Re: [RFC PATCH 29/29] lsm: add support for counting lsm_prop support among LSMs

On 5/14/2025 1:57 PM, Paul Moore wrote: > On Wed, May 14, 2025 at 3:30 PM Casey Schaufler > wrote: >> On 5/13/2025 1:23 PM, Paul Moore wrote: >>> On Tue, May 13, 2025 at 12:39 PM Casey Schaufler >>> wrote: On 4/9/2025 11:50 AM, Paul Moore wrote: > Add two new variables, lsm_count_prop_

Re: [PATCH v5 4/4] tpm/tpm_svsm: support TPM_CHIP_FLAG_SYNC

On Wed, May 14, 2025 at 03:46:30PM +0200, Stefano Garzarella wrote: > From: Stefano Garzarella > > This driver does not support interrupts, and receiving the response is > synchronous with sending the command. > > Enable synchronous send() with TPM_CHIP_FLAG_SYNC, which implies that > ->send() a

Re: [GIT PULL] TPM DEVICE DRIVER: tpmdd-next-6.15-rc7

The pull request you sent on Thu, 15 May 2025 05:00:04 +0300: > git://git.kernel.org/pub/scm/linux/kernel/git/jarkko/linux-tpmdd.git > tags/tpmdd-next-6.15-rc7 has been merged into torvalds/linux.git: https://git.kernel.org/torvalds/c/546bce579204685a0b204beebab98c3aa496e651 Thank you! -- Dee

Re: [RFC PATCH 29/29] lsm: add support for counting lsm_prop support among LSMs

On Wed, May 14, 2025 at 5:16 PM Casey Schaufler wrote: > On 5/14/2025 1:57 PM, Paul Moore wrote: > > On Wed, May 14, 2025 at 3:30 PM Casey Schaufler > > wrote: > >> On 5/13/2025 1:23 PM, Paul Moore wrote: > >>> On Tue, May 13, 2025 at 12:39 PM Casey Schaufler > >>> wrote: > On 4/9/2025 11

[syzbot] [lsm?] [integrity?] KMSAN: uninit-value in ima_add_template_entry (3)

Hello, syzbot found the following issue on: HEAD commit:02ddfb981de8 Merge tag 'scsi-fixes' of git://git.kernel.or.. git tree: upstream console output: https://syzkaller.appspot.com/x/log.txt?x=1116967058 kernel config: https://syzkaller.appspot.com/x/.config?x=9dc42c34a3f5c357 das

Re: [RFC PATCH 29/29] lsm: add support for counting lsm_prop support among LSMs

On Wed, May 14, 2025 at 3:30 PM Casey Schaufler wrote: > On 5/13/2025 1:23 PM, Paul Moore wrote: > > On Tue, May 13, 2025 at 12:39 PM Casey Schaufler > > wrote: > >> On 4/9/2025 11:50 AM, Paul Moore wrote: > >>> Add two new variables, lsm_count_prop_subj and lsm_count_prop_obj, to > >>> count th

Re: [RFC PATCH 29/29] lsm: add support for counting lsm_prop support among LSMs

On 5/13/2025 1:23 PM, Paul Moore wrote: > On Tue, May 13, 2025 at 12:39 PM Casey Schaufler > wrote: >> On 4/9/2025 11:50 AM, Paul Moore wrote: >>> Add two new variables, lsm_count_prop_subj and lsm_count_prop_obj, to >>> count the number of lsm_prop entries for subjects and objects across all >

Re: [RFC PATCH 18/29] loadpin: move initcalls to the LSM framework

On 4/9/25 11:50, Paul Moore wrote: Signed-off-by: Paul Moore Reviewed-by: John Johansen --- security/loadpin/loadpin.c | 15 --- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/security/loadpin/loadpin.c b/security/loadpin/loadpin.c index b9ddf05c5c16..273ffbd6d

Re: [RFC PATCH 17/29] lsm: introduce an initcall mechanism into the LSM framework

On 4/9/25 11:50, Paul Moore wrote: Currently the individual LSMs register their own initcalls, and while this should be harmless, it can be wasteful in the case where a LSM is disabled at boot as the initcall will still be executed. This patch introduces support for managing the initcalls in the

Re: [RFC PATCH 16/29] lsm: output available LSMs when debugging

On 4/9/25 11:50, Paul Moore wrote: This will display all of the LSMs built into the kernel, regardless of if they are enabled or not. Signed-off-by: Paul Moore Reviewed-by: John Johansen --- security/lsm_init.c | 19 ++- 1 file changed, 18 insertions(+), 1 deletion(-) d

Re: [RFC PATCH 21/29] tomoyo: move initcalls to the LSM framework

On 4/9/25 11:50, Paul Moore wrote: Signed-off-by: Paul Moore Reviewed-by: John Johansen --- security/tomoyo/common.h| 2 ++ security/tomoyo/securityfs_if.c | 4 +--- security/tomoyo/tomoyo.c| 1 + 3 files changed, 4 insertions(+), 3 deletions(-) diff --git a/security/to

Re: [PATCH v3] tpm: tis: Double the timeout B to 4s

Hello, On Fri, Apr 04, 2025 at 11:53:00AM +0300, Jarkko Sakkinen wrote: > On Fri, Apr 04, 2025 at 10:23:14AM +0200, Michal Suchanek wrote: > > With some Infineon chips the timeouts in tpm_tis_send_data (both B and > > C) can reach up to about 2250 ms. > > > > Timeout C is retried since > > commit

Re: [RFC PATCH 22/29] safesetid: move initcalls to the LSM framework

On 4/9/25 11:50, Paul Moore wrote: Signed-off-by: Paul Moore Reviewed-by: John Johansen --- security/safesetid/lsm.c| 1 + security/safesetid/lsm.h| 2 ++ security/safesetid/securityfs.c | 3 +-- 3 files changed, 4 insertions(+), 2 deletions(-) diff --git a/security/sa

