Re: [Linux-ima-user] LSM Audit Rule matching patch

[Shaz <sha...@gm...>]

On Sat, Jun 27, 2009 at 1:05 PM, Shaz <sha...@gm...> wrote:

> Dear Mimi,
>
> You mentioned on the site about this patch and also emailed me earlier to
> use this patch. Can you please specify the behavior of this patch? I am
> already going through the code but your description can help. As far as I
> have figured out from the available docs, it uses LSM attributes so which
> attributes are they? Extended attributes?


As far as I have figured out it is the security contexts and the four
functions (mentioned in linux-2.6/Documentation/ABI/testing/ima_policy) that
can be specified to be "measure" or "dont_measure". Is there anything else
apart from this? I will appreciate some explaination or references to the
magic related to the filesystem points w.r.t ima_policy.


>
>
> If you need any assistance for linux-ima website then do let me know
> because its lacking clarity and amount of documentation for rookies like
> myself.
>
> Thank you.


My team is also troubleshooting some LTP problems. It seems that we are
having problems due to a change in the distro. I do not like this
explaination but we have done the mounting with iversion and the problem
persists. I am giving it a run myself at the moment and will update that
specific thread if I succeed.


>
>
> --
> Shaz
>
>


-- 
Shaz