Mimi Zohar e7a2ad7eb6 ima: enable support for larger default filedata hash algorithms ... The IMA measurement list contains two hashes - a template data hash and a filedata hash. The template data hash is committed to the TPM, which is limited, by the TPM v1.2 specification, to 20 bytes. The filedata hash is defined as 20 bytes as well. Now that support for variable length measurement list templates was added, the filedata hash is not limited to 20 bytes. This patch adds Kconfig support for defining larger default filedata hash algorithms and replacing the builtin default with one specified on the kernel command line. <uapi/linux/hash_info.h> contains a list of hash algorithms. The Kconfig default hash algorithm is a subset of this list, but any hash algorithm included in the list can be specified at boot, using the 'ima_hash=' kernel command line option. Changelog v2: - update Kconfig Changelog: - support hashes that are configured - use generic HASH_ALGO_ definitions - add Kconfig support - hash_setup must be called only once (Dmitry) - removed trailing whitespaces (Roberto Sassu) Signed-off-by: Mimi Zohar <zohar@us.ibm.com> Signed-off-by: Roberto Sassu <roberto.sassu@polito.it>		2013-10-26 21:32:55 -04:00
..
evm	ima: pass full xattr with the signature	2013-10-25 17:16:59 -04:00
ima	ima: enable support for larger default filedata hash algorithms	2013-10-26 21:32:55 -04:00
digsig_asymmetric.c	ima: read and use signature hash algorithm	2013-10-25 17:16:59 -04:00
digsig.c	ima: pass full xattr with the signature	2013-10-25 17:16:59 -04:00
iint.c	ima: use dynamically allocated hash storage	2013-10-25 17:17:00 -04:00
integrity_audit.c	integrity: move integrity_audit_msg()	2013-06-20 07:47:49 -04:00
integrity.h	ima: use dynamically allocated hash storage	2013-10-25 17:17:00 -04:00
Kconfig	integrity: move integrity_audit_msg()	2013-06-20 07:47:49 -04:00
Makefile	integrity: move integrity_audit_msg()	2013-06-20 07:47:49 -04:00