Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::3:6 as permitted sender) client-ip=2620:137:e000::3:6;
From:   Eric Snowberg <eric.snowberg@oracle.com>
To:     Paul Moore <paul@paul-moore.com>, Mimi Zohar <zohar@linux.ibm.com>
CC:     =?utf-8?B?TWlja2HDq2wgU2FsYcO8bg==?= <mic@digikod.net>,
        "Serge E. Hallyn" <serge@hallyn.com>,
        Jarkko Sakkinen <jarkko@kernel.org>,
        David Howells <dhowells@redhat.com>,
        David Woodhouse <dwmw2@infradead.org>,
        Kanth Ghatraju <kanth.ghatraju@oracle.com>,
        Konrad Wilk <konrad.wilk@oracle.com>,
        "linux-integrity@vger.kernel.org" <linux-integrity@vger.kernel.org>,
        "keyrings@vger.kernel.org" <keyrings@vger.kernel.org>,
        open list <linux-kernel@vger.kernel.org>,
        linux-security-module <linux-security-module@vger.kernel.org>
Subject: Re: RFC: New LSM to control usage of x509 certificates
Thread-Topic: RFC: New LSM to control usage of x509 certificates
Thread-Index: AQHZ93c4gJX6SHkC80mNOExcrBTnXrBOD7yAgAAjSwCAABc5gIAABa6AgAAIMoCAAA68gIAADAcA
Date:   Tue, 17 Oct 2023 19:34:25 +0000
Message-ID: <2512D2AE-4ACA-41B9-B9FB-C2B4802B9A10@oracle.com>
References: <CEA476C1-4CE5-4FFC-91D7-6061C8605B18@oracle.com>
 <ba2f5560800608541e81fbdd28efa9875b35e491.camel@linux.ibm.com>
 <932231F5-8050-4436-84B8-D7708DC43845@oracle.com>
 <7335a4587233626a39ce9bc8a969957d7f43a34c.camel@linux.ibm.com>
 <FD6FB139-F901-4E55-9705-E7B0023BDBA8@oracle.com>
 <1149b6dbfdaabef3e48dc2852cc76aa11a6dd6b0.camel@linux.ibm.com>
 <4A0505D0-2933-43BD-BEEA-94350BB22AE7@oracle.com>
 <20230913.Ceifae7ievei@digikod.net>
 <D0F16BFD-72EB-4BE2-BA3D-BAE1BCCDCB6F@oracle.com>
 <20230914.shah5al9Kaib@digikod.net> <20231005.dajohf2peiBu@digikod.net>
 <d3b51f26c14fd273d41da3432895fdce9f4d047c.camel@linux.ibm.com>
 <CAHC9VhRdU1CZJpPSEdSmui-Xirr0j261K=+SM7KiDwiPG-JSrQ@mail.gmail.com>
 <a851227aaa75ab16b0d6dd93433e1ee1679715f9.camel@linux.ibm.com>
 <CAHC9VhS_Ttdy5ZB=jYdVfNyaJfn_7G1wztr5+g0g7uUDForXvA@mail.gmail.com>
 <5c795b4cf6d7460af205e85a36194fa188136c38.camel@linux.ibm.com>
 <CAHC9VhTug20M0ET=QojUPtjrGkeHfU=ADDNrKfXmLTQPG_i1vw@mail.gmail.com>
