Linux Integrity

Date Index

Re: [RFC PATCH 6/6] ima: prevent loading firmware into a pre-allocated buffer, (continued)
- [PATCH 3/6] firmware: differentiate between signed regulatory.db and other firmware, Mimi Zohar
  - Re: [PATCH 3/6] firmware: differentiate between signed regulatory.db and other firmware, Luis R. Rodriguez
    - Re: [PATCH 3/6] firmware: differentiate between signed regulatory.db and other firmware, Mimi Zohar
      - Re: [PATCH 3/6] firmware: differentiate between signed regulatory.db and other firmware, Luis R. Rodriguez
        
        Re: [PATCH 3/6] firmware: differentiate between signed regulatory.db and other firmware, Mimi Zohar
        
        Re: [PATCH 3/6] firmware: differentiate between signed regulatory.db and other firmware, Luis R. Rodriguez
        
        Re: [PATCH 3/6] firmware: differentiate between signed regulatory.db and other firmware, Mimi Zohar
        
        Re: [PATCH 3/6] firmware: differentiate between signed regulatory.db and other firmware, Luis R. Rodriguez
        
        Re: [PATCH 3/6] firmware: differentiate between signed regulatory.db and other firmware, Mimi Zohar
        
        Re: [PATCH 3/6] firmware: differentiate between signed regulatory.db and other firmware, Luis R. Rodriguez
        
        Re: [PATCH 3/6] firmware: differentiate between signed regulatory.db and other firmware, Mimi Zohar
        
        Re: [PATCH 3/6] firmware: differentiate between signed regulatory.db and other firmware, Luis R. Rodriguez
        
        Re: [PATCH 3/6] firmware: differentiate between signed regulatory.db and other firmware, Mimi Zohar
        
        Re: [PATCH 3/6] firmware: differentiate between signed regulatory.db and other firmware, Luis R. Rodriguez
        
        Re: [PATCH 3/6] firmware: differentiate between signed regulatory.db and other firmware, Mimi Zohar
        
        Re: [PATCH 3/6] firmware: differentiate between signed regulatory.db and other firmware, Luis R. Rodriguez
        
        Re: [PATCH 3/6] firmware: differentiate between signed regulatory.db and other firmware, Mimi Zohar
        
        Re: [PATCH 3/6] firmware: differentiate between signed regulatory.db and other firmware, Luis R. Rodriguez
        
        Re: [PATCH 3/6] firmware: differentiate between signed regulatory.db and other firmware, Josh Boyer
        
        Re: [PATCH 3/6] firmware: differentiate between signed regulatory.db and other firmware, Mimi Zohar
- [PATCH 4/6] ima: coordinate with signed regulatory.db, Mimi Zohar
- [PATCH 2/6] ima: prevent sysfs fallback firmware loading, Mimi Zohar
  - Re: [PATCH 2/6] ima: prevent sysfs fallback firmware loading, Luis R. Rodriguez
- [PATCH 1/6] firmware: permit LSMs and IMA to fail firmware sysfs fallback loading, Mimi Zohar
  - Re: [PATCH 1/6] firmware: permit LSMs and IMA to fail firmware sysfs fallback loading, Luis R. Rodriguez
    - Re: [PATCH 1/6] firmware: permit LSMs and IMA to fail firmware sysfs fallback loading, Mimi Zohar
[PATCH] ima: define a new policy condition based on the filesystem name, Mimi Zohar
[PATCH V2] EVM: Allow runtime modification of the set of verified xattrs, Matthew Garrett
- Re: [PATCH V2] EVM: Allow runtime modification of the set of verified xattrs, Mimi Zohar
  - Re: [PATCH V2] EVM: Allow runtime modification of the set of verified xattrs, Matthew Garrett
    - Re: [PATCH V2] EVM: Allow runtime modification of the set of verified xattrs, Mimi Zohar
[PATCH v3 1/4] tpm: Add explicit endianness cast, Thiebaud Weksteen
- Re: [PATCH v3 1/4] tpm: Add explicit endianness cast, Jarkko Sakkinen
  - Re: [PATCH v3 1/4] tpm: Add explicit endianness cast, Thiebaud Weksteen
    - Re: [PATCH v3 1/4] tpm: Add explicit endianness cast, Jarkko Sakkinen
[PATCH 0/3] v4.16 tpmdd backports, Jarkko Sakkinen
- [PATCH 3/3] tpm: add retry logic, Jarkko Sakkinen
- [PATCH 2/3] tpm: tpm-interface: fix tpm_transmit/_cmd kdoc, Jarkko Sakkinen
- [PATCH 1/3] tpm: cmd_ready command can be issued only after granting locality, Jarkko Sakkinen
- Re: [PATCH 0/3] v4.16 tpmdd backports, Greg KH
  - Re: [PATCH 0/3] v4.16 tpmdd backports, James Bottomley
    - Re: [PATCH 0/3] v4.16 tpmdd backports, Greg KH
      - Re: [PATCH 0/3] v4.16 tpmdd backports, Jarkko Sakkinen
[PATCH] ima: Unify logging, Petr Vorel
- Re: [PATCH] ima: Unify logging, Mimi Zohar
[PATCH] evm: Allow non-SHA1 digital signatures, Matthew Garrett
- Re: [PATCH] evm: Allow non-SHA1 digital signatures, Matthew Garrett
- Re: [PATCH] evm: Allow non-SHA1 digital signatures, Mimi Zohar
  - Re: [PATCH] evm: Allow non-SHA1 digital signatures, Thiago Jung Bauermann
- Re: [PATCH] evm: Allow non-SHA1 digital signatures, Thiago Jung Bauermann
[PATCH] ima: Reflect correct permissions for policy, Petr Vorel
- Re: [PATCH] ima: Reflect correct permissions for policy, Mimi Zohar
- Re: [PATCH] ima: Reflect correct permissions for policy, Mimi Zohar
  - Re: [PATCH] ima: Reflect correct permissions for policy, Petr Vorel
[RFC PATCH v3 00/10] Rewrite tests into new API + fixes, Petr Vorel
- [RFC PATCH v3 01/10] security/ima: Rewrite tests into new API + fixes, Petr Vorel
  - Re: [RFC PATCH v3 01/10] security/ima: Rewrite tests into new API + fixes, Mimi Zohar
    - Re: [RFC PATCH v3 01/10] security/ima: Rewrite tests into new API + fixes, Petr Vorel
- [RFC PATCH v3 02/10] security/ima: Change order of tests, Petr Vorel
- [RFC PATCH v3 03/10] ima/ima_policy.sh: Improve check of policy writability, Petr Vorel
- [RFC PATCH v3 04/10] ima/ima_policy.sh: Load whole policy with cat, Petr Vorel
- [RFC PATCH v3 05/10] ima/ima_boot_aggregate: Increase MAX_EVENT_SIZE to 1MB, Petr Vorel
  - Re: [LTP] [RFC PATCH v3 05/10] ima/ima_boot_aggregate: Increase MAX_EVENT_SIZE to 1MB, Cyril Hrubis
- [RFC PATCH v3 07/10] ima/ima_mmap: Reduce sleep + log it, Petr Vorel
  - Re: [LTP] [RFC PATCH v3 07/10] ima/ima_mmap: Reduce sleep + log it, Cyril Hrubis
- [RFC PATCH v3 06/10] ima/tpm.sh: Use evmctl + other fixes, Petr Vorel
- [RFC PATCH v3 08/10] ima/{ima_measurements,ima_violations}.sh: Avoid running on tmpfs, Petr Vorel
- [RFC PATCH v3 09/10] ima: CRYPTO_LIBS are needed only for ima_boot_aggregate, Petr Vorel
- [RFC PATCH v3 10/10] ima/ima_mmap: Rewrite to new library, Petr Vorel
  - Re: [LTP] [RFC PATCH v3 10/10] ima/ima_mmap: Rewrite to new library, Cyril Hrubis
- Re: [RFC PATCH v3 00/10] Rewrite tests into new API + fixes, Mimi Zohar
  - Re: [RFC PATCH v3 00/10] Rewrite tests into new API + fixes, Petr Vorel
- Re: [LTP] [RFC PATCH v3 00/10] Rewrite tests into new API + fixes, Petr Vorel
  - Re: [LTP] [RFC PATCH v3 00/10] Rewrite tests into new API + fixes, Mimi Zohar
  - Re: [LTP] [RFC PATCH v3 00/10] Rewrite tests into new API + fixes, Mimi Zohar
    - Re: [LTP] [RFC PATCH v3 00/10] Rewrite tests into new API + fixes, Petr Vorel
[PATCH] tpm/st33zp24: Fix spelling mistake in macro ST33ZP24_TISREGISTER_UKNOWN, Colin King
- Re: [PATCH] tpm/st33zp24: Fix spelling mistake in macro ST33ZP24_TISREGISTER_UKNOWN, Jarkko Sakkinen
[USER] [PATCH 1/2] Remove hardcoding of SHA1 in EVM signatures, Matthew Garrett
- [USER] [PATCH 2/2] Add security.apparmor to the set of extended attributes used by EVM, Matthew Garrett
  - Re: [USER] [PATCH 2/2] Add security.apparmor to the set of extended attributes used by EVM, Mimi Zohar
    - Re: [USER] [PATCH 2/2] Add security.apparmor to the set of extended attributes used by EVM, Matthew Garrett
      - Re: [USER] [PATCH 2/2] Add security.apparmor to the set of extended attributes used by EVM, Mimi Zohar
        
