linux-next

mirror of https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git synced 2025-01-17 13:58:46 +00:00

History

Roberto Sassu bb8e52e490 ima: Allow template selection with ima_template[_fmt]= after ima_hash=

Commit c2426d2ad5027 ("ima: added support for new kernel cmdline parameter
ima_template_fmt") introduced an additional check on the ima_template
variable to avoid multiple template selection.

Unfortunately, ima_template could be also set by the setup function of the
ima_hash= parameter, when it calls ima_template_desc_current(). This causes
attempts to choose a new template with ima_template= or with
ima_template_fmt=, after ima_hash=, to be ignored.

Achieve the goal of the commit mentioned with the new static variable
template_setup_done, so that template selection requests after ima_hash=
are not ignored.

Finally, call ima_init_template_list(), if not already done, to initialize
the list of templates before lookup_template_desc() is called.

Reported-by: Guo Zihua <guozihua@huawei.com>
Signed-off-by: Roberto Sassu <roberto.sassu@huawei.com>
Cc: stable@vger.kernel.org
Fixes: c2426d2ad5027 ("ima: added support for new kernel cmdline parameter ima_template_fmt")
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>

2022-02-02 11:59:54 -05:00

ima_api.c

ima: Use strscpy instead of strlcpy

2021-10-09 22:17:58 -04:00

ima_appraise.c

lsm: security_task_getsecid_subj() -> security_current_getsecid_subj()

2021-11-22 17:52:47 -05:00

ima_asymmetric_keys.c

ima: Add digest and digest_len params to the functions to measure a buffer

2021-07-23 09:27:02 -04:00

ima_crypto.c

ima/evm: Fix type mismatch