From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from sonic304-28.consmr.mail.ne1.yahoo.com (sonic304-28.consmr.mail.ne1.yahoo.com [66.163.191.154]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id C1C7F146A9B for ; Tue, 17 Dec 2024 22:09:48 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=66.163.191.154 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1734473390; cv=none; b=AGXVlrrElZvAesuAhPlgRy4JF2jdE1wWJJ3cktuIVgeJ2UFyCBvJG3iNWsPNGIQUwB1LsgX24zr8LY29t195aNznOKEYECB8LBSGQgrOg+bBNMzu1bM2Dy6zDW1YaaN1FF+JCFKEZ3pVPMyHZiSDlb921s9ar9aivvsgUpKsF1o= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1734473390; c=relaxed/simple; bh=EpJAESYstREUkUwzWHiD+ccRjjVprfi+ihxLTuTqk3U=; h=Message-ID:Date:MIME-Version:Subject:To:Cc:References:From: In-Reply-To:Content-Type; b=iQqGnPwyhd1OwBlY2RDIkoxVSvZbvNA5FBeLaTV30fzogt7VjR7iNE/salvLTUbcty9ArmsjD7IXUR62ZewrvHC2QjpSdOvFIPy/zKc5veeyqhnRg1MGmKLEUrRjixy6cksDbu8jh+k7cGHAxa1toqgYGT2CTqB1S1C7dht4Ss8= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=schaufler-ca.com; spf=none smtp.mailfrom=schaufler-ca.com; dkim=pass (2048-bit key) header.d=yahoo.com header.i=@yahoo.com header.b=TpGvG3SR; arc=none smtp.client-ip=66.163.191.154 Authentication-Results: smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=schaufler-ca.com Authentication-Results: smtp.subspace.kernel.org; spf=none smtp.mailfrom=schaufler-ca.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=yahoo.com header.i=@yahoo.com header.b="TpGvG3SR" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1734473387; bh=MFZnnZvpOi5fa2Z3TyuZYvU1E7VYj06cS2HrX4jXJ4s=; h=Date:Subject:To:Cc:References:From:In-Reply-To:From:Subject:Reply-To; b=TpGvG3SRcxJOKTS0JHVVCWMuYdHz4BjFLGZr0owxkbAPRI09NQdwIaUIVOjfb7UeXwvrK2AcE8ZdKHmO0zjBafXUA6Za19V0H1qf/BMc/qzmLh5AxED2eildmr5whm8ln6rejjZhckQ0F8k0N3SmVVYIA6KkGQnprQlAvVMHJx2EENfmR69bAlYGhGoSK/PnqEpNGgWKDC0Fx8T9n/jXY9IhoiXiHj9FRr0Jteepj/cuMUe6xagX4ALkIFY/WysfTgjEbk3AxUdI7BExaP8dIVmdlt0BlQbVjE+7BXbqIEcMemXFRk5Vx8hl7xabrJEaUZnXHEYUGvFYGLqK49nrPQ== X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1734473387; bh=YY/tJzc2OvzmJK/UZy7ecJpbJAdVpt7pAk0AwpK6pxA=; h=X-Sonic-MF:Date:Subject:To:From:From:Subject; b=dFZ4tuKirGvx+A38sknd5m57WjgOUYdiFJ9/HfD6OJpdCG/dQ0UDKei2SQEAjS0pQTd4kumfOnq+YlccoGJcCkmSSD82805za2oF9shvfAE2Mqm/nSE/9kLL3XNhBmsFOVPaKoJRARBS7Oh5tBsMW2w07XLwwkyQWirjU+e3LCnthRozaspGYYJtPm1/Nss4/6TTa+nE4EIzyUcU/AMz4U7Fsb6uMMzl0kish4KrMSsHAYOQHFj1eurjTsW1wyiuH69T5QxhmD8D7ViINlC1Qu4plH4WpE8CvlbXaTvfSJSdfDrADwh2zEURe1G8sTjTvv6k890DsR38QKi2F9YJZA== X-YMail-OSG: