Coiby Xu 0ec959cf4b evm: fix security.evm for a file with IMA signature ...

When both IMA and EVM fix modes are enabled, accessing a file with IMA
signature but missing EVM HMAC won't cause security.evm to be fixed.

Add a function evm_fix_hmac which will be explicitly called to fix EVM
HMAC for this case.

Suggested-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Coiby Xu <coxu@redhat.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>

2026-03-05 11:39:39 -05:00

..

evm

evm: fix security.evm for a file with IMA signature

2026-03-05 11:39:39 -05:00

ima

evm: fix security.evm for a file with IMA signature

2026-03-05 11:39:39 -05:00

platform_certs

integrity: Make arch_ima_get_secureboot integrity-wide

2026-03-05 11:10:08 -05:00

digsig_asymmetric.c

pkcs7, x509: Rename ->digest to ->m

2026-01-30 11:33:08 +00:00

digsig.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

efi_secureboot.c

integrity: Make arch_ima_get_secureboot integrity-wide

2026-03-05 11:10:08 -05:00

iint.c

ima,evm: move initcalls to the LSM framework

2025-10-22 19:24:27 -04:00

integrity_audit.c

integrity: check the return value of audit_log_start()

2022-02-02 11:44:23 -05:00

integrity.h

integrity: Make arch_ima_get_secureboot integrity-wide

2026-03-05 11:10:08 -05:00

Kconfig

integrity: Select CRYPTO from INTEGRITY_ASYMMETRIC_KEYS

2025-10-03 07:50:56 -04:00

Makefile

integrity: Make arch_ima_get_secureboot integrity-wide

2026-03-05 11:10:08 -05:00

secure_boot.c

integrity: Make arch_ima_get_secureboot integrity-wide

2026-03-05 11:10:08 -05:00