mbox series

[bpf-next,v3,0/3] Implement bpf_ima_inode_hash

Message ID 20201124151210.1081188-1-kpsingh@chromium.org (mailing list archive)
Headers show
Series Implement bpf_ima_inode_hash | expand

Message

KP Singh Nov. 24, 2020, 3:12 p.m. UTC
From: KP Singh <kpsingh@google.com>

# v2 -> v3

- Fixed an issue pointed out by Alexei, the helper should only be
  exposed to sleepable hooks.
- Update the selftests to constrain the IMA policy udpate to a loopback
  filesystem specifically created for the test. Also, split this out
  from the LSM test. I dropped the Ack from this last patch since this
  is a re-write.

KP Singh (3):
  ima: Implement ima_inode_hash
  bpf: Add a BPF helper for getting the IMA hash of an inode
  bpf: Add a selftest for bpf_ima_inode_hash

 include/linux/ima.h                           |  6 ++
 include/uapi/linux/bpf.h                      | 11 +++
 kernel/bpf/bpf_lsm.c                          | 26 ++++++
 scripts/bpf_helpers_doc.py                    |  2 +
 security/integrity/ima/ima_main.c             | 78 ++++++++++++------
 tools/include/uapi/linux/bpf.h                | 11 +++
 tools/testing/selftests/bpf/config            |  4 +
 tools/testing/selftests/bpf/ima_setup.sh      | 80 +++++++++++++++++++
 .../selftests/bpf/prog_tests/test_ima.c       | 74 +++++++++++++++++
 tools/testing/selftests/bpf/progs/ima.c       | 28 +++++++
 10 files changed, 296 insertions(+), 24 deletions(-)
 create mode 100644 tools/testing/selftests/bpf/ima_setup.sh
 create mode 100644 tools/testing/selftests/bpf/prog_tests/test_ima.c
 create mode 100644 tools/testing/selftests/bpf/progs/ima.c

Comments

patchwork-bot+netdevbpf@kernel.org Nov. 25, 2020, 11:10 p.m. UTC | #1
Hello:

This series was applied to bpf/bpf-next.git (refs/heads/master):

On Tue, 24 Nov 2020 15:12:07 +0000 you wrote:
> From: KP Singh <kpsingh@google.com>
> 
> # v2 -> v3
> 
> - Fixed an issue pointed out by Alexei, the helper should only be
>   exposed to sleepable hooks.
> - Update the selftests to constrain the IMA policy udpate to a loopback
>   filesystem specifically created for the test. Also, split this out
>   from the LSM test. I dropped the Ack from this last patch since this
>   is a re-write.
> 
> [...]

Here is the summary with links:
  - [bpf-next,v3,1/3] ima: Implement ima_inode_hash
    https://git.kernel.org/bpf/bpf-next/c/403319be5de5
  - [bpf-next,v3,2/3] bpf: Add a BPF helper for getting the IMA hash of an inode
    https://git.kernel.org/bpf/bpf-next/c/27672f0d280a
  - [bpf-next,v3,3/3] bpf: Add a selftest for bpf_ima_inode_hash
    https://git.kernel.org/bpf/bpf-next/c/898eeb122e8a

You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html