Re: [PATCH v3 2/7] kexec: add call to LSM hook in original kexec_load syscall

2018-05-24 Thread Eric W. Biederman
Mimi Zohar writes: > In order for LSMs and IMA-appraisal to differentiate between the > original and new syscalls, both the original and new syscalls must call > an LSM hook. This patch adds a call to security_kernel_read_data() in > the original kexec syscall. Until

Re: [PATCH v3 2/7] kexec: add call to LSM hook in original kexec_load syscall

2018-05-24 Thread Eric W. Biederman
Mimi Zohar writes: > In order for LSMs and IMA-appraisal to differentiate between the > original and new syscalls, both the original and new syscalls must call > an LSM hook. This patch adds a call to security_kernel_read_data() in > the original kexec syscall. Until the lsm hook mess gets

[PATCH v3 2/7] kexec: add call to LSM hook in original kexec_load syscall

2018-05-24 Thread Mimi Zohar
In order for LSMs and IMA-appraisal to differentiate between the original and new syscalls, both the original and new syscalls must call an LSM hook. This patch adds a call to security_kernel_read_data() in the original kexec syscall. Signed-off-by: Mimi Zohar Cc: Eric

[PATCH v3 2/7] kexec: add call to LSM hook in original kexec_load syscall

2018-05-24 Thread Mimi Zohar
In order for LSMs and IMA-appraisal to differentiate between the original and new syscalls, both the original and new syscalls must call an LSM hook. This patch adds a call to security_kernel_read_data() in the original kexec syscall. Signed-off-by: Mimi Zohar Cc: Eric Biederman Cc: Luis R.