Messages in this thread | | | From | "J. R. Okajima" <> | Subject | Re: IMA + O_DIRECT (Re: [PATCH 0/1] fix IMA + Apparmor kernel panic) | Date | Sat, 10 May 2014 05:07:08 +0900 |
| |
Mimi Zohar: > I assume so, as there wasn't any comment. As a temporary fix, would it > make sense not to measure/appraise/audit files opened with the direct-io > flag based policy? Define a new IMA policy option 'directio'. A sample > rule would look like: > > dont_appraise bprm_check directio fsuuid=...
I prefer such approach or anything addressing in IMA only, so it makes sense.
J. R. Okajima
| |