projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: def3e8b) | patch
ima: remove enforce checking duplication
authorDmitry Kasatkin <dmitry.kasatkin@intel.com>
Thu, 27 Sep 2012 12:57:10 +0000 (15:57 +0300)
committerMimi Zohar <zohar@linux.vnet.ibm.com>
Wed, 16 Jan 2013 22:49:44 +0000 (17:49 -0500)
commit750943a30714b7e9a5a2b0e08eeef7a808b5a869
treea75f963abc43a13e3d1a558b2f8c3d47b018b63dtree | snapshot
parentdef3e8b9ee23cb69036910e48ec4e3eff40e04cbcommit | diff
ima: remove enforce checking duplication

Based on the IMA appraisal policy, files are appraised.  For those
files appraised, the IMA hooks return the integrity appraisal result,
assuming IMA-appraisal is in enforcing mode.  This patch combines
both of these criteria (in policy and enforcing file integrity),
removing the checking duplication.

Changelog v1:
- Update hook comments

Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@intel.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
security/integrity/ima/ima_main.c diff | blob | history
ep93xx device tree rework repo: git://git.maquefel.me/linux.git