public inbox for linux-kernel@vger.kernel.org
 help / color / mirror / Atom feed
From: "Dr. Greg" <greg@enjellic.com>
To: Casey Schaufler <casey@schaufler-ca.com>
Cc: Paul Moore <paul@paul-moore.com>,
	linux-security-module@vger.kernel.org,
	linux-kernel@vger.kernel.org, jmorris@namei.org
Subject: Re: [PATCH v4 2/14] Add TSEM specific documentation.
Date: Sat, 18 Jan 2025 13:03:46 -0600	[thread overview]
Message-ID: <20250118190346.GA9479@wind.enjellic.com> (raw)
In-Reply-To: <1630b5cd-c1ef-4afd-9767-7ebf3c0cc7ae@schaufler-ca.com>

On Fri, Jan 17, 2025 at 10:10:30AM -0800, Casey Schaufler wrote:

Good morning Casey, I hope your weekend is going well, thanks for
taking the time to forward along your thoughts on our work.

> On 1/16/2025 8:47 PM, Dr. Greg wrote:
> > On Mon, Jan 13, 2025 at 08:29:47PM -0500, Paul Moore wrote:
> >
> ...
> 
> >> Please define the CELL acronym here as I believe it is the first use of
> >> "CELL" in this document.

> > FWIW, CELL isn't an acronym, it is a metaphor.
> >
> > TSEM was conceptually inspired by and derived from the Turing Abstract
> > Machine Model (TAMM), as applied to the problem of modeling the
> > security state of an execution domain.
> >
> > As everyone reading this knows, a TAMM, in practice, consists of a
> > head traversing an infinite paper tape divided into cells that direct
> > the next state of the machine.
> >
> > In TSEM, the model consists of a Context Of Execution (COE) with
> > security definining characteristics, traversing a finite set of
> > measurement points of infinite length, with defining characteristics
> > at each point.
> >
> > We refer to a measurement point and its characteristics as a CELL in
> > deference to the inspiration for all of this.
> >
> > We will add this explanation to the documentation.

> Communication within a community as culturally diverse as the Linux
> kernel developers* requires that you do not assume that "everyone reading
> this" knows much of anything beyond how to type "make". Let's face it,
> there are kernel developers today who would look at the Turing test and
> say "is that even a thing?" There are others who don't have an education
> that includes mid-twentieth century technological history.
> 
> [* Yes, an awful lot of Linux kernel developers are western males. ] 
> 
> ...

Sigh....

It would thus appear that effective dialogue in the Linux kernel
community is now about as perilous as attempting to square dance in a
minefield with snowshoes on.

When we penned the reflections above, we very specifically did not
want to be so pejorative as to suggest that anyone involved in this
endeavor wouldn't have at least a basic understanding of the
computability theory that all of our work is based.  They even have a
movie about it, presumably in multiple languages.

In any event, we apologize for being mistaken.

We will add a Wikipedia link in the documentation pointing to an
article on Turing machines, for the benefit of the unwashed masses now
involved in kernel development.

> > We believe there is a technical solution to this problem as well but
> > our work on that front, at this point, is too technically immature to
> > go into.

> Didn't Pierre de Fermat say something like that about some theorem
> or another?

I believe you are referring to Fermat's Last Theorem, formerly known
as Fermat's Conjecture.

For all the bystanders whose level of understanding is limited to
'make bzImage':

Fermat's Conjecture, now a proven and foundational theorem in
algebraic number theory, states that there exist no three positive
integers: a, b or c; that satisfies the following algebraic
relationship for any value of n greater than two:

a^n + b^n = c^n

Fermat penned the theorem into the margin of his copy of Diophantus's
Arithmetica, and in a note below it, indicated there was insufficient
room in the margin to write the formal proof.

It was called Fermat's Conjecture, since many doubted its validity or
that Fermat ever had any proof for what he was proposing.

As a Quixote team we take some solace to your reference of Fermat's
Theorem with respect to our work.  It took 358 years to formally prove
his theorem, in the face of many nay-sayers.  It turns out he was
absolutely right and his vision is now universally accepted as a
foundational premise of mathematics.

