Messages in this thread | | | Subject | Re: [GIT] Security subsystem updates for 3.7 | From | Mimi Zohar <> | Date | Wed, 03 Oct 2012 10:02:54 -0400 |
| |
On Wed, 2012-10-03 at 02:44 -0700, Eric W. Biederman wrote: > Linus Torvalds <torvalds@linux-foundation.org> writes: > > > On Tue, Oct 2, 2012 at 4:35 AM, James Morris <jmorris@namei.org> wrote: > >> Highlights: > >> > >> - Integrity: add local fs integrity verification to detect offline attacks > >> - Integrity: add digital signature verification > > > > Ok, the integrity changes in particular clashed with the new user > > namespace support by Eric Biederman. > > > > The clashes weren't all that big, but there have been semantic changes > > in this area, and I'd like Eric to please check that I resolved it > > correctly, and the integrity people to double-check my changes to the > > "fowner" field. > > > > Mimi, Dmitry, Eric? Please check my current git tree, in particular > > the security/integrity/ima/ima_policy.c file, but I think Eric should > > look at the kernel/auditsc.c merge too, in case I missed something. > > Those two resolutions look good to me. Those were the resolutions > I came up with in dealing with linux-next, so they have a modest amount > of testing.
Thanks, the ima_policy.c changes look good to me too.
Mimi
> Elsewhere I have found issues in yama_lsm and drivers/staging/dgrp, > patches after I have slept. > > Eric >
| |