| commit | d8e9bbd4fa7f654bd877a312fc4104c6e5e5c6ca | [log] [tgz] |
|---|---|---|
| author | Kees Cook <keescook@chromium.org> | Wed Oct 10 15:45:22 2018 -0700 |
| committer | Kees Cook <keescook@chromium.org> | Tue Jan 08 13:18:43 2019 -0800 |
| tree | d85b1e9410ba9e37a64eb22949f114fc0e87d166 | |
| parent | c91d8106b370593b4d3dcc0b06282bf39478ae13 [diff] |
LSM: Split LSM preparation from initialization Since we already have to do a pass through the LSMs to figure out if exclusive LSMs should be disabled after the first one is seen as enabled, this splits the logic up a bit more cleanly. Now we do a full "prepare" pass through the LSMs (which also allows for later use by the blob-sharing code), before starting the LSM initialization pass. Signed-off-by: Kees Cook <keescook@chromium.org>