[0/2] ima: Fix IMA mishandling of LSM based rule during

Message

Guozihua (Scott) Dec. 27, 2022, 1:47 a.m. UTC

Backports the following two patches to fix the issue of IMA mishandling
LSM based rule during LSM policy update, causing a file to match an
unexpected rule.

Some changes were made to these patches, which was stated in the commit
message of corresponding patch.

GUO Zihua (1):
  ima: Handle -ESTALE returned by ima_filter_rule_match()

Janne Karhunen (1):
  ima: use the lsm policy update notifier

 security/integrity/ima/ima.h        |   2 +
 security/integrity/ima/ima_main.c   |   8 ++
 security/integrity/ima/ima_policy.c | 146 +++++++++++++++++++++++-----
 3 files changed, 130 insertions(+), 26 deletions(-)