Received-SPF: neutral (google.com: 209.132.180.67 is neither permitted nor denied by best guess record for domain of linux-kernel-owner@vger.kernel.org) client-ip=209.132.180.67;
Subject: Re: [PATCH v2 0/2] support to read and tune appraise mode in runtime
To:     Nayna <nayna@linux.vnet.ibm.com>, zhang.jia@linux.alibaba.com
Cc:     zohar@linux.ibm.com, dmitry.kasatkin@gmail.com, jmorris@namei.org,
        serge@hallyn.com, zhangliguang@linux.alibaba.com,
        linux-integrity@vger.kernel.org,
        linux-security-module@vger.kernel.org, linux-kernel@vger.kernel.org
References: <20200409103440.47946-1-tianjia.zhang@linux.alibaba.com>
 <1e160d08-788a-0c3b-0f9f-2077e55b286a@linux.vnet.ibm.com>
From:   Tianjia Zhang <tianjia.zhang@linux.alibaba.com>
Message-ID: <f892b420-315c-72aa-82d6-1a6a17b99b3a@linux.alibaba.com>
Date:   Mon, 13 Apr 2020 10:23:35 +0800
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:68.0) Gecko/20100101
 Thunderbird/68.7.0
MIME-Version: 1.0
In-Reply-To: <1e160d08-788a-0c3b-0f9f-2077e55b286a@linux.vnet.ibm.com>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
Sender: linux-kernel-owner@vger.kernel.org
Precedence: bulk


On 2020/4/12 5:43, Nayna wrote:
> 
> On 4/9/20 6:34 AM, Tianjia Zhang wrote:
>> Support the read and write operations of ima_appraise by adding a
>> securifyfs file 'appraise_mode'.
>>
>> In order to tune appraise mode in runtime, writing a PKCS#7 signature
> 
> I am curious to know why would you tune appraise mode in runtime ?
> 
> Thanks & Regards,
> 
>        - Nayna

Mainly used for emergency shutdown under some abnormal conditions.

Thanks,
Tianjia