From: Dmitry Kasatkin <dmitry.kasatkin@intel.com>
Date: Mon, 15 Aug 2011 12:30:11 +0000 (+0300)
Subject: evm: clean verification status
X-Git-Url: http://drtracing.org/?a=commitdiff_plain;h=fb788d8b981fa55603873416882f8dcf835e7924;p=deliverable%2Flinux.git

evm: clean verification status

When allocating from slab, initialization is done the first time in
init_once() and subsequently on free.  Because evm_status was not
re-initialized on free, evm_verify_hmac() skipped verifications.

This patch re-initializes evm_status.

Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@intel.com>
Signed-off-by: Mimi Zohar <zohar@us.ibm.com>
---

diff --git a/security/integrity/iint.c b/security/integrity/iint.c
index 0a23e075e1d2..399641c3e846 100644
--- a/security/integrity/iint.c
+++ b/security/integrity/iint.c
@@ -74,6 +74,7 @@ static void iint_free(struct integrity_iint_cache *iint)
 {
 	iint->version = 0;
 	iint->flags = 0UL;
+	iint->evm_status = INTEGRITY_UNKNOWN;
 	kmem_cache_free(iint_cache, iint);
 }