From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <linux-fsdevel-owner@vger.kernel.org>
Received: from mx0b-001b2d01.pphosted.com ([148.163.158.5]:39737 "EHLO
        mx0a-001b2d01.pphosted.com" rhost-flags-OK-OK-OK-FAIL)
        by vger.kernel.org with ESMTP id S1751234AbdFEB6T (ORCPT
        <rfc822;linux-fsdevel@vger.kernel.org>);
        Sun, 4 Jun 2017 21:58:19 -0400
Received: from pps.filterd (m0098420.ppops.net [127.0.0.1])
        by mx0b-001b2d01.pphosted.com (8.16.0.20/8.16.0.20) with SMTP id v551rakB136850
        for <linux-fsdevel@vger.kernel.org>; Sun, 4 Jun 2017 21:58:18 -0400
Received: from e23smtp07.au.ibm.com (e23smtp07.au.ibm.com [202.81.31.140])
        by mx0b-001b2d01.pphosted.com with ESMTP id 2avt5jxahs-1
        (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=NOT)
        for <linux-fsdevel@vger.kernel.org>; Sun, 04 Jun 2017 21:58:18 -0400
Received: from localhost
        by e23smtp07.au.ibm.com with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted
        for <linux-fsdevel@vger.kernel.org> from <zohar@linux.vnet.ibm.com>;
        Mon, 5 Jun 2017 11:58:15 +1000
Subject: Re: [PATCH] security/ima: use fs method to read integrity data
From: Mimi Zohar <zohar@linux.vnet.ibm.com>
To: James Morris <jmorris@namei.org>, Christoph Hellwig <hch@lst.de>
Cc: Al Viro <viro@zeniv.linux.org.uk>, linux-fsdevel@vger.kernel.org,
        linux-ima-devel@lists.sourceforge.net,
        linux-security-module@vger.kernel.org
Date: Sun, 04 Jun 2017 21:57:21 -0400
In-Reply-To: <alpine.LRH.2.20.1706051022330.5970@namei.org>
References: <20170510064507.1764-1-hch@lst.de>
         <20170510064507.1764-2-hch@lst.de>
         <alpine.LRH.2.20.1705110959020.15627@namei.org>
         <20170604054747.GA31064@lst.de>
         <alpine.LRH.2.20.1706051022330.5970@namei.org>
Content-Type: text/plain; charset="UTF-8"
Mime-Version: 1.0
Content-Transfer-Encoding: 8bit
Message-Id: <1496627841.2998.44.camel@linux.vnet.ibm.com>
Sender: linux-fsdevel-owner@vger.kernel.org
List-ID: <linux-fsdevel.vger.kernel.org>

On Mon, 2017-06-05 at 10:23 +1000, James Morris wrote:
> On Sun, 4 Jun 2017, Christoph Hellwig wrote:
> 
> > On Thu, May 11, 2017 at 09:59:51AM +1000, James Morris wrote:
> > > On Wed, 10 May 2017, Christoph Hellwig wrote:
> > > 
> > > > Add a new ->integrity_read file operation to read data for
> > > > integrity hash collection.  This is defined to be equivalent
> > > > to ->read_iter, except that it will be called with the i_rwsem
> > > > held exclusively.  Also the presence of ->integrity_read indicates
> > > > that the file system can support IMA.
> > > > 
> > > > Signed-off-by: Christoph Hellwig <hch@lst.de>
> > > 
> > > Fixes an IMA+XFS deadlock I've been seeing.
> > 
> > Are you going to pick this up?  Any feedback from the folks on the
> > LSM list on what additional file systems need to be wired up?
> 
> That would normally come in via Mimi's tree, but I will pick it up if it 
> doesn't.

With just this patch, a number of file measurements and appraisal
verifications are missing.  I'm hoping to have an initial patch set
ready to be posted later this week.

Sorry for the delay.

Mimi