dh/ima-evm-utils-mirror
1
0
Fork 0
mirror of https://git.code.sf.net/p/linux-ima/ima-evm-utils synced 2025-04-29 15:13:38 +02:00
Code Releases Activity

libimaevm: Remove calculation of a digest over a directory

Browse Source 
Signature verification on directories is not supported by IMA in the
kernel, so remove the calculation of digests over directories.

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
This commit is contained in:
Stefan Berger 2021-07-08 12:04:07 -04:00 committed by Mimi Zohar
parent 75b65e8618
commit a5a03d5454
1 changed files with 0 additions and 37 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

37
src/libimaevm.c
View File

@ -177,40 +177,6 @@ out:
return err; return err;
} }
static int add_dir_hash(const char *file, EVP_MD_CTX *ctx)
{
struct dirent *de;
DIR *dir;
unsigned long long ino;
unsigned int type;
int result = 0;
dir = opendir(file);
if (!dir) {
log_err("Failed to open: %s\n", file);
return -1;
}
while ((de = readdir(dir))) {
ino = de->d_ino;
type = de->d_type;
log_debug("entry: %s, ino: %llu, type: %u, reclen: %hu\n",
de->d_name, ino, type, de->d_reclen);
if (EVP_DigestUpdate(ctx, de->d_name, strlen(de->d_name)) != 1 ||
EVP_DigestUpdate(ctx, &ino, sizeof(ino)) != 1||
EVP_DigestUpdate(ctx, &type, sizeof(type)) != 1) {
log_err("EVP_DigestUpdate() failed\n");
output_openssl_errors();
result = 1;
break;
}
}
closedir(dir);
return result;
}
static int add_link_hash(const char *path, EVP_MD_CTX *ctx) static int add_link_hash(const char *path, EVP_MD_CTX *ctx)
{ {
int len; int len;
@ -265,9 +231,6 @@ int ima_calc_hash(const char *file, uint8_t *hash)
case S_IFREG: case S_IFREG:
err = add_file_hash(file, pctx); err = add_file_hash(file, pctx);
break; break;
case S_IFDIR:
err = add_dir_hash(file, pctx);
break;
case S_IFLNK: case S_IFLNK:
err = add_link_hash(file, pctx); err = add_link_hash(file, pctx);
break; break;