[lkml]   [2020]   [Nov]   [21]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: [PATCH bpf-next v2 2/3] bpf: Add a BPF helper for getting the IMA hash of an inode

On 11/20/20 4:50 PM, KP Singh wrote:
> From: KP Singh <>
> Provide a wrapper function to get the IMA hash of an inode. This helper
> is useful in fingerprinting files (e.g executables on execution) and
> using these fingerprints in detections like an executable unlinking
> itself.
> Since the ima_inode_hash can sleep, it's only allowed for sleepable
> LSM hooks.
> Signed-off-by: KP Singh <>
Acked-by: Yonghong Song <>

 \ /
  Last update: 2020-11-21 07:59    [W:0.070 / U:2.524 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site