RE: [PATCH v3 20/22] ima: load policy using path

2016-02-08 Thread Dmitry Kasatkin
From: Petko Manolov [pet...@mip-labs.com] Sent: Monday, February 08, 2016 12:35 PM To: Dmitry Kasatkin Cc: Mimi Zohar; linux-security-mod...@vger.kernel.org; Luis R. Rodriguez; kexec@lists.infradead.org; linux-modu...@vger.kernel.org;

Re: [PATCH v3 20/22] ima: load policy using path

2016-02-08 Thread Petko Manolov
On 16-02-08 09:58:16, Dmitry Kasatkin wrote: > > > From: Petko Manolov [pet...@mip-labs.com] > Sent: Sunday, February 07, 2016 9:59 PM > To: Mimi Zohar > Cc: linux-security-mod...@vger.kernel.org; Luis R. Rodriguez; > kexec@lists.infradead.org;

RE: [PATCH v3 20/22] ima: load policy using path

2016-02-08 Thread Dmitry Kasatkin
From: Petko Manolov [pet...@mip-labs.com] Sent: Sunday, February 07, 2016 9:59 PM To: Mimi Zohar Cc: linux-security-mod...@vger.kernel.org; Luis R. Rodriguez; kexec@lists.infradead.org; linux-modu...@vger.kernel.org; fsde...@vger.kernel.org; David

Re: [PATCH v3 20/22] ima: load policy using path

2016-02-08 Thread Petko Manolov
On 16-02-08 16:12:16, Mimi Zohar wrote: > On Mon, 2016-02-08 at 10:45 +, Dmitry Kasatkin wrote: > > > > > @@ -286,9 +322,12 @@ static ssize_t ima_write_policy(struct file *file, > > > > const char __user *buf, > > > > result = mutex_lock_interruptible(_write_mutex); > > > > if

Re: [PATCH v3 20/22] ima: load policy using path

2016-02-08 Thread Mimi Zohar
On Mon, 2016-02-08 at 10:45 +, Dmitry Kasatkin wrote: > > > @@ -286,9 +322,12 @@ static ssize_t ima_write_policy(struct file *file, > > > const char __user *buf, > > > result = mutex_lock_interruptible(_write_mutex); > > > if (result < 0) > > > goto out_free; > > >

Re: [PATCH v3 19/22] ima: support for kexec image and initramfs

2016-02-08 Thread Mimi Zohar
On Sun, 2016-02-07 at 22:10 +0200, Petko Manolov wrote: > On 16-02-03 14:06:27, Mimi Zohar wrote: > > Option 3: incorportate the ima_hooks enumeration into kernel_read_file_id, > > perhaps changing the enumeration name. > > > > For now, duplicate the new READING_KEXEC_IMAGE/INITRAMFS in