Mimi Zohar 2fb1c9a4f2 evm: prohibit userspace writing 'security.evm' HMAC value ... Calculating the 'security.evm' HMAC value requires access to the EVM encrypted key. Only the kernel should have access to it. This patch prevents userspace tools(eg. setfattr, cp --preserve=xattr) from setting/modifying the 'security.evm' HMAC value directly. Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com> Cc: <stable@vger.kernel.org>		2014-06-12 17:58:07 -04:00
..
evm_crypto.c	evm: replace HMAC version with attribute mask	2014-06-12 17:58:06 -04:00
evm_main.c	evm: prohibit userspace writing 'security.evm' HMAC value	2014-06-12 17:58:07 -04:00
evm_posix_acl.c	ima: fix script messages	2013-10-25 13:17:19 -04:00
evm_secfs.c	security: integrity: Use a more current logging style	2014-03-07 12:15:21 -05:00
evm.h	evm: replace HMAC version with attribute mask	2014-06-12 17:58:06 -04:00
Kconfig	evm: provide option to protect additional SMACK xattrs	2014-06-12 17:58:06 -04:00
Makefile	evm: posix acls modify i_mode	2011-09-14 15:24:51 -04:00