[Lustre-discuss] Lustre 1.8.5 on Fedora 12 and kernel 2.6.32.19

[Charland, Denis]

After searching on the WEB, I found that this messages is related to a problem with IMA file free imbalance.

Here's what I found:

Gitweb:     http://git.kernel.org/linus/1df9f0a73178718969ae47d813b8e7aab2cf073c
Commit:     1df9f0a73178718969ae47d813b8e7aab2cf073c
Parent:     f4bd857bc8ed997c25ec06b56ef8064aafa6d4f3
Author:     Mimi Zohar <zohar at linux.vnet.ibm.com>
AuthorDate: Wed Feb 4 09:07:02 2009 -0500
Committer:  James Morris <jmorris at namei.org>
CommitDate: Fri Feb 6 09:05:33 2009 +1100

    Integrity: IMA file free imbalance

    The number of calls to ima_path_check()/ima_file_free()
    should be balanced.  An extra call to fput(), indicates
    the file could have been accessed without first being
    measured.

    Although f_count is incremented/decremented in places other
    than fget/fput, like fget_light/fput_light and get_file, the
    current task must already hold a file refcnt.  The call to
    __fput() is delayed until the refcnt becomes 0, resulting
    in ima_file_free() flagging any changes.

    - add hook to increment opencount for IPC shared memory(SYSV),
      shmat files, and /dev/zero
    - moved NULL iint test in opencount_get()

    Signed-off-by: Mimi Zohar <zohar at us.ibm.com>
    Acked-by: Serge Hallyn <serue at us.ibm.com>
    Signed-off-by: James Morris jmorris at namei.org<mailto:jmorris at namei.org>


IMA is enabled by default in the kernel in Fedora12. It can be disabled by removing all lines
beginning with CONFIG_IMA in the kernel configuration file. Is it OK to disable IMA?

Note that IMA is disabled in the kernel configuration file for SLES11 kernel 2.6.32 supplied
with Lustre 1.8.5.


Denis Charland
UNIX Systems Administrator
National Research Council Canada
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.lustre.org/pipermail/lustre-discuss-lustre.org/attachments/20111026/1b27e587/attachment.htm>