Skip to content
Snippets Groups Projects
Commit 62622dab authored by Matt Bobrowski's avatar Matt Bobrowski Committed by Mimi Zohar
Browse files

ima: return IMA digest value only when IMA_COLLECTED flag is set


The IMA_COLLECTED flag indicates whether the IMA subsystem has
successfully collected a measurement for a given file object. Ensure
that we return the respective digest value stored within the iint
entry only when this flag has been set.

Failing to check for the presence of this flag exposes consumers of
this IMA API to receive potentially undesired IMA digest values when
an erroneous condition has been experienced in some of the lower level
IMA API code.

Signed-off-by: default avatarMatt Bobrowski <mattbobrowski@google.com>
Signed-off-by: default avatarMimi Zohar <zohar@linux.ibm.com>
parent 6dc387d5
No related branches found
No related tags found
No related merge requests found
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment