Re: [PATCH v4 10/17] firmware_loader: Use security_post_load_data()

2020-08-06 Thread Mimi Zohar
On Wed, 2020-07-29 at 10:58 -0700, Kees Cook wrote: > Now that security_post_load_data() is wired up, use it instead > of the NULL file argument style of security_post_read_file(), > and update the security_kernel_load_data() call to indicate that a > security_kernel_post_load_data() call is

[PATCH v4 10/17] firmware_loader: Use security_post_load_data()

2020-07-29 Thread Kees Cook
Now that security_post_load_data() is wired up, use it instead of the NULL file argument style of security_post_read_file(), and update the security_kernel_load_data() call to indicate that a security_kernel_post_load_data() call is expected. Wire up the IMA check to match earlier logic. Perhaps