Re: [RFC][Patch 5/5]integrity: IMA as an integrity service provider

From: Mimi Zohar
Date: Fri May 30 2008 - 09:06:40 EST



On Wed, 2008-05-28 at 20:30 -0700, Andrew Morton wrote:

> > > - ima_fixup_inodes looks like it will race and crash against a
> > > well-timed unmount. I expect you will need to bump s_count before
> > > dropping sb_lock. See writeback_inodes() for an example.
> >
> > ima_fixup_inodes() is called once at initialization.
>
> What is "initialisation"? During initcalls? Are there even any files
> in cache at that time? I bet we can arrange for the answer to become
> "no".

Yes, during the initcalls. Is this possible even when using
late_initcall(). IMA is dependent on the TPM being available,
if it is being used.

Mimi



--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/