Re: [RFC] IMA: New IMA measurements for dm-crypt and selinux

Subject: Re: [RFC] IMA: New IMA measurements for dm-crypt and selinux
From: Tushar Sugandhi <tusharsu@xxxxxxxxxxxxxxxxxxx>
Date: Thu, 16 Apr 2020 17:52:05 -0700
Cc: sashal@xxxxxxxxxx, nramas@xxxxxxxxxxxxxxxxxxx, SELinux <selinux@xxxxxxxxxxxxxxx>, LSM List <linux-security-module@xxxxxxxxxxxxxxx>, Mimi Zohar <zohar@xxxxxxxxxxxxx>, James Morris <jmorris@xxxxxxxxx>, chpebeni@xxxxxxxxxxxxxxxxxxx, dm-devel@xxxxxxxxxx, suredd@xxxxxxxxxxxxx, linux-integrity@xxxxxxxxxxxxxxx, balajib@xxxxxxxxxxxxx
In-reply-to: <CAP22eLGJbSvUU=W0Jp=gvOFv-nxLC8YTnta3OU2PKbh746MCkQ@mail.gmail.com>
References: <f92bef0f-eb40-0e07-540c-321134e4b070@linux.microsoft.com> <CAB9W1A1=JyOV3-+6jn3xX-M+GKWBB2cCNh-VWB_kzf+YiR_d2Q@mail.gmail.com> <CAP22eLGJbSvUU=W0Jp=gvOFv-nxLC8YTnta3OU2PKbh746MCkQ@mail.gmail.com>
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.7.0



On 2020-04-12 1:15 a.m., Lev R. Oshvang . wrote:
<snip>


It sees to me that  LKRG (kernel run time guard)  takes the role of
measuring kernel structures.  Perhaps you need to consult with LKRG

Thanks Lev for the feedback. I will investigate more into it.

guys.
Lev.



--
dm-devel mailing list
dm-devel@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/dm-devel

References:
- [RFC] IMA: New IMA measurements for dm-crypt and selinux
  - From: Tushar Sugandhi
- Re: [RFC] IMA: New IMA measurements for dm-crypt and selinux
  - From: Stephen Smalley
- Re: [RFC] IMA: New IMA measurements for dm-crypt and selinux
  - From: Lev R. Oshvang .