evm_inode_post_setattr(9)

💅 evm_inode_post_setattr(9) 💅

okay so this is the Kernel API Manual entry for evm_inode_post_setattr, and it's literally the little post-metadata-change glow-up for 'security.evm'. bestie, it's giving “small function, important vibes” ✨

✨ NAME ✨

evm_inode_post_setattr — update 'security.evm' after modifying metadata 🎀

🌸 SYNOPSIS 🌸

void evm_inode_post_setattr (struct mnt_idmap *idmap , struct dentry
       *dentry , int ia_valid );

🦋 ARGUMENTS 🦋

• idmap — the idmap of the idmapped mount 💫
• dentry — pointer to the affected dentry 📌
• ia_valid — for the UID and GID status 👑

💖 DESCRIPTION 💖

For now, update the HMAC stored in 'security.evm' to reflect UID/GID changes. no cap, that's the whole assignment 💅

This function is called from notify_change, which expects the caller to lock the inode's i_mutex. so yeah, locking duty is on the caller — don't forget it, bestie 🫶

🌈 SEE ALSO 🌈

Kernel file ./security/integrity/evm/evm_main.c 👀

• evm_read_protected_xattrs(9)
• evm_verifyxattr(9)
• evm_inode_setxattr(9)
• evm_inode_removexattr(9)
• evm_inode_set_acl(9)
• evm_inode_remove_acl(9)
• evm_metadata_changed(9)
• evm_revalidate_status(9)
• evm_fix_hmac(9)
• evm_inode_post_setxattr(9)
• evm_inode_post_set_acl(9)
• evm_inode_post_removexattr(9)
• evm_inode_post_remove_acl(9)
• evm_inode_setattr(9)

bye bestie, this page’s source/version is ./security/integrity/evm, dated October 2026 💖✨