Re: [GIT PULL] Security subsystem changes for 4.3

2015-09-08 Thread Linus Torvalds
On Mon, Aug 31, 2015 at 5:00 PM, James Morris wrote: > Highlights: > o PKCS#7 support added to support signed kexec, also utilized for module > signing. So when testing this, I realized that when somebody tries to load a module with an invalid key, there doesn't seem to be any logs left abo

Re: [GIT PULL] Security subsystem changes for 4.3

2015-09-01 Thread James Morris
On Tue, 1 Sep 2015, Stephen Rothwell wrote: > This has one commit that has not been in linux-next. Not judging > anything about it, just noting. > > > David Howells (28): > > PKCS#7: Add OIDs for sha224, sha284 and sha512 hash algos and use them This is a minor bugfix which was sent out j

Re: [GIT PULL] Security subsystem changes for 4.3

2015-08-31 Thread Stephen Rothwell
Hi Linus, On Tue, 1 Sep 2015 10:00:09 +1000 (AEST) James Morris wrote: > > Highlights: > > o PKCS#7 support added to support signed kexec, also utilized for module > signing. See comments in 3f1e1bea. > > ** NOTE: this requires linking against the OpenSSL library, which must >

[GIT PULL] Security subsystem changes for 4.3

2015-08-31 Thread James Morris
Highlights: o PKCS#7 support added to support signed kexec, also utilized for module signing. See comments in 3f1e1bea. ** NOTE: this requires linking against the OpenSSL library, which must be installed, e.g. the openssl-devel on Fedora ** o Smack: add IPv6 host labeling;