[PATCH v1 - RFC] ima: export the measurement list when needed
janne.karhunen at gmail.com
Sat Dec 21 10:41:20 UTC 2019
On Fri, Dec 20, 2019 at 4:04 PM Mimi Zohar <zohar at linux.ibm.com> wrote:
> Should the kernel be involved in writing the IMA measurement list to a
> file or, as Dave suggested, this should be delegated to a userspace
That is a good question. I went this way as it did not feel right to
me that the kernel would depend on periodic, reliable userspace
functionality to stay running (we would have a circular dependency).
The thing is, once the kernel starts to run low on memory, it may kill
that periodic daemon flushing the data for reasons unrelated to IMA.
More information about the Linux-security-module-archive