Re: [dm-devel] [RFC PATCH v4 02/12] security: add ipe lsm evaluation loop and audit system

2020-07-20 Thread Deven Bowers
On 7/17/2020 4:16 PM, Randy Dunlap wrote: On 7/17/20 4:09 PM, Deven Bowers wrote: +config SECURITY_IPE_PERMISSIVE_SWITCH + bool "Enable the ability to switch IPE to permissive mode" + default y + help + This option enables two ways of switching IPE to permissive mode

Re: [dm-devel] [RFC PATCH v4 02/12] security: add ipe lsm evaluation loop and audit system

2020-07-17 Thread Randy Dunlap
On 7/17/20 4:09 PM, Deven Bowers wrote: > +config SECURITY_IPE_PERMISSIVE_SWITCH > + bool "Enable the ability to switch IPE to permissive mode" > + default y > + help > + This option enables two ways of switching IPE to permissive mode, > + a sysctl (if enabled), `ipe.enforc

[dm-devel] [RFC PATCH v4 02/12] security: add ipe lsm evaluation loop and audit system

2020-07-17 Thread Deven Bowers
Add the core logic of the IPE LSM, the evaluation loop (engine), a portion of the audit system, and the skeleton of the policy structure. Signed-off-by: Deven Bowers --- MAINTAINERS | 1 + include/uapi/linux/audit.h | 4 + security/Kconfig | 12 +-