On Mon, Nov 16, 2020 at 8:47 AM Mimi Zohar <zohar@xxxxxxxxxxxxx> wrote: > > This discussion seems to be going down the path of requiring an IMA > filesystem hook for reading the file, again. That solution was > rejected, not by me. What is new this time? You can't read a non-read-opened file. Not even IMA can. So don't do that then. IMA is doing something wrong. Why would you ever read a file that can't be read? Fix whatever "open" function instead of trying to work around the fact that you opened it wrong. Linus