Revision 4235b1a4efe19dd0309250170bbf0aa95e559626 authored by Mimi Zohar on 10 June 2020, 13:18:26 UTC, committed by Mimi Zohar on 12 June 2020, 15:30:18 UTC
Make sure IMA is enabled before checking mprotect change. Addresses
report of a 3.7% regression of boot-time.dhcp.
Fixes: 8eb613c0b8f1 ("ima: verify mprotect change is consistent with mmap policy")
Reported-by: kernel test robot <rong.a.chen@intel.com>
Reviewed-by: Lakshmi Ramasubramanian <nramas@linux.microsoft.com>
Tested-by: Xing Zhengjun <zhengjun.xing@linux.intel.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
1 parent 42413b4
| File | Mode | Size |
|---|---|---|
| apparmor | ||
| bpf | ||
| integrity | ||
| keys | ||
| loadpin | ||
| lockdown | ||
| safesetid | ||
| selinux | ||
| smack | ||
| tomoyo | ||
| yama | ||
| Kconfig | -rw-r--r-- | 10.7 KB |
| Kconfig.hardening | -rw-r--r-- | 7.9 KB |
| Makefile | -rw-r--r-- | 1.3 KB |
| commoncap.c | -rw-r--r-- | 38.9 KB |
| device_cgroup.c | -rw-r--r-- | 20.8 KB |
| inode.c | -rw-r--r-- | 10.6 KB |
| lsm_audit.c | -rw-r--r-- | 10.7 KB |
| min_addr.c | -rw-r--r-- | 1.3 KB |
| security.c | -rw-r--r-- | 61.9 KB |
Computing file changes ...
