On Mon, May 14, 2018 at 2:02 PM Mimi Zohar <zohar@xxxxxxxxxxxxxxxxxx> wrote: > The call to notify_change() calls security_inode_setattr(), which is > failing, because there is no security.evm xattr. It's failing with > -EPERM. Ah! Ok yes that would explain it. Let me figure out how to do this reasonably…