Files
linux/security/integrity/evm
Mimi Zohar 60e2874ce4 evm: labeling pseudo filesystems exception
commit 5101a1850b upstream.

To prevent offline stripping of existing file xattrs and relabeling of
them at runtime, EVM allows only newly created files to be labeled.  As
pseudo filesystems are not persistent, stripping of xattrs is not a
concern.

Some LSMs defer file labeling on pseudo filesystems.  This patch
permits the labeling of existing files on pseudo files systems.

Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2015-08-03 09:29:12 -07:00
..
2013-10-25 13:17:19 -04:00
2011-09-14 15:24:51 -04:00