Hi, This patchset fixes the problem of missing security.ima on new empty files. Detailed descriptions of problems are in the following patch descriptions. First two patches fixes the problem. Third patch makes use of FILE_CREATED flag from VFS, which was not available at the time IMA appraisal came to the kernel.
- Dmitry Dmitry Kasatkin (3): ima: provide flag to identify new empty files evm: skip integrity verification for newly created files ima: pass 'opened' flag to identify newly created files fs/namei.c | 2 +- fs/nfsd/vfs.c | 2 +- include/linux/ima.h | 4 ++-- security/integrity/evm/evm_main.c | 6 +++++- security/integrity/ima/ima.h | 4 ++-- security/integrity/ima/ima_appraise.c | 9 ++++++--- security/integrity/ima/ima_main.c | 26 ++++++++++++++------------ security/integrity/integrity.h | 1 + 8 files changed, 32 insertions(+), 22 deletions(-) -- 1.9.1 -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
