Re: [PATCH 2/2] ima: turn on force option for FUSE in builtin policies

Hi, On Sun, Jan 14, 2018 at 8:09 PM, kbuild test robot wrote: > [auto build test ERROR on linus/master] > [also build test ERROR on v4.15-rc7 next-20180112] > [if your patch is applied to the wrong git tree, please drop us a note to > help improve the system] As already mentioned in the commit

Re: [PATCH 2/2] ima: turn on force option for FUSE in builtin policies

Hi Dongsu, Thank you for the patch! Yet something to improve: [auto build test ERROR on linus/master] [also build test ERROR on v4.15-rc7 next-20180112] [if your patch is applied to the wrong git tree, please drop us a note to help improve the system] url: https://github.com/0day-ci/linux/c

Re: [PATCH 2/2] ima: turn on force option for FUSE in builtin policies

> diff --git a/security/integrity/ima/ima_policy.c > b/security/integrity/ima/ima_policy.c > index fddef8f8..8de40d85 100644 > --- a/security/integrity/ima/ima_policy.c > +++ b/security/integrity/ima/ima_policy.c > @@ -127,6 +127,7 @@ static struct ima_rule_entry default_measurement_rules[] > __

[PATCH 2/2] ima: turn on force option for FUSE in builtin policies

In case of FUSE filesystem, cached integrity results in IMA could be reused, when the userspace FUSE process has changed the underlying files. To be able to avoid such cases, we need to turn on the force option in builtin policies, for actions of measure and appraise. Then integrity values become r