diff options
| author | Matthew Garrett <[email protected]> | 2018-06-08 21:57:42 +0000 |
|---|---|---|
| committer | Mimi Zohar <[email protected]> | 2018-07-18 11:27:22 +0000 |
| commit | e2861fa71641c6414831d628a1f4f793b6562580 (patch) | |
| tree | e832d4eac8fb33e2838a76cc9457bd3c2d6a2065 /tools/perf/scripts/python/net_dropmonitor.py | |
| parent | integrity: silence warning when CONFIG_SECURITYFS is not enabled (diff) | |
| download | kernel-e2861fa71641c6414831d628a1f4f793b6562580.tar.gz kernel-e2861fa71641c6414831d628a1f4f793b6562580.zip | |
evm: Don't deadlock if a crypto algorithm is unavailable
When EVM attempts to appraise a file signed with a crypto algorithm the
kernel doesn't have support for, it will cause the kernel to trigger a
module load. If the EVM policy includes appraisal of kernel modules this
will in turn call back into EVM - since EVM is holding a lock until the
crypto initialisation is complete, this triggers a deadlock. Add a
CRYPTO_NOLOAD flag and skip module loading if it's set, and add that flag
in the EVM case in order to fail gracefully with an error message
instead of deadlocking.
Signed-off-by: Matthew Garrett <[email protected]>
Acked-by: Herbert Xu <[email protected]>
Signed-off-by: Mimi Zohar <[email protected]>
Diffstat (limited to 'tools/perf/scripts/python/net_dropmonitor.py')
0 files changed, 0 insertions, 0 deletions