Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:18 as permitted sender) client-ip=2620:137:e000::1:18;
From:   Eric Snowberg <eric.snowberg@oracle.com>
To:     Mimi Zohar <zohar@linux.ibm.com>
CC:     "dmitry.kasatkin@gmail.com" <dmitry.kasatkin@gmail.com>,
        "jmorris@namei.org" <jmorris@namei.org>,
        "serge@hallyn.com" <serge@hallyn.com>,
        "linux-integrity@vger.kernel.org" <linux-integrity@vger.kernel.org>,
        "linux-security-module@vger.kernel.org" 
        <linux-security-module@vger.kernel.org>,
        "linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>
Subject: Re: [PATCH] integrity: Allow ima_appraise bootparam to be set when SB
 is enabled
Thread-Topic: [PATCH] integrity: Allow ima_appraise bootparam to be set when
 SB is enabled
Thread-Index: AQHYWPLPxIqFWJSU2kqJxJuFBPKFEq0CghiAgAFvPgA=
Date:   Wed, 27 Apr 2022 16:12:41 +0000
Message-ID: <48467663-5CD6-49C5-B43F-9FA0887D0575@oracle.com>
References: <20220425222120.1998888-1-eric.snowberg@oracle.com>
 <d7ba004bd2ce2a8ce2ff0601b4bca921a5301ece.camel@linux.ibm.com>
In-Reply-To: <d7ba004bd2ce2a8ce2ff0601b4bca921a5301ece.camel@linux.ibm.com>
Accept-Language: en-US
Content-Language: en-US
x-ms-exchange-antispam-messagedata-chunkcount: 2
x-ms-exchange-antispam-messagedata-0: =?utf-8?B?Z1NuejJndU5EdDJpUDJBZTUzM2ZkY09TUE1VRTBpWTRnaXNVVXVhUTFRM2Vz?=
 =?utf-8?B?K0IrbmlSSEt0TjRpOWM4UHBCQTlvK29RVHpLL2x0aUF0QlEzTkovY2t0aitX?=
 =?utf-8?B?ak5aZ3RvZVppcmFJZG96aXBhay9ibHVrQWZqdzhiaHVYOHZ2a1k3akNVMzVh?=
 =?utf-8?B?QlMzekthaWN1anExWTgyb2RlK1FYWmlON3pyMFdMK0lHcTZTSGRLY3E0cE5r?=
 =?utf-8?B?WTJNRGRVU2RET3ZiUWxGYk1VNjE2RlpRSHljWjYyb0JmbzM3Wm1iMG9CUG9t?=
 =?utf-8?B?TTlMOXoxRkNqZTQ4aEhKL2hrSU8yOFd5NHlocm1pVXR5K2R2QU94TUQwSmtU?=
 =?utf-8?B?MFh5Z21CNCtxL01xa05jc2I5TTV5K24ydlNSR1JFekpza2hVL1dqV3RJOVBM?=
 =?utf-8?B?R21ISTlHVkFERndBQkI1QzQ4bzgrd1JBSWp6OXk4bXVvZjFubXhtWXl5WGY4?=
 =?utf-8?B?VDhLRWtyM0JjRExhaEtjVHVNWVVYR0V5TENrbXlncmEzNWVaSEo3YUpaQUJo?=
 =?utf-8?B?LytpczU3WmIwS2NEakRLZy9uYUNJTUdsUG5HeXJyMnhzV2hBdnBXRVN6V3pR?=
 =?utf-8?B?QWpZSWF5NDNwZ0VCd091Y3pDTWZCOFlTS2dvNHMxYTJvR1daVkpZTXBqempF?=
 =?utf-8?B?NldvUkpLckxWOGs4VDBEUmhkZG1peGI1TkFKWVJBYjZ1Tlc0aVRaV3VzNzV3?=
 =?utf-8?B?Q0wyQzg0ek9LNWFjeC9PZjBkYnJNM09DZmZDS3k5bEE2RzNJdEsyK2RlZ0Zu?=
 =?utf-8?B?Zk5YZTczZzBLekZhRm5TU0ZxK0crWStwZm5hMDhSL3Q3NlczMFlJL213M2J3?=
 =?utf-8?B?UVQ5WVBvSnBRUnk2MnJpR3pPa0d2Nmk0Tzh3VlNhRmREZEJIUHJHR21jaUpR?=
 =?utf-8?B?bzdGK1ZCbWNlSDRsL1Bad1ZEeTJOdzNQK0FaYVVUUGs2VVEvMFVSaExyYnJF?=
 =?utf-8?B?ZDl6WTlUaXNYVkFseUdlb3R6TU9CUjBJMHNKQVVqeHhnVzRPdDRTNEtremJP?=
 =?utf-8?B?UCtYMUxFem0wS0Qxbzh5WXVONEVwQ1c0dXc1U0VFYnJqNWFzbUQrdG1WNVNn?=
 =?utf-8?B?ODdOakRaZ2RPR3F2LzdoUC9nbGJ3dVQzc294WE4vZHhWcnFndkxGaFZoaDZK?=
 =?utf-8?B?NXZPSE8vRjB6Qk8wM3BwWTlhaEhFRkZybmZJRGdSOVdPTjhKRGpoYllUUlg5?=
 =?utf-8?B?bFNHYmR2MGdobysvM1h0dEYyRjR2K2Z0ZkdqWHoyc1owdzhaNk9Rcmt1Wmd0?=
 =?utf-8?B?Z2FkUXYyenRJWm5leHVkMVJzbC9NcG83S2wwa0lSMjBvandnWThCaDdmUW52?=
 =?utf-8?B?NG05TkpqNlZaY0FLeUpPaE1vTUtCUlBLZWtIZGgzbjBFRDNVVmRqMzJCMmVs?=
