Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
From:   Eric Snowberg <eric.snowberg@oracle.com>
To:     Mimi Zohar <zohar@linux.ibm.com>
CC:     "dmitry.kasatkin@gmail.com" <dmitry.kasatkin@gmail.com>,
        "paul@paul-moore.com" <paul@paul-moore.com>,
        "jmorris@namei.org" <jmorris@namei.org>,
        "serge@hallyn.com" <serge@hallyn.com>,
        Roberto Sassu <roberto.sassu@huawei.com>,
        Kanth Ghatraju <kanth.ghatraju@oracle.com>,
        Konrad Wilk <konrad.wilk@oracle.com>,
        "linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>,
        "linux-integrity@vger.kernel.org" <linux-integrity@vger.kernel.org>,
        "linux-security-module@vger.kernel.org" 
        <linux-security-module@vger.kernel.org>
Subject: Re: [PATCH v2] integrity: Always reference the blacklist keyring with
 apprasial
Thread-Topic: [PATCH v2] integrity: Always reference the blacklist keyring
 with apprasial
Thread-Index: AQHZr5QIRPDFbi04j06G9JzJQhYIyq+2cMKAgAA7PoA=
Date:   Wed, 12 Jul 2023 21:12:36 +0000
Message-ID: <A9725ECB-0811-42BD-8586-7DF7A8BD7393@oracle.com>
References: <20230705225229.1435691-1-eric.snowberg@oracle.com>
 <6173db54e3d75481a6b1f1079c5b06e1c1caf564.camel@linux.ibm.com>
In-Reply-To: <6173db54e3d75481a6b1f1079c5b06e1c1caf564.camel@linux.ibm.com>
Accept-Language: en-US
Content-Language: en-US
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: =?utf-8?B?RlNlb2U3YzgrbGZJM1gxWWpDY0ZObFVIODhjUWloTUpVNlkzSWtlaEZlaktL?=
 =?utf-8?B?RkQzNytXTEVIN2RwMzQ0amRFYWphQUE4UG9pSlBTOEkyc3FoajNIRklSZ29U?=
 =?utf-8?B?T3V2dC9YVzdNKy8rQWpvVVJ4YVdici9QQW12NnV1a1ZxUGw5NXUzRllwaEUz?=
 =?utf-8?B?K25WSFp6dEYwVHRYUGdGa1pTZEpzQTYrTTNMeHE0MEhhVVplaUZqSC9mTVJZ?=
 =?utf-8?B?Y1BzVDhmUGViajF3cm0rSHRGeWtKcG1iUEIwanhPaThxTEpjaUhmL3UvQlhO?=
 =?utf-8?B?bG1OMk5uL0E1alVFMUdXaFVpTlVVNUlkMGxTanZKU3NyNStFV2hjbm9rZjFa?=
 =?utf-8?B?N3RKV3k3M21MUFZVWEVnZWNvVWFCUllCcE40NUtMbW0wd1RjZ2ZxdlhadVRM?=
 =?utf-8?B?QXNUTGdqQnU4QjRjenA1RG9yY3pmN0hYNXpzdlM1N3huZkYvOXpIQm85bnJ0?=
 =?utf-8?B?MVZvcXNIYkw1c2pMMkFCTEgrQWw5eEtjUllYUlFqUnRxYWw2TUFHRmRoajUr?=
 =?utf-8?B?WmNYL2g0bjdEcTU4WGdXNUN3OHVjM1RaN0dMTFVENFFxc2liZHZCTGNUM2Rl?=
 =?utf-8?B?TFVGZG9tOWJUNUErMTBBTjRqbzZkU0piK0pvb0hMcVJGT3MzOE5aOWY5QjF3?=
 =?utf-8?B?NHRyOFFhWkNnQUVLU0ZBbks1MXBxM1Y2TjYwMXFOdGNHMUo2RERHeDVnZGFT?=
 =?utf-8?B?QUJibU1UNFVVUHZTVFFBQjUzdmEzMFhvUGlMemlCVjFwU0ZHRERRaVI3NU50?=
 =?utf-8?B?R1Z0SkRBVnBNam9OdHBkVW0yZE1JMTQ3Z2l0YjBrQ3M3c3h1cHdKSDdZNk9C?=
 =?utf-8?B?M0hycVprdHFRTjUyMHNqbndFQ0pWWjFxQ2VrS2RxZlh2KzNYVEJkOWFWTWtT?=
