On Thu, 22 Aug 2019 21:24:45 +0200, Scott Branden wrote: > > Add kernel_pread_file* support to kernel to allow for partial read > of files with an offset into the file. Existing kernel_read_file > functions call new kernel_pread_file functions with offset=0 and > flags=KERNEL_PREAD_FLAG_WHOLE. Would this change passes the security check like ima? I thought security_kernel_post_read_file() checks the whole content for calculating the hash... thanks, Takashi
