[PATCH v3 0/3] ima: Provide more info about buffer measurement · Roberto Sassu <roberto.sassu@huawei.com> · 2021-07-05
[PATCH v3 1/3] ima: Introduce ima_get_current_hash_algo() · Roberto Sassu <roberto.sassu@huawei.com> · 2021-07-05
[PATCH v3 2/3] ima: Return int in the functions to measure a buffer · Roberto Sassu <roberto.sassu@huawei.com> · 2021-07-05
Re: [PATCH v3 2/3] ima: Return int in the functions to measure a buffer · Lakshmi Ramasubramanian <hidden> · 2021-07-06
Re: [PATCH v3 2/3] ima: Return int in the functions to measure a buffer · Mimi Zohar <zohar@linux.ibm.com> · 2021-07-19
RE: [PATCH v3 2/3] ima: Return int in the functions to measure a buffer · Roberto Sassu <roberto.sassu@huawei.com> · 2021-07-20
Re: [PATCH v3 2/3] ima: Return int in the functions to measure a buffer · Mimi Zohar <zohar@linux.ibm.com> · 2021-07-20
[PATCH v3 3/3] ima: Add digest and digest_len params to the functions to measure a buffer · Roberto Sassu <roberto.sassu@huawei.com> · 2021-07-05
Re: [PATCH v3 3/3] ima: Add digest and digest_len params to the functions to measure a buffer · Lakshmi Ramasubramanian <hidden> · 2021-07-06
Re: [PATCH v3 3/3] ima: Add digest and digest_len params to the functions to measure a buffer · Paul Moore <paul@paul-moore.com> · 2021-07-13
Re: [PATCH v3 3/3] ima: Add digest and digest_len params to the functions to measure a buffer · Mimi Zohar <zohar@linux.ibm.com> · 2021-07-19

Re: [PATCH v3 2/3] ima: Return int in the functions to measure a buffer

From: Mimi Zohar <zohar@linux.ibm.com>
Date: 2021-07-20 13:02:34
Also in: linux-integrity, lkml, selinux

On Tue, 2021-07-20 at 12:38 +0000, Roberto Sassu wrote:

quoted

quoted

This patch modifies the return type from void to int, and returns 0 if the
buffer has been successfully measured, a negative value otherwise.

Needed here is an explanation as to why ima_measure_critical_data() is
special.

We don't want to unnecessarily calculate the digest twice.

That's what the "iint" cache is for.  .  This needs more a of an
explaintion as to why  ima_measure_critical_data() is special.

thanks,

Mimi