Dmitry Kasatkin
def3e8b9ee
ima: set appraise status in fix mode only when xattr is fixed
...
When a file system is mounted read-only, setting the xattr value in
fix mode fails with an error code -EROFS. The xattr should be fixed
after the file system is remounted read-write. This patch verifies
that the set xattr succeeds, before setting the appraise status value
to INTEGRITY_PASS.
Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@intel.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
2013-01-16 15:47:07 -05:00
..
apparmor
apparmor: fix IRQ stack overflow during free_profile
2012-10-25 02:12:50 +11:00
integrity
ima: set appraise status in fix mode only when xattr is fixed
2013-01-16 15:47:07 -05:00
keys
keys: fix unreachable code
2012-12-20 17:40:21 -08:00
selinux
bridge: update selinux perm table for RTM_NEWMDB and RTM_DELMDB
2012-12-15 17:14:38 -08:00
smack
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
2012-12-16 15:40:50 -08:00
tomoyo
consitify do_mount() arguments
2012-10-11 20:02:04 -04:00
yama
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace
2012-12-17 15:44:47 -08:00
capability.c
security: introduce kernel_module_from_file hook
2012-12-14 13:05:24 +10:30
commoncap.c
Fix cap_capable to only allow owners in the parent user namespace to have caps.
2012-12-14 13:50:32 -08:00
device_cgroup.c
cgroup: rename ->create/post_create/pre_destroy/destroy() to ->css_alloc/online/offline/free()
2012-11-19 08:13:38 -08:00
inode.c
Kconfig
lsm_audit.c
Makefile
min_addr.c
security.c
ima: support new kernel module syscall
2012-12-14 13:05:26 +10:30