lkml.org 
[lkml]   [2014]   [Jul]   [11]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
Subject[PATCH v1 0/3] fixes for missing security.ima on new empty files
Date
Hi,

This patchset fixes the problem of missing security.ima on new empty files.
Detailed descriptions of problems are in the following patch descriptions.
First two patches fixes the problem. Third patch makes use of FILE_CREATED
flag from VFS, which was not available at the time IMA appraisal came to the
kernel.

- Dmitry

Dmitry Kasatkin (3):
ima: provide flag to identify new empty files
evm: skip integrity verification for newly created files
ima: pass 'opened' flag to identify newly created files

fs/namei.c | 2 +-
fs/nfsd/vfs.c | 2 +-
include/linux/ima.h | 4 ++--
security/integrity/evm/evm_main.c | 6 +++++-
security/integrity/ima/ima.h | 4 ++--
security/integrity/ima/ima_appraise.c | 9 ++++++---
security/integrity/ima/ima_main.c | 26 ++++++++++++++------------
security/integrity/integrity.h | 1 +
8 files changed, 32 insertions(+), 22 deletions(-)

--
1.9.1



\
 
 \ /
  Last update: 2014-07-11 14:41    [W:0.076 / U:0.124 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site