Commit 5780b9ab authored by Tianjia Zhang's avatar Tianjia Zhang Committed by Mimi Zohar
Browse files

ima: add sm3 algorithm to hash algorithm configuration list 



sm3 has been supported by the ima hash algorithm, but it is not
yet in the Kconfig configuration list. After adding, both ima and tpm2
can support sm3 well.

Signed-off-by: default avatarTianjia Zhang <tianjia.zhang@linux.alibaba.com>
Signed-off-by: default avatarMimi Zohar <zohar@linux.ibm.com>
parent 6a30e1b1

security/integrity/ima/Kconfig

+5 −0
Original line number Original line Diff line number Diff line
@@ -112,6 +112,10 @@ choice 
	config IMA_DEFAULT_HASH_WP512

	config IMA_DEFAULT_HASH_WP512

		bool "WP512"

		bool "WP512"

		depends on CRYPTO_WP512=y && !IMA_TEMPLATE

		depends on CRYPTO_WP512=y && !IMA_TEMPLATE



	config IMA_DEFAULT_HASH_SM3

		bool "SM3"

		depends on CRYPTO_SM3=y && !IMA_TEMPLATE

endchoice

endchoice





config IMA_DEFAULT_HASH

config IMA_DEFAULT_HASH
@@ -121,6 +125,7 @@ config IMA_DEFAULT_HASH 
	default "sha256" if IMA_DEFAULT_HASH_SHA256

	default "sha256" if IMA_DEFAULT_HASH_SHA256

	default "sha512" if IMA_DEFAULT_HASH_SHA512

	default "sha512" if IMA_DEFAULT_HASH_SHA512

	default "wp512" if IMA_DEFAULT_HASH_WP512

	default "wp512" if IMA_DEFAULT_HASH_WP512

	default "sm3" if IMA_DEFAULT_HASH_SM3





config IMA_WRITE_POLICY

config IMA_WRITE_POLICY

	bool "Enable multiple writes to the IMA policy"

	bool "Enable multiple writes to the IMA policy"

CRA Git | Maintained and supported by SUSTech CRA and CCSE