lkml.org 
[lkml]   [2023]   [Feb]   [19]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    SubjectRe: [PATCH v7 6/6] evm: Support multiple LSMs providing an xattr
    From
    Date
    On Thu, 2022-12-01 at 11:41 +0100, Roberto Sassu wrote:
    > From: Roberto Sassu <roberto.sassu@huawei.com>
    >
    > Currently, evm_inode_init_security() processes a single LSM xattr from
    > the array passed by security_inode_init_security(), and calculates the
    > HMAC on it and other inode metadata.
    >
    > Given that initxattrs() callbacks, called by
    > security_inode_init_security(), expect that this array is terminated when
    > the xattr name is set to NULL, reuse the same assumption to scan all xattrs
    > and to calculate the HMAC on all of them.
    >
    > Signed-off-by: Roberto Sassu <roberto.sassu@huawei.com>
    > Reviewed-by: Casey Schaufler <casey@schaufler-ca.com>


    Normally changing the contents of the EVM HMAC calculation would break
    existing systems. Assuming for the time being this is safe, at what
    point will it affect backwards compatability? Should it be documented
    now or then?

    --
    thanks,

    Mimi

    \
     
     \ /
      Last update: 2023-03-27 00:28    [W:2.907 / U:0.164 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site