Re: [PATCH] PR28204, debuginfod IMA

2023-11-15 Thread Mark Wielaard
Hi Frank, On Tue, 2023-11-14 at 11:45 -0500, Frank Ch. Eigler wrote: > > >\fIima:optimistic\fP Every downloaded file with a known-invalid > > >signature is rejected, protecting against some types of corruption. > > > > I like this wording more. But maybe it would be helpful to split the >

Re: [PATCH] PR28204, debuginfod IMA

2023-11-14 Thread Frank Ch. Eigler
Hi - > >\fIima:optimistic\fP Every downloaded file with a known-invalid > >signature is rejected, protecting against some types of corruption. > > I like this wording more. But maybe it would be helpful to split the > patch into one that implements ima:enforcing and another that adds the

Re: [PATCH] PR28204, debuginfod IMA

2023-11-01 Thread Mark Wielaard
Hi Frank, On Tue, 2023-10-31 at 11:46 -0400, Frank Ch. Eigler wrote: > > My point is really that posting with git format-patch or send-email > > makes it possible for someone to simply use git am, b4 or git pw to try > > out a patch. If the patch doesn't apply then that will be the first > > revie

Re: [PATCH] PR28204, debuginfod IMA

2023-10-31 Thread Frank Ch. Eigler
Hi, Mark - > > Considering how easily the trybots can process the actual code - and > > have done so before posting the patch for review - we can consider > > some CI well done already. After approval but before merge, it would > > undergo another round of trybotting. With such workflow, patchw

Re: [PATCH] PR28204, debuginfod IMA

2023-10-31 Thread Mark Wielaard
Hi Frank, On Fri, 2023-10-27 at 15:15 -0400, Frank Ch. Eigler wrote: > > > I would not expect the emailed patch to apply, esp. with all the other > > > work done in the intermediate months, which is why the code is also in > > > the git branch. The binary files do not seem effectively reviewable

Re: [PATCH] PR28204, debuginfod IMA

2023-10-27 Thread Frank Ch. Eigler
Hi - > > I would not expect the emailed patch to apply, esp. with all the other > > work done in the intermediate months, which is why the code is also in > > the git branch. The binary files do not seem effectively reviewable > > anyway. > > It would be really convenient though. And modern git

Re: [PATCH] PR28204, debuginfod IMA

2023-10-24 Thread Mark Wielaard
Hi Frank, On Tue, Oct 24, 2023 at 09:27:43AM -0400, Frank Ch. Eigler wrote: > > BTW. The diff doesn't show the newly added binary files. So the patch > > cannot be applied. Please use git send-email or git format-patch for > > that. > > I would not expect the emailed patch to apply, esp. with all

Re: [PATCH] PR28204, debuginfod IMA

2023-10-24 Thread Mark Wielaard
Hi, Continued review... On Thu, 2023-09-07 at 08:55 -0400, Frank Ch. Eigler via Elfutils-devel wrote: > diff --git a/debuginfod/debuginfod.cxx b/debuginfod/debuginfod.cxx > index d72d2ad16960..8c3298586672 100644 > --- a/debuginfod/debuginfod.cxx > +++ b/debuginfod/debuginfod.cxx > @@ -113,6 +113

Re: [PATCH] PR28204, debuginfod IMA

2023-10-24 Thread Frank Ch. Eigler
Hi - Thanks for the review. > [...] > BTW. The diff doesn't show the newly added binary files. So the patch > cannot be applied. Please use git send-email or git format-patch for > that. I would not expect the emailed patch to apply, esp. with all the other work done in the intermediate months,

Re: [PATCH] PR28204, debuginfod IMA

2023-10-23 Thread Mark Wielaard
Hi Frank, On Thu, Sep 07, 2023 at 08:55:10AM -0400, Frank Ch. Eigler via Elfutils-devel wrote: > Here's a squashed/rebased version of the big IMA patch. I also > tweaked a few documentation oriented bits, and removed the > "ima:default" tag. Thanks. Sorry the reviews take so long. But it is a b