lkml.org 
[lkml]   [2012]   [Mar]   [29]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    Patch in this message
    /
    From
    Subject[PATCH v4 02/12] vfs: move ima_file_free before releasing the file
    Date
    ima_file_free(), called on __fput(), currently flags files that have
    changed, so that the file is re-measured. For appraising a files's
    integrity, the file's hash must be re-calculated and stored in the
    'security.ima' xattr to reflect any changes.

    This patch moves the ima_file_free() call to before releasing the file
    in preparation of ima-appraisal measuring the file and updating the
    'security.ima' xattr.

    Signed-off-by: Mimi Zohar <zohar@us.ibm.com>
    Acked-by: Serge Hallyn <serge.hallyn@ubuntu.com>
    Acked-by: Dmitry Kasatkin <dmitry.kasatkin@intel.com>
    ---
    fs/file_table.c | 2 +-
    1 files changed, 1 insertions(+), 1 deletions(-)

    diff --git a/fs/file_table.c b/fs/file_table.c
    index 20002e3..554161a 100644
    --- a/fs/file_table.c
    +++ b/fs/file_table.c
    @@ -243,10 +243,10 @@ static void __fput(struct file *file)
    if (file->f_op && file->f_op->fasync)
    file->f_op->fasync(-1, file, 0);
    }
    + ima_file_free(file);
    if (file->f_op && file->f_op->release)
    file->f_op->release(inode, file);
    security_file_free(file);
    - ima_file_free(file);
    if (unlikely(S_ISCHR(inode->i_mode) && inode->i_cdev != NULL &&
    !(file->f_mode & FMODE_PATH))) {
    cdev_put(inode->i_cdev);
    --
    1.7.6.5


    \
     
     \ /
      Last update: 2012-03-29 16:47    [W:0.024 / U:125.976 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site