lkml.org 
[lkml]   [2023]   [Dec]   [19]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    SubjectRe: [PATCH v2 2/3] evm: add support to disable EVM on unsupported filesystems
    From
    Date
    On Tue, 2023-12-19 at 12:52 -0500, Mimi Zohar wrote:

    > diff --git a/include/linux/fs.h b/include/linux/fs.h
    > index 98b7a7a8c42e..db9350a734ef 100644
    > --- a/include/linux/fs.h
    > +++ b/include/linux/fs.h
    > @@ -1164,6 +1164,7 @@ extern int send_sigurg(struct fown_struct *fown);
    > #define SB_I_USERNS_VISIBLE 0x00000010 /* fstype already mounted */
    > #define SB_I_IMA_UNVERIFIABLE_SIGNATURE 0x00000020
    > #define SB_I_UNTRUSTED_MOUNTER 0x00000040
    > +#define SB_I_EVM_UNSUPPORTED 0x00000050

    This needs to be fixed.

    Mimi

    >
    > #define SB_I_SKIP_SYNC 0x00000100 /* Skip superblock at global sync */
    > #define SB_I_PERSB_BDI 0x00000200 /* has a per-sb bdi */
    > diff --git a/security/integrity/evm/evm_main.c b/security/integrity/evm/evm_main.c


    \
     
     \ /
      Last update: 2023-12-19 20:10    [W:3.617 / U:0.052 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site