[PATCH v4 20/23] ima: Move IMA-Appraisal to LSM infrastructure

Mimi Zohar zohar at linux.ibm.com
Mon Nov 6 16:33:45 UTC 2023


On Fri, 2023-10-27 at 10:42 +0200, Roberto Sassu wrote:
> Do the registration of IMA-Appraisal functions separately from the rest of
> IMA functions, as appraisal is a separate feature not necessarily enabled
> in the kernel configuration.

Add "only" -> of IMA-Apparaisal only functions ...

> Reuse the same approach as for other IMA functions, move hardcoded calls
> from various places in the kernel to the LSM infrastructure. Declare the
> functions as static and register them as hook implementations in
> init_ima_appraise_lsm(), called by init_ima_lsm().
> 
> Signed-off-by: Roberto Sassu <roberto.sassu at huawei.com>
> Reviewed-by: Stefan Berger <stefanb at linux.ibm.com>

Reviewed-by: Mimi Zohar <zohar at linux.ibm.com>




More information about the Linux-security-module-archive mailing list