Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1754236AbaGKWWK (ORCPT ); Fri, 11 Jul 2014 18:22:10 -0400 Received: from mail-wi0-f170.google.com ([209.85.212.170]:43249 "EHLO mail-wi0-f170.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752137AbaGKWWI (ORCPT ); Fri, 11 Jul 2014 18:22:08 -0400 MIME-Version: 1.0 In-Reply-To: <20140711201054.GB18033@amd.pavel.ucw.cz> References: <53B3D3AA.3000408@samsung.com> <20140702184050.GA24583@infradead.org> <20140711201054.GB18033@amd.pavel.ucw.cz> Date: Sat, 12 Jul 2014 01:22:04 +0300 Message-ID: Subject: Re: IMA: kernel reading files opened with O_DIRECT From: Dmitry Kasatkin To: Pavel Machek Cc: Christoph Hellwig , Jeff Moyer , Dmitry Kasatkin , linux-mm@kvack.org, linux-fsdevel@vger.kernel.org, Linux Kernel Mailing List , akpm@linux-foundation.org, Al Viro , Mimi Zohar , linux-security-module , Greg KH Content-Type: text/plain; charset=UTF-8 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On 11 July 2014 23:10, Pavel Machek wrote: > On Wed 2014-07-02 11:40:50, Christoph Hellwig wrote: >> On Wed, Jul 02, 2014 at 11:55:41AM -0400, Jeff Moyer wrote: >> > It's acceptable. >> >> It's not because it will then also affect other reads going on at the >> same time. >> >> The whole concept of ima is just broken, and if you want to do these >> sort of verification they need to happen inside the filesystem and not >> above it. > > ...and doing it at filesystem layer would also permit verification of > per-block (64KB? 1MB?) hashes. Please design one single and the best universal filesystem which does it. > Reading entire iso image when I run > "file foo.iso" is anti-social.. > Pavel Please make the policy which does not make anti-social. It is all about use-case. - Dmitry > -- > (english) http://www.livejournal.com/~pavelmachek > (cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/