summaryrefslogtreecommitdiffstats
path: root/security
diff options
context:
space:
mode:
authorDmitry Kasatkin <dmitry.kasatkin@intel.com>2011-08-15 15:30:11 +0300
committerMimi Zohar <zohar@linux.vnet.ibm.com>2011-09-14 15:24:52 -0400
commitfb788d8b981fa55603873416882f8dcf835e7924 (patch)
tree023d8410571f27e8d10bf6fc0a4a088cb9368df6 /security
parent566be59ab86c0e030b980645a580d683a015a483 (diff)
downloadlinux-fb788d8b981fa55603873416882f8dcf835e7924.tar.gz
linux-fb788d8b981fa55603873416882f8dcf835e7924.tar.bz2
linux-fb788d8b981fa55603873416882f8dcf835e7924.zip
evm: clean verification status
When allocating from slab, initialization is done the first time in init_once() and subsequently on free. Because evm_status was not re-initialized on free, evm_verify_hmac() skipped verifications. This patch re-initializes evm_status. Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@intel.com> Signed-off-by: Mimi Zohar <zohar@us.ibm.com>
Diffstat (limited to 'security')
-rw-r--r--security/integrity/iint.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/security/integrity/iint.c b/security/integrity/iint.c
index 0a23e075e1d2..399641c3e846 100644
--- a/security/integrity/iint.c
+++ b/security/integrity/iint.c
@@ -74,6 +74,7 @@ static void iint_free(struct integrity_iint_cache *iint)
{
iint->version = 0;
iint->flags = 0UL;
+ iint->evm_status = INTEGRITY_UNKNOWN;
kmem_cache_free(iint_cache, iint);
}