kernel-packages team mailing list archive

[Stefan Berger <1582852@xxxxxxxxxxxxxxxxxx>]

Hi Joseph,

 thanks for building the kernel. We discovered the problem as part of
testing IMA. We built the kernel with these 2 patches applied and one
other patch applied for which now a bug has also been filed:

https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1584195

The issue is, I cannot test the code path without that other patch
applied because that one provides the facilities for injecting a key
into the kernel image, which is a prerequisite for using IMA with the
.ima keyring, which in turn allows us to exercise the fixed code path.

Thanks,
  Stefan

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1582852

Title:
  IMA crashes while verifying signatures

Status in linux package in Ubuntu:
  In Progress
Status in linux source package in Xenial:
  In Progress

Bug description:
  The application of a kernel patch to fix Bug 1569924 causes crashes
  when IMA is verifying signatures:

  https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1569924

  The following fix was applied:

  commit e6b195bb9adbf92b62f466b02fb8ae9b4294ad5e
  Author: Tadeusz Struk <tadeusz.struk@xxxxxxxxx>
  Date:   Tue Feb 2 10:08:53 2016 -0800

      crypto: KEYS: convert public key and digsig asym to the akcipher api
      

  This patch was taken from here:

  https://github.com/torvalds/linux/commit/db6c43bd2132dc2dd63d73a6d1ed601cffd0ae06.patch

  The series was posted here (not sure whether this is the latest
  version)

  https://lkml.org/lkml/2016/2/2/575

  The following two patches should be applied as well. They stem from
  that same series of patches as the one that is already applied.

  https://github.com/torvalds/linux/commit/eb5798f2e28f3b43091cecc71c84c3f6fb35c7de.patch
  https://github.com/torvalds/linux/commit/d846e78e491ff4dd0747026c02414844d504fcb6.patch

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1582852/+subscriptions