linux

iv/linux

History

Mimi Zohar 49219d9b87 evm: fix writing <securityfs>/evm overflow

EVM_SETUP_COMPLETE is defined as 0x80000000, which is larger than INT_MAX.
The "-fno-strict-overflow" compiler option properly prevents signaling
EVM that the EVM policy setup is complete.  Define and read an unsigned
int.

Fixes: f00d79750712 ("EVM: Allow userspace to signal an RSA key has been loaded")
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>

2021-05-20 19:48:30 -04:00

evm_crypto.c

idmapped-mounts-v5.12

2021-02-23 13:39:45 -08:00

evm_main.c

xattr: handle idmapped mounts

2021-01-24 14:27:17 +01:00

evm_posix_acl.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441

2019-06-05 17:37:17 +02:00

evm_secfs.c

evm: fix writing <securityfs>/evm overflow