[PATCH] security/ima: use fs method to read integrity data

On Sun, 4 Jun 2017, Christoph Hellwig wrote:

On Thu, May 11, 2017 at 09:59:51AM +1000, James Morris wrote:

quoted

On Wed, 10 May 2017, Christoph Hellwig wrote:

quoted

Add a new ->integrity_read file operation to read data for
integrity hash collection.  This is defined to be equivalent
to ->read_iter, except that it will be called with the i_rwsem
held exclusively.  Also the presence of ->integrity_read indicates
that the file system can support IMA.

Signed-off-by: Christoph Hellwig <hch@lst.de>

Fixes an IMA+XFS deadlock I've been seeing.

Are you going to pick this up?  Any feedback from the folks on the
LSM list on what additional file systems need to be wired up?

That would normally come in via Mimi's tree, but I will pick it up if it 
doesn't.


-- 
James Morris
[off-list ref]

--
To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
the body of a message to majordomo at vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html