Mimi Zohar 904f9c1465 ima: detect changes to the backing overlay file ... [ Upstream commit b836c4d29f ] Commit 18b44bc5a6 ("ovl: Always reevaluate the file signature for IMA") forced signature re-evaulation on every file access. Instead of always re-evaluating the file's integrity, detect a change to the backing file, by comparing the cached file metadata with the backing file's metadata. Verifying just the i_version has not changed is insufficient. In addition save and compare the i_ino and s_dev as well. Reviewed-by: Amir Goldstein <amir73il@gmail.com> Tested-by: Eric Snowberg <eric.snowberg@oracle.com> Tested-by: Raul E Rangel <rrangel@chromium.org> Cc: stable@vger.kernel.org Signed-off-by: Mimi Zohar <zohar@linux.ibm.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2023-12-08 08:43:26 +01:00
..
apparmor	apparmor: Fix abi check to include v8 abi	2023-01-18 11:30:21 +01:00
integrity	ima: detect changes to the backing overlay file	2023-12-08 08:43:26 +01:00
keys	security: keys: perform capable check only on privileged operations	2023-09-23 10:47:58 +02:00
loadpin	module: replace the existing LSM hook in init_module	2018-07-16 12:31:57 -07:00
selinux	selinux: don't use make's grouped targets feature yet	2023-06-09 10:24:03 +02:00
smack	smack: Record transmuting in smk_transmuted	2023-10-10 21:44:59 +02:00
tomoyo	tomoyo: fix broken dependency on *.conf.default	2023-02-06 07:49:37 +01:00
yama	Yama: Check for pid death before checking ancestry	2019-01-22 21:40:32 +01:00
commoncap.c	capabilities: fix potential memleak on error path from vfs_getxattr_alloc()	2022-11-10 17:46:55 +01:00
device_cgroup.c	device_cgroup: Roll back to original exceptions after copy failure	2023-01-18 11:30:44 +01:00
inode.c	securityfs: fix use-after-free on symlink traversal	2019-05-25 18:23:42 +02:00
Kconfig	fortify: Explicitly disable Clang support	2021-11-26 11:36:18 +01:00
lsm_audit.c	dump_common_audit_data(): fix racy accesses to ->d_name	2021-01-19 18:22:37 +01:00
Makefile
min_addr.c
security.c	ima: Align ima_file_mmap() parameters with mmap_file LSM hook	2023-03-11 16:31:51 +01:00