]> git.baikalelectronics.ru Git - kernel.git/commit
ima: remove enforce checking duplication
authorDmitry Kasatkin <dmitry.kasatkin@intel.com>
Thu, 27 Sep 2012 12:57:10 +0000 (15:57 +0300)
committerMimi Zohar <zohar@linux.vnet.ibm.com>
Wed, 16 Jan 2013 22:49:44 +0000 (17:49 -0500)
commitf45225d43cc70161712628f5d4afc9f2ff91e30f
treea75f963abc43a13e3d1a558b2f8c3d47b018b63d
parenta91033c1397b099c2eeffacf496383d640a83c5a
ima: remove enforce checking duplication

Based on the IMA appraisal policy, files are appraised.  For those
files appraised, the IMA hooks return the integrity appraisal result,
assuming IMA-appraisal is in enforcing mode.  This patch combines
both of these criteria (in policy and enforcing file integrity),
removing the checking duplication.

Changelog v1:
- Update hook comments

Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@intel.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
security/integrity/ima/ima_main.c