2017-06-28 1:05 GMT+02:00 Kees Cook <[email protected]>: > On Thu, Jun 15, 2017 at 9:42 AM, Salvatore Mesoraca > <[email protected]> wrote: >> Creation of a new LSM hook to check if a given configuration of vmflags, >> for a new memory allocation request, should be allowed or not. >> It's placed in "do_mmap", "do_brk_flags" and "__install_special_mapping". > > I like this. I think this is something the other LSMs should be > checking too. (Though I wonder if it would be helpful to include the > VMA in the hook, though it does exist yet, so... hmm.)
For the particular case of my LSM and the type of check it does, the VMA isn't needed, of course. Maybe some other LSM can benefit from it, but it depends on what they want to do with this hook. Looking forward to feedback from potential future users. Thank you for your interest. Salvatore
