Mimi Zohar 94c3aac567 ima: on soft reboot, restore the measurement list ... The TPM PCRs are only reset on a hard reboot. In order to validate a TPM's quote after a soft reboot (eg. kexec -e), the IMA measurement list of the running kernel must be saved and restored on boot. This patch restores the measurement list. Link: http://lkml.kernel.org/r/1480554346-29071-3-git-send-email-zohar@linux.vnet.ibm.com Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com> Acked-by: Dmitry Kasatkin <dmitry.kasatkin@gmail.com> Cc: Thiago Jung Bauermann <bauerman@linux.vnet.ibm.com> Cc: "Eric W. Biederman" <ebiederm@xmission.com> Cc: Andreas Steffen <andreas.steffen@strongswan.org> Cc: Josh Sklar <sklar@linux.vnet.ibm.com> Cc: Dave Young <dyoung@redhat.com> Cc: Vivek Goyal <vgoyal@redhat.com> Cc: Baoquan He <bhe@redhat.com> Cc: Michael Ellerman <mpe@ellerman.id.au> Cc: Benjamin Herrenschmidt <benh@kernel.crashing.org> Cc: Paul Mackerras <paulus@samba.org> Cc: Stewart Smith <stewart@linux.vnet.ibm.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		2016-12-20 09:48:43 -08:00
..
ima_api.c	ima: change integrity cache to store measured pcr	2016-06-30 01:14:22 -04:00
ima_appraise.c	security/integrity: Harden against malformed xattrs	2016-11-13 22:50:11 -05:00
ima_crypto.c	ima: calculate the hash of a buffer using aynchronous hash(ahash)	2016-02-18 17:14:44 -05:00
ima_fs.c	ima: fix memory leak in ima_release_policy	2016-11-13 22:50:08 -05:00
ima_init.c	ima: on soft reboot, restore the measurement list	2016-12-20 09:48:43 -08:00
ima_kexec.c	ima: on soft reboot, restore the measurement list	2016-12-20 09:48:43 -08:00
ima_main.c	ima: use file_dentry()	2016-09-16 12:44:20 +02:00
ima_mok.c	IMA: Use the the system trusted keyrings instead of .ima_mok	2016-04-11 22:49:15 +01:00
ima_policy.c	ima: extend ima_get_action() to return the policy pcr	2016-06-30 01:14:20 -04:00
ima_queue.c	ima: on soft reboot, restore the measurement list	2016-12-20 09:48:43 -08:00
ima_template_lib.c	ima: separate 'security.ima' reading functionality from collect	2016-02-18 17:13:32 -05:00
ima_template_lib.h	ima: wrap event related data to the new ima_event_data structure	2015-05-21 13:59:28 -04:00
ima_template.c	ima: on soft reboot, restore the measurement list	2016-12-20 09:48:43 -08:00
ima.h	ima: on soft reboot, restore the measurement list	2016-12-20 09:48:43 -08:00
Kconfig	IMA: Use the the system trusted keyrings instead of .ima_mok	2016-04-11 22:49:15 +01:00
Makefile	ima: on soft reboot, restore the measurement list	2016-12-20 09:48:43 -08:00