OSDN Git Service

ima: Fix Kconfig to select TPM 2.0 CRB interface
authorJiandi An <anjiandi@codeaurora.org>
Wed, 7 Mar 2018 05:26:26 +0000 (23:26 -0600)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 30 May 2018 05:49:10 +0000 (07:49 +0200)
commitedf3bf9ee26ae9655a2b43a251e96e84bc0b0676
tree4de288278e643cb706916880e7098c0ce098fd02
parentd1dbe5dbfd7a8b82a3c67bbaf0632d6618c840b2
ima: Fix Kconfig to select TPM 2.0 CRB interface

[ Upstream commit fac37c628fd5d68fd7298d9b57ae8601ee1b4723 ]

TPM_CRB driver provides TPM CRB 2.0 support.  If it is built as a
module, the TPM chip is registered after IMA init.  tpm_pcr_read() in
IMA fails and displays the following message even though eventually
there is a TPM chip on the system.

ima: No TPM chip found, activating TPM-bypass! (rc=-19)

Fix IMA Kconfig to select TPM_CRB so TPM_CRB driver is built in the kernel
and initializes before IMA.

Signed-off-by: Jiandi An <anjiandi@codeaurora.org>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Signed-off-by: Sasha Levin <alexander.levin@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
security/integrity/ima/Kconfig