Commit ae40df38 authored by xuce's avatar xuce
Browse files

IMA: Fix hungtask issue of digestlist importing 

EulerOS inclusion
category: bugfix
bugzilla: https://gitee.com/openeuler/kernel/issues/IB6364



--------------------------------

In the function ima_check_measured_appraised, if the digest list is not
measured or appraised, the function returns without releasing the lock
iint->mutex.

Fixes: 7d79ba08 ("ima: dont disable digest_list if the file is not processed")
Signed-off-by: default avatarxuce <xuce10@h-partners.com>
parent eb5be89a

security/integrity/ima/ima_digest_list.c

+2 −0
Original line number Diff line number Diff line
@@ -262,6 +262,7 @@ bool ima_check_measured_appraised(struct file *file) 
	if ((ima_digest_list_actions & IMA_MEASURE) &&

	    !(iint->flags & IMA_MEASURED)) {

		pr_err("%s not measured\n", file_dentry(file)->d_name.name);

		mutex_unlock(&iint->mutex);

		return false;

	}
@@ -269,6 +270,7 @@ bool ima_check_measured_appraised(struct file *file) 
	    (!(iint->flags & IMA_APPRAISED) ||

	    !test_bit(IMA_DIGSIG, &iint->atomic_flags))) {

		pr_err("%s not appraised\n", file_dentry(file)->d_name.name);

		mutex_unlock(&iint->mutex);

		return false;

	}