Re: [PATCH 2/8] integrity: IMA as an integrity service provider

2009-03-09 Thread Mimi Zohar
On Fri, 2009-03-06 at 17:07 -0500, Eric Paris wrote: I'm very slow to the game, I know, but today was the first kernel that I built from linux-next with IMA on. I have a comment, and hopefully more to come np On Fri, 2009-02-06 at 14:52 -0500, Mimi Zohar wrote: +void

Re: [PATCH 2/8] integrity: IMA as an integrity service provider

2009-03-06 Thread Eric Paris
I'm very slow to the game, I know, but today was the first kernel that I built from linux-next with IMA on. I have a comment, and hopefully more to come On Fri, 2009-02-06 at 14:52 -0500, Mimi Zohar wrote: +void integrity_audit_msg(int audit_msgno, struct inode *inode, +

Re: [PATCH 2/8] integrity: IMA as an integrity service provider

2009-02-09 Thread Steve Grubb
On Sunday 08 February 2009 09:42:42 pm Mimi Zohar wrote: diff --git a/security/integrity/ima/ima_audit.c b/security/integrity/ima/ima_audit.c new file mode 100644 index 000..8a0f1e2 --- /dev/null +++ b/security/integrity/ima/ima_audit.c +void integrity_audit_msg(int

Re: [PATCH 2/8] integrity: IMA as an integrity service provider

2009-02-09 Thread Mimi Zohar
On Mon, 2009-02-09 at 09:51 -0500, Steve Grubb wrote: On Sunday 08 February 2009 09:42:42 pm Mimi Zohar wrote: diff --git a/security/integrity/ima/ima_audit.c b/security/integrity/ima/ima_audit.c new file mode 100644 index 000..8a0f1e2 --- /dev/null +++

Re: [PATCH 2/8] integrity: IMA as an integrity service provider

2009-02-08 Thread Mimi Zohar
On Fri, 2009-02-06 at 17:04 -0500, Steve Grubb wrote: Hi, Thanks for sending the audit piece to the mail list so we could go over the details without bothering the whole lkml. I have some comments in line below. Definitely preferable. On Friday 06 February 2009 02:52:07 pm Mimi Zohar

[PATCH 2/8] integrity: IMA as an integrity service provider

2009-02-06 Thread Mimi Zohar
IMA provides hardware (TPM) based measurement and attestation for file measurements. As the Trusted Computing (TPM) model requires, IMA measures all files before they are accessed in any way (on the integrity_bprm_check, integrity_path_check and integrity_file_mmap hooks), and commits the

Re: [PATCH 2/8] integrity: IMA as an integrity service provider

2009-02-06 Thread Steve Grubb
Hi, Thanks for sending the audit piece to the mail list so we could go over the details without bothering the whole lkml. I have some comments in line below. On Friday 06 February 2009 02:52:07 pm Mimi Zohar wrote: diff --git a/Documentation/kernel-parameters.txt