Mimi Zohar 10918ebecd ima: fix blocking of security.ima xattrs of unsupported algorithms ... [ Upstream commit 5926586f29 ] Limit validating the hash algorithm to just security.ima xattr, not the security.evm xattr or any of the protected EVM security xattrs, nor posix acls. Fixes: 50f742dd91 ("IMA: block writes of the security.ima xattr with unsupported algorithms") Reported-by: Christian Brauner <brauner@kernel.org> Acked-by: Christian Brauner (Microsoft) <brauner@kernel.org> Signed-off-by: Mimi Zohar <zohar@linux.ibm.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2022-10-26 12:34:35 +02:00
..
Kconfig	ima: remove the IMA_TEMPLATE Kconfig option	2022-06-09 10:23:25 +02:00
Makefile	ima: generalize x86/EFI arch glue for other EFI architectures	2020-11-06 07:40:42 +01:00
ima.h	IMA: introduce a new policy option func=SETXATTR_CHECK	2021-08-16 17:35:35 -04:00
ima_api.c	IMA: add support to restrict the hash algorithms used for file appraisal	2021-08-16 17:30:41 -04:00
ima_appraise.c	ima: fix blocking of security.ima xattrs of unsupported algorithms	2022-10-26 12:34:35 +02:00
ima_asymmetric_keys.c	ima: Add digest and digest_len params to the functions to measure a buffer	2021-07-23 09:27:02 -04:00
ima_crypto.c	ima: Fix potential memory leak in ima_init_crypto()	2022-07-21 21:24:29 +02:00
ima_efi.c	ima: force signature verification when CONFIG_KEXEC_SIG is configured	2022-07-21 21:24:29 +02:00
ima_fs.c	ima: Remove ima_policy file before directory	2022-02-16 12:56:03 +01:00
ima_init.c	ima: Add digest and digest_len params to the functions to measure a buffer	2021-07-23 09:27:02 -04:00
ima_kexec.c	ima: Fix warning: no previous prototype for function 'ima_add_kexec_buffer'	2021-06-11 11:27:03 -04:00
ima_main.c	integrity-v5.15	2021-09-02 12:51:41 -07:00
ima_modsig.c	ima: Move comprehensive rule validation checks out of the token parser	2020-07-20 13:28:15 -04:00
ima_mok.c	IMA: remove -Wmissing-prototypes warning	2021-07-23 08:05:06 -04:00
ima_policy.c	lockdown: Fix kexec lockdown bypass with ima policy	2022-07-29 17:25:05 +02:00
ima_queue.c	IMA: support for duplicate measurement records	2021-06-11 12:54:13 -04:00
ima_queue_keys.c	ima: Add digest and digest_len params to the functions to measure a buffer	2021-07-23 09:27:02 -04:00
ima_template.c	ima: Allow template selection with ima_template[_fmt]= after ima_hash=	2022-02-16 12:56:04 +01:00
ima_template_lib.c	ima: Fix fall-through warning for Clang	2021-06-08 23:33:48 -04:00
ima_template_lib.h	ima: Define new template fields xattrnames, xattrlengths and xattrvalues	2021-06-02 18:56:13 -04:00