Revision 4235b1a4efe19dd0309250170bbf0aa95e559626 authored by Mimi Zohar on 10 June 2020, 13:18:26 UTC, committed by Mimi Zohar on 12 June 2020, 15:30:18 UTC
Make sure IMA is enabled before checking mprotect change. Addresses
report of a 3.7% regression of boot-time.dhcp.
Fixes: 8eb613c0b8f1 ("ima: verify mprotect change is consistent with mmap policy")
Reported-by: kernel test robot <rong.a.chen@intel.com>
Reviewed-by: Lakshmi Ramasubramanian <nramas@linux.microsoft.com>
Tested-by: Xing Zhengjun <zhengjun.xing@linux.intel.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
1 parent 42413b4
| File | Mode | Size |
|---|---|---|
| include | ||
| .gitignore | -rw-r--r-- | 84 bytes |
| Kconfig | -rw-r--r-- | 2.8 KB |
| Makefile | -rw-r--r-- | 4.1 KB |
| apparmorfs.c | -rw-r--r-- | 65.2 KB |
| audit.c | -rw-r--r-- | 5.3 KB |
| capability.c | -rw-r--r-- | 4.1 KB |
| crypto.c | -rw-r--r-- | 2.3 KB |
| domain.c | -rw-r--r-- | 38.4 KB |
| file.c | -rw-r--r-- | 19.7 KB |
| ipc.c | -rw-r--r-- | 6.0 KB |
| label.c | -rw-r--r-- | 50.4 KB |
| lib.c | -rw-r--r-- | 12.9 KB |
| lsm.c | -rw-r--r-- | 48.9 KB |
| match.c | -rw-r--r-- | 18.4 KB |
| mount.c | -rw-r--r-- | 18.3 KB |
| net.c | -rw-r--r-- | 5.5 KB |
| nulldfa.in | -rw-r--r-- | 6.8 KB |
| path.c | -rw-r--r-- | 6.0 KB |
| policy.c | -rw-r--r-- | 31.5 KB |
| policy_ns.c | -rw-r--r-- | 9.7 KB |
| policy_unpack.c | -rw-r--r-- | 28.7 KB |
| policy_unpack_test.c | -rw-r--r-- | 17.7 KB |
| procattr.c | -rw-r--r-- | 3.5 KB |
| resource.c | -rw-r--r-- | 5.0 KB |
| secid.c | -rw-r--r-- | 3.4 KB |
| stacksplitdfa.in | -rw-r--r-- | 7.3 KB |
| task.c | -rw-r--r-- | 4.2 KB |
Computing file changes ...
