Re: [RFC][PATCH] device mapper: Add builtin function dm_get_status()
From: Christoph Hellwig <hch@infradead.org>
Date: 2021-12-02 08:44:40
Also in:
dm-devel, linux-block, linux-doc, linux-fscrypt, linux-security-module, lkml
On Thu, Dec 02, 2021 at 07:59:38AM +0000, Roberto Sassu wrote:
ok, I will send it together with a patch for a not yet accepted software, Integrity Policy Enforcement (IPE), that will be the primary user of the introduced functionality. Regarding the patch itself, could you please provide a more detailed explanation?
We don't build things into the kernel just as hooks. So in doubt you need to restructured the code. And that a security module pokes into a random block driver is a big hint that whatever you're trying to do is completely broken.