linux

mirror of https://github.com/hardkernel/linux.git synced 2026-04-07 05:33:20 +09:00

Files

Dmitry Kasatkin 4e9c74a333 ima: provide flag to identify new empty files

commit b151d6b00b upstream.

On ima_file_free(), newly created empty files are not labeled with
an initial security.ima value, because the iversion did not change.
Commit dff6efc "fs: fix iversion handling" introduced a change in
iversion behavior.  To verify this change use the shell command:

  $ (exec >foo)
  $ getfattr -h -e hex -d -m security foo

This patch defines the IMA_NEW_FILE flag.  The flag is initially
set, when IMA detects that a new file is created, and subsequently
checked on the ima_file_free() hook to set the initial security.ima
value.

Signed-off-by: Dmitry Kasatkin <d.kasatkin@samsung.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2014-10-30 09:38:24 -07:00

apparmor

Merge branch 'for-linus2' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security

2013-11-21 19:46:00 -08:00

integrity

ima: provide flag to identify new empty files

2014-10-30 09:38:24 -07:00

keys

KEYS: Make the keyring cycle detector ignore other keyrings of the same name

2014-03-09 18:57:18 -07:00

selinux

selinux: correctly label /proc inodes in use before the policy is loaded