linux_dsm_epyc7002/security/integrity/ima
Roberto Sassu 6438de9f3f ima: skip measurement of cgroupfs files and update documentation
This patch adds a rule in the default measurement policy to skip inodes
in the cgroupfs filesystem. Measurements for this filesystem can be
avoided, as all the digests collected have the same value of the digest of
an empty file.

Furthermore, this patch updates the documentation of IMA policies in
Documentation/ABI/testing/ima_policy to make it consistent with
the policies set in security/integrity/ima/ima_policy.c.

Signed-off-by: Roberto Sassu <rsassu@suse.de>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
2015-05-21 13:27:19 -04:00
..
ima_api.c Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security 2014-12-14 20:36:37 -08:00
ima_appraise.c VFS: security/: d_backing_inode() annotations 2015-04-15 15:06:56 -04:00
ima_crypto.c Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security 2014-12-14 20:36:37 -08:00
ima_fs.c ima: display template format in meas. list if template name length is zero 2014-10-13 08:39:01 -04:00
ima_init.c ima: load x509 certificate from the kernel 2014-11-17 23:12:00 -05:00
ima_main.c ima: use path names cache 2014-10-07 14:32:54 -04:00
ima_policy.c ima: skip measurement of cgroupfs files and update documentation 2015-05-21 13:27:19 -04:00
ima_queue.c integrity: fix checkpatch errors 2014-03-07 12:15:45 -05:00
ima_template_lib.c kill f_dentry uses 2014-11-19 13:01:25 -05:00
ima_template_lib.h ima: extend the measurement list to include the file signature 2013-10-31 20:19:35 -04:00
ima_template.c ima: added support for new kernel cmdline parameter ima_template_fmt 2014-10-13 08:39:02 -04:00
ima.h ima: added ima_policy_flag variable 2014-09-17 16:39:36 -04:00
Kconfig ima: /proc/keys is now mandatory 2015-02-02 13:19:48 +11:00
Makefile ima: define template fields library and new helpers 2013-10-25 17:17:05 -04:00