linux-stable

mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2025-01-10 07:00:48 +00:00

History

Mimi Zohar 2fb1c9a4f2 evm: prohibit userspace writing 'security.evm' HMAC value

Calculating the 'security.evm' HMAC value requires access to the
EVM encrypted key.  Only the kernel should have access to it.  This
patch prevents userspace tools(eg. setfattr, cp --preserve=xattr)
from setting/modifying the 'security.evm' HMAC value directly.

Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Cc: <stable@vger.kernel.org>

2014-06-12 17:58:07 -04:00

evm

evm: prohibit userspace writing 'security.evm' HMAC value

2014-06-12 17:58:07 -04:00

ima

ima: check inode integrity cache in violation check

2014-06-12 17:58:07 -04:00

digsig_asymmetric.c

ima: read and use signature hash algorithm

2013-10-25 17:16:59 -04:00

digsig.c

Revert "ima: define '_ima' as a builtin 'trusted' keyring"