ima_file_free(9)

🧚 ima_file_free(9) 🧚

okay so bestie, you’re looking at the Kernel API Manual page for ima_file_free(9), and it’s lowkey iconic ✨ the whole thing is called on __fput() — yes, that exact hook — and I’m gonna walk you through every tiny detail with zero skipped bits, periodt 💅

🌸 NAME 🌸

• ima_file_free — called on __fput() 🫶

✨ SYNOPSIS ✨

the signature is short, sweet, and very “main character energy”:

void ima_file_free (struct file *file );

🎀 ARGUMENTS 🎀

• file — pointer to file structure being freed 🦋

💖 DESCRIPTION 💖

flag files that changed, based on i_version ⭐

that’s the vibe: the function flags files that changed, and i_version is the thing it’s based on. no cap, that’s the whole description 🫶

🌈 SEE ALSO 🌈

bestie, the source is the Kernel file ./security/integrity/ima/ima_main.c 🗂️ and here are all the related pages — every single one, in order:

• ima_file_mmap(9)
• ima_file_mprotect(9)
• ima_bprm_check(9)
• ima_creds_check(9)
• ima_bprm_creds_for_exec(9)
• ima_file_check(9)
• ima_file_hash(9)
• ima_inode_hash(9)
• ima_post_create_tmpfile(9)
• ima_post_path_mknod(9)
• ima_read_file(9)
• ima_post_read_file(9)
• ima_load_data(9)
• ima_post_load_data(9)
• process_buffer_measurement(9)
• ima_kexec_cmdline(9)
• ima_measure_critical_data(9)
• ima_measure_raw_policy(9)
• ima_kernel_module_request(9)

mwah 💋 this page signs off from ./security/integrity/ima — source/version vibes — dated October 2026, with ima_file_free(9) in the footer spot. bye bestie, go read those SEE ALSOs! 🎀