Received: by 2002:a25:4158:0:0:0:0:0 with SMTP id o85csp984622yba; Thu, 9 May 2019 08:54:59 -0700 (PDT) X-Google-Smtp-Source: APXvYqzKuaBwFSFRG27DBaakZ5AjraTcrh00ixm25U1gsumDCtOSITk0+o0lYOOQv2gxmpL7dO+j X-Received: by 2002:a17:902:8483:: with SMTP id c3mr5945532plo.19.1557417299150; Thu, 09 May 2019 08:54:59 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1557417299; cv=none; d=google.com; s=arc-20160816; b=BUsSmdmzX+k9HYRVxb/P4pExjQ3gZQ5zsPEMSNUyW9c+6qqazMx+cYAbPU3JsSu7G/ ZP5mWoyBG1yEVjIH27BFBInfpYjgrC0pmXcb2hQDv66gcEgmeKqZD9uW1oB8drLzmEtA nB2T1PdXRVLPb3CTZF9qUBF0uZMUiBJIdQcpNce+auFa1C718yVa04Bt3jY5NjWmrJKd vm6UaS1725Qq+m+cvv3DOcxBVnRVuv4Xii/aYO8u8Es0eruj7jNaTJn4P5PzXdLnnjFP IYHA3ryi9qtksMjA9862apjVmV9g1awvCYouFTdquO046MFYSEqwyBJ72m8Oz+ZyV1Rf 0I5A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:message-id:content-transfer-encoding :mime-version:references:in-reply-to:date:cc:to:from:subject; bh=Aznb9pUBZtLxjZ33Hms+Nso4SNfXMVsCIkHLo+JfDM8=; b=N59lBjhIEKHnVFDg6omLTGjYijGxN/gXPetflLzsSfZe6QLEmlvXhTyrkwnnQulzMb zc4fag5DwCQmcNmXET98c/icHpEbuP1rxe2b1Xo+FZ1lkx0UEoqYdDFvL7FeVlbLODml yezckjZUzX/6q6QRiR1ekvN5fQjKgt+tXEjGm7YR9Krc3vxnVFbeVm0zBfFMRK+CyP2X t5VLqofWC22il37ZFm2ZBks2PI7eqdf3+gQZfQHt31JvtM6ztcl6RpguFdNFenN6mjT+ VteH23w7Vn7RJK3ceBXFzvYEbGyRSfZGj/i9W7CLd9/Bolyl9G8lsqteKSdRfy7ck7BS a6aA== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=ibm.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id h19si3669475pgg.125.2019.05.09.08.54.42; Thu, 09 May 2019 08:54:59 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=ibm.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726632AbfEIPxv (ORCPT + 99 others); Thu, 9 May 2019 11:53:51 -0400 Received: from mx0a-001b2d01.pphosted.com ([148.163.156.1]:52154 "EHLO mx0a-001b2d01.pphosted.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726558AbfEIPxu (ORCPT ); Thu, 9 May 2019 11:53:50 -0400 Received: from pps.filterd (m0098410.ppops.net [127.0.0.1]) by mx0a-001b2d01.pphosted.com (8.16.0.27/8.16.0.27) with SMTP id x49Fq0Xf141808 for ; Thu, 9 May 2019 11:53:49 -0400 Received: from e06smtp02.uk.ibm.com (e06smtp02.uk.ibm.com [195.75.94.98]) by mx0a-001b2d01.pphosted.com with ESMTP id 2scm8dhecj-1 (version=TLSv1.2 cipher=AES256-GCM-SHA384 bits=256 verify=NOT) for ; Thu, 09 May 2019 11:53:49 -0400 Received: from localhost by e06smtp02.uk.ibm.com with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted for from ; Thu, 9 May 2019 16:53:46 +0100 Received: from b06cxnps4075.portsmouth.uk.ibm.com (9.149.109.197) by e06smtp02.uk.ibm.com (192.168.101.132) with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted; (version=TLSv1/SSLv3 cipher=AES256-GCM-SHA384 bits=256/256) Thu, 9 May 2019 16:53:40 +0100 Received: from d06av25.portsmouth.uk.ibm.com (d06av25.portsmouth.uk.ibm.com [9.149.105.61]) by b06cxnps4075.portsmouth.uk.ibm.com (8.14.9/8.14.9/NCO v10.0) with ESMTP id x49Frehq58917042 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Thu, 9 May 2019 15:53:40 GMT Received: from d06av25.portsmouth.uk.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id DE50511C058; Thu, 9 May 2019 15:53:39 +0000 (GMT) Received: from d06av25.portsmouth.uk.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id E438B11C054; Thu, 9 May 2019 15:53:37 +0000 (GMT) Received: from localhost.localdomain (unknown [9.80.95.107]) by d06av25.portsmouth.uk.ibm.com (Postfix) with ESMTP; Thu, 9 May 2019 15:53:37 +0000 (GMT) Subject: Re: [PATCH v10 08/12] ima: Factor xattr_verify() out of ima_appraise_measurement() From: Mimi Zohar To: Thiago Jung Bauermann , linux-integrity@vger.kernel.org Cc: linux-security-module@vger.kernel.org, keyrings@vger.kernel.org, linux-crypto@vger.kernel.org, linuxppc-dev@lists.ozlabs.org, linux-doc@vger.kernel.org, linux-kernel@vger.kernel.org, Dmitry Kasatkin , James Morris , "Serge E. Hallyn" , David Howells , David Woodhouse , Jessica Yu , Herbert Xu , "David S. Miller" , Jonathan Corbet , "AKASHI, Takahiro" Date: Thu, 09 May 2019 11:53:27 -0400 In-Reply-To: <20190418035120.2354-9-bauerman@linux.ibm.com> References: <20190418035120.2354-1-bauerman@linux.ibm.com> <20190418035120.2354-9-bauerman@linux.ibm.com> Content-Type: text/plain; charset="UTF-8" X-Mailer: Evolution 3.20.5 (3.20.5-1.fc24) Mime-Version: 1.0 Content-Transfer-Encoding: 8bit X-TM-AS-GCONF: 00 x-cbid: 19050915-0008-0000-0000-000002E4F7B6 X-IBM-AV-DETECTION: SAVI=unused REMOTE=unused XFE=unused x-cbparentid: 19050915-0009-0000-0000-000022517F01 Message-Id: <1557417207.10635.67.camel@linux.ibm.com> X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:,, definitions=2019-05-09_02:,, signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=942 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1905090091 Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Thu, 2019-04-18 at 00:51 -0300, Thiago Jung Bauermann wrote: > Verify xattr signature in a separate function so that the logic in > ima_appraise_measurement() remains clear when it gains the ability to also > verify an appended module signature. > > The code in the switch statement is unchanged except for having to > dereference the status and cause variables (since they're now pointers), > and fixing the style of a block comment to appease checkpatch. > > Suggested-by: Mimi Zohar > Signed-off-by: Thiago Jung Bauermann Reviewed-by:  Mimi Zohar