Re: [PATCH v2 05/20] randstruct: Whitelist struct security_hook_heads cast

2017-05-30 Thread James Morris
On Sat, 27 May 2017, Kees Cook wrote: > On Sat, May 27, 2017 at 1:41 AM, Christoph Hellwig wrote: > > On Fri, May 26, 2017 at 01:17:09PM -0700, Kees Cook wrote: > >> The LSM initialization routines walk security_hook_heads as an array > >> of struct list_head instead of via names to avoid a ton o

Re: [kernel-hardening] Re: [PATCH v2 05/20] randstruct: Whitelist struct security_hook_heads cast

2017-05-27 Thread Kees Cook
On Sat, May 27, 2017 at 3:04 PM, Tetsuo Handa wrote: > Kees Cook wrote: >> On Sat, May 27, 2017 at 1:41 AM, Christoph Hellwig >> wrote: >> > On Fri, May 26, 2017 at 01:17:09PM -0700, Kees Cook wrote: >> >> The LSM initialization routines walk security_hook_heads as an array >> >> of struct list_

Re: [PATCH v2 05/20] randstruct: Whitelist struct security_hook_heads cast

2017-05-27 Thread Tetsuo Handa
Kees Cook wrote: > On Sat, May 27, 2017 at 1:41 AM, Christoph Hellwig wrote: > > On Fri, May 26, 2017 at 01:17:09PM -0700, Kees Cook wrote: > >> The LSM initialization routines walk security_hook_heads as an array > >> of struct list_head instead of via names to avoid a ton of needless > >> source

Re: [PATCH v2 05/20] randstruct: Whitelist struct security_hook_heads cast

2017-05-27 Thread Kees Cook
On Sat, May 27, 2017 at 1:41 AM, Christoph Hellwig wrote: > On Fri, May 26, 2017 at 01:17:09PM -0700, Kees Cook wrote: >> The LSM initialization routines walk security_hook_heads as an array >> of struct list_head instead of via names to avoid a ton of needless >> source. Whitelist this to avoid t

Re: [PATCH v2 05/20] randstruct: Whitelist struct security_hook_heads cast

2017-05-27 Thread Christoph Hellwig
On Fri, May 26, 2017 at 01:17:09PM -0700, Kees Cook wrote: > The LSM initialization routines walk security_hook_heads as an array > of struct list_head instead of via names to avoid a ton of needless > source. Whitelist this to avoid the false positive warning from the > plugin: I think this crap

[PATCH v2 05/20] randstruct: Whitelist struct security_hook_heads cast

2017-05-26 Thread Kees Cook
The LSM initialization routines walk security_hook_heads as an array of struct list_head instead of via names to avoid a ton of needless source. Whitelist this to avoid the false positive warning from the plugin: security/security.c: In function ‘security_init’: security/security.c:59:20: note: fo