evm_inode_post_remove_acl(9)

💖 evm_inode_post_remove_acl(9) 💖

okay so bestie, we're in the Kernel API Manual today and this one is literally about keeping your EVM vibes immaculate after somebody rips a POSIX ACL off an inode. it's giving "cleanup crew but make it cryptography" 💅

---

✨ NAME ✨

evm_inode_post_remove_acl — Update the EVM extended attribute from posix acls

like, it refreshes the EVM xattr so it matches reality after a posix acl dips out 🎀

---

🦋 SYNOPSIS 🦋

void evm_inode_post_remove_acl (struct mnt_idmap *idmap , struct dentry
*dentry , const char *acl_name );

no cap, that's the whole signature. void return, so nothing comes back to you — it just does the thing 🫶

---

🌸 ARGUMENTS 🌸

• idmap — idmap of the mount. literally just which idmapping this mount is rolling with 🌈
• dentry — pointer to the affected dentry. this is the one that just had its acl removed, so keep your eyes on it 👀
• acl_name — name of the posix acl. which acl we're talking about, name-wise 💫

---

👑 DESCRIPTION 👑

Update the 'security.evm' xattr with the EVM HMAC re-calculated after removing posix acls.

that's it, that's the whole gig. the acl got removed, the old HMAC is now a liar, so this function recalculates it and tucks it back into 'security.evm' so the integrity check doesn't have a crisis 😭🔥 it's the post-removal glow-up, periodt.

---

🎀 SEE ALSO 🎀

• Kernel file ./security/integrity/evm/evm_main.c
• evm_read_protected_xattrs(9), evm_verifyxattr(9), evm_inode_setxattr(9), evm_inode_removexattr(9), evm_inode_set_acl(9), evm_inode_remove_acl(9), evm_metadata_changed(9), evm_revalidate_status(9), evm_fix_hmac(9), evm_inode_post_setxattr(9), evm_inode_post_set_acl(9), evm_inode_post_removexattr(9), evm_inode_setattr(9), evm_inode_post_setattr(9)

the whole evm friend group, fr fr — go read them if you're obsessed 🧚💜

---

ngl if you're touching this, you're probably already deep in security/integrity/evm and you know exactly why the HMAC has to be recomputed. slay. 🔥

---

and that's the page!! source path is ./security/integrity/evm and the date on this bad boy is October 2026 — so yeah, future vibes only ⭐💖 bye bestie, go keep those xattrs valid 💅✨