[PATCH v1 - RFC] ima: export the measurement list when needed

Janne Karhunen janne.karhunen at gmail.com
Sat Dec 21 10:41:20 UTC 2019

On Fri, Dec 20, 2019 at 4:04 PM Mimi Zohar <zohar at linux.ibm.com> wrote:

> Should the kernel be involved in writing the IMA measurement list to a
> file or, as Dave suggested, this should be delegated to a userspace
> application?

That is a good question. I went this way as it did not feel right to
me that the kernel would depend on periodic, reliable userspace
functionality to stay running (we would have a circular dependency).
The thing is, once the kernel starts to run low on memory, it may kill
that periodic daemon flushing the data for reasons unrelated to IMA.


More information about the Linux-security-module-archive mailing list