]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e44138e) | patch
ima: extend "mask" policy matching support
authorMimi Zohar <zohar@linux.vnet.ibm.com>
Wed, 5 Nov 2014 12:53:55 +0000 (07:53 -0500)
committerMimi Zohar <zohar@linux.vnet.ibm.com>
Tue, 16 Jun 2015 12:18:44 +0000 (08:18 -0400)
commit0a3cd1c01001cee9f4c06a517a945dbed3748171
treecc7dface0ae4de97545e26df97a42171034e9443tree | snapshot
parente44138e72a8d65fbf54a3e1c7a4ab52c56a2948dcommit | diff
ima: extend "mask" policy matching support

The current "mask" policy option matches files opened as MAY_READ,
MAY_WRITE, MAY_APPEND or MAY_EXEC.  This patch extends the "mask"
option to match files opened containing one of these modes.  For
example, "mask=^MAY_READ" would match files opened read-write.

Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Signed-off-by: Dr. Greg Wettstein <gw@idfusion.org>
Cc: stable@vger.kernel.org
Documentation/ABI/testing/ima_policy diff | blob | history
security/integrity/ima/ima_policy.c diff | blob | history
Linux Kernel Source Tree.