Mimi Zohar 503ceaef8e ima: define a set of appraisal rules requiring file signatures ... The builtin "ima_appraise_tcb" policy should require file signatures for at least a few of the hooks (eg. kernel modules, firmware, and the kexec kernel image), but changing it would break the existing userspace/kernel ABI. This patch defines a new builtin policy named "secure_boot", which can be specified on the "ima_policy=" boot command line, independently or in conjunction with the "ima_appraise_tcb" policy, by specifing ima_policy="appraise_tcb | secure_boot". The new appraisal rules requiring file signatures will be added prior to the "ima_appraise_tcb" rules. Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com> Changelog: - Reference secure boot in the new builtin policy name. (Thiago Bauermann)		2017-06-21 14:37:12 -04:00
..
ima_api.c	ima: allow to check MAY_APPEND	2017-01-27 14:17:21 -05:00
ima_appraise.c	ima: accept previously set IMA_NEW_FILE	2017-03-07 07:06:10 -05:00
ima_crypto.c	ima: platform-independent hash value	2016-12-20 09:48:46 -08:00
ima_fs.c	ima: define a canonical binary_runtime_measurements list format	2016-12-20 09:48:45 -08:00
ima_init.c	ima: on soft reboot, restore the measurement list	2016-12-20 09:48:43 -08:00
ima_kexec.c	ima: define a canonical binary_runtime_measurements list format	2016-12-20 09:48:45 -08:00
ima_main.c	ima: allow to check MAY_APPEND	2017-01-27 14:17:21 -05:00
ima_mok.c	KEYS: Use structure to capture key restriction function and data	2017-04-04 14:10:10 -07:00
ima_policy.c	ima: define a set of appraisal rules requiring file signatures	2017-06-21 14:37:12 -04:00
ima_queue.c	ima: maintain memory size needed for serializing the measurement list	2016-12-20 09:48:44 -08:00
ima_template_lib.c	ima: define a canonical binary_runtime_measurements list format	2016-12-20 09:48:45 -08:00
ima_template_lib.h	ima: wrap event related data to the new ima_event_data structure	2015-05-21 13:59:28 -04:00
ima_template.c	ima: define a canonical binary_runtime_measurements list format	2016-12-20 09:48:45 -08:00
ima.h	ima: fix ima_d_path() possible race with rename	2017-01-27 14:16:02 -05:00
Kconfig	ima: maintain memory size needed for serializing the measurement list	2016-12-20 09:48:44 -08:00
Makefile	ima: on soft reboot, restore the measurement list	2016-12-20 09:48:43 -08:00