diff options
| author | Mimi Zohar <zohar@linux.vnet.ibm.com> | 2011-03-10 04:57:53 +0100 |
|---|---|---|
| committer | Mimi Zohar <zohar@linux.vnet.ibm.com> | 2012-09-07 20:57:46 +0200 |
| commit | 9957a5043e7b0b7361cdf48eea22b2900293e63a (patch) | |
| tree | 41930ca31f67b77fd814a5ad80fcc5d1652ccbe6 /fs | |
| parent | ima: replace iint spinblock with rwlock/read_lock (diff) | |
| download | linux-9957a5043e7b0b7361cdf48eea22b2900293e63a.tar.xz linux-9957a5043e7b0b7361cdf48eea22b2900293e63a.zip | |
ima: add inode_post_setattr call
Changing an inode's metadata may result in our not needing to appraise
the file. In such cases, we must remove 'security.ima'.
Changelog v1:
- use ima_inode_post_setattr() stub function, if IMA_APPRAISE not configured
Signed-off-by: Mimi Zohar <zohar@us.ibm.com>
Acked-by: Serge Hallyn <serge.hallyn@ubuntu.com>
Acked-by: Dmitry Kasatkin <dmitry.kasatkin@intel.com>
Diffstat (limited to 'fs')
| -rw-r--r-- | fs/attr.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/fs/attr.c b/fs/attr.c index 29e38a1f7f77..cce7df53b694 100644 --- a/fs/attr.c +++ b/fs/attr.c @@ -14,6 +14,7 @@ #include <linux/fcntl.h> #include <linux/security.h> #include <linux/evm.h> +#include <linux/ima.h> /** * inode_change_ok - check if attribute changes to an inode are allowed @@ -247,6 +248,7 @@ int notify_change(struct dentry * dentry, struct iattr * attr) if (!error) { fsnotify_change(dentry, ia_valid); + ima_inode_post_setattr(dentry); evm_inode_post_setattr(dentry, ia_valid); } |