KP Singh 3a2739aa8a bpf: Add a BPF helper for getting the IMA hash of an inode ... Provide a wrapper function to get the IMA hash of an inode. This helper is useful in fingerprinting files (e.g executables on execution) and using these fingerprints in detections like an executable unlinking itself. Since the ima_inode_hash can sleep, it's only allowed for sleepable LSM hooks. Signed-off-by: KP Singh <kpsingh@google.com> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Acked-by: Yonghong Song <yhs@fb.com> Link: https://lore.kernel.org/bpf/20201124151210.1081188-3-kpsingh@chromium.org		2020-12-04 20:04:52 -08:00
..
linux	bpf: Add a BPF helper for getting the IMA hash of an inode	2020-12-04 20:04:52 -08:00