• Dmitry Kasatkin's avatar
    evm: add support for different security.evm data types · 6be5cc52
    Dmitry Kasatkin authored
    EVM protects a file's security extended attributes(xattrs) against integrity
    attacks. The current patchset maintains an HMAC-sha1 value across the security
    xattrs, storing the value as the extended attribute 'security.evm'. We
    anticipate other methods for protecting the security extended attributes.
    This patch reserves the first byte of 'security.evm' as a place holder for
    the type of method.
    
    Changelog v6:
    - move evm_ima_xattr_type definition to security/integrity/integrity.h
    - defined a structure for the EVM xattr called evm_ima_xattr_data
      (based on Serge Hallyn's suggestion)
    - removed unnecessary memset
    Signed-off-by: default avatarDmitry Kasatkin <dmitry.kasatkin@nokia.com>
    Signed-off-by: default avatarMimi Zohar <zohar@us.ibm.com>
    Acked-by: default avatarSerge Hallyn <serge.hallyn@canonical.com>
    6be5cc52
evm_main.c 7.58 KB