On Tue, 2018-04-17 at 15:56 -0700, Matthew Garrett wrote:
> The kernel is taking security.apparmor into account when validating EVM,
> so evmctl should be doing the same.
>
> Signed-off-by: Matthew Garrett <mjg59@xxxxxxxxxx>
The XATTR_NAME_APPARMOR is dependent on the version of
"/usr/include/linux/xattr.h". Without it defined, evmctl fails to
build.
Mimi
> ---
> src/evmctl.c | 2 ++
> 1 file changed, 2 insertions(+)
>
> diff --git a/src/evmctl.c b/src/evmctl.c
> index 43d261f..e350f69 100644
> --- a/src/evmctl.c
> +++ b/src/evmctl.c
> @@ -69,6 +69,7 @@
> static char *evm_default_xattrs[] = {
> XATTR_NAME_SELINUX,
> XATTR_NAME_SMACK,
> + XATTR_NAME_APPARMOR,
> XATTR_NAME_IMA,
> XATTR_NAME_CAPS,
> NULL
> @@ -80,6 +81,7 @@ static char *evm_extra_smack_xattrs[] = {
> XATTR_NAME_SMACKEXEC,
> XATTR_NAME_SMACKTRANSMUTE,
> XATTR_NAME_SMACKMMAP,
> + XATTR_NAME_APPARMOR,
> XATTR_NAME_IMA,
> XATTR_NAME_CAPS,
> NULL
