Re: [RFC PATCH v9 11/16] ipe: add support for dm-verity as a trust provider
Fan Wu <[email protected]> Thu, 16 Mar 2023 15:10:36 -0700
| Newsgroups | com.redhat.linux-audit,dev.linux.lists.dm-devel,org.kernel.vger.linux-block,org.kernel.vger.linux-doc,org.kernel.vger.linux-fscrypt,org.kernel.vger.linux-integrity,org.kernel.vger.linux-kernel,org.kernel.vger.linux-security-module |
|---|---|
| Message-ID | <20230316221036.GA22567@linuxonhyperv3.guj3yctzbm1etfxqx2vob5hsef.xx.internal.cloudapp.net> |
On Thu, Mar 02, 2023 at 02:08:04PM -0500, Paul Moore wrote: > > If you had both IPE and dm-verity enabled in your kernel build, is > there ever a case where you wouldn't want IPE_PROP_DM_VERITY? I > suspect you can just have IPE and dm-verity select IPE_PROP_DM_VERITY > and not bother the user/admin with the additional Kconfig knob. > Sorry for the late reply, I was relocating to a new country and it took me some time to settle down. I have read your comments and I will try to answer some questions that I can answer right now. For the remaining questions, I need more time to get more context and information. I will get back to you as soon as possible. For this one I agree just have IPE and dm-verity select IPE_PROP_DM_VERITY is better, I will update this in the next version. > > -- > paul-moore.com -- Linux-audit mailing list [email protected] https://listman.redhat.com/mailman/listinfo/linux-audit