Mimi Zohar e40ba6d56b firmware: replace call to fw_read_file_contents() with kernel version ...

Replace the fw_read_file_contents with kernel_file_read_from_path().

Although none of the upstreamed LSMs define a kernel_fw_from_file hook,
IMA is called by the security function to prevent unsigned firmware from
being loaded and to measure/appraise signed firmware, based on policy.

Instead of reading the firmware twice, once for measuring/appraising the
firmware and again for reading the firmware contents into memory, the
kernel_post_read_file() security hook calculates the file hash based on
the in memory file buffer.  The firmware is read once.

This patch removes the LSM kernel_fw_from_file() hook and security call.

Changelog v4+:
- revert dropped buf->size assignment - reported by Sergey Senozhatsky
v3:
- remove kernel_fw_from_file hook
- use kernel_file_read_from_path() - requested by Luis
v2:
- reordered and squashed firmware patches
- fix MAX firmware size (Kees Cook)

Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Acked-by: Kees Cook <keescook@chromium.org>
Acked-by: Luis R. Rodriguez <mcgrof@kernel.org>

2016-02-21 09:03:44 -05:00

..

power

Merge branches 'pm-core' and 'pm-domains'

2016-02-06 00:34:01 +01:00

regmap

Merge remote-tracking branches 'regmap/topic/mmio', 'regmap/topic/rbtree' and 'regmap/topic/seq' into regmap-next

2016-01-05 19:07:18 +00:00

attribute_container.c

attribute_container: fix missing blank lines after declarations

2015-03-25 14:35:09 +01:00

base.h

PM / sleep: prohibit devices probing during suspend/hibernation

2015-11-30 14:47:22 +01:00

bus.c

driver-core: add asynchronous probing support for drivers

2015-05-20 00:25:24 -07:00

cacheinfo.c

cpu/cacheinfo: Fix teardown path

2015-09-17 06:06:54 -07:00

class.c

class_find_device: fix reference to argument "match"

2015-09-29 15:23:14 +02:00

component.c

component: add support for releasing match data

2015-12-07 00:02:05 +00:00

container.c

ACPI / hotplug / driver core: Handle containers in a special way

2013-12-29 15:25:48 +01:00

core.c

driver core: Do not overwrite secondary fwnode with NULL if it is set

2015-12-07 02:29:23 +01:00

cpu.c

drivers/base/cpu.c: use __cpu_*_mask directly

2016-01-20 17:09:18 -08:00

dd.c

driver core: Avoid NULL pointer dereferences in device_is_bound()

2016-01-12 01:51:44 +01:00

devcoredump.c

devcoredump: provide a one-way disable function

2014-11-26 19:40:12 -08:00

devres.c

devm: make allocations numa aware by default

2015-10-09 17:00:33 -04:00

devtmpfs.c

wrappers for ->i_mutex access

2016-01-22 18:04:28 -05:00

dma-coherent.c

drivers: dma-coherent: add initialization from device tree

2014-10-14 02:18:12 +02:00

dma-contiguous.c

driver core update for 4.4-rc1

2015-11-04 21:50:37 -08:00

dma-mapping.c

dma-mapping: remove <asm-generic/dma-coherent.h>

2016-01-20 17:09:18 -08:00

driver.c

driver core: add missing blank line after declaration

2015-03-25 14:36:30 +01:00

firmware_class.c

firmware: replace call to fw_read_file_contents() with kernel version

2016-02-21 09:03:44 -05:00

firmware.c

firmware: change firmware_kset to firmware_kobj

2008-01-24 20:40:23 -08:00

hypervisor.c

drivers/base: Add export.h for EXPORT_SYMBOL/THIS_MODULE as required.

2011-10-31 19:31:38 -04:00

init.c

drivers: of/base: move of_init to driver_init

2015-05-26 19:55:56 -07:00

isa.c

dma-mapping: replace all DMA_24BIT_MASK macro with DMA_BIT_MASK(24)

2009-04-07 08:31:12 -07:00

Kconfig

cma: make default CMA area size zero for x86

2014-12-10 17:41:06 -08:00

Makefile

drivers/base: Add MSI domain support for non-PCI devices

2015-07-30 00:14:38 +02:00

map.c

drivers: base: map: Use kmalloc_array instead of kmalloc

2015-03-25 14:35:08 +01:00

memory.c

mm: skip memory block registration for ZONE_DEVICE

2016-01-15 17:56:32 -08:00

module.c

driver core: module.c: Use kasprintf

2010-05-21 09:37:29 -07:00

node.c

Revert "mm: Check if section present during memory block (un)registering"

2015-10-13 10:57:25 -07:00

pinctrl.c

drivers/pinctrl: Add the concept of an "init" state

2015-10-27 11:24:23 +01:00

platform-msi.c

base: Export platform_msi_domain_[alloc,free]_irqs

2016-01-26 16:33:25 +01:00

platform.c

base/platform: Fix platform drivers with no probe callback

2016-01-26 08:47:25 -08:00

property.c

device property: avoid allocations of 0 length

2016-01-01 02:09:51 +01:00

soc.c

base: soc: siplify ida usage

2015-10-04 19:42:22 +01:00

syscore.c

genirq: Simplify wakeup mechanism

2014-09-01 13:48:59 +02:00

topology.c

sched/topology: Rename topology_thread_cpumask() to topology_sibling_cpumask()

2015-05-27 15:22:15 +02:00

transport_class.c

drivers/base: transport_class explicitly requires EXPORT_SYMBOL

2011-10-31 19:31:15 -04:00