projects / GitHub / moto-9609 / android_kernel_motorola_exynos9610.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: d3600bc) | patch
IMA: prevent keys on the .ima_blacklist from being removed
authorMimi Zohar <zohar@linux.vnet.ibm.com>
Tue, 10 Nov 2015 14:00:38 +0000 (09:00 -0500)
committerMimi Zohar <zohar@linux.vnet.ibm.com>
Tue, 15 Dec 2015 15:01:43 +0000 (10:01 -0500)
commit501f1bde66525f94403a5b78832a9218ef9b1c14
tree545dfefd2c92a70ece125a4a0625190e97972cdftree | snapshot (tar.gz zip)
parentd3600bcf9d64d88dc1d189a754dcfab960ce751fcommit | diff
IMA: prevent keys on the .ima_blacklist from being removed

Set the KEY_FLAGS_KEEP on the .ima_blacklist to prevent userspace
from removing keys from the keyring.

Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
security/integrity/ima/ima_mok.c diff | blob | blame | history