From owner-freebsd-hackers@freebsd.org  Wed Mar 29 05:16:13 2017
Return-Path: <owner-freebsd-hackers@freebsd.org>
Delivered-To: freebsd-hackers@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id E3886D238E7;
 Wed, 29 Mar 2017 05:16:13 +0000 (UTC)
 (envelope-from cse.cem@gmail.com)
Received: from mail-wm0-f47.google.com (mail-wm0-f47.google.com [74.125.82.47])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id 6F5E465082;
 Wed, 29 Mar 2017 05:16:13 +0000 (UTC)
 (envelope-from cse.cem@gmail.com)
Received: by mail-wm0-f47.google.com with SMTP id o81so13467654wmb.1;
 Tue, 28 Mar 2017 22:16:13 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20161025;
 h=x-gm-message-state:mime-version:reply-to:in-reply-to:references
 :from:date:message-id:subject:to:cc:content-transfer-encoding;
 bh=cfaL7d0AYAdRMg9CVapyydtP2Zwlp2vaWMhd8ZJys94=;
 b=buLBmgJoeAkuGlAqx9pjeb6snCsZbgoxn/+bSJjciZSnDmD/xmSf9yDxAuetAtDbYa
 m0kOnM5txbQnysMYIhr9bUtsDTRnWxngH1CCIguyfStioZQBJMbvxnGpc5HMBRL0OMMk
 UTSHlJw8XyZ3czZGdRzErac210kw5HtN9HAbflOSCtYU8G+IeiJu6lUUznS4TcF6lPyx
 8Hd9z12Kkf2WH2GA3ZFflco7u4SswOCves4cURVvgXNXX+j6x8RFVuooKzGhbJ15Wtf9
 0kHW4/9YOhq1zv8fRKUSOAYSPSAgYA3U6B1b/9b9hI+sOyOm9lopHRwe7ru4IZzLhHcU
 /Y/g==
X-Gm-Message-State: AFeK/H1YKNS49wxINlofs3NxADXnRss6ASrEyxLIADGjsQFidC8vNf2oN299L3l3bq7Abg==
X-Received: by 10.28.15.12 with SMTP id 12mr17290810wmp.22.1490764565575;
 Tue, 28 Mar 2017 22:16:05 -0700 (PDT)
Received: from mail-wm0-f45.google.com (mail-wm0-f45.google.com.
 [74.125.82.45])
 by smtp.gmail.com with ESMTPSA id h3sm7469138wrb.6.2017.03.28.22.16.04
 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
 Tue, 28 Mar 2017 22:16:05 -0700 (PDT)
Received: by mail-wm0-f45.google.com with SMTP id u132so54631190wmg.0;
 Tue, 28 Mar 2017 22:16:04 -0700 (PDT)
X-Received: by 10.28.232.21 with SMTP id f21mr12158120wmh.0.1490764564852;
 Tue, 28 Mar 2017 22:16:04 -0700 (PDT)
MIME-Version: 1.0
Reply-To: cem@freebsd.org
Received: by 10.80.169.4 with HTTP; Tue, 28 Mar 2017 22:16:04 -0700 (PDT)
In-Reply-To: <6f6b47ed-84e0-e4c0-9df5-350620cff45b@metricspace.net>
References: <6f6b47ed-84e0-e4c0-9df5-350620cff45b@metricspace.net>
From: Conrad Meyer <cem@freebsd.org>
Date: Tue, 28 Mar 2017 22:16:04 -0700
X-Gmail-Original-Message-ID: <CAG6CVpUj3Zh9Ldv=uoXsZ_DpWuyb9b9tcJ_nGsOXUZyPLxyUjA@mail.gmail.com>
Message-ID: <CAG6CVpUj3Zh9Ldv=uoXsZ_DpWuyb9b9tcJ_nGsOXUZyPLxyUjA@mail.gmail.com>
Subject: Re: Proposal for a design for signed kernel/modules/etc
To: Eric McCorkle <eric@metricspace.net>
Cc: "freebsd-hackers@freebsd.org" <freebsd-hackers@freebsd.org>,
 freebsd-security@freebsd.org
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.23
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
 <freebsd-hackers.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-hackers>, 
 <mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers/>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-hackers>, 
 <mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 29 Mar 2017 05:16:14 -0000

Hi Eric,

Your proposal seems reasonable to me.

Others =E2=80=94 if you don't have time to read the full email, start readi=
ng
at "=3D=3D Proposal=3D=3D" for a summary of what is actually proposed.  You
can go back and read the earlier part of the email for some discussion
of requirements and other options/context.

Thanks,
Conrad