3408b0e4c2f68a0bd60672c750cdfb697ff43092 - linux/kernel/git/zohar/linux-integrity

commit: 3408b0e4c2f68a0bd60672c750cdfb697ff43092
[log] [tgz]
author: Mimi Zohar <zohar@linux.vnet.ibm.com>
Sat Nov 28 23:51:38 2015 -0500
committer: Mimi Zohar <zohar@linux.vnet.ibm.com>
Wed Jan 13 09:28:31 2016 -0500
tree: 2d39c7f01513f7d3795eb4bdfbafafc685cb9d63
parent: 6fff3cd023d28ef067a8b69f1dd18ca2e3f62cdb [diff]

ima: measure and appraise the IMA policy itself

Call ima_hash_and_process_file() to measure and appraise the IMA policy.
This patch defines a new policy identifier named POLICY_CHECK.

Changelog v2:
- remove S_ISREG() test
- add union name "hooks" to fix sparse warning

Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>

include/linux/ima.h[diff]
security/integrity/digsig.c[diff]
security/integrity/iint.c[diff]
security/integrity/ima/ima.h[diff]
security/integrity/ima/ima_fs.c[diff]
security/integrity/ima/ima_policy.c[diff]
security/integrity/integrity.h[diff]

7 files changed

tree: 2d39c7f01513f7d3795eb4bdfbafafc685cb9d63