]> git.baikalelectronics.ru Git - kernel.git/commit
ima: remove enforce checking duplication
authorDmitry Kasatkin <dmitry.kasatkin@intel.com>
Thu, 27 Sep 2012 12:57:10 +0000 (15:57 +0300)
committerMimi Zohar <zohar@linux.vnet.ibm.com>
Wed, 16 Jan 2013 22:49:44 +0000 (17:49 -0500)
commit636f3c4f5027d968e84e702647b359e02c4acc2e
treea75f963abc43a13e3d1a558b2f8c3d47b018b63d
parent0b187053c805ade12055ce9d22a170744f2bc4ff
ima: remove enforce checking duplication

Based on the IMA appraisal policy, files are appraised.  For those
files appraised, the IMA hooks return the integrity appraisal result,
assuming IMA-appraisal is in enforcing mode.  This patch combines
both of these criteria (in policy and enforcing file integrity),
removing the checking duplication.

Changelog v1:
- Update hook comments

Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@intel.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
security/integrity/ima/ima_main.c