Received-SPF: pass (google.com: domain of linux-crypto-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
From:   Eric Snowberg <eric.snowberg@oracle.com>
To:     Mimi Zohar <zohar@linux.ibm.com>
CC:     Jarkko Sakkinen <jarkko@kernel.org>,
        David Howells <dhowells@redhat.com>,
        "dwmw2@infradead.org" <dwmw2@infradead.org>,
        "herbert@gondor.apana.org.au" <herbert@gondor.apana.org.au>,
        "davem@davemloft.net" <davem@davemloft.net>,
        "jmorris@namei.org" <jmorris@namei.org>,
        "serge@hallyn.com" <serge@hallyn.com>,
        Stefan Berger <stefanb@linux.ibm.com>,
        "nayna@linux.ibm.com" <nayna@linux.ibm.com>,
        "mic@linux.microsoft.com" <mic@linux.microsoft.com>,
        Konrad Wilk <konrad.wilk@oracle.com>,
        "keyrings@vger.kernel.org" <keyrings@vger.kernel.org>,
        "linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>,
        "linux-crypto@vger.kernel.org" <linux-crypto@vger.kernel.org>,
        "linux-security-module@vger.kernel.org" 
        <linux-security-module@vger.kernel.org>
Subject: Re: [PATCH 0/4] Add CA enforcement in the machine keyring 
Thread-Topic: [PATCH 0/4] Add CA enforcement in the machine keyring 
Thread-Index: AQHYLZM8jxuG29fUVEecQcvisOPy/ayzCf2AgAFEowA=
Date:   Mon, 7 Mar 2022 18:55:19 +0000
Message-ID: <29935472-CA86-4B5F-A1B5-1B12FC563748@oracle.com>
References: <20220301173651.3435350-1-eric.snowberg@oracle.com>
 <4235e559d00cd90701e05befe87b06e904f008b2.camel@linux.ibm.com>
In-Reply-To: <4235e559d00cd90701e05befe87b06e904f008b2.camel@linux.ibm.com>
Accept-Language: en-US
Content-Language: en-US
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: =?utf-8?B?YmhPZFB3VkRHUmFnbzRRVWU3MnAwV2Z5cE1ub2ltZVpjRGJqeS82anAxZGZ1?=
 =?utf-8?B?QkYxUk5rUStraXJrV1NDZ1N2elJXczQ5UWIzNGZUN0o2MjBjN21aOUxGRGVI?=
 =?utf-8?B?Ky9ZQnJId1ZOZDI3VXlJSjk4UW9FbC9uQ2Y4cjBVV0xNNE5yK3B3cDlwY04z?=
 =?utf-8?B?U0svczdaS0hYZVoyakJYdGdxTkNrUk1remZUUVQwTTkxVUMyZVJUQTExd2JL?=
 =?utf-8?B?VUh2Z0lJTEE0Z25nanhUQWxKMGlTeE90WFhMU29MYUFDTUp4WEdvTWttTVhz?=
 =?utf-8?B?cWNuNWlQK1BML3hHQUR1VWkzWkticXBKcy9YWTIxTDhNb0NlNGhMRzlPb29F?=
 =?utf-8?B?ekxJY0tzamoxc25zd21YdFRWK2hlWnpkcWVKMk9ZTjVYRzBqTFd5V2VnNFgx?=
 =?utf-8?B?SW9wcVBCUHlwT3QrbGs4M29WL2E4cVJVaXJ4TWxsVHVKVW1SZHptQzRyMnFV?=
 =?utf-8?B?RjkxNTVCQitENG8rRDgrdDQrY0pTeHMwMS9TU3BWOHc3S24rR3ZqdDN2RGpX?=
 =?utf-8?B?VTU4STFYZ1JZamZoMTkvdERYK1lUaThFN3B3S21SYXlxY1lITjN0UE5LcVYr?=
 =?utf-8?B?TStuUFpQVHNwZDQ5VjFBdkE5Y0FlcGxIQVRBVURwRU1kZE90ZVRYSEJTMEpX?=
 =?utf-8?B?UGthcitUNUI1WktkUFFJdFNZdG95TVVGWGhCa3NpbmUxZ0owcW0zcWpSazBm?=
 =?utf-8?B?WVk1SDIrSjJFUmdIRjFVamFCTzNzQkVESnl3akdVY0xMZDhhQ01KY2N0N3dE?=
 =?utf-8?B?bmxZY2NRU0ltSVArNmtpa2VuRndZbDNBbnRVV1lwdHBvTEs1MmJhL1lQekt4?=
 =?utf-8?B?aDRuakl0dW1nTmZGNWdUTUpldFlBTHo2L3huMmRCODVHZnpnaitSdkJycVN0?=
 =?utf-8?B?TmpsREhQVmRjdWJyeTkwQlN0eFJSc0Jma3N6M2Z3elhUdCtSR293cGZJSFhp?=
 =?utf-8?B?eWhwZitsdUNCR01XN3ZkYW91NlJKZmRlZk1TS0dEZGZ4dDlSUnh1ZHVCRE1u?=
 =?utf-8?B?YVlIWit0R0lNcjlDYng3ZHRUU1dadUxlRjJOMUM4K2tBRkk0eUQ4MmJGWnVB?=
 =?utf-8?B?UU5TaHc0emhycmk4YTRnR2dJRUNwYVVib3JVa3dlS1Jtdzl0T2sxc0FONGRz?=