Re: [RFC PATCH 19/29] ipe: move initcalls to the LSM framework

On 4/9/25 11:50, Paul Moore wrote: Signed-off-by: Paul Moore Reviewed-by: John Johansen --- security/ipe/fs.c | 4 +--- security/ipe/ipe.c | 1 + security/ipe/ipe.h | 2 ++ 3 files changed, 4 insertions(+), 3 deletions(-) diff --git a/security/ipe/fs.c b/security/ipe/fs.c index 5b6d

Re: [RFC PATCH 25/29] ima,evm: move initcalls to the LSM framework

On 4/9/25 11:50, Paul Moore wrote: This patch converts IMA and EVM to use the LSM frameworks's initcall mechanism. There were two challenges to doing this conversion: the first simply being the number of initcalls across IMA and EVM, and the second was the number of resources shared between the

Re: [RFC PATCH 23/29] apparmor: move initcalls to the LSM framework

On 4/9/25 11:50, Paul Moore wrote: Signed-off-by: Paul Moore Acked-by: John Johansen --- security/apparmor/apparmorfs.c | 4 +--- security/apparmor/crypto.c | 4 +--- security/apparmor/include/apparmorfs.h | 2 ++ security/apparmor/include/crypto.h | 1 + secur

Re: [RFC PATCH 28/29] lsm: add a LSM_STARTED_ALL notification event

On 4/9/25 11:50, Paul Moore wrote: Add a new LSM notifier event, LSM_STARTED_ALL, which is fired once at boot when all of the LSMs have been started. Signed-off-by: Paul Moore Reviewed-by: John Johansen --- include/linux/security.h | 1 + security/lsm_init.c | 1 + 2 files changed,

Re: [RFC PATCH 24/29] lockdown: move initcalls to the LSM framework

On 4/9/25 11:50, Paul Moore wrote: Signed-off-by: Paul Moore Reviewed-by: John Johansen --- security/lockdown/lockdown.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/security/lockdown/lockdown.c b/security/lockdown/lockdown.c index 4813f168ff93..8d46886d2cca 1006

Re: [RFC PATCH 27/29] lsm: consolidate all of the LSM framework initcalls

On 4/9/25 11:50, Paul Moore wrote: The LSM framework itself registers a small number of initcalls, this patch converts these initcalls into the new initcall mechanism. Signed-off-by: Paul Moore Reviewed-by: John Johansen --- security/inode.c| 3 +-- security/lsm.h | 4

[PATCH v5 1/4] tpm: add bufsiz parameter in the .send callback

From: Stefano Garzarella Add a new `bufsiz` parameter to the `.send` callback in `tpm_class_ops`. This parameter will allow drivers to differentiate between the actual command length to send and the total buffer size. Currently `bufsiz` is not used, but it will be used to implement devices with s

[PATCH v5 0/4] tpm: add support for sync send() and use it in ftpm and svsm drivers

SNP" [2], which is currently merged in the tip tree and available in linux-next. Thanks, Stefano Changelog - v4 -> v5 - changed order and parameter names to match tpm_try_transmit() [Jarkko] - rebased on next-20250514 - v3 -> v4: https://lore.kernel.org/linux-integrity/2025050908571

[PATCH v5 3/4] tpm/tpm_ftpm_tee: support TPM_CHIP_FLAG_SYNC

From: Stefano Garzarella This driver does not support interrupts, and receiving the response is synchronous with sending the command. Enable synchronous send() with TPM_CHIP_FLAG_SYNC, which implies that ->send() already fills the provided buffer with a response, and ->recv() is not implemented.

[PATCH v5 4/4] tpm/tpm_svsm: support TPM_CHIP_FLAG_SYNC

From: Stefano Garzarella This driver does not support interrupts, and receiving the response is synchronous with sending the command. Enable synchronous send() with TPM_CHIP_FLAG_SYNC, which implies that ->send() already fills the provided buffer with a response, and ->recv() is not implemented.

[PATCH v5 2/4] tpm: support devices with synchronous send()

From: Stefano Garzarella Some devices do not support interrupts and provide a single synchronous operation to send the command and receive the response on the same buffer. Currently, these types of drivers must use an internal buffer where they temporarily store the response between .send() and

Re: [RFC PATCH 14/29] lsm: add missing function header comment blocks in lsm_init.c

On 4/9/25 11:49, Paul Moore wrote: Signed-off-by: Paul Moore Reviewed-by: John Johansen --- security/lsm_init.c | 7 +++ 1 file changed, 7 insertions(+) diff --git a/security/lsm_init.c b/security/lsm_init.c index 55b3fa82db76..04b1f5e760b1 100644 --- a/security/lsm_init.c +++ b/sec

[GIT PULL] TPM DEVICE DRIVER: tpmdd-next-6.15-rc7

The following changes since commit 74a6325597464e940a33e56e98f6899ef77728d8: Merge tag 'for-6.15-rc6-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux (2025-05-14 18:39:12 -0700) are available in the Git repository at: git://git.kernel.org/pub/scm/linux/kernel/git/jarkko/li

Re: [PATCH v3] tpm: tis: Double the timeout B to 4s

On Wed, May 14, 2025 at 02:10:45PM +0200, Michal Suchánek wrote: > Hello, > > On Fri, Apr 04, 2025 at 11:53:00AM +0300, Jarkko Sakkinen wrote: > > On Fri, Apr 04, 2025 at 10:23:14AM +0200, Michal Suchanek wrote: > > > With some Infineon chips the timeouts in tpm_tis_send_data (both B and > > > C)