| commit | 4235b1a4efe19dd0309250170bbf0aa95e559626 | [log] [tgz] |
|---|---|---|
| author | Mimi Zohar <zohar@linux.ibm.com> | Wed Jun 10 09:18:26 2020 -0400 |
| committer | Mimi Zohar <zohar@linux.ibm.com> | Fri Jun 12 11:30:18 2020 -0400 |
| tree | 45de78666d03314849cb1ebcd8cc6413705bbfd2 | |
| parent | 42413b49804b250ced70dac8815388af2d4ad872 [diff] |
ima: fix mprotect checking
Make sure IMA is enabled before checking mprotect change. Addresses
report of a 3.7% regression of boot-time.dhcp.
Fixes: 8eb613c0b8f1 ("ima: verify mprotect change is consistent with mmap policy")
Reported-by: kernel test robot <rong.a.chen@intel.com>
Reviewed-by: Lakshmi Ramasubramanian <nramas@linux.microsoft.com>
Tested-by: Xing Zhengjun <zhengjun.xing@linux.intel.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>