2023-11-06 16:34:49

by Mimi Zohar

[permalink] [raw]
Subject: Re: [PATCH v4 20/23] ima: Move IMA-Appraisal to LSM infrastructure

On Fri, 2023-10-27 at 10:42 +0200, Roberto Sassu wrote:
> Do the registration of IMA-Appraisal functions separately from the rest of
> IMA functions, as appraisal is a separate feature not necessarily enabled
> in the kernel configuration.

Add "only" -> of IMA-Apparaisal only functions ...

> Reuse the same approach as for other IMA functions, move hardcoded calls
> from various places in the kernel to the LSM infrastructure. Declare the
> functions as static and register them as hook implementations in
> init_ima_appraise_lsm(), called by init_ima_lsm().
>
> Signed-off-by: Roberto Sassu <[email protected]>
> Reviewed-by: Stefan Berger <[email protected]>

Reviewed-by: Mimi Zohar <[email protected]>