Re: [PATCH v2] tpm: Opt-in in disable PCR integrity protection

2024-11-11 Thread James Bottomley
On Mon, 2024-11-11 at 14:53 -0500, Mimi Zohar wrote: > On Thu, 2024-11-07 at 08:52 -0500, James Bottomley wrote: > > On Thu, 2024-11-07 at 15:49 +0200, Jarkko Sakkinen wrote: > > > On Thu Nov 7, 2024 at 3:20 PM EET, James Bottomley wrote: > > > > On Thu, 2024-11-07 a

Re: [PATCH v2] tpm: Opt-in in disable PCR integrity protection

2024-11-07 Thread James Bottomley
On Thu, 2024-11-07 at 11:51 +0200, Jarkko Sakkinen wrote: [...] > +void tpm_buf_append_auth(struct tpm_chip *chip, struct tpm_buf *buf, > +    u8 attributes, u8 *passphrase, int > passphrase_len) > +{ > +   /* offset tells us where the sessions area begins */ > +   int o

Re: [PATCH v2] tpm: Opt-in in disable PCR integrity protection

2024-11-07 Thread James Bottomley
On Thu, 2024-11-07 at 15:49 +0200, Jarkko Sakkinen wrote: > On Thu Nov 7, 2024 at 3:20 PM EET, James Bottomley wrote: > > On Thu, 2024-11-07 at 11:51 +0200, Jarkko Sakkinen wrote: > > [...] > > > +void tpm_buf_append_auth(struct tpm_chip *chip, s

Re: [PATCH v2 2/3] ima: don't ignore INTEGRITY_UNKNOWN EVM status

2019-06-04 Thread James Bottomley
On Mon, 2019-06-03 at 16:44 +0200, Roberto Sassu wrote: > On 6/3/2019 4:31 PM, James Bottomley wrote: > > On Mon, 2019-06-03 at 16:29 +0200, Roberto Sassu wrote: [...] > > > How would you prevent root in the container from updating > > > security.ima? > >

Re: [PATCH v2 2/3] ima: don't ignore INTEGRITY_UNKNOWN EVM status

2019-06-03 Thread James Bottomley
On Mon, 2019-06-03 at 16:29 +0200, Roberto Sassu wrote: > On 6/3/2019 3:43 PM, James Bottomley wrote: > > On Mon, 2019-06-03 at 11:25 +0200, Roberto Sassu wrote: > > > On 5/30/2019 2:00 PM, Mimi Zohar wrote: > > > > On Wed, 2019-05-29 at 15:30 +0200, Roberto Sa

Re: [PATCH v2 2/3] ima: don't ignore INTEGRITY_UNKNOWN EVM status

2019-06-03 Thread James Bottomley
On Mon, 2019-06-03 at 11:25 +0200, Roberto Sassu wrote: > On 5/30/2019 2:00 PM, Mimi Zohar wrote: > > On Wed, 2019-05-29 at 15:30 +0200, Roberto Sassu wrote: > > > Currently, ima_appraise_measurement() ignores the EVM status when > > > evm_verifyxattr() returns INTEGRITY_UNKNOWN. If a file has a >

Re: [PATCH RFC 00/15] Zero ****s, hugload of hugs <3

2018-11-30 Thread James Bottomley
On Fri, 2018-11-30 at 14:26 -0800, Jarkko Sakkinen wrote: > On Fri, Nov 30, 2018 at 03:14:59PM -0700, Jonathan Corbet wrote: [...] > > Have you read Documentation/process/code-of-conduct- > > interpretation.rst? > > As has been pointed out, it contains a clear answer to how things > > should be in

Re: [PATCH RFC 00/15] Zero ****s, hugload of hugs <3

2018-11-30 Thread James Bottomley
On Fri, 2018-11-30 at 14:12 -0800, Jarkko Sakkinen wrote: [...] > I pasted this already to another response and this was probably the > part that ignited me to send the patch set (was a few days ago, so > had to revisit to find the exact paragraph): I replied in to the other thread. > "Maintainer

Re: [PATCH RFC 00/15] Zero ****s, hugload of hugs <3

2018-11-30 Thread James Bottomley
On Fri, 2018-11-30 at 13:54 -0800, Jarkko Sakkinen wrote: > On Fri, Nov 30, 2018 at 01:48:08PM -0800, David Miller wrote: > > From: Jarkko Sakkinen > > Date: Fri, 30 Nov 2018 13:44:05 -0800 > > > > > On Fri, Nov 30, 2018 at 01:01:02PM -0800, James Bottomley wrote:

Re: [PATCH RFC 00/15] Zero ****s, hugload of hugs <3

2018-11-30 Thread James Bottomley
On Fri, 2018-11-30 at 13:44 -0800, Jarkko Sakkinen wrote: > On Fri, Nov 30, 2018 at 01:01:02PM -0800, James Bottomley wrote: > > No because use of what some people consider to be bad language > > isn't necessarily abusive, offensive or degrading. Our most > > heavily

