Re: [PATCH v10 2/2] arm64: boot: Support Flat Image Tree

2024-03-07 Thread Simon Glass
Hi Masahiro, On Thu, 22 Feb 2024 at 01:38, Masahiro Yamada wrote: > > On Sat, Feb 3, 2024 at 2:30 AM Simon Glass wrote: > > > > Add a script which produces a Flat Image Tree (FIT), a single file > > containing the built kernel and associated devicetree files. > > Compression defaults to gzip whi

Re: [PATCH v10 2/2] arm64: boot: Support Flat Image Tree

2024-03-07 Thread Simon Glass
Hi Masahiro, On Sun, 25 Feb 2024 at 21:41, Masahiro Yamada wrote: > > On Wed, Feb 21, 2024 at 9:37 PM Masahiro Yamada wrote: > > > > On Sat, Feb 3, 2024 at 2:30 AM Simon Glass wrote: > > > > > > Add a script which produces a Flat Image Tree (FIT), a single file > > > containing the built kernel

Re: [RFC][PATCH 4/8] ima: Add digest_cache_measure and digest_cache_appraise boot-time policies

2024-03-07 Thread Mimi Zohar
On Wed, 2024-02-14 at 15:35 +0100, Roberto Sassu wrote: > From: Roberto Sassu > > Specify the 'digest_cache_measure' boot-time policy with 'ima_policy=' in > the kernel command line The 'built-in' policies may be specified on the boot command line. Please update Subject line, to user the term "

Re: [RFC][PATCH 2/8] ima: Nest iint mutex for DIGEST_LIST_CHECK hook

2024-03-07 Thread Mimi Zohar
On Wed, 2024-02-14 at 15:35 +0100, Roberto Sassu wrote: > From: Roberto Sassu > > Invoking digest_cache_get() inside the iint->mutex critical region can > cause deadlocks due to the fact that IMA can be recursively invoked for > reading the digest list. The deadlock would occur if the digest_cach

Re: [RFC][PATCH 3/8] ima: Add digest_cache policy keyword

2024-03-07 Thread Mimi Zohar
On Wed, 2024-02-14 at 15:35 +0100, Roberto Sassu wrote: > From: Roberto Sassu > > Add the 'digest_cache=' policy keyword, to enable the usage of digest > caches for specific IMA actions and purposes. > > At the moment, it accepts only 'content' as value, as digest caches can be > only used only