Re: [PATCH 2/2] ima: limit the number of ToMToU integrity violations

2025-02-26 Thread Mimi Zohar
Hi Roberto, On Fri, 2025-02-21 at 18:36 +0100, Roberto Sassu wrote: > On Wed, 2025-02-19 at 11:21 -0500, Mimi Zohar wrote: > > Each time a file in policy, that is already opened for read, is opened > > for write a Time-of-Measure-Time-of-Use (ToMToU) integrity violation > > audit message is emitte

[GIT PULL] integrity: subsystem fixes for v6.14

2025-02-26 Thread Mimi Zohar
Hi Linus, Here's two changes: 1 bug fix and 1 spelling cleanup. The bug fix restores a performance improvement. thanks, Mimi The following changes since commit 2014c95afecee3e76ca4a56956a936e23283f05b: Linux 6.14-rc1 (2025-02-02 15:39:26 -0800) are available in the Git repository at: h

Re: [RFC][PATCH] ima: add measurement for first unverified write on ima policy file

2025-02-26 Thread Mimi Zohar
On Wed, 2025-02-26 at 22:53 +, Enrico Bravi wrote: > On Tue, 2025-02-25 at 20:53 -0500, Mimi Zohar wrote: > > On Tue, 2025-02-25 at 14:12 +0100, Enrico Bravi wrote: > > > The first write on the ima policy file permits to override the default > > > policy defined with the ima_policy= boot param

Re: [GIT PULL] integrity: subsystem fixes for v6.14

2025-02-26 Thread pr-tracker-bot
The pull request you sent on Wed, 26 Feb 2025 08:41:01 -0500: > https://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity.git/ > tags/integrity-v6.14-fix has been merged into torvalds/linux.git: https://git.kernel.org/torvalds/c/d62fdaf51b115f851dd151f7af054535890b5a0d Thank you! -

Re: [RFC][PATCH] ima: add measurement for first unverified write on ima policy file

2025-02-26 Thread Enrico Bravi
On Tue, 2025-02-25 at 20:53 -0500, Mimi Zohar wrote: > On Tue, 2025-02-25 at 14:12 +0100, Enrico Bravi wrote: > > The first write on the ima policy file permits to override the default > > policy defined with the ima_policy= boot parameter. This can be done > > by adding the /etc/ima/ima-policy whi