| commit | 566be59ab86c0e030b980645a580d683a015a483 | [log] [tgz] |
|---|---|---|
| author | Mimi Zohar <zohar@linux.vnet.ibm.com> | Mon Aug 22 09:14:18 2011 -0400 |
| committer | Mimi Zohar <zohar@linux.vnet.ibm.com> | Wed Sep 14 15:24:52 2011 -0400 |
| tree | c5d29c7db2f8ef93e970cb405621f59c57d01b94 | |
| parent | bf6d0f5dcda17df3cc5577e203d0f8ea1c2ad6aa [diff] |
evm: permit mode bits to be updated Before permitting 'security.evm' to be updated, 'security.evm' must exist and be valid. In the case that there are no existing EVM protected xattrs, it is safe for posix acls to update the mode bits. To differentiate between no 'security.evm' xattr and no xattrs used to calculate 'security.evm', this patch defines INTEGRITY_NOXATTR. Signed-off-by: Mimi Zohar <zohar@us.ibm.com>