Re: [PATCH 09/11] ima: Don't remove security.ima if file must not be appraised

From: Mimi Zohar
Date: Mon Aug 24 2020 - 09:03:10 EST


On Thu, 2020-06-18 at 18:04 +0200, Roberto Sassu wrote:
> Files might come from a remote source and might have xattrs, including
> security.ima. It should not be IMA task to decide whether security.ima
> should be kept or not. This patch removes the removexattr() system
> call in ima_inode_post_setattr().
>
> Signed-off-by: Roberto Sassu <roberto.sassu@xxxxxxxxxx>

Yes, this has been previously discussed.

Reviewed-by: Mimi Zohar <zohar@xxxxxxxxxxxxx>