ima: move full pathname resolution to separate function

Define a new function ima_d_path(), which returns the full pathname.
This function will be used further, for example, by the directory
verification code.

Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@intel.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>

1 files changed, 17 insertions, 0 deletions

diff --git a/security/integrity/ima/ima_api.c b/security/integrity/ima/ima_api.c
index fc722b44c416..9382a4c568b2 100644
--- a/security/integrity/ima/ima_api.c
+++ b/security/integrity/ima/ima_api.c
@@ -237,3 +237,20 @@ void ima_audit_measurement(struct integrity_iint_cache *iint,
 
         iint->flags |= IMA_AUDITED;
 }
+
+const char *ima_d_path(struct path *path, char **pathbuf)
+{
+        char *pathname = NULL;
+
+        /* We will allow 11 spaces for ' (deleted)' to be appended */
+        *pathbuf = kmalloc(PATH_MAX + 11, GFP_KERNEL);
+        if (*pathbuf) {
+                pathname = d_path(path, *pathbuf, PATH_MAX + 11);
+                if (IS_ERR(pathname)) {
+                        kfree(*pathbuf);
+                        *pathbuf = NULL;
+                        pathname = NULL;
+                }
+        }
+        return pathname;
+}