On Mon, 2023-09-04 at 15:34 +0200, Roberto Sassu wrote: [..] > It is useful for IMA to calculate the digest of the file content, just > before a file descriptor is closed, and update the security.ima xattr with > the new value. --> before the last file descriptor opened for write is closed -- thanks, Mimi
