commit 6035a27b25ab9dadc8c3d5c5df5eae3fca62fc95
author Al Viro <viro@zeniv.linux.org.uk> Fri Jun 08 13:40:10 2018 -0400
committer Al Viro <viro@zeniv.linux.org.uk> Thu Jul 12 10:04:19 2018 -0400
tree 46b9eb3f1e96efa127e756484a72e508575874b8
parent 73a09dd94377e4b186b300bd5461920710c7c3d5

IMA: don't propagate opened through the entire thing

just check ->f_mode in ima_appraise_measurement()

Acked-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>

fs/nfsd/vfs.c

diff --git a/fs/nfsd/vfs.c b/fs/nfsd/vfs.c
index b0555d7..55a099e 100644
--- a/fs/nfsd/vfs.c
+++ b/fs/nfsd/vfs.c
@@ -763,7 +763,7 @@ nfsd_open(struct svc_rqst *rqstp, struct svc_fh *fhp, umode_t type,
 		goto out_nfserr;
 	}
 
-	host_err = ima_file_check(file, may_flags, 0);
+	host_err = ima_file_check(file, may_flags);
 	if (host_err) {
 		fput(file);
 		goto out_nfserr;