]> asedeno.scripts.mit.edu Git - linux.git/commit
ima: Fix Kconfig to select TPM 2.0 CRB interface
authorJiandi An <anjiandi@codeaurora.org>
Wed, 7 Mar 2018 05:26:26 +0000 (23:26 -0600)
committerMimi Zohar <zohar@linux.vnet.ibm.com>
Sun, 25 Mar 2018 11:24:31 +0000 (07:24 -0400)
commitfac37c628fd5d68fd7298d9b57ae8601ee1b4723
tree5be5c186ee406bade20468f4738873c45d682040
parent17d7b0af062f587f9cbedce3cb6f39a784651e2f
ima: Fix Kconfig to select TPM 2.0 CRB interface

TPM_CRB driver provides TPM CRB 2.0 support.  If it is built as a
module, the TPM chip is registered after IMA init.  tpm_pcr_read() in
IMA fails and displays the following message even though eventually
there is a TPM chip on the system.

ima: No TPM chip found, activating TPM-bypass! (rc=-19)

Fix IMA Kconfig to select TPM_CRB so TPM_CRB driver is built in the kernel
and initializes before IMA.

Signed-off-by: Jiandi An <anjiandi@codeaurora.org>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
security/integrity/ima/Kconfig