From mboxrd@z Thu Jan  1 00:00:00 1970
Return-path: <kexec-bounces+dwmw2=infradead.org@lists.infradead.org>
Received: from mail-pl0-x244.google.com ([2607:f8b0:400e:c01::244])
 by bombadil.infradead.org with esmtps (Exim 4.90_1 #2 (Red Hat Linux))
 id 1fa3pm-00072x-1L
 for kexec@lists.infradead.org; Mon, 02 Jul 2018 18:46:09 +0000
Received: by mail-pl0-x244.google.com with SMTP id t6-v6so8349762plo.7
 for <kexec@lists.infradead.org>; Mon, 02 Jul 2018 11:45:47 -0700 (PDT)
Subject: Re: [PATCH v5 1/8] security: define new LSM hook named
 security_kernel_load_data
References: <1530542283-26145-1-git-send-email-zohar@linux.vnet.ibm.com>
 <1530542283-26145-2-git-send-email-zohar@linux.vnet.ibm.com>
From: J Freyensee <why2jjj.linux@gmail.com>
Message-ID: <64f467a5-e907-ee3e-495b-b2c731715037@gmail.com>
Date: Mon, 2 Jul 2018 11:45:44 -0700
MIME-Version: 1.0
In-Reply-To: <1530542283-26145-2-git-send-email-zohar@linux.vnet.ibm.com>
Content-Language: en-US
List-Id: <kexec.lists.infradead.org>
List-Unsubscribe: <http://lists.infradead.org/mailman/options/kexec>,
 <mailto:kexec-request@lists.infradead.org?subject=unsubscribe>
List-Archive: <http://lists.infradead.org/pipermail/kexec/>
List-Post: <mailto:kexec@lists.infradead.org>
List-Help: <mailto:kexec-request@lists.infradead.org?subject=help>
List-Subscribe: <http://lists.infradead.org/mailman/listinfo/kexec>,
 <mailto:kexec-request@lists.infradead.org?subject=subscribe>
Content-Transfer-Encoding: base64
Content-Type: text/plain; charset="utf-8"; Format="flowed"
Sender: "kexec" <kexec-bounces@lists.infradead.org>
Errors-To: kexec-bounces+dwmw2=infradead.org@lists.infradead.org
To: Mimi Zohar <zohar@linux.vnet.ibm.com>, linux-integrity@vger.kernel.org
Cc: Andres Rodriguez <andresx7@gmail.com>, Kees Cook <keescook@chromium.org>, Ard Biesheuvel <ard.biesheuvel@linaro.org>, Greg Kroah-Hartman <gregkh@linuxfoundation.org>, kexec@lists.infradead.org, linux-kernel@vger.kernel.org, David Howells <dhowells@redhat.com>, linux-security-module@vger.kernel.org, Eric Biederman <ebiederm@xmission.com>, Casey Schaufler <casey@schaufler-ca.com>, "Luis R . Rodriguez" <mcgrof@kernel.org>

