Re: [RFC] IMA: New IMA measurements for dm-crypt and selinux

To: "Lev R. Oshvang ." <levonshe@xxxxxxxxx>, Stephen Smalley <stephen.smalley@xxxxxxxxx>
Subject: Re: [RFC] IMA: New IMA measurements for dm-crypt and selinux
From: Tushar Sugandhi <tusharsu@xxxxxxxxxxxxxxxxxxx>
Date: Thu, 16 Apr 2020 17:52:05 -0700
Cc: linux-integrity@xxxxxxxxxxxxxxx, Mimi Zohar <zohar@xxxxxxxxxxxxx>, LSM List <linux-security-module@xxxxxxxxxxxxxxx>, SELinux <selinux@xxxxxxxxxxxxxxx>, dm-devel@xxxxxxxxxx, James Morris <jmorris@xxxxxxxxx>, chpebeni@xxxxxxxxxxxxxxxxxxx, nramas@xxxxxxxxxxxxxxxxxxx, balajib@xxxxxxxxxxxxx, sashal@xxxxxxxxxx, suredd@xxxxxxxxxxxxx
In-reply-to: <CAP22eLGJbSvUU=W0Jp=gvOFv-nxLC8YTnta3OU2PKbh746MCkQ@mail.gmail.com>
References: <f92bef0f-eb40-0e07-540c-321134e4b070@linux.microsoft.com> <CAB9W1A1=JyOV3-+6jn3xX-M+GKWBB2cCNh-VWB_kzf+YiR_d2Q@mail.gmail.com> <CAP22eLGJbSvUU=W0Jp=gvOFv-nxLC8YTnta3OU2PKbh746MCkQ@mail.gmail.com>
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.7.0



On 2020-04-12 1:15 a.m., Lev R. Oshvang . wrote:
<snip>


It sees to me that  LKRG (kernel run time guard)  takes the role of
measuring kernel structures.  Perhaps you need to consult with LKRG

Thanks Lev for the feedback. I will investigate more into it.

guys.
Lev.

References:
- [RFC] IMA: New IMA measurements for dm-crypt and selinux
  - From: Tushar Sugandhi
- Re: [RFC] IMA: New IMA measurements for dm-crypt and selinux
  - From: Stephen Smalley
- Re: [RFC] IMA: New IMA measurements for dm-crypt and selinux
  - From: Lev R. Oshvang .