OSDN Git Service

ima: return IMA digest value only when IMA_COLLECTED flag is set
authorMatt Bobrowski <mattbobrowski@google.com>
Wed, 4 Jan 2023 03:41:56 +0000 (03:41 +0000)
committerMimi Zohar <zohar@linux.ibm.com>
Wed, 18 Jan 2023 18:21:50 +0000 (13:21 -0500)
commit62622dab0a285033e971641b781bc917d5939ce6
tree7a90ee9d2df55a8b25f4b0a9abc2c89e72d24bc3
parent6dc387d52eb67f45d68caa263704fa4e39ef8e76
ima: return IMA digest value only when IMA_COLLECTED flag is set

The IMA_COLLECTED flag indicates whether the IMA subsystem has
successfully collected a measurement for a given file object. Ensure
that we return the respective digest value stored within the iint
entry only when this flag has been set.

Failing to check for the presence of this flag exposes consumers of
this IMA API to receive potentially undesired IMA digest values when
an erroneous condition has been experienced in some of the lower level
IMA API code.

Signed-off-by: Matt Bobrowski <mattbobrowski@google.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
security/integrity/ima/ima_main.c