Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1755357AbYLERP6 (ORCPT ); Fri, 5 Dec 2008 12:15:58 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1752070AbYLERPr (ORCPT ); Fri, 5 Dec 2008 12:15:47 -0500 Received: from igw2.watson.ibm.com ([129.34.20.6]:34700 "EHLO igw2.watson.ibm.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751961AbYLERPr (ORCPT ); Fri, 5 Dec 2008 12:15:47 -0500 Subject: Re: [PATCH 2/6] integrity: Linux Integrity Module(LIM) From: david safford To: "Serge E. Hallyn" Cc: James Morris , Christoph Hellwig , Mimi Zohar , linux-kernel@vger.kernel.org, Andrew Morton , Al Viro , Serge Hallyn , Mimi Zohar In-Reply-To: <20081205152318.GD10037@us.ibm.com> References: <20081203123021.GA30035@infradead.org> <1228328323.2821.30.camel@localhost.localdomain> <20081203182300.GA31203@infradead.org> <1228342655.2821.64.camel@localhost.localdomain> <20081204130949.GA18196@infradead.org> <1228424014.3014.58.camel@localhost.localdomain> <1228481810.3005.31.camel@localhost.localdomain> <20081205152318.GD10037@us.ibm.com> Content-Type: text/plain Content-Transfer-Encoding: 7bit Date: Fri, 05 Dec 2008 12:14:35 -0500 Message-Id: <1228497275.3041.2.camel@localhost.localdomain> Mime-Version: 1.0 X-Mailer: Evolution 2.22.3.1 (2.22.3.1-1.fc9) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1773 Lines: 40 On Fri, 2008-12-05 at 09:23 -0600, Serge E. Hallyn wrote: > Quoting david safford (safford@watson.ibm.com): > > On Fri, 2008-12-05 at 12:42 +1100, James Morris wrote: > > > On Thu, 4 Dec 2008, david safford wrote: > > > > > > > These hooks were for alternate integrity modules, and since > > > > no one else has defended them, we have to agree that they > > > > should be replaced with direct calls. > > > > > > If you know of other modules which are planned to be ported to this > > > framework, merged upstream and supported, then this would be similar to > > > the situation when LSM was initially developed. > > > > > > You've previously mentioned some active projects here: > > > http://lkml.org/lkml/2008/11/17/362 > > > > > > Are there any definite commitments to push these upstream when the > > > integrity framework is merged? > > > > All of the projects listed in that posting were ones depending on > > IMA, with no requirements for alternate modules. I do hope that there > > will be other integrity modules in addition to the TPM oriented IMA, > > and I do know of several research projects in this space, but I don't > > know if/when any of these are planning on submission. If others are > > submitted, it would certainly be simple to add the hooks back in. > > Too bad the main trusted knoppix site appears to be dead. Was it > actually making use of the templating api? > > -serge I believe they are using an older version of IMA without templating, but either way really shouldn't affect them. dave -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/