Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
From:   Eric Snowberg <eric.snowberg@oracle.com>
To:     torvalds@linux-foundation.org
Cc:     linux-integrity@vger.kernel.org, zohar@linux.ibm.com,
        dmitry.kasatkin@gmail.com, jmorris@namei.org, serge@hallyn.com,
        linux-security-module@vger.kernel.org,
        linux-kernel@vger.kernel.org, john.haxby@oracle.com,
        eric.snowberg@oracle.com
Subject: [PATCH v2 0/1] lockdown: Fix kexec lockdown bypass with ima policy
Date:   Wed, 20 Jul 2022 12:40:26 -0400
Message-Id: <20220720164027.3697950-1-eric.snowberg@oracle.com>
Content-Transfer-Encoding: 8bit
Content-Type: text/plain
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?86St5w6hjPXcTkFIW2N1zdNHB+MaXWtR2mxtQZSDIN14RJHzcuGHOqfHsXQi?=
 =?us-ascii?Q?/M85onk8QUYQANTif4Qxjnfv1juzJ1zDTxFe+05t6/vJ53YddNE6kztEeBlM?=
 =?us-ascii?Q?sFHbUKv0cKUaeTr3Nm5bX1yMPgcJzagMcim3WX6pOZt2CcvatuUmO15XVcSW?=
 =?us-ascii?Q?OmH/3K2Ev+ncaz56qvKZOqVQn6ydtLm5Gid1tnuBi+xtl7cwjh7qiR0VElWT?=
 =?us-ascii?Q?nwaSkNWtY/yti2i905rSUTK8OkBMgupwSjJiOafuvyrHbdxhH7FE7HWL+9UN?=
 =?us-ascii?Q?mDUb0zrJORBAYxqD+aDBXOVMgcCieaGDNLTjwnOWVGcTQ8a0Drp95TIO6bkX?=
 =?us-ascii?Q?YUXglzWUGGRuzd5Wqp1zBy2XE1Jl3P0QTUKjZ4Y8eYG9gKZJyPTVtJlbLkqu?=
 =?us-ascii?Q?Sbjwsto/uqJf+W/HtdWWIqsgHdbgQ8lH5xXVLGHQxGgN4siJPKbbUPeq2mtB?=
 =?us-ascii?Q?hKVyK4hUMkktkVZko94JoC+ROwhPML1XQIJfzY3XrQWoyF2zR19XGqGpGFAW?=
 =?us-ascii?Q?91x/SKWFKvplNemGFBNcNiDTZV9L3q8g/iYVCfv13ajN+Uw9hvDnstOXyUTR?=
 =?us-ascii?Q?uUwxRJxrtSX3+GMIi47g/k0eBBrlrP+DcucLBAVTs80IpABgQXkZ8okKlqv3?=
 =?us-ascii?Q?9jbG2xj5KtBCeJJENJ7MvECIkDCPaERZR86KLlkNTUTD/FZySdSIvwFIZwyd?=
 =?us-ascii?Q?siw9DikJ15kmAZsgkPSDcOCy/pNOaJi7ChmM2AWPNxohZc7pJ4HyW3VXulM0?=
 =?us-ascii?Q?ST4cvV76RWCq05YgbhxbrLB4LUaac9+7WP32QFdcHQtyxF+JmPKBDEpQYUVj?=
 =?us-ascii?Q?t9uMI2+nxjzTPdrDuGxEZ449LukC3BpYmLwLGRMyY6t5T4fU9Seyd9qgFXK4?=
 =?us-ascii?Q?sdtTnkXEEmXiZPcmB9Y7/x+nf1ZtrFPEfY8isnuKufY61tTcMwSspgefBijE?=
 =?us-ascii?Q?L7lhoPE4E/uYXYb5FdQBoIYWoR4Na6EDiv2IDKAFA08FmhbB4WxQdNdULzPc?=
 =?us-ascii?Q?ikUDOIJtf1Y4xnJ79Hg6eimcM4yDowekiLeFPE0Al89kHxYHaZAb5zd6zUTK?=
 =?us-ascii?Q?D2osBDh1Zu01bOrZd/dfR/5wB7RgRfsTXomGAxeJvDgmg7gou2iFOHcBF6hf?=
 =?us-ascii?Q?ox2YCubijd3DTgAoPvczkzS2ETFlfuROp85Ur2D2zJ5WcwSX/gX2mKTZ3kJW?=
 =?us-ascii?Q?5vrPj5q5WxAS4X3YcPgEWFDckO/yYrxP03YXhnys9oGnJYmYLgHrT3xQyBjC?=
 =?us-ascii?Q?NvfApY9Qb5choYL8L/FV7ToIvK3tB74gjc2tk7RkHIL+fERFoXhBWzRB972G?=
 =?us-ascii?Q?d208SiUlazbqH+3gllhDdeDOGg2i4IIXgoGKt0eoFp61IkdQRq55fqQCB+kC?=
 =?us-ascii?Q?Q0NNFR+D5NAwekQARDG/TwLrfC9Er/rQbEb6i22B3UX+1CV45mlxrH7/8JVd?=
 =?us-ascii?Q?tdwVlLbBGeKq8SMwjR+ULV4BAskDBTq+8KHwkMoQZXeJb7EFUUB+PQpvinjA?=
 =?us-ascii?Q?E3Mjs9emhE2PbwPUg5n/A6CdkWk7HmLejtD/5Pjzd7XCthbKrqiGiUzjNpee?=
 =?us-ascii?Q?VIX4s0tEQXr0Tcw0I+2zRI75bixIodjB6FXT94Ut?=
X-OriginatorOrg: oracle.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 611d9783-8776-40d7-4b39-08da6a6e9350
X-MS-Exchange-CrossTenant-AuthSource: CH2PR10MB4150.namprd10.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Jul 2022 16:40:37.8660
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 4e2c6054-71cb-48f1-bd6c-3a9705aca71b
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: OG6zC40TKfP2buvgOBcamA53ionoolYTA0XJA8T6B3QP1mqrkV/jNOKCd5uPAKS7emE0DEEMgbMV/TECvqR7HiowTnTEmnl5Pn4rrbNWU2w=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BLAPR10MB5169
X-Proofpoint-Virus-Version: vendor=baseguard
 engine=ICAP:2.0.205,Aquarius:18.0.883,Hydra:6.0.517,FMLib:17.11.122.1
 definitions=2022-07-20_10,2022-07-20_01,2022-06-22_01
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 mlxlogscore=890 spamscore=0 bulkscore=0
 malwarescore=0 adultscore=0 mlxscore=0 phishscore=0 suspectscore=0
 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2206140000
 definitions=main-2207200068
X-Proofpoint-GUID: WZiXasiDYgfP7Uhlwpd4hx1MfF8GKg3p
X-Proofpoint-ORIG-GUID: WZiXasiDYgfP7Uhlwpd4hx1MfF8GKg3p
X-Spam-Status: No, score=-2.8 required=5.0 tests=BAYES_00,DKIM_SIGNED,
        DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_LOW,
        RCVD_IN_MSPIKE_H2,SPF_HELO_NONE,SPF_NONE autolearn=ham
        autolearn_force=no version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
        lindbergh.monkeyblade.net
Precedence: bulk
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org

Hi Linus,

Please see this patch - which was under embargo until yesterday. Please 
commit it in your tree, or please let me know your preference.

Thanks,

Eric Snowberg (1):
  lockdown: Fix kexec lockdown bypass with ima policy

 security/integrity/ima/ima_policy.c | 4 ++++
 1 file changed, 4 insertions(+)

-- 
2.27.0