ima_measure_loaded_policy(9)

💅 ima_measure_loaded_policy(9) 💅

okay so welcome to the Kernel API Manual, bestie — today's main character is ima_measure_loaded_policy, and honestly? she's a tiny function with a big job. 🎀

---

✨ NAME ✨

ima_measure_loaded_policy — measure the active IMA policy ruleset 🦋

---

🌸 SYNOPSIS 🌸

void ima_measure_loaded_policy (void );

like literally that's it, that's the whole signature, no cap ✨

---

🎀 ARGUMENTS 🎀

• void — no arguments. nothing. zero. she takes nothing from you and gives everything back 💅

---

💖 DESCRIPTION 💖

okay so here's the vibe check that actually matters, bestie: you must call this with ima_write_mutex held. not optional, not a suggestion 🙈

why? because she does two separate RCU read passes over ima_rules, and she's relying on that mutex to keep concurrent policy updates from sliding in between the two passes. it's giving "don't touch my stuff while i'm looking at it" energy, and honestly? valid. 🔥

so like — hold the mutex, let her cook, done. ⭐

---

🌈 SEE ALSO 🌈

Kernel file ./security/integrity/ima/ima_policy.c

• ima_match_rule_data(9)
• ima_match_rules(9)
• ima_match_policy(9)
• ima_update_policy_flags(9)
• ima_init_policy(9)
• ima_update_policy(9)
• ima_parse_add_rule(9)
• ima_delete_rules(9)

---

okay that's the whole page, you ate it up fr fr 👑 — this one comes to you straight from ./security/integrity/ima, dated October 2026, and yes she's iconic for it. bye bestie, go hold that mutex 💜🫶