Roberto Sassu a756024efe ima: added ima_policy_flag variable ... This patch introduces the new variable 'ima_policy_flag', whose bits are set depending on the action of the current policy rules. Only the flags IMA_MEASURE, IMA_APPRAISE and IMA_AUDIT are set. The new variable will be used to improve performance by skipping the unnecessary execution of IMA code if the policy does not contain rules with the above actions. Changes in v6 (Roberto Sassu) * do not check 'ima_initialized' before calling ima_update_policy_flag() in ima_update_policy() (suggested by Dmitry) * calling ima_update_policy_flag() moved to init_ima to co-locate with ima_initialized (Dmitry) * add/revise comments (Mimi) Changes in v5 (Roberto Sassu) * reset IMA_APPRAISE flag in 'ima_policy_flag' if 'ima_appraise' is set to zero (reported by Dmitry) * update 'ima_policy_flag' only if IMA initialization is successful (suggested by Mimi and Dmitry) * check 'ima_policy_flag' instead of 'ima_initialized' (suggested by Mimi and Dmitry) Signed-off-by: Roberto Sassu <roberto.sassu@polito.it> Signed-off-by: Dmitry Kasatkin <d.kasatkin@samsung.com> Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>		2014-09-17 16:39:36 -04:00
..
ima_api.c	ima: remove usage of filename parameter	2014-09-09 10:28:52 -04:00
ima_appraise.c	ima: added ima_policy_flag variable	2014-09-17 16:39:36 -04:00
ima_crypto.c	ima: add missing '__init' keywords	2014-09-09 10:28:50 -04:00
ima_fs.c	integrity: fix checkpatch errors	2014-03-07 12:15:45 -05:00
ima_init.c	ima: return an error code from ima_add_boot_aggregate()	2014-09-17 16:15:42 -04:00
ima_main.c	ima: added ima_policy_flag variable	2014-09-17 16:39:36 -04:00
ima_policy.c	ima: added ima_policy_flag variable	2014-09-17 16:39:36 -04:00
ima_queue.c	integrity: fix checkpatch errors	2014-03-07 12:15:45 -05:00
ima_template_lib.c	ima: reduce memory usage when a template containing the n field is used	2014-03-07 11:32:30 -05:00
ima_template_lib.h	ima: extend the measurement list to include the file signature	2013-10-31 20:19:35 -04:00
ima_template.c	ima: initialize only required template	2014-09-09 10:28:54 -04:00
ima.h	ima: added ima_policy_flag variable	2014-09-17 16:39:36 -04:00
Kconfig	integrity: base integrity subsystem kconfig options on integrity	2014-09-09 10:28:56 -04:00
Makefile	ima: define template fields library and new helpers	2013-10-25 17:17:05 -04:00