KP Singh 27672f0d28 bpf: Add a BPF helper for getting the IMA hash of an inode ... Provide a wrapper function to get the IMA hash of an inode. This helper is useful in fingerprinting files (e.g executables on execution) and using these fingerprints in detections like an executable unlinking itself. Since the ima_inode_hash can sleep, it's only allowed for sleepable LSM hooks. Signed-off-by: KP Singh <kpsingh@google.com> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Acked-by: Yonghong Song <yhs@fb.com> Link: https://lore.kernel.org/bpf/20201124151210.1081188-3-kpsingh@chromium.org		2020-11-26 00:04:04 +01:00
..
asm	tools: Fix off-by 1 relative directory includes	2020-03-06 08:36:46 -03:00
asm-generic	tools headers UAPI: Update process_madvise affected files	2020-11-03 08:29:30 -03:00
drm	tools headers UAPI: Sync drm/i915_drm.h with the kernel sources	2020-11-03 08:35:13 -03:00
linux	bpf: Add a BPF helper for getting the IMA hash of an inode	2020-11-26 00:04:04 +01:00
sound	tools include UAPI: Sync sound/asound.h copy	2020-02-12 11:04:23 -03:00