diff options
| author | Dmitry Kasatkin <dmitry.kasatkin@huawei.com> | 2015-10-22 21:26:42 +0300 |
|---|---|---|
| committer | Mimi Zohar <zohar@linux.vnet.ibm.com> | 2015-12-15 09:56:57 -0500 |
| commit | 523b74b16bcbba34c662da5df7fa111ae4c1d0e6 (patch) | |
| tree | 922656dc4cb434235b5a7cacf91b0e26b9ecee81 /security/smack | |
| parent | 7626676320f398980a6bb4490fd58e924c888f6a (diff) | |
| download | op-kernel-dev-523b74b16bcbba34c662da5df7fa111ae4c1d0e6.zip op-kernel-dev-523b74b16bcbba34c662da5df7fa111ae4c1d0e6.tar.gz | |
evm: reset EVM status when file attributes change
The EVM verification status is cached in iint->evm_status and if it
was successful, never re-verified again when IMA passes the 'iint' to
evm_verifyxattr().
When file attributes or extended attributes change, we may wish to
re-verify EVM integrity as well. For example, after setting a digital
signature we may need to re-verify the signature and update the
iint->flags that there is an EVM signature.
This patch enables that by resetting evm_status to INTEGRITY_UKNOWN
state.
Changes in v2:
* Flag setting moved to EVM layer
Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@huawei.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Diffstat (limited to 'security/smack')
0 files changed, 0 insertions, 0 deletions
