[PATCH] security/ima: use fs method to read integrity data

James Morris jmorris at namei.org
Wed May 10 23:59:51 UTC 2017


On Wed, 10 May 2017, Christoph Hellwig wrote:

> Add a new ->integrity_read file operation to read data for
> integrity hash collection.  This is defined to be equivalent
> to ->read_iter, except that it will be called with the i_rwsem
> held exclusively.  Also the presence of ->integrity_read indicates
> that the file system can support IMA.
> 
> Signed-off-by: Christoph Hellwig <hch at lst.de>

Fixes an IMA+XFS deadlock I've been seeing.

Tested-by: James Morris <james.l.morris at oracle.com>


-- 
James Morris
<jmorris at namei.org>

--
To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
the body of a message to majordomo at vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html



More information about the Linux-security-module-archive mailing list