ima: support new kernel module syscall
authorMimi Zohar <zohar@linux.vnet.ibm.com>
Tue, 16 Oct 2012 02:10:08 +0000 (12:40 +1030)
committerRusty Russell <rusty@rustcorp.com.au>
Fri, 14 Dec 2012 02:35:26 +0000 (13:05 +1030)
commitfdf90729e57812cb12d7938e2dee7c71e875fb08
tree0ec17c765406dedc37ac278823d50587d53d1525
parent1625cee56f8e6193b5a0809a414dfa395bd9cf1e
ima: support new kernel module syscall

With the addition of the new kernel module syscall, which defines two
arguments - a file descriptor to the kernel module and a pointer to a NULL
terminated string of module arguments - it is now possible to measure and
appraise kernel modules like any other file on the file system.

This patch adds support to measure and appraise kernel modules in an
extensible and consistent manner.

To support filesystems without extended attribute support, additional
patches could pass the signature as the first parameter.

Signed-off-by: Mimi Zohar <zohar@us.ibm.com>
Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
Documentation/ABI/testing/ima_policy
include/linux/ima.h
security/integrity/ima/ima.h
security/integrity/ima/ima_api.c
security/integrity/ima/ima_main.c
security/integrity/ima/ima_policy.c
security/security.c