Re: [PATCH v2] ima: export the measurement list when needed
From: Janne Karhunen <hidden>
Date: 2020-01-23 08:41:42
Also in:
linux-integrity
From: Janne Karhunen <hidden>
Date: 2020-01-23 08:41:42
Also in:
linux-integrity
On Wed, Jan 22, 2020 at 5:56 PM Mimi Zohar [off-list ref] wrote:
quoted
While it can now be argued that since this is an admin-driven event, kernel does not need to write the file. However, the intention is to bring out a second patch a bit later that adds a variable to define the max number of entries to be kept in the kernel memory and workqueue based automatic flushing. In those cases the kernel has to be able to write the file without any help from the admin..I don't think it is common, and probably not acceptable, for the kernel to open a file for writing.
Ok. It just means that the kernel cannot do its own memory management and will depend on the user flushing the memory often enough to prevent something bad from happening. Is this more common in the kernel than writing out a file? -- Janne