From mboxrd@z Thu Jan  1 00:00:00 1970
From: joeyli <jlee@suse.com>
Subject: Re: [PATCH 3/5] Add the ability to lock down access to the running
 kernel image
Date: Sat, 27 May 2017 01:08:18 +0800
Message-ID: <20170526170818.GF15587@linux-l9pv.suse>
References: <fa6647c3-baff-d9e9-8ffe-89042b2a553d@schaufler-ca.com>
 <80bdc6c9-004b-800f-ffd0-4b5ebf8cdeba@schaufler-ca.com>
 <149563711758.9419.11406612723056598045.stgit@warthog.procyon.org.uk>
 <149563714531.9419.16811189348445249219.stgit@warthog.procyon.org.uk>
 <19783.1495695202@warthog.procyon.org.uk>
 <22659.1495802592@warthog.procyon.org.uk>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Return-path: <linux-kernel-owner@vger.kernel.org>
Content-Disposition: inline
In-Reply-To: <22659.1495802592@warthog.procyon.org.uk>
Sender: linux-kernel-owner@vger.kernel.org
To: David Howells <dhowells@redhat.com>
Cc: Casey Schaufler <casey@schaufler-ca.com>, ard.biesheuvel@linaro.org, matthew.garrett@nebula.com, linux-security-module@vger.kernel.org, linux-efi@vger.kernel.org, linux-kernel@vger.kernel.org
List-Id: linux-efi@vger.kernel.org

On Fri, May 26, 2017 at 01:43:12PM +0100, David Howells wrote:
> Casey Schaufler <casey@schaufler-ca.com> wrote:
> 
> > You called out five distinct features in 0/5, so how about
> > a bit for each of those?
> 
> Actually, there are more than five in that list - there are three in the first
> item - and I'm not sure the remaining categories are quite as well defined as
> I made it seem.
>

Do we have a public place (e.g. wiki page) to put the list of lock-down
functions?

Thanks a lot!
Joey Lee