[PATCH] security/ima: use fs method to read integrity data

On Mon, 2017-06-05 at 10:23 +1000, James Morris wrote:

On Sun, 4 Jun 2017, Christoph Hellwig wrote:

quoted

On Thu, May 11, 2017 at 09:59:51AM +1000, James Morris wrote:

quoted

On Wed, 10 May 2017, Christoph Hellwig wrote:

quoted

Add a new ->integrity_read file operation to read data for
integrity hash collection.  This is defined to be equivalent
to ->read_iter, except that it will be called with the i_rwsem
held exclusively.  Also the presence of ->integrity_read indicates
that the file system can support IMA.

Signed-off-by: Christoph Hellwig <hch@lst.de>

Fixes an IMA+XFS deadlock I've been seeing.

Are you going to pick this up?  Any feedback from the folks on the
LSM list on what additional file systems need to be wired up?

That would normally come in via Mimi's tree, but I will pick it up if it 
doesn't.

With just this patch, a number of file measurements and appraisal
verifications are missing. ?I'm hoping to have an initial patch set
ready to be posted later this week.

Sorry for the delay.

Mimi

--
To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
the body of a message to majordomo at vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html