[PATCH 3/3] ima: use fs method to read integrity data

On Thu, Sep 14, 2017 at 10:50:27PM -0700, Linus Torvalds wrote:

This is still wrong.

(a) there is no explanation for why we need that exclusive lock in the
first place

Why should a read need exclusive access? You'd think shared is sufficient.
But regardless, it needs *explanation*.

Shared is sufficient, and nothing in the patch (except for the
description) actually requires an exclusive lock.  It just happens that
ima holds it exclusive for other internal reasons.

--
To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
the body of a message to majordomo at vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html