Skip to content

ima: policy search speedup

Dmitry Kasatkin linux-fsdevel lkml 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest2 patches 28 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/2vfs: new super block feature flags attributeinclude/linux/fs.h+4 -00 replies
2/2ima: skip policy search for never appraised or measured filessecurity/integrity/ima/ima_api.c security/integrity/ima/ima_policy.c security/integrity/integrity.h+22 -90 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [PATCH 0/2] ima: policy search speedup

Hello,

Here is two patches for policy search speedup.

First patch adds additional features flags to superblock. Second - implementation for IMA.

Two months ago I was asking about it on mailing lists. Suggestion was not to use s_flags, but e.g. s_feature_flags.

Any objections about such approach?

Thanks,
Dmitry

Dmitry Kasatkin (2):
vfs: new super block feature flags attribute
ima: skip policy search for never appraised or measured files

 include/linux/fs.h                  |    4 ++++
 security/integrity/ima/ima_api.c    |    8 ++------
 security/integrity/ima/ima_policy.c |   20 +++++++++++++++++---
 security/integrity/integrity.h      |    3 +++
 4 files changed, 26 insertions(+), 9 deletions(-)
Signature · 1 line
1.7.10.4

Read the cover letter in its thread