kernel

Files

Mimi Zohar 7a3e7f1ed6 evm: don't copy up 'security.evm' xattr

[ Upstream commit 40ca4ee313 ]

The security.evm HMAC and the original file signatures contain
filesystem specific data.  As a result, the HMAC and signature
are not the same on the stacked and backing filesystems.

Don't copy up 'security.evm'.

Reviewed-by: Amir Goldstein <amir73il@gmail.com>
Reviewed-by: Christian Brauner <brauner@kernel.org>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2024-08-29 17:33:31 +02:00

evm_crypto.c

evm: Support multiple LSMs providing an xattr

2023-07-10 13:59:39 -04:00

evm_main.c

evm: don't copy up 'security.evm' xattr

2024-08-29 17:33:31 +02:00

evm_posix_acl.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441

2019-06-05 17:37:17 +02:00

evm_secfs.c

fs: port ->setattr() to pass mnt_idmap