Re: [PATCH] 3 of 5 IMA: LSM-based measurement code

From: Reiner Sailer (sailer@private)
Date: Wed Jun 15 2005 - 15:48:56 PDT 

Serge E. Hallyn (serue@private) wrote:
>
> That's true, of course.  Reiner, would any of the integrity measurement
> hooks be moved to a better place than the current LSM hooks?  Is there a
> preferred ordering - ie measurement should always happen before the LSM
> modules, or always after?  Either of these would of course be clear
> reasons to separate IMA into its own subsystem.
> 
> thanks,
> -serge

Originally, IMA was not an LSM. However, when moving to a 2.6 kernel, we 
moved it to LSM and have found very easily the current hooks. I don't think 
the hook position would change when moving from LSM to non-LSM.

Thanks
Reiner

This archive was generated by hypermail 2.1.3 : Wed Jun 15 2005 - 15:53:12 PDT