Stefan Berger 8027ba480c ima: Do not print policy rule with inactive LSM labels ...

commit 89677197ae upstream.

Before printing a policy rule scan for inactive LSM labels in the policy
rule. Inactive LSM labels are identified by args_p != NULL and
rule == NULL.

Fixes: 483ec26eed ("ima: ima/lsm policy rule loading logic bug fixes")
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
Cc: <stable@vger.kernel.org> # v5.6+
Acked-by: Christian Brauner <brauner@kernel.org>
[zohar@linux.ibm.com: Updated "Fixes" tag]
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2022-02-16 12:54:16 +01:00

..

evm

evm: mark evm_fixmode as __ro_after_init

2021-11-18 14:03:46 +01:00

ima

ima: Do not print policy rule with inactive LSM labels

2022-02-16 12:54:16 +01:00

platform_certs

integrity: Load mokx variables into the blacklist keyring

2021-06-30 08:47:30 -04:00

digsig_asymmetric.c

Merge tag 'integrity-v5.10' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity

2020-10-15 15:58:18 -07:00

digsig.c

fs/kernel_file_read: Add "offset" arg for partial reads

2020-10-05 13:37:04 +02:00

iint.c

integrity: double check iint_cache was initialized

2021-03-30 14:31:55 +02:00

integrity_audit.c

integrity: check the return value of audit_log_start()

2022-02-16 12:54:16 +01:00

integrity.h

integrity: Add errno field in audit message

2020-07-16 21:48:11 -04:00

Kconfig

powerpc: Load firmware trusted keys/hashes into kernel keyring

2019-11-13 00:33:23 +11:00

Makefile

powerpc: Load firmware trusted keys/hashes into kernel keyring

2019-11-13 00:33:23 +11:00