From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mx0b-001b2d01.pphosted.com ([148.163.158.5]:41202 "EHLO mx0a-001b2d01.pphosted.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S1751467AbeBAPSB (ORCPT ); Thu, 1 Feb 2018 10:18:01 -0500 Received: from pps.filterd (m0098416.ppops.net [127.0.0.1]) by mx0b-001b2d01.pphosted.com (8.16.0.22/8.16.0.22) with SMTP id w11FGXLN007068 for ; Thu, 1 Feb 2018 10:18:00 -0500 Received: from e06smtp10.uk.ibm.com (e06smtp10.uk.ibm.com [195.75.94.106]) by mx0b-001b2d01.pphosted.com with ESMTP id 2fv21x2esc-1 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=NOT) for ; Thu, 01 Feb 2018 10:17:55 -0500 Received: from localhost by e06smtp10.uk.ibm.com with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted for from ; Thu, 1 Feb 2018 15:17:51 -0000 Subject: Re: [Lsf-pc] [LSF/MM TOPIC] fs-verity: file system-level integrity protection From: Mimi Zohar To: "Theodore Ts'o" Cc: James Bottomley , Andreas Dilger , linux-fsdevel , lsf-pc@lists.linux-foundation.org Date: Thu, 01 Feb 2018 10:17:46 -0500 In-Reply-To: <20180131220020.GA3375@thunk.org> References: <20180129003842.GA29839@thunk.org> <1517190821.29187.415.camel@linux.vnet.ibm.com> <20180129023820.GA1565@thunk.org> <1517197150.29187.457.camel@linux.vnet.ibm.com> <20180129045012.GB9516@thunk.org> <1517227741.29187.515.camel@linux.vnet.ibm.com> <20180129230209.GA30762@thunk.org> <1517354702.3469.60.camel@linux.vnet.ibm.com> <20180131160510.GA18615@thunk.org> <1517431239.3469.216.camel@linux.vnet.ibm.com> <20180131220020.GA3375@thunk.org> Content-Type: text/plain; charset="UTF-8" Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Message-Id: <1517498266.3974.33.camel@linux.vnet.ibm.com> Sender: linux-fsdevel-owner@vger.kernel.org List-ID: On Wed, 2018-01-31 at 17:00 -0500, Theodore Ts'o wrote: > dm-verity does not use LSM. Signed kernel-modules does not use LSM. True, the original kernel module syscall does not use the LSM hooks, but the new syscall does. Mimi