linux

mirror of https://github.com/raspberrypi/linux.git synced 2025-12-27 12:32:50 +00:00

Files

Tyler Hicks ed276b462f ima: Fail rule parsing when appraise_flag=blacklist is unsupportable

[ Upstream commit 5f3e92657b ]

Verifying that a file hash is not blacklisted is currently only
supported for files with appended signatures (modsig).  In the future,
this might change.

For now, the "appraise_flag" option is only appropriate for appraise
actions and its "blacklist" value is only appropriate when
CONFIG_IMA_APPRAISE_MODSIG is enabled and "appraise_flag=blacklist" is
only appropriate when "appraise_type=imasig|modsig" is also present.
Make this clear at policy load so that IMA policy authors don't assume
that other uses of "appraise_flag=blacklist" are supported.

Fixes: 273df864cf ("ima: Check against blacklisted hashes for files with modsig")
Signed-off-by: Tyler Hicks <tyhicks@linux.microsoft.com>
Reivewed-by: Nayna Jain <nayna@linux.ibm.com>
Tested-by: Nayna Jain <nayna@linux.ibm.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2020-08-21 13:15:09 +02:00

apparmor

Merge tag 'linux-kselftest-kunit-5.8-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/shuah/linux-kselftest

2020-06-09 10:04:47 -07:00

bpf

bpf: lsm: Initialize the BPF LSM hooks

2020-03-30 01:34:00 +02:00

integrity

ima: Fail rule parsing when appraise_flag=blacklist is unsupportable

2020-08-21 13:15:09 +02:00

keys

Merge tag 'notifications-20200601' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs