Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
Date:   Tue, 01 Nov 2022 17:52:58 -0700
From:   Kees Cook <kees@kernel.org>
To:     Casey Schaufler <casey@schaufler-ca.com>,
        Kees Cook <keescook@chromium.org>,
        Paul Moore <paul@paul-moore.com>
CC:     James Morris <jmorris@namei.org>,
        "Serge E. Hallyn" <serge@hallyn.com>,
        linux-security-module@vger.kernel.org,
        =?ISO-8859-1?Q?Micka=EBl_Sala=FCn?= <mic@digikod.net>,
        linux-kernel@vger.kernel.org, bpf@vger.kernel.org,
        linux-hardening@vger.kernel.org, casey@schaufler-ca.com
Subject: Re: [PATCH v2] LSM: Better reporting of actual LSMs at boot
User-Agent: K-9 Mail for Android
In-Reply-To: <a737ec91-0eba-94dc-46dc-683abdc96366@schaufler-ca.com>
References: <20221102000525.gonna.409-kees@kernel.org> <a737ec91-0eba-94dc-46dc-683abdc96366@schaufler-ca.com>
Message-ID: <970317F3-D1A2-412D-88EF-18A606AC1E6A@kernel.org>
MIME-Version: 1.0
Content-Type: text/plain;
 charset=utf-8
Content-Transfer-Encoding: quoted-printable
Precedence: bulk

On November 1, 2022 5:46:55 PM PDT, Casey Schaufler <casey@schaufler-ca=2Ec=
om> wrote:
>On 11/1/2022 5:05 PM, Kees Cook wrote:
>> Enhance the details reported by "lsm=2Edebug" in several ways:
> [=2E=2E=2E]
>
>Acked-by: Casey Schaufler <casey@schaufler-ca=2Ecom>

Thanks!

>I'm curious about what is driving this change=2E

I was working on the ima stacking PoC and found the lsm=2Edebug output con=
fusing to read, and I wrote it=2E :P So, I wanted to clarify things and mak=
e sure stuff like lockdown was visible=2E Additionally, if we're going to k=
eep the "lsm=3D" param as-is, I wanted it's value visible at boot so people=
 would know what to start from when making changes=2E

-Kees


--=20
Kees Cook