From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 38438C433EF for ; Fri, 5 Nov 2021 09:56:36 +0000 (UTC) Received: from lists.ozlabs.org (lists.ozlabs.org [112.213.38.117]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id 90A936126A for ; Fri, 5 Nov 2021 09:56:35 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.4.1 mail.kernel.org 90A936126A Authentication-Results: mail.kernel.org; dmarc=fail (p=none dis=none) header.from=suse.de Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=lists.ozlabs.org Received: from boromir.ozlabs.org (localhost [IPv6:::1]) by lists.ozlabs.org (Postfix) with ESMTP id 4Hlwrf10Crz3c6k for ; Fri, 5 Nov 2021 20:56:34 +1100 (AEDT) Authentication-Results: lists.ozlabs.org; dkim=fail reason="signature verification failed" (1024-bit key; unprotected) header.d=suse.de header.i=@suse.de header.a=rsa-sha256 header.s=susede2_rsa header.b=rNlRdZcK; dkim=fail reason="signature verification failed" header.d=suse.de header.i=@suse.de header.a=ed25519-sha256 header.s=susede2_ed25519 header.b=nzctrc7r; dkim-atps=neutral Authentication-Results: lists.ozlabs.org; spf=pass (sender SPF authorized) smtp.mailfrom=suse.de (client-ip=195.135.220.29; helo=smtp-out2.suse.de; envelope-from=msuchanek@suse.de; receiver=) Authentication-Results: lists.ozlabs.org; dkim=pass (1024-bit key; unprotected) header.d=suse.de header.i=@suse.de header.a=rsa-sha256 header.s=susede2_rsa header.b=rNlRdZcK; dkim=pass header.d=suse.de header.i=@suse.de header.a=ed25519-sha256 header.s=susede2_ed25519 header.b=nzctrc7r; dkim-atps=neutral Received: from smtp-out2.suse.de (smtp-out2.suse.de [195.135.220.29]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by lists.ozlabs.org (Postfix) with ESMTPS id 4Hlwq56zmYz2xvc for ; Fri, 5 Nov 2021 20:55:13 +1100 (AEDT) Received: from relay2.suse.de (relay2.suse.de [149.44.160.134]) by smtp-out2.suse.de (Postfix) with ESMTP id 4DEA91FD33; Fri, 5 Nov 2021 09:55:09 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=suse.de; s=susede2_rsa; t=1636106109; h=from:from:reply-to:date:date:message-id:message-id:to:to:cc:cc: mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=mby2JIZUNM+DNzTfY4azBDzQa/92IvvCw8tLadYHt78=; b=rNlRdZcKQOCSZpYPzPrRzb2E+1bXLWVEnJM4Dzb5PAiL9uNR+XeyDlYZ3UTyI6Fml8Cv8C vx9asIPpjaxVUPubuozUoaYNWXM5AH5VpTx5MjycaA0faTncC5vcdk65IDTZXHAjhSvB1e poh38Gdvgtr80NuSSZMT1EpLyodmnCk= DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=suse.de; s=susede2_ed25519; t=1636106109; h=from:from:reply-to:date:date:message-id:message-id:to:to:cc:cc: mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=mby2JIZUNM+DNzTfY4azBDzQa/92IvvCw8tLadYHt78=; b=nzctrc7rLdjmdCVlJNft5ocJrbG6SAddj/2+I5zFvjB2sJzkxB3jwNmuGN1hzLRVZzMixK /fHuVK51FITdOyAQ== Received: from kitsune.suse.cz (kitsune.suse.cz [10.100.12.127]) by relay2.suse.de (Postfix) with ESMTP id 4FBFF2C14A; Fri, 5 Nov 2021 09:55:07 +0000 (UTC) From: Michal Suchanek To: keyrings@vger.kernel.org Subject: [PATCH 0/2] Additional appended signature cleanup Date: Fri, 5 Nov 2021 10:55:03 +0100 Message-Id: X-Mailer: git-send-email 2.31.1 In-Reply-To: References: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-BeenThere: linuxppc-dev@lists.ozlabs.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Linux on PowerPC Developers Mail List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Mimi Zohar , David Howells , Paul Mackerras , Alexander Gordeev , Rob Herring , Herbert Xu , Lakshmi Ramasubramanian , James Morris , Christian Borntraeger , Michal Suchanek , "Serge E. Hallyn" , Vasily Gorbik , linux-s390@vger.kernel.org, Heiko Carstens , Hari Bathini , Dmitry Kasatkin , Frank van der Linden , linux-security-module@vger.kernel.org, linux-kernel@vger.kernel.org, Luis Chamberlain , linux-crypto@vger.kernel.org, Jessica Yu , linux-integrity@vger.kernel.org, linuxppc-dev@lists.ozlabs.org, "David S. Miller" , Thiago Jung Bauermann Errors-To: linuxppc-dev-bounces+linuxppc-dev=archiver.kernel.org@lists.ozlabs.org Sender: "Linuxppc-dev" There is one more copy of the code checking appended signarutes. Merge the common code to module_signature.c Thanks Michal Michal Suchanek (2): module: Use key_being_used_for for log messages in verify_appended_signature module: Move duplicate mod_check_sig users code to mod_parse_sig arch/powerpc/kexec/elf_64.c | 2 +- arch/s390/kernel/machine_kexec_file.c | 2 +- crypto/asymmetric_keys/asymmetric_type.c | 1 + include/linux/module_signature.h | 1 + include/linux/verification.h | 3 +- kernel/module.c | 3 +- kernel/module_signature.c | 56 +++++++++++++++++++++++- kernel/module_signing.c | 33 ++++---------- security/integrity/ima/ima_modsig.c | 22 ++-------- 9 files changed, 74 insertions(+), 49 deletions(-) -- 2.31.1