diff options
| author | Dmitry Kasatkin <dmitry.kasatkin@intel.com> | 2011-08-15 14:30:11 +0200 |
|---|---|---|
| committer | Mimi Zohar <zohar@linux.vnet.ibm.com> | 2011-09-14 21:24:52 +0200 |
| commit | fb788d8b981fa55603873416882f8dcf835e7924 (patch) | |
| tree | 023d8410571f27e8d10bf6fc0a4a088cb9368df6 /security/integrity | |
| parent | evm: permit mode bits to be updated (diff) | |
| download | linux-fb788d8b981fa55603873416882f8dcf835e7924.tar.xz linux-fb788d8b981fa55603873416882f8dcf835e7924.zip | |
evm: clean verification status
When allocating from slab, initialization is done the first time in
init_once() and subsequently on free. Because evm_status was not
re-initialized on free, evm_verify_hmac() skipped verifications.
This patch re-initializes evm_status.
Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@intel.com>
Signed-off-by: Mimi Zohar <zohar@us.ibm.com>
Diffstat (limited to 'security/integrity')
| -rw-r--r-- | security/integrity/iint.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/security/integrity/iint.c b/security/integrity/iint.c index 0a23e075e1d2..399641c3e846 100644 --- a/security/integrity/iint.c +++ b/security/integrity/iint.c @@ -74,6 +74,7 @@ static void iint_free(struct integrity_iint_cache *iint) { iint->version = 0; iint->flags = 0UL; + iint->evm_status = INTEGRITY_UNKNOWN; kmem_cache_free(iint_cache, iint); } |