|
[isar-cip-core][PATCH v4 2/7] KConfig: add tpm option
4 messages
From: Quirin Gylstorff <quirin.gylstorff@...> Signed-off-by: Quirin Gylstorff <quirin.gylstorff@...> --- Kconfig | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/Kconfig b/Kconfig index
From: Quirin Gylstorff <quirin.gylstorff@...> Signed-off-by: Quirin Gylstorff <quirin.gylstorff@...> --- Kconfig | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/Kconfig b/Kconfig index
|
By
Quirin Gylstorff
·
|
|
CIP IRC weekly meeting today on libera.chat
Hi all, Kindly be reminded to attend the weekly meeting through IRC to discuss technical topics with CIP kernel today. Our channel is the following: irc:irc.libera.chat:6667/cip The IRC meeting is sch
Hi all, Kindly be reminded to attend the weekly meeting through IRC to discuss technical topics with CIP kernel today. Our channel is the following: irc:irc.libera.chat:6667/cip The IRC meeting is sch
|
By
Jan Kiszka
·
|
|
New CVE entries this week
Hi ! It's this week's CVE report. This week reported 11 new CVEs and 4 updated CVEs. * New CVEs CVE-2023-23002: Bluetooth: hci_qca: Fix NULL vs IS_ERR_OR_NULL check in qca_serdev_probe CVSS v3 score i
Hi ! It's this week's CVE report. This week reported 11 new CVEs and 4 updated CVEs. * New CVEs CVE-2023-23002: Bluetooth: hci_qca: Fix NULL vs IS_ERR_OR_NULL check in qca_serdev_probe CVSS v3 score i
|
By
Masami Ichikawa
·
|
|
Who is looking at CVEs to prevent them?
3 messages
Why do you keep adding linux-mm to the Cc list of random threads that are not about MM?
Why do you keep adding linux-mm to the Cc list of random threads that are not about MM?
|
By
Vlastimil Babka
·
|
|
Who is looking at CVEs to prevent them?
Yeah. Really just posting the code and the results seems like the best way forward to me too. That's how syzbot does it and it's the only realistic way forward. The good thing is that static checker w
Yeah. Really just posting the code and the results seems like the best way forward to me too. That's how syzbot does it and it's the only realistic way forward. The good thing is that static checker w
|
By
Dan Carpenter
·
|
|
Who is looking at CVEs to prevent them?
On Thu, Jan 19, 2023 at 09:14:53AM +0900, Masami Ichikawa wrote: > CVE-2023-0210: ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in > ksmbd_decode_ntlmssp_auth_blob > > 5.15, 6.0, and 6.1 were fi
On Thu, Jan 19, 2023 at 09:14:53AM +0900, Masami Ichikawa wrote: > CVE-2023-0210: ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in > ksmbd_decode_ntlmssp_auth_blob > > 5.15, 6.0, and 6.1 were fi
|
By
Dan Carpenter
·
|
|
[isar-cip-core][PATCH v4 5/7] overlay: add prerequisite 'encrypt_partition'
From: Quirin Gylstorff <quirin.gylstorff@...> If /var shall be encrypted encrypt_partition needs to be executed before the overlay script. If the prerequisite is not available the overlay script will
From: Quirin Gylstorff <quirin.gylstorff@...> If /var shall be encrypted encrypt_partition needs to be executed before the overlay script. If the prerequisite is not available the overlay script will
|
By
Quirin Gylstorff
·
|
|
[isar-cip-core][PATCH v4 1/7] use bullseye backports for systemd-cryptenroll
From: Quirin Gylstorff <quirin.gylstorff@...> Systemd >= 251 is required for systemd-cryptenroll. This version is part of backports. Signed-off-by: Quirin Gylstorff <quirin.gylstorff@...> --- conf/dis
From: Quirin Gylstorff <quirin.gylstorff@...> Systemd >= 251 is required for systemd-cryptenroll. This version is part of backports. Signed-off-by: Quirin Gylstorff <quirin.gylstorff@...> --- conf/dis
|
By
Quirin Gylstorff
·
|
|
[isar-cip-core][PATCH v4 7/7] Add README for encrypted partitions
From: Quirin Gylstorff <quirin.gylstorff@...> Signed-off-by: Quirin Gylstorff <quirin.gylstorff@...> --- doc/README.tpm2.encryption.md | 55 +++++++++++++++++++++++++++++++++++ 1 file changed, 55 inser
From: Quirin Gylstorff <quirin.gylstorff@...> Signed-off-by: Quirin Gylstorff <quirin.gylstorff@...> --- doc/README.tpm2.encryption.md | 55 +++++++++++++++++++++++++++++++++++ 1 file changed, 55 inser
|
By
Quirin Gylstorff
·
|
|
[isar-cip-core][PATCH v4 6/7] .gitlabci: Add ci build
From: Quirin Gylstorff <quirin.gylstorff@...> Signed-off-by: Quirin Gylstorff <quirin.gylstorff@...> --- .gitlab-ci.yml | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/.gitlab-ci.yml
From: Quirin Gylstorff <quirin.gylstorff@...> Signed-off-by: Quirin Gylstorff <quirin.gylstorff@...> --- .gitlab-ci.yml | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/.gitlab-ci.yml
|
By
Quirin Gylstorff
·
|
|
[isar-cip-core][PATCH v4 4/7] Add initramfs hook to encrypt a partition
From: Quirin Gylstorff <quirin.gylstorff@...> This creates a new luks encrypted ext4 partition with a the key stored in the tpm2. The initial key is randomly generated and removed from the LUKS partit