CgpPbiA3LzIvMTggNzozNyBBTSwgTWltaSBab2hhciB3cm90ZToKPiBEaWZmZXJlbnRpYXRlIGJl
dHdlZW4gdGhlIGtlcm5lbCByZWFkaW5nIGEgZmlsZSBmcm9tIHRoZSBrZXJuZWwgbG9hZGluZwo+
IGRhdGEgcHJvdmlkZWQgYnkgdXNlcnNwYWNlLiAgVGhpcyBwYXRjaCBkZWZpbmVzIGEgbmV3IExT
TSBob29rIG5hbWVkCj4gc2VjdXJpdHlfa2VybmVsX2xvYWRfZGF0YS4KCklmIHRoaXMgcGF0Y2gg
c2VyaWVzIGlzIHJlLWRvbmUsIGNhbiB3ZSB0d2VhayB0aGUgZGVzY3JpcHRpb24gaGVyZSAKcGxl
YXNlP8KgIEZyb20gd2hhdCBJIHVuZGVyc3Rvb2Qgb2YgdGhlIGNvZGUgaW4gdGhpcyBwYXRjaCwg
SSdkIHR3ZWFrIGl0IGFzOgoKIkRpZmZlcmVudGlhdGUgYmV0d2VlbiB0aGUga2VybmVsIHJlYWRp
bmcgYSBmaWxlIHNwZWNpZmllZCBieSB1c2Vyc3BhY2UgCmFuZCB0aGUga2VybmVsIGxvYWRpbmcg
YSBibG9jayBvZiBkYXRhIHByb3ZpZGVkIGJ5IHVzZXJzcGFjZS7CoCBUaGlzIApwYXRjaCBkZWZp
bmVzIGEgbmV3IExTTSBob29rIG5hbWVkIHNlY3VyaXR5X2tlcm5lbF9sb2FkX2RhdGEoKS4iCgog
RnJvbSB0aGUgZGVzY3JpcHRpb24sIEkgZ290IGEgdGFkIGNvbmZ1c2VkIGlmIHRoZSB0aGUga2Vy
bmVsIHJlYWRpbmcgYSBmaWxlIHdhcyBhbHNvIHByb3ZpZGVkIGJ5IHVzZXJzcGFjZSAoSSBrbm93
IGl0IG1heSBiZSAybmQtbmF0dXJlIHRvIHBlb3BsZSBvbiB0aGlzIGxpc3QsIEknbSBzdGlsbCBs
ZWFybmluZyB0aGlzIGtlcm5lbCBtb2R1bGUpLgoKVGhhbmtzLApKYXkKCj4gU2lnbmVkLW9mZi1i
eTogTWltaSBab2hhciA8em9oYXJAbGludXgudm5ldC5pYm0uY29tPgo+IENjOiBFcmljIEJpZWRl
cm1hbiA8ZWJpZWRlcm1AeG1pc3Npb24uY29tPgo+IENjOiBMdWlzIFIuIFJvZHJpZ3VleiA8bWNn
cm9mQGtlcm5lbC5vcmc+Cj4gQ2M6IEtlZXMgQ29vayA8a2Vlc2Nvb2tAY2hyb21pdW0ub3JnPgo+
IENjOiBEYXZpZCBIb3dlbGxzIDxkaG93ZWxsc0ByZWRoYXQuY29tPgo+IENjOiBDYXNleSBTY2hh
dWZsZXIgPGNhc2V5QHNjaGF1Zmxlci1jYS5jb20+Cj4gQWNrZWQtYnk6IFNlcmdlIEhhbGx5biA8
c2VyZ2VAaGFsbHluLmNvbT4KPgo+IC0tLQo+IENoYW5nZWxvZyB2NToKPiAtIFNoYXJlIHRoZSBr
ZXJuZWxfbG9hZF9kYXRhX2lkIGFuZCBrZXJuZWxfcmVhZF9maWxlX2lkIHZhbHVlcywKPiBzaW1w
bGlmeWluZyBMb2FkcGluJ3MgYW5kIG90aGVyIExTTXMgY2FsbGluZyBvbmUgTFNNIGhvb2sgZnJv
bSB0aGUKPiBvdGhlci4KPgo+IENoYW5nZWxvZyB2NDoKPiAtIERlZmluZSBuZXcgTFNNIGhvb2sg
bmFtZWQgc2VjdXJpdHlfa2VybmVsX2xvYWRfZGF0YS4KPgo+IENoYW5nZWxvZyB2MzoKPiAtIFJl
bmFtZSBzZWN1cml0eV9rZXJuZWxfcmVhZF9maWxlIHRvIHNlY3VyaXR5X2tlcm5lbF9yZWFkX2Rh
