Re: [PATCH v1 0/2] Add destructor hook to LSM modules

From: Paul Moore
Date: Fri Mar 10 2023 - 17:35:56 EST


On Fri, Mar 10, 2023 at 2:26 PM Mirsad Goran Todorovac
<mirsad.goran.todorovac@xxxxxx> wrote:
>
> LSM security/integrity/iint.c had the case of kmem_cache_create() w/o a proper
> kmem_cache_destroy() destructor.
>
> Introducing the release() hook would enable LSMs to release allocated resources
> on exit, and in proper order, rather than dying all together with kernel shutdown
> in an undefined order.
>
> Thanks,
> Mirsad
>
> ---
> include/linux/lsm_hooks.h | 1 +
> security/integrity/iint.c | 7 +++++++
> 2 files changed, 8 insertions(+)

I only see the 1/2 patch, did you send the 2/2 patch to the LSM list?
If not, you need to do that.

--
paul-moore.com