diff options
| author | Tushar Sugandhi <tusharsu@linux.microsoft.com> | 2021-01-07 20:07:02 -0800 |
|---|---|---|
| committer | Mimi Zohar <zohar@linux.ibm.com> | 2021-01-14 23:41:23 -0500 |
| commit | 291af651b350817f7f1cbe308faaf7fa7af2a92c (patch) | |
| tree | 4172c749579e27e6dc99b1da9da336ef898cfb42 /security/integrity/ima/ima_appraise.c | |
| parent | 2b4a2474a2027eb683bc421eff286fc617ce1d82 (diff) | |
IMA: add support to measure buffer data hash
The original IMA buffer data measurement sizes were small (e.g. boot
command line), but the new buffer data measurement use cases have data
sizes that are a lot larger. Just as IMA measures the file data hash,
not the file data, IMA should similarly support the option for measuring
buffer data hash.
Introduce a boolean parameter to support measuring buffer data hash,
which would be much smaller, instead of the buffer itself.
Signed-off-by: Tushar Sugandhi <tusharsu@linux.microsoft.com>
Reviewed-by: Tyler Hicks <tyhicks@linux.microsoft.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
Diffstat (limited to 'security/integrity/ima/ima_appraise.c')
| -rw-r--r-- | security/integrity/ima/ima_appraise.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/security/integrity/ima/ima_appraise.c b/security/integrity/ima/ima_appraise.c index 8361941ee0a1..46ffa38bab12 100644 --- a/security/integrity/ima/ima_appraise.c +++ b/security/integrity/ima/ima_appraise.c @@ -352,7 +352,7 @@ int ima_check_blacklist(struct integrity_iint_cache *iint, if ((rc == -EPERM) && (iint->flags & IMA_MEASURE)) process_buffer_measurement(NULL, digest, digestsize, "blacklisted-hash", NONE, - pcr, NULL); + pcr, NULL, false); } return rc; |