Re: [PATCH] 3 of 5 IMA: LSM-based measurement code
From: Reiner Sailer
Date: Wed Jun 15 2005 - 17:54:03 EST
Serge E. Hallyn (serue@xxxxxxxxxx) wrote:
> That's true, of course. Reiner, would any of the integrity measurement
> hooks be moved to a better place than the current LSM hooks? Is there a
> preferred ordering - ie measurement should always happen before the LSM
> modules, or always after? Either of these would of course be clear
> reasons to separate IMA into its own subsystem.
Originally, IMA was not an LSM. However, when moving to a 2.6 kernel, we
moved it to LSM and have found very easily the current hooks. I don't think
the hook position would change when moving from LSM to non-LSM.
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/