ima: use the lsm policy update notifier

mainline inclusion
from mainline-v5.3-rc1
commit b1694245
category: bugfix
bugzilla: https://gitee.com/openeuler/kernel/issues/I692HU


CVE: NA

--------------------------------

Don't do lazy policy updates while running the rule matching,
run the updates as they happen.

Depends on commit f242064c5df3 ("LSM: switch to blocking policy update notifiers")

Signed-off-by: Janne Karhunen <janne.karhunen@gmail.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
Conflicts:
	security/integrity/ima/ima_main.c
Signed-off-by: GUO Zihua <guozihua@huawei.com>
Reviewed-by: Xiu Jianfeng <xiujianfeng@huawei.com>
Signed-off-by: Yongqiang Liu <liuyongqiang13@huawei.com>