tree b3b8253420850eb54927da9f68e41d9ad074ac6f
parent 0e04c641b199435f3779454055f6a7de258ecdfc
author Mimi Zohar <zohar@linux.vnet.ibm.com> 1395113058 -0400
committer Mimi Zohar <zohar@linux.vnet.ibm.com> 1402610285 -0400

ima: prevent new digsig xattr from being replaced

Even though a new xattr will only be appraised on the next access,
set the DIGSIG flag to prevent a signature from being replaced with
a hash on file close.

Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>