Mimi Zohar 27a0856c21 ima: relax requiring a file signature for new files with zero length ... [ Upstream commit b7e27bc1d4 ] Custom policies can require file signatures based on LSM labels. These files are normally created and only afterwards labeled, requiring them to be signed. Instead of requiring file signatures based on LSM labels, entire filesystems could require file signatures. In this case, we need the ability of writing new files without requiring file signatures. The definition of a "new" file was originally defined as any file with a length of zero. Subsequent patches redefined a "new" file to be based on the FILE_CREATE open flag. By combining the open flag with a file size of zero, this patch relaxes the file signature requirement. Fixes: 1ac202e978 ima: accept previously set IMA_NEW_FILE Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com> Signed-off-by: Sasha Levin <alexander.levin@microsoft.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2018-03-22 09:17:58 +01:00
..
apparmor	apparmor: Make path_max parameter readonly	2018-03-22 09:17:48 +01:00
integrity	ima: relax requiring a file signature for new files with zero length	2018-03-22 09:17:58 +01:00
keys	security/keys: BIG_KEY requires CONFIG_CRYPTO	2018-02-25 11:05:53 +01:00
loadpin	LSM: LoadPin: provide enablement CONFIG	2016-05-17 20:10:30 +10:00
selinux	selinux: check for address length in selinux_socket_bind()	2018-03-22 09:17:38 +01:00
smack	lsm: fix smack_inode_removexattr and xattr_getsecurity memleak	2017-10-12 11:51:19 +02:00
tomoyo	mm: replace get_user_pages_remote() write/force parameters with gup_flags	2016-10-19 08:12:02 -07:00
yama	Yama: fix double-spinlock and user access in atomic context	2016-05-26 09:56:18 +10:00
commoncap.c	xattr: Add __vfs_{get,set,remove}xattr helpers	2016-10-07 20:10:44 -04:00
device_cgroup.c	security/device_cgroup: Fix RCU_LOCKDEP_WARN() condition	2015-09-03 18:13:10 -07:00
inode.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2016-10-10 20:16:43 -07:00
Kconfig	KPTI: Rename to PAGE_TABLE_ISOLATION	2018-01-05 15:46:35 +01:00
lsm_audit.c	Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security	2016-10-04 14:48:27 -07:00
Makefile	LSM: LoadPin for kernel file loading restrictions	2016-04-21 10:47:27 +10:00
min_addr.c
security.c	security, overlayfs: Provide hook to correctly label newly created files	2016-08-08 20:46:46 -04:00