[prev in list] [next in list] [prev in thread] [next in thread] 

List:       linux-keyrings
Subject:    Re: [PATCH v5 0/2] IMA: Deferred measurement of keys
From:       Lakshmi Ramasubramanian <nramas () linux ! microsoft ! com>
Date:       2019-12-20 20:50:34
Message-ID: 9f346e6d-04f2-b8cd-bf67-f1cee59d9630 () linux ! microsoft ! com
[Download RAW message or body]

On 12/20/19 11:36 AM, Mimi Zohar wrote:

>>
>> Shall I create a new patch set to address that and have that be reviewed
>> independent of this patch set?
> 
> If it is just a single additional patch, feel free to post it without
> a cover letter.

Sure

>>
>> Like you'd suggested earlier, we can wait for a certain time, after IMA
>> is initialized, and free the queue if a custom policy was not loaded.
> 
> Different types of systems vary in boot time, but perhaps a certain
> amount of time after IMA is initialized would be consistent.   This
> would need to work for IoT devices/sensors to servers.
> 
> Mimi
> 

Yes - I agree.

thanks,
  -lakshmi
[prev in list] [next in list] [prev in thread] [next in thread]