Commit 540cdd72 authored Mar 06, 2023 by Roberto Sassu Committed by Greg Kroah-Hartman Jul 27, 2023

evm: Complete description of evm_inode_setattr()



[ Upstream commit b1de86d4248b273cb12c4cd7d20c08d459519f7d ]

Add the description for missing parameters of evm_inode_setattr() to
avoid the warning arising with W=n compile option.

Fixes: 817b54aa ("evm: add evm_inode_setattr to prevent updating an invalid security.evm") # v3.2+
Fixes: c1632a0f1120 ("fs: port ->setattr() to pass mnt_idmap") # v6.3+
Signed-off-by: Roberto Sassu <roberto.sassu@huawei.com>
Reviewed-by: Stefan Berger <stefanb@linux.ibm.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

parent 568b7340

security/integrity/evm/evm_main.c

+2 −0

Original line number	Diff line number	Diff line
		@@ -471,7 +471,9 @@ void evm_inode_post_removexattr(struct dentry dentry, const char xattr_name)

		/**
		* evm_inode_setattr - prevent updating an invalid EVM extended attribute
		* @idmap: idmap of the mount
		* @dentry: pointer to the affected dentry
		* @attr: iattr structure containing the new file attributes
		*
		* Permit update of file attributes when files have a valid EVM signature,
		* except in the case of them having an immutable portable signature.