ima: re-evaluate files on privileged mounted filesystems

This patch addresses the fuse privileged mounted filesystems in a "secure"
environment, with a correctly enforced security policy, which is willing
to assume the inherent risk of specific fuse filesystems that are well
defined and properly implemented.

As there is no way for the kernel to detect file changes, the kernel
ignores the cached file integrity results and re-measures, re-appraises,
and re-audits the file.

Signed-off-by: Mimi Zohar <[email protected]>
Cc: Miklos Szeredi <[email protected]>
Cc: Seth Forshee <[email protected]>
Cc: Dongsu Park <[email protected]>
Cc: Alban Crequy <[email protected]>
Acked-by: Serge Hallyn <[email protected]>
Acked-by: "Eric W. Biederman" <[email protected]>

0 files changed, 0 insertions, 0 deletions