Tyler Hicks 48ce1ddce1 ima: Fail rule parsing when asymmetric key measurement isn't supportable ... Measuring keys is currently only supported for asymmetric keys. In the future, this might change. For now, the "func=KEY_CHECK" and "keyrings=" options are only appropriate when CONFIG_IMA_MEASURE_ASYMMETRIC_KEYS is enabled. Make this clear at policy load so that IMA policy authors don't assume that these policy language constructs are supported. Fixes: 2b60c0eced ("IMA: Read keyrings= option from the IMA policy") Fixes: 5808611ccc ("IMA: Add KEY_CHECK func to measure keys") Suggested-by: Nayna Jain <nayna@linux.ibm.com> Signed-off-by: Tyler Hicks <tyhicks@linux.microsoft.com> Reviewed-by: Lakshmi Ramasubramanian <nramas@linux.microsoft.com> Reviewed-by: Nayna Jain <nayna@linux.ibm.com> Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>		2020-08-31 17:45:14 -04:00
..
ima_api.c	ima: Support additional conditionals in the KEXEC_CMDLINE hook function	2020-07-20 13:28:16 -04:00
ima_appraise.c	ima: move APPRAISE_BOOTPARAM dependency on ARCH_POLICY to runtime	2020-07-20 18:18:49 -04:00
ima_asymmetric_keys.c	ima: Support additional conditionals in the KEXEC_CMDLINE hook function	2020-07-20 13:28:16 -04:00
ima_crypto.c	ima: extend boot_aggregate with kernel measurements	2020-06-24 20:47:24 -04:00
ima_fs.c	integrity-v5.8	2020-06-06 09:39:05 -07:00
ima_init.c	ima: Call ima_calc_boot_aggregate() in ima_eventdigest_init()	2020-06-03 17:20:43 -04:00
ima_kexec.c	integrity: Remove duplicate pr_fmt definitions	2020-02-28 14:32:58 -05:00
ima_main.c	ima: Support additional conditionals in the KEXEC_CMDLINE hook function	2020-07-20 13:28:16 -04:00
ima_modsig.c	ima: Move comprehensive rule validation checks out of the token parser	2020-07-20 13:28:15 -04:00
ima_mok.c	Revert "Merge tag 'keys-acl-20190703' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs"	2019-07-10 18:43:43 -07:00
ima_policy.c	ima: Fail rule parsing when asymmetric key measurement isn't supportable	2020-08-31 17:45:14 -04:00
ima_queue_keys.c	ima: Support additional conditionals in the KEXEC_CMDLINE hook function	2020-07-20 13:28:16 -04:00
ima_queue.c	ima: Use ima_hash_algo for collision detection in the measurement list	2020-04-19 22:03:39 -04:00
ima_template_lib.c	Minor fixes for v5.9.	2020-08-11 14:30:36 -07:00
ima_template_lib.h	Replace HTTP links with HTTPS ones: security	2020-08-06 12:00:05 -07:00
ima_template.c	Minor fixes for v5.9.	2020-08-11 14:30:36 -07:00
ima.h	ima: Rename internal filter rule functions	2020-07-20 18:18:23 -04:00
Kconfig	Minor fixes for v5.9.	2020-08-11 14:30:36 -07:00
Makefile	IMA: Update KBUILD_MODNAME for IMA files to ima	2020-02-28 14:32:58 -05:00