dGEoKS4KPgo+IENoYW5nZWxvZyB2MjoKPiAtIERlZmluZSBhIGdlbmVyaWMgd3JhcHBlciBuYW1l
ZCBzZWN1cml0eV9rZXJuZWxfcmVhZF9ibG9iKCkgZm9yCj4gc2VjdXJpdHlfa2VybmVsX3JlYWRf
ZmlsZSgpLgo+Cj4gQ2hhbmdlbG9nIHYxOgo+IC0gRGVmaW5lIGFuZCBjYWxsIHNlY3VyaXR5X2tl
eGVjX2xvYWQoKSwgYSB3cmFwcGVyIGZvcgo+IHNlY3VyaXR5X2tlcm5lbF9yZWFkX2ZpbGUoKS4K
Pgo+ICAgaW5jbHVkZS9saW51eC9sc21faG9va3MuaCB8ICA2ICsrKysrKwo+ICAgaW5jbHVkZS9s
aW51eC9zZWN1cml0eS5oICB8IDI3ICsrKysrKysrKysrKysrKysrKysrKysrKysrKwo+ICAgc2Vj
dXJpdHkvc2VjdXJpdHkuYyAgICAgICB8ICA1ICsrKysrCj4gICAzIGZpbGVzIGNoYW5nZWQsIDM4
IGluc2VydGlvbnMoKykKPgo+IGRpZmYgLS1naXQgYS9pbmNsdWRlL2xpbnV4L2xzbV9ob29rcy5o
IGIvaW5jbHVkZS9saW51eC9sc21faG9va3MuaAo+IGluZGV4IDhmMTEzMWM4ZGQ1NC4uYTA4YmMy
NTg3Yjk2IDEwMDY0NAo+IC0tLSBhL2luY2x1ZGUvbGludXgvbHNtX2hvb2tzLmgKPiArKysgYi9p
bmNsdWRlL2xpbnV4L2xzbV9ob29rcy5oCj4gQEAgLTU3Niw2ICs1NzYsMTAgQEAKPiAgICAqCXVz
ZXJzcGFjZSB0byBsb2FkIGEga2VybmVsIG1vZHVsZSB3aXRoIHRoZSBnaXZlbiBuYW1lLgo+ICAg
ICoJQGttb2RfbmFtZSBuYW1lIG9mIHRoZSBtb2R1bGUgcmVxdWVzdGVkIGJ5IHRoZSBrZXJuZWwK
PiAgICAqCVJldHVybiAwIGlmIHN1Y2Nlc3NmdWwuCj4gKyAqIEBrZXJuZWxfbG9hZF9kYXRhOgo+
ICsgKglMb2FkIGRhdGEgcHJvdmlkZWQgYnkgdXNlcnNwYWNlLgo+ICsgKglAaWQga2VybmVsIGxv
YWQgZGF0YSBpZGVudGlmaWVyCj4gKyAqCVJldHVybiAwIGlmIHBlcm1pc3Npb24gaXMgZ3JhbnRl
ZC4KPiAgICAqIEBrZXJuZWxfcmVhZF9maWxlOgo+ICAgICoJUmVhZCBhIGZpbGUgc3BlY2lmaWVk
IGJ5IHVzZXJzcGFjZS4KPiAgICAqCUBmaWxlIGNvbnRhaW5zIHRoZSBmaWxlIHN0cnVjdHVyZSBw
b2ludGluZyB0byB0aGUgZmlsZSBiZWluZyByZWFkCj4gQEAgLTE1ODIsNiArMTU4Niw3IEBAIHVu
aW9uIHNlY3VyaXR5X2xpc3Rfb3B0aW9ucyB7Cj4gICAJaW50ICgqa2VybmVsX2FjdF9hcykoc3Ry
dWN0IGNyZWQgKm5ldywgdTMyIHNlY2lkKTsKPiAgIAlpbnQgKCprZXJuZWxfY3JlYXRlX2ZpbGVz
X2FzKShzdHJ1Y3QgY3JlZCAqbmV3LCBzdHJ1Y3QgaW5vZGUgKmlub2RlKTsKPiAgIAlpbnQgKCpr
ZXJuZWxfbW9kdWxlX3JlcXVlc3QpKGNoYXIgKmttb2RfbmFtZSk7Cj4gKwlpbnQgKCprZXJuZWxf
bG9hZF9kYXRhKShlbnVtIGtlcm5lbF9sb2FkX2RhdGFfaWQgaWQpOwo+ICAgCWludCAoKmtlcm5l
bF9yZWFkX2ZpbGUpKHN0cnVjdCBmaWxlICpmaWxlLCBlbnVtIGtlcm5lbF9yZWFkX2ZpbGVfaWQg
aWQpOwo+ICAgCWludCAoKmtlcm5lbF9wb3N0X3JlYWRfZmlsZSkoc3RydWN0IGZpbGUgKmZpbGUs
IGNoYXIgKmJ1ZiwgbG9mZl90IHNpemUsCj4gICAJCQkJICAgICBlbnVtIGtlcm5lbF9yZWFkX2Zp
