Bruno E. O. Meneguele 7c9bc0983f ima: check signature enforcement against cmdline param instead of CONFIG ... When the user requests MODULE_CHECK policy and its kernel is compiled with CONFIG_MODULE_SIG_FORCE not set, all modules would not load, just those loaded in initram time. One option the user would have would be set a kernel cmdline param (module.sig_enforce) to true, but the IMA module check code doesn't rely on this value, it checks just CONFIG_MODULE_SIG_FORCE. This patch solves this problem checking for the exported value of module.sig_enforce cmdline param intead of CONFIG_MODULE_SIG_FORCE, which holds the effective value (CONFIG || param). Signed-off-by: Bruno E. O. Meneguele <brdeoliv@redhat.com> Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>		2017-11-08 15:16:36 -05:00
..
apparmor	+ Features	2017-09-23 05:33:29 -10:00
integrity	ima: check signature enforcement against cmdline param instead of CONFIG	2017-11-08 15:16:36 -05:00
keys	fs: fix kernel_write prototype	2017-09-04 19:05:15 -04:00
loadpin	security: mark LSM hooks as __ro_after_init	2017-03-06 11:00:15 +11:00
selinux	selinux/stable-4.14 PR 20170831	2017-09-12 13:21:00 -07:00
smack	Smack: Base support for overlayfs	2017-11-02 11:26:57 +11:00
tomoyo	tomoyo: fix timestamping for y2038	2017-10-21 06:21:06 +04:00
yama	doc: ReSTify Yama.txt	2017-05-18 10:33:04 -06:00
commoncap.c	capabilities: audit log other surprising conditions	2017-10-20 15:22:46 +11:00
device_cgroup.c	security/device_cgroup: Fix RCU_LOCKDEP_WARN() condition	2015-09-03 18:13:10 -07:00
inode.c	securityfs: add the ability to support symlinks	2017-06-08 12:51:43 -07:00
Kconfig	include/linux/string.h: add the option of fortified string.h functions	2017-07-12 16:26:03 -07:00
lsm_audit.c	lsm_audit: update my email address	2017-08-17 15:33:39 -04:00
Makefile	LSM: LoadPin for kernel file loading restrictions	2016-04-21 10:47:27 +10:00
min_addr.c
security.c	selinux/stable-4.14 PR 20170831	2017-09-12 13:21:00 -07:00