Re: [PATCH 3/4] module: Support to show the current enforcement policy

2018-03-07 Thread Jia Zhang
On 2018/3/8 上午4:14, Jessica Yu wrote: > +++ Jia Zhang [01/03/18 17:09 +0800]: >> /sys/kernel/security/modsign/enforce gives the result of current >> enforcement policy of loading module. >> >> Signed-off-by: Jia Zhang > > Why is this being added as part of securityfs? AFAIK that's primarily > u

Re: [PATCH 3/4] module: Support to show the current enforcement policy

2018-03-07 Thread Jessica Yu
+++ Jia Zhang [01/03/18 17:09 +0800]: /sys/kernel/security/modsign/enforce gives the result of current enforcement policy of loading module. Signed-off-by: Jia Zhang Why is this being added as part of securityfs? AFAIK that's primarily used by LSMs. And we already export sig_enforce to sysf