diff options
| author | Eric Richter <erichte@linux.vnet.ibm.com> | 2016-06-01 13:14:05 -0500 |
|---|---|---|
| committer | Mimi Zohar <zohar@linux.vnet.ibm.com> | 2016-06-30 01:14:21 -0400 |
| commit | 67696f6d79923cdc0084b73b4bbe52e6749a43a4 (patch) | |
| tree | 63a973617eb61e72310fa8b9e8eef01655ff4ca2 /security/integrity/ima/ima_appraise.c | |
| parent | 5f6f027b50d8ed9f1ba4447aa5aed3a94b601fe8 (diff) | |
ima: redefine duplicate template entries
Template entry duplicates are prevented from being added to the
measurement list by checking a hash table that contains the template
entry digests. However, the PCR value is not included in this comparison,
so duplicate template entry digests with differing PCRs may be dropped.
This patch redefines duplicate template entries as template entries with
the same digest and same PCR values.
Reported-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Signed-off-by: Eric Richter <erichte@linux.vnet.ibm.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Diffstat (limited to 'security/integrity/ima/ima_appraise.c')
0 files changed, 0 insertions, 0 deletions