ima: fix wrong signed policy requirement when not appraising
authorPetr Vorel <pvorel@suse.cz>
Wed, 15 May 2019 06:18:07 +0000 (08:18 +0200)
committerMimi Zohar <zohar@linux.ibm.com>
Mon, 20 May 2019 00:27:12 +0000 (20:27 -0400)
commitf40019475bbbe9b455e7fd4385fcf13896c492ca
treee1ef8d96b511c5f9a8a94b53ee2290b4d5834c89
parent558b523d46289f111d53d7c42211069063be5985
ima: fix wrong signed policy requirement when not appraising

Kernel booted just with ima_policy=tcb (not with
ima_policy=appraise_tcb) shouldn't require signed policy.

Regression found with LTP test ima_policy.sh.

Fixes: c52657d93b05 ("ima: refactor ima_init_policy()")
Cc: stable@vger.kernel.org (linux-5.0)
Signed-off-by: Petr Vorel <pvorel@suse.cz>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
security/integrity/ima/ima_policy.c