linux

mirror of https://github.com/FEX-Emu/linux.git synced 2025-02-14 16:39:21 +00:00

History

Matthew Garrett e2861fa716 evm: Don't deadlock if a crypto algorithm is unavailable

When EVM attempts to appraise a file signed with a crypto algorithm the
kernel doesn't have support for, it will cause the kernel to trigger a
module load. If the EVM policy includes appraisal of kernel modules this
will in turn call back into EVM - since EVM is holding a lock until the
crypto initialisation is complete, this triggers a deadlock. Add a
CRYPTO_NOLOAD flag and skip module loading if it's set, and add that flag
in the EVM case in order to fail gracefully with an error message
instead of deadlocking.

Signed-off-by: Matthew Garrett <mjg59@google.com>
Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>

2018-07-18 07:27:22 -04:00

apparmor

+ Features

2018-06-14 16:11:28 +09:00

integrity

evm: Don't deadlock if a crypto algorithm is unavailable

2018-07-18 07:27:22 -04:00

keys

treewide: kmalloc() -> kmalloc_array()

2018-06-12 16:19:22 -07:00

loadpin

module: replace the existing LSM hook in init_module