ima: report policy load status
authorDmitry Kasatkin <d.kasatkin@samsung.com>
Fri, 3 Oct 2014 11:40:18 +0000 (14:40 +0300)
committerMimi Zohar <zohar@linux.vnet.ibm.com>
Sun, 12 Oct 2014 03:25:25 +0000 (23:25 -0400)
Audit messages are rate limited, often causing the policy update
info to not be visible.  Report policy loading status also using
pr_info.

Changes in v2:
* reporting moved to ima_release_policy to notice parsing errors
* reporting both completed and failed status

Signed-off-by: Dmitry Kasatkin <d.kasatkin@samsung.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
security/integrity/ima/ima_fs.c

index da92fcc08d151645c8139ba724c9c15ccd029267..16d85273d40865f8550312b912149ea8224384bb 100644 (file)
@@ -311,6 +311,8 @@ static int ima_open_policy(struct inode *inode, struct file *filp)
  */
 static int ima_release_policy(struct inode *inode, struct file *file)
 {
+       pr_info("IMA: policy update %s\n",
+               valid_policy ? "completed" : "failed");
        if (!valid_policy) {
                ima_delete_rules();
                valid_policy = 1;