Files
linux/fs
Eric Snowberg 18b44bc5a6 ovl: Always reevaluate the file signature for IMA
Commit db1d1e8b98 ("IMA: use vfs_getattr_nosec to get the i_version")
partially closed an IMA integrity issue when directly modifying a file
on the lower filesystem.  If the overlay file is first opened by a user
and later the lower backing file is modified by root, but the extended
attribute is NOT updated, the signature validation succeeds with the old
original signature.

Update the super_block s_iflags to SB_I_IMA_UNVERIFIABLE_SIGNATURE to
force signature reevaluation on every file access until a fine grained
solution can be found.

Signed-off-by: Eric Snowberg <eric.snowberg@oracle.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2023-07-25 15:36:22 -07:00
..
2023-05-24 08:42:16 -06:00
2023-05-24 08:42:16 -06:00
2023-03-14 12:56:30 -06:00
2023-06-05 16:50:30 +02:00
2023-06-15 13:37:53 +02:00
2023-03-30 08:51:48 +02:00
2023-06-28 20:35:21 -07:00
2023-05-17 09:16:59 +02:00
2023-01-19 09:24:30 +01:00
2023-07-04 10:20:29 +02:00
2023-05-19 04:30:22 +02:00
2023-05-19 04:30:22 +02:00
2023-03-06 09:59:20 +01:00