evm: prevent passing integrity check if xattr read fails
authorDmitry Kasatkin <d.kasatkin@samsung.com>
Fri, 15 Aug 2014 10:49:22 +0000 (13:49 +0300)
committerMimi Zohar <zohar@linux.vnet.ibm.com>
Mon, 8 Sep 2014 21:36:10 +0000 (17:36 -0400)
commit1f1009791b2e81f106d4809007720495ba3ed90c
tree83a155c205d0bab7821b2a23ffbe2741c3c19cc4
parente7d021e28328e0cc47b21cb9c6d8885326b0c2f5
evm: prevent passing integrity check if xattr read fails

This patch fixes a bug, where evm_verify_hmac() returns INTEGRITY_PASS
if inode->i_op->getxattr() returns an error in evm_find_protected_xattrs.

Signed-off-by: Dmitry Kasatkin <d.kasatkin@samsung.com>
security/integrity/evm/evm_main.c