]> git.baikalelectronics.ru Git - kernel.git/commit
IMA: allow reading back the current IMA policy
authorPetko Manolov <petkan@mip-labs.com>
Wed, 2 Dec 2015 15:47:56 +0000 (17:47 +0200)
committerMimi Zohar <zohar@linux.vnet.ibm.com>
Tue, 15 Dec 2015 15:01:43 +0000 (10:01 -0500)
commit1b213a37fb5eb86984e84734b1a3cb2284995d08
treedb99b638e2688529f6f61756ffae56b64a95311b
parented66a0a96f79828bedd0b03eb22931ec6202cabe
IMA: allow reading back the current IMA policy

It is often useful to be able to read back the IMA policy.  It is
even more important after introducing CONFIG_IMA_WRITE_POLICY.
This option allows the root user to see the current policy rules.

Signed-off-by: Zbigniew Jasinski <z.jasinski@samsung.com>
Signed-off-by: Petko Manolov <petkan@mip-labs.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
security/integrity/ima/Kconfig
security/integrity/ima/ima.h
security/integrity/ima/ima_fs.c
security/integrity/ima/ima_policy.c