Re: [Linux-ima-user] EVM/IMA are they now in 3.2 mainline?

[Mimi Z. <zo...@li...>]

On Thu, 2012-01-05 at 14:07 -0800, Sam Gandhi wrote:
> [First apologies if there is an easy way to find this]
> 
> I noticed that Linus has released 3.2
> (http://article.gmane.org/gmane.linux.kernel/1235375).

http://lwn.net/Articles/473798/ summarizes the changes with links to
other articles describing those changes.  Release summary is also
available from http://kernelnewbies.org/Linux_3.2

> So is it safe to assume that all the changes found in
> git://git.selinuxproject.org/~jmorris/linux-security  should be now in
> 3.2 mainline kernel?

linux-security is a git tree with multiple branches (eg. master, next,
for-linus).  'next', as its name indcates, refers to patches targeted
for the next release and are currently in linux-next.  Shortly (days)
after a new release, the merge window opens for the next release.

> Is there any way to find out what changes from linux-security were
> upstreamed to mainline linux kernel?
> 
> -Sam

Patches in 'next' are generally not upstreamed in the current release.
Only bug fixes that were in 'for-linus' were upstreamed in 3.2. 

So where is EVM/IMA?  EVM is included in the linux 3.2 release. The EVM
digital signature extension is in linux-next and, most likely, will be
merged in this open window.  As for the IMA-appraisal extension, the
patches are available from
git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity/
'next-ima-appraisal'.

thanks,

Mimi