Minki/linux
1
0
Fork 1
mirror of https://github.com/torvalds/linux.git synced 2024-11-14 08:02:07 +00:00
Code Issues Packages Projects Releases Wiki Activity
86327e8eb9
linux/fs/overlayfs
History
Eric Snowberg 18b44bc5a6 ovl: Always reevaluate the file signature for IMA 
Commit db1d1e8b98 ("IMA: use vfs_getattr_nosec to get the i_version")
partially closed an IMA integrity issue when directly modifying a file
on the lower filesystem.  If the overlay file is first opened by a user
and later the lower backing file is modified by root, but the extended
attribute is NOT updated, the signature validation succeeds with the old
original signature.

Update the super_block s_iflags to SB_I_IMA_UNVERIFIABLE_SIGNATURE to
force signature reevaluation on every file access until a fine grained
solution can be found.

Signed-off-by: Eric Snowberg <eric.snowberg@oracle.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2023-07-25 15:36:22 -07:00
..
copy_up.c ovl: implement lazy lookup of lowerdata in data-only layers 2023-06-19 14:01:14 +03:00
dir.c ovl: store enum redirect_mode in config instead of a string 2023-06-19 14:02:01 +03:00
export.c ovl: deduplicate lowerpath and lowerstack[] 2023-06-19 14:01:13 +03:00
file.c overlayfs update for 6.5 2023-06-29 13:01:27 -07:00
inode.c ovl: pass ovl_fs to xino helpers 2023-06-19 14:02:00 +03:00
Kconfig ovl: Kconfig: Fix spelling mistake "undelying" -> "underlying" 2022-12-08 10:49:46 +01:00
Makefile ovl: modify layer parameter parsing 2023-06-20 14:10:40 +03:00
namei.c ovl: store enum redirect_mode in config instead of a string 2023-06-19 14:02:01 +03:00
overlayfs.h ovl: move all parameter handling into params.{c,h} 2023-07-03 16:08:17 +03:00
ovl_entry.h ovl: modify layer parameter parsing 2023-06-20 14:10:40 +03:00
params.c ovl: move all parameter handling into params.{c,h} 2023-07-03 16:08:17 +03:00
params.h ovl: move all parameter handling into params.{c,h} 2023-07-03 16:08:17 +03:00
readdir.c ovl: pass ovl_fs to xino helpers 2023-06-19 14:02:00 +03:00
super.c ovl: Always reevaluate the file signature for IMA 2023-07-25 15:36:22 -07:00
util.c ovl: store enum redirect_mode in config instead of a string 2023-06-19 14:02:01 +03:00