ima: based on policy require signed firmware (sysfs fallback)
authorMimi Zohar <zohar@linux.vnet.ibm.com>
Fri, 13 Jul 2018 18:06:00 +0000 (14:06 -0400)
committerJames Morris <james.morris@microsoft.com>
Mon, 16 Jul 2018 19:31:57 +0000 (12:31 -0700)
commitfed2512a7ccc8fc4b8e1de22925d127e4caac300
treeff667da0a4a8e305409d7c5323c58c7852e40e3b
parent6e852651f28eee851069c7d40989281fae4bf9d2
ima: based on policy require signed firmware (sysfs fallback)

With an IMA policy requiring signed firmware, this patch prevents
the sysfs fallback method of loading firmware.

Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
Cc: Luis R. Rodriguez <mcgrof@suse.com>
Cc: Matthew Garrett <mjg59@google.com>
Signed-off-by: James Morris <james.morris@microsoft.com>
security/integrity/ima/ima_main.c