Re: [PATCH 02/13] Add TSEM specific documentation.
From: Randy Dunlap <hidden>
Date: 2023-07-11 04:38:43
Also in:
lkml
Hi-- On 7/10/23 03:23, Dr. Greg wrote:
quoted hunk ↗ jump to hunk
diff --git a/Documentation/admin-guide/kernel-parameters.txt b/Documentation/admin-guide/kernel-parameters.txt index 9e5bab29685f..0e6640a78936 100644 --- a/Documentation/admin-guide/kernel-parameters.txt +++ b/Documentation/admin-guide/kernel-parameters.txt@@ -6468,6 +6468,24 @@ with CPUID.16h support and partial CPUID.15h support. Format: <unsigned int>
These 3 entries should be in alphabetical order: tsem_cache, tsem_digest, tsem_mode.
+ tsem_mode= [TSEM] Set the mode that the Trusted Security Event + Modeling LSM is to run in. + Format: 1 + 1 -- Disable root domain modeling. + + tsem_cache= [TSEM] Define the size of the caches used to hold + pointers to structures that will be used to model + security events occurring in the root modeling + namespace that are called in atomic context. + Format: <integer> + Default: 96
What unit? KB, MB, bytes, pages?
+ + tsem_digest= [TSEM] Define the cryptographic hash function that + will be used to create security event coefficients + for in the root modeling namespace.
for in ?
+ Format: {name of the cryptographic hash function}
+ Default: sha256-- ~Randy