Re: [PATCH RFC 00/15] Zero ****s, hugload of hugs <3

2018-11-30 Thread James Bottomley
On Fri, 2018-11-30 at 12:55 -0800, Jarkko Sakkinen wrote: > On Fri, Nov 30, 2018 at 11:56:52AM -0800, Davidlohr Bueso wrote: > > On Fri, 30 Nov 2018, Kees Cook wrote: > > > > > On Fri, Nov 30, 2018 at 11:27 AM Jarkko Sakkinen > > > wrote: > > > > > > > > In order to comply with the CoC, replace

Re: [PATCH resend 0/6] Fix cdrom autoclose

2018-01-26 Thread James Bottomley
On Fri, 2018-01-26 at 17:58 +0100, Michal Suchanek wrote: > First time I did not get any feedback for the patches. This is likely because no-one who might inspect the code saw the patches ... what list are they going to?  I'm on the block, scsi and ide mailing lists and I only saw a doc patch the

Re: [PATCH v6 00/11] Intel SGX Driver

2018-01-04 Thread James Bottomley
On Thu, 2018-01-04 at 15:17 +0100, Cedric Blancher wrote: > So how does this protect against the MELTDOWN attack (CVE-2017-5754) > and the MELTATOMBOMBA4 worm which uses this exploit? Actually, a data exfiltration attack against SGX, using page tables has already been documented: https://www.usen

Re: [PATCH v2 3/4] fs/dcache: Enable automatic pruning of negative dentries

2017-07-21 Thread James Bottomley
On Fri, 2017-07-21 at 16:17 -0400, Waiman Long wrote: > On 07/21/2017 03:30 PM, James Bottomley wrote: > > > > On Fri, 2017-07-21 at 09:43 -0400, Waiman Long wrote: > > > > > > Having a limit for the number of negative dentries does have an > > > un

Re: [PATCH v2 3/4] fs/dcache: Enable automatic pruning of negative dentries

2017-07-21 Thread James Bottomley
On Fri, 2017-07-21 at 09:43 -0400, Waiman Long wrote: > Having a limit for the number of negative dentries does have an > undesirable side effect that no new negative dentries will be allowed > when the limit is reached. This will have performance implication > for some types of workloads. This re

Re: [Ksummit-discuss] Including images on Sphinx documents

2016-11-21 Thread James Bottomley
On Mon, 2016-11-21 at 12:06 -0200, Mauro Carvalho Chehab wrote: > Em Mon, 21 Nov 2016 11:39:41 +0100 > Johannes Berg escreveu: > > On Sat, 2016-11-19 at 10:15 -0700, Jonathan Corbet wrote: > > > > > Rather than beating our heads against the wall trying to convert > > > between various image forma

Re: [Ksummit-discuss] Including images on Sphinx documents

2016-11-17 Thread James Bottomley
On Thu, 2016-11-17 at 13:16 -0200, Mauro Carvalho Chehab wrote: > Hi Ted, > > Em Thu, 17 Nov 2016 09:52:44 -0500 > Theodore Ts'o escreveu: > > > On Thu, Nov 17, 2016 at 12:07:15PM +0100, Arnd Bergmann wrote: > > > [adding Linus for clarification] > > > > > > I understood the concern as being ab

Re: [PATCH] scsi: replace broken specification URL

2016-07-02 Thread James Bottomley
On Sat, 2016-07-02 at 08:56 +0200, Michael Opdenacker wrote: > The t10.org website containing SCSI-2 draft specifications now > requires to be from a member company to access the documents. > > This replaces the now broken link with another public resource > where the specifications can be found.

Re: [PATCH v3 2/2] Documentation/scsi: update scsi_eh.txt about ->host_failed

2016-06-02 Thread James Bottomley
On Thu, 2016-06-02 at 16:42 +0800, Wei Fang wrote: > Update the new rules of ->host_failed. > > Signed-off-by: Wei Fang Changes look fine, but I was wondering if we could also add a note about the new concurrency rules: > --- > Documentation/scsi/scsi_eh.txt |2 +- > 1 files changed, 1 ins

Re: [PATCH v3 1/2] scsi: fix race between simultaneous decrements of ->host_failed

2016-06-02 Thread James Bottomley
4d6c5657 ("[SCSI] libsas: async ata-eh"). > > Signed-off-by: Wei Fang > --- > Changes v1->v2: > - update Documentation/scsi/scsi_eh.txt about ->host_failed > Changes v2->v3: > - don't use atomic type, just zero ->host_failed after the strategy > handl

Re: [PATCH v2 1/2] scsi: fix race between simultaneous decrements of ->host_failed

2016-06-01 Thread James Bottomley
On Wed, 2016-06-01 at 08:29 -0700, Bart Van Assche wrote: > On 06/01/2016 07:36 AM, Kevin Groeneveld wrote: > > > Subject: [PATCH v2 1/2] scsi: fix race between simultaneous > > > decrements of ->host_failed > > > > I wonder if this could be related to > > http://www.spinics.net/lists/linux-scsi/

Re: [PATCH v2 1/2] scsi: fix race between simultaneous decrements of ->host_failed

2016-06-01 Thread James Bottomley
On Tue, 2016-05-31 at 16:38 +0800, Wei Fang wrote: > sas_ata_strategy_handler() adds the works of the ata error handler > to system_unbound_wq. This workqueue asynchronously runs work items, > so the ata error handler will be performed concurrently on different > CPUs. In this case, ->host_failed w