ima: add check for enforced appraise option
authorBruno Meneguele <bmeneg@redhat.com>
Fri, 4 Sep 2020 19:40:57 +0000 (16:40 -0300)
committerMimi Zohar <zohar@linux.ibm.com>
Wed, 9 Sep 2020 02:02:57 +0000 (22:02 -0400)
commit4afb28ab03d5d811b369af4472f3941557928569
treef6f6163755a2855658d12dbe53c2f0e5e97d85bf
parente44f128768bf28c17a5c0a35b5942bd04a8a64b0
ima: add check for enforced appraise option

The "enforce" string is allowed as an option for ima_appraise= kernel
paramenter per kernel-paramenters.txt and should be considered on the
parameter setup checking as a matter of completeness. Also it allows futher
checking on the options being passed by the user.

Signed-off-by: Bruno Meneguele <bmeneg@redhat.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
security/integrity/ima/ima_appraise.c