evm_inode_post_removexattr(9)
π evm_inode_post_removexattr(9) β the kernel API manual, but make it make sense π
okay so bestie, this is evm_inode_post_removexattr(9) from the Kernel API Manual, and it is literally the cleanup bestie of the xattr world. let me tell you everything, no cap π«Ά
β¨ NAME β¨
evm_inode_post_removexattr β update security.evm after removing the xattr
like, the whole entire job is: xattr got yeeted, now go fix up security.evm. that's it. that's the gig. π
πΈ SYNOPSIS πΈ
void evm_inode_post_removexattr (struct dentry *dentry , const char *xattr_name );
returns void, so no exit status to stress about, she just does the thing and leaves β¨
π ARGUMENTS π
dentryβ pointer to the affected dentry. yes, this is the one that got its xattr removed, keep up bestie π¦xattr_nameβ pointer to the affected extended attribute name. the name of the xattr that dipped π
π DESCRIPTION π
Update the HMAC stored in security.evm to reflect removal of the xattr. that's the whole vibe check β the HMAC is sitting there in security.evm thinking everything's fine, and this function is like "girl, the xattr is gone, let me update you" π«Ά
no need to take thei_mutexlock here, bestie β this function is called fromvfs_removexattr, which already takes thei_mutex. so it's lowkey already handled, do NOT go grabbing locks you don't need, that's not the move π
π SEE ALSO π
- Kernel file
./security/integrity/evm/evm_main.cβ the location, iykyk π evm_read_protected_xattrs(9)evm_verifyxattr(9)evm_inode_setxattr(9)evm_inode_removexattr(9)evm_inode_set_acl(9)evm_inode_remove_acl(9)evm_metadata_changed(9)evm_revalidate_status(9)evm_fix_hmac(9)evm_inode_post_setxattr(9)evm_inode_post_set_acl(9)evm_inode_post_remove_acl(9)evm_inode_setattr(9)evm_inode_post_setattr(9)
the whole friend group, fr fr π
okay that's the page!! it lives in ./security/integrity/evm, dated October 2026 β so like, future energy, main character timestamp. mwah, go read the source bestie πππ
π¦ where this page comes from
- nixpkgs unstable: linux-manual 7.3.1
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash-1017 on : a language model's rewrite of the original, under its terms