Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix kernel lockdown checking in chroot #137

Merged
merged 1 commit into from
May 27, 2021
Merged

Fix kernel lockdown checking in chroot #137

merged 1 commit into from
May 27, 2021

Conversation

mmirecki
Copy link
Contributor

No description provided.

@github-actions github-actions bot added the hold label May 21, 2021
SchSeba
SchSeba approved these changes May 25, 2021
View reviewed changes
Copy link
Collaborator

@SchSeba SchSeba left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@SchSeba
Copy link
Collaborator

SchSeba commented May 25, 2021

@zshi-redhat @adrianchiris PTAL

@zshi-redhat
Copy link
Collaborator

@SchSeba @mmirecki got a question of lock down mode:

One my server, I have:

# cat /sys/kernel/security/lockdown
[none] integrity

It shows integrity, but mstconfig is able to run on that server.
Do you know why?

@github-actions github-actions bot locked and limited conversation to collaborators May 25, 2021
@SchSeba
Copy link
Collaborator

SchSeba commented May 27, 2021

/hold cancel

@github-actions github-actions bot removed the hold label May 27, 2021
@k8snetworkplumbingwg k8snetworkplumbingwg unlocked this conversation May 27, 2021
@mmirecki
Copy link
Contributor Author

mmirecki commented May 27, 2021 •
edited
Loading

@SchSeba @mmirecki got a question of lock down mode:

One my server, I have:

# cat /sys/kernel/security/lockdown
[none] integrity

It shows integrity, but mstconfig is able to run on that server.
Do you know why?

[none] integrity
this actually means: None, no lockdown mode
for lockdown mode we will have:
none [integrity]

12:30
none [confidentiality]

@zshi-redhat
Copy link
Collaborator

/lgtm

@github-actions github-actions bot added the lgtm label May 27, 2021
@zshi-redhat zshi-redhat merged commit 07398ed into k8snetworkplumbingwg:master May 27, 2021
@mmirecki mmirecki mentioned this pull request May 27, 2021
Merged
pliurh pushed a commit to pliurh/sriov-network-operator-2 that referenced this pull request Nov 24, 2021
@zshi-redhat
Merge pull request k8snetworkplumbingwg#137 from mmirecki/chroot
3453196 
Fix kernel lockdown checking in chroot
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@SchSeba SchSeba SchSeba approved these changes

Assignees
No one assigned
Labels
lgtm
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@mmirecki @SchSeba @zshi-redhat