[PATCH v5 0/6] Add support for O_MAYEXEC
zohar at linux.ibm.com
Fri May 8 14:01:07 UTC 2020
On Fri, 2020-05-08 at 10:15 +0300, Lev R. Oshvang . wrote:
> I can suggest something better ( I believe)
> Some time ago I proposed patch to IMA - Add suffix in IMA policy rule criteria
> It allows IMA to verify scripts, configuration files and even single file.
> It is very simple and does not depend on open flags.
> Mimi Zohar decided not to include this patch on the reason it tries to
> protect the file name.
> ( Why ??).
Your patch relies on the filename, but does nothing to protect it.
More information about the Linux-security-module-archive