No description
Find a file
Thiago Jung Bauermann e5092255bb ima: Store the measurement again when appraising a modsig
If the IMA template contains the "modsig" or "d-modsig" field, then the
modsig should be added to the measurement list when the file is appraised.

And that is what normally happens, but if a measurement rule caused a file
containing a modsig to be measured before a different rule causes it to be
appraised, the resulting measurement entry will not contain the modsig
because it is only fetched during appraisal. When the appraisal rule
triggers, it won't store a new measurement containing the modsig because
the file was already measured.

We need to detect that situation and store an additional measurement with
the modsig. This is done by adding an IMA_MEASURE action flag if we read a
modsig and the IMA template contains a modsig field.

Suggested-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Thiago Jung Bauermann <bauerman@linux.ibm.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
2019-08-05 18:40:26 -04:00
arch MODSIGN: Export module signature definitions 2019-08-05 18:39:56 -04:00
block
certs PKCS#7: Refactor verify_pkcs7_signature() 2019-08-05 18:40:18 -04:00
crypto PKCS#7: Introduce pkcs7_get_digest() 2019-08-05 18:40:19 -04:00
Documentation ima: Define ima-modsig template 2019-08-05 18:40:25 -04:00
drivers Char/Misc driver fixes for 5.3-rc2 2019-07-28 10:26:10 -07:00
fs SPDX fixes for 5.3-rc2 2019-07-28 10:00:06 -07:00
include PKCS#7: Introduce pkcs7_get_digest() 2019-08-05 18:40:19 -04:00
init MODSIGN: Export module signature definitions 2019-08-05 18:39:56 -04:00
ipc
kernel MODSIGN: Export module signature definitions 2019-08-05 18:39:56 -04:00
lib
LICENSES
mm
net
samples
scripts MODSIGN: Export module signature definitions 2019-08-05 18:39:56 -04:00
security ima: Store the measurement again when appraising a modsig 2019-08-05 18:40:26 -04:00
sound
tools Merge branch 'perf-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip 2019-07-27 21:17:56 -07:00
usr
virt
.clang-format
.cocciconfig
.get_maintainer.ignore
.gitattributes
.gitignore .gitignore: Add compilation database file 2019-07-27 12:18:19 +09:00
.mailmap
COPYING
CREDITS
Kbuild
Kconfig
MAINTAINERS Char/Misc driver fixes for 5.3-rc2 2019-07-28 10:26:10 -07:00
Makefile Linux 5.3-rc2 2019-07-28 12:47:02 -07:00
README

Linux kernel
============

There are several guides for kernel developers and users. These guides can
be rendered in a number of formats, like HTML and PDF. Please read
Documentation/admin-guide/README.rst first.

In order to build the documentation, use ``make htmldocs`` or
``make pdfdocs``.  The formatted documentation can also be read online at:

    https://www.kernel.org/doc/html/latest/

There are various text files in the Documentation/ subdirectory,
several of them using the Restructured Text markup notation.

Please read the Documentation/process/changes.rst file, as it contains the
requirements for building and running the kernel, and information about
the problems which may result by upgrading your kernel.