Mimi Zohar 5926586f29 ima: fix blocking of security.ima xattrs of unsupported algorithms ... Limit validating the hash algorithm to just security.ima xattr, not the security.evm xattr or any of the protected EVM security xattrs, nor posix acls. Fixes: 50f742dd91 ("IMA: block writes of the security.ima xattr with unsupported algorithms") Reported-by: Christian Brauner <brauner@kernel.org> Acked-by: Christian Brauner (Microsoft) <brauner@kernel.org> Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>		2022-08-23 10:42:02 -04:00
..
ima.h	IMA: introduce a new policy option func=SETXATTR_CHECK	2021-08-16 17:35:35 -04:00
ima_api.c	ima: permit fsverity's file digests in the IMA measurement list	2022-05-05 11:49:13 -04:00
ima_appraise.c	ima: fix blocking of security.ima xattrs of unsupported algorithms	2022-08-23 10:42:02 -04:00
ima_asymmetric_keys.c	ima: Add digest and digest_len params to the functions to measure a buffer	2021-07-23 09:27:02 -04:00
ima_crypto.c	ima: Fix potential memory leak in ima_init_crypto()	2022-07-13 10:13:58 -04:00
ima_efi.c	ima: force signature verification when CONFIG_KEXEC_SIG is configured	2022-07-13 10:13:41 -04:00
ima_fs.c	ima: Return error code obtained from securityfs functions	2022-02-15 11:17:01 -05:00
ima_init.c	ima: define ima_max_digest_data struct without a flexible array variable	2022-02-15 11:52:06 -05:00
ima_kexec.c	x86/kexec: Carry forward IMA measurement log on kexec	2022-07-01 15:22:16 +02:00
ima_main.c	ima: permit fsverity's file digests in the IMA measurement list	2022-05-05 11:49:13 -04:00
ima_modsig.c	ima: Move comprehensive rule validation checks out of the token parser	2020-07-20 13:28:15 -04:00
ima_mok.c	IMA: remove -Wmissing-prototypes warning	2021-07-23 08:05:06 -04:00
ima_policy.c	lockdown: Fix kexec lockdown bypass with ima policy	2022-07-20 09:56:48 -07:00
ima_queue.c	IMA: support for duplicate measurement records	2021-06-11 12:54:13 -04:00
ima_queue_keys.c	ima: Add digest and digest_len params to the functions to measure a buffer	2021-07-23 09:27:02 -04:00
ima_template.c	ima: define a new template field named 'd-ngv2' and templates	2022-05-05 11:49:13 -04:00
ima_template_lib.c	ima: fix violation measurement list record	2022-07-06 22:31:52 -04:00
ima_template_lib.h	ima: define a new template field named 'd-ngv2' and templates	2022-05-05 11:49:13 -04:00
Kconfig	ima: remove the IMA_TEMPLATE Kconfig option	2022-04-07 08:48:20 -04:00
Makefile	ima: generalize x86/EFI arch glue for other EFI architectures	2020-11-06 07:40:42 +01:00