Re: [PATCH V33 02/30] security: Add a "locked down" LSM hook

On Thu, Jun 20, 2019 at 8:23 PM Kees Cook wrote: > bikeshed: can this just be called "security_locked_down" without the > "is"? Sure.

Re: [PATCH V33 02/30] security: Add a "locked down" LSM hook

On Thu, Jun 20, 2019 at 06:19:13PM -0700, Matthew Garrett wrote: > Add a mechanism to allow LSMs to make a policy decision around whether > kernel functionality that would allow tampering with or examining the > runtime state of the kernel should be permitted. > > Signed-off-by: Matthew Garrett

[PATCH V33 02/30] security: Add a "locked down" LSM hook

Add a mechanism to allow LSMs to make a policy decision around whether kernel functionality that would allow tampering with or examining the runtime state of the kernel should be permitted. Signed-off-by: Matthew Garrett --- include/linux/lsm_hooks.h | 2 ++ include/linux/security.h | 11