        Re: [USER] [PATCH 2/2] Add security.apparmor to the set of extended attributes used by EVM, Mimi Zohar
- Re: [USER] [PATCH 1/2] Remove hardcoding of SHA1 in EVM signatures, Mimi Zohar
- Re: [USER] [PATCH 1/2] Remove hardcoding of SHA1 in EVM signatures, Mimi Zohar
  - Re: [USER] [PATCH 1/2] Remove hardcoding of SHA1 in EVM signatures, Matthew Garrett
- Re: [USER] [PATCH 1/2] Remove hardcoding of SHA1 in EVM signatures, Mimi Zohar
[PATCH v2 0/2] tpm: improving granularity in poll sleep times, Nayna Jain
- [PATCH v2 1/2] tpm: reduce poll sleep time in tpm_transmit(), Nayna Jain
  - Re: [PATCH v2 1/2] tpm: reduce poll sleep time in tpm_transmit(), Mimi Zohar
  - Re: [PATCH v2 1/2] tpm: reduce poll sleep time in tpm_transmit(), Jarkko Sakkinen
- [PATCH v2 2/2] tpm: reduce polling time to usecs for even finer granularity, Nayna Jain
  - Re: [PATCH v2 2/2] tpm: reduce polling time to usecs for even finer granularity, Mimi Zohar
  - Re: [PATCH v2 2/2] tpm: reduce polling time to usecs for even finer granularity, Jarkko Sakkinen
[PATCH] EVM: Allow runtime modification of the set of verified xattrs, Matthew Garrett
- Re: [PATCH] EVM: Allow runtime modification of the set of verified xattrs, Mimi Zohar
  - Re: [PATCH] EVM: Allow runtime modification of the set of verified xattrs, Matthew Garrett
    - Re: [PATCH] EVM: Allow runtime modification of the set of verified xattrs, Mimi Zohar
      - Re: [PATCH] EVM: Allow runtime modification of the set of verified xattrs, Matthew Garrett
        
        Re: [PATCH] EVM: Allow runtime modification of the set of verified xattrs, Matthew Garrett
        
        Re: [PATCH] EVM: Allow runtime modification of the set of verified xattrs, Mimi Zohar
        
        Re: [PATCH] EVM: Allow runtime modification of the set of verified xattrs, Matthew Garrett
[PATCH] lockdown: fix coordination of kernel module signature verification, Mimi Zohar
- Re: [PATCH] lockdown: fix coordination of kernel module signature verification, Bruno E. O. Meneguele
[PATCH 0/3] kexec: limit kexec_load syscall, Mimi Zohar
- [PATCH 1/3] ima: based on the "secure_boot" policy limit syscalls, Mimi Zohar
- [PATCH 3/3] ima: based on policy require signed kexec kernel images, Mimi Zohar
- [PATCH 2/3] kexec: call LSM hook for kexec_load syscall, Mimi Zohar
  - Re: [PATCH 2/3] kexec: call LSM hook for kexec_load syscall, Mimi Zohar
  - Re: [PATCH 2/3] kexec: call LSM hook for kexec_load syscall, Eric W. Biederman
    - Re: [PATCH 2/3] kexec: call LSM hook for kexec_load syscall, Mimi Zohar
      - Re: [PATCH 2/3] kexec: call LSM hook for kexec_load syscall, Eric W. Biederman
        
        Re: [PATCH 2/3] kexec: call LSM hook for kexec_load syscall, Casey Schaufler
        
        Re: [PATCH 2/3] kexec: call LSM hook for kexec_load syscall, Eric W. Biederman
        
        Re: [PATCH 2/3] kexec: call LSM hook for kexec_load syscall, Mimi Zohar
        
        Re: [PATCH 2/3] kexec: call LSM hook for kexec_load syscall, Eric W. Biederman
- Re: [PATCH 0/3] kexec: limit kexec_load syscall, Eric W. Biederman
  - Re: [PATCH 0/3] kexec: limit kexec_load syscall, Matthew Garrett
    - Re: [PATCH 0/3] kexec: limit kexec_load syscall, Eric W. Biederman
      - Re: [PATCH 0/3] kexec: limit kexec_load syscall, Matthew Garrett
  - Re: [PATCH 0/3] kexec: limit kexec_load syscall, Mimi Zohar
    - Re: [PATCH 0/3] kexec: limit kexec_load syscall, Eric W. Biederman
      - Re: [PATCH 0/3] kexec: limit kexec_load syscall, Mimi Zohar
        
        Re: [PATCH 0/3] kexec: limit kexec_load syscall, Eric W. Biederman
        
        Re: [PATCH 0/3] kexec: limit kexec_load syscall, Mimi Zohar
- <Possible follow-ups>
- [PATCH 0/3] kexec: limit kexec_load syscall, Mimi Zohar
  - [PATCH 3/3] ima: based on policy require signed kexec kernel images, Mimi Zohar
  - [PATCH 2/3] kexec: call LSM hook for kexec_load syscall, Mimi Zohar
  - [PATCH 1/3] ima: based on the "secure_boot" policy limit syscalls, Mimi Zohar
[PATCH v2 0/4] Refactor TPM event log code, Thiebaud Weksteen
- [PATCH v2 4/4] tpm: Move eventlog declarations to its own header, Thiebaud Weksteen
  - Re: [PATCH v2 4/4] tpm: Move eventlog declarations to its own header, Jarkko Sakkinen
- [PATCH v2 3/4] tpm: Move shared eventlog functions to common.c, Thiebaud Weksteen
  - Re: [PATCH v2 3/4] tpm: Move shared eventlog functions to common.c, Jarkko Sakkinen
- [PATCH v2 2/4] tpm: Move eventlog files to a subdirectory, Thiebaud Weksteen
  - Re: [PATCH v2 2/4] tpm: Move eventlog files to a subdirectory, Jarkko Sakkinen
    - Re: [PATCH v2 2/4] tpm: Move eventlog files to a subdirectory, Mimi Zohar
      - Re: [PATCH v2 2/4] tpm: Move eventlog files to a subdirectory, Petr Vorel
        
        Re: [PATCH v2 2/4] tpm: Move eventlog files to a subdirectory, Mimi Zohar
      - Re: [PATCH v2 2/4] tpm: Move eventlog files to a subdirectory, Jarkko Sakkinen
- [PATCH v2 1/4] tpm: Add explicit endianness cast, Thiebaud Weksteen
  - Re: [PATCH v2 1/4] tpm: Add explicit endianness cast, Jason Gunthorpe
    - Re: [PATCH v2 1/4] tpm: Add explicit endianness cast, Thiebaud Weksteen
      - Re: [PATCH v2 1/4] tpm: Add explicit endianness cast, Jason Gunthorpe
        
        Re: [PATCH v2 1/4] tpm: Add explicit endianness cast, Thiebaud Weksteen
        
        Re: [PATCH v2 1/4] tpm: Add explicit endianness cast, Jason Gunthorpe
        
        Re: [PATCH v2 1/4] tpm: Add explicit endianness cast, Thiebaud Weksteen
        
        Re: [PATCH v2 1/4] tpm: Add explicit endianness cast, Luc Van Oostenryck
        
        Re: [PATCH v2 1/4] tpm: Add explicit endianness cast, Thiebaud Weksteen
  - Re: [PATCH v2 1/4] tpm: Add explicit endianness cast, Jarkko Sakkinen
[PATCH 0/3] Refactor TPM event log code, Thiebaud Weksteen
- [PATCH 3/3] tpm: Move eventlog declarations to its own header, Thiebaud Weksteen
  - Re: [PATCH 3/3] tpm: Move eventlog declarations to its own header, Jarkko Sakkinen
    - Re: [PATCH 3/3] tpm: Move eventlog declarations to its own header, Jarkko Sakkinen
- [PATCH 2/3] tpm: Move shared eventlog functions to common.c, Thiebaud Weksteen
- [PATCH 1/3] tpm: Move eventlog files to a subdirectory, Thiebaud Weksteen
  - Re: [PATCH 1/3] tpm: Move eventlog files to a subdirectory, kbuild test robot
- Re: [PATCH 0/3] Refactor TPM event log code, Jarkko Sakkinen
Fwd: New Version Notification for draft-cel-nfsv4-linux-seclabel-xtensions-00.txt, Chuck Lever
- Re: Fwd: New Version Notification for draft-cel-nfsv4-linux-seclabel-xtensions-00.txt, Mimi Zohar
  - Re: Fwd: New Version Notification for draft-cel-nfsv4-linux-seclabel-xtensions-00.txt, Serge E. Hallyn
    - Message not available
      - Re: [Fwd: Re: Fwd: New Version Notification for draft-cel-nfsv4-linux-seclabel-xtensions-00.txt], Chuck Lever
        
