1 files changed, 4 insertions, 2 deletions

diff --git a/security/integrity/ima/ima_policy.c b/security/integrity/ima/ima_policy.c
index 3f6b8a466368..a556d5b9c57f 100644
--- a/security/integrity/ima/ima_policy.c
+++ b/security/integrity/ima/ima_policy.c
@@ -167,9 +167,11 @@ static bool ima_match_rules(struct ima_rule_entry *rule,
         const struct cred *cred = current_cred();
         int i;
 
-        if ((rule->flags & IMA_FUNC) && rule->func != func)
+        if ((rule->flags & IMA_FUNC) &&
+            (rule->func != func && func != POST_SETATTR))
                 return false;
-        if ((rule->flags & IMA_MASK) && rule->mask != mask)
+        if ((rule->flags & IMA_MASK) &&
+            (rule->mask != mask && func != POST_SETATTR))
                 return false;
         if ((rule->flags & IMA_FSMAGIC)
             && rule->fsmagic != inode->i_sb->s_magic)