lkml.org 
[lkml]   [2012]   [Dec]   [11]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
SubjectRe: [PATCH 0/2] ima: policy search speedup
From
On Tue, Dec 11, 2012 at 1:18 PM, Mimi Zohar <zohar@linux.vnet.ibm.com> wrote:

> The appraisal policy is based on the object metadata, such as the uid,
> so the result is static and can be cached. The measurement policy, on
> the other hand, is normally based on the subject (eg. who is
> reading/executing) the file. Knowledge of whether the file has been
> measured is cached in the iint, but unlike the appraisal policy, not
> whether it needs to be measured. Having the flag on a per inode basis,
> doesn't really help.

Can you try again? Even I can't parse this. Not sure what to tell
you to try again, maybe give us a summary at a high level again and
then why this patch is specifically necessary?


\
 
 \ /
  Last update: 2012-12-11 20:01    [W:0.079 / U:0.156 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site