dh/ima-evm-utils
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Use lsetxattr() instead of setxattr()

Browse Source 
IMA/EVM extended attributes should be set for symbolic links themselves,
not to the entries pointed by them. setxattr() dereference symbolic links.
It is necessary to use lsetxattr().

Signed-off-by: Dmitry Kasatkin <d.kasatkin@samsung.com>
This commit is contained in:
Dmitry Kasatkin 2014-01-16 16:39:57 +02:00
parent 7045d70a1e
commit 33ff9595e5
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/evmctl.c
View File

@ -841,7 +841,7 @@ static int sign_evm(const char *file, const char *key)
return len;
if (xattr) {
err = setxattr(file, "security.evm", sig, len + 1, 0);
err = lsetxattr(file, "security.evm", sig, len + 1, 0);
if (err < 0) {
log_err("setxattr failed: %s\n", file);
return err;
@ -1024,7 +1024,7 @@ static int hash_ima(const char *file)
dump(hash, len + 1);
if (xattr) {
err = setxattr(file, "security.ima", hash, len + 1, 0);
err = lsetxattr(file, "security.ima", hash, len + 1, 0);
if (err < 0) {
log_err("setxattr failed: %s\n", file);
return err;
@ -1079,7 +1079,7 @@ static int sign_ima(const char *file, const char *key)
bin2file(file, "sig", sig, len);
if (xattr) {
err = setxattr(file, "security.ima", sig, len, 0);
err = lsetxattr(file, "security.ima", sig, len, 0);
if (err < 0) {
log_err("setxattr failed: %s\n", file);
return err;
@ -1543,7 +1543,7 @@ static int hmac_evm(const char *file, const char *key)
memcpy(sig + 1, hash, len);
if (xattr) {
err = setxattr(file, "security.evm", sig, len + 1, 0);
err = lsetxattr(file, "security.evm", sig, len + 1, 0);
if (err < 0) {
log_err("setxattr failed: %s\n", file);
return err;