Eric Richter 0260643ce8 ima: add policy support for extending different pcrs ... This patch defines a new IMA measurement policy rule option "pcr=", which allows extending different PCRs on a per rule basis. For example, the system independent files could extend the default IMA Kconfig specified PCR, while the system dependent files could extend a different PCR. The following is an example of this usage with an SELinux policy; the rule would extend PCR 11 with system configuration files: measure func=FILE_CHECK mask=MAY_READ obj_type=system_conf_t pcr=11 Changelog v3: - FIELD_SIZEOF returns bytes, not bits. Fixed INVALID_PCR Signed-off-by: Eric Richter <erichte@linux.vnet.ibm.com> Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>		2016-06-30 01:14:20 -04:00
..
evm	->getxattr(): pass dentry and inode as separate arguments	2016-04-11 00:48:00 -04:00
ima	ima: add policy support for extending different pcrs	2016-06-30 01:14:20 -04:00
digsig_asymmetric.c	X.509: Make algo identifiers text instead of enum	2016-03-03 21:49:27 +00:00
digsig.c	IMA: Use the the system trusted keyrings instead of .ima_mok	2016-04-11 22:49:15 +01:00
iint.c	integrity: add measured_pcrs field to integrity cache	2016-06-30 01:14:19 -04:00
integrity_audit.c	Merge git://git.infradead.org/users/eparis/audit	2014-04-12 12:38:53 -07:00
integrity.h	integrity: add measured_pcrs field to integrity cache	2016-06-30 01:14:19 -04:00
Kconfig	security: integrity: Remove select to deleted option PUBLIC_KEY_ALGO_RSA	2016-04-12 19:54:58 +01:00
Makefile	integrity: make integrity files as 'integrity' module	2014-09-09 10:28:58 -04:00