evm_inode_post_set_acl(9)

💅 evm_inode_post_set_acl(9) — from the Kernel API Manual, bestie

okay so picture this: you're deep in the kernel, you just touched some posix acls, and now the EVM vibes are ✨off✨. this little function is the cleanup crew. she's giving "post-game refresh," and honestly? iconic.

---

🌸 NAME 🌸

evm_inode_post_set_acl — the one where we update the EVM extended attribute from posix acls 🫶

---

✨ SYNOPSIS ✨

void evm_inode_post_set_acl (struct dentry *dentry , const char
       *acl_name , struct posix_acl *kacl );

like yes, she's void, she returns nothing, she does her job and leaves. main character energy fr fr 🔥

---

🎀 ARGUMENTS 🎀

• dentry — pointer to the affected dentry. the actual file/dir that's going through it rn, ngl she's the one we care about 💖
• acl_name — name of the posix acl. just so we know which acl we're talking about, yk?
• kacl — pointer to the posix acls. the acl data itself, arriving at the function like "hi bestie i'm here" 🦋

---

💜 DESCRIPTION 💜

okay so here's the tea: this function updates the security.evm xattr with the EVM HMAC — and yes, that HMAC gets re-calculated after setting the posix acls. so basically the acls change, and the crypto fingerprint has to be redone to match. no cap, that's the whole vibe. ✨

---

👑 SEE ALSO 👑

• the kernel file itself, like go read the source bestie: ./security/integrity/evm/evm_main.c
• evm_read_protected_xattrs(9)
• evm_verifyxattr(9)
• evm_inode_setxattr(9)
• evm_inode_removexattr(9)
• evm_inode_set_acl(9)
• evm_inode_remove_acl(9)
• evm_metadata_changed(9)
• evm_revalidate_status(9)
• evm_fix_hmac(9)
• evm_inode_post_setxattr(9)
• evm_inode_post_removexattr(9)
• evm_inode_post_remove_acl(9)
• evm_inode_setattr(9)
• evm_inode_post_setattr(9)

the whole friend group honestly, they all show up together 💀💖

---

aaaand that's the page!! brought to you by ./security/integrity/evm, dated October 2026, and yeah — she's still evm_inode_post_set_acl(9). slay, bye 🧚⭐