tree 4d036957c07f05a0c5150e6af4111985de2abd59
parent d3b33679481d52ef02311119d4342a9a1f3d84db
author Dmitry Kasatkin <d.kasatkin@samsung.com> 1396009874 +0200
committer Mimi Zohar <zohar@linux.vnet.ibm.com> 1402610286 -0400

evm: provide option to protect additional SMACK xattrs

Newer versions of SMACK introduced following security xattrs:
SMACK64EXEC, SMACK64TRANSMUTE and SMACK64MMAP.

To protect these xattrs, this patch includes them in the HMAC
calculation.  However, for backwards compatibility with existing
labeled filesystems, including these xattrs needs to be
configurable.

Changelog:
- Add SMACK dependency on new option (Mimi)

Signed-off-by: Dmitry Kasatkin <d.kasatkin@samsung.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>