[PATCH v7 0/6] evm: Do HMAC of multiple per LSM xattrs for new inodes
Roberto Sassu
roberto.sassu at huaweicloud.com
Thu Mar 9 07:53:48 UTC 2023
On Wed, 2023-03-08 at 17:16 -0500, Paul Moore wrote:
> On Thu, Dec 1, 2022 at 5:42 AM Roberto Sassu
> <roberto.sassu at huaweicloud.com> wrote:
> > From: Roberto Sassu <roberto.sassu at huawei.com>
> >
> > One of the major goals of LSM stacking is to run multiple LSMs side by side
> > without interfering with each other. The ultimate decision will depend on
> > individual LSM decision.
> >
> > Several changes need to be made to the LSM infrastructure to be able to
> > support that. This patch set tackles one of them: gives to each LSM the
> > ability to specify one or multiple xattrs to be set at inode creation
> > time and, at the same time, gives to EVM the ability to access all those
> > xattrs and calculate the HMAC on them.
>
> Hi Roberto,
>
> The v7 draft of this patchset had some good discussion, and based on a
> quick read of the comments it looks like everyone was eventually
> satisfied that the v7 draft was good and no further changes were
> necessary, is that correct or do you have an updated draft of this
> patchset?
Hi Paul
I addressed few more concerns from Mimi and Casey. I think v8 should be
good to send (unless you have more comments/suggestions).
Thanks
Roberto
More information about the Linux-security-module-archive
mailing list