kernel-hacking-2024-linux-s.../security/integrity/ima
Dmitry Kasatkin 0e5a247cb3 ima: added policy support for 'security.ima' type
The 'security.ima' extended attribute may contain either the file data's
hash or a digital signature.  This patch adds support for requiring a
specific extended attribute type.  It extends the IMA policy with a new
keyword 'appraise_type=imasig'.  (Default is hash.)

Changelog v2:
- Fixed Documentation/ABI/testing/ima_policy option syntax
Changelog v1:
- Differentiate between 'required' vs. 'actual' extended attribute

Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@intel.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
2013-01-22 16:10:31 -05:00
..
ima.h ima: move full pathname resolution to separate function 2013-01-16 17:50:03 -05:00
ima_api.c ima: move full pathname resolution to separate function 2013-01-16 17:50:03 -05:00
ima_appraise.c ima: added policy support for 'security.ima' type 2013-01-22 16:10:31 -05:00
ima_audit.c userns: Add user namespace support to IMA 2012-09-21 03:13:24 -07:00
ima_crypto.c ima: integrity appraisal extension 2012-09-07 14:57:44 -04:00
ima_fs.c
ima_init.c
ima_main.c ima: added policy support for 'security.ima' type 2013-01-22 16:10:31 -05:00
ima_policy.c ima: added policy support for 'security.ima' type 2013-01-22 16:10:31 -05:00
ima_queue.c
Kconfig ima: integrity appraisal extension 2012-09-07 14:57:44 -04:00
Makefile ima: integrity appraisal extension 2012-09-07 14:57:44 -04:00