Re: [PATCH v6 02/17] ima: Define ns_status for storing namespaced iint data

[PATCH v6 00/17] ima: Namespace IMA with audit support in IMA-ns · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-10
[PATCH v6 02/17] ima: Define ns_status for storing namespaced iint data · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-10
Re: [PATCH v6 02/17] ima: Define ns_status for storing namespaced iint data · Mimi Zohar <zohar@linux.ibm.com> · 2021-12-15
Re: [PATCH v6 02/17] ima: Define ns_status for storing namespaced iint data · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-16
Re: [PATCH v6 02/17] ima: Define ns_status for storing namespaced iint data · Mimi Zohar <zohar@linux.ibm.com> · 2021-12-16
Re: [PATCH v6 02/17] ima: Define ns_status for storing namespaced iint data · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-16
[PATCH v6 07/17] ima: Move ima_htable into ima_namespace · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-10
[PATCH v6 17/17] ima: Setup securityfs for IMA namespace · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-10
Re: [PATCH v6 17/17] ima: Setup securityfs for IMA namespace · Mimi Zohar <zohar@linux.ibm.com> · 2021-12-15
Re: [PATCH v6 17/17] ima: Setup securityfs for IMA namespace · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-16
[PATCH v6 13/17] ima: Move some IMA policy and filesystem related variables into ima_namespace · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-10
[PATCH v6 11/17] securityfs: Only use simple_pin_fs/simple_release_fs for init_user_ns · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-10
[PATCH v6 08/17] ima: Move measurement list related variables into ima_namespace · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-10
[PATCH v6 14/17] ima: Tie opened SecurityFS files to the IMA namespace it belongs to · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-10
Re: [PATCH v6 14/17] ima: Tie opened SecurityFS files to the IMA namespace it belongs to · Christian Brauner <hidden> · 2021-12-11
Re: [PATCH v6 14/17] ima: Tie opened SecurityFS files to the IMA namespace it belongs to · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-11
[PATCH v6 15/17] ima: Use mac_admin_ns_capable() to check corresponding capability · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-10
Re: [PATCH v6 15/17] ima: Use mac_admin_ns_capable() to check corresponding capability · "Serge E. Hallyn" <serge@hallyn.com> · 2021-12-11
Re: [PATCH v6 15/17] ima: Use mac_admin_ns_capable() to check corresponding capability · James Bottomley <hidden> · 2021-12-11
Re: [PATCH v6 15/17] ima: Use mac_admin_ns_capable() to check corresponding capability · "Serge E. Hallyn" <serge@hallyn.com> · 2021-12-11
Re: [PATCH v6 15/17] ima: Use mac_admin_ns_capable() to check corresponding capability · James Bottomley <hidden> · 2021-12-11
[PATCH v6 01/17] ima: Add IMA namespace support · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-10
Re: [PATCH v6 01/17] ima: Add IMA namespace support · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-13
Re: [PATCH v6 01/17] ima: Add IMA namespace support · Mimi Zohar <zohar@linux.ibm.com> · 2021-12-15
Re: [PATCH v6 01/17] ima: Add IMA namespace support · Mimi Zohar <zohar@linux.ibm.com> · 2021-12-15
Re: [PATCH v6 01/17] ima: Add IMA namespace support · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-16
[PATCH v6 16/17] ima: Move dentry into ima_namespace and others onto stack · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-10
[PATCH v6 09/17] ima: Only accept AUDIT rules for IMA non-init_ima_ns namespaces for now · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-10
[PATCH v6 06/17] ima: Move policy related variables into ima_namespace · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-10
Re: [PATCH v6 06/17] ima: Move policy related variables into ima_namespace · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-13
[PATCH v6 12/17] securityfs: Extend securityfs with namespacing support · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-10
Re: [PATCH v6 12/17] securityfs: Extend securityfs with namespacing support · Christian Brauner <hidden> · 2021-12-11
Re: [PATCH v6 12/17] securityfs: Extend securityfs with namespacing support · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-11
[PATCH v6 05/17] ima: Move IMA's keys queue related variables into ima_namespace · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-10
[PATCH v6 04/17] ima: Move delayed work queue and variables into ima_namespace · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-10
[PATCH v6 10/17] ima: Implement hierarchical processing of file accesses · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-10
[PATCH v6 03/17] ima: Namespace audit status flags · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-10
Re: [PATCH v6 03/17] ima: Namespace audit status flags · Mimi Zohar <zohar@linux.ibm.com> · 2021-12-15
Re: [PATCH v6 03/17] ima: Namespace audit status flags · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-16
Re: [PATCH v6 03/17] ima: Namespace audit status flags · Mimi Zohar <zohar@linux.ibm.com> · 2021-12-16

From: Stefan Berger <stefanb@linux.ibm.com>
Date: 2021-12-16 04:01:09
Also in: linux-security-module, lkml

On 12/15/21 22:53, Mimi Zohar wrote:

On Wed, 2021-12-15 at 21:37 -0500, Stefan Berger wrote:

quoted

before it is re-used.

KMEM_CACHE + kmem_cache_alloc/zalloc() are pretty common. What kind of
comment would be helpful here?

The original reason for using kmem_cache_create() with init_once and
deferring memory cleanup to free was for performance.  Using
KMEM_CACHE() and kmem_cache_zalloc() instead could be for simplicity.
The comment should note the change.

/* use KMEM_CACHE for simplicity */ ?

Mimi

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help