Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1756977Ab2BGVTB (ORCPT ); Tue, 7 Feb 2012 16:19:01 -0500 Received: from mga10.intel.com ([192.55.52.92]:54778 "EHLO fmsmga102.fm.intel.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S1756695Ab2BGVS7 convert rfc822-to-8bit (ORCPT ); Tue, 7 Feb 2012 16:18:59 -0500 MIME-Version: 1.0 In-Reply-To: <87zkcuh8iq.fsf@rustcorp.com.au> References: <87zkcuh8iq.fsf@rustcorp.com.au> Date: Tue, 7 Feb 2012 23:18:38 +0200 Message-ID: Subject: Re: [RFC][PATCH v1 0/2] integrity: module integrity verification From: "Kasatkin, Dmitry" To: Rusty Russell Cc: James Morris , linux-security-module@vger.kernel.org, linux-kernel@vger.kernel.org, zohar@linux.vnet.ibm.com, David Howells Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8BIT Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1631 Lines: 49 On Tue, Feb 7, 2012 at 7:13 PM, Rusty Russell wrote: > On Mon, 6 Feb 2012 08:59:00 +0200, "Kasatkin, Dmitry" wrote: >> On Mon, Feb 6, 2012 at 3:51 AM, James Morris wrote: >> > On Wed, 1 Feb 2012, Dmitry Kasatkin wrote: >> > >> >> Hi, >> >> >> >> Here is another module verification patchset, which is based on the recently >> >> upstreamed digital signature support used by EVM and IMA-appraisal. >> > >> > You should cc: Rusty on any changes to the module code. >> > >> >> Hello, >> >> Mimi already has pointed that out. >> I have sent him an email with the link.. > > Thanks. > > Using an external signature (via cmdline arguments) is simple, at > least.  Not sure what the userspace side of this looks like? > Hello, There are couple of patches for modprobe and insmod... You could see them on the top at: http://linux-ima.git.sourceforge.net/git/gitweb.cgi?p=linux-ima/module-init-tools.git;a=summary It first tries to read signature from xattr, then from file... "modprobe -v" will show 'ima=' parameter with signature. - Dmitry > Cheers, > Rusty. > -- > To unsubscribe from this list: send the line "unsubscribe linux-kernel" in > the body of a message to majordomo@vger.kernel.org > More majordomo info at  http://vger.kernel.org/majordomo-info.html > Please read the FAQ at  http://www.tux.org/lkml/ -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/