 =?utf-8?B?eFlqRjNKVWhZL1F2Q29saTRiV2FwQnBxb24vckNaeldWT21WalpLUE9mSW55?=
 =?utf-8?B?VGMzVkNQeTJHRC9mMDk1cExLTHNGeXRyOU94MURGZ0Q0YWtHRFhiZzl2RGs1?=
 =?utf-8?B?OW5keWM2a0VPblRhcFNFR3RFMitYK2Zma2lUVkQ0MVV6QnFCeGRrbUg1NkdG?=
 =?utf-8?B?T0ZFZ2pTOEk2bEtmRXBKT1M4bHBJQ3hVRVY3aWRkSmtSb0ZUYkc3Q2pyL3lY?=
 =?utf-8?B?cTA2VWJycGdadk85NGxBeXB2aUhYNThhb2ZSd09LNENYZm9WdmNRdEUrSi95?=
 =?utf-8?B?ekZwS1QyOWhRWlpYaWRzSXNhUVNQRjFUVlhrYXBWclE4U25wY1hMY1pMU2Nz?=
 =?utf-8?B?dEtFTk8xVG9oN0E0S3V0bExJM3Y2enlGWnFKT1FRd1B4OEQ3ZTJsMHlYOTRa?=
 =?utf-8?B?RHJiTHhyTlZVYXQzM1FSc0lIZlFuVTF5aU1tMzJjUUFCT3Z3c3ZaYUROT3U4?=
 =?utf-8?B?c2NyZzR5bVIxOUpheGRVa3NzQzdrZXhBZlJqeXpuc29LaG8xWUNHc1BVdmdD?=
 =?utf-8?B?UkNjQXo0QVRVS0ZQMm41ZlZvNVlVaVIvYXlBUmVQbDl0N0kyY3dWSjNXNnYr?=
 =?utf-8?B?S3FTc0ZsR05nWDEybC9QNjBQWnRNYS9yTUdDY3hMc1dGSTZLYWxlZ3ZQaEhq?=
 =?utf-8?B?L05NcFUwRWJ4aFJJUCtsbXQzWG1iMnp4QTZNMUFoOG9OU3Bqc05EV09Ub0Nu?=
 =?utf-8?B?ZjQ0blpNb293R1NmSTdyaEJZNjJwc25MNStGaFM4Q0NPNFdjSXQwUUwxTWVp?=
 =?utf-8?B?dExHNDcwSkVEeXFKUFZGK0xlc3JQRG9MYk9EbFhWOC9XWGdKZER1cTNXc2pN?=
 =?utf-8?B?L2tRMG5Dc2czOXlDbGJsQkU4T0tTZjA5OEpQc05rM2xiYVA3T0ErVExzd01N?=
 =?utf-8?B?K0NsN0lUT1NLK25hajFOYllVMkd3REQ5bmVsR2V2WElJODJJU1dCR1dtQXFh?=
 =?utf-8?B?Y0o5cmVMUWlVUEpTN1M3MUhXaklsd2RRd1JGaWpvQXduaUdIR2ZuNTNHYkxK?=
 =?utf-8?B?TmRRV2U0YjFzSFdaUmRWV0lCbDlIT0RNTnhST1N0a2V5MjlTVjcyZzFwbFFl?=
 =?utf-8?Q?RpgYS6Hk0afyQA5BOvzx90MBxngNNiIwWWv/TvnX3Y=3D?=
Content-Type: text/plain; charset="utf-8"
Content-ID: <AAAAC74A721A7B4B9D2102CC96C5C258@namprd10.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: oracle.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: CH2PR10MB4150.namprd10.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 2b56f6bd-bd57-4c85-24ed-08da006c06e6
X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Mar 2022 18:55:19.8091
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 4e2c6054-71cb-48f1-bd6c-3a9705aca71b
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: eOdbLFXMMkCgcO/lCC6ydYUkToq4+ntT1s7DLz3Je8SyPBM3XGg8e8gAS0eS9YGLli7fJ1zM13TTYjS+gb8M5IGPYCf0ev2luxxeRxIida0=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH7PR10MB5879
X-Proofpoint-Virus-Version: vendor=nai engine=6300 definitions=10279 signatures=690470
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 phishscore=0 mlxscore=0
 bulkscore=0 mlxlogscore=999 spamscore=0 adultscore=0 malwarescore=0
 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2202240000
 definitions=main-2203070105
X-Proofpoint-ORIG-GUID: PmU1FG2M0lqZpCH6tDUo3gBVq9pfdaBN
X-Proofpoint-GUID: PmU1FG2M0lqZpCH6tDUo3gBVq9pfdaBN
X-Spam-Status: No, score=-2.8 required=5.0 tests=BAYES_00,DKIM_SIGNED,
        DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_LOW,
        RCVD_IN_MSPIKE_H5,RCVD_IN_MSPIKE_WL,SPF_HELO_NONE,SPF_NONE,
        T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
        lindbergh.monkeyblade.net
Precedence: bulk
List-ID: <linux-crypto.vger.kernel.org>
X-Mailing-List: linux-crypto@vger.kernel.org
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