In-Reply-To: <CAHC9VhTug20M0ET=QojUPtjrGkeHfU=ADDNrKfXmLTQPG_i1vw@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: =?utf-8?B?Qmo4a21JY3BOS0Z5dUtHWkN2QnpQeTRIYkRuMHRRcDZjcFcvQ3Z3anFDZ3lK?=
 =?utf-8?B?bTFvdGlBcDNsVnhFRUxNdnFacEJHSzRZS2lqUEpDQVVoRllPT3pBdWU4b2pz?=
 =?utf-8?B?OEdLcG4rTmdmRXkvdHpVbW1hTDc0NHJCaUlrblB5bTRsZy8yMElpT2Q4Vk9F?=
 =?utf-8?B?blJ3cHlGNFF5NmFPejdablBJRXlLRXdjQXBNekM4TVA4Umw5RDJDaUt4ZVlh?=
 =?utf-8?B?TG9jTEQrU0VUdWd3MFlOQURZWVpwaXpCR1YxZ1hEa2xwZmJjcnNkRWJCQ2tP?=
 =?utf-8?B?Z3ZBUWNnaUNCYUgxT2N0Yk5xc3dlWFZlNFhUNndpTXA2SVE3Q1BtRDJ5b1VZ?=
 =?utf-8?B?dGZxRDc3cW5FRVhzT0JZYXBSS1Noemt4YzNrMTExVTJSQXRDZmZkT0tsSENE?=
 =?utf-8?B?Um5ETzNzMlIvRWlHbHBoRkdBV25RenkwRy96bE9qYXJxQkdveVlta21IbTZE?=
 =?utf-8?B?M20zamdHeXB3L3B6MDhISDV4aEJsSFhubHozMXUyN1laRUhmenJRNzFTd2ow?=
 =?utf-8?B?OTNXS2s3L3VSblFCRjhlRHpqRWJycWo1V1dxN0JLL1VkSHpnYlFtemwxS2ZI?=
 =?utf-8?B?M0todEhWUDBiQTFBeDhLdWF0a2tmUko5cCt6U0tlbEpFZmhZQ1pXLzhMYS9n?=
 =?utf-8?B?SFViS3dNdE9UWnE4NWdncGZFTHowK0luUnMrNjNxYXVLN3BqVFp2c0d1eDJu?=
 =?utf-8?B?QjczMDhTTGhMMzVHVzhLVHE5S3ZXNlFnMW9UQzBMM2R2R0MvWktNbE1JVDgx?=
 =?utf-8?B?cjNMOXB2NXRqUGxCRC8wQlJvdDRHeHF4S3pJUDBzRWh6ektPRndERE5CWlJJ?=
 =?utf-8?B?Vngwek12ck1xcTFtdi9ZdWZadlNWanZGcU1vYnRNRTN5NTUzWU1xUHlMaWkx?=
 =?utf-8?B?Snp1OENUakhRcDBwblJOdllvUWcxVzZTQW1LVk5rbE1qTXNuOGhjL1VEQzBI?=
 =?utf-8?B?OFV3dDJhUHlhSktNNzBoUmJWTEszaTRtM2VnT2E1VWJlaFVHZjdndW94a1dl?=
 =?utf-8?B?UjBtODJEeklEQlZJejI0VzAyc0xwRjIza0d5eFlKQ0MxTFNnY2QwUExtaEJ3?=
 =?utf-8?B?cHo3UjEzZG5SZlM1aklWTFVERVpQZm5NNmZZL2VJSEtQMnV5Y292U3U2U1Na?=
 =?utf-8?B?UUJMZm9GSm0wTlJ6V0lJSWJ5QzdxMTByK2VmZWk2ODZ6aGsrVFNFSmxZTDFa?=
 =?utf-8?B?TUdwK3VST0RvTmFNNGgwT202cDU4MGVkRVVNM3pmVG1IWlpwL2JEV3BvZ2pK?=
 =?utf-8?B?SVpzOU5HYVEwQWtnbHhqUURqN1JuRTM0YnZhTzRUWEhoTnYxWTNMaGpqQS9z?=
 =?utf-8?B?ZDlUU3hMeFoxVEh0K2R3RDh6QzQwR1o5anZ3cnZyc0VkODYxMzlWZTBWTlQ5?=
 =?utf-8?B?VU1wNTZpdGM0bEU0QndGK1hCZFVzVnBidVJXV1Zud0tySFUzdk5kR3N3bmFR?=
 =?utf-8?B?TnhOUWp0MFgxVWdGblpUd0Vic2ZBL3N4WVBsdnlUQ3VJUkdpempqeThBeWJR?=
 =?utf-8?B?UXRTVVZhU3ZrenRRNzZVY3FVdkJad3piUkt4dDFpRjhqdDFyS3NEN2Q3RjRi?=
 =?utf-8?B?MkVveFZiZC9vY1pNY2hEK3lWS2Y4eG53ZnVlQ2poT0gyamt6R2JpUjBLTmNR?=
