Re: [RFC][PATCH] ima: add measurement for first unverified write on ima policy file

2025-02-25 Thread Mimi Zohar
On Tue, 2025-02-25 at 14:12 +0100, Enrico Bravi wrote: > The first write on the ima policy file permits to override the default > policy defined with the ima_policy= boot parameter. This can be done > by adding the /etc/ima/ima-policy which allows loading the custom policy > during boot. It is also

[PATCH] tpm: ftpm_tee: remove incorrect of_match_ptr annotation

2025-02-25 Thread Arnd Bergmann
From: Arnd Bergmann Building with W=1 shows a warning about of_ftpm_tee_ids being unused when CONFIG_OF is disabled: drivers/char/tpm/tpm_ftpm_tee.c:356:34: error: unused variable 'of_ftpm_tee_ids' [-Werror,-Wunused-const-variable] Drop the unnecessary of_match_ptr(). Reviewed-by: Jarkko

[RFC][PATCH] ima: add measurement for first unverified write on ima policy file

2025-02-25 Thread Enrico Bravi
The first write on the ima policy file permits to override the default policy defined with the ima_policy= boot parameter. This can be done by adding the /etc/ima/ima-policy which allows loading the custom policy during boot. It is also possible to load custom policy at runtime through file operati