        Re: [Fwd: Re: Fwd: New Version Notification for draft-cel-nfsv4-linux-seclabel-xtensions-00.txt], Serge E. Hallyn
        
        Re: [Fwd: Re: Fwd: New Version Notification for draft-cel-nfsv4-linux-seclabel-xtensions-00.txt], Chuck Lever
        
        Re: [Fwd: Re: Fwd: New Version Notification for draft-cel-nfsv4-linux-seclabel-xtensions-00.txt], Serge E. Hallyn
CAAM and IMA/EVM : caam_rsa_enc: DECO: desc idx 7: Protocol Size Error, Martin Townsend
- Re: CAAM and IMA/EVM : caam_rsa_enc: DECO: desc idx 7: Protocol Size Error, Mimi Zohar
  - Re: CAAM and IMA/EVM : caam_rsa_enc: DECO: desc idx 7: Protocol Size Error, Martin Townsend
    - Re: CAAM and IMA/EVM : caam_rsa_enc: DECO: desc idx 7: Protocol Size Error, Mimi Zohar
    - Re: CAAM and IMA/EVM : caam_rsa_enc: DECO: desc idx 7: Protocol Size Error, Mike Rapoport
      - Re: CAAM and IMA/EVM : caam_rsa_enc: DECO: desc idx 7: Protocol Size Error, Martin Townsend
- Re: CAAM and IMA/EVM : caam_rsa_enc: DECO: desc idx 7: Protocol Size Error, Fabio Estevam
  - Re: CAAM and IMA/EVM : caam_rsa_enc: DECO: desc idx 7: Protocol Size Error, Martin Townsend
    - Re: CAAM and IMA/EVM : caam_rsa_enc: DECO: desc idx 7: Protocol Size Error, Fabio Estevam
      - Re: CAAM and IMA/EVM : caam_rsa_enc: DECO: desc idx 7: Protocol Size Error, Martin Townsend
        
        Re: CAAM and IMA/EVM : caam_rsa_enc: DECO: desc idx 7: Protocol Size Error, Martin Townsend
        
        Re: CAAM and IMA/EVM : caam_rsa_enc: DECO: desc idx 7: Protocol Size Error, James Bottomley
        
        Re: CAAM and IMA/EVM : caam_rsa_enc: DECO: desc idx 7: Protocol Size Error, Horia Geantă
        
        Re: CAAM and IMA/EVM : caam_rsa_enc: DECO: desc idx 7: Protocol Size Error, Martin Townsend
        
        Re: CAAM and IMA/EVM : caam_rsa_enc: DECO: desc idx 7: Protocol Size Error, Martin Townsend
        
        Re: CAAM and IMA/EVM : caam_rsa_enc: DECO: desc idx 7: Protocol Size Error, Fabio Estevam
        
        Re: CAAM and IMA/EVM : caam_rsa_enc: DECO: desc idx 7: Protocol Size Error, Horia Geantă
        
        Re: CAAM and IMA/EVM : caam_rsa_enc: DECO: desc idx 7: Protocol Size Error, Fabio Estevam
        
        Re: CAAM and IMA/EVM : caam_rsa_enc: DECO: desc idx 7: Protocol Size Error, Horia Geantă
        
        Re: CAAM and IMA/EVM : caam_rsa_enc: DECO: desc idx 7: Protocol Size Error, Fabio Estevam
        
        Re: CAAM and IMA/EVM : caam_rsa_enc: DECO: desc idx 7: Protocol Size Error, Horia Geantă
        
        Re: CAAM and IMA/EVM : caam_rsa_enc: DECO: desc idx 7: Protocol Size Error, Fabio Estevam
[PATCH] tpm: tpm_crb: relinquish locality on error path., Tomas Winkler
- Re: [PATCH] tpm: tpm_crb: relinquish locality on error path., Jarkko Sakkinen
  - RE: [PATCH] tpm: tpm_crb: relinquish locality on error path., Winkler, Tomas
    - Re: [PATCH] tpm: tpm_crb: relinquish locality on error path., Jarkko Sakkinen
      - RE: [PATCH] tpm: tpm_crb: relinquish locality on error path., Winkler, Tomas
        
        RE: [PATCH] tpm: tpm_crb: relinquish locality on error path., Winkler, Tomas
        
        Re: [PATCH] tpm: tpm_crb: relinquish locality on error path., Jarkko Sakkinen
        
        Re: [PATCH] tpm: tpm_crb: relinquish locality on error path., Jarkko Sakkinen
        
        RE: [PATCH] tpm: tpm_crb: relinquish locality on error path., Winkler, Tomas
        
        RE: [PATCH] tpm: tpm_crb: relinquish locality on error path., Winkler, Tomas
        
        Re: [PATCH] tpm: tpm_crb: relinquish locality on error path., Jarkko Sakkinen
        
        RE: [PATCH] tpm: tpm_crb: relinquish locality on error path., Winkler, Tomas
        
        Re: [PATCH] tpm: tpm_crb: relinquish locality on error path., Jarkko Sakkinen
        
        RE: [PATCH] tpm: tpm_crb: relinquish locality on error path., Winkler, Tomas
        
        Re: [PATCH] tpm: tpm_crb: relinquish locality on error path., Jarkko Sakkinen
        
        RE: [PATCH] tpm: tpm_crb: relinquish locality on error path., Winkler, Tomas
        
        Re: [PATCH] tpm: tpm_crb: relinquish locality on error path., Jarkko Sakkinen
        
        RE: [PATCH] tpm: tpm_crb: relinquish locality on error path., Winkler, Tomas
        
        Re: [PATCH] tpm: tpm_crb: relinquish locality on error path., Jarkko Sakkinen
[PATCH] tpm: st33zp24: remove redundant null check on chip, Colin King
- Re: [PATCH] tpm: st33zp24: remove redundant null check on chip, Jarkko Sakkinen
[PATCH] tpm: st33zp24: check if chip is null before dereferencing, Colin King
- Re: [PATCH] tpm: st33zp24: check if chip is null before dereferencing, Jason Gunthorpe
Updates on ima digest list feature, Roberto Sassu
[PATCH] tpm: moves the delay_msec increment after sleep in tpm_transmit(), Nayna Jain
- Re: [PATCH] tpm: moves the delay_msec increment after sleep in tpm_transmit(), Jarkko Sakkinen
  - Re: [PATCH] tpm: moves the delay_msec increment after sleep in tpm_transmit(), Nayna Jain
    - Re: [PATCH] tpm: moves the delay_msec increment after sleep in tpm_transmit(), Jarkko Sakkinen
      - Re: [PATCH] tpm: moves the delay_msec increment after sleep in tpm_transmit(), Mimi Zohar
        
        Re: [PATCH] tpm: moves the delay_msec increment after sleep in tpm_transmit(), Jarkko Sakkinen
        
        Re: [PATCH] tpm: moves the delay_msec increment after sleep in tpm_transmit(), Jarkko Sakkinen
Re: [RFC PATCH v3 1/3] ima: extend clone() with IMA namespace support, Dr. Greg Wettstein
- Re: [RFC PATCH v3 1/3] ima: extend clone() with IMA namespace support, Stefan Berger
  - Re: [RFC PATCH v3 1/3] ima: extend clone() with IMA namespace support, Dr. Greg Wettstein
multi-locality support for TPM linux driver, Li, Hui
[RFC PATCH v3 0/3] ima: namespacing IMA, Stefan Berger
- [RFC PATCH v3 2/3] ima: Add ns_status for storing namespaced iint data, Stefan Berger
- [RFC PATCH v3 3/3] ima: mamespace audit status flags, Stefan Berger
- [RFC PATCH v3 1/3] ima: extend clone() with IMA namespace support, Stefan Berger
  - Re: [RFC PATCH v3 1/3] ima: extend clone() with IMA namespace support, Eric W. Biederman
    - Re: [RFC PATCH v3 1/3] ima: extend clone() with IMA namespace support, Stefan Berger
      - Re: [RFC PATCH v3 1/3] ima: extend clone() with IMA namespace support, Dr. Greg Wettstein
        
        Re: [RFC PATCH v3 1/3] ima: extend clone() with IMA namespace support, Stefan Berger
      - Re: [RFC PATCH v3 1/3] ima: extend clone() with IMA namespace support, John Johansen
    - Re: [RFC PATCH v3 1/3] ima: extend clone() with IMA namespace support, Mimi Zohar
      - Re: [RFC PATCH v3 1/3] ima: extend clone() with IMA namespace support, John Johansen
        
        Re: [RFC PATCH v3 1/3] ima: extend clone() with IMA namespace support, Mimi Zohar
        
        Re: [RFC PATCH v3 1/3] ima: extend clone() with IMA namespace support, Eric W. Biederman
        
        Re: [RFC PATCH v3 1/3] ima: extend clone() with IMA namespace support, Mimi Zohar
        
        Re: [RFC PATCH v3 1/3] ima: extend clone() with IMA namespace support, John Johansen
        
        Re: [RFC PATCH v3 1/3] ima: extend clone() with IMA namespace support, Stefan Berger
        
