On Mon, Jan 22, 2018 at 5:14 PM, Casey Schaufler [off-list ref] wrote:

On 1/21/2018 9:27 PM, Matthew Garrett wrote:

quoted

On Tue, Jan 9, 2018 at 8:36 AM, Matthew Garrett [off-list ref] wrote:

quoted

For IMA purposes, we want to be able to obtain the prepared secid in the
bprm structure before the credentials are committed. Add a cred_getsecid
hook that makes this possible.

Any feedback on this version of the set?

Sorry for the delay. I'm having a mindset crisis on secids just
now, and I'm not completely sure if I have any issue with this
particular hook. Don't wait for me. If everyone else is OK with
it, go ahead.

Thanks Casey - Mimi, are you ok with the IMA changes? If so, which
tree should these go through?
--
To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
the body of a message to majordomo at vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html