[lkml]   [2017]   [Sep]   [14]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: [PATCH 2/2] integrity: replace call to integrity_read_file with kernel version
On Fri, Sep 15, 2017 at 06:21:28AM +1000, James Morris wrote:
> So, to be clear, this patch solves the XFS deadlock using a different
> approach (to the now reverted integrity_read approach), which Christoph
> also says is more correct generally. Correct?

No. It is in addition to the previous patches - the patches were
correct for the IMA interaction with the I/O path. It just turns
out that the function was also reused for reading certificates
at initialization time, for which that change was incorrect.

If this series is applied first the integrity_read code is not
used for that path any more.

 \ /
  Last update: 2017-09-14 22:50    [W:0.034 / U:0.536 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site