 =?utf-8?B?Z2lJcjJmeXBPQnJRSUVEbzhiZDdsUHVGOHRmc2Y0ZjkwV3ZQVW1NSWZWYXIz?=
 =?utf-8?B?QVQwbHcybUVnNDNsY0FkUFowRXdBbThENS9ncFpKMDRGR3pZeGpmQkprTnlp?=
 =?utf-8?B?YmVEcGhQQ0FIQXhwS043eWJGZ3ZjcnA5NnpSVHFsUGZXNHpGdEVPdERkd1ly?=
 =?utf-8?B?OHZubTRWYm9HNy93MWNvNU82WGdNT2xCcEEyb0ZNQ2tEMXBkZi9JS3JNMHlk?=
 =?utf-8?B?c0VnRXNVcUxiNTRlbWJpalA1bkhaUGx0L1I1ZHEvMXFEMG5PQUt2QjJXd01p?=
 =?utf-8?B?aGNTMzgwUDZHdGd0WDBnMG9FVEd4ZXQwZUp1M3MrN2pNWFc1UzRMMDRIWW5a?=
 =?utf-8?B?ZXRaYUYvSnV0TUFzcWxpLzFNc285QjJPa21QMnEyeXRrSmhhZ3F6WUkySTh5?=
 =?utf-8?B?SCthTWVXZS9LeENLOEZpWXhwSlFtNk5nNzlEV1RwVy81VkNsbFU5dmZIM3ls?=
 =?utf-8?B?UWpCZ2ovZGtSU1JHcEdHU05iRmQyMGZYb2g0RURvVTM0ZjNzYmV4eGdmaTNr?=
 =?utf-8?B?VEE9PQ==?=
Content-Type: text/plain; charset="utf-8"
Content-ID: <CA5FC05A92184E4D9067398C3C2446FC@namprd10.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-ExternalHop-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-ExternalHop-MessageData-0: =?utf-8?B?L1Jua0FEeUdERmRiQ2ExNy9KR3hWUXp2QzJ0dGRuYkpENk56WEwyMmppWVFh?=
 =?utf-8?B?WGhDWEppaUJZTGJTeUluTjNXaTBSbHgxV3VtMHFQMkpua25kRGU2dTY1RmFn?=
 =?utf-8?B?N011NEY3OWxoS1dUYnJZTjB2R0NueGt4ekpsUFBPSW9McnA3QmVFUXk3dTFH?=
 =?utf-8?B?R2hRenViSlVUcVkrYmV2TDdDZFZmS0cxZUc0aHdoK0s3QjEwZ3pVUHlTbDVh?=
 =?utf-8?B?QU1KOXdxN2NtWmR6ZG52Z1J5MERTL21Mc1B2ZE14OGJodzZGMDJiMVpvR1hJ?=
 =?utf-8?B?Z1JZNFpFN1JYMWpDMjFrVEZ6TXIwNGJoSnZwTVVnU0t0VVNsNXJlblBzSm9u?=
 =?utf-8?B?SWY0Nm5JMGUzL0dsRWpBaHA4R2J4Rmg2WWVaMVVLNzR6R3VtVXV0T3lpRC91?=
 =?utf-8?B?SyswUC95WDhGZVcveTRKTllYcFdzTHE0YXBYbXBhYXIwdm9YYzh4Z1ZiOU9H?=
 =?utf-8?B?amZuaitaKy96STYyK1k5MnRtN3Jna3hDSUJJREN3UjE5MzRRaHNpcWNGMDJU?=
 =?utf-8?B?bEF6MEcyUXV1YWdWWTltMzdBQW5BVVJxWmtBMEFNQVl0U1BUckg2RG5taVJL?=
 =?utf-8?B?ZlJodkI4R0RXcDNrR0RWS3dnMzhTRVRXOThtSC9ucDRrL0g3MVNmbmxrOEVp?=
 =?utf-8?B?TjU0ZFVHRHRlTW82dE5WcjgwVW5ERVdjbEx6SW1qekZacjBCYUsrczJ6Vlhx?=
 =?utf-8?B?RmsxM2ptV2x3elpmcUxFK0pYWmVlWHpsa1g2K2hnWFdzbXpSdVUzQTF5YWVE?=
 =?utf-8?B?TzJNYkZYTUNUTk1XYzFobGUzZjZjVDd0Q2tLYzcwNXdrS0tVR0p6cVlJb3pH?=
 =?utf-8?B?eEt5Y3ZMU3lGdVY2RFdDNm40MlVCU3B2VFI2V2U2ZSt3d3VVYzhHdWc4Z0t2?=
 =?utf-8?B?RkloV3pKZkx5b0MvaDRUZlBUWmw4LytvdWMyeVVBVzcxZDZ5V0RCTTdHMzVj?=
 =?utf-8?B?MkJlL2lvY1BFUGpNQnJBQzRmN2c5UkllMlV0YkJLSld6ZzJjdmswZ2FIZ29j?=
