rbw0KPiA+IGluc21vZDogRVJS T1I6IGNvdWxkIG5vdCBpbnNlcnQgbW9kdWxlIC9saWIvbW9kdWxlcy81LjE1LjAtDQo+IHJjMSsv a2VybmVsL2ZzL2ZhdC9mYXQua286IFBlcm1pc3Npb24gZGVuaWVkDQo+ID4NCj4gPiBQcm90ZWN0 IGZhdC5rbyB3aXRoIGZzdmVyaXR5Og0KPiA+ICMgY3AgL2xpYi9tb2R1bGVzLzUuMTUuMC1yYzEr L2tlcm5lbC9mcy9mYXQvZmF0LmtvIC9mc3Zlcml0eQ0KPiA+ICMgZnN2ZXJpdHkgZW5hYmxlIC9m c3Zlcml0eS9mYXQua28NCj4gPiAjIGZzdmVyaXR5IG1lYXN1cmUgL2ZzdmVyaXR5L2ZhdC5rbw0K PiA+DQo+IHNoYTI1NjowNzliZTZkODg2MzhlNTgxNDFlZTI0YmJhODk4MTM5MTdjNDRmYWE1NWFk YTRiZjVkODAzMzVlZmUxNTQNCj4gNzgwMyAvZnN2ZXJpdHkvZmF0LmtvDQo+ID4NCj4gPiBJUEUg c3RpbGwgZGVuaWVzIHRoZSBsb2FkaW5nIG9mIGZhdC5rbyAocm9vdCBkaWdlc3Qgbm90IHVwbG9h ZGVkIHRvIHRoZSBrZXJuZWwpOg0KPiA+ICMgaW5zbW9kIC9mc3Zlcml0eS9mYXQua28NCj4gPiBp bnNtb2Q6IEVSUk9SOiBjb3VsZCBub3QgaW5zZXJ0IG1vZHVsZSAvZnN2ZXJpdHkvZmF0LmtvOiBQ ZXJtaXNzaW9uIGRlbmllZA0KPiA+DQo+ID4gR2VuZXJhdGUgYSBkaWdlc3QgbGlzdCB3aXRoIHRo ZSByb290IGRpZ2VzdCBhYm92ZSBhbmQgdXBsb2FkIGl0IHRvIHRoZSBrZXJuZWw6DQo+ID4gIyAu L2NvbXBhY3RfZ2VuIC1pDQo+IDA3OWJlNmQ4ODYzOGU1ODE0MWVlMjRiYmE4OTgxMzkxN2M0NGZh YTU1YWRhNGJmNWQ4MDMzNWVmZTE1NDc4MDMgLWENCj4gc2hhMjU2IC1kIHRlc3QgLXMgLXQgZmls ZSAtZg0KPiA+ICMgZWNobyAkUFdEL3Rlc3QvMC1maWxlX2xpc3QtY29tcGFjdC0NCj4gMDc5YmU2 ZDg4NjM4ZTU4MTQxZWUyNGJiYTg5ODEzOTE3YzQ0ZmFhNTVhZGE0YmY1ZDgwMzM1ZWZlMTU0Nzgw MyA+DQo+IC9zeXMva2VybmVsL3NlY3VyaXR5L2ludGVncml0eS9kaWdsaW0vZGlnZXN0X2xpc3Rf YWRkDQo+ID4NCj4gPiBJUEUgYWxsb3dzIHRoZSBsb2FkaW5nIG9mIGZhdC5rbzoNCj4gPiAjIGlu c21vZCAvZnN2ZXJpdHkvZmF0LmtvDQo+ID4gIw0KPiA+DQo+ID4gUmVnYXJkaW5nIGF1dGhlbnRp Y2l0eSwgbm90IHNob3duIGluIHRoaXMgZGVtbywgSVBFIHdpbGwgYWxzbw0KPiA+IGVuc3VyZSB0 aGF0IHRoZSByb290IGRpZ2VzdCBpcyBzaWduZWQgKGRpZ2xpbV9kaWdlc3RfZ2V0X2luZm8oKQ0K PiA+IHJlcG9ydHMgdGhpcyBpbmZvcm1hdGlvbikuDQo+IA0KPiBJIGFwb2xvZ2l6ZSBmb3IgdGhl IGRlbGF5IGluIHJlc3BvbnNlcywgYnV0IGl0IGxvb2tzIGxpa2UNCj4geW91J3ZlIGZpZ3VyZWQg aXQgb3V0Lg0KDQpObyBwcm9ibGVtLg0KDQo+IFRoaXMga2luZCBvZiB0aGluZyBpcyBleGFjdGx5 IHdoYXQgSVBFJ3MgZGVzaWduIGlzIHN1cHBvc2VkIHRvDQo+IHNvbHZlLCB5b3UgaGF2ZSBzb21l IG90aGVyIHN5c3RlbSB3aGljaCBwcm92aWRlcyB0aGUNCj4gaW50ZWdyaXR5IG1lY2hhbmlzbSBh bmQgKG9wdGlvbmFsbHkpIGRldGVybWluZSBpZiBpdCBpcyB0cnVzdGVkIG9yDQo+IG5vdCwgYW5k IElQRSBjYW4gcHJvdmlkZSB0aGUgcG9saWN5IGFzcGVjdCB2ZXJ5IGVhc2lseSB0bw0KPiBtYWtl IGEgc2V0IG9mIHN5c3RlbS13aWRlIHJlcXVpcmVtZW50cyBhcm91bmQgeW91ciBtZWNoYW5pc20u