• M
    Integrity: IMA file free imbalance · 1df9f0a7
    Mimi Zohar 提交于
    The number of calls to ima_path_check()/ima_file_free()
    should be balanced.  An extra call to fput(), indicates
    the file could have been accessed without first being
    measured.
    
    Although f_count is incremented/decremented in places other
    than fget/fput, like fget_light/fput_light and get_file, the
    current task must already hold a file refcnt.  The call to
    __fput() is delayed until the refcnt becomes 0, resulting
    in ima_file_free() flagging any changes.
    
    - add hook to increment opencount for IPC shared memory(SYSV),
      shmat files, and /dev/zero
    - moved NULL iint test in opencount_get()
    Signed-off-by: NMimi Zohar <zohar@us.ibm.com>
    Acked-by: NSerge Hallyn <serue@us.ibm.com>
    Signed-off-by: NJames Morris <jmorris@namei.org>
    1df9f0a7
shmem.c 66.5 KB