# git rev-parse -q --verify 18b44bc5a67275641fb26f2c54ba7eef80ac5950^{commit} 18b44bc5a67275641fb26f2c54ba7eef80ac5950 already have revision, skipping fetch # git checkout -q -f -B kisskb 18b44bc5a67275641fb26f2c54ba7eef80ac5950 # git clean -qxdf # < git log -1 # commit 18b44bc5a67275641fb26f2c54ba7eef80ac5950 # Author: Eric Snowberg # Date: Tue Jul 25 17:56:46 2023 -0400 # # ovl: Always reevaluate the file signature for IMA # # Commit db1d1e8b9867 ("IMA: use vfs_getattr_nosec to get the i_version") # partially closed an IMA integrity issue when directly modifying a file # on the lower filesystem. If the overlay file is first opened by a user # and later the lower backing file is modified by root, but the extended # attribute is NOT updated, the signature validation succeeds with the old # original signature. # # Update the super_block s_iflags to SB_I_IMA_UNVERIFIABLE_SIGNATURE to # force signature reevaluation on every file access until a fine grained # solution can be found. # # Signed-off-by: Eric Snowberg # Signed-off-by: Mimi Zohar # Signed-off-by: Linus Torvalds # < /opt/cross/kisskb/korg/gcc-12.2.0-nolibc/mips-linux/bin/mips-linux-gcc --version # < /opt/cross/kisskb/korg/gcc-12.2.0-nolibc/mips-linux/bin/mips-linux-ld --version # < git log --format=%s --max-count=1 18b44bc5a67275641fb26f2c54ba7eef80ac5950 # make -s -j 40 ARCH=mips O=/kisskb/build/linus_64r1_defconfig_mips-gcc12 CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-12.2.0-nolibc/mips-linux/bin/mips-linux- 64r1_defconfig Using /kisskb/src/arch/mips/configs/generic_defconfig as base Merging /kisskb/src/arch/mips/configs/generic/64r1.config Merging /kisskb/src/arch/mips/configs/generic/eb.config ./.config.64r1_defconfig:96:warning: override: CPU_BIG_ENDIAN changes choice state Merging /kisskb/src/arch/mips/configs/generic/board-boston.config Merging /kisskb/src/arch/mips/configs/generic/board-marduk.config Merging /kisskb/src/arch/mips/configs/generic/board-ranchu.config Merging /kisskb/src/arch/mips/configs/generic/board-virt.config .config:95:warning: override: CPU_BIG_ENDIAN changes choice state # < make -s -j 40 ARCH=mips O=/kisskb/build/linus_64r1_defconfig_mips-gcc12 CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-12.2.0-nolibc/mips-linux/bin/mips-linux- help # make -s -j 40 ARCH=mips O=/kisskb/build/linus_64r1_defconfig_mips-gcc12 CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-12.2.0-nolibc/mips-linux/bin/mips-linux- olddefconfig # make -s -j 40 ARCH=mips O=/kisskb/build/linus_64r1_defconfig_mips-gcc12 CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-12.2.0-nolibc/mips-linux/bin/mips-linux- Completed OK # rm -rf /kisskb/build/linus_64r1_defconfig_mips-gcc12 # Build took: 0:01:09.522479