aboutsummaryrefslogtreecommitdiffstats
path: root/security/integrity/evm/evm_main.c
diff options
context:
space:
mode:
authorDmitry Kasatkin <dmitry.kasatkin@nokia.com>2011-05-06 04:34:17 -0400
committerMimi Zohar <zohar@linux.vnet.ibm.com>2011-07-18 12:29:48 -0400
commit24e0198efe0df50034ec1c14b2d7b5bb0f66d54a (patch)
tree64f7d23cd7b07dabe826c2a6ed37f7c1842816b2 /security/integrity/evm/evm_main.c
parent6d38ca01c0c2d6c2e46ec1984db9ada6bad6ca26 (diff)
evm: replace hmac_status with evm_status
We will use digital signatures in addtion to hmac. Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@nokia.com> Signed-off-by: Mimi Zohar <zohar@us.ibm.com>
Diffstat (limited to 'security/integrity/evm/evm_main.c')
-rw-r--r--security/integrity/evm/evm_main.c14
1 files changed, 7 insertions, 7 deletions
diff --git a/security/integrity/evm/evm_main.c b/security/integrity/evm/evm_main.c
index bfe44dff61bb..eb07f9d13c24 100644
--- a/security/integrity/evm/evm_main.c
+++ b/security/integrity/evm/evm_main.c
@@ -56,8 +56,8 @@ static enum integrity_status evm_verify_hmac(struct dentry *dentry,
56 struct evm_ima_xattr_data xattr_data; 56 struct evm_ima_xattr_data xattr_data;
57 int rc; 57 int rc;
58 58
59 if (iint->hmac_status == INTEGRITY_PASS) 59 if (iint->evm_status == INTEGRITY_PASS)
60 return iint->hmac_status; 60 return iint->evm_status;
61 61
62 /* if status is not PASS, try to check again - against -ENOMEM */ 62 /* if status is not PASS, try to check again - against -ENOMEM */
63 63
@@ -71,18 +71,18 @@ static enum integrity_status evm_verify_hmac(struct dentry *dentry,
71 sizeof xattr_data, GFP_NOFS); 71 sizeof xattr_data, GFP_NOFS);
72 if (rc < 0) 72 if (rc < 0)
73 goto err_out; 73 goto err_out;
74 iint->hmac_status = INTEGRITY_PASS; 74 iint->evm_status = INTEGRITY_PASS;
75 return iint->hmac_status; 75 return iint->evm_status;
76 76
77err_out: 77err_out:
78 switch (rc) { 78 switch (rc) {
79 case -ENODATA: /* file not labelled */ 79 case -ENODATA: /* file not labelled */
80 iint->hmac_status = INTEGRITY_NOLABEL; 80 iint->evm_status = INTEGRITY_NOLABEL;
81 break; 81 break;
82 default: 82 default:
83 iint->hmac_status = INTEGRITY_FAIL; 83 iint->evm_status = INTEGRITY_FAIL;
84 } 84 }
85 return iint->hmac_status; 85 return iint->evm_status;
86} 86}
87 87
88static int evm_protected_xattr(const char *req_xattr_name) 88static int evm_protected_xattr(const char *req_xattr_name)