• Linus Torvalds's avatar
    Merge tag 'integrity-v5.10' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity · 840e5bb3
    Linus Torvalds authored
    Pull integrity updates from Mimi Zohar:
     "Continuing IMA policy rule cleanup and validation in particular for
      measuring keys, adding/removing/updating informational and error
      messages (e.g. "ima_appraise" boot command line option), and other bug
      fixes (e.g. minimal data size validation before use, return code and
      NULL pointer checking)"
    
    * tag 'integrity-v5.10' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity:
      ima: Fix NULL pointer dereference in ima_file_hash
      evm: Check size of security.evm before using it
      ima: Remove semicolon at the end of ima_get_binary_runtime_size()
      ima: Don't ignore errors from crypto_shash_update()
      ima: Use kmemdup rather than kmalloc+memcpy
      integrity: include keyring name for unknown key request
      ima: limit secure boot feedback scope for appraise
      integrity: invalid kernel parameters feedback
      ima: add check for enforced appraise option
      integrity: Use current_uid() in integrity_audit_message()
      ima: Fail rule parsing when asymmetric key measurement isn't supportable
      ima: Pre-parse the list of keyrings in a KEY_CHECK rule
    840e5bb3
ima_policy.c 48.4 KB