Received-SPF: pass (google.com: domain of linux-crypto-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
From:   Eric Snowberg <eric.snowberg@oracle.com>
To:     Morten Linderud <morten@linderud.pw>
CC:     "keyrings@vger.kernel.org" <keyrings@vger.kernel.org>,
        "linux-integrity@vger.kernel.org" <linux-integrity@vger.kernel.org>,
        Mimi Zohar <zohar@linux.ibm.com>,
        David Howells <dhowells@redhat.com>,
        David Woodhouse <dwmw2@infradead.org>,
        "herbert@gondor.apana.org.au" <herbert@gondor.apana.org.au>,
        "davem@davemloft.net" <davem@davemloft.net>,
        Jarkko Sakkinen <jarkko@kernel.org>,
        "jmorris@namei.org" <jmorris@namei.org>,
        "serge@hallyn.com" <serge@hallyn.com>,
        "keescook@chromium.org" <keescook@chromium.org>,
        "torvalds@linux-foundation.org" <torvalds@linux-foundation.org>,
        "weiyongjun1@huawei.com" <weiyongjun1@huawei.com>,
        Nayna Jain <nayna@linux.ibm.com>,
        Eric Biggers <ebiggers@google.com>,
        "ardb@kernel.org" <ardb@kernel.org>,
        Lakshmi Ramasubramanian <nramas@linux.microsoft.com>,
        "lszubowi@redhat.com" <lszubowi@redhat.com>,
        "jason@zx2c4.com" <jason@zx2c4.com>,
        "linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>,
        "linux-crypto@vger.kernel.org" <linux-crypto@vger.kernel.org>,
        "linux-efi@vger.kernel.org" <linux-efi@vger.kernel.org>,
        "linux-security-module@vger.kernel.org" 
        <linux-security-module@vger.kernel.org>,
        "James.Bottomley@hansenpartnership.com" 
        <James.Bottomley@hansenpartnership.com>,
        "pjones@redhat.com" <pjones@redhat.com>,
        Konrad Wilk <konrad.wilk@oracle.com>
Subject: Re: [PATCH v8 16/17] integrity: Trust MOK keys if MokListTrustedRT
 found
Thread-Topic: [PATCH v8 16/17] integrity: Trust MOK keys if MokListTrustedRT
 found
Thread-Index: AQHX4O22o7n05FQT4kqWdM0Hvcs3jK45bU+AgAAO3YA=
Date:   Thu, 10 Nov 2022 00:54:43 +0000
Message-ID: <4A479B96-4B41-4323-9920-5A909423F998@oracle.com>
References: <20211124044124.998170-1-eric.snowberg@oracle.com>
 <20211124044124.998170-17-eric.snowberg@oracle.com>
 <20221110000129.kl6pjy5mafpuptbk@framework>
In-Reply-To: <20221110000129.kl6pjy5mafpuptbk@framework>
Accept-Language: en-US
Content-Language: en-US
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: =?utf-8?B?L1lWb1B1ajBnUFNZeGFGRW5zZ0RhVXo2eVp3UG96dXY0Znh0QktIRUt2WlNC?=
 =?utf-8?B?SUo5MVgzYkd1dnJEL3krMTBrR3M3WFlLY05tUms2NzIrRTBrbHVWT3lZYzhm?=
 =?utf-8?B?dTRMTGtHYWNhSThNQUpQZVJETklXbzB4M25SUzlSN3dGcEhqb0JuM2I2ZjlG?=
 =?utf-8?B?Mi9Va0JnSzlNRW40cGtHUmJtelVhWFhlMVpUZXdsdmFrWU5zczRsSEQwK3lq?=
 =?utf-8?B?UzVEbm5xQmU5ZFdRbzRJTzhSeWNDb05iOGxmdVFybVhnbUxtSkpOdnAxTTBF?=
 =?utf-8?B?YzdCYm9YYjJpdkxDMzU0SU1jekozUlNzREJMbGY1UlFqMHNjVjV3aTZ0clBx?=
 =?utf-8?B?a0labkZJZFJDazQ5cndZTzlLNUx5YmFlaGI0WWtZNEF1a0VRNzdpMkdmQnlz?=
 =?utf-8?B?b2tZNE9SWldKVnYwbjBhNWNjdHZSOUdENjUxSW1RbWVJRWVxRzNrdnJuRTVr?=
 =?utf-8?B?OVBPQVJOcXA3RDluWXphN0Z6T0lqZGNpVzZicGhMV1JZeHlzaGNESXZxcnZm?=
 =?utf-8?B?MEZhb2ViNWhyM3FEcUlUTU15dFZ3bTZHTFFDQi9vbXhOVW95dVpzQ085dWhU?=
 =?utf-8?B?RDRPNmwyM3hXelBJdHVXd0lqaUEwZ29pRENYc0VnMHQwN01EU3RqYVZaampY?=
 =?utf-8?B?ZFVtcWcyQzFPbnYyV2JaTmV3b0VDSk4yUXhFckFQR0M1ZERCOXJDRFU1RU1U?=
 =?utf-8?B?Q0pDS2pOS1FMRGI4dG5ZK1ErdWpqaHRaeEhpWVhsK2drSk5pRGlEendVbXJk?=
 =?utf-8?B?V2s1Yjh4anVBK0RsRzBRaE53YzVncGZ3cHUrN0I1b0FKVkVQNy9sWCtUYlJ1?=
