Matthew Garrett ae1ba1676b EVM: Allow userland to permit modification of EVM-protected metadata ... When EVM is enabled it forbids modification of metadata protected by EVM unless there is already a valid EVM signature. If any modification is made, the kernel will then generate a new EVM HMAC. However, this does not map well on use cases which use only asymmetric EVM signatures, as in this scenario the kernel is unable to generate new signatures. This patch extends the /sys/kernel/security/evm interface to allow userland to request that modification of these xattrs be permitted. This is only permitted if no keys have already been loaded. In this configuration, modifying the metadata will invalidate the EVM appraisal on the file in question. This allows packaging systems to write out new files, set the relevant extended attributes and then move them into place. There's also some refactoring of the use of evm_initialized in order to avoid heading down codepaths that assume there's a key available. Signed-off-by: Matthew Garrett <mjg59@google.com> Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>		2017-12-11 14:27:31 -05:00
..
evm	EVM: Allow userland to permit modification of EVM-protected metadata	2017-12-11 14:27:31 -05:00
ima	ima: relax requiring a file signature for new files with zero length	2017-12-11 14:26:26 -05:00
digsig_asymmetric.c	integrity: Small code improvements	2017-06-21 14:37:12 -04:00
digsig.c	integrity: use kernel_read_file_from_path() to read x509 certs	2017-11-08 15:16:36 -05:00
iint.c	integrity: use kernel_read_file_from_path() to read x509 certs	2017-11-08 15:16:36 -05:00
integrity_audit.c	Merge git://git.infradead.org/users/eparis/audit	2014-04-12 12:38:53 -07:00
integrity.h	integrity: use kernel_read_file_from_path() to read x509 certs	2017-11-08 15:16:36 -05:00
Kconfig	security: integrity: Remove select to deleted option PUBLIC_KEY_ALGO_RSA	2016-04-12 19:54:58 +01:00
Makefile	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00