Mimi Zohar 747cadeb10 ima: extend "mask" policy matching support ...

commit 4351c294b8 upstream.

The current "mask" policy option matches files opened as MAY_READ,
MAY_WRITE, MAY_APPEND or MAY_EXEC.  This patch extends the "mask"
option to match files opened containing one of these modes.  For
example, "mask=^MAY_READ" would match files opened read-write.

Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Signed-off-by: Dr. Greg Wettstein <gw@idfusion.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2015-08-16 20:51:47 -07:00

..

evm

evm: labeling pseudo filesystems exception

2015-08-03 09:29:56 -07:00

ima

ima: extend "mask" policy matching support

2015-08-16 20:51:47 -07:00

digsig_asymmetric.c

ima: read and use signature hash algorithm

2013-10-25 17:16:59 -04:00

digsig.c

Revert "ima: define '_ima' as a builtin 'trusted' keyring"

2013-11-23 16:36:35 -08:00

iint.c

ima: use dynamically allocated hash storage

2013-10-25 17:17:00 -04:00

integrity_audit.c

integrity: move integrity_audit_msg()

2013-06-20 07:47:49 -04:00

integrity.h

ima: provide flag to identify new empty files

2014-10-30 09:38:24 -07:00

Kconfig

integrity: move integrity_audit_msg()

2013-06-20 07:47:49 -04:00

Makefile

integrity: move integrity_audit_msg()

2013-06-20 07:47:49 -04:00