2023-10-13 13:51:40

by Mimi Zohar

[permalink] [raw]
Subject: Re: [PATCH v3 15/25] security: Introduce file_pre_free_security hook

On Mon, 2023-09-04 at 15:34 +0200, Roberto Sassu wrote:
[..]

> It is useful for IMA to calculate the digest of the file content, just
> before a file descriptor is closed, and update the security.ima xattr with
> the new value.

--> before the last file descriptor opened for write is closed

--
thanks,

Mimi