Received-SPF: pass (google.com: domain of linux-kernel+bounces-146240-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:45e3:2400::1 as permitted sender) client-ip=2604:1380:45e3:2400::1;
Date: Tue, 16 Apr 2024 11:49:07 +0700
From: Bagas Sanjaya <bagasdotme@gmail.com>
To: Roberto Sassu <roberto.sassu@huaweicloud.com>, corbet@lwn.net,
	paul@paul-moore.com, jmorris@namei.org, serge@hallyn.com,
	akpm@linux-foundation.org, shuah@kernel.org,
	mcoquelin.stm32@gmail.com, alexandre.torgue@foss.st.com,
	mic@digikod.net
Cc: linux-security-module@vger.kernel.org, linux-doc@vger.kernel.org,
	linux-kernel@vger.kernel.org, linux-kselftest@vger.kernel.org,
	bpf@vger.kernel.org, zohar@linux.ibm.com, dmitry.kasatkin@gmail.com,
	linux-integrity@vger.kernel.org, wufan@linux.microsoft.com,
	pbrobinson@gmail.com, zbyszek@in.waw.pl, hch@lst.de,
	mjg59@srcf.ucam.org, pmatilai@redhat.com, jannh@google.com,
	dhowells@redhat.com, jikos@kernel.org, mkoutny@suse.com,
	ppavlu@suse.com, petr.vorel@gmail.com, mzerqung@0pointer.de,
	kgold@linux.ibm.com, Roberto Sassu <roberto.sassu@huawei.com>
Subject: Re: [PATCH v4 00/14] security: digest_cache LSM
Message-ID: <Zh4DQ7RGxtWCam8K@archie.me>
References: <20240415142436.2545003-1-roberto.sassu@huaweicloud.com>
Precedence: bulk
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="BkMvQL07QYXGkkI3"
Content-Disposition: inline
In-Reply-To: <20240415142436.2545003-1-roberto.sassu@huaweicloud.com>


--BkMvQL07QYXGkkI3
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, Apr 15, 2024 at 04:24:22PM +0200, Roberto Sassu wrote:
> From: Roberto Sassu <roberto.sassu@huawei.com>
>=20
> Integrity detection and protection has long been a desirable feature, to
> reach a large user base and mitigate the risk of flaws in the software
> and attacks.
>=20
> However, while solutions exist, they struggle to reach the large user
> base, due to requiring higher than desired constraints on performance,
> flexibility and configurability, that only security conscious people are
> willing to accept.
>=20
> This is where the new digest_cache LSM comes into play, it offers
> additional support for new and existing integrity solutions, to make
> them faster and easier to deploy.
>=20
> The full documentation with the motivation and the solution details can be
> found in patch 14.
>=20
> The IMA integration patch set will be introduced separately. Also a PoC
> based on the current version of IPE can be provided.
>=20

I can't cleanly apply this series (conflict on patch [13/14]). Can you
point out the base commit of this series?

Confused...

--=20
An old man doll... just what I always wanted! - Clara

--BkMvQL07QYXGkkI3
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iHUEABYKAB0WIQSSYQ6Cy7oyFNCHrUH2uYlJVVFOowUCZh4DPQAKCRD2uYlJVVFO
oxOIAP4gVyV6DAnmVLqQb6OkqAAY7l0rywBHayaYMF+T7O8BUwD9EU018eGv0r1C
TUjWVbhQh6gRlmM3rI+Alg84QyqPvwg=
=IWc9
-----END PGP SIGNATURE-----

--BkMvQL07QYXGkkI3--