bGVfaWQgaWQpOwo+IEBAIC0xODcyLDYgKzE4NzcsNyBAQCBzdHJ1Y3Qgc2VjdXJpdHlfaG9va19o
ZWFkcyB7Cj4gICAJc3RydWN0IGhsaXN0X2hlYWQgY3JlZF9nZXRzZWNpZDsKPiAgIAlzdHJ1Y3Qg
aGxpc3RfaGVhZCBrZXJuZWxfYWN0X2FzOwo+ICAgCXN0cnVjdCBobGlzdF9oZWFkIGtlcm5lbF9j
cmVhdGVfZmlsZXNfYXM7Cj4gKwlzdHJ1Y3QgaGxpc3RfaGVhZCBrZXJuZWxfbG9hZF9kYXRhOwo+
ICAgCXN0cnVjdCBobGlzdF9oZWFkIGtlcm5lbF9yZWFkX2ZpbGU7Cj4gICAJc3RydWN0IGhsaXN0
X2hlYWQga2VybmVsX3Bvc3RfcmVhZF9maWxlOwo+ICAgCXN0cnVjdCBobGlzdF9oZWFkIGtlcm5l
bF9tb2R1bGVfcmVxdWVzdDsKPiBkaWZmIC0tZ2l0IGEvaW5jbHVkZS9saW51eC9zZWN1cml0eS5o
IGIvaW5jbHVkZS9saW51eC9zZWN1cml0eS5oCj4gaW5kZXggNjMwMzBjODVlZTE5Li4zNDEwYWNm
ZTEzOWMgMTAwNjQ0Cj4gLS0tIGEvaW5jbHVkZS9saW51eC9zZWN1cml0eS5oCj4gKysrIGIvaW5j
bHVkZS9saW51eC9zZWN1cml0eS5oCj4gQEAgLTE1OSw2ICsxNTksMjcgQEAgZXh0ZXJuIGludCBt
bWFwX21pbl9hZGRyX2hhbmRsZXIoc3RydWN0IGN0bF90YWJsZSAqdGFibGUsIGludCB3cml0ZSwK
PiAgIHR5cGVkZWYgaW50ICgqaW5pdHhhdHRycykgKHN0cnVjdCBpbm9kZSAqaW5vZGUsCj4gICAJ
CQkgICBjb25zdCBzdHJ1Y3QgeGF0dHIgKnhhdHRyX2FycmF5LCB2b2lkICpmc19kYXRhKTsKPiAg
IAo+ICsKPiArLyogS2VlcCB0aGUga2VybmVsX2xvYWRfZGF0YV9pZCBlbnVtIGluIHN5bmMgd2l0
aCBrZXJuZWxfcmVhZF9maWxlX2lkICovCj4gKyNkZWZpbmUgX19kYXRhX2lkX2VudW1pZnkoRU5V
TSwgZHVtbXkpIExPQURJTkdfICMjIEVOVU0sCj4gKyNkZWZpbmUgX19kYXRhX2lkX3N0cmluZ2lm
eShkdW1teSwgc3RyKSAjc3RyLAo+ICsKPiArZW51bSBrZXJuZWxfbG9hZF9kYXRhX2lkIHsKPiAr
CV9fa2VybmVsX3JlYWRfZmlsZV9pZChfX2RhdGFfaWRfZW51bWlmeSkKPiArfTsKPiArCj4gK3N0
YXRpYyBjb25zdCBjaGFyICogY29uc3Qga2VybmVsX2xvYWRfZGF0YV9zdHJbXSA9IHsKPiArCV9f
a2VybmVsX3JlYWRfZmlsZV9pZChfX2RhdGFfaWRfc3RyaW5naWZ5KQo+ICt9Owo+ICsKPiArc3Rh
dGljIGlubGluZSBjb25zdCBjaGFyICprZXJuZWxfbG9hZF9kYXRhX2lkX3N0cihlbnVtIGtlcm5l
bF9sb2FkX2RhdGFfaWQgaWQpCj4gK3sKPiArCWlmICgodW5zaWduZWQpaWQgPj0gTE9BRElOR19N
QVhfSUQpCj4gKwkJcmV0dXJuIGtlcm5lbF9sb2FkX2RhdGFfc3RyW0xPQURJTkdfVU5LTk9XTl07
Cj4gKwo+ICsJcmV0dXJuIGtlcm5lbF9sb2FkX2RhdGFfc3RyW2lkXTsKPiArfQo+ICsKPiAgICNp
ZmRlZiBDT05GSUdfU0VDVVJJVFkKPiAgIAo+ICAgc3RydWN0IHNlY3VyaXR5X21udF9vcHRzIHsK
PiBAQCAtMzIwLDYgKzM0MSw3IEBAIHZvaWQgc2VjdXJpdHlfY3JlZF9nZXRzZWNpZChjb25zdCBz
