evm: evm_inode_post_removexattr

When an EVM protected extended attribute is removed, update 'security.evm'.

Signed-off-by: Mimi Zohar <zohar@us.ibm.com>
Acked-by: Serge Hallyn <serge.hallyn@ubuntu.com>

1 files changed, 4 insertions, 1 deletions

diff --git a/fs/xattr.c b/fs/xattr.c
index 851808c92b30..67583de8218c 100644
--- a/fs/xattr.c
+++ b/fs/xattr.c
@@ -14,6 +14,7 @@
 #include <linux/mount.h>
 #include <linux/namei.h>
 #include <linux/security.h>
+#include <linux/evm.h>
 #include <linux/syscalls.h>
 #include <linux/module.h>
 #include <linux/fsnotify.h>
@@ -301,8 +302,10 @@ vfs_removexattr(struct dentry *dentry, const char *name)
         error = inode->i_op->removexattr(dentry, name);
         mutex_unlock(&inode->i_mutex);
 
-        if (!error)
+        if (!error) {
                 fsnotify_xattr(dentry);
+                evm_inode_post_removexattr(dentry, name);
+        }
         return error;
 }
 EXPORT_SYMBOL_GPL(vfs_removexattr);