Searched hist:c57782c13ecd7e7aca66cbf0139ad2a72317dc81 (Results 1 – 2 of 2) sorted by relevance
| /linux/security/integrity/ima/ |
| H A D | Kconfig | diff c57782c13ecd7e7aca66cbf0139ad2a72317dc81 Wed Nov 05 16:01:16 CET 2014 Dmitry Kasatkin <d.kasatkin@samsung.com> ima: require signature based appraisal
This patch provides CONFIG_IMA_APPRAISE_SIGNED_INIT kernel configuration
option to force IMA appraisal using signatures. This is useful, when EVM
key is not initialized yet and we want securely initialize integrity or
any other functionality.
It forces embedded policy to require signature. Signed initialization
script can initialize EVM key, update the IMA policy and change further
requirement of everything to be signed.
Changes in v3:
* kernel parameter fixed to configuration option in the patch description
Changes in v2:
* policy change of this patch separated from the key loading patch
Signed-off-by: Dmitry Kasatkin <d.kasatkin@samsung.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
|
| H A D | ima_policy.c | diff c57782c13ecd7e7aca66cbf0139ad2a72317dc81 Wed Nov 05 16:01:16 CET 2014 Dmitry Kasatkin <d.kasatkin@samsung.com> ima: require signature based appraisal
This patch provides CONFIG_IMA_APPRAISE_SIGNED_INIT kernel configuration
option to force IMA appraisal using signatures. This is useful, when EVM
key is not initialized yet and we want securely initialize integrity or
any other functionality.
It forces embedded policy to require signature. Signed initialization
script can initialize EVM key, update the IMA policy and change further
requirement of everything to be signed.
Changes in v3:
* kernel parameter fixed to configuration option in the patch description
Changes in v2:
* policy change of this patch separated from the key loading patch
Signed-off-by: Dmitry Kasatkin <d.kasatkin@samsung.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
|