[PATCH 09/11] ima: Don't remove security.ima if file must not be appraised

Mimi Zohar zohar at linux.ibm.com
Mon Aug 24 13:02:14 UTC 2020


On Thu, 2020-06-18 at 18:04 +0200, Roberto Sassu wrote:
> Files might come from a remote source and might have xattrs, including
> security.ima. It should not be IMA task to decide whether security.ima
> should be kept or not. This patch removes the removexattr() system
> call in ima_inode_post_setattr().
> 
> Signed-off-by: Roberto Sassu <roberto.sassu at huawei.com>

Yes, this has been previously discussed.

Reviewed-by: Mimi Zohar <zohar at linux.ibm.com>



More information about the Linux-security-module-archive mailing list