lst/linux -

	Commit message (Collapse)	Author	Age	Files	Lines
*	Remove spurious _H suffixes from ifdef comments	Paul Bolle	2013-03-27	1	-1/+1
\| \| \| \| \|	Signed-off-by: Paul Bolle <pebolle@tiscali.nl> Signed-off-by: Jiri Kosina <jkosina@suse.cz>
*	evm: posix acls modify i_mode	Mimi Zohar	2011-09-14	1	-0/+8
\| \| \| \| \| \| \| \| \| \|	The posix xattr acls are 'system' prefixed, which normally would not affect security.evm. An interesting side affect of writing posix xattr acls is their modifying of the i_mode, which is included in security.evm. This patch updates security.evm when posix xattr acls are written. Signed-off-by: Mimi Zohar <zohar@us.ibm.com>
*	evm: fix evm_inode_init_security return code	Mimi Zohar	2011-08-11	1	-1/+1
\| \| \| \| \| \| \| \|	evm_inode_init_security() should return 0, when EVM is not enabled. (Returning an error is a remnant of evm_inode_post_init_security.) Signed-off-by: Mimi Zohar <zohar@us.ibm.com> Signed-off-by: James Morris <jmorris@namei.org>
*	evm: building without EVM enabled fixes	Mimi Zohar	2011-08-11	1	-1/+1
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	- Missing 'inline' on evm_inode_setattr() definition. Introduced by commit 817b54aa45db ("evm: add evm_inode_setattr to prevent updating an invalid security.evm"). - Missing security_old_inode_init_security() stub function definition. Caused by commit 9d8f13ba3f48 ("security: new security_inode_init_security API adds function callback"). Reported-by: Stephen Rothwell <sfr@canb.auug.org.au> Signed-off-by: Mimi Zohar <zohar@us.ibm.com> Signed-off-by: James Morris <jmorris@namei.org>
*	evm: add evm_inode_setattr to prevent updating an invalid security.evm	Mimi Zohar	2011-07-18	1	-0/+6
\| \| \| \| \| \| \|	Permit changing of security.evm only when valid, unless in fixmode. Reported-by: Roberto Sassu <roberto.sassu@polito.it> Signed-off-by: Mimi Zohar <zohar@us.ibm.com>
*	evm: additional parameter to pass integrity cache entry 'iint'	Dmitry Kasatkin	2011-07-18	1	-2/+6
\| \| \| \| \| \| \|	Additional iint parameter allows to skip lookup in the cache. Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@nokia.com> Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
*	evm: add evm_inode_init_security to initialize new files	Mimi Zohar	2011-07-18	1	-0/+11
\| \| \| \| \| \| \| \| \| \| \| \| \|	Initialize 'security.evm' for new files. Changelog v7: - renamed evm_inode_post_init_security to evm_inode_init_security - moved struct xattr definition to earlier patch - allocate xattr name Changelog v6: - Use 'struct evm_ima_xattr_data' Signed-off-by: Mimi Zohar <zohar@us.ibm.com>
*	evm: imbed evm_inode_post_setattr	Mimi Zohar	2011-07-18	1	-0/+6
\| \| \| \| \| \| \| \|	Changing the inode's metadata may require the 'security.evm' extended attribute to be re-calculated and updated. Signed-off-by: Mimi Zohar <zohar@us.ibm.com> Acked-by: Serge Hallyn <serge.hallyn@ubuntu.com>
*	evm: evm_inode_post_removexattr	Mimi Zohar	2011-07-18	1	-0/+9
\| \| \| \| \| \| \|	When an EVM protected extended attribute is removed, update 'security.evm'. Signed-off-by: Mimi Zohar <zohar@us.ibm.com> Acked-by: Serge Hallyn <serge.hallyn@ubuntu.com>
*	security: imbed evm calls in security hooks	Mimi Zohar	2011-07-18	1	-0/+56
	Imbed the evm calls evm_inode_setxattr(), evm_inode_post_setxattr(), evm_inode_removexattr() in the security hooks. evm_inode_setxattr() protects security.evm xattr. evm_inode_post_setxattr() and evm_inode_removexattr() updates the hmac associated with an inode. (Assumes an LSM module protects the setting/removing of xattr.) Changelog: - Don't define evm_verifyxattr(), unless CONFIG_INTEGRITY is enabled. - xattr_name is a 'const', value is 'void *' Signed-off-by: Mimi Zohar <zohar@us.ibm.com> Acked-by: Serge Hallyn <serge.hallyn@ubuntu.com>