linux_dsm_epyc7002/security/integrity/ima
Petko Manolov 41c89b64d7 IMA: create machine owner and blacklist keyrings
This option creates IMA MOK and blacklist keyrings.  IMA MOK is an
intermediate keyring that sits between .system and .ima keyrings,
effectively forming a simple CA hierarchy.  To successfully import a key
into .ima_mok it must be signed by a key which CA is in .system keyring.
On turn any key that needs to go in .ima keyring must be signed by CA in
either .system or .ima_mok keyrings. IMA MOK is empty at kernel boot.

IMA blacklist keyring contains all revoked IMA keys.  It is consulted
before any other keyring.  If the search is successful the requested
operation is rejected and error is returned to the caller.

Signed-off-by: Petko Manolov <petkan@mip-labs.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
2015-12-15 10:01:43 -05:00
..
ima_api.c ima: pass iint to ima_add_violation() 2015-05-21 13:59:29 -04:00
ima_appraise.c ima: limit file hash setting by user to fix and log modes 2015-05-21 13:28:46 -04:00
ima_crypto.c mm, page_alloc: rename __GFP_WAIT to __GFP_RECLAIM 2015-11-06 17:50:42 -08:00
ima_fs.c IMA: policy can now be updated multiple times 2015-12-15 10:01:43 -05:00
ima_init.c integrity: define '.evm' as a builtin 'trusted' keyring 2015-11-23 14:30:02 -05:00
ima_main.c ima: pass iint to ima_add_violation() 2015-05-21 13:59:29 -04:00
ima_mok.c IMA: create machine owner and blacklist keyrings 2015-12-15 10:01:43 -05:00
ima_policy.c IMA: policy can now be updated multiple times 2015-12-15 10:01:43 -05:00
ima_queue.c integrity: fix checkpatch errors 2014-03-07 12:15:45 -05:00
ima_template_lib.c ima: fix ima_show_template_data_ascii() 2015-06-16 08:18:21 -04:00
ima_template_lib.h ima: wrap event related data to the new ima_event_data structure 2015-05-21 13:59:28 -04:00
ima_template.c ima: added support for new kernel cmdline parameter ima_template_fmt 2014-10-13 08:39:02 -04:00
ima.h integrity: define '.evm' as a builtin 'trusted' keyring 2015-11-23 14:30:02 -05:00
Kconfig IMA: create machine owner and blacklist keyrings 2015-12-15 10:01:43 -05:00
Makefile IMA: create machine owner and blacklist keyrings 2015-12-15 10:01:43 -05:00