Re: [PATCH V2 01/10] Secure boot: Add new capability

2012-10-20 Thread Matt Fleming
On Sat, 2012-10-20 at 08:15 +0800, joeyli wrote: > Hi Matt, > > Sorry for bother you! > > I didn't see this Matthew's patchset merged in EFI git tree. Do you have > plan to merge it? Or those patches need wait different subsystem leaders > merge. I don't think it makes sense for the secure boot

Re: [PATCH V2 01/10] Secure boot: Add new capability

2012-10-19 Thread joeyli
Hi Matt, Sorry for bother you! I didn't see this Matthew's patchset merged in EFI git tree. Do you have plan to merge it? Or those patches need wait different subsystem leaders merge. Thanks a lot! Joey Lee 於 四，2012-09-20 於 10:40 -0400，Matthew Garrett 提到： > Secure boot adds certain policy req

Re: [PATCH V2 01/10] Secure boot: Add new capability

2012-09-27 Thread Serge Hallyn
Quoting Matthew Garrett (m...@redhat.com): > Secure boot adds certain policy requirements, including that root must not > be able to do anything that could cause the kernel to execute arbitrary code. > The simplest way to handle this would seem to be to add a new capability > and gate various funct