Dmitry Kasatkin 7429b09281 ima: load policy using path ... We currently cannot do appraisal or signature vetting of IMA policies since we currently can only load IMA policies by writing the contents of the policy directly in, as follows: cat policy-file > <securityfs>/ima/policy If we provide the kernel the path to the IMA policy so it can load the policy itself it'd be able to later appraise or vet the file signature if it has one. This patch adds support to load the IMA policy with a given path as follows: echo /etc/ima/ima_policy > /sys/kernel/security/ima/policy Changelog v4+: - moved kernel_read_file_from_path() error messages to callers v3: - moved kernel_read_file_from_path() to a separate patch v2: - after re-ordering the patches, replace calling integrity_kernel_read() to read the file with kernel_read_file_from_path() (Mimi) - Patch description re-written by Luis R. Rodriguez Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@huawei.com> Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>		2016-02-21 09:34:05 -05:00
..
ima_api.c	ima: define a new hook to measure and appraise a file already in memory	2016-02-20 22:35:08 -05:00
ima_appraise.c	ima: remove firmware and module specific cached status info	2016-02-21 09:06:13 -05:00
ima_crypto.c	ima: calculate the hash of a buffer using aynchronous hash(ahash)	2016-02-18 17:14:44 -05:00
ima_fs.c	ima: load policy using path	2016-02-21 09:34:05 -05:00
ima_init.c	ima: separate 'security.ima' reading functionality from collect	2016-02-18 17:13:32 -05:00
ima_main.c	ima: support for kexec image and initramfs	2016-02-21 09:06:16 -05:00
ima_mok.c	security/integrity: make ima/ima_mok.c explicitly non-modular	2015-12-15 10:01:43 -05:00
ima_policy.c	ima: support for kexec image and initramfs	2016-02-21 09:06:16 -05:00
ima_queue.c	integrity: fix checkpatch errors	2014-03-07 12:15:45 -05:00
ima_template_lib.c	ima: separate 'security.ima' reading functionality from collect	2016-02-18 17:13:32 -05:00
ima_template_lib.h	ima: wrap event related data to the new ima_event_data structure	2015-05-21 13:59:28 -04:00
ima_template.c	ima: separate 'security.ima' reading functionality from collect	2016-02-18 17:13:32 -05:00
ima.h	ima: support for kexec image and initramfs	2016-02-21 09:06:16 -05:00
Kconfig	IMA: allow reading back the current IMA policy	2015-12-15 10:01:43 -05:00
Makefile	IMA: create machine owner and blacklist keyrings	2015-12-15 10:01:43 -05:00