lkml.org 
[lkml]   [2017]   [Apr]   [18]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    Patch in this message
    /
    From
    Subject[PATCH 4/6] ima: Log the same audit cause whenever a file has no signature
    Date
    If the file doesn't have an xattr, ima_appraise_measurement sets cause to
    "missing-hash" while if there's an xattr but it's a digest instead of a
    signature it sets cause to "IMA-signature-required".

    Fix it by setting cause to "IMA-signature-required" in both cases.

    Signed-off-by: Thiago Jung Bauermann <bauerman@linux.vnet.ibm.com>
    ---
    security/integrity/ima/ima_appraise.c | 3 ++-
    1 file changed, 2 insertions(+), 1 deletion(-)

    diff --git a/security/integrity/ima/ima_appraise.c b/security/integrity/ima/ima_appraise.c
    index 427a896bc806..8c8030a29117 100644
    --- a/security/integrity/ima/ima_appraise.c
    +++ b/security/integrity/ima/ima_appraise.c
    @@ -205,7 +205,8 @@ int ima_appraise_measurement(enum ima_hooks func,
    if (rc && rc != -ENODATA)
    goto out;

    - cause = "missing-hash";
    + cause = iint->flags & IMA_DIGSIG_REQUIRED ?
    + "IMA-signature-required" : "missing-hash";
    status = INTEGRITY_NOLABEL;
    if (opened & FILE_CREATED) {
    iint->flags |= IMA_NEW_FILE;
    --
    2.7.4
    \
     
     \ /
      Last update: 2017-04-18 22:21    [W:6.447 / U:0.080 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site