And so it goes with respect to the perils of innovation.

> ... Sorry, all I have time for today.

Yes, and I need to get outside and get my fishhouse off the lake.  It
is going to be -20 tonight and the 4-wheeler isn't going to start in
the morning.

We always appreciate the insight that you bring forward with respect
to our work.

Best wishes for a pleasant weekend.

As always,
Dr. Greg

The Quixote Project - Flailing at the Travails of Cybersecurity
              https://github.com/Quixote-Project

  reply	other threads:[~2025-01-18 19:04 UTC|newest]

Thread overview: 41+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2024-08-26 10:37 [PATCH v4 00/14] Implement Trusted Security Event Modeling Greg Wettstein
2024-08-26 10:37 ` [PATCH v4 01/14] Update MAINTAINERS file Greg Wettstein
2024-08-26 10:37 ` [PATCH v4 02/14] Add TSEM specific documentation Greg Wettstein
2025-01-14  1:29   ` [PATCH v4 2/14] " Paul Moore
2025-01-17  4:47     ` Dr. Greg
2025-01-17 18:10       ` Casey Schaufler
2025-01-18 19:03         ` Dr. Greg [this message]
2025-01-21 18:09           ` Casey Schaufler
2025-01-26 18:40             ` Dr. Greg
2025-01-28 22:23       ` Paul Moore
2025-01-31 17:11         ` Dr. Greg
2025-02-25 12:01         ` Dr. Greg
2025-02-25 15:48           ` Casey Schaufler
2025-02-27 12:12             ` Dr. Greg
2025-02-27 16:47               ` Casey Schaufler
2025-03-03 10:14                 ` Dr. Greg
2025-03-03 16:23                   ` Casey Schaufler
2025-02-05 12:00     ` Dr. Greg
2025-02-05 19:58       ` Casey Schaufler
2025-02-06 12:45         ` Dr. Greg
2025-02-06 15:48       ` Paul Moore
2025-02-07 10:20         ` Dr. Greg
2025-02-07 17:42           ` Casey Schaufler
2025-02-08  0:29           ` Paul Moore
2025-02-17 12:53             ` Dr. Greg
2025-02-17 23:09               ` Paul Moore
2024-08-26 10:37 ` [PATCH v4 03/14] TSEM global declarations Greg Wettstein
2024-08-26 10:37 ` [PATCH v4 04/14] Add primary TSEM implementation file Greg Wettstein
2024-08-26 15:53   ` Casey Schaufler
2024-08-27 10:52     ` Dr. Greg
2024-08-27 17:51       ` Casey Schaufler
2024-08-26 10:37 ` [PATCH v4 05/14] Add root domain trust implementation Greg Wettstein
2024-08-26 10:37 ` [PATCH v4 06/14] Implement TSEM control plane Greg Wettstein
2024-08-26 10:37 ` [PATCH v4 07/14] Add namespace implementation Greg Wettstein
2024-08-26 10:37 ` [PATCH v4 08/14] Add security event description export facility Greg Wettstein
2024-08-26 10:37 ` [PATCH v4 09/14] Add event processing implementation Greg Wettstein
2024-08-26 10:37 ` [PATCH v4 10/14] Implement security event mapping Greg Wettstein
2024-08-26 10:37 ` [PATCH v4 11/14] Implement the internal Trusted Modeling Agent Greg Wettstein
2024-08-26 10:37 ` [PATCH v4 12/14] Implement configuration and methods for default model Greg Wettstein
2024-08-26 10:37 ` [PATCH v4 13/14] Implement infrastructure for loadable security models Greg Wettstein
2024-08-26 10:37 ` [PATCH v4 14/14] Activate the configuration and build of the TSEM LSM Greg Wettstein

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20250118190346.GA9479@wind.enjellic.com \
    --to=greg@enjellic.com \
    --cc=casey@schaufler-ca.com \
    --cc=jmorris@namei.org \
    --cc=linux-kernel@vger.kernel.org \
    --cc=linux-security-module@vger.kernel.org \
    --cc=paul@paul-moore.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox