# Re: \[PATCH v3 0/5\] Add support for RESOLVE\_MAYEXEC

- From: James Morris \<jmorris@namei.org\>
- Date: 2020-05-01 03:55:13 
- List: linux-api
- Page: https://ratatoskr.run/linux-api/2020/05/178618
- Thread: https://ratatoskr.run/linux-api/2020/04/178350/t.md

```text
On Tue, 28 Apr 2020, Mickaël Salaün wrote:

> Furthermore, the security policy can also be delegated to an LSM, either
> a MAC system or an integrity system.  For instance, the new kernel
> MAY_OPENEXEC flag closes a major IMA measurement/appraisal interpreter
> integrity gap by bringing the ability to check the use of scripts [1].
> Other uses are expected, such as for openat2(2) [2], SGX integration
> [3], bpffs [4] or IPE [5].

Confirming that this is a highly desirable feature for the proposed IPE 
LSM.

-- 
James Morris
[ref]
```