Mimi Zohar 01baa39cf5 ima: fallback to using i_version to detect file change ...

Commit db1d1e8b98 ("IMA: use vfs_getattr_nosec to get the i_version")
replaced detecting file change based on i_version with
STATX_CHANGE_COOKIE.

On filesystems without STATX_CHANGE_COOKIE enabled, revert back to
detecting file change based on i_version.

On filesystems which do not support either, assume the file changed.

Reported-by: Frederick Lawler <fred@cloudflare.com>
Fixes: db1d1e8b98 ("IMA: use vfs_getattr_nosec to get the i_version")
Cc: stable@vger.kernel.org
Reviewed-by: Frederick Lawler <fred@cloudflare.com>
Tested-by: Frederick Lawler <fred@cloudflare.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>

2026-03-08 08:24:52 -04:00

..

evm

evm: fix security.evm for a file with IMA signature

2026-03-05 11:39:39 -05:00

ima

ima: fallback to using i_version to detect file change

2026-03-08 08:24:52 -04:00

platform_certs

integrity: Make arch_ima_get_secureboot integrity-wide

2026-03-05 11:10:08 -05:00

digsig_asymmetric.c

pkcs7, x509: Rename ->digest to ->m

2026-01-30 11:33:08 +00:00

digsig.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

efi_secureboot.c

integrity: Make arch_ima_get_secureboot integrity-wide

2026-03-05 11:10:08 -05:00

iint.c

ima,evm: move initcalls to the LSM framework

2025-10-22 19:24:27 -04:00

integrity_audit.c

integrity: check the return value of audit_log_start()

2022-02-02 11:44:23 -05:00

integrity.h

integrity: Make arch_ima_get_secureboot integrity-wide

2026-03-05 11:10:08 -05:00

Kconfig

integrity: Select CRYPTO from INTEGRITY_ASYMMETRIC_KEYS

2025-10-03 07:50:56 -04:00

Makefile

integrity: Make arch_ima_get_secureboot integrity-wide

2026-03-05 11:10:08 -05:00

secure_boot.c

integrity: Make arch_ima_get_secureboot integrity-wide

2026-03-05 11:10:08 -05:00