On Fri, Sep 21, 2018 at 5:18 PM, Casey Schaufler <casey@xxxxxxxxxxxxxxxx> wrote: > Move management of the cred security blob out of the > security modules and into the security infrastructre. > Instead of allocating and freeing space the security > modules tell the infrastructure how much space they > require. > > Signed-off-by: Casey Schaufler <casey@xxxxxxxxxxxxxxxx> When combined with my series, this gets slightly simpler: - the double init call and the "finished" stuff goes away - debugging output is controlled by "lsm.debug" param instead of a CONFIG Regardless, for the overall logic, calculating the sizes, etc: Reviewed-by: Kees Cook <keescook@xxxxxxxxxxxx> -Kees -- Kees Cook Pixel Security