Re: [RFC PATCH v3 08/13] clavis: Introduce new LSM called clavis

2025-01-05 Thread Mimi Zohar
On Fri, 2025-01-03 at 23:32 +, Eric Snowberg wrote: > > > On Dec 24, 2024, at 10:43 AM, Mimi Zohar wrote: > > > > On Thu, 2024-10-17 at 09:55 -0600, Eric Snowberg wrote: > > > Introduce a new LSM called clavis. The motivation behind this LSM is to > > > provide access control for system key

Re: [RFC PATCH v3 03/13] clavis: Introduce a new system keyring called clavis

2025-01-05 Thread Mimi Zohar
Hi Eric, On Fri, 2025-01-03 at 23:27 +, Eric Snowberg wrote: > > > +config SECURITY_CLAVIS > > > + bool "Clavis keyring" > > > > Isn't SECURITY_CLAVIS the new LSM?  Why is the bool defined as just "Clavis > > keyring"? > > > > > + depends on SECURITY > > > + select SYSTEM_DATA_VERIFICATION >