linux/security/ipe/ipe.h

/* SPDX-License-Identifier: GPL-2.0 */
/*
 * Copyright (C) 2020-2024 Microsoft Corporation. All rights reserved.
 */

#ifndef _IPE_H
#define _IPE_H

#ifdef pr_fmt
#undef pr_fmt
#endif
#define pr_fmt(fmt) "ipe: " fmt

#include <linux/lsm_hooks.h>

#endif /* _IPE_H */
lsm: add IPE lsm Integrity Policy Enforcement (IPE) is an LSM that provides an complimentary approach to Mandatory Access Control than existing LSMs today. Existing LSMs have centered around the concept of access to a resource should be controlled by the current user's credentials. IPE's approach, is that access to a resource should be controlled by the system's trust of a current resource. The basis of this approach is defining a global policy to specify which resource can be trusted. Signed-off-by: Deven Bowers <deven.desai@linux.microsoft.com> Signed-off-by: Fan Wu <wufan@linux.microsoft.com> [PM: subject line tweak] Signed-off-by: Paul Moore <paul@paul-moore.com> 2024-08-03 06:08:15 +00:00			`/* SPDX-License-Identifier: GPL-2.0 */`
			`/*`
			`* Copyright (C) 2020-2024 Microsoft Corporation. All rights reserved.`
			`*/`

			`#ifndef _IPE_H`
			`#define _IPE_H`

			`#ifdef pr_fmt`
			`#undef pr_fmt`
			`#endif`
			`#define pr_fmt(fmt) "ipe: " fmt`

			`#include <linux/lsm_hooks.h>`

			`#endif /* _IPE_H */`