]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
ima: fix wrong signed policy requirement when not appraising
authorPetr Vorel <pvorel@suse.cz>
Wed, 15 May 2019 06:18:07 +0000 (08:18 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sun, 9 Jun 2019 07:16:14 +0000 (09:16 +0200)
commit407eb63f2aa4f1f9b0962df530f3aeec401d6e3e
treebbf4243484b6c9f83f422cd91418ca5f5e756ee4
parentc59e2a64128e30a16394b2fa09b7470c2e2f6f68
ima: fix wrong signed policy requirement when not appraising

commit f40019475bbbe9b455e7fd4385fcf13896c492ca upstream.

Kernel booted just with ima_policy=tcb (not with
ima_policy=appraise_tcb) shouldn't require signed policy.

Regression found with LTP test ima_policy.sh.

Fixes: c52657d93b05 ("ima: refactor ima_init_policy()")
Cc: stable@vger.kernel.org (linux-5.0)
Signed-off-by: Petr Vorel <pvorel@suse.cz>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
security/integrity/ima/ima_policy.c