Re: [PATCH v4 5/5] evm: Support multiple LSMs providing an xattr

Mimi Zohar <[email protected]>
Newsgroups gmane.comp.file-systems.reiserfs.general,gmane.linux.kernel.lsm,gmane.linux.kernel
Message-ID <[email protected]> 
On Thu, 2022-11-10 at 10:46 +0100, Roberto Sassu wrote:
> From: Roberto Sassu <[email protected]>
> 
> Currently, evm_inode_init_security() processes a single LSM xattr from
> the array passed by security_inode_init_security(), and calculates the
> HMAC on it and other inode metadata.
> 
> Given that initxattrs() callbacks, called by
> security_inode_init_security(), expect that this array is terminated when
> the xattr name is set to NULL, reuse the same assumption to scan all xattrs
> and to calculate the HMAC on all of them.
> 
> Signed-off-by: Roberto Sassu <[email protected]>

Thanks, Roberto.  This looks good.

Mimi
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.