Mimi Zohar e40ba6d56b firmware: replace call to fw_read_file_contents() with kernel version ... Replace the fw_read_file_contents with kernel_file_read_from_path(). Although none of the upstreamed LSMs define a kernel_fw_from_file hook, IMA is called by the security function to prevent unsigned firmware from being loaded and to measure/appraise signed firmware, based on policy. Instead of reading the firmware twice, once for measuring/appraising the firmware and again for reading the firmware contents into memory, the kernel_post_read_file() security hook calculates the file hash based on the in memory file buffer. The firmware is read once. This patch removes the LSM kernel_fw_from_file() hook and security call. Changelog v4+: - revert dropped buf->size assignment - reported by Sergey Senozhatsky v3: - remove kernel_fw_from_file hook - use kernel_file_read_from_path() - requested by Luis v2: - reordered and squashed firmware patches - fix MAX firmware size (Kees Cook) Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com> Acked-by: Kees Cook <keescook@chromium.org> Acked-by: Luis R. Rodriguez <mcgrof@kernel.org>		2016-02-21 09:03:44 -05:00
..
ima_api.c	ima: define a new hook to measure and appraise a file already in memory	2016-02-20 22:35:08 -05:00
ima_appraise.c	ima: define a new hook to measure and appraise a file already in memory	2016-02-20 22:35:08 -05:00
ima_crypto.c	ima: calculate the hash of a buffer using aynchronous hash(ahash)	2016-02-18 17:14:44 -05:00
ima_fs.c	ima: ima_write_policy() limit locking	2016-01-03 13:22:38 -05:00
ima_init.c	ima: separate 'security.ima' reading functionality from collect	2016-02-18 17:13:32 -05:00
ima_main.c	firmware: replace call to fw_read_file_contents() with kernel version	2016-02-21 09:03:44 -05:00
ima_mok.c	security/integrity: make ima/ima_mok.c explicitly non-modular	2015-12-15 10:01:43 -05:00
ima_policy.c	ima: define a new hook to measure and appraise a file already in memory	2016-02-20 22:35:08 -05:00
ima_queue.c	integrity: fix checkpatch errors	2014-03-07 12:15:45 -05:00
ima_template_lib.c	ima: separate 'security.ima' reading functionality from collect	2016-02-18 17:13:32 -05:00
ima_template_lib.h	ima: wrap event related data to the new ima_event_data structure	2015-05-21 13:59:28 -04:00
ima_template.c	ima: separate 'security.ima' reading functionality from collect	2016-02-18 17:13:32 -05:00
ima.h	ima: define a new hook to measure and appraise a file already in memory	2016-02-20 22:35:08 -05:00
Kconfig	IMA: allow reading back the current IMA policy	2015-12-15 10:01:43 -05:00
Makefile	IMA: create machine owner and blacklist keyrings	2015-12-15 10:01:43 -05:00