Tyler Hicks 263875d7b6 ima: Fail rule parsing when the KEY_CHECK hook is combined with an invalid cond ...

[ Upstream commit eb624fe214 ]

The KEY_CHECK function only supports the uid, pcr, and keyrings
conditionals. Make this clear at policy load so that IMA policy authors
don't assume that other conditionals are supported.

Fixes: 5808611ccc ("IMA: Add KEY_CHECK func to measure keys")
Signed-off-by: Tyler Hicks <tyhicks@linux.microsoft.com>
Reviewed-by: Lakshmi Ramasubramanian <nramas@linux.microsoft.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2020-08-19 08:26:37 +02:00

..

apparmor

Merge tag 'linux-kselftest-kunit-5.8-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/shuah/linux-kselftest

2020-06-09 10:04:47 -07:00

bpf

bpf: lsm: Initialize the BPF LSM hooks

2020-03-30 01:34:00 +02:00

integrity

ima: Fail rule parsing when the KEY_CHECK hook is combined with an invalid cond

2020-08-19 08:26:37 +02:00

keys

Merge tag 'notifications-20200601' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs

2020-06-13 09:56:21 -07:00

loadpin

proc/sysctl: add shared variables for range check

2019-07-18 17:08:07 -07:00

lockdown

Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security

2020-06-02 17:36:24 -07:00

safesetid

security/safesetid: Replace rcu_swap_protected() with rcu_replace_pointer()

2019-10-30 08:45:57 -07:00

selinux

Merge tag 'selinux-pr-20200621' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux

2020-06-21 15:41:24 -07:00

smack

Smack: fix use-after-free in smk_write_relabel_self()

2020-08-11 15:48:09 +02:00

tomoyo

treewide: replace '---help---' in Kconfig files with 'help'

2020-06-14 01:57:21 +09:00

yama

sysctl: pass kernel pointers to ->proc_handler

2020-04-27 02:07:40 -04:00

commoncap.c

exec: Compute file based creds only once

2020-05-29 22:00:54 -05:00

device_cgroup.c

device_cgroup: Cleanup cgroup eBPF device filter code

2020-04-13 14:41:54 -04:00

inode.c

Merge branch 'work.mount0' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2019-07-19 10:42:02 -07:00

Kconfig

bpf: lsm: Initialize the BPF LSM hooks

2020-03-30 01:34:00 +02:00

Kconfig.hardening

Merge tag 'meminit-v5.3-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux

2019-07-28 12:33:15 -07:00

lsm_audit.c

security,lockdown,selinux: implement SELinux lockdown

2019-12-09 17:53:58 -05:00

Makefile

device_cgroup: Cleanup cgroup eBPF device filter code

2020-04-13 14:41:54 -04:00

min_addr.c

sysctl: pass kernel pointers to ->proc_handler

2020-04-27 02:07:40 -04:00

security.c

security: Fix hook iteration and default value for inode_copy_up_xattr

2020-06-23 16:39:23 -07:00