Messages in this thread | | | Date | Sat, 26 Apr 2014 14:56:16 +0100 | From | Al Viro <> | Subject | Re: Kernel panic at Ubuntu: IMA + Apparmor |
| |
On Sat, Apr 26, 2014 at 11:58:45AM +0300, Dmitry Kasatkin wrote:
> Conflict with Apparmor means with Ubuntu. > > But answering to your early question.. > IMA does not want permission denied when measuring and re-measuring files. > may_open() is doing that job before. > > We need quickly introduce kernel_read without LSM checks...
*snarl*
What we need quickly is to introduce you to a textbook or two. As the matter of fact, in this case even wikipedia might suffice...
Please, figure out what "mandatory locking" is about, what kind of exclusion does it provide and how much is it (un)related to LSM.
It has nothing to do with permission being denied; the normal behaviour is to *block* until the lock has been removed. Or failure with -EAGAIN if the file had been opened with O_NDELAY.
The effects apply only to read/write and their ilk; they have nothing to do with e.g. O_RDWR open(). And having a file already opened r/w by somebody does not prevent another process from opening it and acquiring an exclusive lock on some range.
| |