evm: fix potential race when removing xattrs
authorDmitry Kasatkin <d.kasatkin@samsung.com>
Thu, 20 Nov 2014 14:31:01 +0000 (16:31 +0200)
committerMimi Zohar <zohar@linux.vnet.ibm.com>
Thu, 21 May 2015 17:28:47 +0000 (13:28 -0400)
commit7c51bb00c40e5608fb2cdac5230f51aeb56a28df
treeea228d622a60f43812b50ce7e27b2abbb466f04b
parent5101a1850bb7ccbf107929dee9af0cd2f400940f
evm: fix potential race when removing xattrs

EVM needs to be atomically updated when removing xattrs.
Otherwise concurrent EVM verification may fail in between.
This patch fixes by moving i_mutex unlocking after calling
EVM hook. fsnotify_xattr() is also now called while locked
the same way as it is done in __vfs_setxattr_noperm.

Changelog:
- remove unused 'inode' variable.

Signed-off-by: Dmitry Kasatkin <d.kasatkin@samsung.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
fs/xattr.c
security/integrity/evm/evm_main.c