Re: [PATCH v3 01/12] ima: Have the LSM free its audit rule

2020-07-19 Thread Mimi Zohar
On Fri, 2020-07-17 at 14:24 -0500, Tyler Hicks wrote: > On 2020-07-17 15:20:22, Nayna wrote: > > > > On 7/9/20 2:19 AM, Tyler Hicks wrote: > > > Ask the LSM to free its audit rule rather than directly calling kfree(). > > > > Is it to be called audit rule or filter rule ?  Likewise in subject lin

Re: [PATCH v3 01/12] ima: Have the LSM free its audit rule

2020-07-17 Thread Tyler Hicks
On 2020-07-17 15:20:22, Nayna wrote: > > On 7/9/20 2:19 AM, Tyler Hicks wrote: > > Ask the LSM to free its audit rule rather than directly calling kfree(). > > Is it to be called audit rule or filter rule ?  Likewise in subject line. The security hooks call this "audit rule" but Mimi explained t

Re: [PATCH v3 01/12] ima: Have the LSM free its audit rule

2020-07-17 Thread Nayna
On 7/9/20 2:19 AM, Tyler Hicks wrote: Ask the LSM to free its audit rule rather than directly calling kfree(). Is it to be called audit rule or filter rule ?  Likewise in subject line. Thanks & Regards,     - Nayna

[PATCH v3 01/12] ima: Have the LSM free its audit rule

2020-07-08 Thread Tyler Hicks
Ask the LSM to free its audit rule rather than directly calling kfree(). Both AppArmor and SELinux do additional work in their audit_rule_free() hooks. Fix memory leaks by allowing the LSMs to perform necessary work. Fixes: b16942455193 ("ima: use the lsm policy update notifier") Signed-off-by: Ty