Re: [PATCH] ima,fuse: introduce new fs flag FS_NO_IMA_CACHE

2018-01-16 Thread Mimi Zohar
> > > > /* > > -* Reset the measure, appraise and audit cached flags either if > > -* ima_inode_setxattr was called or based on policy, forcing > > -* the file to be re-evaluated. > > +* Reset the measure, appraise and audit cached flags either if: > > +

Re: [PATCH] ima,fuse: introduce new fs flag FS_NO_IMA_CACHE

2018-01-16 Thread Alban Crequy
On Tue, Jan 16, 2018 at 11:41 AM, Alban Crequy wrote: > From: Alban Crequy > > This patch forces files to be re-measured, re-appraised and re-audited > on file systems with the feature flag FS_NO_IMA_CACHE. In that way, > cached integrity results won't be used. > > For now, only FUSE filesystems

[PATCH] ima,fuse: introduce new fs flag FS_NO_IMA_CACHE

2018-01-16 Thread Alban Crequy
From: Alban Crequy This patch forces files to be re-measured, re-appraised and re-audited on file systems with the feature flag FS_NO_IMA_CACHE. In that way, cached integrity results won't be used. For now, only FUSE filesystems use this flag. This is because the userspace FUSE process can chang