mirrors
/
linux-stable
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
1
0
Fork 0
Code Issues Releases Wiki Activity
linux-stable/security/integrity/ima
History
Dmitry Kasatkin 09b1148ef5 ima: fix erroneous removal of security.ima xattr 
ima_inode_post_setattr() calls ima_must_appraise() to check if the
file needs to be appraised. If it does not then it removes security.ima
xattr. With original policy matching code it might happen that even
file needs to be appraised with FILE_CHECK hook, it might not be
for POST_SETATTR hook. 'security.ima' might be erronously removed.

This patch treats POST_SETATTR as special wildcard function and will
cause ima_must_appraise() to be true if any of the hooks rules matches.
security.ima will not be removed if any of the hooks would require
appraisal.

Signed-off-by: Dmitry Kasatkin <d.kasatkin@samsung.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
 		2014-03-07 12:15:44 -05:00
..
Kconfig Revert "ima: define '_ima' as a builtin 'trusted' keyring" 2013-11-23 16:36:35 -08:00
Makefile ima: define template fields library and new helpers 2013-10-25 17:17:05 -04:00
ima.h ima: restore the original behavior for sending data with ima template 2014-03-07 11:32:29 -05:00
ima_api.c ima: use static const char array definitions 2014-03-07 11:30:36 -05:00
ima_appraise.c ima: use static const char array definitions 2014-03-07 11:30:36 -05:00
ima_crypto.c security: integrity: Use a more current logging style 2014-03-07 12:15:21 -05:00
ima_fs.c ima: restore the original behavior for sending data with ima template 2014-03-07 11:32:29 -05:00
ima_init.c security: integrity: Use a more current logging style 2014-03-07 12:15:21 -05:00
ima_main.c ima: extend the measurement list to include the file signature 2013-10-31 20:19:35 -04:00
ima_policy.c ima: fix erroneous removal of security.ima xattr 2014-03-07 12:15:44 -05:00
ima_queue.c security: integrity: Use a more current logging style 2014-03-07 12:15:21 -05:00
ima_template.c security: integrity: Use a more current logging style 2014-03-07 12:15:21 -05:00
ima_template_lib.c ima: reduce memory usage when a template containing the n field is used 2014-03-07 11:32:30 -05:00
ima_template_lib.h ima: extend the measurement list to include the file signature 2013-10-31 20:19:35 -04:00