Do not call 'ima_path_check()' for each path component
authorLinus Torvalds <torvalds@linux-foundation.org>
Fri, 28 Aug 2009 17:05:33 +0000 (10:05 -0700)
committerLinus Torvalds <torvalds@linux-foundation.org>
Tue, 8 Sep 2009 18:07:17 +0000 (11:07 -0700)
commite8e66ed25b5cbeebed69c475f6c108e52078a3b3
tree1827efb3f775eb27238ccaf174cac9228f83cebf
parent7c8460db30dfd085ef3837c8fb02ecf2e718b983
Do not call 'ima_path_check()' for each path component

Not only is that a supremely timing-critical path, but it's hopefully
some day going to be lockless for the common case, and ima can't do
that.

Plus the integrity code doesn't even care about non-regular files, so it
was always a total waste of time and effort.

Acked-by: Serge Hallyn <serue@us.ibm.com>
Acked-by: Mimi Zohar <zohar@us.ibm.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
fs/namei.c