linux-security-module.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
* [PATCH] MAINTAINERS: Add Eric Snowberg as a reviewer to IMA
@ 2023-12-12 15:29 Mimi Zohar
  2023-12-12 15:29 ` [PATCH] MAINTAINERS: Add Roberto Sassu as co-maintainer to IMA and EVM Mimi Zohar
  2023-12-12 21:05 ` [PATCH] MAINTAINERS: Add Eric Snowberg as a reviewer to IMA Eric Snowberg
  0 siblings, 2 replies; 4+ messages in thread
From: Mimi Zohar @ 2023-12-12 15:29 UTC (permalink / raw)
  To: linux-integrity
  Cc: Mimi Zohar, Eric Snowberg, Roberto Sassu, linux-security-module,
	linux-kernel

Digital signature based IMA-appraisal relies heavily on kernel keyrings.
Eric Snowberg has been involved in adding the machine keyring to allow
the system owner to add their own keys.  With this addition,
IMA-appraisal usage can be extended to allow loading local and 3rd party
software keys onto the IMA keyring.

Add Eric as a reviewer.

Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
---
 MAINTAINERS | 1 +
 1 file changed, 1 insertion(+)

diff --git a/MAINTAINERS b/MAINTAINERS
index ffaac404d1e0..4dbf1cc238c9 100644
--- a/MAINTAINERS
+++ b/MAINTAINERS
@@ -10557,6 +10557,7 @@ INTEGRITY MEASUREMENT ARCHITECTURE (IMA)
 M:	Mimi Zohar <zohar@linux.ibm.com>
 M:	Roberto Sassu <roberto.sassu@huawei.com>
 M:	Dmitry Kasatkin <dmitry.kasatkin@gmail.com>
+R:	Eric Snowberg <eric.snowberg@oracle.com>
 L:	linux-integrity@vger.kernel.org
 S:	Supported
 T:	git git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity.git
-- 
2.39.3


^ permalink raw reply related	[flat|nested] 4+ messages in thread

* [PATCH] MAINTAINERS: Add Roberto Sassu as co-maintainer to IMA and EVM
  2023-12-12 15:29 [PATCH] MAINTAINERS: Add Eric Snowberg as a reviewer to IMA Mimi Zohar
@ 2023-12-12 15:29 ` Mimi Zohar
  2023-12-13  7:50   ` Roberto Sassu
  2023-12-12 21:05 ` [PATCH] MAINTAINERS: Add Eric Snowberg as a reviewer to IMA Eric Snowberg
  1 sibling, 1 reply; 4+ messages in thread
From: Mimi Zohar @ 2023-12-12 15:29 UTC (permalink / raw)
  To: linux-integrity
  Cc: Mimi Zohar, Roberto Sassu, Eric Snowberg, linux-security-module,
	linux-kernel

Roberto Sassu has been actively involved in IMA and EVM since 2011.
His first major IMA contribution was IMA template support.  He also
contributed extending TPM 2.0 PCRs with properly calculated per TPM
bank digests and included file metadata information in the IMA
measurement list.

Regarding EVM, Roberto contributed to making EVM portable and immutable
signatures more usable.  He also prepared the LSM infrastructure to
support EVM as a fully fledged LSM, by ensuring that the latter receives
from the former all xattrs provided by other registered LSMs at inode
creation time, for HMAC calculation.

Roberto is currently working on making IMA and EVM full fledged LSMs.

Add Roberto as an IMA and EVM maintainer.

Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
---
 MAINTAINERS | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/MAINTAINERS b/MAINTAINERS
index 012df8ccf34e..ffaac404d1e0 100644
--- a/MAINTAINERS
+++ b/MAINTAINERS
@@ -7977,6 +7977,7 @@ F:	include/uapi/linux/ext4.h
 
 Extended Verification Module (EVM)
 M:	Mimi Zohar <zohar@linux.ibm.com>
+M:	Roberto Sassu <roberto.sassu@huawei.com>
 L:	linux-integrity@vger.kernel.org
 S:	Supported
 T:	git git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity.git
@@ -10554,6 +10555,7 @@ F:	drivers/crypto/inside-secure/
 
 INTEGRITY MEASUREMENT ARCHITECTURE (IMA)
 M:	Mimi Zohar <zohar@linux.ibm.com>
+M:	Roberto Sassu <roberto.sassu@huawei.com>
 M:	Dmitry Kasatkin <dmitry.kasatkin@gmail.com>
 L:	linux-integrity@vger.kernel.org
 S:	Supported
-- 
2.39.3


