On Sat, Aug 3, 2024 at 2:08 AM Fan Wu <wufan@xxxxxxxxxxxxxxxxxxx> wrote: > > IPE is a Linux Security Module that takes a complementary approach to > access control. Unlike traditional access control mechanisms that rely on > labels and paths for decision-making, IPE focuses on the immutable security > properties inherent to system components. These properties are fundamental > attributes or features of a system component that cannot be altered, > ensuring a consistent and reliable basis for security decisions. > > ... There was some minor merge fuzz, a handful of overly long lines in the comments, and some subject lines that needed some minor tweaking but overall I think this looks good. I only see one thing holding me back from merging this into the LSM tree: an updated ACK from the device-mapper folks; if we can get that within the next week or two that would be great. -- paul-moore.com
