diff options
| author | Mimi Zohar <zohar@linux.vnet.ibm.com> | 2013-02-21 09:31:22 -0500 |
|---|---|---|
| committer | Mimi Zohar <zohar@linux.vnet.ibm.com> | 2013-06-20 07:47:50 -0400 |
| commit | 9b97b6cdd420cd62dae972eafaae7494a7670607 (patch) | |
| tree | 4f5958063eb57849e4687e4c5366b1212a1d9d6a /security/device_cgroup.c | |
| parent | d726d8d719b6ac919cc4d5cae73831a2ffe36118 (diff) | |
| download | op-kernel-dev-9b97b6cdd420cd62dae972eafaae7494a7670607.zip op-kernel-dev-9b97b6cdd420cd62dae972eafaae7494a7670607.tar.gz | |
evm: audit integrity metadata failures
Before modifying an EVM protected extended attribute or any other
metadata included in the HMAC calculation, the existing 'security.evm'
is verified. This patch adds calls to integrity_audit_msg() to audit
integrity metadata failures.
Reported-by: Sven Vermeulen <sven.vermeulen@siphos.be>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Diffstat (limited to 'security/device_cgroup.c')
0 files changed, 0 insertions, 0 deletions