From: Quirin Gylstorff <quirin.gylstorff@...> This creates a new luks encrypted ext4 partition with a the key stored in the tpm2. The initial key is randomly generated and removed from the LUKS partit
|
By
Quirin Gylstorff
·
|
|
[isar-cip-core][PATCH v4 3/7] start-qemu.sh: Create a tpm2 device
From: Quirin Gylstorff <quirin.gylstorff@...> This allows testing the tpm2 encryption with qemu. Signed-off-by: Quirin Gylstorff <quirin.gylstorff@...> --- start-qemu.sh | 27 ++++++++++++++++++++++---
From: Quirin Gylstorff <quirin.gylstorff@...> This allows testing the tpm2 encryption with qemu. Signed-off-by: Quirin Gylstorff <quirin.gylstorff@...> --- start-qemu.sh | 27 ++++++++++++++++++++++---
|
By
Quirin Gylstorff
·
|
|
[isar-cip-core][PATCH v4 0/7] Encrypt Partition in initramfs
From: Quirin Gylstorff <quirin.gylstorff@...> This encrypts a partition with LUKS and uses the TPM2 to unlock the partition during boot. Adapt start-qemu to support tpm2. The implementation uses syste
From: Quirin Gylstorff <quirin.gylstorff@...> This encrypts a partition with LUKS and uses the TPM2 to unlock the partition during boot. Adapt start-qemu to support tpm2. The implementation uses syste
|
By
Quirin Gylstorff
·
|
|
[isar-cip-core][PATCH v4 0/8] Add swupdate support for riscv64
2 messages
Changes since v3: - rebased onto next - add patch to clarify situation around watchdog on arm* - u-boot: remove irrelevant patch around FPU Changes since v2: The v2 adds the required infrastructure to
Changes since v3: - rebased onto next - add patch to clarify situation around watchdog on arm* - u-boot: remove irrelevant patch around FPU Changes since v2: The v2 adds the required infrastructure to
|
By
Felix Moessbauer
·
|
|
[bug report] ksmbd: check invalid FileOffset and BeyondFinalZero in FSCTL_ZERO_DATA
2 messages
Hello Namjae Jeon, The patch b5e5f9dfc915: "ksmbd: check invalid FileOffset and BeyondFinalZero in FSCTL_ZERO_DATA" from Jun 19, 2022, leads to the following Smatch static checker warning: fs/ksmbd/sm
Hello Namjae Jeon, The patch b5e5f9dfc915: "ksmbd: check invalid FileOffset and BeyondFinalZero in FSCTL_ZERO_DATA" from Jun 19, 2022, leads to the following Smatch static checker warning: fs/ksmbd/sm
|
By
Dan Carpenter
·
|
|
[bug report] md: range check slot number when manually adding a spare.
4 messages
[ Ancient code, but you're still at the same email address... -dan ] Hello NeilBrown, The patch ba1b41b6b4e3: "md: range check slot number when manually adding a spare." from Jan 14, 2011, leads to th
[ Ancient code, but you're still at the same email address... -dan ] Hello NeilBrown, The patch ba1b41b6b4e3: "md: range check slot number when manually adding a spare." from Jan 14, 2011, leads to th
|
By
Dan Carpenter
·
|
|
[isar-cip-core][PATCH v4 4/8] add opensbi with u-boot payload for riscv64
2 messages
This patch adds the opensbi firmware with u-boot payload (smode) for the qemu-riscv64 machine. Using that, the generated riscv64 images can be booted on qemu. Signed-off-by: Felix Moessbauer <felix.mo
This patch adds the opensbi firmware with u-boot payload (smode) for the qemu-riscv64 machine. Using that, the generated riscv64 images can be booted on qemu. Signed-off-by: Felix Moessbauer <felix.mo
|
By
Felix Moessbauer
·
|
|
[isar-cip-core][PATCH v4 6/8] add linux 6.1 mainline kernel
2 messages
This patch adds the vanilla 6.1 linux kernel for testing and for boards which need a more recent kernel than what CIP can offer. The kernel can be selected from the menu, similar to the other kernels.
This patch adds the vanilla 6.1 linux kernel for testing and for boards which need a more recent kernel than what CIP can offer. The kernel can be selected from the menu, similar to the other kernels.
|
By
Felix Moessbauer
·
|
|
cip-gitlab/ci/iwamatsu/linux-5.10.y-cip-rc ltp-timers: 7 runs, 9 regressions (v5.10.168-cip27-109-g23841ec76bec)
#kernelci
cip-gitlab/ci/iwamatsu/linux-5.10.y-cip-rc ltp-timers: 7 runs, 9 regressions (v5.10.168-cip27-109-g23841ec76bec) Regressions Summary ------------------- platform | arch | lab | compiler | defconfig |
cip-gitlab/ci/iwamatsu/linux-5.10.y-cip-rc ltp-timers: 7 runs, 9 regressions (v5.10.168-cip27-109-g23841ec76bec) Regressions Summary ------------------- platform | arch | lab | compiler | defconfig |
|
By
kernelci.org bot
·
|
|
cip-gitlab/ci/iwamatsu/linux-5.10.y-cip-rc ltp-ipc: 10 runs, 1 regressions (v5.10.168-cip27-109-g23841ec76bec)
#kernelci
cip-gitlab/ci/iwamatsu/linux-5.10.y-cip-rc ltp-ipc: 10 runs, 1 regressions (v5.10.168-cip27-109-g23841ec76bec) Regressions Summary ------------------- platform | arch | lab | compiler | defconfig | re
cip-gitlab/ci/iwamatsu/linux-5.10.y-cip-rc ltp-ipc: 10 runs, 1 regressions (v5.10.168-cip27-109-g23841ec76bec) Regressions Summary ------------------- platform | arch | lab | compiler | defconfig | re
|
By
kernelci.org bot
·
|