IMA: maintain i_readcount in the VFS layer
authorMimi Zohar <zohar@linux.vnet.ibm.com>
Tue, 2 Nov 2010 14:13:07 +0000 (10:13 -0400)
committerMimi Zohar <zohar@linux.vnet.ibm.com>
Thu, 10 Feb 2011 12:51:44 +0000 (07:51 -0500)
commit890275b5eb79e9933d12290473eab9ac38da0051
tree8fa529a6fdfa7647ed4e14287658b71df8636ddd
parenta5c96ebf1d71df0c5fb77ab58c9aeb307cf02372
IMA: maintain i_readcount in the VFS layer

ima_counts_get() updated the readcount and invalidated the PCR,
as necessary. Only update the i_readcount in the VFS layer.
Move the PCR invalidation checks to ima_file_check(), where it
belongs.

Maintaining the i_readcount in the VFS layer, will allow other
subsystems to use i_readcount.

Signed-off-by: Mimi Zohar <zohar@us.ibm.com>
Acked-by: Eric Paris <eparis@redhat.com>
fs/file_table.c
fs/open.c
include/linux/ima.h
security/integrity/ima/ima_iint.c
security/integrity/ima/ima_main.c