Re: [RFC PATCH 2/5] firmware: replace call to fw_read_file_contents() with kernel version

2016-01-08 Thread Mimi Zohar
On Fri, 2016-01-08 at 12:26 -0800, Kees Cook wrote: > On Fri, Jan 8, 2016 at 11:22 AM, Mimi Zohar wrote: > > Replace fw_read_file_contents() for reading a file with the common VFS > > kernel_read_file() function. Call the existing firmware security hook > > from security_kernel_post_read_file() u

Re: [RFC PATCH 2/5] firmware: replace call to fw_read_file_contents() with kernel version

2016-01-08 Thread Kees Cook
On Fri, Jan 8, 2016 at 11:22 AM, Mimi Zohar wrote: > Replace fw_read_file_contents() for reading a file with the common VFS > kernel_read_file() function. Call the existing firmware security hook > from security_kernel_post_read_file() until the LSMs have been converted. > > This patch retains th

[RFC PATCH 2/5] firmware: replace call to fw_read_file_contents() with kernel version

2016-01-08 Thread Mimi Zohar
Replace fw_read_file_contents() for reading a file with the common VFS kernel_read_file() function. Call the existing firmware security hook from security_kernel_post_read_file() until the LSMs have been converted. This patch retains the kernel_fw_from_file() hook, but removes the security_kernel