tree 545dfefd2c92a70ece125a4a0625190e97972cdf
parent d3600bcf9d64d88dc1d189a754dcfab960ce751f
author Mimi Zohar <zohar@linux.vnet.ibm.com> 1447164038 -0500
committer Mimi Zohar <zohar@linux.vnet.ibm.com> 1450191703 -0500

IMA: prevent keys on the .ima_blacklist from being removed

Set the KEY_FLAGS_KEEP on the .ima_blacklist to prevent userspace
from removing keys from the keyring.

Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>