[PATCH v2] ima: export the measurement list when needed

Janne Karhunen janne.karhunen at gmail.com
Thu Jan 23 08:41:27 UTC 2020


On Wed, Jan 22, 2020 at 5:56 PM Mimi Zohar <zohar at linux.ibm.com> wrote:

> > While it can now be argued that since this is an admin-driven event,
> > kernel does not need to write the file. However, the intention is to
> > bring out a second patch a bit later that adds a variable to define
> > the max number of entries to be kept in the kernel memory and
> > workqueue based automatic flushing. In those cases the kernel has to
> > be able to write the file without any help from the admin..
>
> I don't think it is common, and probably not acceptable, for the
> kernel to open a file for writing.

Ok. It just means that the kernel cannot do its own memory management
and will depend on the user flushing the memory often enough to
prevent something bad from happening. Is this more common in the
kernel than writing out a file?


-- 
Janne



More information about the Linux-security-module-archive mailing list