[PATCH v6 7/8] module: replace the existing LSM hook in init_module

[Kees Cook]

On Fri, Jul 13, 2018 at 11:06 AM, Mimi Zohar <zohar at linux.vnet.ibm.com> wrote:
> Both the init_module and finit_module syscalls call either directly
> or indirectly the security_kernel_read_file LSM hook.  This patch
> replaces the direct call in init_module with a call to the new
> security_kernel_load_data hook and makes the corresponding changes
> in SELinux, LoadPin, and IMA.
>
> Signed-off-by: Mimi Zohar <zohar at linux.vnet.ibm.com>
> Cc: Jeff Vander Stoep <jeffv at google.com>
> Cc: Casey Schaufler <casey at schaufler-ca.com>
> Cc: Kees Cook <keescook at chromium.org>
> Acked-by: Jessica Yu <jeyu at kernel.org>
> Acked-by: Paul Moore <paul at paul-moore.com>

Acked-by: Kees Cook <keescook at chromium.org>

Thanks!

-Kees

-- 
Kees Cook
Pixel Security
--
To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
the body of a message to majordomo at vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html