Seth Forshee b4bfec7f4a security/integrity: Harden against malformed xattrs ...

In general the handling of IMA/EVM xattrs is good, but I found
a few locations where either the xattr size or the value of the
type field in the xattr are not checked. Add a few simple checks
to these locations to prevent malformed or malicious xattrs from
causing problems.

Signed-off-by: Seth Forshee <seth.forshee@canonical.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>

2016-11-13 22:50:11 -05:00

..

evm_crypto.c

xattr: Add __vfs_{get,set,remove}xattr helpers

2016-10-07 20:10:44 -04:00

evm_main.c

security/integrity: Harden against malformed xattrs

2016-11-13 22:50:11 -05:00

evm_posix_acl.c

ima: fix script messages

2013-10-25 13:17:19 -04:00

evm_secfs.c

evm: provide a function to set the EVM key from the kernel

2015-12-15 08:53:36 -05:00

evm.h

evm: enable EVM when X509 certificate is loaded

2015-12-15 08:50:48 -05:00

Kconfig

evm: EVM_LOAD_X509 depends on EVM

2015-12-15 09:57:21 -05:00

Makefile

evm: posix acls modify i_mode

2011-09-14 15:24:51 -04:00