 =?utf-8?B?R3Z3c2ZKYjRYNEg4L096MEhCWTVTaGFPbEs1dG5tNDhzT2VmQ08xQVdDWVdN?=
 =?utf-8?B?UGtYdHpZSTdmSWlYOU8yb3RBQXlDbkg4cEdKZFF2VzFHNkpWYiszckRXQVov?=
 =?utf-8?B?R1NkVFcyOERFa0M3SUZ2WlFtREpGSlFRRzF1SE42UHVCK2xOWXFVY21xT1FK?=
 =?utf-8?B?M0pMOGc5RjZQTVlJRTBqTFVmQ25WdnpIZnc0ZC90VDZLRzVVMGh0SWxxR0c4?=
 =?utf-8?B?ZHRoYnBFNjNEblY1Z2h1bGFKM3hIVkxhZEJJTzkxdkF2b2g5cnZRelZSdFhO?=
 =?utf-8?Q?5dduRaalCY5+wBQqGG5kkEjIPzgBWXZqkd?=
X-OriginatorOrg: oracle.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: CH2PR10MB4150.namprd10.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 7f4d7d7d-9e59-4b7e-5262-08dbcf48125d
X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Oct 2023 19:34:25.5178
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 4e2c6054-71cb-48f1-bd6c-3a9705aca71b
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 4gkAMngqdaHXb8NiXBMKg+DUjV9la/2zKOLzPNdUWwXkIqKkmO/8ULZu1OwwVkNsts59cVzivClDgisZgyjV9W1O/ZOpvVauVLKg6hvATAs=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA1PR10MB6413
X-Proofpoint-Virus-Version: vendor=baseguard
 engine=ICAP:2.0.272,Aquarius:18.0.980,Hydra:6.0.619,FMLib:17.11.176.26
 definitions=2023-10-17_03,2023-10-17_01,2023-05-22_02
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 spamscore=0 phishscore=0 suspectscore=0
 mlxscore=0 mlxlogscore=999 bulkscore=0 malwarescore=0 adultscore=0
 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2309180000
 definitions=main-2310170166
X-Proofpoint-GUID: VUHrVXQXIsrh28HOwZ1DOHawENvB-5CO
X-Proofpoint-ORIG-GUID: VUHrVXQXIsrh28HOwZ1DOHawENvB-5CO
X-Spam-Status: No, score=-0.8 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,
	DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,
	SPF_HELO_NONE,SPF_PASS autolearn=unavailable autolearn_force=no
	version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on pete.vger.email
Precedence: bulk
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org
X-Greylist: Sender passed SPF test, not delayed by milter-greylist-4.6.4 (pete.vger.email [0.0.0.0]); Tue, 17 Oct 2023 12:40:43 -0700 (PDT)
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