Re: [PATCH 2/4] IMA: maintain i_readcount in the VFS layer

From: Valdis . Kletnieks
Date: Fri Oct 29 2010 - 10:15:58 EST


On Thu, 28 Oct 2010 18:02:03 EDT, Mimi Zohar said:
> ima_counts_get() updated the readcount and invalidated the PCR,
> as necessary. Only update the i_readcount in the VFS layer.
> Move the PCR invalidation checks to ima_file_check(), where it
> belongs.
>
> Maintaining the i_readcount in the VFS layer, will allow other
> subsystems to use i_readcount.

Would a symmetric i_writecount be useful for anything? If it existed,
could any code be simplified elsewhere?

Attachment: pgp00000.pgp
Description: PGP signature