{"push_id":1989349165,"size":1,"distinct_size":1,"ref":"refs/heads/master","head":"3bb17a6102ffc72ee0fe3d2442034e1048a7d0f8","before":"0a287fe0b0f39754094dfd95ad6a9844c5166571","commits":[{"sha":"3bb17a6102ffc72ee0fe3d2442034e1048a7d0f8","author":{"name":"Daniel Glöckner","email":"f1fc52a380c6cf9b589f356b9309d5396f6754f6@emlix.com"},"message":"ima: accept previously set IMA_NEW_FILE\n\ncommit 1ac202e978e18f045006d75bd549612620c6ec3a upstream.\n\nModifying the attributes of a file makes ima_inode_post_setattr reset\nthe IMA cache flags. So if the file, which has just been created,\nis opened a second time before the first file descriptor is closed,\nverification fails since the security.ima xattr has not been written\nyet. We therefore have to look at the IMA_NEW_FILE even if the file\nalready existed.\n\nWith this patch there should no longer be an error when cat tries to\nopen testfile:\n\n$ rm -f testfile\n$ ( echo test >&3 ; touch testfile ; cat testfile ) 3>testfile\n\nA file being new is no reason to accept that it is missing a digital\nsignature demanded by the policy.\n\nSigned-off-by: Daniel Glöckner <dg@emlix.com>\nSigned-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>\n\nSigned-off-by: ahmedradaideh <ahmed.radaideh@gmail.com>","distinct":true,"url":"https://api.github.com/repos/mawrick26/S7E-N1/commits/3bb17a6102ffc72ee0fe3d2442034e1048a7d0f8"}]}
{"actor":{"display_login":"mawrick26"}}