linux

mirror of https://github.com/torvalds/linux.git synced 2026-01-25 15:03:52 +08:00

Files

Dmitry Kasatkin 523b74b16b evm: reset EVM status when file attributes change

The EVM verification status is cached in iint->evm_status and if it
was successful, never re-verified again when IMA passes the 'iint' to
evm_verifyxattr().

When file attributes or extended attributes change, we may wish to
re-verify EVM integrity as well.  For example, after setting a digital
signature we may need to re-verify the signature and update the
iint->flags that there is an EVM signature.

This patch enables that by resetting evm_status to INTEGRITY_UKNOWN
state.

Changes in v2:
* Flag setting moved to EVM layer

Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@huawei.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>

2015-12-15 09:56:57 -05:00

apparmor

apparmor: clarify CRYPTO dependency

2015-10-22 11:11:28 +11:00

integrity

evm: reset EVM status when file attributes change

2015-12-15 09:56:57 -05:00

keys

Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security

2015-11-05 15:32:38 -08:00

selinux

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net