Skip to content

Commit 78bb5d0

Browse files
Dmitry KasatkinMimi Zohar
authored andcommitted
ima: report policy load status
Audit messages are rate limited, often causing the policy update info to not be visible. Report policy loading status also using pr_info. Changes in v2: * reporting moved to ima_release_policy to notice parsing errors * reporting both completed and failed status Signed-off-by: Dmitry Kasatkin <[email protected]> Signed-off-by: Mimi Zohar <[email protected]>
1 parent 456f5fd commit 78bb5d0

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

security/integrity/ima/ima_fs.c

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -311,6 +311,8 @@ static int ima_open_policy(struct inode *inode, struct file *filp)
311311
*/
312312
static int ima_release_policy(struct inode *inode, struct file *file)
313313
{
314+
pr_info("IMA: policy update %s\n",
315+
valid_policy ? "completed" : "failed");
314316
if (!valid_policy) {
315317
ima_delete_rules();
316318
valid_policy = 1;

0 commit comments

Comments
 (0)