From mboxrd@z Thu Jan  1 00:00:00 1970
Return-path: <kexec-bounces+dwmw2=infradead.org@lists.infradead.org>
Received: from out01.mta.xmission.com ([166.70.13.231])
 by bombadil.infradead.org with esmtps (Exim 4.90_1 #2 (Red Hat Linux))
 id 1fELwa-0001Mh-93
 for kexec@lists.infradead.org; Thu, 03 May 2018 21:39:18 +0000
From: ebiederm@xmission.com (Eric W. Biederman)
References: <1523572911-16363-1-git-send-email-zohar@linux.vnet.ibm.com>
 <87r2mso5up.fsf@xmission.com>
 <1525383075.3539.67.camel@linux.vnet.ibm.com>
Date: Thu, 03 May 2018 16:38:57 -0500
In-Reply-To: <1525383075.3539.67.camel@linux.vnet.ibm.com> (Mimi Zohar's
 message of "Thu, 03 May 2018 17:31:15 -0400")
Message-ID: <87d0yco1vy.fsf@xmission.com>
MIME-Version: 1.0
Subject: Re: [PATCH 0/3] kexec: limit kexec_load syscall
List-Id: <kexec.lists.infradead.org>
List-Unsubscribe: <http://lists.infradead.org/mailman/options/kexec>,
 <mailto:kexec-request@lists.infradead.org?subject=unsubscribe>
List-Archive: <http://lists.infradead.org/pipermail/kexec/>
List-Post: <mailto:kexec@lists.infradead.org>
List-Help: <mailto:kexec-request@lists.infradead.org?subject=help>
List-Subscribe: <http://lists.infradead.org/mailman/listinfo/kexec>,
 <mailto:kexec-request@lists.infradead.org?subject=subscribe>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
Sender: "kexec" <kexec-bounces@lists.infradead.org>
Errors-To: kexec-bounces+dwmw2=infradead.org@lists.infradead.org
To: Mimi Zohar <zohar@linux.vnet.ibm.com>
Cc: Kees Cook <keescook@chromium.org>, kernel-hardening@lists.openwall.com, kexec@lists.infradead.org, linux-kernel@vger.kernel.org, Matthew Garrett <mjg59@google.com>, David Howells <dhowells@redhat.com>, linux-security-module@vger.kernel.org, linux-integrity@vger.kernel.org
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