Petr Vorel f40019475b ima: fix wrong signed policy requirement when not appraising ...

Kernel booted just with ima_policy=tcb (not with
ima_policy=appraise_tcb) shouldn't require signed policy.

Regression found with LTP test ima_policy.sh.

Fixes: c52657d93b ("ima: refactor ima_init_policy()")
Cc: stable@vger.kernel.org  (linux-5.0)
Signed-off-by: Petr Vorel <pvorel@suse.cz>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>

2019-05-19 20:27:12 -04:00

..

apparmor

Merge branch 'work.icache' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2019-05-07 10:57:05 -07:00

integrity

ima: fix wrong signed policy requirement when not appraising

2019-05-19 20:27:12 -04:00

keys

Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security

2019-05-07 08:39:54 -07:00

loadpin

LoadPin: Initialize as ordered LSM

2019-01-08 13:18:43 -08:00

safesetid

LSM: fix return value check in safesetid_init_securityfs()

2019-02-12 10:59:22 -08:00

selinux

Revert "selinux: do not report error on connect(AF_UNSPEC)"

2019-05-10 09:34:31 -07:00

smack

Smack: Fix kbuild reported build error

2019-04-30 14:13:32 -07:00

tomoyo

tomoyo: Don't emit WARNING: string while fuzzing testing.

2019-05-10 14:58:35 -07:00

yama

Yama: mark function as static

2019-04-10 10:36:45 -07:00

commoncap.c

Merge tag 'audit-pr-20190305' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit

2019-03-07 12:20:11 -08:00

device_cgroup.c

device_cgroup: fix RCU imbalance in error case

2019-03-19 10:46:15 -07:00

inode.c

securityfs: switch to ->free_inode()

2019-05-01 22:43:26 -04:00

Kconfig

Merge tag 'meminit-v5.2-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux

2019-05-07 12:44:49 -07:00

Kconfig.hardening

security: Implement Clang's stack initialization

2019-04-24 14:00:56 -07:00

lsm_audit.c

missing barriers in some of unix_sock ->addr and ->path accesses

2019-02-20 20:06:28 -08:00

Makefile

LSM: add SafeSetID module that gates setid calls

2019-01-25 11:22:45 -08:00

min_addr.c

…

security.c

Merge branch 'work.mount-syscalls' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2019-05-07 20:17:51 -07:00