evm_metadata_changed(9)
π evm_metadata_changed(9) β from the Kernel API Manual, bestie
okay so picture this: you're deep in the <pink>Kernel API Manual</pink> (yes that's the manual name, we're fancy now π) and you stumble on this little icon. Let me tell you everything about it, no gatekeeping, periodt.
β¨ NAME β¨
evm_metadata_changed β literally just detects changes to the metadata. That's the whole gig. She's a vibe check for metadata fr fr π₯
π¦ SYNOPSIS π¦
bool evm_metadata_changed (struct inode *inode , struct inode
*metadata_inode );
like, copy it exactly how it's written, don't come for me about the spacing, that's canon π
πΈ ARGUMENTS πΈ
inodeβ a file's inode. you know, the little main character that represents the file itself π«Άmetadata_inodeβ the metadata inode. her whole job is metadata energy π
π DESCRIPTION π
Okay so on a <purple>stacked filesystem</purple> (yes, stacked, not a regular one, pay attention bestie β¨) this function detects whether the metadata has changed.
And if that's the case β like, if the metadata did change β it resets the evm_status associated with the inode that represents the file. Boom. That's it. That's the function. Simple, iconic, does exactly what it says on the tin π
No cap, that's the entire description. She's efficient.
π§ SEE ALSO π§
Kernel file ./security/integrity/evm/evm_main.c β literally where she lives π
And a whole friend group of related functions, all of them getting their moment:
evm_read_protected_xattrs(9)evm_verifyxattr(9)evm_inode_setxattr(9)evm_inode_removexattr(9)evm_inode_set_acl(9)evm_inode_remove_acl(9)evm_revalidate_status(9)evm_fix_hmac(9)evm_inode_post_setxattr(9)evm_inode_post_set_acl(9)evm_inode_post_removexattr(9)evm_inode_post_remove_acl(9)evm_inode_setattr(9)evm_inode_post_setattr(9)
go read them, they're all slaying in their own way π
aaaand that's the page!! π sign-off time: this iconic little entry comes to you from ./security/integrity/evm, dated <rainbow>October 2026</rainbow> β write that down, it's vintage πβ¨π
π¦ where this page comes from
- nixpkgs unstable: linux-manual 7.3.1
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash-1017 on : a language model's rewrite of the original, under its terms