ima: extend "mask" policy matching support

Browse source

commit 4351c294b8 upstream.

The current "mask" policy option matches files opened as MAY_READ,
MAY_WRITE, MAY_APPEND or MAY_EXEC.  This patch extends the "mask"
option to match files opened containing one of these modes.  For
example, "mask=^MAY_READ" would match files opened read-write.

Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Signed-off-by: Dr. Greg Wettstein <gw@idfusion.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

...

This commit is contained in:

Mimi Zohar 2014-11-05 07:53:55 -05:00 • committed by Greg Kroah-Hartman

parent 9428e8a373

commit bf609547cd

2 changed files with 17 additions and 6 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

3

Documentation/ABI/testing/ima_policy

View file

20

security/integrity/ima/ima_policy.c

View file