        Re: [RFC PATCH v3 1/3] ima: extend clone() with IMA namespace support, John Johansen
        
        Re: [RFC PATCH v3 1/3] ima: extend clone() with IMA namespace support, Stefan Berger
        
        Re: [RFC PATCH v3 1/3] ima: extend clone() with IMA namespace support, Eric W. Biederman
[PATCH v4 0/4] Migrate all TPM 2.0 commands to use struct tpm_buf, Jarkko Sakkinen
- [PATCH v4 4/4] tpm: migrate tpm2_get_random() to use struct tpm_buf, Jarkko Sakkinen
  - Re: [PATCH v4 4/4] tpm: migrate tpm2_get_random() to use struct tpm_buf, Nayna Jain
    - Re: [PATCH v4 4/4] tpm: migrate tpm2_get_random() to use struct tpm_buf, Jarkko Sakkinen
- [PATCH v4 2/4] tpm: migrate tpm2_probe() to use struct tpm_buf, Jarkko Sakkinen
  - Re: [PATCH v4 2/4] tpm: migrate tpm2_probe() to use struct tpm_buf, Nayna Jain
  - Re: [PATCH v4 2/4] tpm: migrate tpm2_probe() to use struct tpm_buf, Jerry Snitselaar
- [PATCH v4 3/4] tpm: migrate tpm2_get_tpm_pt() to use struct tpm_buf, Jarkko Sakkinen
  - Re: [PATCH v4 3/4] tpm: migrate tpm2_get_tpm_pt() to use struct tpm_buf, Nayna Jain
    - Re: [PATCH v4 3/4] tpm: migrate tpm2_get_tpm_pt() to use struct tpm_buf, Jarkko Sakkinen
  - Re: [PATCH v4 3/4] tpm: migrate tpm2_get_tpm_pt() to use struct tpm_buf, Jerry Snitselaar
- [PATCH v4 1/4] tpm: migrate tpm2_shutdown() to use struct tpm_buf, Jarkko Sakkinen
  - Re: [PATCH v4 1/4] tpm: migrate tpm2_shutdown() to use struct tpm_buf, Nayna Jain
  - Re: [PATCH v4 1/4] tpm: migrate tpm2_shutdown() to use struct tpm_buf, Jerry Snitselaar
    - Re: [PATCH v4 1/4] tpm: migrate tpm2_shutdown() to use struct tpm_buf, Jarkko Sakkinen
      - Re: [PATCH v4 1/4] tpm: migrate tpm2_shutdown() to use struct tpm_buf, Jerry Snitselaar
        
        Re: [PATCH v4 1/4] tpm: migrate tpm2_shutdown() to use struct tpm_buf, Jarkko Sakkinen
- Re: [PATCH v4 0/4] Migrate all TPM 2.0 commands to use struct tpm_buf, Jarkko Sakkinen
[PATCH ima-evm-utils] autotools: Try to find correct manpage stylesheet path, Petr Vorel
- Re: [PATCH ima-evm-utils] autotools: Try to find correct manpage stylesheet path, Mimi Zohar
[GIT PULL] linux-integrity patches for Linux 4.17, Mimi Zohar
- Re: [GIT PULL] linux-integrity patches for Linux 4.17, James Morris
[PATCH V4] tpm: separate cmd_ready/go_idle from runtime_pm, Tomas Winkler
- Re: [PATCH V4] tpm: separate cmd_ready/go_idle from runtime_pm, Jarkko Sakkinen
[PATCH v3] ima: Fallback to the builtin hash algorithm, Petr Vorel
- Re: [PATCH v3] ima: Fallback to the builtin hash algorithm, Mimi Zohar
  - Re: [PATCH v3] ima: Fallback to the builtin hash algorithm, Petr Vorel
    - Re: [PATCH v3] ima: Fallback to the builtin hash algorithm, Mimi Zohar
      - Re: [PATCH v3] ima: Fallback to the builtin hash algorithm, Petr Vorel
[GIT PULL] tpmdd updates for Linux 4.17, Jarkko Sakkinen
- Re: [GIT PULL] tpmdd updates for Linux 4.17, James Morris
  - Re: [GIT PULL] tpmdd updates for Linux 4.17, Jarkko Sakkinen
A subtle problem when resuming xen-front and using IMA and multiple TPM devices on the system, Stefan Berger
- Re: A subtle problem when resuming xen-front and using IMA and multiple TPM devices on the system, Jason Gunthorpe
  - Re: A subtle problem when resuming xen-front and using IMA and multiple TPM devices on the system, Stefan Berger
    - Re: A subtle problem when resuming xen-front and using IMA and multiple TPM devices on the system, Jason Gunthorpe
[PATCH v2 0/2] ima: Fallback to the builtin hash algorithm, Petr Vorel
- [PATCH v2 1/2] ima: Introduce ima_alloc_alg() to reduce duplicity, Petr Vorel
- [PATCH v2 2/2] ima: Fallback to the builtin hash algorithm, Petr Vorel
- Re: [PATCH v2 0/2] ima: Fallback to the builtin hash algorithm, Mimi Zohar
  - Re: [PATCH v2 0/2] ima: Fallback to the builtin hash algorithm, Petr Vorel
    - Re: [PATCH v2 0/2] ima: Fallback to the builtin hash algorithm, Mimi Zohar
[PATCH] ima: Add smackfs to the default appraise/measure list, Martin Townsend
- Re: [PATCH] ima: Add smackfs to the default appraise/measure list, Casey Schaufler
  - Re: [PATCH] ima: Add smackfs to the default appraise/measure list, Mimi Zohar
[PATCH v2 0/2] retry handling and intermittent self test failure fix, James Bottomley
- [PATCH v2 1/2] tpm: add retry logic, James Bottomley
  - Re: [PATCH v2 1/2] tpm: add retry logic, Jarkko Sakkinen
  - Re: [PATCH v2 1/2] tpm: add retry logic, Nayna Jain
    - Re: [PATCH v2 1/2] tpm: add retry logic, James Bottomley
      - Re: [PATCH v2 1/2] tpm: add retry logic, Nayna Jain
        
        Re: [PATCH v2 1/2] tpm: add retry logic, James Bottomley
        
        Re: [PATCH v2 1/2] tpm: add retry logic, Mimi Zohar
        
        Re: [PATCH v2 1/2] tpm: add retry logic, James Bottomley
        
        Re: [PATCH v2 1/2] tpm: add retry logic, Mimi Zohar
- [PATCH v2 2/2] tpm: fix intermittent failure with self tests, James Bottomley
Reading from /sys/class/tpm/tpmX/device/pcrs, Martin Galvan
[PATCH] ima: Fallback to the builtin hash algorithm, Petr Vorel
- Re: [PATCH] ima: Fallback to the builtin hash algorithm, Mimi Zohar
[PATCH] tpm: self test failure should not cause suspend to fail, Daniel Drake
- Re: [PATCH] tpm: self test failure should not cause suspend to fail, Jarkko Sakkinen
  - Re: [PATCH] tpm: self test failure should not cause suspend to fail, Jarkko Sakkinen
4.17 pull request, Jarkko Sakkinen
- Re: 4.17 pull request, James Morris
  - Re: 4.17 pull request, Jarkko Sakkinen
    - Re: 4.17 pull request, James Morris
How to only measure process file, shijun zhao
[PATCH] tpm: add retry logic, James Bottomley
- Re: [PATCH] tpm: add retry logic, Jarkko Sakkinen
  - Re: [PATCH] tpm: add retry logic, James Bottomley
    - Re: [PATCH] tpm: add retry logic, Jarkko Sakkinen
[PATCH] ima: Avoid using not initialized IMA, Petr Vorel
- Re: [PATCH] ima: Avoid using not initialized IMA, Mimi Zohar
  - Re: [PATCH] ima: Avoid using not initialized IMA, James Morris
    - Re: [PATCH] ima: Avoid using not initialized IMA, Mimi Zohar
      - Re: [PATCH] ima: Avoid using not initialized IMA, Petr Vorel
        
