Re: [PATCH v38 39/39] LSM: Create lsm_module_list system call

2022-10-24 Thread Casey Schaufler
On 10/12/2022 3:04 PM, Kees Cook wrote: > On Tue, Sep 27, 2022 at 01:31:55PM -0700, Casey Schaufler wrote: >> +SYSCALL_DEFINE3(lsm_module_list, >> + unsigned int __user *, ids, >> + size_t __user *, size, >> + int, flags) > Please make this unsigned int. Sure. >> +{

Re: [PATCH v38 04/39] LSM: Maintain a table of LSM attribute data

2022-10-24 Thread Casey Schaufler
On 10/24/2022 8:13 AM, Tetsuo Handa wrote: > On 2022/10/24 2:13, Casey Schaufler wrote: >>> We won't be able to accept whatever LSM modules to upstream, and we won't >>> be able to enable whatever LSM modules in distributor kernels. >> A built in module loader security module would address this iss

Re: [PATCH v38 04/39] LSM: Maintain a table of LSM attribute data

2022-10-24 Thread Tetsuo Handa
On 2022/10/24 2:13, Casey Schaufler wrote: >> We won't be able to accept whatever LSM modules to upstream, and we won't >> be able to enable whatever LSM modules in distributor kernels. > > A built in module loader security module would address this issue. > Getting such a module accepted upstream