From: Mimi Zohar <zohar@linux.vnet.ibm.com>
Date: Thu, 12 May 2011 22:33:20 +0000 (-0400)
Subject: evm: permit only valid security.evm xattrs to be updated
X-Git-Tag: v3.2-rc1~190^2~65^2~1
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7102ebcd65c1cdb5d5a87c7c5cf7a46f5afb0cac;p=pandora-kernel.git

evm: permit only valid security.evm xattrs to be updated

In addition to requiring CAP_SYS_ADMIN permission to modify/delete
security.evm, prohibit invalid security.evm xattrs from changing,
unless in fixmode. This patch prevents inadvertent 'fixing' of
security.evm to reflect offline modifications.

Changelog v7:
- rename boot paramater 'evm_mode' to 'evm'

Reported-by: Roberto Sassu <roberto.sassu@polito.it>
Signed-off-by: Mimi Zohar <zohar@us.ibm.com>
---

Reading git-diff-tree failed