IMA: use inode->i_lock to protect read and write counters

[net-next-2.6.git] / security / integrity / ima / ima.h

diff --git a/security/integrity/ima/ima.h b/security/integrity/ima/ima.h
index f7af0110bcde3a65555d3cfd4ae4d9c901391f49..80aca3d2cb7106192752a49b554e2347acb4e047 100644 (file)
--- a/security/integrity/ima/ima.h
+++ b/security/integrity/ima/ima.h
@@ -106,6 +106,7 @@ struct ima_iint_cache {
        unsigned char flags;
        u8 digest[IMA_DIGEST_SIZE];
        struct mutex mutex;     /* protects: version, flags, digest */
+       /* protected by inode->i_lock */
        unsigned int readcount; /* measured files readcount */
        unsigned int writecount;/* measured files writecount */
        struct kref refcount;   /* ima_iint_cache reference count */