| commit | 9b97b6cdd420cd62dae972eafaae7494a7670607 | [log] [tgz] |
|---|---|---|
| author | Mimi Zohar <zohar@linux.vnet.ibm.com> | Thu Feb 21 09:31:22 2013 -0500 |
| committer | Mimi Zohar <zohar@linux.vnet.ibm.com> | Thu Jun 20 07:47:50 2013 -0400 |
| tree | 4f5958063eb57849e4687e4c5366b1212a1d9d6a | |
| parent | d726d8d719b6ac919cc4d5cae73831a2ffe36118 [diff] |
evm: audit integrity metadata failures Before modifying an EVM protected extended attribute or any other metadata included in the HMAC calculation, the existing 'security.evm' is verified. This patch adds calls to integrity_audit_msg() to audit integrity metadata failures. Reported-by: Sven Vermeulen <sven.vermeulen@siphos.be> Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>