diff for duplicates of <1499374835.3130.56.camel@linux.vnet.ibm.com> diff --git a/a/1.txt b/N1/1.txt index d56a2bc..f7eb014 100644 --- a/a/1.txt +++ b/N1/1.txt @@ -18,16 +18,16 @@ On Thu, 2017-07-06 at 12:23 -0400, Jeff Layton wrote: > Signed-off-by: Jeff Layton <jlayton@redhat.com> Prior to IMA being upstreamed, we used mtime to determine when a file -changed. ?At that time, Andrew Morton suggested using i_version. ?Is +changed. At that time, Andrew Morton suggested using i_version. Is there a specific filesystem that you are interested in that doesn't have i_version support? Assuming there is a valid reason for adding this support, the check -should be based on mtime, not ctime. ?ctime includes file metadata +should be based on mtime, not ctime. ctime includes file metadata changes, not only file data changes, which would result in re- calculating the file hash unnecessarily. -Mimi ?? +Mimi > --- > security/integrity/ima/ima_api.c | 4 +++- @@ -119,8 +119,3 @@ Mimi ?? > unsigned long flags; > unsigned long measured_pcrs; > enum integrity_status ima_file_status:4; - --- -To unsubscribe from this list: send the line "unsubscribe linux-security-module" in -the body of a message to majordomo at vger.kernel.org -More majordomo info at http://vger.kernel.org/majordomo-info.html diff --git a/a/content_digest b/N1/content_digest index 3a4284d..085924a 100644 --- a/a/content_digest +++ b/N1/content_digest @@ -1,8 +1,13 @@ "ref\020170706162320.13174-1-jlayton@kernel.org\0" - "From\0zohar@linux.vnet.ibm.com (Mimi Zohar)\0" - "Subject\0[PATCH] integrity: track ctime in addition to i_version for assessment\0" + "From\0Mimi Zohar <zohar@linux.vnet.ibm.com>\0" + "Subject\0Re: [PATCH] integrity: track ctime in addition to i_version for assessment\0" "Date\0Thu, 06 Jul 2017 17:00:35 -0400\0" - "To\0linux-security-module@vger.kernel.org\0" + "To\0Jeff Layton <jlayton@kernel.org>" + Serge E. Hallyn <serge@hallyn.com> + " Dmitry Kasatkin <dmitry.kasatkin@gmail.com>\0" + "Cc\0linux-kernel@vger.kernel.org" + linux-security-module@vger.kernel.org + " Andrew Morton <akpm@linux-foundation.org>\0" "\00:1\0" "b\0" "Hi Jeff,\n" @@ -25,16 +30,16 @@ "> Signed-off-by: Jeff Layton <jlayton@redhat.com>\n" "\n" "Prior to IMA being upstreamed, we used mtime to determine when a file\n" - "changed. ?At that time, Andrew Morton suggested using i_version. ?Is\n" + "changed. \302\240At that time, Andrew Morton suggested using i_version. \302\240Is\n" "there a specific filesystem that you are interested in that doesn't\n" "have i_version support?\n" "\n" "Assuming there is a valid reason for adding this support, the check\n" - "should be based on mtime, not ctime. ?ctime includes file metadata\n" + "should be based on mtime, not ctime. \302\240ctime includes file metadata\n" "changes, not only file data changes, which would result in re-\n" "calculating the file hash unnecessarily.\n" "\n" - "Mimi ??\n" + "Mimi \302\240\302\240\n" "\n" "> ---\n" "> security/integrity/ima/ima_api.c | 4 +++-\n" @@ -125,11 +130,6 @@ "> +\tstruct timespec ctime;\t/* track inode changes */\n" "> \tunsigned long flags;\n" "> \tunsigned long measured_pcrs;\n" - "> \tenum integrity_status ima_file_status:4;\n" - "\n" - "--\n" - "To unsubscribe from this list: send the line \"unsubscribe linux-security-module\" in\n" - "the body of a message to majordomo at vger.kernel.org\n" - More majordomo info at http://vger.kernel.org/majordomo-info.html + "> \tenum integrity_status ima_file_status:4;" -e86f5db4424e741dc075a817fb9ed6c163647e2d22c210d26675be9414d31ceb +9b13eb528f03c29a64ba1b17c711011a49fd7c90594d673f49ea44bf04b448d1
This is an external index of several public inboxes, see mirroring instructions on how to clone and mirror all data and code used by this external index.