QViyLlAVM1lqRfNBRuqD07fIT8i75AiBHNyy9FcnQQCpVFz06OPPYNWXIe_G.7x p6CB371qA2g4xtGVOF7tAMSnFL4Jb1STwdp7HX7NEjqS1MciGwg.ZSZsqBAeHLigPPhPdq5QEFyy Qkls.lpdRfouSH_xy9_.z2AuMJUxb6ncK7S1dPuWyMr6jFrmvXqjtccKSQfe0laDWbFeAadPzhmK VArGGxWIXpd35cYl60NPjxmJhcJ3l67TLJZZ_0ueR4NnVItA0U3GqOsFkooirayg7xVhRxhy50HZ RHK7i8FFO_RWITDopFsiKlv2lV7WEyi6MB7zHsJ5TlNa3wFWF_jiqOFtPAmpOv8E3gxnWTWmPBPI Vp7FzMGMVDs3JDvZVS0BfLCnAYKXcppf7yWxBNrVyJv4ZCMJGl0nEUvZryly._YZ8KELz7LrLF87 rNrjpJ4aS.HevsykZ0zNoLBNBUvMRIGuX.x.2cPc4i08xajKuvcxUV8emhSRAacLtaD8sldKDokA tZ_pgG7hCdbPW2t8nwnP8xhHsf6f.WjyjUJgt6wr2lDeGNeS2XUuEgqyr0DEevb3GXfPFRDq8Y1c DDMEEB.F3HUEKHciTsLMF0D_VsyPG2obMHvmY6rsi7Om3hh3.1t9dqu1yLKIbiz0oU3dmzvvDNmf .diAzTbtGqeL5NTwUr7rePTXmUQ8NSAcq_naO7U8ievh49Uv26Fv6Bhki.8Ltum7kl4kwig5F5XC FLrXzagAOOq5VUpP1wvQJNBOv2WGSny.Mn0DS2NYBdNUA5NcvGefgAYQMH6jdpzYnpvSVkLfDV3C byz5xVnInBA72JMzyEsfigFMCh4vVs3v4BDZL3lvVb2vobBIb73cRKBMe6o6Wt7FFaSjx6LpRP9z XzOs3IYBvqm41_ebO5jgrXwHAJPYkcBtpfDUTpwd3apOYKQrrvikrZ86_UDQJGOfLwsZjeENQVF9 VQCXJlCyJVUfZ8htUL8B5aDZItS8tmeLhVzWzUkrMqrtu2po3vNSHceepqSqCTxqTs9po.PmU4LO axee3KxuXR9vfPWL1SdZHt6DC.rl5qU4tTG1zOPBWhZrDAlZVugXgFVPdmnMpjLP0wGbt8492uTd H1STJby_Sbm2.qGYykC.FJkMbp6lQi_..aLfdYNMH.sWnzV1aoQRTcwJgveLal5XxES0y3HnGUYS RWIpbKYCtSk82OkDLMKAYI3JBmzHYYpvm.JYbzr2mtJ3rtFG_DrAOaqwW5EWKz4damNKRj01nf22 RvgH9UuqzUUzYH4.CEnCUy3WQk2TYAhF5.Z3FfTS75YvRU4j3j.3LbFi4n.M_CJ6nnWSWYDN9WTw 2MrSzbgU1lKJ3AXzFEs2UXtd6InzfHtsjtkY5rO3ZNVu5qSaJyPqWrqKLASuNLp8540ZKnK.79QV Sr6gUMcKqIPi8YSNOIhLnO5Dj1NlZ4bH4pvBxpNSAts6FZD0EDtgY6tRCrwy4TUiofD_Vvf8NHA3 xjV8CMEzmYldEfL2TaVxRQ2bmCMzL9qU_g6Os41Dyiek5bXDlhSvvPZIoZxPclmxRZXXsZap.NET jZOHJJpk8D_nSvacYWyhw1gSfR3kykbygFJl6by76jQkpZR7hIiDPPiWV0zf2KeSbHoGlaPDnOBK ep6Bo2rnnDAyjdGOLaLawVp0U2IHbDdwh5PiXUZHrgKQ0gw576S4.ICA9gjXzaRjobweipFouQqp VKOlxILgPRauXeU8Kl0mcuwsNL1nzoyuwSF1HqpRrThos4pvSEUL1h0M7qIVNLTAAxj6rMlKakor 2dCOalysWJRCF9jI9x8o0flw6zAr9sfyGh0aeL16e_c.UwXs6RSfdbq5z13WRVplFvbcmmBT2AMg beteEiamPHFB08geRuzCFDU6Guw9NBm1VqSY4A7wMZVbjwlggaC_N3UB70uy8xIDXBjp.Xqh1DRT cPptzRUU3gJupoygdhm7BY64GjxW8H80znYV9HDJ2WiBV1ftkFGKosoAJtmYcKl41ybgZlxmmz0U