Re: [Linux-ima-user] Overriding executables with overlayfs

[Patrick O. <pat...@in...>]

On Tue, 2016-11-15 at 10:51 +0100, Patrick Ohly wrote:
> I don't know how well that'll work with the overlayfs.

We had problems with it. See
https://github.com/ostroproject/ostro-os/blob/master/meta-ostro-bsp/recipes-kernel/linux-yocto/linux-yocto/0001-ovl-setxattr-don-t-deadlock-when-called-from-ima_fix.patch
and (found via some searching):
http://www.spinics.net/lists/linux-unionfs/msg00629.html
https://patchwork.kernel.org/patch/9376729/

-- 
Best Regards, Patrick Ohly

The content of this message is my personal opinion only and although
I am an employee of Intel, the statements I make here in no way
represent Intel's position on the issue, nor am I authorized to speak
on behalf of Intel on this matter.