Mimi Zohar bc47fb2e1f ima: fix blocking of security.ima xattrs of unsupported algorithms ... [ Upstream commit 5926586f29 ] Limit validating the hash algorithm to just security.ima xattr, not the security.evm xattr or any of the protected EVM security xattrs, nor posix acls. Fixes: 50f742dd91 ("IMA: block writes of the security.ima xattr with unsupported algorithms") Reported-by: Christian Brauner <brauner@kernel.org> Acked-by: Christian Brauner (Microsoft) <brauner@kernel.org> Signed-off-by: Mimi Zohar <zohar@linux.ibm.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2022-10-21 12:37:58 +02:00
..
ima.h	IMA: introduce a new policy option func=SETXATTR_CHECK	2021-08-16 17:35:35 -04:00
ima_api.c	ima: permit fsverity's file digests in the IMA measurement list	2022-05-05 11:49:13 -04:00
ima_appraise.c	ima: fix blocking of security.ima xattrs of unsupported algorithms	2022-10-21 12:37:58 +02:00
ima_asymmetric_keys.c	ima: Add digest and digest_len params to the functions to measure a buffer	2021-07-23 09:27:02 -04:00
ima_crypto.c	ima: Fix potential memory leak in ima_init_crypto()	2022-07-13 10:13:58 -04:00
ima_efi.c	ima: force signature verification when CONFIG_KEXEC_SIG is configured	2022-07-13 10:13:41 -04:00
ima_fs.c	ima: Return error code obtained from securityfs functions	2022-02-15 11:17:01 -05:00
ima_init.c	ima: define ima_max_digest_data struct without a flexible array variable	2022-02-15 11:52:06 -05:00
ima_kexec.c	x86/kexec: Carry forward IMA measurement log on kexec	2022-07-01 15:22:16 +02:00
ima_main.c	ima: permit fsverity's file digests in the IMA measurement list	2022-05-05 11:49:13 -04:00
ima_modsig.c
ima_mok.c	IMA: remove -Wmissing-prototypes warning	2021-07-23 08:05:06 -04:00
ima_policy.c	lockdown: Fix kexec lockdown bypass with ima policy	2022-07-20 09:56:48 -07:00
ima_queue.c	IMA: support for duplicate measurement records	2021-06-11 12:54:13 -04:00
ima_queue_keys.c	ima: Add digest and digest_len params to the functions to measure a buffer	2021-07-23 09:27:02 -04:00
ima_template.c	ima: define a new template field named 'd-ngv2' and templates	2022-05-05 11:49:13 -04:00
ima_template_lib.c	ima: fix violation measurement list record	2022-07-06 22:31:52 -04:00
ima_template_lib.h	ima: define a new template field named 'd-ngv2' and templates	2022-05-05 11:49:13 -04:00
Kconfig	ima: remove the IMA_TEMPLATE Kconfig option	2022-04-07 08:48:20 -04:00
Makefile