[lkml]   [2010]   [Oct]   [20]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [PATCH 1/3] IMA: move read/write counters into struct inode
    On Wed, Oct 20, 2010 at 09:10:27AM -0400, John Stoffel wrote:

    > Does this mean I can't replace /bin/sh on a running system using IMA
    > at all, even if just one process has it opened and is running? So how
    > the hell am I supposed to do live upgrades on a system?

    rename(2). Prohibition against write(2) to binary being executed is
    *old*. Try to do the following:
    cp /bin/sh /tmp
    /tmp/sh &
    cat /bin/ls >/tmp/sh
    and you'll get
    sh: /tmp/sh: Text file busy

    That has nothing to do with IMA...

     \ /
      Last update: 2010-10-20 15:39    [W:0.018 / U:12.068 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site