On 1/21/2018 9:27 PM, Matthew Garrett wrote: > On Tue, Jan 9, 2018 at 8:36 AM, Matthew Garrett <mjg59@xxxxxxxxxx> wrote: >> For IMA purposes, we want to be able to obtain the prepared secid in the >> bprm structure before the credentials are committed. Add a cred_getsecid >> hook that makes this possible. > Any feedback on this version of the set? Sorry for the delay. I'm having a mindset crisis on secids just now, and I'm not completely sure if I have any issue with this particular hook. Don't wait for me. If everyone else is OK with it, go ahead.