[dm-devel] [PATCH v3 3/3] dm crypt: log aead integrity violations to audit subsystem

2021-08-31 Thread Michael Weiß
Since dm-crypt target can be stacked on dm-integrity targets to provide authenticated encryption, integrity violations are recognized here during aead computation. We use the dm-audit submodule to signal those events to user space, too. The construction and destruction of crypt device mappings are

[dm-devel] [PATCH v3 0/3] dm: audit event logging

2021-08-31 Thread Michael Weiß
dm integrity and also stacked dm crypt devices track integrity violations internally. Thus, integrity violations could be polled from user space, e.g., by 'integritysetup status'. >From an auditing perspective, we only could see that there were a number of integrity violations, but not when and wh

Re: [dm-devel] Kernel 4.14: Using dm-verity with squashfs rootfs - mounting issue

2021-08-31 Thread Pintu Agarwal
Hi, On Tue, 31 Aug 2021 at 00:42, Thomas Petazzoni wrote: > > Hello, > > On Mon, 30 Aug 2021 23:48:40 +0530 > Pintu Agarwal wrote: > > > ohh that means we already have a working reference. > > If possible can you share the details, even 4.19 or higher will be > > also a good reference. > > > > >

Re: [dm-devel] [git pull] device mapper changes for 5.15

2021-08-31 Thread pr-tracker-bot
The pull request you sent on Tue, 31 Aug 2021 12:34:52 -0400: > git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm.git > tags/for-5.15/dm-changes has been merged into torvalds/linux.git: https://git.kernel.org/torvalds/c/efa916af13206eb15916e102c45c99a13ea78f33 Thank you! --

[dm-devel] [git pull] device mapper changes for 5.15

2021-08-31 Thread Mike Snitzer
Hi Linus, The following changes since commit 99d26de2f6d79badc80f55b54bd90d4cb9d1ad90: writeback: make the laptop_mode prototypes available unconditionally (2021-08-10 07:00:50 -0600) are available in the Git repository at: git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-

Re: [dm-devel] Kernel 4.14: Using dm-verity with squashfs rootfs - mounting issue

2021-08-31 Thread Thomas Petazzoni
Hello, On Mon, 30 Aug 2021 23:48:40 +0530 Pintu Agarwal wrote: > ohh that means we already have a working reference. > If possible can you share the details, even 4.19 or higher will be > also a good reference. > > > > Or, another option is to use the new concept from 5.1 kernel that is: > > >

Re: [dm-devel] Kernel 4.14: Using dm-verity with squashfs rootfs - mounting issue

2021-08-31 Thread Pintu Agarwal
On Mon, 30 Aug 2021 at 22:25, Thomas Petazzoni wrote: > > Hello, > > On Mon, 30 Aug 2021 21:55:19 +0530 > Pintu Agarwal wrote: > > > Sorry for coming back to this again.. > > Unfortunately, none of the options is working for us with squashfs > > (bootloader, initramfs). > > initramfs have differe

Re: [dm-devel] [PATCH] multipath-tools: update no_path_retry value for IBM/2145

2021-08-31 Thread Steffen Maier
On 8/26/21 8:47 AM, Martin Wilck wrote: On Thu, 2021-08-26 at 00:24 +0200, Xose Vazquez Perez wrote: Based on current configs: https://www.ibm.com/docs/en/flashsystem-9x00/8.4.x?topic=system-settings-linux-hosts Cc: Martin Wilck Cc: Benjamin Marzinski Cc: Christophe Varoqui Cc: DM-DEVEL ML

Re: [dm-devel] Kernel 4.14: Using dm-verity with squashfs rootfs - mounting issue

2021-08-31 Thread Pintu Agarwal
On Wed, 21 Jul 2021 at 22:59, Pintu Agarwal wrote: > > On Wed, 21 Jul 2021 at 22:40, Mikulas Patocka wrote: > > > > > > > > > Try to set up dm-verity with block size 512 bytes. > > > > > > > > I don't know what block size does squashfs use, but if the filesystem > > > > block size is smaller than

Re: [dm-devel] Kernel 4.14: Using dm-verity with squashfs rootfs - mounting issue

2021-08-31 Thread Thomas Petazzoni
Hello, On Mon, 30 Aug 2021 21:55:19 +0530 Pintu Agarwal wrote: > Sorry for coming back to this again.. > Unfortunately, none of the options is working for us with squashfs > (bootloader, initramfs). > initramfs have different kinds of challenges because of the partition > size issue. > So, our p