From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from namei.org ([65.99.196.166]:40372 "EHLO namei.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S2388429AbeGXTxp (ORCPT ); Tue, 24 Jul 2018 15:53:45 -0400 Date: Wed, 25 Jul 2018 04:45:56 +1000 (AEST) From: James Morris To: Mimi Zohar cc: linux-security-module , linux-integrity Subject: Re: [GIT PULL] linux-integrity patches for 4.19 In-Reply-To: <1532430023.4127.10.camel@linux.ibm.com> Message-ID: References: <1532430023.4127.10.camel@linux.ibm.com> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="1665246916-420314363-1532457956=:10717" Sender: linux-integrity-owner@vger.kernel.org List-ID: On Tue, 24 Jul 2018, Mimi Zohar wrote: > Hi James, > > This pull request adds support for EVM signatures based on larger > digests, contains a new audit record AUDIT_INTEGRITY_POLICY_RULE to > differentiate the IMA policy rules from the IMA-audit messages, > addresses two deadlocks due to either loading or searching for crypto > algorithms, and cleans up the audit messages. > > New to 4.19, but not included in this pull request, is support for a > build time IMA policy. Build time IMA policy rules are automatically > enabled on boot and persist after loading a custom policy. > Thanks, merge to next-general and next-testing. -- James Morris