In order to allow users to set their own security policies, this patch adds an option in configuration time to set the default hash algorithm to be used. Considering that any hash algorithm supported by the kernel can be used, the chosen algo is then checked against the hash_info.h header file. At the same time, move from SHA1 to SHA256 default hash algorithm, following the general movement of dropping SHA1 support in the major distros due to its weaknesses. Changelog: v6 - make user input lower case regardless and rebase code v5 - remove case insensitive grep v4 - check against hash_info.h kernel header instead of /proc/crypto v3 - remove wrong comment from m4 script v2 - add a config time option for setting DEFAULT_HASH_ALGO. Bruno Meneguele (2): set default hash algorithm in configuration time make SHA-256 the default hash algorithm README | 2 +- configure.ac | 2 ++ m4/default-hash-algo.m4 | 36 ++++++++++++++++++++++++++++++++++++ src/evmctl.c | 4 ++-- src/imaevm.h | 4 ++++ src/libimaevm.c | 2 +- 6 files changed, 46 insertions(+), 4 deletions(-) create mode 100644 m4/default-hash-algo.m4 -- 2.31.1
