Re: [PATCH v8 21/24] evm: Move to LSM infrastructure

2024-01-02 Thread Mimi Zohar
On Tue, 2024-01-02 at 12:56 +0100, Roberto Sassu wrote: > On 12/26/2023 11:13 PM, Mimi Zohar wrote: > > On Thu, 2023-12-14 at 18:08 +0100, Roberto Sassu wrote: > >> From: Roberto Sassu > >> > >> As for IMA, move hardcoded EVM function calls from various places in the > >> kernel to the LSM infrast

Re: [PATCH v8 21/24] evm: Move to LSM infrastructure

2024-01-02 Thread Roberto Sassu
On 12/26/2023 11:13 PM, Mimi Zohar wrote: On Thu, 2023-12-14 at 18:08 +0100, Roberto Sassu wrote: From: Roberto Sassu As for IMA, move hardcoded EVM function calls from various places in the kernel to the LSM infrastructure, by introducing a new LSM named 'evm' (last and always enabled like 'i

Re: [PATCH v8 21/24] evm: Move to LSM infrastructure

2023-12-26 Thread Mimi Zohar
On Thu, 2023-12-14 at 18:08 +0100, Roberto Sassu wrote: > From: Roberto Sassu > > As for IMA, move hardcoded EVM function calls from various places in the > kernel to the LSM infrastructure, by introducing a new LSM named 'evm' > (last and always enabled like 'ima'). The order in the Makefile ens

Re: [PATCH v8 21/24] evm: Move to LSM infrastructure

2023-12-15 Thread Casey Schaufler
On 12/14/2023 9:08 AM, Roberto Sassu wrote: > From: Roberto Sassu > > As for IMA, move hardcoded EVM function calls from various places in the > kernel to the LSM infrastructure, by introducing a new LSM named 'evm' > (last and always enabled like 'ima'). The order in the Makefile ensures > that '

[PATCH v8 21/24] evm: Move to LSM infrastructure

2023-12-14 Thread Roberto Sassu
From: Roberto Sassu As for IMA, move hardcoded EVM function calls from various places in the kernel to the LSM infrastructure, by introducing a new LSM named 'evm' (last and always enabled like 'ima'). The order in the Makefile ensures that 'evm' hooks are executed after 'ima' ones. Make EVM fun