Messages in this thread | | | Subject | Re: [PATCH v4 5/5] evm: Support multiple LSMs providing an xattr | From | Mimi Zohar <> | Date | Thu, 17 Nov 2022 12:09:44 -0500 |
| |
On Thu, 2022-11-10 at 10:46 +0100, Roberto Sassu wrote: > From: Roberto Sassu <roberto.sassu@huawei.com> > > Currently, evm_inode_init_security() processes a single LSM xattr from > the array passed by security_inode_init_security(), and calculates the > HMAC on it and other inode metadata. > > Given that initxattrs() callbacks, called by > security_inode_init_security(), expect that this array is terminated when > the xattr name is set to NULL, reuse the same assumption to scan all xattrs > and to calculate the HMAC on all of them. > > Signed-off-by: Roberto Sassu <roberto.sassu@huawei.com>
Thanks, Roberto. This looks good.
Mimi
| |