Stefan Berger 8027ba480c ima: Do not print policy rule with inactive LSM labels ... commit 89677197ae709eb1ab3646952c44f6a171c9e74c upstream. Before printing a policy rule scan for inactive LSM labels in the policy rule. Inactive LSM labels are identified by args_p != NULL and rule == NULL. Fixes: 483ec26eed ("ima: ima/lsm policy rule loading logic bug fixes") Signed-off-by: Stefan Berger <stefanb@linux.ibm.com> Cc: <stable@vger.kernel.org> # v5.6+ Acked-by: Christian Brauner <brauner@kernel.org> [zohar@linux.ibm.com: Updated "Fixes" tag] Signed-off-by: Mimi Zohar <zohar@linux.ibm.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2022-02-16 12:54:16 +01:00
..
evm	evm: mark evm_fixmode as __ro_after_init	2021-11-18 14:03:46 +01:00
ima	ima: Do not print policy rule with inactive LSM labels	2022-02-16 12:54:16 +01:00
platform_certs	integrity: Load mokx variables into the blacklist keyring	2021-06-30 08:47:30 -04:00
digsig_asymmetric.c	integrity-v5.10	2020-10-15 15:58:18 -07:00
digsig.c	fs/kernel_file_read: Add "offset" arg for partial reads	2020-10-05 13:37:04 +02:00
iint.c	integrity: double check iint_cache was initialized	2021-03-30 14:31:55 +02:00
integrity_audit.c	integrity: check the return value of audit_log_start()	2022-02-16 12:54:16 +01:00
integrity.h
Kconfig
Makefile