diff options
| author |   Lakshmi Ramasubramanian <nramas@linux.microsoft.com> | 2020-01-22 17:32:05 -0800 |
|---|---|---|
| committer |   Mimi Zohar <zohar@linux.ibm.com> | 2020-01-23 07:35:25 -0500 |
| commit | 450d0fd515648dcd90a9940b498f9913ed69566b (patch) | |
| tree | 018516d9456856ed5e5e35f58443cbe1158fdf48 /security/integrity/ima/ima_policy.c | |
| parent | IMA: Define workqueue for early boot key measurements (diff) | |
| download | linux-dev-450d0fd515648dcd90a9940b498f9913ed69566b.tar.xz linux-dev-450d0fd515648dcd90a9940b498f9913ed69566b.zip | |
IMA: Call workqueue functions to measure queued keys
Measuring keys requires a custom IMA policy to be loaded. Keys should
be queued for measurement if a custom IMA policy is not yet loaded.
Keys queued for measurement, if any, should be processed when a custom
policy is loaded.
This patch updates the IMA hook function ima_post_key_create_or_update()
to queue the key if a custom IMA policy has not yet been loaded. And,
ima_update_policy() function, which is called when a custom IMA policy
is loaded, is updated to process queued keys.
Signed-off-by: Lakshmi Ramasubramanian <nramas@linux.microsoft.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
Diffstat (limited to 'security/integrity/ima/ima_policy.c')
| -rw-r--r-- | security/integrity/ima/ima_policy.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/security/integrity/ima/ima_policy.c b/security/integrity/ima/ima_policy.c index b560a3ffeabb..f45ae380e966 100644 --- a/security/integrity/ima/ima_policy.c +++ b/security/integrity/ima/ima_policy.c @@ -809,6 +809,9 @@ void ima_update_policy(void) kfree(arch_policy_entry); } ima_update_policy_flag(); + + /* Custom IMA policy has been loaded */ + ima_process_queued_keys(); } /* Keep the enumeration in sync with the policy_tokens! */ |