Message ID | 20231219175206.12342-4-zohar@linux.ibm.com (mailing list archive) |
---|---|
State | New |
Headers | show |
Series | evm: disable EVM on overlayfs | expand |
On Tue, Dec 19, 2023 at 7:52 PM Mimi Zohar <zohar@linux.ibm.com> wrote: > > Until a complete solution is developed, update 'sb->s_iflags' to > disable EVM. > > Signed-off-by: Mimi Zohar <zohar@linux.ibm.com> Acked-by: Amir Goldstein <amir73il@gmail.com> > --- > fs/overlayfs/super.c | 1 + > 1 file changed, 1 insertion(+) > > diff --git a/fs/overlayfs/super.c b/fs/overlayfs/super.c > index a0967bb25003..e3d9c6c80a47 100644 > --- a/fs/overlayfs/super.c > +++ b/fs/overlayfs/super.c > @@ -1454,6 +1454,7 @@ int ovl_fill_super(struct super_block *sb, struct fs_context *fc) > * lead to unexpected results. > */ > sb->s_iflags |= SB_I_NOUMASK; > + sb->s_iflags |= SB_I_EVM_UNSUPPORTED; > > err = -ENOMEM; > root_dentry = ovl_get_root(sb, ctx->upper.dentry, oe); > -- > 2.39.3 >
diff --git a/fs/overlayfs/super.c b/fs/overlayfs/super.c index a0967bb25003..e3d9c6c80a47 100644 --- a/fs/overlayfs/super.c +++ b/fs/overlayfs/super.c @@ -1454,6 +1454,7 @@ int ovl_fill_super(struct super_block *sb, struct fs_context *fc) * lead to unexpected results. */ sb->s_iflags |= SB_I_NOUMASK; + sb->s_iflags |= SB_I_EVM_UNSUPPORTED; err = -ENOMEM; root_dentry = ovl_get_root(sb, ctx->upper.dentry, oe);
Until a complete solution is developed, update 'sb->s_iflags' to disable EVM. Signed-off-by: Mimi Zohar <zohar@linux.ibm.com> --- fs/overlayfs/super.c | 1 + 1 file changed, 1 insertion(+)