Re: [PATCH v6 03/17] ima: Namespace audit status flags

On Wed, 2021-12-15 at 21:38 -0500, Stefan Berger wrote:

On 12/15/21 16:15, Mimi Zohar wrote:

quoted

On Fri, 2021-12-10 at 14:47 -0500, Stefan Berger wrote:

quoted

From: Mehmet Kayaalp <redacted>

The iint cache stores whether the file is measured, appraised, audited
etc. This patch moves the IMA_AUDITED flag into the per-namespace
ns_status, enabling IMA audit mechanism to audit the same file each time
it is accessed in a new namespace.

The ns_status is not looked up if the CONFIG_IMA_NS is disabled or if
any of the IMA_NS_STATUS_ACTIONS (currently only IMA_AUDIT) is not
enabled.

^none of the ... are enabled.

You want me to rephrase it?

Yes, please.

thanks,

Mimi