Messages in this thread | | | Subject | Re: [PATCH v2 5/5] LSM: LoadPin for kernel file loading restrictions | From | Joe Perches <> | Date | Mon, 28 Mar 2016 16:20:34 -0700 |
| |
On Mon, 2016-03-28 at 14:14 -0700, Kees Cook wrote: > This LSM enforces that kernel-loaded files (modules, firmware, etc) > must all come from the same filesystem, with the expectation that > such a filesystem is backed by a read-only device such as dm-verity > or CDROM. This allows systems that have a verified and/or unchangeable > filesystem to enforce module and firmware loading restrictions without > needing to sign the files individually.
trivia:
> diff --git a/security/loadpin/loadpin.c b/security/loadpin/loadpin.c [] > +#define pr_fmt(fmt) "LoadPin: " fmt
Using
#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
would be a lot more common.
Is there some reason the logging messages should be prefixed with "LoadPin: " instead of "loadpin: "?
| |