[PATCH v3 18/25] security: Introduce inode_post_set_acl hook
Mimi Zohar
zohar at linux.ibm.com
Fri Oct 13 13:27:31 UTC 2023
On Mon, 2023-09-04 at 15:34 +0200, Roberto Sassu wrote:
> From: Roberto Sassu <roberto.sassu at huawei.com>
>
> In preparation for moving IMA and EVM to the LSM infrastructure, introduce
> the inode_post_set_acl hook.
>
> It is useful for EVM to recalculate the HMAC on the modified POSIX ACL and
> other file metadata, after it verified the HMAC of current file metadata
> with the inode_set_acl hook.
Please reword this and the inode_post_remove_acl patch similar to my
comments on "[PATCH v3 12/25] security: Introduce inode_post_setattr
hook]".
--
thanks,
Mimi
More information about the Linux-security-module-archive
mailing list