Stefan Berger cf4570ca8e ima: Do not print policy rule with inactive LSM labels ... commit 89677197ae upstream. Before printing a policy rule scan for inactive LSM labels in the policy rule. Inactive LSM labels are identified by args_p != NULL and rule == NULL. Fixes: 483ec26eed ("ima: ima/lsm policy rule loading logic bug fixes") Signed-off-by: Stefan Berger <stefanb@linux.ibm.com> Cc: <stable@vger.kernel.org> # v5.6+ Acked-by: Christian Brauner <brauner@kernel.org> [zohar@linux.ibm.com: Updated "Fixes" tag] Signed-off-by: Mimi Zohar <zohar@linux.ibm.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2022-02-16 12:56:04 +01:00
..
apparmor	apparmor: fix error check	2021-11-18 19:16:58 +01:00
bpf
integrity	ima: Do not print policy rule with inactive LSM labels	2022-02-16 12:56:04 +01:00
keys	ucounts: Move get_ucounts from cred_alloc_blank to key_change_session_keyring	2021-10-20 10:34:20 -05:00
landlock	landlock: Enable user space to infer supported features	2021-04-22 12:22:11 -07:00
loadpin
lockdown
safesetid	LSM: SafeSetID: Mark safesetid_initialized as __initdata	2021-06-10 09:52:32 -07:00
selinux	selinux: fix double free of cond_list on error paths	2022-02-08 18:34:02 +01:00
smack	smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi	2021-11-18 19:16:39 +01:00
tomoyo	tomoyo: use hwight16() in tomoyo_domain_quota_is_ok()	2022-01-05 12:42:33 +01:00
yama
commoncap.c	Miscellaneous minor fixes for v5.13.	2021-04-27 19:32:55 -07:00
device_cgroup.c
inode.c
Kconfig	fortify: Explicitly disable Clang support	2021-11-21 13:44:13 +01:00
Kconfig.hardening	hardening: Clarify Kconfig text for auto-var-init	2021-07-20 23:02:59 -07:00
lsm_audit.c	audit: remove unnecessary 'ret' initialization	2021-06-11 13:21:28 -04:00
Makefile	security: remove unneeded subdir-$(CONFIG_...)	2021-09-03 08:17:20 +09:00
min_addr.c
security.c	binder: use cred instead of task for selinux checks	2021-11-12 15:05:48 +01:00