lkml.org 
[lkml]   [2022]   [Feb]   [16]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    SubjectRe: [PATCH v10 06/27] ima: Move arch_policy_entry into ima_namespace
    From
    Date
    On Tue, 2022-02-01 at 15:37 -0500, Stefan Berger wrote

    Let's update the patch description providing a bit more background
    info:

    The archictecture specific policy rules, currently defined for EFI and
    powerpc, require the kexec kernel image and kernel modules to be
    validly signed and measured, based on the system's secure boot and/or
    trusted boot mode and the IMA_ARCH_POLICY Kconfig option being enabled.

    > Move the arch_policy_entry pointer into ima_namespace.

    Perhaps include something about namespaces being allowed or not allowed
    to kexec a new kernel or load kernel modules.

    thanks,

    Mimi
    >
    > When freeing the memory set the pointer to NULL.
    >
    > Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
    > Acked-by: Christian Brauner <brauner@kernel.org>
    > Reviewed-by: Mimi Zohar <zohar@linux.ibm.com>

    \
     
     \ /
      Last update: 2022-02-16 17:41    [W:4.555 / U:0.104 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site