Re: [PATCH] 3 of 5 IMA: LSM-based measurement code

Quoting Chris Wright ([email protected]):
> The primary purpose of the hooks is access control.  Some of them, of
> course, are helpers to keep labels coherent.  IIRC, James objected
> because the measurement data was simply collected from these hooks.

Ok, so to be clear, any module which does not directly impose some form
of access control is not eligible for an LSM?

(in that case that clearly settles the issue)

thanks,
-serge
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Follow-Ups:
- Re: [PATCH] 3 of 5 IMA: LSM-based measurement code
  - From: Casey Schaufler <[email protected]>
- Re: [PATCH] 3 of 5 IMA: LSM-based measurement code
  - From: Chris Wright <[email protected]>

References:
- [PATCH] 3 of 5 IMA: LSM-based measurement code
  - From: Reiner Sailer <[email protected]>
- Re: [PATCH] 3 of 5 IMA: LSM-based measurement code
  - From: James Morris <[email protected]>
- Re: [PATCH] 3 of 5 IMA: LSM-based measurement code
  - From: [email protected]
- Re: [PATCH] 3 of 5 IMA: LSM-based measurement code
  - From: Chris Wright <[email protected]>

Prev by Date: Re: [-mm PATCH][4/4] net: signed vs unsigned cleanup in net/ipv4/raw.c
Next by Date: Re: [PATCH] 3 of 5 IMA: LSM-based measurement code
Previous by thread: Re: [PATCH] 3 of 5 IMA: LSM-based measurement code
Next by thread: Re: [PATCH] 3 of 5 IMA: LSM-based measurement code
Index(es):
- Date
- Thread

[Index of Archives] [Kernel Newbies] [Netfilter] [Bugtraq] [Photo] [Stuff] [Gimp] [Yosemite News] [MIPS Linux] [ARM Linux] [Linux Security] [Linux RAID] [Video 4 Linux] [Linux for the blind] [Linux Resources]