diff options
| author | Dmitry Kasatkin <[email protected]> | 2012-06-08 10:58:49 +0000 |
|---|---|---|
| committer | Mimi Zohar <[email protected]> | 2013-01-22 21:10:31 +0000 |
| commit | 0e5a247cb37a97d843ef76d09d5f80deb7893ba3 (patch) | |
| tree | 7206abaf6d20e69a89584046ed7dc9970ba2da12 /lib/mpi/mpicoder.c | |
| parent | ima: forbid write access to files with digital signatures (diff) | |
| download | kernel-0e5a247cb37a97d843ef76d09d5f80deb7893ba3.tar.gz kernel-0e5a247cb37a97d843ef76d09d5f80deb7893ba3.zip | |
ima: added policy support for 'security.ima' type
The 'security.ima' extended attribute may contain either the file data's
hash or a digital signature. This patch adds support for requiring a
specific extended attribute type. It extends the IMA policy with a new
keyword 'appraise_type=imasig'. (Default is hash.)
Changelog v2:
- Fixed Documentation/ABI/testing/ima_policy option syntax
Changelog v1:
- Differentiate between 'required' vs. 'actual' extended attribute
Signed-off-by: Dmitry Kasatkin <[email protected]>
Signed-off-by: Mimi Zohar <[email protected]>
Diffstat (limited to 'lib/mpi/mpicoder.c')
0 files changed, 0 insertions, 0 deletions