diff options
| author | Eric Richter <erichte@linux.vnet.ibm.com> | 2016-06-01 20:14:02 +0200 |
|---|---|---|
| committer | Mimi Zohar <zohar@linux.vnet.ibm.com> | 2016-06-30 07:14:20 +0200 |
| commit | 725de7fabb9fe4ca388c780ad4644352f2f06ccc (patch) | |
| tree | ae95889e652b85b4fa1801bd13a5a37b03f7874c /security/integrity/ima/ima_appraise.c | |
| parent | ima: add policy support for extending different pcrs (diff) | |
| download | linux-725de7fabb9fe4ca388c780ad4644352f2f06ccc.tar.xz linux-725de7fabb9fe4ca388c780ad4644352f2f06ccc.zip | |
ima: extend ima_get_action() to return the policy pcr
Different policy rules may extend different PCRs. This patch retrieves
the specific PCR for the matched rule. Subsequent patches will include
the rule specific PCR in the measurement list and extend the appropriate
PCR.
Signed-off-by: Eric Richter <erichte@linux.vnet.ibm.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Diffstat (limited to 'security/integrity/ima/ima_appraise.c')
| -rw-r--r-- | security/integrity/ima/ima_appraise.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/security/integrity/ima/ima_appraise.c b/security/integrity/ima/ima_appraise.c index 1bcbc12e03d9..fe8e92360d77 100644 --- a/security/integrity/ima/ima_appraise.c +++ b/security/integrity/ima/ima_appraise.c @@ -41,7 +41,7 @@ int ima_must_appraise(struct inode *inode, int mask, enum ima_hooks func) if (!ima_appraise) return 0; - return ima_match_policy(inode, func, mask, IMA_APPRAISE); + return ima_match_policy(inode, func, mask, IMA_APPRAISE, NULL); } static int ima_fix_xattr(struct dentry *dentry, |