tree 45de78666d03314849cb1ebcd8cc6413705bbfd2
parent 42413b49804b250ced70dac8815388af2d4ad872
author Mimi Zohar <zohar@linux.ibm.com> 1591795106 -0400
committer Mimi Zohar <zohar@linux.ibm.com> 1591975818 -0400

ima: fix mprotect checking

Make sure IMA is enabled before checking mprotect change.  Addresses
report of a 3.7% regression of boot-time.dhcp.

Fixes: 8eb613c0b8f1 ("ima: verify mprotect change is consistent with mmap policy")
Reported-by: kernel test robot <rong.a.chen@intel.com>
Reviewed-by: Lakshmi Ramasubramanian <nramas@linux.microsoft.com>
Tested-by: Xing Zhengjun <zhengjun.xing@linux.intel.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>