diff options
| author |   Eric Snowberg <eric.snowberg@oracle.com> | 2023-07-25 17:56:46 -0400 |
|---|---|---|
| committer |   Linus Torvalds <torvalds@linux-foundation.org> | 2023-07-25 15:36:22 -0700 |
| commit | 18b44bc5a67275641fb26f2c54ba7eef80ac5950 (patch) | |
| tree | afa6c2f41c5b80f08a381d28b607fa8f9ee9728a /tools/perf/scripts/python/export-to-postgresql.py | |
| parent | x86/traps: Fix load_unaligned_zeropad() handling for shared TDX memory (diff) | |
| download | wireguard-linux-18b44bc5a67275641fb26f2c54ba7eef80ac5950.tar.xz wireguard-linux-18b44bc5a67275641fb26f2c54ba7eef80ac5950.zip | |
ovl: Always reevaluate the file signature for IMA
Commit db1d1e8b9867 ("IMA: use vfs_getattr_nosec to get the i_version")
partially closed an IMA integrity issue when directly modifying a file
on the lower filesystem. If the overlay file is first opened by a user
and later the lower backing file is modified by root, but the extended
attribute is NOT updated, the signature validation succeeds with the old
original signature.
Update the super_block s_iflags to SB_I_IMA_UNVERIFIABLE_SIGNATURE to
force signature reevaluation on every file access until a fine grained
solution can be found.
Signed-off-by: Eric Snowberg <eric.snowberg@oracle.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Diffstat (limited to 'tools/perf/scripts/python/export-to-postgresql.py')
0 files changed, 0 insertions, 0 deletions