On Mon, Nov 23, 2009 at 3:52 AM, Frank Burkhardt <[email protected]> wrote: > Hello everyone, > > to prevent security issues, I upgraded to a more recent kernel. It's > 2.6.31.6 - without any patches from kernel.org. Since I'm using that kernel > with openafs 1.4.11 (actually it's Russ Allbery's Debian package, version > 1.4.11+dfsg-5), my kernel prints out lots of lines like this: > > ima_file_free: V9356 open/free imbalance (r:0 w:-21 o:-21 f:0)
I don't think IMA is enabled on your typical distro kernel, so the combination of AFS and IMA probably has had very little testing. Is it intentional that you have it enabled in your kernel .config? It may be that it's exposing a bug, but off hand I'm guessing that the way we're opening cache files (with dentry_open) bypasses IMA's accounting. I see that nfsd for instance always calls ima_counts_get() after opening a file with dentry_open - we would probably need to do the same thing to keep IMA happy. Marc _______________________________________________ OpenAFS-info mailing list [email protected] https://lists.openafs.org/mailman/listinfo/openafs-info
