Mimi Zohar 0d2b9938c4 evm: prohibit userspace writing 'security.evm' HMAC value ...

commit 2fb1c9a4f2 upstream.

Calculating the 'security.evm' HMAC value requires access to the
EVM encrypted key.  Only the kernel should have access to it.  This
patch prevents userspace tools(eg. setfattr, cp --preserve=xattr)
from setting/modifying the 'security.evm' HMAC value directly.

Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>

2014-07-11 13:33:50 +01:00

..

apparmor

fix apparmor dereferencing potentially freed dentry, sanitize __d_path() API

2011-12-06 23:57:18 -05:00

integrity

evm: prohibit userspace writing 'security.evm' HMAC value

2014-07-11 13:33:50 +01:00

keys

key: Fix resource leak

2013-04-10 03:20:08 +01:00

selinux

selinux: correctly label /proc inodes in use before the policy is loaded

2014-04-30 16:23:27 +01:00

smack

Smack: smackfs cipso seq read repair

2011-11-11 11:07:21 -08:00

tomoyo

TOMOYO: Fix mount flags checking order.

2012-04-13 08:33:49 -07:00

capability.c

…

commoncap.c

security: fix compile error in commoncap.c

2012-04-22 15:31:13 -07:00

device_cgroup.c

Revert "device_cgroup: fix RCU usage"

2013-01-03 03:26:03 +00:00

inode.c

…

Kconfig

…

lsm_audit.c

…

Makefile

…

min_addr.c

…

security.c

security: Fix security_old_inode_init_security() when CONFIG_SECURITY is not set

2012-01-03 16:12:19 -08:00