Mimi Zohar 060190fbe6 ima: don't measure/appraise files on efivarfs ...

Update the builtin IMA policies specified on the boot command line
(eg. ima_policy="tcb|appraise_tcb") to permit accessing efivar files.

Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>

2018-12-11 07:19:46 -05:00

..

ima_api.c

security/integrity: constify some read-only data

2018-10-10 12:56:15 -04:00

ima_appraise.c

IMA: don't propagate opened through the entire thing

2018-07-12 10:04:19 -04:00

ima_crypto.c

ima: open a new file instance if no read permissions

2018-10-10 15:18:00 -04:00

ima_fs.c

ima: fix showing large 'violations' or 'runtime_measurements_count'

2018-10-10 12:56:16 -04:00

ima_init.c

security/integrity: constify some read-only data

2018-10-10 12:56:15 -04:00

ima_kexec.c

ima: Unify logging

2018-05-17 07:49:12 -04:00

ima_main.c

ima: prevent kexec_load syscall based on runtime secureboot flag

2018-12-11 07:10:33 -05:00

ima_mok.c

KEYS: Use structure to capture key restriction function and data

2017-04-04 14:10:10 -07:00

ima_policy.c

ima: don't measure/appraise files on efivarfs

2018-12-11 07:19:46 -05:00

ima_queue.c

ima: Get rid of ima_used_chip and use ima_tpm_chip != NULL instead

2018-07-28 17:03:11 +03:00

ima_template_lib.c

ima: Unify logging

2018-05-17 07:49:12 -04:00

ima_template_lib.h

ima: introduce ima_parse_buf()

2017-06-21 14:37:12 -04:00

ima_template.c

security/integrity: constify some read-only data

2018-10-10 12:56:15 -04:00

ima.h

security/integrity: constify some read-only data

2018-10-10 12:56:15 -04:00

Kconfig

x86/ima: define arch_get_ima_policy() for x86

2018-12-11 07:13:41 -05:00

Makefile

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00