 =?utf-8?B?UXcwRnZ2MkZQMlZRUjFETVZSUzJITzhSbFhBWFhKT2NMbE1adHU0bHZnMUEv?=
 =?utf-8?B?QmJ1Yy9kcG5hVjdjakNkcU5kTlFoSHM2WkxwdFVqSlZKbnFDLzFoUEhUT0cx?=
 =?utf-8?B?anhxaFdrb1pFL3Vua2JZWTAxbWJZaWpWYk1hNHFaemJSd21acERCSFl6bDNV?=
 =?utf-8?B?L2hRc0hxTlI3SFZFbTNrdXlYL0IxZUJDejNvNXhUQkhzdWd6YVpXOU5uc3lZ?=
 =?utf-8?B?QU5naHFyV2pDUWt1VW5TMllPdzlwenAyY09CVlZmakpxZy9YZUIwUUxJL3d3?=
 =?utf-8?B?bzJmN0lEc1BiU2t1UVh3MlFidSt1UlNZR0pjYk4vYUswTlp0bFVhZDJrMlc3?=
 =?utf-8?B?MTNEUTNIN2N1NG5pQytUc3AxdWZkR0dURGduWTFNWkQ4cUFPUjgxWWY4Y1Rx?=
 =?utf-8?B?WmMwWEdqS1kya2QyLzVEVXlKSzRhRHVNbk8zUitoOVFySjFrdjFNaktlejZ2?=
 =?utf-8?B?R0FXaFlJTERpRFQ3Ky85UHJ1NjRtakY1ak42RE54WE5qTHVVYW1vWEdhci9y?=
 =?utf-8?B?c0lBditHWG9saEJlZGhvaHROeFRydHZsci84MUR4RE1MbVl1cHlmdmNrWHFv?=
 =?utf-8?B?SnF5ZlRTU2ovWmpuQmdVY0tmNGZhaTM5RG8zbkJzVzduUnRpbXkzOFo2UlhM?=
 =?utf-8?B?YmR5M1JzT29mbVBMVGhYaHlBYXZwdkd2VnAzSkh4MnFIa0R5Y2NqNzQ5RjY3?=
 =?utf-8?B?YnlaTGMrdmZnZVo5U3BYaVBxRldmazRQbTdkak84ZlIwTUlSRnV0ejdUYjI5?=
 =?utf-8?B?VlpvS1JLc1dIc2hQc0tiTy9rczF4Y3dpMTg1WHYzcENFTTVMMkg2bWljY2I0?=
 =?utf-8?B?ZGRTaDUweklHV21qZjlEM3RCQVVJZVRVTEs3ODZyRUF5N3dUdDY0alk0ZmRB?=
 =?utf-8?B?bk9lMWJpY3VWbWdaSmpOempvRlV0Ylhlck4vNVc4cGY1RGxPVTdQVThIY2Jn?=
 =?utf-8?B?UjB5UkptVzR5azFDalhvQ2FuV1FCMDVQZlVKT3htcDFvaTk4cDJ1YVVuWTQv?=
 =?utf-8?B?NnAvNDd6SXJpSGhDMnF4WEFaaU91TVZYZS9EcERrdDhwSVc5dEtRSVlKaDB5?=
 =?utf-8?B?Wm1yK3lMY3JHaitJMUZxMmdWZGkyM0RlT21rbFhHRnduVndlaGFvbUQrQkk0?=
 =?utf-8?B?ZUxERUI2eFU2Q1JTYU5lVzl3WnlZTVpneExOL3BRcWZMeENNSXkvWmI1Q1Fw?=
 =?utf-8?B?UFZ0S2FkeC9ZZnFDZHNKc0xRdG1QLy9GUGZpazlmNnZ2TTgraXk4S092cnBO?=
 =?utf-8?B?amFLV0p3aktqRjZmbm1tZXVETjAzVGlTOGtMaThpRnd1WHFQMTVWVkFEL0Y5?=
 =?utf-8?Q?VsUxnM/FJCcWrQa9FqSxdQEy69D14epgzYDbil7UQTYQ?=
Content-Type: text/plain; charset="utf-8"
Content-ID: <DD8CF4EF58B4184F9156299ECCB5E0BF@namprd10.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: oracle.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: CH2PR10MB4150.namprd10.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 01a384d9-6bc7-49e9-0887-08dac2b62812
X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Nov 2022 00:54:43.7828
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 4e2c6054-71cb-48f1-bd6c-3a9705aca71b
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: T4InuXlYO2lzQHQ6nxR8c19mDMrgxgS3Z9U702GsyuKDGuV/B5fZOS2hILpiPgQ4ceyGQC/6tCUrPzqPdzIvcA3pBgSFNfexUL3BDzevibI=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BLAPR10MB5073
X-Proofpoint-Virus-Version: vendor=baseguard
 engine=ICAP:2.0.219,Aquarius:18.0.895,Hydra:6.0.545,FMLib:17.11.122.1
 definitions=2022-11-09_06,2022-11-09_01,2022-06-22_01
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 bulkscore=0 spamscore=0 malwarescore=0
 adultscore=0 mlxscore=0 mlxlogscore=999 phishscore=0 suspectscore=0
 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2210170000
 definitions=main-2211100004
X-Proofpoint-ORIG-GUID: 6spophyHnZ3IJCsLyb_t4jAH4ONmpKPc
X-Proofpoint-GUID: 6spophyHnZ3IJCsLyb_t4jAH4ONmpKPc
X-Spam-Status: No, score=-2.8 required=5.0 tests=BAYES_00,DKIM_SIGNED,
        DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_LOW,
        RCVD_IN_MSPIKE_H2,SPF_HELO_NONE,SPF_NONE autolearn=ham
        autolearn_force=no version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
        lindbergh.monkeyblade.net
Precedence: bulk
List-ID: <linux-crypto.vger.kernel.org>
X-Mailing-List: linux-crypto@vger.kernel.org
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