From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-yb1-f182.google.com (mail-yb1-f182.google.com [209.85.219.182]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id A508115821A for ; Wed, 19 Jun 2024 18:44:10 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.219.182 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1718822652; cv=none; b=lm0PjynYoD0cZFfgcTPylaoR6/NXPPtqwVs6JTrS9a578GTR7Yr+iPboBJJFjkaLT/vjHbOwaFoNEMbMMXuiWo8SdMJIAcbimMVLjAYp6K2Y64fkPba2NmmcTyMH73SsusnGU8JQpXafVLvXw8tHAuZQ8JmOFAttTcCufnCXSDY= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1718822652; c=relaxed/simple; bh=POFve0DmEktYU/Q9LBEZgVsromDP4CbL8eVyLHPQrk4=; h=MIME-Version:References:In-Reply-To:From:Date:Message-ID:Subject: To:Cc:Content-Type; b=Tab+gdjVY5cvpZWXA9PDDPaOfObEGA+Tqc9ugWGq56tfOs5fSyjdR5Vy69cgO9z0/dG/hKLjCbdj8rC/pq2RH3TlR0hvGU0B6ujm2c/bwrWLTx8pJ5uwYEpNv/Xsxqfs9OX2QlQGDfjZd1GdhL+vPu+SwZnCdXtxHx1B2HXMW+w= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=paul-moore.com; spf=pass smtp.mailfrom=paul-moore.com; dkim=pass (2048-bit key) header.d=paul-moore.com header.i=@paul-moore.com header.b=Pioi5qnt; arc=none smtp.client-ip=209.85.219.182 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=paul-moore.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=paul-moore.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=paul-moore.com header.i=@paul-moore.com header.b="Pioi5qnt" Received: by mail-yb1-f182.google.com with SMTP id 3f1490d57ef6-e02b79c6f21so68744276.2 for ; Wed, 19 Jun 2024 11:44:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=paul-moore.com; s=google; t=1718822649; x=1719427449; darn=vger.kernel.org; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=POFve0DmEktYU/Q9LBEZgVsromDP4CbL8eVyLHPQrk4=; b=Pioi5qntPCxOIm3z53nIpGWi2uPbDOic+mRo2/Qq3fNPCJpVILcMRMyLss3bPQKTCJ 230Svjct3MoM6oeE1JRjUs1a8I5c/jndCl3S5TX4fX1J3luteLUdfFYK7LN3OVg3T1f8 cF72+1VzBKZDywOQuDgQLH0dOYewrgMUIXyS95rb4u6p01zlKocbFbGHBwl+v0plA/ra dnQktVN3J3bKVNUQTNa65frKaeiR6ai4/uDYnyK/mn/avVG4baIwGGBS219TUYWePZc2 wypJWegTMYYxyJf0EBllFQF6g4MZtdmEJmdD882szy8cP2NpspENfiK+zHqA4PncUkVX P/Yw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1718822649; x=1719427449; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=POFve0DmEktYU/Q9LBEZgVsromDP4CbL8eVyLHPQrk4=; b=mANzqGEWzlhDxwI1C7ksQdj5B7nAeUwOEfY2DlbMZO4bwPK97/Ne1Qir6RclgpTTJB wiThiD7kqiosbY+JjpaxXQOv5i96gl8nZ/ZNM4kVm0b1cVsxrF24iDOqTUx5rwmbk4LS qfiFCnx1yg07PQvqn2cJ53gRgR7o/U4e/nEIdKECXAtbjRyMVOtHZDDHZvEVgfx6Lf9E TQvqkJYlVYZafZPzzavJZh16hnIUcMSub3hCLNuGT9G5/R7tWBL3PzjCVABH94OS4y/U MFgf3ne9tmxvkAnfHnHCPzKDS4IpVjcozLVw0FsVefGpTfcdY0LHCJ+gjI80Bz0yqMyS h7ow== X-Forwarded-Encrypted: i=1; AJvYcCXXxTCIByeUJAHcMiXTBnWDg84DQNGAShbyw6NVCtZagARkI407689AURvTXRz8pRAsIMFXae5vrHiSB1OVsRY2mOSMi7KlYUxl7SHE X-Gm-Message-State: AOJu0YxlZPaibUNVB1wS3gWMA+nbfKcZd84RX3YYiQ0COUIhk9kLxb71 hdAUKyX4cEJFyNN48Pr71ZKH3NAUfEC8NbbHLQxPj3pNQtedy+qKLzZbWlefi+GtlxbdokgPh49 hAVJYugIvUtXmLH7r+MUSifPg1E1X9F44pTYe X-Google-Smtp-Source: AGHT+IHqUYv4vQPGwGcr2ob928yU34u20roGy4+cdrTQUMxtndJziPMKog+pA/vBVDGo8roMs908SVyt/zescjJ93yg= X-Received: by 2002:a25:fc20:0:b0:e02:8b7a:2b07 with SMTP id 3f1490d57ef6-e02be141ff3mr3782911276.20.1718822649520; Wed, 19 Jun 2024 11:44:09 -0700 (PDT) Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 References: <20240415142436.2545003-1-roberto.sassu@huaweicloud.com> <7cf03a6ba8dbf212623aab2dea3dac39482e8695.camel@huaweicloud.com> <520d2dc2ff0091335a280a877fa9eb004af14309.camel@huaweicloud.com> <2b335bdd5c20878e0366dcf6b62d14f73c2251de.camel@huaweicloud.com> In-Reply-To: <2b335bdd5c20878e0366dcf6b62d14f73c2251de.camel@huaweicloud.com> From: Paul Moore Date: Wed, 19 Jun 2024 14:43:58 -0400 Message-ID: Subject: Re: [PATCH v4 00/14] security: digest_cache LSM To: Roberto Sassu Cc: corbet@lwn.net, jmorris@namei.org, serge@hallyn.com, akpm@linux-foundation.org, shuah@kernel.org, mcoquelin.stm32@gmail.com, alexandre.torgue@foss.st.com, mic@digikod.net, linux-security-module@vger.kernel.org, linux-doc@vger.kernel.org, linux-kernel@vger.kernel.org, linux-kselftest@vger.kernel.org, bpf@vger.kernel.org, zohar@linux.ibm.com, dmitry.kasatkin@gmail.com, linux-integrity@vger.kernel.org, wufan@linux.microsoft.com, pbrobinson@gmail.com, zbyszek@in.waw.pl, hch@lst.de, mjg59@srcf.ucam.org, pmatilai@redhat.com, jannh@google.com, dhowells@redhat.com, jikos@kernel.org, mkoutny@suse.com, ppavlu@suse.com, petr.vorel@gmail.com, mzerqung@0pointer.de, kgold@linux.ibm.com, Roberto Sassu Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Wed, Jun 19, 2024 at 12:38=E2=80=AFPM Roberto Sassu wrote: > > Making it a kernel subsystem would likely mean replicating what the LSM > infrastructure is doing, inode (security) blob and being notified about > file/directory changes. Just because the LSM framework can be used for something, perhaps it even makes the implementation easier, it doesn't mean the framework should be used for everything. --=20 paul-moore.com