ima: change flags container data type
authorDmitry Kasatkin <dmitry.kasatkin@intel.com>
Wed, 19 Sep 2012 12:32:49 +0000 (15:32 +0300)
committerMimi Zohar <zohar@linux.vnet.ibm.com>
Wed, 19 Sep 2012 12:55:20 +0000 (08:55 -0400)
IMA audit hashes patches introduced new IMA flags and required
space went beyond 8 bits. Currently the only flag is IMA_DIGSIG.
This patch use 16 bit short instead of 8 bit char.
Without this fix IMA signature will be replaced with hash, which
should not happen.

Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@intel.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
security/integrity/integrity.h

index 403ba319a06a09e9a7653251ae742f0f450b39e4..e9db763a875e80f8fc4bd528974922d7e98ae97e 100644 (file)
@@ -48,7 +48,7 @@ struct integrity_iint_cache {
        struct rb_node rb_node; /* rooted in integrity_iint_tree */
        struct inode *inode;    /* back pointer to inode in question */
        u64 version;            /* track inode changes */
-       unsigned char flags;
+       unsigned short flags;
        struct evm_ima_xattr_data ima_xattr;
        enum integrity_status ima_status;
        enum integrity_status evm_status;