Re: [PATCH 1/2] ima: Pre-parse the list of keyrings in a KEY_CHECK rule

2020-08-06 Thread Tyler Hicks
On 2020-08-06 11:34:43, Nayna wrote: > > On 7/27/20 10:08 AM, Tyler Hicks wrote: > > The ima_keyrings buffer was used as a work buffer for strsep()-based > > parsing of the "keyrings=" option of an IMA policy rule. This parsing > > was re-performed each time an asymmetric key was added to a kernel

Re: [PATCH 1/2] ima: Pre-parse the list of keyrings in a KEY_CHECK rule

2020-08-06 Thread Nayna
On 7/27/20 10:08 AM, Tyler Hicks wrote: The ima_keyrings buffer was used as a work buffer for strsep()-based parsing of the "keyrings=" option of an IMA policy rule. This parsing was re-performed each time an asymmetric key was added to a kernel keyring for each loaded policy rule that containe

Re: [PATCH 1/2] ima: Pre-parse the list of keyrings in a KEY_CHECK rule

2020-07-28 Thread Lakshmi Ramasubramanian
On 7/27/20 7:08 AM, Tyler Hicks wrote: The ima_keyrings buffer was used as a work buffer for strsep()-based parsing of the "keyrings=" option of an IMA policy rule. This parsing was re-performed each time an asymmetric key was added to a kernel keyring for each loaded policy rule that contained a

[PATCH 1/2] ima: Pre-parse the list of keyrings in a KEY_CHECK rule

2020-07-27 Thread Tyler Hicks
The ima_keyrings buffer was used as a work buffer for strsep()-based parsing of the "keyrings=" option of an IMA policy rule. This parsing was re-performed each time an asymmetric key was added to a kernel keyring for each loaded policy rule that contained a "keyrings=" option. An example rule spe