| commit | 34736daeecd1608bee21e3bf5170cd4c95143109 | [log] [tgz] |
|---|---|---|
| author | Scott Branden <scott.branden@broadcom.com> | Fri Oct 02 10:38:24 2020 -0700 |
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | Mon Oct 05 13:37:04 2020 +0200 |
| tree | 4a9ef1ccc777e0f278eab20ffd39e53ff7a1fb19 | |
| parent | 2039bda1fa8dad3f4275b29eeaffef545bcbc85d [diff] |
IMA: Add support for file reads without contents When the kernel_read_file LSM hook is called with contents=false, IMA can appraise the file directly, without requiring a filled buffer. When such a buffer is available, though, IMA can continue to use it instead of forcing a double read here. Signed-off-by: Scott Branden <scott.branden@broadcom.com> Link: https://lore.kernel.org/lkml/20200706232309.12010-10-scott.branden@broadcom.com/ Signed-off-by: Kees Cook <keescook@chromium.org> Reviewed-by: Mimi Zohar <zohar@linux.ibm.com> Link: https://lore.kernel.org/r/20201002173828.2099543-13-keescook@chromium.org Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>