IMA: don't propagate opened through the entire thing
just check ->f_mode in ima_appraise_measurement() Acked-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
This commit is contained in:
@@ -3400,8 +3400,7 @@ finish_open_created:
|
||||
if (error)
|
||||
goto out;
|
||||
opened:
|
||||
error = ima_file_check(file, op->acc_mode,
|
||||
file->f_mode & FMODE_CREATED ? FILE_CREATED : 0);
|
||||
error = ima_file_check(file, op->acc_mode);
|
||||
if (!error && will_truncate)
|
||||
error = handle_truncate(file);
|
||||
out:
|
||||
|
Reference in New Issue
Block a user