On Thu, 2016-02-11 at 08:54 -0800, Casey Schaufler wrote: > On 2/3/2016 11:06 AM, Mimi Zohar wrote: > > The kernel_read_file security hook is called prior to reading the file > > into memory. > > > > Signed-off-by: Mimi Zohar <zohar at linux.vnet.ibm.com> > > Acked-by: Casey Schaufler <casey at schaufler-ca.com> > > Being able to deny the read prior to performing any > real work makes a lot of sense. Thanks, Casey! Mimi