Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Mimi Zohar 503ceaef8e ima: define a set of appraisal rules requiring file signatures ... The builtin "ima_appraise_tcb" policy should require file signatures for at least a few of the hooks (eg. kernel modules, firmware, and the kexec kernel image), but changing it would break the existing userspace/kernel ABI. This patch defines a new builtin policy named "secure_boot", which can be specified on the "ima_policy=" boot command line, independently or in conjunction with the "ima_appraise_tcb" policy, by specifing ima_policy="appraise_tcb | secure_boot". The new appraisal rules requiring file signatures will be added prior to the "ima_appraise_tcb" rules. Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com> Changelog: - Reference secure boot in the new builtin policy name. (Thiago Bauermann)		2017-06-21 14:37:12 -04:00
..
evm	sched/headers: Prepare to remove the <linux/magic.h> include from <linux/sched/task_stack.h>	2017-03-02 08:42:40 +01:00
ima	ima: define a set of appraisal rules requiring file signatures	2017-06-21 14:37:12 -04:00
digsig.c	KEYS: Use structure to capture key restriction function and data	2017-04-04 14:10:10 -07:00
digsig_asymmetric.c
iint.c	integrity: add measured_pcrs field to integrity cache	2016-06-30 01:14:19 -04:00
integrity.h	integrity: add measured_pcrs field to integrity cache	2016-06-30 01:14:19 -04:00
integrity_audit.c
Kconfig	security: integrity: Remove select to deleted option PUBLIC_KEY_ALGO_RSA	2016-04-12 19:54:58 +01:00
Makefile