mbox series

[v3,0/3] ima: Fix IMA mishandling of LSM based rule during

Message ID 20230104061458.8878-1-guozihua@huawei.com (mailing list archive)
Headers show
Series ima: Fix IMA mishandling of LSM based rule during | expand

Message

Guozihua (Scott) Jan. 4, 2023, 6:14 a.m. UTC 
Backports the following three patches to fix the issue of IMA mishandling
LSM based rule during LSM policy update, causing a file to match an
unexpected rule.

GUO Zihua (1):
  ima: Handle -ESTALE returned by ima_filter_rule_match()

Janne Karhunen (2):
  LSM: switch to blocking policy update notifiers
  ima: use the lsm policy update notifier

 drivers/infiniband/core/device.c    |   4 +-
 include/linux/security.h            |  12 +--
 security/integrity/ima/ima.h        |   2 +
 security/integrity/ima/ima_main.c   |   8 ++
 security/integrity/ima/ima_policy.c | 147 +++++++++++++++++++++++-----
 security/security.c                 |  23 +++--
 security/selinux/hooks.c            |   2 +-
 security/selinux/selinuxfs.c        |   2 +-
 8 files changed, 154 insertions(+), 46 deletions(-)