ima: change flags container data type

IMA audit hashes patches introduced new IMA flags and required
space went beyond 8 bits. Currently the only flag is IMA_DIGSIG.
This patch use 16 bit short instead of 8 bit char.
Without this fix IMA signature will be replaced with hash, which
should not happen.

Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@intel.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>

diff --git a/security/integrity/integrity.h b/security/integrity/integrity.h
index 403ba319a06a09e9a7653251ae742f0f450b39e4..e9db763a875e80f8fc4bd528974922d7e98ae97e 100644 (file)
--- a/security/integrity/integrity.h
+++ b/security/integrity/integrity.h
@@ -48,7 +48,7 @@ struct integrity_iint_cache {
        struct rb_node rb_node; /* rooted in integrity_iint_tree */
        struct inode *inode;    /* back pointer to inode in question */
        u64 version;            /* track inode changes */
-       unsigned char flags;
+       unsigned short flags;
        struct evm_ima_xattr_data ima_xattr;
        enum integrity_status ima_status;
        enum integrity_status evm_status;