2
0
mirror of https://github.com/edk2-porting/linux-next.git synced 2024-12-26 14:14:01 +08:00
linux-next/security/integrity/evm
Mimi Zohar 7102ebcd65 evm: permit only valid security.evm xattrs to be updated
In addition to requiring CAP_SYS_ADMIN permission to modify/delete
security.evm, prohibit invalid security.evm xattrs from changing,
unless in fixmode. This patch prevents inadvertent 'fixing' of
security.evm to reflect offline modifications.

Changelog v7:
- rename boot paramater 'evm_mode' to 'evm'

Reported-by: Roberto Sassu <roberto.sassu@polito.it>
Signed-off-by: Mimi Zohar <zohar@us.ibm.com>
2011-07-18 12:29:49 -04:00
..
evm_crypto.c evm: crypto hash replaced by shash 2011-07-18 12:29:46 -04:00
evm_main.c evm: permit only valid security.evm xattrs to be updated 2011-07-18 12:29:49 -04:00
evm_secfs.c evm: re-release 2011-07-18 12:29:40 -04:00
evm.h evm: crypto hash replaced by shash 2011-07-18 12:29:46 -04:00
Kconfig evm: re-release 2011-07-18 12:29:40 -04:00
Makefile evm: re-release 2011-07-18 12:29:40 -04:00