alistair23-linux/security/integrity
Mimi Zohar 7102ebcd65 evm: permit only valid security.evm xattrs to be updated
In addition to requiring CAP_SYS_ADMIN permission to modify/delete
security.evm, prohibit invalid security.evm xattrs from changing,
unless in fixmode. This patch prevents inadvertent 'fixing' of
security.evm to reflect offline modifications.

Changelog v7:
- rename boot paramater 'evm_mode' to 'evm'

Reported-by: Roberto Sassu <roberto.sassu@polito.it>
Signed-off-by: Mimi Zohar <zohar@us.ibm.com>
2011-07-18 12:29:49 -04:00
..
evm evm: permit only valid security.evm xattrs to be updated 2011-07-18 12:29:49 -04:00
ima integrity: move ima inode integrity data management 2011-07-18 12:29:38 -04:00
iint.c evm: replace hmac_status with evm_status 2011-07-18 12:29:48 -04:00
integrity.h evm: replace hmac_status with evm_status 2011-07-18 12:29:48 -04:00
Kconfig evm: re-release 2011-07-18 12:29:40 -04:00
Makefile evm: re-release 2011-07-18 12:29:40 -04:00