Messages in this thread | | | From | Dmitry Kasatkin <> | Subject | [PATCH v1 0/3] fixes for missing security.ima on new empty files | Date | Fri, 11 Jul 2014 14:46:58 +0300 |
| |
Hi,
This patchset fixes the problem of missing security.ima on new empty files. Detailed descriptions of problems are in the following patch descriptions. First two patches fixes the problem. Third patch makes use of FILE_CREATED flag from VFS, which was not available at the time IMA appraisal came to the kernel.
- Dmitry
Dmitry Kasatkin (3): ima: provide flag to identify new empty files evm: skip integrity verification for newly created files ima: pass 'opened' flag to identify newly created files
fs/namei.c | 2 +- fs/nfsd/vfs.c | 2 +- include/linux/ima.h | 4 ++-- security/integrity/evm/evm_main.c | 6 +++++- security/integrity/ima/ima.h | 4 ++-- security/integrity/ima/ima_appraise.c | 9 ++++++--- security/integrity/ima/ima_main.c | 26 ++++++++++++++------------ security/integrity/integrity.h | 1 + 8 files changed, 32 insertions(+), 22 deletions(-)
-- 1.9.1
| |