Re: [PATCH bpf-next v1 02/13] bpf: lsm: Add a skeleton and config options

From: James Morris
Date: Tue Jan 07 2020 - 16:14:25 EST


On Fri, 20 Dec 2019, KP Singh wrote:

> From: KP Singh <kpsingh@xxxxxxxxxx>
>
> The LSM can be enabled by CONFIG_SECURITY_BPF.
> Without CONFIG_SECURITY_BPF_ENFORCE, the LSM will run the
> attached eBPF programs but not enforce MAC policy based
> on the return value of the attached programs.
>
> Signed-off-by: KP Singh <kpsingh@xxxxxxxxxx>


Reviewed-by: James Morris <jamorris@xxxxxxxxxxxxxxxxxxx>


--
James Morris
<jmorris@xxxxxxxxx>