linux-stable

mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2025-01-10 15:10:38 +00:00

History

Matt Bobrowski 62622dab0a ima: return IMA digest value only when IMA_COLLECTED flag is set

The IMA_COLLECTED flag indicates whether the IMA subsystem has
successfully collected a measurement for a given file object. Ensure
that we return the respective digest value stored within the iint
entry only when this flag has been set.

Failing to check for the presence of this flag exposes consumers of
this IMA API to receive potentially undesired IMA digest values when
an erroneous condition has been experienced in some of the lower level
IMA API code.

Signed-off-by: Matt Bobrowski <mattbobrowski@google.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>

2023-01-18 13:21:50 -05:00

evm

lsm/stable-6.2 PR 20221212

2022-12-13 09:47:48 -08:00

ima

ima: return IMA digest value only when IMA_COLLECTED flag is set

2023-01-18 13:21:50 -05:00

platform_certs

efi: Add iMac Pro 2017 to uefi skip cert quirk

2022-11-01 14:12:28 -04:00

digsig_asymmetric.c

ima: fix reference leak in asymmetric_verify()