tree 1de4ac95b25e6bebab103e4377047c8f76038dac
parent 24e0198efe0df50034ec1c14b2d7b5bb0f66d54a
author Mimi Zohar <zohar@linux.vnet.ibm.com> 1305239600 -0400
committer Mimi Zohar <zohar@linux.vnet.ibm.com> 1311006589 -0400

evm: permit only valid security.evm xattrs to be updated

In addition to requiring CAP_SYS_ADMIN permission to modify/delete
security.evm, prohibit invalid security.evm xattrs from changing,
unless in fixmode. This patch prevents inadvertent 'fixing' of
security.evm to reflect offline modifications.

Changelog v7:
- rename boot paramater 'evm_mode' to 'evm'

Reported-by: Roberto Sassu <roberto.sassu@polito.it>
Signed-off-by: Mimi Zohar <zohar@us.ibm.com>