Re: [PATCH 04/11] evm: Check size of security.evm before using it

On Thu, 2020-06-18 at 18:01 +0200, Roberto Sassu wrote:

This patch checks the size for the EVM_IMA_XATTR_DIGSIG and EVM_XATTR_PORTABLE_DIGSIG types to ensure that the algorithm is read from the buffer returned by vfs_getxattr_alloc().

Cc: stable@vger.kernel.org # 4.19.x Fixes: 5feeb61183dde ("evm: Allow non-SHA1 digital signatures") Signed-off-by: Roberto Sassu roberto.sassu@huawei.com

Reviewed-by: Mimi Zohar zohar@linux.ibm.com