IMA is invoked during a file open, memory mapping operation or execution. However, a process would be also able to obtain data from an already opened file descriptor without any of the already implemented hooks, through file passing.
The cases that must be handled are:
If we find more hooks, they will be added to the list above.
This issue tracks the progress on implementing those hooks and ensuring that IMA is consulted every time a process obtains an existing file descriptor.
IMA is invoked during a file open, memory mapping operation or execution. However, a process would be also able to obtain data from an already opened file descriptor without any of the already implemented hooks, through file passing.
The cases that must be handled are:
If we find more hooks, they will be added to the list above.
This issue tracks the progress on implementing those hooks and ensuring that IMA is consulted every time a process obtains an existing file descriptor.