diff options
| author | Frederick Lawler <[email protected]> | 2025-03-27 16:09:11 +0000 |
|---|---|---|
| committer | Roberto Sassu <[email protected]> | 2025-04-22 14:39:32 +0000 |
| commit | 30d68cb0c37ebe2dc63aa1d46a28b9163e61caa2 (patch) | |
| tree | 2d530ebf3a0d053e068146932c307007fa25f188 /fs/btrfs/tree-checker.c | |
| parent | Linux 6.15-rc3 (diff) | |
| download | kernel-30d68cb0c37ebe2dc63aa1d46a28b9163e61caa2.tar.gz kernel-30d68cb0c37ebe2dc63aa1d46a28b9163e61caa2.zip | |
ima: process_measurement() needlessly takes inode_lock() on MAY_READ
On IMA policy update, if a measure rule exists in the policy,
IMA_MEASURE is set for ima_policy_flags which makes the violation_check
variable always true. Coupled with a no-action on MAY_READ for a
FILE_CHECK call, we're always taking the inode_lock().
This becomes a performance problem for extremely heavy read-only workloads.
Therefore, prevent this only in the case there's no action to be taken.
Signed-off-by: Frederick Lawler <[email protected]>
Acked-by: Roberto Sassu <[email protected]>
Signed-off-by: Mimi Zohar <[email protected]>
Diffstat (limited to 'fs/btrfs/tree-checker.c')
0 files changed, 0 insertions, 0 deletions