Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S932688AbcCHPst (ORCPT ); Tue, 8 Mar 2016 10:48:49 -0500 Received: from lan.nucleusys.com ([92.247.61.126]:35390 "EHLO zztop.nucleusys.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S1754138AbcCHPsm (ORCPT ); Tue, 8 Mar 2016 10:48:42 -0500 Date: Tue, 8 Mar 2016 17:48:38 +0200 From: Petko Manolov To: David Howells Cc: Mimi Zohar , linux-security-module@vger.kernel.org, keyrings@vger.kernel.org, linux-kernel@vger.kernel.org Subject: Re: [RFC PATCH 12/12] IMA: Use the the system trusted keyrings instead of .ima_mok [ver #2] Message-ID: <20160308154838.GG2243@p310> Mail-Followup-To: David Howells , Mimi Zohar , linux-security-module@vger.kernel.org, keyrings@vger.kernel.org, linux-kernel@vger.kernel.org References: <20160308141429.GC2243@p310> <1457403993.5321.33.camel@linux.vnet.ibm.com> <20160304150022.17121.34501.stgit@warthog.procyon.org.uk> <20160304150149.17121.31855.stgit@warthog.procyon.org.uk> <30481.1457442516@warthog.procyon.org.uk> <487.1457448264@warthog.procyon.org.uk> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <487.1457448264@warthog.procyon.org.uk> User-Agent: Mutt/1.5.24 (2015-08-30) X-Spam-Score: -1.0 (-) X-Spam-Report: Spam detection software, running on the system "zztop.nucleusys.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: On 16-03-08 14:44:24, David Howells wrote: > Petko Manolov wrote: > > > I would suggest leaving (1) and (3). > > Do you mean dropping option (2) and leaving (1) and (3)? Or do you mean > dropping options (1) and (3)? [...] Content analysis details: (-1.0 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP 0.0 TVD_RCVD_IP Message was received from an IP address Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 359 Lines: 14 On 16-03-08 14:44:24, David Howells wrote: > Petko Manolov wrote: > > > I would suggest leaving (1) and (3). > > Do you mean dropping option (2) and leaving (1) and (3)? Or do you mean > dropping options (1) and (3)? Dropping option (2) and leaving (1) and (3). (2) is subset of (3) and IMHO adds unnecessary complexity. Petko