Re: [PATCH v10 09/12] ima: Implement support for module-style appended signatures
From: Mimi Zohar <zohar@linux.ibm.com>
Date: 2019-05-09 23:01:23
Also in:
keyrings, linux-crypto, linux-doc, linux-integrity, linuxppc-dev, lkml
Hi Thiago,
quoted hunk ↗ jump to hunk
diff --git a/security/integrity/ima/ima_policy.c b/security/integrity/ima/ima_policy.c index fca7a3f23321..a7a20a8c15c1 100644 --- a/security/integrity/ima/ima_policy.c +++ b/security/integrity/ima/ima_policy.c@@ -1144,6 +1144,12 @@ void ima_delete_rules(void) } } +#define __ima_hook_stringify(str) (#str), + +const char *const func_tokens[] = { + __ima_hooks(__ima_hook_stringify) +}; + #ifdef CONFIG_IMA_READ_POLICY enum { mask_exec = 0, mask_write, mask_read, mask_append@@ -1156,12 +1162,6 @@ static const char *const mask_tokens[] = { "MAY_APPEND" }; -#define __ima_hook_stringify(str) (#str), - -static const char *const func_tokens[] = { - __ima_hooks(__ima_hook_stringify) -}; - void *ima_policy_start(struct seq_file *m, loff_t *pos) { loff_t l = *pos;
Is moving this something left over from previous versions or there is a need for this change? Other than this, the patch looks good. Mimi