Messages in this thread | | | Date | Sat, 26 Apr 2014 11:58:45 +0300 | Subject | Re: Kernel panic at Ubuntu: IMA + Apparmor | From | Dmitry Kasatkin <> |
| |
On 26 April 2014 01:38, Eric W. Biederman <ebiederm@xmission.com> wrote: > Dmitry Kasatkin <dmitry.kasatkin@gmail.com> writes: > >> Is it really a show stopper to switch order of 2 functions as quick fix? >> It was like that before 3.10 and seemed ok... > > When that is the question. The answer is yes it is a show stopper. > > A quick fix to bury a fundamental design flaw because the code > previously seemed ok. That seems fundamentally wrong. > > Having IMA conflict with Apparmor in Kconfig would be a sensible quick > fix. > > Eric
Conflict with Apparmor means with Ubuntu.
But answering to your early question.. IMA does not want permission denied when measuring and re-measuring files. may_open() is doing that job before.
We need quickly introduce kernel_read without LSM checks...
-- Thanks, Dmitry
| |