Re: [PATCH v30 01/28] integrity: disassociate ima_filter_rule from security_audit_rule

[Paul Moore]

On Tue, Nov 23, 2021 at 8:45 PM Casey Schaufler <casey@xxxxxxxxxxxxxxxx> wrote:
>
> Create real functions for the ima_filter_rule interfaces.
> These replace #defines that obscure the reuse of audit
> interfaces. The new fuctions are put in security.c because
> they use security module registered hooks that we don't
> want exported.
>
> Signed-off-by: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
> ---
>  include/linux/security.h     | 26 ++++++++++++++++++++++++++
>  security/integrity/ima/ima.h | 26 --------------------------
>  security/security.c          | 21 +++++++++++++++++++++
>  3 files changed, 47 insertions(+), 26 deletions(-)

Acked-by: Paul Moore <paul@xxxxxxxxxxxxxx> # audit


--
paul moore
www.paul-moore.com