        Re: [PATCH] ima: Avoid using not initialized IMA, Mimi Zohar
        
        Re: [PATCH] ima: Avoid using not initialized IMA, Petr Vorel
[PATCH v6 00/12] Appended signatures support for IMA appraisal, Thiago Jung Bauermann
- [PATCH v6 02/12] PKCS#7: Introduce pkcs7_get_message_sig() and verify_pkcs7_message_sig(), Thiago Jung Bauermann
  - Re: [PATCH v6 02/12] PKCS#7: Introduce pkcs7_get_message_sig() and verify_pkcs7_message_sig(), Mimi Zohar
- [PATCH v6 10/12] ima: Add functions to read and verify a modsig signature, Thiago Jung Bauermann
- [PATCH v6 12/12] ima: Write modsig to the measurement list, Thiago Jung Bauermann
  - Re: [PATCH v6 12/12] ima: Write modsig to the measurement list, Mimi Zohar
- [PATCH v6 11/12] ima: Implement support for module-style appended signatures, Thiago Jung Bauermann
  - Re: [PATCH v6 11/12] ima: Implement support for module-style appended signatures, Mimi Zohar
- [PATCH v6 09/12] ima: Add modsig appraise_type option for module-style appended signatures, Thiago Jung Bauermann
- [PATCH v6 08/12] ima: Export func_tokens, Thiago Jung Bauermann
- [PATCH v6 06/12] integrity: Introduce asymmetric_sig_has_known_key(), Thiago Jung Bauermann
  - Re: [PATCH v6 06/12] integrity: Introduce asymmetric_sig_has_known_key(), Mimi Zohar
- [PATCH v6 07/12] integrity: Select CONFIG_KEYS instead of depending on it, Thiago Jung Bauermann
  - Re: [PATCH v6 07/12] integrity: Select CONFIG_KEYS instead of depending on it, Mimi Zohar
- [PATCH v6 04/12] ima: Introduce is_ima_sig(), Thiago Jung Bauermann
  - Re: [PATCH v6 04/12] ima: Introduce is_ima_sig(), Mimi Zohar
- [PATCH v6 05/12] integrity: Introduce integrity_keyring_from_id(), Thiago Jung Bauermann
  - Re: [PATCH v6 05/12] integrity: Introduce integrity_keyring_from_id(), Mimi Zohar
- [PATCH v6 03/12] PKCS#7: Introduce pkcs7_get_digest(), Thiago Jung Bauermann
  - Re: [PATCH v6 03/12] PKCS#7: Introduce pkcs7_get_digest(), Mimi Zohar
- [PATCH v6 01/12] MODSIGN: Export module signature definitions, Thiago Jung Bauermann
- Re: [PATCH v6 00/12] Appended signatures support for IMA appraisal, Thiago Jung Bauermann
[PATCH] tpm: TPM 2.0 selftest performance improvement, Nayna Jain
- Re: [PATCH] tpm: TPM 2.0 selftest performance improvement, Jarkko Sakkinen
Problem mounting pseudo filesystems with SMACK and IMA enabled., Martin Townsend
- Re: Problem mounting pseudo filesystems with SMACK and IMA enabled., Mimi Zohar
  - Re: Problem mounting pseudo filesystems with SMACK and IMA enabled., Martin Townsend
    - Re: Problem mounting pseudo filesystems with SMACK and IMA enabled., Mimi Zohar
      - Re: Problem mounting pseudo filesystems with SMACK and IMA enabled., Casey Schaufler
        
        Re: Problem mounting pseudo filesystems with SMACK and IMA enabled., Martin Townsend
        
        Re: Problem mounting pseudo filesystems with SMACK and IMA enabled., Martin Townsend
        
        Re: Problem mounting pseudo filesystems with SMACK and IMA enabled., Mimi Zohar
        
        Re: Problem mounting pseudo filesystems with SMACK and IMA enabled., Martin Townsend
        
        Re: Problem mounting pseudo filesystems with SMACK and IMA enabled., Mimi Zohar
        
        Re: Problem mounting pseudo filesystems with SMACK and IMA enabled., Martin Townsend
        
        Re: Problem mounting pseudo filesystems with SMACK and IMA enabled., Mimi Zohar
        
        Re: Problem mounting pseudo filesystems with SMACK and IMA enabled., Casey Schaufler
Should we handle TPM_RC_RETRY internally?, James Bottomley
- Re: Should we handle TPM_RC_RETRY internally?, Javier Martinez Canillas
  - Re: Should we handle TPM_RC_RETRY internally?, Jarkko Sakkinen
  - Re: Should we handle TPM_RC_RETRY internally?, Philip Tricca
    - Re: Should we handle TPM_RC_RETRY internally?, Jarkko Sakkinen
- Re: Should we handle TPM_RC_RETRY internally?, Jarkko Sakkinen
  - Re: Should we handle TPM_RC_RETRY internally?, James Bottomley
    - Re: Should we handle TPM_RC_RETRY internally?, Jarkko Sakkinen
    - Message not available
      - Re: Should we handle TPM_RC_RETRY internally?, Jarkko Sakkinen
    - Message not available
      - Re: Should we handle TPM_RC_RETRY internally?, James Bottomley
[PATCH 0/4] Code improvements in integrity and IMA, Thiago Jung Bauermann
- [PATCH 3/4] ima: Improvements in ima_appraise_measurement(), Thiago Jung Bauermann
  - Re: [PATCH 3/4] ima: Improvements in ima_appraise_measurement(), Serge E. Hallyn
    - Re: [PATCH 3/4] ima: Improvements in ima_appraise_measurement(), Thiago Jung Bauermann
      - Re: [PATCH 3/4] ima: Improvements in ima_appraise_measurement(), Mimi Zohar
        
        Re: [PATCH 3/4] ima: Improvements in ima_appraise_measurement(), Thiago Jung Bauermann
        
        Re: [PATCH 3/4] ima: Improvements in ima_appraise_measurement(), Serge E. Hallyn
- [PATCH 4/4] integrity: Introduce struct evm_xattr, Thiago Jung Bauermann
- [PATCH 2/4] ima: Simplify ima_eventsig_init(), Thiago Jung Bauermann
  - Re: [PATCH 2/4] ima: Simplify ima_eventsig_init(), Serge E. Hallyn
- [PATCH 1/4] integrity: Remove unused macro IMA_ACTION_RULE_FLAGS, Thiago Jung Bauermann
  - Re: [PATCH 1/4] integrity: Remove unused macro IMA_ACTION_RULE_FLAGS, Serge E. Hallyn
- Re: [PATCH 0/4] Code improvements in integrity and IMA, Mimi Zohar
[RFC PATCH v2 0/4] Rewrite tests into new API + fixes, Petr Vorel
- [RFC PATCH v2 3/4] ima/ima_boot_aggregate: Increase MAX_EVENT_SIZE to 8k, Petr Vorel
  - Re: [RFC PATCH v2 3/4] ima/ima_boot_aggregate: Increase MAX_EVENT_SIZE to 8k, Mimi Zohar
    - Message not available
      - Re: [RFC PATCH v2 3/4] ima/ima_boot_aggregate: Increase MAX_EVENT_SIZE to 8k, Petr Vorel
- [RFC PATCH v2 1/4] security/ima: Rewrite tests into new API + fixes, Petr Vorel
  - Re: [RFC PATCH v2 1/4] security/ima: Rewrite tests into new API + fixes, Petr Vorel
  - Re: [RFC PATCH v2 1/4] security/ima: Rewrite tests into new API + fixes, Mimi Zohar
    - Re: [RFC PATCH v2 1/4] security/ima: Rewrite tests into new API + fixes, Petr Vorel
      - Re: [RFC PATCH v2 1/4] security/ima: Rewrite tests into new API + fixes, Mimi Zohar
        
        Re: [RFC PATCH v2 1/4] security/ima: Rewrite tests into new API + fixes, Petr Vorel
        
        Re: [RFC PATCH v2 1/4] security/ima: Rewrite tests into new API + fixes, Mimi Zohar
- [RFC PATCH v2 2/4] security/ima: Run measurements after policy, Petr Vorel
- [RFC PATCH v2 4/4] ima/tpm: Various fixes, Petr Vorel
- Re: [RFC PATCH v2 0/4] Rewrite tests into new API + fixes, Mimi Zohar
  - Re: [RFC PATCH v2 0/4] Rewrite tests into new API + fixes, Petr Vorel
[linux-next:master 6699/7643] security/integrity/evm/evm_crypto.c:40:6: sparse: symbol 'evm_hmac' was not declared. Should it be static?, kbuild test robot
- [RFC PATCH linux-next] evm: evm_hmac can be static, kbuild test robot
  - Re: [RFC PATCH linux-next] evm: evm_hmac can be static, Mimi Zohar
Re: [PATCH 1/1] efi/libstub: tpm: zero initialize pointer variables for mixed mode, Javier Martinez Canillas
[PATCH] tpm: add tpm_calc_ordinal_duration wrapper, Tomas Winkler
[PATCH v3 0/6] add integrity and security to TPM2 transactions, James Bottomley
- [PATCH v3 1/6] tpm-buf: create new functions for handling TPM buffers, James Bottomley
  - Re: [PATCH v3 1/6] tpm-buf: create new functions for handling TPM buffers, J Freyensee
    - Re: [PATCH v3 1/6] tpm-buf: create new functions for handling TPM buffers, James Bottomley
      - Re: [PATCH v3 1/6] tpm-buf: create new functions for handling TPM buffers, J Freyensee
  - Re: [PATCH v3 1/6] tpm-buf: create new functions for handling TPM buffers, Jarkko Sakkinen
    - Re: [PATCH v3 1/6] tpm-buf: create new functions for handling TPM buffers, Jarkko Sakkinen
- [PATCH v3 2/6] tpm2-sessions: Add full HMAC and encrypt/decrypt session handling, James Bottomley
- [PATCH v3 3/6] tpm2: add hmac checks to tpm2_pcr_extend(), James Bottomley
- [PATCH v3 4/6] tpm2: add session encryption protection to tpm2_get_random(), James Bottomley
- [PATCH v3 5/6] trusted keys: Add session encryption protection to the seal/unseal path, James Bottomley
- [PATCH v3 6/6] tpm2-sessions: NOT FOR COMMITTING add sessions testing, James Bottomley
- Re: [PATCH v3 0/6] add integrity and security to TPM2 transactions, Jarkko Sakkinen
  - Re: [PATCH v3 0/6] add integrity and security to TPM2 transactions, James Bottomley
    - Re: [PATCH v3 0/6] add integrity and security to TPM2 transactions, Jarkko Sakkinen
[PATCH] tpm: allow TCPA log area to be empty, Jarkko Sakkinen
- Re: [PATCH] tpm: allow TCPA log area to be empty, Jarkko Sakkinen
- Re: [PATCH] tpm: allow TCPA log area to be empty, Jason Gunthorpe
  - Re: [PATCH] tpm: allow TCPA log area to be empty, Jarkko Sakkinen
    - Re: [PATCH] tpm: allow TCPA log area to be empty, Jason Gunthorpe
      - Re: [PATCH] tpm: allow TCPA log area to be empty, Jarkko Sakkinen
        
