]> git.baikalelectronics.ru Git - kernel.git/commit
evm: prevent passing integrity check if xattr read fails
authorDmitry Kasatkin <d.kasatkin@samsung.com>
Fri, 15 Aug 2014 10:49:22 +0000 (13:49 +0300)
committerMimi Zohar <zohar@linux.vnet.ibm.com>
Mon, 8 Sep 2014 21:36:10 +0000 (17:36 -0400)
commit345e4ac20754281803128baa312184ee96415cb7
tree83a155c205d0bab7821b2a23ffbe2741c3c19cc4
parent45acf4da3725552c78e4ea8e3e9a0de7f005ae34
evm: prevent passing integrity check if xattr read fails

This patch fixes a bug, where evm_verify_hmac() returns INTEGRITY_PASS
if inode->i_op->getxattr() returns an error in evm_find_protected_xattrs.

Signed-off-by: Dmitry Kasatkin <d.kasatkin@samsung.com>
security/integrity/evm/evm_main.c