Re: [PATCH v1 4/5] LSM: Define SELinux function to measure security state

2020-07-15 Thread Lakshmi Ramasubramanian
On 7/15/20 11:04 AM, Stephen Smalley wrote: +static inline bool selinux_checkreqprot(void) +{ + struct selinux_state *state = _state; + + return state->checkreqprot; +} Probably should use READ_ONCE(). Will do. diff --git a/security/selinux/measure.c

Re: [PATCH v1 4/5] LSM: Define SELinux function to measure security state

2020-07-15 Thread Stephen Smalley
On Wed, Jul 15, 2020 at 11:48 AM Lakshmi Ramasubramanian wrote: > > SELinux configuration and policy are some of the critical data for this > security module that needs to be measured. To enable this measurement > SELinux needs to implement the interface function, security_state(), that > the LSM

[PATCH v1 4/5] LSM: Define SELinux function to measure security state

2020-07-15 Thread Lakshmi Ramasubramanian
SELinux configuration and policy are some of the critical data for this security module that needs to be measured. To enable this measurement SELinux needs to implement the interface function, security_state(), that the LSM can call. Define the security_state() function in SELinux to measure