• Linus Torvalds's avatar
    Merge tag 'integrity-v5.15' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity · aef4892a
    Linus Torvalds authored
    Pull integrity subsystem updates from Mimi Zohar:
    
     - Limit the allowed hash algorithms when writing security.ima xattrs or
       verifying them, based on the IMA policy and the configured hash
       algorithms.
    
     - Return the calculated "critical data" measurement hash and size to
       avoid code duplication. (Preparatory change for a proposed LSM.)
    
     - and a single patch to address a compiler warning.
    
    * tag 'integrity-v5.15' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity:
      IMA: reject unknown hash algorithms in ima_get_hash_algo
      IMA: prevent SETXATTR_CHECK policy rules with unavailable algorithms
      IMA: introduce a new policy option func=SETXATTR_CHECK
      IMA: add a policy option to restrict xattr hash algorithms on appraisal
      IMA: add support to restrict the hash algorithms used for file appraisal
      IMA: block writes of the security.ima xattr with unsupported algorithms
      IMA: remove the dependency on CRYPTO_MD5
      ima: Add digest and digest_len params to the functions to measure a buffer
      ima: Return int in the functions to measure a buffer
      ima: Introduce ima_get_current_hash_algo()
      IMA: remove -Wmissing-prototypes warning
    aef4892a
ima_main.c 30.2 KB