Merge branch 'ima-buffer-measurement-changes-v4' into next-integrity

Browse source

Based on cover letter "ima: Provide more info about buffer measurement":

Providing more information about buffer measurements requires
modification of the existing functions ima_measure_critical_data()
and process_buffer_measurement().  Unlike for file measurements,
there is no integrity_iint_cache structure for storing and retrieving
buffer measurements.

With these changes, kernel subsystems relying on IMA to measure
critical data don't have to duplicate the function to calculate the
buffer digest but, instead, can get directly the one that IMA would
insert, depending on the policy, in the new measurement list entry.

...

This commit is contained in:

Mimi Zohar 2021-07-23 09:39:52 -04:00

parent a32ad90426 ca3c9bdb10

commit e37be5343a

8 changed files with 79 additions and 38 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

23

include/linux/ima.h

View file

10

security/integrity/ima/ima.h

View file

2

security/integrity/ima/ima_appraise.c

View file

2

security/integrity/ima/ima_asymmetric_keys.c

View file

3

security/integrity/ima/ima_init.c

View file

69

security/integrity/ima/ima_main.c

View file

2

security/integrity/ima/ima_queue_keys.c

View file

6

security/selinux/ima.c

View file