Stefan Berger 89677197ae ima: Do not print policy rule with inactive LSM labels ...

Before printing a policy rule scan for inactive LSM labels in the policy
rule. Inactive LSM labels are identified by args_p != NULL and
rule == NULL.

Fixes: 483ec26eed ("ima: ima/lsm policy rule loading logic bug fixes")
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
Cc: <stable@vger.kernel.org> # v5.6+
Acked-by: Christian Brauner <brauner@kernel.org>
[zohar@linux.ibm.com: Updated "Fixes" tag]
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>

2022-02-02 11:59:54 -05:00

..

evm

evm: mark evm_fixmode as __ro_after_init

2021-10-28 18:52:49 -04:00

ima

ima: Do not print policy rule with inactive LSM labels

2022-02-02 11:59:54 -05:00

platform_certs

integrity: Do not load MOK and MOKx when secure boot be disabled

2021-12-24 10:25:24 -05:00

digsig_asymmetric.c

ima: fix reference leak in asymmetric_verify()

2022-01-24 18:37:36 -05:00

digsig.c

ima: enable loading of build time generated key on .ima keyring

2021-04-09 10:40:20 -04:00

iint.c

evm: Load EVM key in ima_load_x509() to avoid appraisal

2021-05-21 12:47:04 -04:00

integrity_audit.c

integrity: check the return value of audit_log_start()

2022-02-02 11:44:23 -05:00

integrity.h

crypto: sha - split sha.h into sha1.h and sha2.h

2020-11-20 14:45:33 +11:00

Kconfig

powerpc: Load firmware trusted keys/hashes into kernel keyring

2019-11-13 00:33:23 +11:00

Makefile

powerpc: Load firmware trusted keys/hashes into kernel keyring

2019-11-13 00:33:23 +11:00