tree c5d29c7db2f8ef93e970cb405621f59c57d01b94
parent bf6d0f5dcda17df3cc5577e203d0f8ea1c2ad6aa
author Mimi Zohar <zohar@linux.vnet.ibm.com> 1314018858 -0400
committer Mimi Zohar <zohar@linux.vnet.ibm.com> 1316028292 -0400

evm: permit mode bits to be updated

Before permitting 'security.evm' to be updated, 'security.evm' must
exist and be valid.  In the case that there are no existing EVM protected
xattrs, it is safe for posix acls to update the mode bits.

To differentiate between no 'security.evm' xattr and no xattrs used to
calculate 'security.evm', this patch defines INTEGRITY_NOXATTR.

Signed-off-by: Mimi Zohar <zohar@us.ibm.com>