moonjuice/kernel_arpi
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Files
cd29eef12771fa48c271df13ce88745ff97366d2
kernel_arpi/security
History
James Bottomley bf84ef2dd2 KEYS: trusted: Fix TPM reservation for seal/unseal 
[ Upstream commit 9d5171eab4 ]

The original patch 8c657a0590 ("KEYS: trusted: Reserve TPM for seal
and unseal operations") was correct on the mailing list:

https://lore.kernel.org/linux-integrity/20210128235621.127925-4-jarkko@kernel.org/

But somehow got rebased so that the tpm_try_get_ops() in
tpm2_seal_trusted() got lost.  This causes an imbalanced put of the
TPM ops and causes oopses on TIS based hardware.

This fix puts back the lost tpm_try_get_ops()

Fixes: 8c657a0590 ("KEYS: trusted: Reserve TPM for seal and unseal operations")
Reported-by: Mimi Zohar <zohar@linux.ibm.com>
Acked-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: James Bottomley <James.Bottomley@HansenPartnership.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2021-04-28 13:39:59 +02:00
..
apparmor
treewide: Use fallthrough pseudo-keyword
2020-08-23 17:36:59 -05:00
bpf
bpf: Implement bpf_local_storage for inodes
2020-08-25 15:00:04 -07:00
integrity
integrity: double check iint_cache was initialized
2021-03-30 14:31:55 +02:00
keys
KEYS: trusted: Fix TPM reservation for seal/unseal
2021-04-28 13:39:59 +02:00
loadpin
LSM: Add "contents" flag to kernel_read_file hook
2020-10-05 13:37:03 +02:00
lockdown
Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
2020-06-02 17:36:24 -07:00
safesetid
LSM: SafeSetID: Fix warnings reported by test bot
2020-10-13 09:17:36 -07:00
selinux
selinux: fix race between old and new sidtab
2021-04-14 08:41:57 +02:00
smack
smackfs: restrict bytes count in smackfs write functions
2021-03-07 12:34:05 +01:00
tomoyo
tomoyo: recognize kernel threads correctly
2021-03-09 11:11:15 +01:00
yama
task_work: cleanup notification modes
2020-10-17 15:05:30 -06:00
commoncap.c
Revert 95ebabde38 ("capabilities: Don't allow writing ambiguous v3 file capabilities")
2021-03-17 17:06:27 +01:00
device_cgroup.c
device_cgroup: Fix RCU list debugging warning
2020-08-20 11:25:03 -07:00
inode.c
…
Kconfig
Replace HTTP links with HTTPS ones: security
2020-08-06 12:00:05 -07:00
Kconfig.hardening
security: allow using Clang's zero initialization for stack variables
2020-06-16 02:06:23 -07:00
lsm_audit.c
dump_common_audit_data(): fix racy accesses to ->d_name
2021-01-19 18:27:29 +01:00
Makefile
device_cgroup: Cleanup cgroup eBPF device filter code
2020-04-13 14:41:54 -04:00
min_addr.c
sysctl: pass kernel pointers to ->proc_handler
2020-04-27 02:07:40 -04:00
security.c
LSM: Add "contents" flag to kernel_read_file hook
2020-10-05 13:37:03 +02:00