        Re: [PATCH] tpm: allow TCPA log area to be empty, Sahil Rihan
        
        Re: [PATCH] tpm: allow TCPA log area to be empty, Jarkko Sakkinen
        
        Re: [PATCH] tpm: allow TCPA log area to be empty, Sahil Rihan
        
        Re: [PATCH] tpm: allow TCPA log area to be empty, Jarkko Sakkinen
        
        Re: [PATCH] tpm: allow TCPA log area to be empty, Sahil Rihan
[PATCH 3/5 V3] tpm2: add longer timeouts for creation commands., Tomas Winkler
- Re: [PATCH 3/5 V3] tpm2: add longer timeouts for creation commands., Jarkko Sakkinen
[PATCH v2 0/8] tpm: factor out tpm1 code into tpm1-cmd.c, Tomas Winkler
- [PATCH v2 1/8] tpm: move tpm1_pcr_extend to tpm1-cmd.c, Tomas Winkler
  - Re: [PATCH v2 1/8] tpm: move tpm1_pcr_extend to tpm1-cmd.c, Jarkko Sakkinen
- [PATCH v2 5/8] tpm: factor out tpm1 pm suspend flow into tpm1-cmd.c, Tomas Winkler
  - Re: [PATCH v2 5/8] tpm: factor out tpm1 pm suspend flow into tpm1-cmd.c, Jarkko Sakkinen
- [PATCH v2 7/8] tpm: Move pcr extend to tpm2-cmd.c, Tomas Winkler
  - Re: [PATCH v2 7/8] tpm: Move pcr extend to tpm2-cmd.c, Jarkko Sakkinen
    - RE: [PATCH v2 7/8] tpm: Move pcr extend to tpm2-cmd.c, Winkler, Tomas
      - Re: [PATCH v2 7/8] tpm: Move pcr extend to tpm2-cmd.c, Jarkko Sakkinen
- [PATCH v2 6/8] tpm: factor out tpm_startup function, Tomas Winkler
  - Re: [PATCH v2 6/8] tpm: factor out tpm_startup function, Jarkko Sakkinen
- [PATCH v2 8/8] tpm: move tpm2 code validation to tpm2-space.c, Tomas Winkler
  - Re: [PATCH v2 8/8] tpm: move tpm2 code validation to tpm2-space.c, Jarkko Sakkinen
- [PATCH v2 3/8] tpm: factor out tpm1_get_random into tpm1-cmd.c, Tomas Winkler
  - Re: [PATCH v2 3/8] tpm: factor out tpm1_get_random into tpm1-cmd.c, Jarkko Sakkinen
    - RE: [PATCH v2 3/8] tpm: factor out tpm1_get_random into tpm1-cmd.c, Winkler, Tomas
      - Re: [PATCH v2 3/8] tpm: factor out tpm1_get_random into tpm1-cmd.c, Jarkko Sakkinen
- [PATCH v2 4/8] tpm: move tpm1 selftest code from tpm-interface tpm1-cmd.c, Tomas Winkler
  - Re: [PATCH v2 4/8] tpm: move tpm1 selftest code from tpm-interface tpm1-cmd.c, Jarkko Sakkinen
- [PATCH v2 2/8] tpm: move tpm_getcap to tpm1-cmd.c, Tomas Winkler
  - Re: [PATCH v2 2/8] tpm: move tpm_getcap to tpm1-cmd.c, Jarkko Sakkinen
- Re: [PATCH v2 0/8] tpm: factor out tpm1 code into tpm1-cmd.c, Jarkko Sakkinen
  - RE: [PATCH v2 0/8] tpm: factor out tpm1 code into tpm1-cmd.c, Winkler, Tomas
    - Re: [PATCH v2 0/8] tpm: factor out tpm1 code into tpm1-cmd.c, Jarkko Sakkinen
[5/5 V3] tpm: factor out tpm_get_timeouts, Tomas Winkler
[RFC PATCH v2 0/3] ima: namespacing IMA, Stefan Berger
- [RFC PATCH v2 1/3] ima: extend clone() with IMA namespace support, Stefan Berger
  - Re: [RFC PATCH v2 1/3] ima: extend clone() with IMA namespace support, Eric W. Biederman
    - Re: [RFC PATCH v2 1/3] ima: extend clone() with IMA namespace support, Stefan Berger
      - Re: [RFC PATCH v2 1/3] ima: extend clone() with IMA namespace support, James Bottomley
        
        Re: [RFC PATCH v2 1/3] ima: extend clone() with IMA namespace support, Stefan Berger
        
        Re: [RFC PATCH v2 1/3] ima: extend clone() with IMA namespace support, James Bottomley
        
        Re: [RFC PATCH v2 1/3] ima: extend clone() with IMA namespace support, Stefan Berger
        
        Re: [RFC PATCH v2 1/3] ima: extend clone() with IMA namespace support, James Bottomley
        
        Re: [RFC PATCH v2 1/3] ima: extend clone() with IMA namespace support, Stefan Berger
        
        Re: [RFC PATCH v2 1/3] ima: extend clone() with IMA namespace support, Eric W. Biederman
        
        Re: [RFC PATCH v2 1/3] ima: extend clone() with IMA namespace support, Stefan Berger
        
        Re: [RFC PATCH v2 1/3] ima: extend clone() with IMA namespace support, Eric W. Biederman
        
        Re: [RFC PATCH v2 1/3] ima: extend clone() with IMA namespace support, Mimi Zohar
        
        Re: [RFC PATCH v2 1/3] ima: extend clone() with IMA namespace support, Stefan Berger
        
        Re: [RFC PATCH v2 1/3] ima: extend clone() with IMA namespace support, Stefan Berger
- [RFC PATCH v2 3/3] ima: mamespace audit status flags, Stefan Berger
- [RFC PATCH v2 2/3] ima: Add ns_status for storing namespaced iint data, Stefan Berger
[PATCH v2] exec: Set file unwritable before LSM check, Kees Cook
- Re: [PATCH v2] exec: Set file unwritable before LSM check, Linus Torvalds
  - Re: [PATCH v2] exec: Set file unwritable before LSM check, Kees Cook
    - Re: [PATCH v2] exec: Set file unwritable before LSM check, Mimi Zohar
- Re: [PATCH v2] exec: Set file unwritable before LSM check, James Morris
- Re: [PATCH v2] exec: Set file unwritable before LSM check, James Morris
[PATCH] exec: Set file unwritable before LSM check, Kees Cook
- Re: [PATCH] exec: Set file unwritable before LSM check, Linus Torvalds
[PATCH v2 1/3] certs: define a trusted platform keyring, Nayna Jain
- [PATCH v2 3/3] ima: support platform keyring for kernel appraisal, Nayna Jain
  - Re: [PATCH v2 3/3] ima: support platform keyring for kernel appraisal, Mimi Zohar
- [PATCH v2 2/3] keys: export find_keyring_by_name(), Nayna Jain
  - Re: [PATCH v2 2/3] keys: export find_keyring_by_name(), Mimi Zohar
- Re: [PATCH v2 1/3] certs: define a trusted platform keyring, Mimi Zohar
[PATCH v3] ima: drop vla in ima_audit_measurement(), Tycho Andersen
- Re: [PATCH v3] ima: drop vla in ima_audit_measurement(), Mimi Zohar
[PATCH v2] ima: drop vla in ima_audit_measurement(), Tycho Andersen
- Re: [PATCH v2] ima: drop vla in ima_audit_measurement(), Mimi Zohar
  - Re: [PATCH v2] ima: drop vla in ima_audit_measurement(), Tycho Andersen
    - Re: [PATCH v2] ima: drop vla in ima_audit_measurement(), Mimi Zohar
      - Re: [PATCH v2] ima: drop vla in ima_audit_measurement(), Tycho Andersen
        
