On Mon, Jan 22, 2018 at 5:14 PM, Casey Schaufler <casey@xxxxxxxxxxxxxxxx> wrote: > On 1/21/2018 9:27 PM, Matthew Garrett wrote: >> On Tue, Jan 9, 2018 at 8:36 AM, Matthew Garrett <mjg59@xxxxxxxxxx> wrote: >>> For IMA purposes, we want to be able to obtain the prepared secid in the >>> bprm structure before the credentials are committed. Add a cred_getsecid >>> hook that makes this possible. >> Any feedback on this version of the set? > > > Sorry for the delay. I'm having a mindset crisis on secids just > now, and I'm not completely sure if I have any issue with this > particular hook. Don't wait for me. If everyone else is OK with > it, go ahead. Thanks Casey - Mimi, are you ok with the IMA changes? If so, which tree should these go through?