linux

mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2025-01-17 02:15:57 +00:00

History

Jeff Layton db1d1e8b98 IMA: use vfs_getattr_nosec to get the i_version

IMA currently accesses the i_version out of the inode directly when it
does a measurement. This is fine for most simple filesystems, but can be
problematic with more complex setups (e.g. overlayfs).

Make IMA instead call vfs_getattr_nosec to get this info. This allows
the filesystem to determine whether and how to report the i_version, and
should allow IMA to work properly with a broader class of filesystems in
the future.

Reported-and-Tested-by: Stefan Berger <stefanb@linux.ibm.com>
Reviewed-by: Christian Brauner <brauner@kernel.org>
Signed-off-by: Jeff Layton <jlayton@kernel.org>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>

2023-05-23 18:07:34 -04:00

evm

integrity-v6.3

2023-02-22 12:36:25 -08:00

ima

IMA: use vfs_getattr_nosec to get the i_version

2023-05-23 18:07:34 -04:00

platform_certs

integrity/powerpc: Support loading keys from PLPKS

2023-02-13 22:34:44 +11:00

digsig_asymmetric.c

ima: fix reference leak in asymmetric_verify()