Commit bab8e90b authored by Stefan Berger's avatar Stefan Berger Committed by Mimi Zohar
Browse files

integrity: Allow sigv3 verification on EVM_XATTR_PORTABLE_DIGSIG 



Allow sigv3 verification on EVM_XATTR_PORTABLE_DIGSIG on RSA, ECDSA,
ECRDSA, and SM2 signatures.

Signed-off-by: default avatarStefan Berger <stefanb@linux.ibm.com>
Signed-off-by: default avatarMimi Zohar <zohar@linux.ibm.com>
parent de4c44a7

security/integrity/digsig_asymmetric.c

+2 −1
Original line number Diff line number Diff line
@@ -154,7 +154,8 @@ static int calc_file_id_hash(enum evm_ima_xattr_type type, 
	size_t file_id_size;

	int rc;



	if (type != IMA_VERITY_DIGSIG && type != EVM_IMA_XATTR_DIGSIG)

	if (type != IMA_VERITY_DIGSIG && type != EVM_IMA_XATTR_DIGSIG &&

	    type != EVM_XATTR_PORTABLE_DIGSIG)

		return -EINVAL;



	tfm = crypto_alloc_shash(hash_algo_name[algo], 0, 0);