summaryrefslogtreecommitdiff
path: root/init
diff options
context:
space:
mode:
authorRoberto Sassu <roberto.sassu@polito.it>2013-06-07 14:16:39 +0400
committerMimi Zohar <zohar@linux.vnet.ibm.com>2013-10-27 05:32:53 +0400
commitadd1c05dceb495a45036d66cdcbb3b2306de26c1 (patch)
treeb432080d2151c60c3ce7d07f68336113befa096d /init
parent5278aa52f35003ddafda80b0243b3693f935b134 (diff)
downloadlinux-add1c05dceb495a45036d66cdcbb3b2306de26c1.tar.xz
ima: defer determining the appraisal hash algorithm for 'ima' template
The same hash algorithm should be used for calculating the file data hash for the IMA measurement list, as for appraising the file data integrity. (The appraise hash algorithm is stored in the 'security.ima' extended attribute.) The exception is when the reference file data hash digest, stored in the extended attribute, is larger than the one supported by the template. In this case, the file data hash needs to be calculated twice, once for the measurement list and, again, for appraisal. Signed-off-by: Roberto Sassu <roberto.sassu@polito.it> Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Diffstat (limited to 'init')
0 files changed, 0 insertions, 0 deletions