mirror of
https://github.com/torvalds/linux.git
synced 2024-11-24 21:21:41 +00:00
54f03916fb
Permit fsverity's file digest (a hash of struct fsverity_descriptor) to be included in the IMA measurement list, based on the new measurement policy rule 'digest_type=verity' option. To differentiate between a regular IMA file hash from an fsverity's file digest, use the new d-ngv2 format field included in the ima-ngv2 template. The following policy rule requires fsverity file digests and specifies the new 'ima-ngv2' template, which contains the new 'd-ngv2' field. The policy rule may be constrained, for example based on a fsuuid or LSM label. measure func=FILE_CHECK digest_type=verity template=ima-ngv2 Acked-by: Stefan Berger <stefanb@linux.ibm.com> Signed-off-by: Mimi Zohar <zohar@linux.ibm.com> |
||
|---|---|---|
| .. | ||
| keys | ||
| tpm | ||
| credentials.rst | ||
| digsig.rst | ||
| IMA-templates.rst | ||
| index.rst | ||
| landlock.rst | ||
| lsm-development.rst | ||
| lsm.rst | ||
| sak.rst | ||
| SCTP.rst | ||
| self-protection.rst | ||
| siphash.rst | ||