RE: [RFC v2 1/2] WhiteEgret: Add WhiteEgret core functions.

2018-03-07 Thread masanobu2.koike
On Saturday, March 03, 2018 5:22 PM, Tetsuo Handa wrote: > Masanobu Koike wrote: > > On Friday, March 02, 2018 12:43 AM, Casey Schaufler wrote: > > > On 2/28/2018 11:38 PM, Masanobu Koike wrote: > > > > @@ -264,6 +266,9 @@ choice > > > > config DEFAULT_SECURITY_APPARMOR > > > >

RE: [RFC v2 1/2] WhiteEgret: Add WhiteEgret core functions.

2018-03-01 Thread masanobu2.koike
On Friday, March 02, 2018 12:43 AM, Casey Schaufler wrote: > On 2/28/2018 11:38 PM, Masanobu Koike wrote: > > This RFC provides implementation of WhiteEgret. > > > > Signed-off-by: Masanobu Koike > > --- > > security/Kconfig | 6 + > > security/Makefile | 2

RE: [RFC 0/3] WhiteEgret LSM module

2017-06-15 Thread masanobu2.koike
Hi Mehmet, Thank you for your suggestion to use IMA appraisal. I'm sorry for the delay in replying to you. I'm studying IMA appraisal. There is something I don't understand yet. Could you please teach me the following items? We assume that "fixing" has already finished and that IMA appraisal is r

RE: [RFC 0/3] WhiteEgret LSM module

2017-06-06 Thread masanobu2.koike
Casey Schaufler wrote: > On 5/30/2017 4:11 AM, Masanobu Koike wrote: > > WhiteEgret is an LSM to simply provide a whitelisting-type > > execution control. > > > > An execution-whitelist, simply called whitelist, is a list > > of executable components (e.g., applications, libraries) > > that are app

RE: [RFC 1/3] WhiteEgret: Add WhiteEgret core functions.

2017-06-05 Thread masanobu2.koike
Casey Schaufler wrote: > On 5/30/2017 4:13 AM, Masanobu Koike wrote: > > This RFC provides implementation of WhiteEgret. > > > > Signed-off-by: Masanobu Koike > > --- > > security/Kconfig | 7 +- > > security/Makefile | 2 + > > security/whiteegret/Kconfig

RE: [RFC 1/3] WhiteEgret: Add WhiteEgret core functions.

2017-06-05 Thread masanobu2.koike
Serge E. Hallyn wrote: > Quoting Masanobu Koike (masanobu2.ko...@toshiba.co.jp): > > This RFC provides implementation of WhiteEgret. > > > > Signed-off-by: Masanobu Koike > > --- > > security/Kconfig | 7 +- > > security/Makefile | 2 + > > security/whiteegr

RE: [RFC 0/3] WhiteEgret LSM module

2017-06-01 Thread masanobu2.koike
> -Original Message- > > On Tue, May 30, 2017 at 08:11:57PM +0900, Masanobu Koike wrote: > > An execution-whitelist, simply called whitelist, is a list > > of executable components (e.g., applications, libraries) > > that are approved to run on a host. The whitelist is used > > to decide w