From: Vivek Goyal <vgoyal@redhat.com>
To: Mimi Zohar <zohar@linux.vnet.ibm.com>
Cc: Eric Paris <eparis@parisplace.org>,
linux kernel mailing list <linux-kernel@vger.kernel.org>,
LSM List <linux-security-module@vger.kernel.org>
Subject: Re: IMA: How to manage user space signing policy with others
Date: Thu, 7 Mar 2013 10:53:43 -0500 [thread overview]
Message-ID: <20130307155343.GD2790@redhat.com> (raw)
In-Reply-To: <1362670833.4392.438.camel@falcor1>
On Thu, Mar 07, 2013 at 10:40:33AM -0500, Mimi Zohar wrote:
> On Thu, 2013-03-07 at 09:36 -0500, Vivek Goyal wrote:
> > On Wed, Mar 06, 2013 at 08:39:08PM -0500, Mimi Zohar wrote:
> > > On Wed, 2013-03-06 at 18:55 -0500, Vivek Goyal wrote:
> > > > On Wed, Mar 06, 2013 at 10:42:31AM -0500, Mimi Zohar wrote:
> >
> > > Adding an IMA call to directly appraise the integrity of a file, rather
> > > than adding a hook, prevents other integrity users from being able to
> > > define a rule at that point.
> >
> > We already have security hooks in exec() code and mmap(). And current
> > integrity callers are happy with it.
>
> Exposing integrity calls, resolves the problem of code duplication, but
> does not address Rusty's third issue of improving the integrity
> subsystem.
I thought rusty wanted me to reuse existing integrity code so that there
is no code duplication. And improve things as needed int the process
so meet new requirements.
And exposing functions calls will just do that. Improve IMA so that
more people can reuse the same code without breaking existing users.
Other improvements will be to improve "cpio" to support xattr and
figure a way out to chain into secureboot root of trust and load
only trusted keys.
So yes, I am improving IMA subsystem. Only thing I am arguing against
that I don't think trying to enahnce policy based interface is right
thing to do here in the light of new requirements. It just makes IMA too
complicated and it is not worth it.
> You have no idea if the existing integrity users are happy
> with the status quo.
If nobody is speaking then I have to assume something. If they are happy,
great, exposing new functions are not going to break any of their
functionality. If they are not happy then there is more reason to believe
that trying to enahance policy based interface is a bad thing. It is not
working.
> It's there and they're using it. They could want
> additional hooks or better located hooks. Each of your complaints about
> the integrity subsystem could be addressed and would improve the
> subsystem.
If they want better located hooks, they are more than welcome to put
it. Exposing some of the functions does not prevent it. They want
to improve IMA subsystem, sure, why not. Exposing some fucntions
does not prevent it.
Thanks
Vivek
next prev parent reply other threads:[~2013-03-07 15:54 UTC|newest]
Thread overview: 43+ messages / expand[flat|nested] mbox.gz Atom feed top
2013-02-28 15:13 IMA: How to manage user space signing policy with others Vivek Goyal
2013-02-28 18:51 ` Vivek Goyal
2013-02-28 20:30 ` Mimi Zohar
2013-02-28 20:57 ` Vivek Goyal
2013-03-01 1:42 ` Mimi Zohar
2013-02-28 19:23 ` Mimi Zohar
2013-02-28 20:08 ` Vivek Goyal
2013-03-01 1:45 ` Mimi Zohar
2013-02-28 21:35 ` Vivek Goyal
2013-02-28 22:20 ` Eric Paris
2013-03-01 1:49 ` Mimi Zohar
2013-03-01 12:15 ` Mimi Zohar
2013-03-01 15:28 ` Vivek Goyal
2013-03-01 18:40 ` Vivek Goyal
2013-03-01 19:39 ` Mimi Zohar
2013-03-01 21:33 ` Vivek Goyal
2013-03-03 21:42 ` Mimi Zohar
2013-03-04 15:29 ` Vivek Goyal
2013-03-04 17:46 ` Vivek Goyal
2013-03-04 18:59 ` Mimi Zohar
2013-03-04 19:15 ` Vivek Goyal
2013-03-05 1:21 ` Mimi Zohar
2013-03-05 15:18 ` Vivek Goyal
2013-03-05 20:40 ` Mimi Zohar
2013-03-05 21:53 ` Vivek Goyal
2013-03-06 15:42 ` Mimi Zohar
2013-03-06 23:55 ` Vivek Goyal
2013-03-07 1:39 ` Mimi Zohar
2013-03-07 14:36 ` Vivek Goyal
2013-03-07 15:40 ` Mimi Zohar
2013-03-07 15:53 ` Vivek Goyal [this message]
2013-03-07 17:53 ` Kasatkin, Dmitry
2013-03-07 21:56 ` Vivek Goyal
2013-03-08 8:09 ` Kasatkin, Dmitry
2013-03-08 15:40 ` Vivek Goyal
2013-03-06 15:54 ` Vivek Goyal
2013-03-06 22:48 ` Mimi Zohar
2013-03-06 23:38 ` Vivek Goyal
2013-03-07 13:38 ` Mimi Zohar
2013-03-07 14:57 ` Vivek Goyal
2013-03-04 19:19 ` Eric Paris
2013-03-04 21:47 ` Vivek Goyal
2013-03-01 2:17 ` Mimi Zohar
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20130307155343.GD2790@redhat.com \
--to=vgoyal@redhat.com \
--cc=eparis@parisplace.org \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-security-module@vger.kernel.org \
--cc=zohar@linux.vnet.ibm.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox