git.openpandora.org / pandora-kernel.git / commitdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw | patch | inline | side by side (parent: 0e04c64)
ima: prevent new digsig xattr from being replaced
authorMimi Zohar <zohar@linux.vnet.ibm.com>
Tue, 18 Mar 2014 03:24:18 +0000 (23:24 -0400)
committerMimi Zohar <zohar@linux.vnet.ibm.com>
Thu, 12 Jun 2014 21:58:05 +0000 (17:58 -0400)
Even though a new xattr will only be appraised on the next access,
set the DIGSIG flag to prevent a signature from being replaced with
a hash on file close.

Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
security/integrity/ima/ima_appraise.c patch | blob | history

diff --cc security/integrity/ima/ima_appraise.c
Simple merge
Pandora Kernel Repository