Re: [PATCH v9 14/25] security: Introduce path_post_mknod hook

2024-02-12 Thread Stefan Berger
On 1/15/24 13:17, Roberto Sassu wrote: From: Roberto Sassu In preparation for moving IMA and EVM to the LSM infrastructure, introduce the path_post_mknod hook. IMA-appraisal requires all existing files in policy to have a file hash/signature stored in security.ima. An exception is made for

Re: [PATCH v9 14/25] security: Introduce path_post_mknod hook

2024-02-09 Thread Christian Brauner
On Mon, Jan 15, 2024 at 07:17:58PM +0100, Roberto Sassu wrote: > From: Roberto Sassu > > In preparation for moving IMA and EVM to the LSM infrastructure, introduce > the path_post_mknod hook. > > IMA-appraisal requires all existing files in policy to have a file > hash/signature stored in

Re: [PATCH v9 14/25] security: Introduce path_post_mknod hook

2024-02-07 Thread Paul Moore
On Jan 15, 2024 Roberto Sassu wrote: > > In preparation for moving IMA and EVM to the LSM infrastructure, introduce > the path_post_mknod hook. > > IMA-appraisal requires all existing files in policy to have a file > hash/signature stored in security.ima. An exception is made for empty files >

[PATCH v9 14/25] security: Introduce path_post_mknod hook

2024-01-15 Thread Roberto Sassu
From: Roberto Sassu In preparation for moving IMA and EVM to the LSM infrastructure, introduce the path_post_mknod hook. IMA-appraisal requires all existing files in policy to have a file hash/signature stored in security.ima. An exception is made for empty files created by mknod, by tagging