summaryrefslogtreecommitdiffstats
path: root/net/rxrpc/ar-internal.h
diff options
context:
space:
mode:
authorDmitry Kasatkin <dmitry.kasatkin@huawei.com>2014-04-11 16:47:01 +0200
committerMimi Zohar <zohar@linux.vnet.ibm.com>2016-02-21 15:34:05 +0100
commit7429b092811fb20c6a5b261c2c116a6a90cb9a29 (patch)
treed0f141c188d413de6e718689e314b5fe6a39a195 /net/rxrpc/ar-internal.h
parentima: support for kexec image and initramfs (diff)
downloadlinux-7429b092811fb20c6a5b261c2c116a6a90cb9a29.tar.xz
linux-7429b092811fb20c6a5b261c2c116a6a90cb9a29.zip
ima: load policy using path
We currently cannot do appraisal or signature vetting of IMA policies since we currently can only load IMA policies by writing the contents of the policy directly in, as follows: cat policy-file > <securityfs>/ima/policy If we provide the kernel the path to the IMA policy so it can load the policy itself it'd be able to later appraise or vet the file signature if it has one. This patch adds support to load the IMA policy with a given path as follows: echo /etc/ima/ima_policy > /sys/kernel/security/ima/policy Changelog v4+: - moved kernel_read_file_from_path() error messages to callers v3: - moved kernel_read_file_from_path() to a separate patch v2: - after re-ordering the patches, replace calling integrity_kernel_read() to read the file with kernel_read_file_from_path() (Mimi) - Patch description re-written by Luis R. Rodriguez Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@huawei.com> Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Diffstat (limited to 'net/rxrpc/ar-internal.h')
0 files changed, 0 insertions, 0 deletions