Received: by 2002:a5b:505:0:0:0:0:0 with SMTP id o5csp899487ybp; Wed, 9 Oct 2019 06:03:27 -0700 (PDT) X-Google-Smtp-Source: APXvYqzV2kwyiDArhp83bJdEEpY3nUFa92kO0dL0r794kglAK2P8HpXtd27JfXwj008yjHFXXo/n X-Received: by 2002:a50:b966:: with SMTP id m93mr2850272ede.228.1570626207357; Wed, 09 Oct 2019 06:03:27 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1570626207; cv=none; d=google.com; s=arc-20160816; b=Y1Ee7Ssu8Wsan5r66P64BrySSCyXeWBDucOKVar91cv/FiAZmfhHhYzSp7YPJgFBRs z6/c9yWSu0PNb85/kOA9te/rAkAqwORlSNgqzU0uhDA7Wj9vsWgPYQxLT+eUIbhnuJU0 Bsg5K1bsUOr6o7cw+2E7uXajmZPbyccNrfOtDBq5E60HbDuFGDcJvH+Qyp4q2//dvill YwXbDYeZZ3cIsHI301d7ZMJqEwvaaSMnTimgweBEWq0yw9Vq0xYYHThJYvbvje1eKP20 qazW7eHg3gEVNKFpX3dxcLjcAGD374L+aF/Deqb5zwhR1OUd5PP/nKVIhqI1lomoVu5u HNMQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:dkim-signature; bh=6gKyU2lVUG9r8tkVXQwlslVrnGaZcT+vH7d3AbPHYB0=; b=QfVBuAT8DCy+84agncVqow9cRtj4aBfx+/mw4lhWbQAlWFWblL9MkEzBLrtNK+hviE LQzn/aNv3bPZx21EhbHMhTnsCJn6RVqmU1hGEQH+mPQQKubwKgktKwgX7mDOiRbiEHgT s2SSZph4zPDjh2sNy01WpeOz3mcGLqbLBcCwJJv7p7bSsFvVSFJtkJSAmKj8Qh6v3KsE LKmZOXj7WfV3n0bcMrYm6uLhkVIjyBfdlPtwngvXCyW+V7J7+c7FGD85GwZg2EaWLkua 8TxQx1bgTJx89pto7oDCnw4/NWmqcEPS0T/c6qtpa7yMSgupFtRc3Ilnqsez6wAV05K4 nHXw== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@linaro.org header.s=google header.b=GHo82XUA; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=linaro.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id e50si1476391edb.177.2019.10.09.06.02.36; Wed, 09 Oct 2019 06:03:27 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; dkim=pass header.i=@linaro.org header.s=google header.b=GHo82XUA; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=linaro.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1731303AbfJINC2 (ORCPT + 99 others); Wed, 9 Oct 2019 09:02:28 -0400 Received: from mail-wm1-f68.google.com ([209.85.128.68]:55678 "EHLO mail-wm1-f68.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1730901AbfJINC2 (ORCPT ); Wed, 9 Oct 2019 09:02:28 -0400 Received: by mail-wm1-f68.google.com with SMTP id a6so2493986wma.5 for ; Wed, 09 Oct 2019 06:02:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=6gKyU2lVUG9r8tkVXQwlslVrnGaZcT+vH7d3AbPHYB0=; b=GHo82XUApFZmoJ9rbUiaxY0lPH5g1hfz9r8MSUnSI3GN9JdNoZQcA4UQ6OJo1rICO0 qzfEEIaPLpbItb/8PbB0tgtmMY3OvSBeFhFZiL7aO0dIhyWBySy0Gc4iZkpX6vcuzMon Wj//7wE6Nd30Th7JDUX9ivMJk8/CkfEoL9COKkOw/OLGxaSlPBMlO4GEdXfniAHaK+uV ThL1YwwiUvNrQ4RoX+Gkqtnk4np+XvZsHPcUah8iL/Z2af9/saPP/imUSPit0/RkYjkD lCQnoyj1ClCApdV1FAhLZTizqvX7pcIkRlATP26I2RICqhtg4PmooQaeKNBqRXA5MyyA j92g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=6gKyU2lVUG9r8tkVXQwlslVrnGaZcT+vH7d3AbPHYB0=; b=GZDh9BQ9xPARU/mCI9JbiBgCn0fTGJR1rM074yj+WfDmG4UoVJGQJ80+UNSMopooib yz1RewPfwcp1+HbHe7IyvOU/fnwfJQeq1SD7SyyJUWMOZhf/S9Y9ih8no31Hiomlc7nH z/h7ipPOcbykxTqaTlIWlQamtMEQSINHie6QXVuyPI+iR1gOZgK+zkRh/Vj9itj74ikh XWKT49PA6XK1YvSG+yWTSTEKZVdVblPs1X+ct7Fh7kRTBIKe0tTAgm1krARZQjuyV1Mi BKd2BDjVf5qVYschH6OFjPH8QL/1OwfzitfSQegX8EvaHQWYcl5jI8+PT/vH6TfxDarK KsKg== X-Gm-Message-State: APjAAAUDCWm9T6AOH6Mgdd1OwcK9Za7HosZyRr4NF6rJZWqVOs2qvMD2 PHOoFMBbmzvDD26ukWEx4lH1X0EhleGaUZP/wSpZaA== X-Received: by 2002:a7b:cb54:: with SMTP id v20mr2412915wmj.119.1570626144905; Wed, 09 Oct 2019 06:02:24 -0700 (PDT) MIME-Version: 1.0 References: <20191008105510.6975-1-javierm@redhat.com> In-Reply-To: From: Ard Biesheuvel Date: Wed, 9 Oct 2019 15:02:13 +0200 Message-ID: Subject: Re: [PATCH v2] efi/efi_test: lock down /dev/efi_test and require CAP_SYS_ADMIN To: Matthew Garrett Cc: Javier Martinez Canillas , Linux Kernel Mailing List , Ivan Hu , Laszlo Ersek , linux-efi , Laura Abbott , Josh Boyer , Peter Jones , Janne Karhunen , Kees Cook , David Howells , LSM List , Casey Schaufler , Micah Morton , "Steven Rostedt (VMware)" , James Morris , Al Viro , "Serge E. Hallyn" Content-Type: text/plain; charset="UTF-8" Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Wed, 9 Oct 2019 at 04:18, Matthew Garrett wrote: > > On Tue, Oct 8, 2019 at 9:55 PM Javier Martinez Canillas > wrote: > > Signed-off-by: Javier Martinez Canillas > > Acked-by: Laszlo Ersek > > Acked-by: Matthew Garrett Thanks all. Queued as a fix.