On Wed, 2021-12-15 at 21:38 -0500, Stefan Berger wrote: > On 12/15/21 16:15, Mimi Zohar wrote: > > On Fri, 2021-12-10 at 14:47 -0500, Stefan Berger wrote: > >> From: Mehmet Kayaalp <mkayaalp@xxxxxxxxxxxxxxxxxx> > >> > >> The iint cache stores whether the file is measured, appraised, audited > >> etc. This patch moves the IMA_AUDITED flag into the per-namespace > >> ns_status, enabling IMA audit mechanism to audit the same file each time > >> it is accessed in a new namespace. > >> > >> The ns_status is not looked up if the CONFIG_IMA_NS is disabled or if > >> any of the IMA_NS_STATUS_ACTIONS (currently only IMA_AUDIT) is not > >> enabled. > > ^none of the ... are enabled. > > You want me to rephrase it? Yes, please. thanks, Mimi
