[v2,0/2] ima: Fix IMA mishandling of LSM based rule during

Message

Guozihua (Scott) Jan. 3, 2023, 2:20 a.m. UTC

Backports the following two patches to fix the issue of IMA mishandling
LSM based rule during LSM policy update, causing a file to match an
unexpected rule.

Some changes were made to these patches, which was stated in the commit
message of corresponding patch.

GUO Zihua (1):
  ima: Handle -ESTALE returned by ima_filter_rule_match()

Janne Karhunen (1):
  ima: use the lsm policy update notifier

 security/integrity/ima/ima.h        |   2 +
 security/integrity/ima/ima_main.c   |   8 ++
 security/integrity/ima/ima_policy.c | 153 +++++++++++++++++++++++-----
 3 files changed, 137 insertions(+), 26 deletions(-)