Thread (6 messages) 6 messages, 4 authors, 2018-01-03

Re: [PATCHv6 1/1] ima: re-introduce own integrity cache lock

From: Mimi Zohar <hidden>
Date: 2018-01-03 04:03:26
Also in: linux-fsdevel, linux-security-module, linux-xfs, lkml

On Wed, 2018-01-03 at 14:16 +1100, Dave Chinner wrote:
On Tue, Jan 02, 2018 at 09:52:03PM -0500, Mimi Zohar wrote:
quoted
On Tue, 2018-01-02 at 17:40 -0800, Darrick J. Wong wrote:
quoted
[might as well cc linux-xfs]

On Thu, Dec 14, 2017 at 12:22:37AM +0200, Dmitry Kasatkin wrote:
quoted
Hi,

Could I ask FS maintainers to test IMA with this patch additionally
and provide ack/tested.
We tested but may be you have and some special testing.
Super-late to this party, but unless xfstests has automated tests to
set up IMA on top of an existing filesystem then I most likely have no
idea /how/ to test IMA.  I did a quick grep of xfstests git and I don't
see anything IMA-related.
Back in June I posted a simple xfstests IMA-appraisal test (https://ma
rc.info/?l=linux-fsdevel&m=149703820814885&w=4).
That's a really, really basic test and it doesn't exercise the
problematic direct IO path this patch fixes problems with. nor does
it exercise the chmod path, or try to trigger deadlocks or other
conditions through all the other paths that can trigger IMA actions
and or failures (e.g. ENOSPC).  IOWs, we need a lot more than a
"hello world" test to be able to verify filesystems interact with
IMA properly. e.g. how does it behave at ENOSPC?
True, but for now we were looking for some basic testing - opening a
file and calculating the file hash - on different filesystems, not the
direct-IO path in particular.  Expanding the IMA-appraisal xfstests is
high on my "todo" list.

Mimi
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help