Re: [PATCH v1 1/7] ima: update appraise flags after policy update completes

2015-12-08 Thread Mimi Zohar
On Tue, 2015-12-08 at 21:17 +0200, Petko Manolov wrote: > On 15-12-08 13:01:18, Mimi Zohar wrote: > > While creating a temporary list of new rules, the ima_appraise flag is > > updated, but not reverted on failure to append the new rules to the > > existing policy. This patch defines temp_ima_appr

Re: [PATCH v1 1/7] ima: update appraise flags after policy update completes

2015-12-08 Thread Petko Manolov
On 15-12-08 13:01:18, Mimi Zohar wrote: > While creating a temporary list of new rules, the ima_appraise flag is > updated, but not reverted on failure to append the new rules to the > existing policy. This patch defines temp_ima_appraise flag. Only when > the new rules are appended to the policy

[PATCH v1 1/7] ima: update appraise flags after policy update completes

2015-12-08 Thread Mimi Zohar
While creating a temporary list of new rules, the ima_appraise flag is updated, but not reverted on failure to append the new rules to the existing policy. This patch defines temp_ima_appraise flag. Only when the new rules are appended to the policy is the flag updated. Signed-off-by: Mimi Zohar