Re: [PATCH v3 2/3] ima: Return int in the functions to measure a buffer

From: Mimi Zohar
Date: Tue Jul 20 2021 - 09:02:34 EST


On Tue, 2021-07-20 at 12:38 +0000, Roberto Sassu wrote:
> > > This patch modifies the return type from void to int, and returns 0 if the
> > > buffer has been successfully measured, a negative value otherwise.
> >
> > Needed here is an explanation as to why ima_measure_critical_data() is
> > special.
>
> We don't want to unnecessarily calculate the digest twice.

That's what the "iint" cache is for. . This needs more a of an
explaintion as to why ima_measure_critical_data() is special.

thanks,

Mimi