Re: [Linux-ima-user] [RFC][PATCH][2/2] ima: policy matching decision depends on the overall "ima_measure" list

[Eric P. <ep...@pa...>]

On Wed, Apr 14, 2010 at 5:52 AM, Roberto Sassu <rob...@po...> wrote:
> The "ima_policy_match" function has been modified to handle situations in a
> different manner: when two or more policies match criteria given, the MEASURE
> decision is taken if there are no rule with action DONT_MEASURE.
>
> Signed-off-by: Roberto Sassu <rob...@po...>
> Acked-by: Gianluca Ramunno <ra...@po...>

Wouldn't it be better to just fix the rule ordering?  If you want the
DONT_MEASURE rule to win put it first?

-Eric