[RFC PATCH] fw_lockdown: new micro LSM module to prevent loading unsigned firmware

Mimi Zohar zohar at linux.vnet.ibm.com
Fri Nov 10 20:13:32 UTC 2017


On Fri, 2017-11-10 at 12:58 -0500, Mimi Zohar wrote:
> 
> +
> +static struct security_hook_list fw_lockdown_hooks[] = {
> +	LSM_HOOK_INIT(fw_lockdown_file_check, fw_lockdown_bprm_check)

Sigh, that should have be:
	LSM_HOOK_INIT(kernel_read_file, fw_lockdown_read_file)

> +};

--
To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
the body of a message to majordomo at vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html



More information about the Linux-security-module-archive mailing list