IMA: Check IMA policy flag

Browse source

[ Upstream commit c5563bad88 ]

process_buffer_measurement() may be called prior to IMA being
initialized (for instance, when the IMA hook is called when
a key is added to the .builtin_trusted_keys keyring), which
would result in a kernel panic.

This patch adds the check in process_buffer_measurement()
to return immediately if IMA is not initialized yet.

Signed-off-by: Lakshmi Ramasubramanian <nramas@linux.microsoft.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

...

This commit is contained in:

Lakshmi Ramasubramanian 2019-12-11 08:47:02 -08:00 • committed by Greg Kroah-Hartman

parent 3f3cc843b2

commit 487c47c6dd

1 changed files with 3 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

3

security/integrity/ima/ima_main.c

View file