dHJ1Y3QgY3JlZCAqYywgdTMyICpzZWNpZCk7Cj4gICBpbnQgc2VjdXJpdHlfa2VybmVsX2FjdF9h
cyhzdHJ1Y3QgY3JlZCAqbmV3LCB1MzIgc2VjaWQpOwo+ICAgaW50IHNlY3VyaXR5X2tlcm5lbF9j
cmVhdGVfZmlsZXNfYXMoc3RydWN0IGNyZWQgKm5ldywgc3RydWN0IGlub2RlICppbm9kZSk7Cj4g
ICBpbnQgc2VjdXJpdHlfa2VybmVsX21vZHVsZV9yZXF1ZXN0KGNoYXIgKmttb2RfbmFtZSk7Cj4g
K2ludCBzZWN1cml0eV9rZXJuZWxfbG9hZF9kYXRhKGVudW0ga2VybmVsX2xvYWRfZGF0YV9pZCBp
ZCk7Cj4gICBpbnQgc2VjdXJpdHlfa2VybmVsX3JlYWRfZmlsZShzdHJ1Y3QgZmlsZSAqZmlsZSwg
ZW51bSBrZXJuZWxfcmVhZF9maWxlX2lkIGlkKTsKPiAgIGludCBzZWN1cml0eV9rZXJuZWxfcG9z
dF9yZWFkX2ZpbGUoc3RydWN0IGZpbGUgKmZpbGUsIGNoYXIgKmJ1ZiwgbG9mZl90IHNpemUsCj4g
ICAJCQkJICAgZW51bSBrZXJuZWxfcmVhZF9maWxlX2lkIGlkKTsKPiBAQCAtOTA5LDYgKzkzMSwx
MSBAQCBzdGF0aWMgaW5saW5lIGludCBzZWN1cml0eV9rZXJuZWxfbW9kdWxlX3JlcXVlc3QoY2hh
ciAqa21vZF9uYW1lKQo+ICAgCXJldHVybiAwOwo+ICAgfQo+ICAgCj4gK3N0YXRpYyBpbmxpbmUg
aW50IHNlY3VyaXR5X2tlcm5lbF9sb2FkX2RhdGEoZW51bSBrZXJuZWxfbG9hZF9kYXRhX2lkIGlk
KQo+ICt7Cj4gKwlyZXR1cm4gMDsKPiArfQo+ICsKPiAgIHN0YXRpYyBpbmxpbmUgaW50IHNlY3Vy
aXR5X2tlcm5lbF9yZWFkX2ZpbGUoc3RydWN0IGZpbGUgKmZpbGUsCj4gICAJCQkJCSAgICBlbnVt
IGtlcm5lbF9yZWFkX2ZpbGVfaWQgaWQpCj4gICB7Cj4gZGlmZiAtLWdpdCBhL3NlY3VyaXR5L3Nl
Y3VyaXR5LmMgYi9zZWN1cml0eS9zZWN1cml0eS5jCj4gaW5kZXggZTdkNzZhODAwMGE1Li4wNWZl
NWIxOTMyZDcgMTAwNjQ0Cj4gLS0tIGEvc2VjdXJpdHkvc2VjdXJpdHkuYwo+ICsrKyBiL3NlY3Vy
aXR5L3NlY3VyaXR5LmMKPiBAQCAtMTA2MSw2ICsxMDYxLDExIEBAIGludCBzZWN1cml0eV9rZXJu
ZWxfcG9zdF9yZWFkX2ZpbGUoc3RydWN0IGZpbGUgKmZpbGUsIGNoYXIgKmJ1ZiwgbG9mZl90IHNp
emUsCj4gICB9Cj4gICBFWFBPUlRfU1lNQk9MX0dQTChzZWN1cml0eV9rZXJuZWxfcG9zdF9yZWFk
X2ZpbGUpOwo+ICAgCj4gK2ludCBzZWN1cml0eV9rZXJuZWxfbG9hZF9kYXRhKGVudW0ga2VybmVs
X2xvYWRfZGF0YV9pZCBpZCkKPiArewo+ICsJcmV0dXJuIGNhbGxfaW50X2hvb2soa2VybmVsX2xv
YWRfZGF0YSwgMCwgaWQpOwo+ICt9Cj4gKwo+ICAgaW50IHNlY3VyaXR5X3Rhc2tfZml4X3NldHVp
ZChzdHJ1Y3QgY3JlZCAqbmV3LCBjb25zdCBzdHJ1Y3QgY3JlZCAqb2xkLAo+ICAgCQkJICAgICBp
bnQgZmxhZ3MpCj4gICB7CgoKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f
X19fX19fX18Ka2V4ZWMgbWFpbGluZyBsaXN0CmtleGVjQGxpc3RzLmluZnJhZGVhZC5vcmcKaHR0
cDovL2xpc3RzLmluZnJhZGVhZC5vcmcvbWFpbG1hbi9saXN0aW5mby9rZXhlYwo=