From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S933888AbbCPVks (ORCPT ); Mon, 16 Mar 2015 17:40:48 -0400 Received: from mail-bl2on0136.outbound.protection.outlook.com ([65.55.169.136]:40384 "EHLO na01-bl2-obe.outbound.protection.outlook.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S932155AbbCPVkq (ORCPT ); Mon, 16 Mar 2015 17:40:46 -0400 X-Greylist: delayed 882 seconds by postgrey-1.27 at vger.kernel.org; Mon, 16 Mar 2015 17:40:46 EDT From: Matthew Garrett To: "keescook@chromium.org" CC: "hpa@zytor.com" , "linux-kernel@vger.kernel.org" , "james.l.morris@oracle.com" , "serge@hallyn.com" , "linux-security-module@vger.kernel.org" , "gnomes@lxorguk.ukuu.org.uk" Subject: Re: [PATCH 09/12] uswsusp: Disable when trusted_kernel is true Thread-Topic: [PATCH 09/12] uswsusp: Disable when trusted_kernel is true Thread-Index: AQHQXdZLqT/9OQnBeEugTtwWJBvUqZ0fpu+AgAABGAA= Date: Mon, 16 Mar 2015 21:40:42 +0000 Message-ID: <1426542042.22371.31.camel@nebula.com> References: <1426282708-21485-1-git-send-email-matthew.garrett@nebula.com> <1426282708-21485-10-git-send-email-matthew.garrett@nebula.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [2602:243:200f:a923:3e97:eff:fe42:415e] authentication-results: chromium.org; dkim=none (message not signed) header.d=none; x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BN1PR05MB421; x-forefront-antispam-report: BMV:1;SFV:NSPM;SFS:(10019020)(6009001)(377424004)(24454002)(2900100001)(62966003)(2950100001)(2656002)(50986999)(77156002)(102836002)(122556002)(40100003)(92566002)(36756003)(76176999)(2501003)(87936001)(54356999)(46102003)(99286002)(103116003)(86362001)(2351001)(33646002)(110136001)(106116001)(3826002);DIR:OUT;SFP:1102;SCL:1;SRVR:BN1PR05MB421;H:BN1PR05MB423.namprd05.prod.outlook.com;FPR:;SPF:None;MLV:sfv;LANG:en; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(601004)(5002010)(5005006);SRVR:BN1PR05MB421;BCL:0;PCL:0;RULEID:;SRVR:BN1PR05MB421; x-forefront-prvs: 05177D47DC Content-Type: text/plain; charset="utf-8" Content-ID: <2FF53C3466A98C4A8688CD51DCDAF220@namprd05.prod.outlook.com> MIME-Version: 1.0 X-OriginatorOrg: nebula.com X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Mar 2015 21:40:42.7730 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: d9cc6df8-58db-46f5-bf3e-083732d8ac63 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN1PR05MB421 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from base64 to 8bit by nfs id t2GLerHK029193 On Mon, 2015-03-16 at 14:36 -0700, Kees Cook wrote: > Perhaps this should be folded into the hibernation_available check > instead of added as an "||" check here? That would end up covering in-kernel hibernation as well, which was more than I was aiming to do. But it's plausibly a justifiable implementation at the moment. {.n++%ݶw{.n+{G{ayʇڙ,jfhz_(階ݢj"mG?&~iOzv^m ?I