iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/security/integrity/ima
History
Mimi Zohar aae6ccbd82 ima: rename IMA_ACTION_FLAGS to IMA_NONACTION_FLAGS 
Simple policy rule options, such as fowner, uid, or euid, can be checked
immediately, while other policy rule options, such as requiring a file
signature, need to be deferred.

The 'flags' field in the integrity_iint_cache struct contains the policy
action', 'subaction', and non action/subaction.

action: measure/measured, appraise/appraised, (collect)/collected,
        audit/audited
subaction: appraise status for each hook (e.g. file, mmap, bprm, read,
        creds)
non action/subaction: deferred policy rule options and state

Rename the IMA_ACTION_FLAGS to IMA_NONACTION_FLAGS.

Reviewed-by: Stefan Berger <stefanb@linux.ibm.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
2022-02-15 11:21:59 -05:00
..
ima_api.c
ima: Fix trivial typos in the comments
2022-02-15 11:10:03 -05:00
ima_appraise.c
lsm: security_task_getsecid_subj() -> security_current_getsecid_subj()
2021-11-22 17:52:47 -05:00
ima_asymmetric_keys.c
ima: Add digest and digest_len params to the functions to measure a buffer
2021-07-23 09:27:02 -04:00
ima_crypto.c
ima/evm: Fix type mismatch
2021-06-08 16:29:10 -04:00
ima_efi.c
ima: generalize x86/EFI arch glue for other EFI architectures
2020-11-06 07:40:42 +01:00
ima_fs.c
ima: Return error code obtained from securityfs functions
2022-02-15 11:17:01 -05:00
ima_init.c
ima: Add digest and digest_len params to the functions to measure a buffer
2021-07-23 09:27:02 -04:00
ima_kexec.c
ima: silence measurement list hexdump during kexec
2022-01-05 06:22:00 -05:00
ima_main.c
ima: rename IMA_ACTION_FLAGS to IMA_NONACTION_FLAGS
2022-02-15 11:21:59 -05:00
ima_modsig.c
ima: Move comprehensive rule validation checks out of the token parser
2020-07-20 13:28:15 -04:00
ima_mok.c
IMA: remove -Wmissing-prototypes warning
2021-07-23 08:05:06 -04:00
ima_policy.c
ima: rename IMA_ACTION_FLAGS to IMA_NONACTION_FLAGS
2022-02-15 11:21:59 -05:00
ima_queue_keys.c
ima: Add digest and digest_len params to the functions to measure a buffer
2021-07-23 09:27:02 -04:00
ima_queue.c
IMA: support for duplicate measurement records
2021-06-11 12:54:13 -04:00
ima_template_lib.c
ima: Fix trivial typos in the comments
2022-02-15 11:10:03 -05:00
ima_template_lib.h
ima: Define new template fields xattrnames, xattrlengths and xattrvalues
2021-06-02 18:56:13 -04:00
ima_template.c
ima: Allow template selection with ima_template[_fmt]= after ima_hash=
2022-02-02 11:59:54 -05:00
ima.h
IMA: introduce a new policy option func=SETXATTR_CHECK
2021-08-16 17:35:35 -04:00
Kconfig
IMA: remove the dependency on CRYPTO_MD5
2021-08-16 17:29:10 -04:00
Makefile
ima: generalize x86/EFI arch glue for other EFI architectures
2020-11-06 07:40:42 +01:00