Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753625Ab2JCErU (ORCPT ); Wed, 3 Oct 2012 00:47:20 -0400 Received: from mail-we0-f174.google.com ([74.125.82.174]:56053 "EHLO mail-we0-f174.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753138Ab2JCErL (ORCPT ); Wed, 3 Oct 2012 00:47:11 -0400 MIME-Version: 1.0 In-Reply-To: References: From: Linus Torvalds Date: Tue, 2 Oct 2012 21:46:48 -0700 X-Google-Sender-Auth: Hcf6SwYtkdon6oY8jMzEglhnrT4 Message-ID: Subject: Re: [GIT] Security subsystem updates for 3.7 To: James Morris , Mimi Zohar , Dmitry Kasatkin , "Eric W. Biederman" Cc: linux-security-module@vger.kernel.org, linux-kernel@vger.kernel.org Content-Type: text/plain; charset=ISO-8859-1 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1015 Lines: 24 On Tue, Oct 2, 2012 at 4:35 AM, James Morris wrote: > Highlights: > > - Integrity: add local fs integrity verification to detect offline attacks > - Integrity: add digital signature verification Ok, the integrity changes in particular clashed with the new user namespace support by Eric Biederman. The clashes weren't all that big, but there have been semantic changes in this area, and I'd like Eric to please check that I resolved it correctly, and the integrity people to double-check my changes to the "fowner" field. Mimi, Dmitry, Eric? Please check my current git tree, in particular the security/integrity/ima/ima_policy.c file, but I think Eric should look at the kernel/auditsc.c merge too, in case I missed something. Linus -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/