Re: [RFC v2.1 0/6] evm: digital signature verification extension

From: Kasatkin, Dmitry
Date: Mon Sep 26 2011 - 03:33:55 EST


On Tue, Sep 20, 2011 at 4:24 PM, Mimi Zohar <zohar@xxxxxxxxxxxxxxxxxx> wrote:
> On Tue, 2011-09-13 at 17:20 +0300, Dmitry Kasatkin wrote:
>> Hello,
>>
>> Changes to version 2.0:
>> - MPI patch has been split to smaller in order to go to mailing lists.
>> Â First 2 patches include only source and header files which are needed
>> Â to build ksign verification. Headers and sources are split just to
>> Â meet 100k kernel.org limit.
>> Â Last patch adds all rest soures from original ported MPI library.
>>
>> Changes to version 1.1:
>> - GnuPG MPI library has been refactored with lindent and checkpatch errors
>> Â and warnings has been fixed.
>> - creation of evm keyring has been remove. It is done now in user space.
>> - related ksign and evm patches has been squashed.
>> - patch descriptions has been updated.
>>
>> As EVM patches were recently merged to security-testing-2.6#next,
>> it is a good time to resend evm signature verification patches for active
>> discussion. Last time I forgot --cc linux-crypto. Here it is.
>>
>> This patchset introduces digital signature extensions for the IMA/EVM kernel
>> integrity subsystem and is applied on the top of the EVM patches posted to
>> LSM mailing list earlier.
>
> Hi Herbert
>
> Back in March 2011, in preparation for EVM, Dmitry posted the GnuPG MPI
> library patch here on linux-crypto. The reason given for not upstreaming
> the MPI library, at the time, was for lack of an in kernel user
> (http://www.mail-archive.com/linux-crypto@xxxxxxxxxxxxxxx/msg05613.html).
> With the recent merging of the EVM patches in linux-next, via
> security-testing-2.6/#next, that is changing. ÂAny chance of re-opening
> the discussion?
>
> thanks,
>
> Mimi
>
> --
> To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
> the body of a message to majordomo@xxxxxxxxxxxxxxx
> More majordomo info at Âhttp://vger.kernel.org/majordomo-info.html
>

Hi,

It seems nobody wants to share their thoughts about it?
Does this silence mean acceptance?
Should I prepare final patches for merge?

BR,
Dmitry
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/