disable printing signature when using sigfiles
Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@intel.com>
This commit is contained in:
parent
f41d43026b
commit
72ad26c3be
@ -144,6 +144,7 @@ static int verbose = LOG_INFO - 1;
|
|||||||
static int g_argc;
|
static int g_argc;
|
||||||
static char **g_argv;
|
static char **g_argv;
|
||||||
static int xattr = 1;
|
static int xattr = 1;
|
||||||
|
static int sigdump;
|
||||||
static int digest;
|
static int digest;
|
||||||
static int digsig;
|
static int digsig;
|
||||||
static char *hash_algo = "sha1";
|
static char *hash_algo = "sha1";
|
||||||
@ -366,7 +367,7 @@ static int sign_hash(const unsigned char *hash, int size, const char *keyfile, u
|
|||||||
*blen = __cpu_to_be16(len << 3);
|
*blen = __cpu_to_be16(len << 3);
|
||||||
len += sizeof(*hdr) + 2;
|
len += sizeof(*hdr) + 2;
|
||||||
log_info("evm/ima signature: %d bytes\n", len);
|
log_info("evm/ima signature: %d bytes\n", len);
|
||||||
if (!xattr || verbose >= LOG_INFO)
|
if (sigdump || verbose >= LOG_INFO)
|
||||||
dump(sig, len);
|
dump(sig, len);
|
||||||
|
|
||||||
return len;
|
return len;
|
||||||
@ -689,7 +690,7 @@ static int hash_ima(const char *file)
|
|||||||
if (verbose >= LOG_INFO)
|
if (verbose >= LOG_INFO)
|
||||||
log_info("hash: ");
|
log_info("hash: ");
|
||||||
|
|
||||||
if (!xattr || verbose >= LOG_INFO)
|
if (sigdump || verbose >= LOG_INFO)
|
||||||
dump(hash, len + 1);
|
dump(hash, len + 1);
|
||||||
|
|
||||||
if (xattr) {
|
if (xattr) {
|
||||||
@ -1278,6 +1279,7 @@ int main(int argc, char *argv[])
|
|||||||
case 'n':
|
case 'n':
|
||||||
/* do not set Extended Attributes... just print signature */
|
/* do not set Extended Attributes... just print signature */
|
||||||
xattr = 0;
|
xattr = 0;
|
||||||
|
sigdump = 1;
|
||||||
break;
|
break;
|
||||||
case 'a':
|
case 'a':
|
||||||
hash_algo = optarg;
|
hash_algo = optarg;
|
||||||
|
Loading…
x
Reference in New Issue
Block a user