Dmitry Kasatkin 7c51bb00c4 evm: fix potential race when removing xattrs ...

EVM needs to be atomically updated when removing xattrs.
Otherwise concurrent EVM verification may fail in between.
This patch fixes by moving i_mutex unlocking after calling
EVM hook. fsnotify_xattr() is also now called while locked
the same way as it is done in __vfs_setxattr_noperm.

Changelog:
- remove unused 'inode' variable.

Signed-off-by: Dmitry Kasatkin <d.kasatkin@samsung.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>

2015-05-21 13:28:47 -04:00

..

evm_crypto.c

VFS: security/: d_backing_inode() annotations

2015-04-15 15:06:56 -04:00

evm_main.c

evm: fix potential race when removing xattrs

2015-05-21 13:28:47 -04:00

evm_posix_acl.c

ima: fix script messages

2013-10-25 13:17:19 -04:00

evm_secfs.c

security: integrity: Use a more current logging style

2014-03-07 12:15:21 -05:00

evm.h

evm: replace HMAC version with attribute mask

2014-06-12 17:58:06 -04:00

Kconfig

kconfig: use bool instead of boolean for type definition attributes

2015-01-07 13:08:04 +01:00

Makefile

evm: posix acls modify i_mode

2011-09-14 15:24:51 -04:00