forked from ~ljy/RK356X_SDK_RELEASE
kernel/Documentation/ABI/testing/evm
.. .. @@ -17,26 +17,33 @@ 17 17 echoing a value to <securityfs>/evm made up of the 18 18 following bits: 19 19 20 20 21 Bit Effect 22 21 23 0 Enable HMAC validation and creation 22 24 1 Enable digital signature validation 23 25 2 Permit modification of EVM-protected metadata at 24 26 runtime. Not supported if HMAC validation and 25 27 creation is enabled. 26 28 31 Disable further runtime modification of EVM policy 29 27 30 28 31 29 32 30 33 31 34 32 35 will enable HMAC validation and creation 33 36 34 37 38 39 35 40 36 41 will enable HMAC and digital signature validation and 37 42 HMAC creation and disable all further modification of policy. 38 43 39 44 45 46 40 47 41 48 will enable digital signature validation, permit 42 49 modification of EVM-protected metadata and .. .. @@ -87,7 +94,7 @@ 87 94 Shows the set of extended attributes used to calculate or 88 95 validate the EVM signature, and allows additional attributes 89 96 to be added at runtime. Any signatures generated after 90 97 91 98 additional attributes) will only be valid if the same 92 99 additional attributes are configured on system boot. Writing 93 100 a single period (.) will lock the xattr list from any further
