From patchwork Tue Aug 30 00:46:10 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Matthias Kaehlcke X-Patchwork-Id: 12958557 X-Patchwork-Delegate: paul@paul-moore.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by smtp.lore.kernel.org (Postfix) with ESMTP id DEDE3ECAAD2 for ; Tue, 30 Aug 2022 00:46:19 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S229649AbiH3AqT (ORCPT ); Mon, 29 Aug 2022 20:46:19 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:45922 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S229607AbiH3AqS (ORCPT ); Mon, 29 Aug 2022 20:46:18 -0400 Received: from mail-pf1-x433.google.com (mail-pf1-x433.google.com [IPv6:2607:f8b0:4864:20::433]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 7787D7E30C for ; Mon, 29 Aug 2022 17:46:15 -0700 (PDT) Received: by mail-pf1-x433.google.com with SMTP id y141so9813970pfb.7 for ; Mon, 29 Aug 2022 17:46:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc; bh=vu7WwGg8hHjHQMxVBeejwIO9X7hwzWU+rYfumkNTH28=; b=b6S3/gCKo9NnWhn25HJlEhO8WEl7M4A1s/ssomIGAzJE1FH4gXEurRRpcCR9M6R3Se gcZNRDdvw/CyXRDSoZE8QCSDE3T2kQkYNrDeQnXJw4CgKfMwaTsJqzQ2oVOVNrZsD61p dNilZgZ0MKd5EZdlmfh9+HiVlYYhnlFyJPFSo= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-message-state:from:to:cc; bh=vu7WwGg8hHjHQMxVBeejwIO9X7hwzWU+rYfumkNTH28=; b=dyryO8LSc7DxlD+ln3P/0QTdGSTcq5IilSy5gHe/qT3jE13/cnX7YzxCD2/lur9edQ AUL9pUh1aNLdwz/gRvHH7gmVf57PeXJcyRr31QeF4bv+sgYf/obSikZgu2+NRh5Kam/q 10WOaa1YJxEEdWirrb28rw6u3zN31SBtXjdZzewbs+0Fme8jBAZN15JgR+mlbm3TUQ25 qE8cEbyrD6QoWsSM/+Muevry/fMbHZjH/rDMXMAemeJ5h28zdp7esHMxsxrT3PT8a8co yHBd78c7bpgTwVSjTHfb/SRhvWwYLmGJwzhZ6wD0tAx1lThWLHJpGbj11mOaVYra1iTh MZKg== X-Gm-Message-State: ACgBeo1BklrGlBJQ9oY25Gj1MpwCMOMmYt8S3lcih+dGiRIIXbur2IkF nMgyJGkZchPHYvFW/O9evbyKEA== X-Google-Smtp-Source: AA6agR5uP241h5cUO36rE+CaGBwKIwp8ECEml29/w5Jc3feGDEcnJZOOebGr3TnXFvoWckC8FIXkmA== X-Received: by 2002:a63:5b61:0:b0:41d:3227:37b8 with SMTP id l33-20020a635b61000000b0041d322737b8mr15863985pgm.265.1661820375015; Mon, 29 Aug 2022 17:46:15 -0700 (PDT) Received: from localhost ([2620:15c:11a:202:49ac:6e1:90a2:a0e0]) by smtp.gmail.com with UTF8SMTPSA id o18-20020a170903009200b00172ff99d0afsm2331495pld.140.2022.08.29.17.46.14 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 29 Aug 2022 17:46:14 -0700 (PDT) From: Matthias Kaehlcke To: James Morris , Kees Cook , Paul Moore , "Serge E . Hallyn" Cc: Jae Hoon Kim , Matthias Kaehlcke , linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org Subject: [PATCH] LoadPin: Fix Kconfig doc about format of file with verity digests Date: Mon, 29 Aug 2022 17:46:10 -0700 Message-Id: <20220829174557.1.I5d202d1344212a3800d9828f936df6511eb2d0d1@changeid> X-Mailer: git-send-email 2.37.2.672.g94769d06f0-goog MIME-Version: 1.0 Precedence: bulk List-ID: The doc for CONFIG_SECURITY_LOADPIN_VERITY says that the file with verity digests must contain a comma separated list of digests. That was the case at some stage of the development, but was changed during the review process to one digest per line. Update the Kconfig doc accordingly. Reported-by: Jae Hoon Kim Signed-off-by: Matthias Kaehlcke --- security/loadpin/Kconfig | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/security/loadpin/Kconfig b/security/loadpin/Kconfig index 70e7985b2561..994c1d9376e6 100644 --- a/security/loadpin/Kconfig +++ b/security/loadpin/Kconfig @@ -33,4 +33,4 @@ config SECURITY_LOADPIN_VERITY on the LoadPin securityfs entry 'dm-verity'. The ioctl expects a file descriptor of a file with verity digests as parameter. The file must be located on the pinned root and - contain a comma separated list of digests. + contain one digest per line.