ima: require secure_boot rules in lockdown mode
authorMimi Zohar <zohar@linux.vnet.ibm.com>
Mon, 18 Feb 2019 12:44:58 +0000 (12:44 +0000)
committerBen Hutchings <ben@decadent.org.uk>
Tue, 19 Nov 2019 01:43:33 +0000 (01:43 +0000)
commit6c2abf8f4baafc00ced2a6140b5ef9260359107a
tree5c1326aa8639fa44416f3ecef5eb1318a5fdb51e
parent3a4bf9bd06589a5e6c8b793fc09a8666cb70aec7
ima: require secure_boot rules in lockdown mode

Require the "secure_boot" rules, whether or not it is specified
on the boot command line, for both the builtin and custom policies
in secure boot lockdown mode.

Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Gbp-Pq: Topic features/all/lockdown
Gbp-Pq: Name 0003-ima-require-secure_boot-rules-in-lockdown-mode.patch
security/integrity/ima/ima_policy.c