Messages in this thread Patch in this message | | | From | Vivek Goyal <> | Subject | [PATCH 1/6] ima: detect security xattrs not enabled | Date | Thu, 14 Feb 2013 14:55:40 -0500 |
| |
vfs_getxattr_alloc() returns -EOPNOTSUPP if filesystem does not have security label enabled. In that case there is no point in continuing further and try to fix hashes (if ima_appraise=fix was specified) as that will fail too. Return early
Signed-off-by: Vivek Goyal <vgoyal@redhat.com> Acked-by: Mimi Zohar <zohar@linux.vnet.ibm.com> --- security/integrity/ima/ima_appraise.c | 4 ++++ 1 files changed, 4 insertions(+), 0 deletions(-)
diff --git a/security/integrity/ima/ima_appraise.c b/security/integrity/ima/ima_appraise.c index 2d4beca..3710f44 100644 --- a/security/integrity/ima/ima_appraise.c +++ b/security/integrity/ima/ima_appraise.c @@ -134,6 +134,10 @@ int ima_appraise_measurement(int func, struct integrity_iint_cache *iint, rc = vfs_getxattr_alloc(dentry, XATTR_NAME_IMA, (char **)&xattr_value, 0, GFP_NOFS); if (rc <= 0) { + /* File system does not support security xattr */ + if (rc == -EOPNOTSUPP) + return INTEGRITY_UNKNOWN; + if (rc && rc != -ENODATA) goto out; -- 1.7.7.6
| |