[SRU][Xenial][PATCH 0/1] integrity: convert digsig to akcipher api

Joseph Salisbury joseph.salisbury at canonical.com
Thu Dec 7 18:37:30 UTC 2017


BugLink: http://bugs.launchpad.net/bugs/1735977

== SRU Justification ==
The bug reporter was trying to enable IMA appraisal with signatures for executable 
files on Xenial.  However, when enabling IMA appriasl the system would crash
and generate a trace.  

This bug is happening because the following commit was applied to Xenial in bug 1569924:
db6c43bd2132 ("crypto: KEYS: convert public key and digsig asym to the akcipher api")

However, the following commit is also required or this bug happens:
eb5798f2e28f ("integrity: convert digsig to akcipher api")

     

== Fix ==
commit eb5798f2e28f3b43091cecc71c84c3f6fb35c7de
Author: Tadeusz Struk <tadeusz.struk at intel.com>
Date:   Tue Feb 2 10:08:58 2016 -0800

    integrity: convert digsig to akcipher api

== Regression Potential ==
The requested commit is requred to fix an existing regression caused by bug 1569924.

== Test Case ==
A test kernel was built with this patch and tested by the original bug reporter.
The bug reporter states the test kernel resolved the bug.

Tadeusz Struk (1):
  integrity: convert digsig to akcipher api

 security/integrity/Kconfig             |  1 +
 security/integrity/digsig_asymmetric.c | 10 +++-------
 2 files changed, 4 insertions(+), 7 deletions(-)

-- 
2.7.4





More information about the kernel-team mailing list