ima: Fix Kconfig to select TPM 2.0 CRB interface
authorJiandi An <anjiandi@codeaurora.org>
Wed, 7 Mar 2018 05:26:26 +0000 (23:26 -0600)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 30 May 2018 05:52:29 +0000 (07:52 +0200)
commitbc72e4fcc12a4b983666d3909edde2a14f1fb870
treef4f66981a0ceb54163a380861229c88b3a68ac6e
parentd7b13824c390805830e0ac8d8f89f0903272e234
ima: Fix Kconfig to select TPM 2.0 CRB interface

[ Upstream commit fac37c628fd5d68fd7298d9b57ae8601ee1b4723 ]

TPM_CRB driver provides TPM CRB 2.0 support.  If it is built as a
module, the TPM chip is registered after IMA init.  tpm_pcr_read() in
IMA fails and displays the following message even though eventually
there is a TPM chip on the system.

ima: No TPM chip found, activating TPM-bypass! (rc=-19)

Fix IMA Kconfig to select TPM_CRB so TPM_CRB driver is built in the kernel
and initializes before IMA.

Signed-off-by: Jiandi An <anjiandi@codeaurora.org>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Signed-off-by: Sasha Levin <alexander.levin@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
security/integrity/ima/Kconfig