Re: [PATCH v3 01/15] Documentation: add newcx initramfs format description

2018-02-17 Thread Taras Kondratiuk
Quoting h...@zytor.com (2018-02-16 16:00:36) > On February 16, 2018 1:47:35 PM PST, Victor Kamensky > wrote: > > > > > >On Fri, 16 Feb 2018, Rob Landley wrote: > > > >> > >> On 02/16/2018 02:59 PM, H. Peter Anvin wrote: > >>> On 02/16/18 12:33, Taras Kondratiuk wrote: > Many of the Linux sec

Re: [PATCH v3 01/15] Documentation: add newcx initramfs format description

2018-02-17 Thread Rob Landley
On 02/16/2018 06:00 PM, h...@zytor.com wrote: > Introducing new, incompatible data formats is an inherently *very* > costly operation; unfortunately many engineers don't seem to have a good grip > of just *how* expensive it is (see "silly embedded nonsense hacks", "too > little, too soon".) So you

Re: [PATCH v3 01/15] Documentation: add newcx initramfs format description

2018-02-17 Thread Mimi Zohar
On Fri, 2018-02-16 at 12:59 -0800, H. Peter Anvin wrote: > On 02/16/18 12:33, Taras Kondratiuk wrote: > > Many of the Linux security/integrity features are dependent on file > > metadata, stored as extended attributes (xattrs), for making decisions. > > These features need to be initialized during

Re: [PATCH v3 01/15] Documentation: add newcx initramfs format description

2018-02-17 Thread hpa
On February 17, 2018 4:15:12 PM PST, Mimi Zohar wrote: >On Fri, 2018-02-16 at 12:59 -0800, H. Peter Anvin wrote: >> On 02/16/18 12:33, Taras Kondratiuk wrote: >> > Many of the Linux security/integrity features are dependent on file >> > metadata, stored as extended attributes (xattrs), for making

Re: [PATCH v3 01/15] Documentation: add newcx initramfs format description

2018-02-17 Thread hpa
On February 17, 2018 4:15:12 PM PST, Mimi Zohar wrote: >On Fri, 2018-02-16 at 12:59 -0800, H. Peter Anvin wrote: >> On 02/16/18 12:33, Taras Kondratiuk wrote: >> > Many of the Linux security/integrity features are dependent on file >> > metadata, stored as extended attributes (xattrs), for making

Re: [PATCH v3 01/15] Documentation: add newcx initramfs format description

2018-02-17 Thread Mimi Zohar
On Sat, 2018-02-17 at 16:26 -0800, h...@zytor.com wrote: > Do you have a description of the gaps you have identified? Probably the 2016 Linux Security Summit (LSS) integrity status update has the best list. http://events17.linuxfoundation.org/sites/events/files/slides/LSS2016- LinuxIntegritySubs

Re: [PATCH 1/3] taint: Convert to enum and indexed initialization

2018-02-17 Thread kbuild test robot
Hi Kees, I love your patch! Yet something to improve: [auto build test ERROR on linus/master] [also build test ERROR on v4.16-rc1 next-20180216] [if your patch is applied to the wrong git tree, please drop us a note to help improve the system] url: https://github.com/0day-ci/linux/commits/K