evm: mark evm_fixmode as __ro_after_init

Austin Kim · mimizohar · commit 32ba540f3c2a · 2021-10-28T18:52:49.000-04:00
The evm_fixmode is only configurable by command-line option and it is never
modified outside initcalls, so declaring it with __ro_after_init is better.

Signed-off-by: Austin Kim &lt;austin.kim@lge.com&gt;
Cc: stable@vger.kernel.org
Signed-off-by: Mimi Zohar &lt;zohar@linux.ibm.com&gt;
diff --git a/security/integrity/evm/evm_main.c b/security/integrity/evm/evm_main.c
@@ -78,7 +78,7 @@ static struct xattr_list evm_config_default_xattrnames[] = {
 
 LIST_HEAD(evm_config_xattrnames);
 
-static int evm_fixmode;
+static int evm_fixmode __ro_after_init;
 static int __init evm_set_fixmode(char *str)
 {
 	if (strncmp(str, "fix", 3) == 0)

Original file line number	Diff line number	Diff line change
`@@ -78,7 +78,7 @@ static struct xattr_list evm_config_default_xattrnames[] = {`
`78`	`78`
`79`	`79`	`LIST_HEAD(evm_config_xattrnames);`
`80`	`80`
`81`		`-static int evm_fixmode;`
	`81`	`+static int evm_fixmode __ro_after_init;`
`82`	`82`	`static int __init evm_set_fixmode(char *str)`
`83`	`83`	`{`
`84`	`84`	`if (strncmp(str, "fix", 3) == 0)`