I have a question about IMA.
IMA tracks file-open and open for read/write individually based upon
MAY_READ/WRITE or FMODE_READ/WRITE.
But FMODE_WRITE may be dropped by mark_files_ro() which is called by
emergency_remount().
In this case, 'readcount' and 'writecount' in IMA will be incorrect. And
IMA will produce wrong messages.
It may not be necessary to support such case (because it is
"emergency"), so I don't say it is a big problem. But I'd like to ask
whether it is an intended behaviour or not.
Thanks in advance
J. R. Okajima