Eric Snowberg 20c80f8cfb ovl: Always reevaluate the file signature for IMA ... [ Upstream commit 18b44bc5a6 ] Commit db1d1e8b98 ("IMA: use vfs_getattr_nosec to get the i_version") partially closed an IMA integrity issue when directly modifying a file on the lower filesystem. If the overlay file is first opened by a user and later the lower backing file is modified by root, but the extended attribute is NOT updated, the signature validation succeeds with the old original signature. Update the super_block s_iflags to SB_I_IMA_UNVERIFIABLE_SIGNATURE to force signature reevaluation on every file access until a fine grained solution can be found. Signed-off-by: Eric Snowberg <eric.snowberg@oracle.com> Signed-off-by: Mimi Zohar <zohar@linux.ibm.com> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org>		2023-09-13 09:47:52 +02:00
..
copy_up.c	ovl: update of dentry revalidate flags after copy up	2023-07-19 16:36:07 +02:00
dir.c	ovl: update of dentry revalidate flags after copy up	2023-07-19 16:36:07 +02:00
export.c	ovl: update of dentry revalidate flags after copy up	2023-07-19 16:36:07 +02:00
file.c	fs: port inode_owner_or_capable() to mnt_idmap	2023-01-19 09:24:29 +01:00
inode.c	ovl: fix null pointer dereference in ovl_get_acl_rcu()	2023-07-19 16:37:00 +02:00
Kconfig	ovl: Kconfig: Fix spelling mistake "undelying" -> "underlying"	2022-12-08 10:49:46 +01:00
Makefile	treewide: Add SPDX license identifier - Makefile/Kconfig	2019-05-21 10:50:46 +02:00
namei.c	ovl: update of dentry revalidate flags after copy up	2023-07-19 16:36:07 +02:00
overlayfs.h	ovl: let helper ovl_i_path_real() return the realinode	2023-07-19 16:37:00 +02:00
ovl_entry.h	ovl: check type and offset of struct vfsmount in ovl_entry	2023-07-27 08:56:44 +02:00
readdir.c	fs: port ->permission() to pass mnt_idmap	2023-01-19 09:24:28 +01:00
super.c	ovl: Always reevaluate the file signature for IMA	2023-09-13 09:47:52 +02:00
util.c	ovl: let helper ovl_i_path_real() return the realinode	2023-07-19 16:37:00 +02:00