From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753197AbdI1MmM (ORCPT ); Thu, 28 Sep 2017 08:42:12 -0400 Received: from mx0b-001b2d01.pphosted.com ([148.163.158.5]:37564 "EHLO mx0a-001b2d01.pphosted.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S1753170AbdI1MmI (ORCPT ); Thu, 28 Sep 2017 08:42:08 -0400 From: Mimi Zohar To: linux-security-module@vger.kernel.org Cc: linux-fsdevel@vger.kernel.org, Mimi Zohar , linux-integrity@vger.kernel.org, Christoph Hellwig , Linus Torvalds , Linux Kernel Mailing List , Jan Kara , "Theodore Ts'o" Subject: [RFC PATCH 0/3] define new read_iter file operation rwf flag Date: Thu, 28 Sep 2017 08:39:30 -0400 X-Mailer: git-send-email 2.7.4 X-TM-AS-MML: disable x-cbid: 17092812-0040-0000-0000-000003585AD1 X-IBM-AV-DETECTION: SAVI=unused REMOTE=unused XFE=unused x-cbparentid: 17092812-0041-0000-0000-00000CD9512D Message-Id: <1506602373-4799-1-git-send-email-zohar@linux.vnet.ibm.com> X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:,, definitions=2017-09-28_04:,, signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 spamscore=0 suspectscore=1 malwarescore=0 phishscore=0 adultscore=0 bulkscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1707230000 definitions=main-1709280189 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org This patch set replaces the "integrity_read" file operation method, as defined in the "ima: use fs method to read integrity data" patch, with a new read_iter file operation "rwf" flag. (The other patches are the same.*) The main difference between these approaches is whether IMA must be explicitly enabled (opt-in), by defining the "integrity_read" file operation method for each file system, or enabled by default, with modifications as needed to the read_iter. *The entire patch sets can be found in git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity.git next-integrity-read and next-read-iter. Mimi Mimi Zohar (3): fs: define new read_iter rwf flag integrity: use call_read_iter to calculate the file hash fs: detect that the i_rwsem has already been taken exclusively arch/s390/hypfs/inode.c | 3 ++- drivers/block/loop.c | 2 +- drivers/char/mem.c | 6 ++++-- drivers/gpu/drm/drm_dp_aux_dev.c | 3 ++- drivers/net/tap.c | 3 ++- drivers/net/tun.c | 3 ++- drivers/staging/android/ashmem.c | 3 ++- drivers/staging/lustre/lustre/llite/file.c | 3 ++- drivers/staging/lustre/lustre/llite/vvp_io.c | 2 +- drivers/usb/gadget/function/f_fs.c | 3 ++- drivers/usb/gadget/legacy/inode.c | 2 +- drivers/vhost/net.c | 3 ++- fs/9p/vfs_file.c | 8 +++++--- fs/aio.c | 2 +- fs/block_dev.c | 4 ++-- fs/ceph/file.c | 5 +++-- fs/cifs/cifsfs.c | 6 +++--- fs/cifs/cifsfs.h | 4 ++-- fs/cifs/file.c | 10 +++++----- fs/coda/file.c | 2 +- fs/ecryptfs/file.c | 4 ++-- fs/efivarfs/file.c | 2 +- fs/ext2/file.c | 16 +++++++++------ fs/ext4/file.c | 20 +++++++++++-------- fs/fuse/cuse.c | 3 ++- fs/fuse/dev.c | 3 ++- fs/fuse/file.c | 8 +++++--- fs/hugetlbfs/inode.c | 3 ++- fs/ncpfs/file.c | 2 +- fs/nfs/file.c | 4 ++-- fs/nfs/internal.h | 2 +- fs/ocfs2/file.c | 5 +++-- fs/orangefs/file.c | 3 ++- fs/pipe.c | 2 +- fs/read_write.c | 4 ++-- fs/splice.c | 2 +- fs/xfs/xfs_file.c | 30 +++++++++++++++++----------- include/linux/fs.h | 10 +++++----- mm/filemap.c | 3 ++- mm/shmem.c | 3 ++- net/socket.c | 4 ++-- security/integrity/iint.c | 21 +++++++++++++------ sound/core/pcm_native.c | 2 +- 43 files changed, 139 insertions(+), 94 deletions(-) -- 2.7.4