tree 822a66bb5abaf5dfcd3e224257ce5a97f3c3e7f1
parent 5c7bac9fb2c5929a3b8600c45a972aabf9f410b5
author Lakshmi Ramasubramanian <nramas@linux.microsoft.com> 1579743124 -0800
committer Mimi Zohar <zohar@linux.ibm.com> 1579782911 -0500

IMA: Define workqueue for early boot key measurements

Measuring keys requires a custom IMA policy to be loaded.  Keys created
or updated before a custom IMA policy is loaded should be queued and
will be processed after a custom policy is loaded.

This patch defines a workqueue for queuing keys when a custom IMA policy
has not yet been loaded.  An intermediate Kconfig boolean option namely
IMA_QUEUE_EARLY_BOOT_KEYS is used to declare the workqueue functions.

A flag namely ima_process_keys is used to check if the key should be
queued or should be processed immediately.

Signed-off-by: Lakshmi Ramasubramanian <nramas@linux.microsoft.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>