        Re: [PATCH v2] ima: drop vla in ima_audit_measurement(), Mimi Zohar
[PATCH v3 0/4] unverifiable file signatures, Mimi Zohar
- [PATCH v3 1/4] ima: fail file signature verification on non-init mounted filesystems, Mimi Zohar
  - Re: [PATCH v3 1/4] ima: fail file signature verification on non-init mounted filesystems, Serge E. Hallyn
    - Re: [PATCH v3 1/4] ima: fail file signature verification on non-init mounted filesystems, Serge E. Hallyn
  - Re: [PATCH v3 1/4] ima: fail file signature verification on non-init mounted filesystems, Eric W. Biederman
- [PATCH v3 2/4] ima: re-evaluate files on privileged mounted filesystems, Mimi Zohar
  - Re: [PATCH v3 2/4] ima: re-evaluate files on privileged mounted filesystems, Serge E. Hallyn
  - Re: [PATCH v3 2/4] ima: re-evaluate files on privileged mounted filesystems, Eric W. Biederman
- [PATCH v3 3/4] ima: fail signature verification based on policy, Mimi Zohar
  - Re: [PATCH v3 3/4] ima: fail signature verification based on policy, Serge E. Hallyn
    - Re: [PATCH v3 3/4] ima: fail signature verification based on policy, Mimi Zohar
  - Re: [PATCH v3 3/4] ima: fail signature verification based on policy, Eric W. Biederman
- [PATCH v3 4/4] fuse: define the filesystem as untrusted, Mimi Zohar
  - Re: [PATCH v3 4/4] fuse: define the filesystem as untrusted, Serge E. Hallyn
    - Re: [PATCH v3 4/4] fuse: define the filesystem as untrusted, Stefan Berger
      - Re: [PATCH v3 4/4] fuse: define the filesystem as untrusted, Serge E. Hallyn
        
        Re: [PATCH v3 4/4] fuse: define the filesystem as untrusted, Stefan Berger
  - Re: [PATCH v3 4/4] fuse: define the filesystem as untrusted, Eric W. Biederman
    - Re: [PATCH v3 4/4] fuse: define the filesystem as untrusted, Mimi Zohar
  - Re: [PATCH v3 4/4] fuse: define the filesystem as untrusted, Stef Bon
    - Re: [PATCH v3 4/4] fuse: define the filesystem as untrusted, Mimi Zohar
      - Re: [PATCH v3 4/4] fuse: define the filesystem as untrusted, Eric W. Biederman
        
        Re: [PATCH v3 4/4] fuse: define the filesystem as untrusted, Mimi Zohar
        
        Re: [PATCH v3 4/4] fuse: define the filesystem as untrusted, Chuck Lever
        
        Re: [PATCH v3 4/4] fuse: define the filesystem as untrusted, Eric W. Biederman
        
        Re: [PATCH v3 4/4] fuse: define the filesystem as untrusted, Chuck Lever
        
        Re: [PATCH v3 4/4] fuse: define the filesystem as untrusted, Eric W. Biederman
        
        Re: [PATCH v3 4/4] fuse: define the filesystem as untrusted, Michael Halcrow
        
        Re: [PATCH v3 4/4] fuse: define the filesystem as untrusted, Mimi Zohar
        
        Re: [PATCH v3 4/4] fuse: define the filesystem as untrusted, Stef Bon
        
        Re: [PATCH v3 4/4] fuse: define the filesystem as untrusted, Chuck Lever
        
        Re: [PATCH v3 4/4] fuse: define the filesystem as untrusted, Mimi Zohar
- Re: [PATCH v3 0/4] unverifiable file signatures, Eric W. Biederman
  - Re: [PATCH v3 0/4] unverifiable file signatures, Mimi Zohar
[PATCH] ima: drop vla in ima_audit_measurement(), Tycho Andersen
- Re: [PATCH] ima: drop vla in ima_audit_measurement(), Andy Shevchenko
  - Re: [PATCH] ima: drop vla in ima_audit_measurement(), Tycho Andersen
    - Re: [PATCH] ima: drop vla in ima_audit_measurement(), Mimi Zohar
      - Re: [PATCH] ima: drop vla in ima_audit_measurement(), Tycho Andersen
        
        Re: [PATCH] ima: drop vla in ima_audit_measurement(), Mimi Zohar
        
        Re: [PATCH] ima: drop vla in ima_audit_measurement(), Tycho Andersen
        
        Re: [PATCH] ima: drop vla in ima_audit_measurement(), Mimi Zohar
[RFC 0/5] add integrity and security to TPM2 transactions, James Bottomley
- [RFC v2 1/5] tpm-buf: create new functions for handling TPM buffers, James Bottomley
- [RFC v2 2/5] tpm2-sessions: Add full HMAC and encrypt/decrypt session handling, James Bottomley
- [RFC v2 3/5] tpm2: add hmac checks to tpm2_pcr_extend(), James Bottomley
- [RFC v2 4/5] tpm2: add session encryption protection to tpm2_get_random(), James Bottomley
- [RFC v2 5/5] tpm2-sessions: NOT FOR COMMITTING add sessions testing, James Bottomley
- Re: [RFC 0/5] add integrity and security to TPM2 transactions, Jarkko Sakkinen
  - Re: [RFC 0/5] add integrity and security to TPM2 transactions, James Bottomley
    - Re: [RFC 0/5] add integrity and security to TPM2 transactions, Jarkko Sakkinen
[PATCH] security: Fix IMA Kconfig for dependencies on ARM64, Jiandi An
- Re: [PATCH] security: Fix IMA Kconfig for dependencies on ARM64, Jason Gunthorpe
  - Re: [PATCH] security: Fix IMA Kconfig for dependencies on ARM64, Mimi Zohar
    - Re: [PATCH] security: Fix IMA Kconfig for dependencies on ARM64, James Bottomley
      - Re: [PATCH] security: Fix IMA Kconfig for dependencies on ARM64, Mimi Zohar
        
        Re: [PATCH] security: Fix IMA Kconfig for dependencies on ARM64, James Bottomley
        
        Re: [PATCH] security: Fix IMA Kconfig for dependencies on ARM64, Jiandi An
        
        Re: [PATCH] security: Fix IMA Kconfig for dependencies on ARM64, James Bottomley
        
        Re: [PATCH] security: Fix IMA Kconfig for dependencies on ARM64, Mimi Zohar
        
        Re: [PATCH] security: Fix IMA Kconfig for dependencies on ARM64, Jiandi An
        
        Re: [PATCH] security: Fix IMA Kconfig for dependencies on ARM64, Mimi Zohar
        
        Re: [PATCH] security: Fix IMA Kconfig for dependencies on ARM64, James Bottomley
        
        Re: [PATCH] security: Fix IMA Kconfig for dependencies on ARM64, Mimi Zohar
        
        Re: [PATCH] security: Fix IMA Kconfig for dependencies on ARM64, Jason Gunthorpe
        
        Re: [PATCH] security: Fix IMA Kconfig for dependencies on ARM64, Mimi Zohar
        
        Re: [PATCH] security: Fix IMA Kconfig for dependencies on ARM64, Jason Gunthorpe
        
        Re: [PATCH] security: Fix IMA Kconfig for dependencies on ARM64, Mimi Zohar
        
        Re: [PATCH] security: Fix IMA Kconfig for dependencies on ARM64, James Bottomley
        
        Re: [PATCH] security: Fix IMA Kconfig for dependencies on ARM64, Mimi Zohar
        
        Re: [PATCH] security: Fix IMA Kconfig for dependencies on ARM64, James Bottomley
        
        [PATCH] security: Fix IMA Kconfig for dependencies on ARM64, Safford, David (GE Global Research, US)
        
        Re: [PATCH] security: Fix IMA Kconfig for dependencies on ARM64, James Bottomley
        
        Re: [PATCH] security: Fix IMA Kconfig for dependencies on ARM64, Mimi Zohar
        
        Re: [PATCH] security: Fix IMA Kconfig for dependencies on ARM64, James Bottomley
        
        Re: [PATCH] security: Fix IMA Kconfig for dependencies on ARM64, Mimi Zohar
        
        Re: [PATCH] security: Fix IMA Kconfig for dependencies on ARM64, James Bottomley
        
        Re: [PATCH] security: Fix IMA Kconfig for dependencies on ARM64, Mimi Zohar
        
        Re: [PATCH] security: Fix IMA Kconfig for dependencies on ARM64, James Bottomley
        
        Re: [PATCH] security: Fix IMA Kconfig for dependencies on ARM64, Mimi Zohar
- Re: [PATCH] security: Fix IMA Kconfig for dependencies on ARM64, Mimi Zohar
Regression from efi: call get_event_log before ExitBootServices, Jeremy Cline
- Re: Regression from efi: call get_event_log before ExitBootServices, Thiebaud Weksteen
  - Re: Regression from efi: call get_event_log before ExitBootServices, Hans de Goede
    - Re: Regression from efi: call get_event_log before ExitBootServices, Javier Martinez Canillas
  - Message not available
    - Re: Regression from efi: call get_event_log before ExitBootServices, Thiebaud Weksteen
      - Re: Regression from efi: call get_event_log before ExitBootServices, Jeremy Cline
- Message not available
  - Message not available
    - Message not available
      - Message not available
        
        Re: Regression from efi: call get_event_log before ExitBootServices, Hans de Goede
        
        Re: Regression from efi: call get_event_log before ExitBootServices, Jeremy Cline
        
