Searched hist:ef96837b0de4af47732e2a8ebf5c18e8a885ded6 (Results 1 – 2 of 2) sorted by relevance
| /linux/security/integrity/ima/ |
| H A D | Kconfig | diff ef96837b0de4af47732e2a8ebf5c18e8a885ded6 Fri Jul 13 20:06:01 CEST 2018 Mimi Zohar <zohar@linux.vnet.ibm.com> ima: add build time policy
IMA by default does not measure, appraise or audit files, but can be
enabled at runtime by specifying a builtin policy on the boot command line
or by loading a custom policy.
This patch defines a build time policy, which verifies kernel modules,
firmware, kexec image, and/or the IMA policy signatures. This build time
policy is automatically enabled at runtime and persists after loading a
custom policy.
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
Signed-off-by: James Morris <james.morris@microsoft.com>
|
| H A D | ima_policy.c | diff ef96837b0de4af47732e2a8ebf5c18e8a885ded6 Fri Jul 13 20:06:01 CEST 2018 Mimi Zohar <zohar@linux.vnet.ibm.com> ima: add build time policy
IMA by default does not measure, appraise or audit files, but can be
enabled at runtime by specifying a builtin policy on the boot command line
or by loading a custom policy.
This patch defines a build time policy, which verifies kernel modules,
firmware, kexec image, and/or the IMA policy signatures. This build time
policy is automatically enabled at runtime and persists after loading a
custom policy.
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
Signed-off-by: James Morris <james.morris@microsoft.com>
|