hRurcqBebQtmmnKzKISBz5k_jfpbb7aPYV0E744XQtgjATZl_etMQwnNs.B1SgGBEcsfm51Vsg.. Tx._eAxwsFALqxPh6YlfVrMKxJW5BCBs.99gdoJWwOoOGd0eX16Wa0XjtD.S173kLu6yHORyjvDM .E900in7mtHnKDdEQFk7rEmPq_yGtYLWW7V3PCSTwx5AatUjIJccwVDquhu5TBOAL6uTml9FhAJ2 J8PrrDJTO2QeZ3jvhJWHVp.P_VrCz9XryZYIMEp.9ZGuuhA4- X-Sonic-MF: X-Sonic-ID: 40b94c5c-efe7-4bb5-8b7f-63e1369507de Received: from sonic.gate.mail.ne1.yahoo.com by sonic304.consmr.mail.ne1.yahoo.com with HTTP; Tue, 17 Dec 2024 22:09:47 +0000 Received: by hermes--production-gq1-5dd4b47f46-wrqn7 (Yahoo Inc. Hermes SMTP Server) with ESMTPA ID 82894e06ce5306d6207d6522cf15808a; Tue, 17 Dec 2024 21:29:17 +0000 (UTC) Message-ID: Date: Tue, 17 Dec 2024 13:29:15 -0800 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [RFC 0/2] ima: evm: Add kernel cmdline options to disable IMA/EVM To: Song Liu , linux-fsdevel@vger.kernel.org, linux-integrity@vger.kernel.org, linux-security-module@vger.kernel.org, linux-kernel@vger.kernel.org Cc: roberto.sassu@huawei.com, dmitry.kasatkin@gmail.com, eric.snowberg@oracle.com, paul@paul-moore.com, jmorris@namei.org, serge@hallyn.com, kernel-team@meta.com, brauner@kernel.org, jack@suse.cz, viro@zeniv.linux.org.uk, Casey Schaufler References: <20241217202525.1802109-1-song@kernel.org> Content-Language: en-US From: Casey Schaufler In-Reply-To: <20241217202525.1802109-1-song@kernel.org> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-Mailer: WebService/1.1.23040 mail.backend.jedi.jws.acl:role.jedi.acl.token.atz.jws.hermes.yahoo On 12/17/2024 12:25 PM, Song Liu wrote: > While reading and testing LSM code, I found IMA/EVM consume per inode > storage even when they are not in use. Add options to diable them in > kernel command line. The logic and syntax is mostly borrowed from an > old serious [1]. Why not omit ima and evm from the lsm= parameter? > > [1] https://lore.kernel.org/lkml/cover.1398259638.git.d.kasatkin@samsung.com/ > > Song Liu (2): > ima: Add kernel parameter to disable IMA > evm: Add kernel parameter to disable EVM > > security/integrity/evm/evm.h | 6 ++++++ > security/integrity/evm/evm_main.c | 22 ++++++++++++++-------- > security/integrity/evm/evm_secfs.c | 3 ++- > security/integrity/ima/ima_main.c | 13 +++++++++++++ > 4 files changed, 35 insertions(+), 9 deletions(-) > > -- > 2.43.5 >