 =?utf-8?B?MXR5djJIck14am5GaWIwM0FGM04vVVRWZ2VEZDhDeVNKMCsvb1kyZzZFNGhI?=
 =?utf-8?B?TTMzc2s4MDJsSHJXbGFPYW5wNjFNczhQTWtpZFRJcFVLK1RlaUc5NEF2a0pt?=
 =?utf-8?B?US8zc2g4eGhlanNEQWpWYnp2aW84cHRpUnI3TDhDdGM4R2QzUnZMdk94TkNl?=
 =?utf-8?B?anZwNGtHVFNRZlc3VTAvb3UwZ1MwWjcwNHBUSXJXcjE0ME9BRkx3M0wrcXMr?=
 =?utf-8?B?K2RiUkVTRWVBVS9kdDVoMHdudjJabUQya1RHZHc3U3IxbDkvdnFMVFJGNENv?=
 =?utf-8?B?NVRzbEMrMnMrb1JobURTbUhZbFI0WEVVYmR1WTJZajR2V1AzcTNqNklsWllK?=
 =?utf-8?B?WGg3Tk9VdzJuREVxUUJwVWt3UFZlK1QxT0tOMGJUSUs5KzUraVNKR2tteStl?=
 =?utf-8?B?U1U5WVR5akxxNmN1T2NOd2lRWlB6Si9jQThFL0J3RUIvbTYxUVlndnlQQm1V?=
 =?utf-8?B?QzltdWx5bmFYRUJGZUFBSUtKaWhLTFhJZ3NBclJqRXZpdDY3YVFNdTIzaStY?=
 =?utf-8?B?WjVWaDlpejJJS0RReDc4bXhhcjhjNUNpOGlaUUJFaXV1dit3UzVjcXljQnVX?=
 =?utf-8?B?RnFiUm8vTmVGTVNxWDU2bHh5bUtHUmU2RjF5QkVvZ2tSMGRNTFgyQ2d1QmdS?=
 =?utf-8?B?ejk4S0VkY3FXTlBOT3pFVVVRZVZKK1IrZ2dXd0RzNVJsTU1xMTIzSG5tK1hE?=
 =?utf-8?B?ZGdYS2FveU5nYmI0NlJaWXQrN1AxTDFsNnduUlVFdCt3b1llTktxbFZwYm5O?=
 =?utf-8?B?ckg0L0lCNGluRC9jbHBhRVdnL0xGRkd4K2pNUDNSVWJsMlgxK1dhNS9BMGto?=
 =?utf-8?B?eUhheVlFN0NoMytsQzhCQ1I3ak1jd0I2VFdQVzFnK1J2Vm9RNXRlZDgzRWlz?=
 =?utf-8?B?TDNjcTBMdWUvd2k3S1U2L1RETThDU1VkYjlZYWY2S1ZRaXo3S05ZTWVJa2tC?=
 =?utf-8?Q?22APGl2waWaN3BRdre6KPa/LhMeoUK7aWyXaCmnzrwn4K?=
x-ms-exchange-antispam-messagedata-1: Zoe2DonthtNQ2w==
Content-Type: text/plain; charset="utf-8"
Content-ID: <7105AD430EE5924A88051975040E2DA8@namprd10.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: oracle.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: CH2PR10MB4150.namprd10.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 73d62f33-c077-4492-28d4-08da2868c194
X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Apr 2022 16:12:41.5456
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 4e2c6054-71cb-48f1-bd6c-3a9705aca71b
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: /Jgy1N8aGTpU3XgiU1mNBbRaDTk2hghkWwTsDCU21R3IjEdbQUD79i3UqhyiAkq279BTVBkavMaeCoCPboeTmrwqNEP3YVMa9yOMJkRBKJ0=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR10MB3514
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.486,18.0.858
 definitions=2022-04-27_04:2022-04-27,2022-04-27 signatures=0
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 spamscore=0 mlxlogscore=999
 malwarescore=0 mlxscore=0 phishscore=0 bulkscore=0 adultscore=0
 suspectscore=0 classifier=spam adjust=0 reason=mlx scancount=1
 engine=8.12.0-2202240000 definitions=main-2204270102
X-Proofpoint-ORIG-GUID: _Zq3ZRzei3fVl53QI0P_fvfuaGEduMvI
X-Proofpoint-GUID: _Zq3ZRzei3fVl53QI0P_fvfuaGEduMvI
X-Spam-Status: No, score=-2.0 required=5.0 tests=BAYES_00,DKIM_SIGNED,
	DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,
	MAILING_LIST_MULTI,RDNS_NONE,SPF_HELO_NONE autolearn=no
	autolearn_force=no version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
	lindbergh.monkeyblade.net
Precedence: bulk
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org
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