DQo+IA0KPiBJJ20gdmVyeSBzdXBwb3J0aXZlIG9mIGFkZGluZyB0aGUgZnVuY3Rpb25hbGl0eSwg YnV0IEkgd29uZGVyDQo+IGlmIGl0IG1ha2VzIG1vcmUgc2Vuc2UgdG8gaGF2ZSBkaWdpbG0ncyBl eHRlbnNpb24gYmUgYSBzZXBhcmF0ZQ0KPiBrZXkgaW5zdGVhZCBvZiB0aWVkIHRvIHRoZSBmc3Zl cml0eV9kaWdlc3Qga2V5IC0gc29tZXRoaW5nIGxpa2UNCj4gDQo+ICAgICBvcD1FWEVDVVRFIGRp Z2xpbV9mc3Zlcml0eT1UUlVFIGFjdGlvbj1ERU5ZDQo+IA0KPiB0aGF0IHdheSB0aGUgY29uZGl0 aW9uIHRoYXQgZW5hYmxlcyB0aGlzIHByb3BlcnR5IGNhbiBkZXBlbmQNCj4gb24gZGlnaWxtIGlu IHRoZSBidWlsZCwgYW5kIGl0IHNlcGFyYXRlcyB0aGUgdHdvIHN5c3RlbXMnDQo+IGludGVncmF0 aW9ucyBpbiBhIHNsaWdodGx5IG1vcmUgY2xlYW4gd2F5Lg0KDQpZZXMsIEkgYWdyZWUuIEl0IGlz IG11Y2ggbW9yZSBjbGVhbi4NCg0KPiBBcyBhbiBhc2lkZSwgZGlkIHlvdSBmaW5kIGl0IGRpZmZp Y3VsdCB0byBleHRlbmQ/DQoNCk5vLCBpdCB3YXMgdmVyeSBzdHJhaWdodGZvcndhcmQuDQoNClJv YmVydG8NCg0KSFVBV0VJIFRFQ0hOT0xPR0lFUyBEdWVzc2VsZG9yZiBHbWJILCBIUkIgNTYwNjMN Ck1hbmFnaW5nIERpcmVjdG9yOiBMaSBQZW5nLCBaaG9uZyBSb25naHVhDQoNCj4gPiBSb2JlcnRv DQo+ID4NCj4gPiBIVUFXRUkgVEVDSE5PTE9HSUVTIER1ZXNzZWxkb3JmIEdtYkgsIEhSQiA1NjA2 Mw0KPiA+IE1hbmFnaW5nIERpcmVjdG9yOiBMaSBQZW5nLCBaaG9uZyBSb25naHVhDQo+ID4NCj4g Pj4gRElHTElNIGlzIGEgY29tcG9uZW50IEknbSB3b3JraW5nIG9uIHRoYXQgZ2VuZXJpY2FsbHkN Cj4gPj4gc3RvcmVzIGRpZ2VzdHMuIFRoZSBjdXJyZW50IHVzZSBjYXNlIGlzIHRvIHN0b3JlIGZp bGUgZGlnZXN0cw0KPiA+PiBmcm9tIFJQTVRBR19GSUxFRElHRVNUUyBhbmQgdXNlIHRoZW0gd2l0 aCBJTUEsIGJ1dA0KPiA+PiB0aGUgZnN2ZXJpdHkgdXNlIGNhc2UgY291bGQgYmUgZWFzaWx5IHN1 cHBvcnRlZCAoaWYgdGhlIHJvb3QNCj4gPj4gZGlnZXN0IGlzIHN0b3JlZCBpbiB0aGUgUlBNIGhl YWRlcikuDQo+ID4+DQo+ID4+IERJR0xJTSBhbHNvIHRlbGxzIHdoZXRoZXIgb3Igbm90IHRoZSBz aWduYXR1cmUgb2YgdGhlIHNvdXJjZQ0KPiA+PiBjb250YWluaW5nIGZpbGUgZGlnZXN0cyAob3Ig ZnN2ZXJpdHkgZGlnZXN0cykgaXMgdmFsaWQgKHRoZSBzaWduYXR1cmUNCj4gPj4gb2YgdGhlIFJQ TSBoZWFkZXIgaXMgdGFrZW4gZnJvbSBSUE1UQUdfUlNBSEVBREVSKS4NCj4gPj4NCj4gPj4gVGhl IG1lbW9yeSBvY2N1cGF0aW9uIGlzIHJlbGF0aXZlbHkgc21hbGwgZm9yIGV4ZWN1dGFibGVzDQo+ ID4+IGFuZCBzaGFyZWQgbGlicmFyaWVzLiBJIHB1Ymxpc2hlZCBhIGRlbW8gZm9yIEZlZG9yYSBh bmQNCj4gPj4gb3BlblNVU0Ugc29tZSB0aW1lIGFnbzoNCj4gPj4NCj4gPj4gaHR0cHM6Ly9sb3Jl Lmtlcm5lbC5vcmcvbGludXgtDQo+ID4+IGludGVncml0eS80OGNkNzM3YzUwNGQ0NTIwODM3N2Rh YTI3ZDYyNTUzMUBodWF3ZWkuY29tLw0KPiA+Pg0KPiA+PiBUaGFua3MNCj4gPj4NCj4gPj4gUm9i ZXJ0bw0KPiA+Pg0KPiA+PiBIVUFXRUkgVEVDSE5PTE9HSUVTIER1ZXNzZWxkb3JmIEdtYkgsIEhS QiA1NjA2Mw0KPiA+PiBNYW5hZ2luZyBEaXJlY3RvcjogTGkgUGVuZywgWmhvbmcgUm9uZ2h1YQ0K