Re: [PATCH v3 18/25] security: Introduce inode_post_set_acl hook

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, 2023-09-04 at 15:34 +0200, Roberto Sassu wrote:
> From: Roberto Sassu <roberto.sassu@xxxxxxxxxx>
> 
> In preparation for moving IMA and EVM to the LSM infrastructure, introduce
> the inode_post_set_acl hook.
> 
> It is useful for EVM to recalculate the HMAC on the modified POSIX ACL and
> other file metadata, after it verified the HMAC of current file metadata
> with the inode_set_acl hook.

Please reword this and the inode_post_remove_acl patch similar to my
comments on  "[PATCH v3 12/25] security: Introduce inode_post_setattr
hook]".

-- 
thanks,

Mimi




[Index of Archives]     [Selinux Refpolicy]     [Linux SGX]     [Fedora Users]     [Fedora Desktop]     [Yosemite Photos]     [Yosemite Camping]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux