diff options
| author |   Lans Zhang <jia.zhang@windriver.com> | 2017-01-06 12:38:11 +0800 |
|---|---|---|
| committer |   Mimi Zohar <zohar@linux.vnet.ibm.com> | 2017-01-27 14:17:21 -0500 |
| commit | 20f482ab9e0f800d1e01ce748ebd382d085abe56 (patch) | |
| tree | c8a2ee29204155ef9ef6c2b7d9586f27499086d5 /security/integrity/ima/ima_api.c | |
| parent | ima: fix ima_d_path() possible race with rename (diff) | |
| download | linux-dev-20f482ab9e0f800d1e01ce748ebd382d085abe56.tar.xz linux-dev-20f482ab9e0f800d1e01ce748ebd382d085abe56.zip | |
ima: allow to check MAY_APPEND
Otherwise some mask and inmask tokens with MAY_APPEND flag may not work
as expected.
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Diffstat (limited to 'security/integrity/ima/ima_api.c')
| -rw-r--r-- | security/integrity/ima/ima_api.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/security/integrity/ima/ima_api.c b/security/integrity/ima/ima_api.c index d01a52f8f708..c2edba8de35e 100644 --- a/security/integrity/ima/ima_api.c +++ b/security/integrity/ima/ima_api.c @@ -157,7 +157,8 @@ err_out: /** * ima_get_action - appraise & measure decision based on policy. * @inode: pointer to inode to measure - * @mask: contains the permission mask (MAY_READ, MAY_WRITE, MAY_EXECUTE) + * @mask: contains the permission mask (MAY_READ, MAY_WRITE, MAY_EXEC, + * MAY_APPEND) * @func: caller identifier * @pcr: pointer filled in if matched measure policy sets pcr= * |