Re: [RFC PATCH security-next 0/4] Introducing Hornet LSM

On Sat, Mar 22, 2025 at 04:48:14PM -0400, Paul Moore wrote: > On Sat, Mar 22, 2025 at 4:44 PM Paul Moore wrote: > > > > On Sat, Mar 22, 2025 at 1:22 PM Jarkko Sakkinen wrote: > > > On Fri, Mar 21, 2025 at 09:45:02AM -0700, Blaise Boscaccy wrote: > > > > This patch series introduces the Hornet LSM

Re: [RFC PATCH security-next 0/4] Introducing Hornet LSM

On Sat, Mar 22, 2025 at 04:44:13PM -0400, Paul Moore wrote: > On Sat, Mar 22, 2025 at 1:22 PM Jarkko Sakkinen wrote: > > On Fri, Mar 21, 2025 at 09:45:02AM -0700, Blaise Boscaccy wrote: > > > This patch series introduces the Hornet LSM. > > > > > > Hornet takes a simple approach to light-skeleton-

Re: [RFC PATCH security-next 0/4] Introducing Hornet LSM

On Sat, Mar 22, 2025 at 1:22 PM Jarkko Sakkinen wrote: > On Fri, Mar 21, 2025 at 09:45:02AM -0700, Blaise Boscaccy wrote: > > This patch series introduces the Hornet LSM. > > > > Hornet takes a simple approach to light-skeleton-based eBPF signature > > Can you define "light-skeleton-based" before

Re: [RFC PATCH security-next 0/4] Introducing Hornet LSM

On Sat, Mar 22, 2025 at 4:44 PM Paul Moore wrote: > > On Sat, Mar 22, 2025 at 1:22 PM Jarkko Sakkinen wrote: > > On Fri, Mar 21, 2025 at 09:45:02AM -0700, Blaise Boscaccy wrote: > > > This patch series introduces the Hornet LSM. > > > > > > Hornet takes a simple approach to light-skeleton-based e

Re: [RFC PATCH security-next 3/4] hornet: Add an example lskel data extactor script

On Fri, Mar 21, 2025 at 09:45:05AM -0700, Blaise Boscaccy wrote: > This script eases lskel developments against hornet by generating the 1. What iskel? 2. Why hornet is here in lower case? > data payload used for code signing. It extracts the data out of the > autogenerated lskel header that gets

Re: [RFC PATCH security-next 2/4] hornet: Introduce sign-ebpf

On Fri, Mar 21, 2025 at 09:45:04AM -0700, Blaise Boscaccy wrote: > This introduces the sign-ebpf tool. It is very similar to the existing > sign-file script, with one key difference, it will sign a file with > with a signature computed off of arbitrary input data. This can used > to sign an ebpf li

Re: [RFC PATCH security-next 0/4] Introducing Hornet LSM

On Fri, Mar 21, 2025 at 09:45:02AM -0700, Blaise Boscaccy wrote: > This patch series introduces the Hornet LSM. > > Hornet takes a simple approach to light-skeleton-based eBPF signature Can you define "light-skeleton-based" before using the term. This is the first time in my life when I hear abo