summaryrefslogtreecommitdiffstats
path: root/Documentation/security
diff options
context:
space:
mode:
authorMimi Zohar <zohar@linux.vnet.ibm.com>2013-11-17 06:31:47 +0100
committerMimi Zohar <zohar@linux.vnet.ibm.com>2014-01-03 13:42:59 +0100
commitef8894b0ca3f123bd68dd748b162369ccbeca4a7 (patch)
treef531c98459182b883edf0228a585818f0b91328c /Documentation/security
parentima: pass HASH_ALGO__LAST as hash algo in ima_eventdigest_init() (diff)
downloadlinux-ef8894b0ca3f123bd68dd748b162369ccbeca4a7.tar.xz
linux-ef8894b0ca3f123bd68dd748b162369ccbeca4a7.zip
ima: update IMA-templates.txt documentation
Patch "ima: extend the measurement list to include the file signature" defined a new field called 'sig' and a new template called 'ima-sig'. This patch updates the Documentation/security/IMA-templates.txt. Changelog: - fixed formatting issues (Roberto Sassu) Reported-by: Roberto Sassu <roberto.sassu@polito.it> Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com> Signed-off-by: Roberto Sassu <roberto.sassu@polito.it>
Diffstat (limited to 'Documentation/security')
-rw-r--r--Documentation/security/IMA-templates.txt6
1 files changed, 4 insertions, 2 deletions
diff --git a/Documentation/security/IMA-templates.txt b/Documentation/security/IMA-templates.txt
index a777e5f1df5b..a4e102dddfea 100644
--- a/Documentation/security/IMA-templates.txt
+++ b/Documentation/security/IMA-templates.txt
@@ -67,12 +67,14 @@ descriptors by adding their identifier to the format string
- 'd-ng': the digest of the event, calculated with an arbitrary hash
algorithm (field format: [<hash algo>:]digest, where the digest
prefix is shown only if the hash algorithm is not SHA1 or MD5);
- - 'n-ng': the name of the event, without size limitations.
+ - 'n-ng': the name of the event, without size limitations;
+ - 'sig': the file signature.
Below, there is the list of defined template descriptors:
- "ima": its format is 'd|n';
- - "ima-ng" (default): its format is 'd-ng|n-ng'.
+ - "ima-ng" (default): its format is 'd-ng|n-ng';
+ - "ima-sig": its format is 'd-ng|n-ng|sig'.