lkl_linux

mirror of https://github.com/lkl/linux.git synced 2025-12-19 08:03:01 +09:00

Files

Roberto Sassu 6db7d1dee8 evm: Align evm_inode_init_security() definition with LSM infrastructure

Change the evm_inode_init_security() definition to align with the LSM
infrastructure. Keep the existing behavior of including in the HMAC
calculation only the first xattr provided by LSMs.

Changing the evm_inode_init_security() definition requires passing the
xattr array allocated by security_inode_init_security(), and the number of
xattrs filled by previously invoked LSMs.

Use the newly introduced lsm_get_xattr_slot() to position EVM correctly in
the xattrs array, like a regular LSM, and to increment the number of filled
slots. For now, the LSM infrastructure allocates enough xattrs slots to
store the EVM xattr, without using the reservation mechanism.

Signed-off-by: Roberto Sassu <roberto.sassu@huawei.com>
Reviewed-by: Mimi Zohar <zohar@linux.ibm.com>
Acked-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>

2023-07-10 13:59:38 -04:00

evm_crypto.c

evm: Fix build warnings

2023-06-06 08:51:11 -04:00

evm_main.c

evm: Align evm_inode_init_security() definition with LSM infrastructure

2023-07-10 13:59:38 -04:00

evm_posix_acl.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441

2019-06-05 17:37:17 +02:00

evm_secfs.c

fs: port ->setattr() to pass mnt_idmap