Dmitry Kasatkin 85865c1fa1 ima: add policy support for file system uuid ... The IMA policy permits specifying rules to enable or disable measurement/appraisal/audit based on the file system magic number. If, for example, the policy contains an ext4 measurement rule, the rule is enabled for all ext4 partitions. Sometimes it might be necessary to enable measurement/appraisal/audit only for one partition and disable it for another partition of the same type. With the existing IMA policy syntax, this can not be done. This patch provides support for IMA policy rules to specify the file system by its UUID (eg. fsuuid=397449cd-687d-4145-8698-7fed4a3e0363). For partitions not being appraised, it might be a good idea to mount file systems with the 'noexec' option to prevent executing non-verified binaries. Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@intel.com> Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>		2013-02-06 10:40:29 -05:00
..
ima_api.c	ima: move full pathname resolution to separate function	2013-01-16 17:50:03 -05:00
ima_appraise.c	ima: per hook cache integrity appraisal status	2013-01-22 16:10:36 -05:00
ima_audit.c	userns: Add user namespace support to IMA	2012-09-21 03:13:24 -07:00
ima_crypto.c	ima: integrity appraisal extension	2012-09-07 14:57:44 -04:00
ima_fs.c	ima: remove unused cleanup functions	2012-07-02 16:43:30 -04:00
ima_init.c	ima: remove unused cleanup functions	2012-07-02 16:43:30 -04:00
ima_main.c	ima: differentiate appraise status only for hook specific rules	2013-01-22 16:10:39 -05:00
ima_policy.c	ima: add policy support for file system uuid	2013-02-06 10:40:29 -05:00
ima_queue.c	ima: fix invalid memory reference	2011-12-19 22:07:54 -05:00
ima.h	ima: per hook cache integrity appraisal status	2013-01-22 16:10:36 -05:00
Kconfig	ima: integrity appraisal extension	2012-09-07 14:57:44 -04:00
Makefile	ima: integrity appraisal extension	2012-09-07 14:57:44 -04:00