[PATCH 09/11] ima: Don't remove security.ima if file must not be appraised
Mimi Zohar
zohar at linux.ibm.com
Mon Aug 24 13:02:14 UTC 2020
On Thu, 2020-06-18 at 18:04 +0200, Roberto Sassu wrote:
> Files might come from a remote source and might have xattrs, including
> security.ima. It should not be IMA task to decide whether security.ima
> should be kept or not. This patch removes the removexattr() system
> call in ima_inode_post_setattr().
>
> Signed-off-by: Roberto Sassu <roberto.sassu at huawei.com>
Yes, this has been previously discussed.
Reviewed-by: Mimi Zohar <zohar at linux.ibm.com>
More information about the Linux-security-module-archive
mailing list