linux-hardened/security/integrity/ima
Dmitry Kasatkin 750943a307 ima: remove enforce checking duplication
Based on the IMA appraisal policy, files are appraised.  For those
files appraised, the IMA hooks return the integrity appraisal result,
assuming IMA-appraisal is in enforcing mode.  This patch combines
both of these criteria (in policy and enforcing file integrity),
removing the checking duplication.

Changelog v1:
- Update hook comments

Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@intel.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
2013-01-16 17:49:44 -05:00
..
ima.h ima: support new kernel module syscall 2012-12-14 13:05:26 +10:30
ima_api.c ima: support new kernel module syscall 2012-12-14 13:05:26 +10:30
ima_appraise.c ima: set appraise status in fix mode only when xattr is fixed 2013-01-16 15:47:07 -05:00
ima_audit.c userns: Add user namespace support to IMA 2012-09-21 03:13:24 -07:00
ima_crypto.c ima: integrity appraisal extension 2012-09-07 14:57:44 -04:00
ima_fs.c ima: remove unused cleanup functions 2012-07-02 16:43:30 -04:00
ima_init.c ima: remove unused cleanup functions 2012-07-02 16:43:30 -04:00
ima_main.c ima: remove enforce checking duplication 2013-01-16 17:49:44 -05:00
ima_policy.c ima: re-initialize IMA policy LSM info 2013-01-16 15:47:03 -05:00
ima_queue.c ima: fix invalid memory reference 2011-12-19 22:07:54 -05:00
Kconfig ima: integrity appraisal extension 2012-09-07 14:57:44 -04:00
Makefile ima: integrity appraisal extension 2012-09-07 14:57:44 -04:00