Skip to content
Commit b836c4d2 authored by Mimi Zohar's avatar Mimi Zohar
Browse files

ima: detect changes to the backing overlay file



Commit 18b44bc5 ("ovl: Always reevaluate the file signature for
IMA") forced signature re-evaulation on every file access.

Instead of always re-evaluating the file's integrity, detect a change
to the backing file, by comparing the cached file metadata with the
backing file's metadata.  Verifying just the i_version has not changed
is insufficient.  In addition save and compare the i_ino and s_dev
as well.

Reviewed-by: default avatarAmir Goldstein <amir73il@gmail.com>
Tested-by: default avatarEric Snowberg <eric.snowberg@oracle.com>
Tested-by: default avatarRaul E Rangel <rrangel@chromium.org>
Cc: stable@vger.kernel.org
Signed-off-by: default avatarMimi Zohar <zohar@linux.ibm.com>
parent b4650306
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment