Commit 78bb5d0b authored Oct 03, 2014 by Dmitry Kasatkin Committed by Mimi Zohar Oct 11, 2014

ima: report policy load status



Audit messages are rate limited, often causing the policy update
info to not be visible.  Report policy loading status also using
pr_info.

Changes in v2:
* reporting moved to ima_release_policy to notice parsing errors
* reporting both completed and failed status

Signed-off-by: Dmitry Kasatkin <d.kasatkin@samsung.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>

parent 456f5fd3

security/integrity/ima/ima_fs.c

+2 −0

Original line number	Diff line number	Diff line
		@@ -311,6 +311,8 @@ static int ima_open_policy(struct inode inode, struct file filp)
		*/
		static int ima_release_policy(struct inode inode, struct file file)
		{
		pr_info("IMA: policy update %s\n",
		valid_policy ? "completed" : "failed");
		if (!valid_policy) {
		ima_delete_rules();
		valid_policy = 1;