Dmitry Kasatkin 7429b09281 ima: load policy using path ... We currently cannot do appraisal or signature vetting of IMA policies since we currently can only load IMA policies by writing the contents of the policy directly in, as follows: cat policy-file > <securityfs>/ima/policy If we provide the kernel the path to the IMA policy so it can load the policy itself it'd be able to later appraise or vet the file signature if it has one. This patch adds support to load the IMA policy with a given path as follows: echo /etc/ima/ima_policy > /sys/kernel/security/ima/policy Changelog v4+: - moved kernel_read_file_from_path() error messages to callers v3: - moved kernel_read_file_from_path() to a separate patch v2: - after re-ordering the patches, replace calling integrity_kernel_read() to read the file with kernel_read_file_from_path() (Mimi) - Patch description re-written by Luis R. Rodriguez Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@huawei.com> Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>		2016-02-21 09:34:05 -05:00
..
apparmor
integrity	ima: load policy using path	2016-02-21 09:34:05 -05:00
keys	KEYS: Only apply KEY_FLAG_KEEP to a key if a parent keyring has it set	2016-01-28 10:48:40 +11:00
selinux	wrappers for ->i_mutex access	2016-01-22 18:04:28 -05:00
smack	security: let security modules use PTRACE_MODE_* with bitmasks	2016-01-20 17:09:18 -08:00
tomoyo	convert a bunch of open-coded instances of memdup_user_nul()	2016-01-04 10:26:58 -05:00
yama	security: let security modules use PTRACE_MODE_* with bitmasks	2016-01-20 17:09:18 -08:00
commoncap.c	ptrace: use fsuid, fsgid, effective creds for fs access checks	2016-01-20 17:09:18 -08:00
device_cgroup.c
inode.c	wrappers for ->i_mutex access	2016-01-22 18:04:28 -05:00
Kconfig
lsm_audit.c
Makefile
min_addr.c
security.c	module: replace copy_module_from_fd with kernel version	2016-02-21 09:06:12 -05:00