Re: [PATCH v10 13/27] ima: Only accept AUDIT rules for non-init_ima_ns namespaces for now
Mimi Zohar <[email protected]>
| Newsgroups | dev.linux.lists.containers,org.kernel.vger.linux-integrity,org.kernel.vger.linux-kernel,org.kernel.vger.linux-security-module |
|---|---|
| Message-ID | <[email protected]> |
On Tue, 2022-02-01 at 15:37 -0500, Stefan Berger wrote: > Only accept AUDIT rules for non-init_ima_ns namespaces rejecting all rules > that require support for measuring, appraisal, and hashing. It's probably obvious, but adding the words "for now" somewhere in the above line makes it clear this is temporary. > > Signed-off-by: Stefan Berger <[email protected]> > Acked-by: Christian Brauner <[email protected]> Reviewed-by: Mimi Zohar <[email protected]> -- thanks, Mimi