Re: [PATCH v24 04/25] IMA: avoid label collisions with stacked LSMs

2021-02-22 Thread Mimi Zohar
On Mon, 2021-02-22 at 15:45 -0800, Casey Schaufler wrote: > On 2/14/2021 10:21 AM, Mimi Zohar wrote: > > Would these changes match your suggestion? > > security/integrity/ima/ima_policy.c | 24 > 1 file changed, 12 insertions(+), 12 deletions(-) > > diff --git a/securit

Re: [PATCH v24 04/25] IMA: avoid label collisions with stacked LSMs

2021-02-22 Thread Casey Schaufler
On 2/14/2021 10:21 AM, Mimi Zohar wrote: > Hi Casey, > > On Tue, 2021-01-26 at 08:40 -0800, Casey Schaufler wrote: >> Integrity measurement may filter on security module information >> and needs to be clear in the case of multiple active security >> modules which applies. Provide a boot option ima_

Re: [PATCH v24 04/25] IMA: avoid label collisions with stacked LSMs

2021-02-16 Thread Casey Schaufler
On 2/14/2021 10:21 AM, Mimi Zohar wrote: > Hi Casey, > > On Tue, 2021-01-26 at 08:40 -0800, Casey Schaufler wrote: >> Integrity measurement may filter on security module information >> and needs to be clear in the case of multiple active security >> modules which applies. Provide a boot option ima_

Re: [PATCH v24 04/25] IMA: avoid label collisions with stacked LSMs

2021-02-14 Thread Mimi Zohar
Hi Casey, On Tue, 2021-01-26 at 08:40 -0800, Casey Schaufler wrote: > Integrity measurement may filter on security module information > and needs to be clear in the case of multiple active security > modules which applies. Provide a boot option ima_rules_lsm= to > allow the user to specify an acti

[PATCH v24 04/25] IMA: avoid label collisions with stacked LSMs

2021-01-26 Thread Casey Schaufler
Integrity measurement may filter on security module information and needs to be clear in the case of multiple active security modules which applies. Provide a boot option ima_rules_lsm= to allow the user to specify an active securty module to apply filters to. If not specified, use the first regist