diff options
author | Dmitry Kasatkin <dmitry.kasatkin@nokia.com> | 2011-05-06 04:34:17 -0400 |
---|---|---|
committer | Mimi Zohar <zohar@linux.vnet.ibm.com> | 2011-07-18 12:29:48 -0400 |
commit | 24e0198efe0df50034ec1c14b2d7b5bb0f66d54a (patch) | |
tree | 64f7d23cd7b07dabe826c2a6ed37f7c1842816b2 /security/integrity/evm/evm_main.c | |
parent | 6d38ca01c0c2d6c2e46ec1984db9ada6bad6ca26 (diff) |
evm: replace hmac_status with evm_status
We will use digital signatures in addtion to hmac.
Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@nokia.com>
Signed-off-by: Mimi Zohar <zohar@us.ibm.com>
Diffstat (limited to 'security/integrity/evm/evm_main.c')
-rw-r--r-- | security/integrity/evm/evm_main.c | 14 |
1 files changed, 7 insertions, 7 deletions
diff --git a/security/integrity/evm/evm_main.c b/security/integrity/evm/evm_main.c index bfe44dff61bb..eb07f9d13c24 100644 --- a/security/integrity/evm/evm_main.c +++ b/security/integrity/evm/evm_main.c | |||
@@ -56,8 +56,8 @@ static enum integrity_status evm_verify_hmac(struct dentry *dentry, | |||
56 | struct evm_ima_xattr_data xattr_data; | 56 | struct evm_ima_xattr_data xattr_data; |
57 | int rc; | 57 | int rc; |
58 | 58 | ||
59 | if (iint->hmac_status == INTEGRITY_PASS) | 59 | if (iint->evm_status == INTEGRITY_PASS) |
60 | return iint->hmac_status; | 60 | return iint->evm_status; |
61 | 61 | ||
62 | /* if status is not PASS, try to check again - against -ENOMEM */ | 62 | /* if status is not PASS, try to check again - against -ENOMEM */ |
63 | 63 | ||
@@ -71,18 +71,18 @@ static enum integrity_status evm_verify_hmac(struct dentry *dentry, | |||
71 | sizeof xattr_data, GFP_NOFS); | 71 | sizeof xattr_data, GFP_NOFS); |
72 | if (rc < 0) | 72 | if (rc < 0) |
73 | goto err_out; | 73 | goto err_out; |
74 | iint->hmac_status = INTEGRITY_PASS; | 74 | iint->evm_status = INTEGRITY_PASS; |
75 | return iint->hmac_status; | 75 | return iint->evm_status; |
76 | 76 | ||
77 | err_out: | 77 | err_out: |
78 | switch (rc) { | 78 | switch (rc) { |
79 | case -ENODATA: /* file not labelled */ | 79 | case -ENODATA: /* file not labelled */ |
80 | iint->hmac_status = INTEGRITY_NOLABEL; | 80 | iint->evm_status = INTEGRITY_NOLABEL; |
81 | break; | 81 | break; |
82 | default: | 82 | default: |
83 | iint->hmac_status = INTEGRITY_FAIL; | 83 | iint->evm_status = INTEGRITY_FAIL; |
84 | } | 84 | } |
85 | return iint->hmac_status; | 85 | return iint->evm_status; |
86 | } | 86 | } |
87 | 87 | ||
88 | static int evm_protected_xattr(const char *req_xattr_name) | 88 | static int evm_protected_xattr(const char *req_xattr_name) |