Dmitry Kasatkin c57782c13e ima: require signature based appraisal ... This patch provides CONFIG_IMA_APPRAISE_SIGNED_INIT kernel configuration option to force IMA appraisal using signatures. This is useful, when EVM key is not initialized yet and we want securely initialize integrity or any other functionality. It forces embedded policy to require signature. Signed initialization script can initialize EVM key, update the IMA policy and change further requirement of everything to be signed. Changes in v3: * kernel parameter fixed to configuration option in the patch description Changes in v2: * policy change of this patch separated from the key loading patch Signed-off-by: Dmitry Kasatkin <d.kasatkin@samsung.com> Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>		2014-11-17 23:12:01 -05:00
..
ima_api.c	ima: load x509 certificate from the kernel	2014-11-17 23:12:00 -05:00
ima_appraise.c	ima: added ima_policy_flag variable	2014-09-17 16:39:36 -04:00
ima_crypto.c	integrity: define a new function integrity_read_file()	2014-11-17 23:09:18 -05:00
ima_fs.c	ima: display template format in meas. list if template name length is zero	2014-10-13 08:39:01 -04:00
ima_init.c	ima: load x509 certificate from the kernel	2014-11-17 23:12:00 -05:00
ima_main.c	ima: use path names cache	2014-10-07 14:32:54 -04:00
ima_policy.c	ima: require signature based appraisal	2014-11-17 23:12:01 -05:00
ima_queue.c	integrity: fix checkpatch errors	2014-03-07 12:15:45 -05:00
ima_template_lib.c	ima: reduce memory usage when a template containing the n field is used	2014-03-07 11:32:30 -05:00
ima_template_lib.h	ima: extend the measurement list to include the file signature	2013-10-31 20:19:35 -04:00
ima_template.c	ima: added support for new kernel cmdline parameter ima_template_fmt	2014-10-13 08:39:02 -04:00
ima.h	ima: added ima_policy_flag variable	2014-09-17 16:39:36 -04:00
Kconfig	ima: require signature based appraisal	2014-11-17 23:12:01 -05:00
Makefile	ima: define template fields library and new helpers	2013-10-25 17:17:05 -04:00