^ permalink raw reply related	[flat|nested] 4+ messages in thread

* Re: [PATCH] MAINTAINERS: Add Eric Snowberg as a reviewer to IMA
  2023-12-12 15:29 [PATCH] MAINTAINERS: Add Eric Snowberg as a reviewer to IMA Mimi Zohar
  2023-12-12 15:29 ` [PATCH] MAINTAINERS: Add Roberto Sassu as co-maintainer to IMA and EVM Mimi Zohar
@ 2023-12-12 21:05 ` Eric Snowberg
  1 sibling, 0 replies; 4+ messages in thread
From: Eric Snowberg @ 2023-12-12 21:05 UTC (permalink / raw)
  To: Mimi Zohar
  Cc: linux-integrity@vger.kernel.org, Roberto Sassu,
	linux-security-module, linux-kernel@vger.kernel.org



> On Dec 12, 2023, at 8:29 AM, Mimi Zohar <zohar@linux.ibm.com> wrote:
> 
> Digital signature based IMA-appraisal relies heavily on kernel keyrings.
> Eric Snowberg has been involved in adding the machine keyring to allow
> the system owner to add their own keys.  With this addition,
> IMA-appraisal usage can be extended to allow loading local and 3rd party
> software keys onto the IMA keyring.
> 
> Add Eric as a reviewer.
> 
> Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>

Acked-by: Eric Snowberg <eric.snowberg@oracle.com <mailto:eric.snowberg@oracle.com>>



^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: [PATCH] MAINTAINERS: Add Roberto Sassu as co-maintainer to IMA and EVM
  2023-12-12 15:29 ` [PATCH] MAINTAINERS: Add Roberto Sassu as co-maintainer to IMA and EVM Mimi Zohar
@ 2023-12-13  7:50   ` Roberto Sassu
  0 siblings, 0 replies; 4+ messages in thread
From: Roberto Sassu @ 2023-12-13  7:50 UTC (permalink / raw)
  To: Mimi Zohar, linux-integrity
  Cc: Eric Snowberg, linux-security-module, linux-kernel

On 12.12.23 16:29, Mimi Zohar wrote:
> Roberto Sassu has been actively involved in IMA and EVM since 2011.
> His first major IMA contribution was IMA template support.  He also
> contributed extending TPM 2.0 PCRs with properly calculated per TPM
> bank digests and included file metadata information in the IMA
> measurement list.
> 
> Regarding EVM, Roberto contributed to making EVM portable and immutable
> signatures more usable.  He also prepared the LSM infrastructure to
> support EVM as a fully fledged LSM, by ensuring that the latter receives
> from the former all xattrs provided by other registered LSMs at inode
> creation time, for HMAC calculation.
> 
> Roberto is currently working on making IMA and EVM full fledged LSMs.
> 
> Add Roberto as an IMA and EVM maintainer.
> 
> Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>

Acked-by: Roberto Sassu <roberto.sassu@huawei.com>

Thanks

Roberto

> ---
>   MAINTAINERS | 2 ++
>   1 file changed, 2 insertions(+)
> 
> diff --git a/MAINTAINERS b/MAINTAINERS
> index 012df8ccf34e..ffaac404d1e0 100644
> --- a/MAINTAINERS
> +++ b/MAINTAINERS
> @@ -7977,6 +7977,7 @@ F:	include/uapi/linux/ext4.h
>   
>   Extended Verification Module (EVM)
>   M:	Mimi Zohar <zohar@linux.ibm.com>
> +M:	Roberto Sassu <roberto.sassu@huawei.com>
>   L:	linux-integrity@vger.kernel.org
>   S:	Supported
>   T:	git git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity.git
> @@ -10554,6 +10555,7 @@ F:	drivers/crypto/inside-secure/
>   
>   INTEGRITY MEASUREMENT ARCHITECTURE (IMA)
>   M:	Mimi Zohar <zohar@linux.ibm.com>
> +M:	Roberto Sassu <roberto.sassu@huawei.com>
>   M:	Dmitry Kasatkin <dmitry.kasatkin@gmail.com>
>   L:	linux-integrity@vger.kernel.org
>   S:	Supported


^ permalink raw reply	[flat|nested] 4+ messages in thread

end of thread, other threads:[~2023-12-13  7:51 UTC | newest]

Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2023-12-12 15:29 [PATCH] MAINTAINERS: Add Eric Snowberg as a reviewer to IMA Mimi Zohar
2023-12-12 15:29 ` [PATCH] MAINTAINERS: Add Roberto Sassu as co-maintainer to IMA and EVM Mimi Zohar
2023-12-13  7:50   ` Roberto Sassu
2023-12-12 21:05 ` [PATCH] MAINTAINERS: Add Eric Snowberg as a reviewer to IMA Eric Snowberg

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).