lkml.org 
[lkml]   [2022]   [Oct]   [19]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    Patch in this message
    /
    From
    Subject[PATCH 6.0 100/862] LoadPin: Fix Kconfig doc about format of file with verity digests
    Date
    From: Matthias Kaehlcke <mka@chromium.org>

    commit aafc203bbad4bf6cf394a34ea698c2b0b8affae0 upstream.

    The doc for CONFIG_SECURITY_LOADPIN_VERITY says that the file with verity
    digests must contain a comma separated list of digests. That was the case
    at some stage of the development, but was changed during the review
    process to one digest per line. Update the Kconfig doc accordingly.

    Reported-by: Jae Hoon Kim <kimjae@chromium.org>
    Signed-off-by: Matthias Kaehlcke <mka@chromium.org>
    Fixes: 3f805f8cc23b ("LoadPin: Enable loading from trusted dm-verity devices")
    Cc: stable@vger.kernel.org
    Signed-off-by: Kees Cook <keescook@chromium.org>
    Link: https://lore.kernel.org/r/20220829174557.1.I5d202d1344212a3800d9828f936df6511eb2d0d1@changeid
    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
    ---
    security/loadpin/Kconfig | 2 +-
    1 file changed, 1 insertion(+), 1 deletion(-)

    --- a/security/loadpin/Kconfig
    +++ b/security/loadpin/Kconfig
    @@ -33,4 +33,4 @@ config SECURITY_LOADPIN_VERITY
    on the LoadPin securityfs entry 'dm-verity'. The ioctl
    expects a file descriptor of a file with verity digests as
    parameter. The file must be located on the pinned root and
    - contain a comma separated list of digests.
    + contain one digest per line.

    \
     
     \ /
      Last update: 2022-10-19 10:51    [W:2.638 / U:0.588 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site