On Tue, 2020-07-07 at 11:35 +0800, Tianjia Zhang wrote:
> @@ -625,7 +625,7 @@ int ima_verify_signature(const char *file, unsigned char
> *sig, int siglen,
> unsigned char hash[MAX_DIGEST_SIZE];
> int hashlen, sig_hash_algo;
>
> - if (sig[0] != 0x03) {
> + if (sig[0] != EVM_IMA_XATTR_DIGSIG) {
> log_err("xattr ima has no signature\n");
> return -1;
> }
This last hunk didn't apply properly. The error message now includes
the filename. I've fixed this patch. In the future, please post
patches against the next-testing branch.
thanks,
Mimi