Re: F36 Change: DIGLIM (System-Wide Change proposal)

[Kevin Kofler]

Ben Cotton wrote:
> ** Maintain the following patch sets for the Linux kernel, and
> possibly have them accepted in the upstream kernel:
>
> [//lore.kernel.org/linux-integrity/20210409114313.4073-1-

[e-mail]/
> IMA execution policies] ***
> [//lore.kernel.org/linux-integrity/20210914163401.864635-1-

[e-mail]/
> DIGLIM basic features] ***
> [//lore.kernel.org/linux-integrity/20210915163145.1046505-1-

[e-mail]/
> DIGLIM advanced features] ***
> [//lore.kernel.org/linux-integrity/20210930115533.878169-1-

[e-mail]/
> DIGLIM integration with IMA] ***
> [//lore.kernel.org/linux-integrity/20181112102423.30415-1-

[e-mail]/
> PGP keys and signatures]

Can we trust the security code submitted by a Huawei employee to not contain 
hidden government-developed backdoors? (Basically the same question as for 
the existing NSA SELinux code…)

Kevin Kofler