        Re: Regression from efi: call get_event_log before ExitBootServices, Hans de Goede
        
        Re: Regression from efi: call get_event_log before ExitBootServices, Thiebaud Weksteen
        
        Re: Regression from efi: call get_event_log before ExitBootServices, Jeremy Cline
        
        Re: Regression from efi: call get_event_log before ExitBootServices, Thiebaud Weksteen
        
        Re: Regression from efi: call get_event_log before ExitBootServices, Jarkko Sakkinen
        
        Re: Regression from efi: call get_event_log before ExitBootServices, Paul Menzel
        
        Re: Regression from efi: call get_event_log before ExitBootServices, Jarkko Sakkinen
        
        Re: Regression from efi: call get_event_log before ExitBootServices, Ard Biesheuvel
        
        Re: Regression from efi: call get_event_log before ExitBootServices, Jeremy Cline
        
        Re: Regression from efi: call get_event_log before ExitBootServices, Ard Biesheuvel
        
        Re: Regression from efi: call get_event_log before ExitBootServices, Jeremy Cline
        
        Re: Regression from efi: call get_event_log before ExitBootServices, Ard Biesheuvel
        
        Re: Regression from efi: call get_event_log before ExitBootServices, Thiebaud Weksteen
        
        Re: Regression from efi: call get_event_log before ExitBootServices, Jeremy Cline
        
        Re: Regression from efi: call get_event_log before ExitBootServices, Thiebaud Weksteen
        
        Re: Regression from efi: call get_event_log before ExitBootServices, Ard Biesheuvel
        
        Re: Regression from efi: call get_event_log before ExitBootServices, Thiebaud Weksteen
        
        Re: Regression from efi: call get_event_log before ExitBootServices, Hans de Goede
        
        Re: Regression from efi: call get_event_log before ExitBootServices, Jeremy Cline
        
        Re: Regression from efi: call get_event_log before ExitBootServices, Hans de Goede
        
        Re: Regression from efi: call get_event_log before ExitBootServices, Ard Biesheuvel
        
        Re: Regression from efi: call get_event_log before ExitBootServices, Ard Biesheuvel
        
        Re: Regression from efi: call get_event_log before ExitBootServices, Thiebaud Weksteen
        
        Re: Regression from efi: call get_event_log before ExitBootServices, Ard Biesheuvel
        
        Re: Regression from efi: call get_event_log before ExitBootServices, Jeremy Cline
        
        Re: Regression from efi: call get_event_log before ExitBootServices, Ard Biesheuvel
        
        Re: Regression from efi: call get_event_log before ExitBootServices, Thiebaud Weksteen
        
        Re: Regression from efi: call get_event_log before ExitBootServices, Andy Shevchenko
        
        Re: Regression from efi: call get_event_log before ExitBootServices, Jeremy Cline
        
        Re: Regression from efi: call get_event_log before ExitBootServices, James Bottomley
- <Possible follow-ups>
- Re: Regression from efi: call get_event_log before ExitBootServices, Thiebaud Weksteen
- Re: Regression from efi: call get_event_log before ExitBootServices, Thiebaud Weksteen
[PATCH V2] tpm_crb: use __le64 annotated variable for response buffer address, Tomas Winkler
- Re: [PATCH V2] tpm_crb: use __le64 annotated variable for response buffer address, Jarkko Sakkinen
- Re: [PATCH V2] tpm_crb: use __le64 annotated variable for response buffer address, Jarkko Sakkinen
[PATCH 0/4] tpm: factor out tpm1 code into tpm1-cmd.c, Tomas Winkler
- [PATCH 4/4] tpm: move tpm1 selftest code from tpm-interface tpm1-cmd.c, Tomas Winkler
  - Re: [PATCH 4/4] tpm: move tpm1 selftest code from tpm-interface tpm1-cmd.c, Jarkko Sakkinen
- [PATCH 2/4] tmp: move tpm_getcap to tpm1-cmd.c, Tomas Winkler
- [PATCH 3/4] tmp: factor out tpm1_get_random into tpm1-cmd.c, Tomas Winkler
  - Re: [PATCH 3/4] tmp: factor out tpm1_get_random into tpm1-cmd.c, Jarkko Sakkinen
    - RE: [PATCH 3/4] tmp: factor out tpm1_get_random into tpm1-cmd.c, Winkler, Tomas
      - Re: [PATCH 3/4] tmp: factor out tpm1_get_random into tpm1-cmd.c, Jarkko Sakkinen
- [PATCH 1/4] tmp: move tpm1_pcr_extend to tpm1-cmd.c, Tomas Winkler
[PATCH 0/5 V2] tpm: timeouts revamp, Tomas Winkler
- [PATCH 5/5 V2] tmp: factor out tpm_get_timeouts, Tomas Winkler
- [PATCH 4/5 V2] tpm2: add new tpm2 commands according to TCG 1.36, Tomas Winkler
- [PATCH 2/5 V2] tpm: factor out tpm 1.2 duration calculation to tpm1-cmd.c, Tomas Winkler
- [PATCH 3/5 V2] tpm2: add longer timeouts for creation commands., Tomas Winkler
  - Re: [PATCH 3/5 V2] tpm2: add longer timeouts for creation commands., Jarkko Sakkinen
    - RE: [PATCH 3/5 V2] tpm2: add longer timeouts for creation commands., Winkler, Tomas
      - Re: [PATCH 3/5 V2] tpm2: add longer timeouts for creation commands., Jarkko Sakkinen
- [PATCH 1/5 V2] tpm: sort objects in the Makefile, Tomas Winkler
- Re: [PATCH 0/5 V2] tpm: timeouts revamp, Jarkko Sakkinen
  - Re: [PATCH 0/5 V2] tpm: timeouts revamp, Javier Martinez Canillas
    - Re: [PATCH 0/5 V2] tpm: timeouts revamp, Jarkko Sakkinen
      - RE: [PATCH 0/5 V2] tpm: timeouts revamp, Winkler, Tomas
      - Re: [PATCH 0/5 V2] tpm: timeouts revamp, Ken Goldman
    - RE: [PATCH 0/5 V2] tpm: timeouts revamp, Winkler, Tomas
  - Re: [PATCH 0/5 V2] tpm: timeouts revamp, Ken Goldman
[PATCH 0/6] tpm: timeouts revamp, Tomas Winkler
- [PATCH 6/6] tpm: tpm-interface: drop unused tpm_input_header headers., Tomas Winkler
- [PATCH 5/6] tmp: factor out tpm_get_timeouts, Tomas Winkler
- [PATCH 4/6] tpm2: add new tpm2 commands according to TCG 1.36, Tomas Winkler
- [PATCH 3/6] tpm2: add longer timeouts for creation commands., Tomas Winkler
- [PATCH 2/6] tpm: factor out tpm 1.2 duration calculation to tpm1-cmd.c, Tomas Winkler
  - Re: [PATCH 2/6] tpm: factor out tpm 1.2 duration calculation to tpm1-cmd.c, Jarkko Sakkinen
    - RE: [PATCH 2/6] tpm: factor out tpm 1.2 duration calculation to tpm1-cmd.c, Winkler, Tomas
      - Re: [PATCH 2/6] tpm: factor out tpm 1.2 duration calculation to tpm1-cmd.c, Jarkko Sakkinen
- [PATCH 1/6] tpm: sort objects in the Makefile, Tomas Winkler
  - Re: [PATCH 1/6] tpm: sort objects in the Makefile, Jason Gunthorpe
    - RE: [PATCH 1/6] tpm: sort objects in the Makefile, Winkler, Tomas
      - Re: [PATCH 1/6] tpm: sort objects in the Makefile, Jason Gunthorpe
        
        RE: [PATCH 1/6] tpm: sort objects in the Makefile, Winkler, Tomas
[PATCH v3 0/5] Migrate all TPM 2.0 commands to use struct tpm_buf, Jarkko Sakkinen
- [PATCH v3 5/5] tpm: migrate tpm2_get_random() to use struct tpm_buf, Jarkko Sakkinen
- [PATCH v3 4/5] tpm: migrate tpm2_get_tpm_pt() to use struct tpm_buf, Jarkko Sakkinen
- [PATCH v3 3/5] tpm: migrate tpm2_probe() to use struct tpm_buf, Jarkko Sakkinen
  - Re: [PATCH v3 3/5] tpm: migrate tpm2_probe() to use struct tpm_buf, Mimi Zohar
    - Re: [PATCH v3 3/5] tpm: migrate tpm2_probe() to use struct tpm_buf, Jarkko Sakkinen
      - Re: [PATCH v3 3/5] tpm: migrate tpm2_probe() to use struct tpm_buf, Mimi Zohar
        
        Re: [PATCH v3 3/5] tpm: migrate tpm2_probe() to use struct tpm_buf, Jarkko Sakkinen
  - Re: [PATCH v3 3/5] tpm: migrate tpm2_probe() to use struct tpm_buf, Jarkko Sakkinen

[Index of Archives] [Linux Kernel] [Linux Kernel Hardening] [Linux NFS] [Linux NILFS] [Linux USB Devel] [Video for Linux] [Linux SCSI] [Yosemite Forum]