 =?utf-8?B?MDlGZGxFWTB6bEVWL1BZZ3l4c0tacWlSN2NLNHRNQ3BydkFLRUVJY0htZFgv?=
 =?utf-8?B?bm1ueUNEaUhyVE9XVjFPZFZKeVVjZUVEYUxNeGh5VVpkVGtFemx2cFpsTXlD?=
 =?utf-8?B?M2MxZ3UrRGl1ZjNRNEVIRW1YMWI0TFIvYmYzMkdOZCtMRzY1WXFyVFdxN05t?=
 =?utf-8?B?c2Z4Qkp2bkdvYkhsUUZFOFdvcXpPWno1SE1tL1R1Ump1R3ljNUltV0NPcXJs?=
 =?utf-8?B?MWdCUW9GUEp0RzR6U1lhbzgxSzdWWkhjRWFVVUwxZ09vN3ZlRTdXaUhuZUNz?=
 =?utf-8?B?YmIwQkhIMTJmbXFrWDdUM0o2eUg1OVUweDVBaHh6N0Zhc0JxL2VUV284bWN6?=
 =?utf-8?B?TVRsVTdhK1ViMVZyRkFhaFZ5MnVDSmJoVFJSdE9OVVFjcGNFYUtZOGFEOEpu?=
 =?utf-8?B?eFpEM1lYbVhOMURwaVhEUytYend2MlljSTdzd3lQVSs0Nmc3ZVN2VXhUWVpj?=
 =?utf-8?B?N0pibnRpcjJadnlPY2h4L3Vnd1J2TFZUaGkvQ2VLc1FvSlZWWGVIZ3V4ZFVo?=
 =?utf-8?B?Nm1LUWlrV2R0MFluQ211b09GU3VDS05sYjd4UjBjUW1Pd05ncUFKVmNLT0tn?=
 =?utf-8?B?a1JuS1JCY2VFVnlOaGlaN2QzYW81OU5CSEtJYTdscTFlMUdET3hjV1pWZ3h3?=
 =?utf-8?B?QXp3cS9peVMvNVBSd3NOY3pkcVRISzJNTmlLT3VnaFB5RFc3UjR2MXJxckxQ?=
 =?utf-8?B?RGR6VnMvOUFiWXRsckhhdWovdFQrRzhOZ0h3dTkvZHJ2SXovTVM4R1g0UXkw?=
 =?utf-8?B?WFJVY2x1MFRNNUlhV1NmQWdoU2VMVkF3WW9kMjVTdEFTZDlFNThUV0JOeGNV?=
 =?utf-8?B?TGQyUEdaOU5FREhnelNvMTF1bWZISW82WDJCUmx2aThFbTFLanhyb0RSNytY?=
 =?utf-8?B?aGtTOXdHT1MvTndtcU1Ha1g2SzJCcEVBbm1QMnREM3ppWUFPZTVncmtOZHNR?=
 =?utf-8?B?UmRia0JYWmRTODF1WGwyY0lKN3RlaDRQUWRrRmxRTzBNQzBNTXFOQzdJZW1t?=
 =?utf-8?B?QjNrMkoyem9QbFhZeWEyc1h5QkxPQWRqbHNBM01EQ0xXY0wwYVB5VkVxSGJx?=
 =?utf-8?B?RHQ5eDBVSVNaUS9NQjdJTDAxbWhXUkh5UEFSd05sTHZZSHVmNXQ0aVUvNmdT?=
 =?utf-8?B?dkZFc2ZSaGhlS2pTeUlPck15R3M0QUxXV1BydU93TTcwSmJMQlBpYUlGOFQw?=
 =?utf-8?B?T3dLcWdmSDlLTnBqVmpOYk5RNTJQMnAzUEVnSk9hYVMyQnJnM1M5QURhSGcw?=
 =?utf-8?B?dEE9PQ==?=
Content-Type: text/plain; charset="utf-8"
Content-ID: <0890C3335D7EDA4E8E8E4CB067B3857B@namprd10.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-ExternalHop-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-ExternalHop-MessageData-0: =?utf-8?B?Z3g1WkRiRlBmSWNab3VpOSswazZ3Q3FvVnN2MTVRRVJvNmpidTB6N1pCdDdN?=
 =?utf-8?B?TUtwWVpPczJPa2tibC9sTlNPVTZDZE90YnJmR1g4SGUvZnRGV2hEMnpvVkV5?=
 =?utf-8?B?VWprZTYwT1o2MnhYbXRNRW1pMTd5eVUxSW5lQVR2VkVXVS9EdE9SUTBVTXZU?=
 =?utf-8?B?YXRLcmdKcXd4Ky83NXZMUXZDQ29VR2F2RkhZcDlXd0hlV2pCL2J5a0dON0xm?=
 =?utf-8?B?eVo5NFNaSW5WOHNkWjNiTWlNRG5IbUpoNlQ3MEpqMFU1NFg5VTJLK1FoY0hw?=
 =?utf-8?B?SnI3OW1SaFFJZ2FYSkwzbDdvZ2l1Q29DVEdOcmFCVU5EWjdJQ0VlZmh2MnFG?=
 =?utf-8?B?eFFENDhlKzdqbjNUZExnNU9JeC9aYVo2NlJKWWNLRHlNeGRlVHhNek9CejFs?=
 =?utf-8?B?aGpYdUs1R0xHQ1BwYjIxcmEyTEFYYk9tUlRoZjJCRFZNRlRtU1RkMGVjWGlk?=
 =?utf-8?B?TGlsRFdBWjBOVUZDeEdVNTJ1amxRZVVPWlhDanVhVG9vNXp2Q2s0OCtWNE9x?=
