Commit 6c1488fd authored Sep 02, 2009 by Mimi Zohar Committed by James Morris Sep 03, 2009

IMA: open new file for read



When creating a new file, ima_path_check() assumed the new file
was being opened for write. Call ima_path_check() with the
appropriate acc_mode so that the read/write counters are
incremented correctly.

Signed-off-by: Mimi Zohar <zohar@us.ibm.com>
Signed-off-by: James Morris <jmorris@namei.org>

parent ee18d64c

fs/namei.c

+4 −2

Original line number	Diff line number	Diff line
		@@ -1533,9 +1533,11 @@ int may_open(struct path *path, int acc_mode, int flag)
		if (error)
		return error;

		error = ima_path_check(path,
		acc_mode & (MAY_READ \| MAY_WRITE \| MAY_EXEC),
		error = ima_path_check(path, acc_mode ?
		acc_mode & (MAY_READ \| MAY_WRITE \| MAY_EXEC) :
		ACC_MODE(flag) & (MAY_READ \| MAY_WRITE),
		IMA_COUNT_UPDATE);

		if (error)
		return error;
		/*