9 Feb
2024
9 Feb
'24
9:53 a.m.
On Mon, Jan 15, 2024 at 07:17:59PM +0100, Roberto Sassu wrote:
From: Roberto Sassu roberto.sassu@huawei.com
In preparation for moving IMA and EVM to the LSM infrastructure, introduce the inode_post_create_tmpfile hook.
As temp files can be made persistent, treat new temp files like other new files, so that the file hash is calculated and stored in the security xattr.
LSMs could also take some action after temp files have been created.
The new hook cannot return an error and cannot cause the operation to be canceled.
Signed-off-by: Roberto Sassu roberto.sassu@huawei.com Acked-by: Casey Schaufler casey@schaufler-ca.com Reviewed-by: Mimi Zohar zohar@linux.ibm.com
fs/namei.c | 1 +
Acked-by: Christian Brauner brauner@kernel.org