[RFC PATCH v1 0/5] Add support for O_MAYEXEC

Florian Weimer fweimer at redhat.com
Thu Dec 13 11:26:56 UTC 2018


* Mimi Zohar:

> The indication needs to be set during file open, before the open
> returns to the caller.  This is the point where ima_file_check()
> verifies the file's signature.  On failure, access to the file is
> denied.

Does this verification happen for open with O_PATH?

Thanks,
Florian



More information about the Linux-security-module-archive mailing list