[RFC PATCH v4 1/2] fuse: introduce new fs_type flag FS_IMA_NO_CACHE

On Fri, Feb 2, 2018 at 4:33 PM, Mimi Zohar [off-list ref] wrote:

On Fri, 2018-02-02 at 10:20 -0500, Mimi Zohar wrote:

quoted

Hi Miklos,

On Tue, 2018-01-30 at 19:06 +0100, Dongsu Park wrote:

quoted

From: Alban Crequy <redacted>

This new fs_type flag FS_IMA_NO_CACHE means files should be re-measured,
re-appraised and re-audited each time. Cached integrity results should
not be used.

It is useful in FUSE because the userspace FUSE process can change the
underlying files at any time without notifying the kernel.

I don't really have an understanding what IMA is doing, I think the
same thing applies to any network filesystem (i.e. ones with
d_revalidate).

Isn't that the case?

Thanks,
Miklos
--
To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
the body of a message to majordomo at vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html