kernel/linux
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ synced 2026-10-24 19:10:26 +00:00
Code Issues Releases Packages Activity
linux/security/integrity/evm
History
Mimi Zohar 73b49c736f evm: prohibit userspace writing 'security.evm' HMAC value 
commit 2fb1c9a4f2 upstream.

Calculating the 'security.evm' HMAC value requires access to the
EVM encrypted key.  Only the kernel should have access to it.  This
patch prevents userspace tools(eg. setfattr, cp --preserve=xattr)
from setting/modifying the 'security.evm' HMAC value directly.

Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
History 2014-06-26 15:15:38 -04:00
..
evm.h evm: add file system uuid to EVM hmac 2013-02-06 10:40:28 -05:00
evm_crypto.c Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security 2013-02-21 08:18:12 -08:00
evm_main.c evm: prohibit userspace writing 'security.evm' HMAC value 2014-06-26 15:15:38 -04:00
evm_posix_acl.c ima: fix script messages 2013-10-25 13:17:19 -04:00
evm_secfs.c evm: remove unused cleanup functions 2013-01-16 15:47:05 -05:00
Kconfig evm: add file system uuid to EVM hmac 2013-02-06 10:40:28 -05:00
Makefile evm: posix acls modify i_mode 2011-09-14 15:24:51 -04:00