diff options
| author | Mimi Zohar <zohar@linux.vnet.ibm.com> | 2011-03-09 14:38:26 -0500 |
|---|---|---|
| committer | Mimi Zohar <zohar@linux.vnet.ibm.com> | 2011-07-18 12:29:42 -0400 |
| commit | 3e1be52d6c6b21d9080dd886c0e609e009831562 (patch) | |
| tree | 2947250698b89eed0149af2d69a33b303c4d6be4 /fs/xattr.c | |
| parent | 6be5cc5246f807fd8ede9f5f1bb2826f2c598658 (diff) | |
| download | lwn-3e1be52d6c6b21d9080dd886c0e609e009831562.tar.gz lwn-3e1be52d6c6b21d9080dd886c0e609e009831562.zip | |
security: imbed evm calls in security hooks
Imbed the evm calls evm_inode_setxattr(), evm_inode_post_setxattr(),
evm_inode_removexattr() in the security hooks. evm_inode_setxattr()
protects security.evm xattr. evm_inode_post_setxattr() and
evm_inode_removexattr() updates the hmac associated with an inode.
(Assumes an LSM module protects the setting/removing of xattr.)
Changelog:
- Don't define evm_verifyxattr(), unless CONFIG_INTEGRITY is enabled.
- xattr_name is a 'const', value is 'void *'
Signed-off-by: Mimi Zohar <zohar@us.ibm.com>
Acked-by: Serge Hallyn <serge.hallyn@ubuntu.com>
Diffstat (limited to 'fs/xattr.c')
0 files changed, 0 insertions, 0 deletions