lkml.org 
[lkml]   [2010]   [Oct]   [20]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [PATCH 1/3] IMA: move read/write counters into struct inode
On Wed, Oct 20, 2010 at 09:10:27AM -0400, John Stoffel wrote:

> Does this mean I can't replace /bin/sh on a running system using IMA
> at all, even if just one process has it opened and is running? So how
> the hell am I supposed to do live upgrades on a system?

rename(2). Prohibition against write(2) to binary being executed is
*old*. Try to do the following:
cp /bin/sh /tmp
/tmp/sh &
cat /bin/ls >/tmp/sh
and you'll get
sh: /tmp/sh: Text file busy

That has nothing to do with IMA...


\
 
 \ /
  Last update: 2010-10-20 15:39    [from the cache]
©2003-2011 Jasper Spaans