 =?utf-8?B?bm4xTEVydlpEQXI2S254TU9yRVBTMWpEQ0hud2hiNnJmZmpqQ0ZvSnZIUjVV?=
 =?utf-8?B?Tk9LelZoek5JNkZ1M0s4ak1aZ3cyYTRPc3JtcVAwLys0QjZlRkFPRTByT0ZG?=
 =?utf-8?B?bmV0alhtbU84NWkreFRWeFpBQ3VFMENhbzZ5TE54YXo0SXBIWU96eC9HdENS?=
 =?utf-8?B?dGxiN2tZck9ocWQvMUVaUXc2ZVBqZGx5T2JPR3FzZWZjSldLWmljbWp0QU5S?=
 =?utf-8?B?dWhRQS82NXU2SVBFRXNHZXNMS3lobmJsdTVCN21zSjl6Z2pOSWhxVTBUcTc4?=
 =?utf-8?B?RGdISExDY3VlMDkwbkM2VDRKNjJKdHlXQUxLWmdma2Uyd0UzcXBCcFZhUVhw?=
 =?utf-8?B?MEZOV3FxRGNrWldXbENWTlg5bjJWN28vS1pRWlYraWM0WGJmWTc3ZHpLeExE?=
 =?utf-8?B?Yzc4a2QxUlIvVzVoVUh3MUdCOTF1cVV6VkpFcDhDRVJrRWZVeUVVb3MyVlJD?=
 =?utf-8?B?TlN0Y1A3VzFRY3l1cDUwYmU0SjFleVhLQmY1emFLK3pGWlg5S2M1TjdQdXlX?=
 =?utf-8?B?cFJFSkpBVzZMTmdCdzlXeE9QSkVFQTh4ajJGaERTaGlXUDZValRYZlNKa29p?=
 =?utf-8?B?V3NJcGFmZWR6Unh6cklYMnB0UjF5eHJ5dzVhdGdzL3RRckJ3ZGdXWFVhZlQ3?=
 =?utf-8?B?dVZrL25NVUJYWm1VK0NvRmNPWkhXSEhFMlNYdlhzblpOeVptYUE2ZHBOS015?=
 =?utf-8?Q?GsJK8MLKnO74VXT?=
X-OriginatorOrg: oracle.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: CH2PR10MB4150.namprd10.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 7c2f7465-0a0e-494c-23e3-08db831cb752
X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Jul 2023 21:12:36.0513
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 4e2c6054-71cb-48f1-bd6c-3a9705aca71b
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: p3ZOF+Fsdp2tJuLWR2ixU4e2EehCjFxmWTPpv+kzPmVEa9eXUUnFgPjIXdIQBI2JHQcZ97vlEyoe340dbArPx4jSpdo7PVdkqtO4AM0Tg1U=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH7PR10MB7694
X-Proofpoint-Virus-Version: vendor=baseguard
 engine=ICAP:2.0.254,Aquarius:18.0.957,Hydra:6.0.591,FMLib:17.11.176.26
 definitions=2023-07-12_15,2023-07-11_01,2023-05-22_02
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 mlxlogscore=999
 adultscore=0 mlxscore=0 spamscore=0 phishscore=0 malwarescore=0
 bulkscore=0 classifier=spam adjust=0 reason=mlx scancount=1
 engine=8.12.0-2305260000 definitions=main-2307120188
X-Proofpoint-GUID: Vu6tjCeg5wdOWAUXJNfbA5rAzFXD6Y50
X-Proofpoint-ORIG-GUID: Vu6tjCeg5wdOWAUXJNfbA5rAzFXD6Y50
X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED,
        DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_BLOCKED,
        RCVD_IN_MSPIKE_H5,RCVD_IN_MSPIKE_WL,SPF_HELO_NONE,SPF_NONE,
        T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
        lindbergh.monkeyblade.net
Precedence: bulk
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org
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