On Wed, Apr 12, 2017 at 08:05:34AM +0200, Oleksij Rempel wrote: > The code seems to confirm it. So i assumed that IMA don't care if > i_version is stored to disk or not. And i_version is the only way > to notify IMA about inode changes. > Since IMA documentation explecitley set i_version as reqieremt, so this > option was provided as well. Maybe IMA doesn't care, but if you set MS_I_VERSION the fs does give a guarantee. Sp NAK on this patch as-is.