Messages in this thread | | | From | Kees Cook <> | Subject | [PATCH 0/4] LoadPin: Allow filesystem switch when not enforcing | Date | Fri, 9 Dec 2022 11:57:41 -0800 |
| |
Hi,
Right now, LoadPin isn't much use on general purpose distros since modules tend to be loaded from multiple filesystems at boot (first initramfs, then real rootfs). Allow the potential mount pin to move when enforcement is not enabled.
-Kees
Kees Cook (4): LoadPin: Refactor read-only check into a helper LoadPin: Refactor sysctl initialization LoadPin: Move pin reporting cleanly out of locking LoadPin: Allow filesystem switch when not enforcing
security/loadpin/loadpin.c | 89 ++++++++++++++++++++++---------------- 1 file changed, 52 insertions(+), 37 deletions(-)
-- 2.34.1
| |