[PATCH v6 7/8] module: replace the existing LSM hook in init_module

Mimi Zohar zohar at linux.ibm.com
Mon Jul 16 13:52:28 UTC 2018


On Sat, 2018-07-14 at 19:30 -0700, Kees Cook wrote:
> On Fri, Jul 13, 2018 at 11:06 AM, Mimi Zohar <zohar at linux.vnet.ibm.com> wrote:
> > Both the init_module and finit_module syscalls call either directly
> > or indirectly the security_kernel_read_file LSM hook.  This patch
> > replaces the direct call in init_module with a call to the new
> > security_kernel_load_data hook and makes the corresponding changes
> > in SELinux, LoadPin, and IMA.
> >
> > Signed-off-by: Mimi Zohar <zohar at linux.vnet.ibm.com>
> > Cc: Jeff Vander Stoep <jeffv at google.com>
> > Cc: Casey Schaufler <casey at schaufler-ca.com>
> > Cc: Kees Cook <keescook at chromium.org>
> > Acked-by: Jessica Yu <jeyu at kernel.org>
> > Acked-by: Paul Moore <paul at paul-moore.com>
> 
> Acked-by: Kees Cook <keescook at chromium.org>
> 
> Thanks!

Thank you for reviewing/ack'ing all the patches, not just this one.

Mimi

--
To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
the body of a message to majordomo at vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html



More information about the Linux-security-module-archive mailing list