]> git.baikalelectronics.ru Git - kernel.git/commit
ima: fix wrong signed policy requirement when not appraising
authorPetr Vorel <pvorel@suse.cz>
Wed, 15 May 2019 06:18:07 +0000 (08:18 +0200)
committerMimi Zohar <zohar@linux.ibm.com>
Mon, 20 May 2019 00:27:12 +0000 (20:27 -0400)
commit249bc42eb5505975f3509c6a60816a0b9f5d70a0
treee1ef8d96b511c5f9a8a94b53ee2290b4d5834c89
parent2caca9f1c71cbb51903ebf696f7af393eaae4411
ima: fix wrong signed policy requirement when not appraising

Kernel booted just with ima_policy=tcb (not with
ima_policy=appraise_tcb) shouldn't require signed policy.

Regression found with LTP test ima_policy.sh.

Fixes: f1c2e93cced6 ("ima: refactor ima_init_policy()")
Cc: stable@vger.kernel.org (linux-5.0)
Signed-off-by: Petr Vorel <pvorel@suse.cz>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
security/integrity/ima/ima_policy.c