Received: by 2002:a05:6a10:af89:0:0:0:0 with SMTP id iu9csp5496729pxb; Wed, 26 Jan 2022 13:25:30 -0800 (PST) X-Google-Smtp-Source: ABdhPJwrKhBYCBboH88yIEWbM71sl/FPMhrsv4MEOWeIvzuqFz9yu9/aXbanCewC4TECAgRxpGhO X-Received: by 2002:a50:fd9a:: with SMTP id o26mr844382edt.33.1643232330511; Wed, 26 Jan 2022 13:25:30 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1643232330; cv=none; d=google.com; s=arc-20160816; b=Npf5BDq/0/v+HpUp2VVA1U5mjYwVs6ZZxVrPsYoBLYnYadvAWyJo2z4zhmTC5T9fcV ry8TaG/UF4R0qVvQLbGc/UBD2LNEAEKz604iqIlIJCEfU4C01oMOunN0j4zKWVeG5u7Y j8dEh2biONI+DikBuJf7gM8PABrVkH2/c3MBlCsHHL+zglHN4+w9mE7JWLXeMnHNxO0B 1kStOFqTo7mS1hPC1iDIFbicA88jwsd4SS1+o4csW/L7zJVAxXLtx75jDEdWBnSF4gxB Iik4nd9UFTyfU7fZw63IiHyZqeSxY5fr1WZq2QkyZcqTa8WuFPuQ3IRbD6feYJ27lQ1D 9mnA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:in-reply-to:content-disposition:mime-version :references:message-id:subject:cc:to:from:date:dkim-signature; bh=hHwWU3XDiTz2GK6zuySXSMAYCkqPYBXv4AHr/IFgENE=; b=g5Lrn67yommKrLzBF5Ul3RXn+Gh5opbmrjVdUAWraLjcVUydywzWX1C/HdFllSMNcO eYR/QZcJK5c7VQfEH3DiQNvgVkNMoS0nmNg636bAkDjpYNncqJOdSlmcfu8OQH/VAxvN tBz6E1t2ubbSK7/GQsks68rtCvRFja6ENFFEVZu928z9I9ItTFmsIpJXCskiN+Pdxn0q xio1vyFK81uuJu9Ea0Gqx0R8p1acq+OHa98U9uXzXNV/Nb8rZpRcGKiLwTN106gDnlwP Bo4Mvp/mdaeb5RTH8O1EOoRYYN5ICBZ8XJYodaH6JUfHCwGHbxOw0T1ni1tVnIUs6a8U uMlA== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@kernel.org header.s=k20201202 header.b=uu+SFkuc; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id sb4si144671ejc.267.2022.01.26.13.25.05; Wed, 26 Jan 2022 13:25:30 -0800 (PST) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@kernel.org header.s=k20201202 header.b=uu+SFkuc; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S241365AbiAZNoj (ORCPT + 99 others); Wed, 26 Jan 2022 08:44:39 -0500 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:47986 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S241171AbiAZNod (ORCPT ); Wed, 26 Jan 2022 08:44:33 -0500 Received: from dfw.source.kernel.org (dfw.source.kernel.org [IPv6:2604:1380:4641:c500::1]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id B36DBC06161C; Wed, 26 Jan 2022 05:44:33 -0800 (PST) Received: from smtp.kernel.org (relay.kernel.org [52.25.139.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by dfw.source.kernel.org (Postfix) with ESMTPS id 507AA61544; Wed, 26 Jan 2022 13:44:33 +0000 (UTC) Received: by smtp.kernel.org (Postfix) with ESMTPSA id 185E0C340E6; Wed, 26 Jan 2022 13:44:27 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=k20201202; t=1643204672; bh=zfxP5+Wosvez8opZyNTaEiUKhegHQ6reguD7EetlXsE=; h=Date:From:To:Cc:Subject:References:In-Reply-To:From; b=uu+SFkucYV/iwHYtDtNfWoOajq7YhwcehNTr+qrrjbzk8TnuF0MxZdSg8JJtUIscJ 8OH8LtMnYbYBL2e+7PGe8m3b6Z5RKuDeKZiZS4PPx5MeoORoKgyW9PoM9LpbbRmqwY MxYcLDnrQSEku1OaOTTIkfSawmkRzR7XjdJG8T/ZYjURiZCHL2q6kgeqj+itUjKXCW ACaxZ2urc0BkqyTLa31j5KwRjUs10FiaiQ5fy5A6XaNDzYoroI4wg5RXbFYGgUCLhV N1zWXeLXI51iF94gw5qBV50xs6lZ/v82GL9Z/F3qe38cMvuiDS4E3D/JCPk6AY+QfV IOSrQOKM3oiEw== Date: Wed, 26 Jan 2022 14:44:25 +0100 From: Christian Brauner To: Stefan Berger Cc: linux-integrity@vger.kernel.org, zohar@linux.ibm.com, serge@hallyn.com, christian.brauner@ubuntu.com, containers@lists.linux.dev, dmitry.kasatkin@gmail.com, ebiederm@xmission.com, krzysztof.struczynski@huawei.com, roberto.sassu@huawei.com, mpeters@redhat.com, lhinds@redhat.com, lsturman@redhat.com, puiterwi@redhat.com, jejb@linux.ibm.com, jamjoom@us.ibm.com, linux-kernel@vger.kernel.org, paul@paul-moore.com, rgb@redhat.com, linux-security-module@vger.kernel.org, jmorris@namei.org, Stefan Berger Subject: Re: [PATCH v9 13/23] ima: Only accept AUDIT rules for non-init_ima_ns namespaces for now Message-ID: <20220126134425.4p7vwqt6myodgzhu@wittgenstein> References: <20220125224645.79319-1-stefanb@linux.vnet.ibm.com> <20220125224645.79319-14-stefanb@linux.vnet.ibm.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: <20220125224645.79319-14-stefanb@linux.vnet.ibm.com> Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Tue, Jan 25, 2022 at 05:46:35PM -0500, Stefan Berger wrote: > From: Stefan Berger > > Only accept AUDIT rules for non-init_ima_ns namespaces rejecting all rules > that require support for measuring, appraisal, and hashing. > > Signed-off-by: Stefan Berger > > --- Okay, seems sensible, Acked-by: Christian Brauner