projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: cdf9376) | patch
ima: require secure_boot rules in lockdown mode
authorMimi Zohar <zohar@linux.vnet.ibm.com>
Wed, 8 Nov 2017 15:11:32 +0000 (15:11 +0000)
committerBastian Blank <waldi@debian.org>
Mon, 13 Aug 2018 13:33:58 +0000 (14:33 +0100)
commitbdfdb610764579aca5cda6971d5167bd9eff92ce
tree5fe6e07ee17cadc2e28cbef942e9b623a57445f7tree | snapshot
parentcdf9376b6b1ec01a75633514d2beb9295713a5e0commit | diff
ima: require secure_boot rules in lockdown mode

Require the "secure_boot" rules, whether or not it is specified
on the boot command line, for both the builtin and custom policies
in secure boot lockdown mode.

Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Gbp-Pq: Topic features/all/lockdown
Gbp-Pq: Name 0003-ima-require-secure_boot-rules-in-lockdown-mode.patch
security/integrity/ima/ima_policy.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.