[PATCH v11 0/4] evm: Do HMAC of multiple per LSM xattrs for new inodes

Roberto Sassu roberto.sassu at huaweicloud.com
Sat Jun 10 08:00:57 UTC 2023


On 6/9/2023 10:05 PM, Paul Moore wrote:
> On Sat, Jun 3, 2023 at 3:16 PM Roberto Sassu
> <roberto.sassu at huaweicloud.com> wrote:
>>
>> From: Roberto Sassu <roberto.sassu at huawei.com>
>>
>> One of the major goals of LSM stacking is to run multiple LSMs side by side
>> without interfering with each other. The ultimate decision will depend on
>> individual LSM decision.
>>
>> Several changes need to be made to the LSM infrastructure to be able to
>> support that. This patch set tackles one of them: gives to each LSM the
>> ability to specify one or multiple xattrs to be set at inode creation
>> time and, at the same time, gives to EVM the ability to access all those
>> xattrs and calculate the HMAC on them ...
> 
> Thanks for sticking with this Roberto, I see a few
> comments/suggestions on this patchset, but overall it is looking
> pretty good; I'm hopeful we will be able to merge the next revision.

Thanks for looking at it.

Just sent v12 with the suggestions. One is addressed with a different 
patch set (Smack transmute fixes).

Roberto



More information about the Linux-security-module-archive mailing list