Mimi Zohar 95ee08fa37 ima: require signed IMA policy ...

Require the IMA policy to be signed when additional rules can be added.

v1:
- initialize the policy flag
- include IMA_APPRAISE_POLICY in the policy flag

Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Acked-by: Petko Manolov <petkan@mip-labs.com>
Acked-by: Dmitry Kasatkin <dmitry.kasatkin@huawei.com>

2016-02-21 09:34:23 -05:00

..

ima_api.c

ima: define a new hook to measure and appraise a file already in memory

2016-02-20 22:35:08 -05:00

ima_appraise.c

ima: remove firmware and module specific cached status info

2016-02-21 09:06:13 -05:00

ima_crypto.c

ima: calculate the hash of a buffer using aynchronous hash(ahash)

2016-02-18 17:14:44 -05:00

ima_fs.c

ima: measure and appraise the IMA policy itself

2016-02-21 09:34:22 -05:00

ima_init.c

ima: separate 'security.ima' reading functionality from collect

2016-02-18 17:13:32 -05:00

ima_main.c

ima: measure and appraise the IMA policy itself

2016-02-21 09:34:22 -05:00

ima_mok.c

security/integrity: make ima/ima_mok.c explicitly non-modular

2015-12-15 10:01:43 -05:00

ima_policy.c

ima: require signed IMA policy

2016-02-21 09:34:23 -05:00

ima_queue.c

integrity: fix checkpatch errors

2014-03-07 12:15:45 -05:00

ima_template_lib.c

ima: separate 'security.ima' reading functionality from collect

2016-02-18 17:13:32 -05:00

ima_template_lib.h

ima: wrap event related data to the new ima_event_data structure

2015-05-21 13:59:28 -04:00

ima_template.c

ima: separate 'security.ima' reading functionality from collect

2016-02-18 17:13:32 -05:00

ima.h

ima: measure and appraise the IMA policy itself

2016-02-21 09:34:22 -05:00

Kconfig

IMA: allow reading back the current IMA policy

2015-12-15 10:01:43 -05:00

Makefile

IMA: create machine owner and blacklist keyrings

2015-12-15 10:01:43 -05:00