mainline inclusion
from mainline-v5.3-rc1
commit b1694245
category: bugfix
bugzilla: https://gitee.com/openeuler/kernel/issues/I692HU
CVE: NA

--------------------------------

Don't do lazy policy updates while running the rule matching,
run the updates as they happen.

Depends on commit f242064c5df3 ("LSM: switch to blocking policy update notifiers")
Signed-off-by: NJanne Karhunen <janne.karhunen@gmail.com>
Signed-off-by: NMimi Zohar <zohar@linux.ibm.com>
Conflicts:
	security/integrity/ima/ima_main.c
Signed-off-by: NGUO Zihua <guozihua@huawei.com>
Reviewed-by: NXiu Jianfeng <xiujianfeng@huawei.com>
Signed-off-by: NYongqiang Liu <liuyongqiang13@huawei.com>