ima: require signed IMA policy
authorMimi Zohar <zohar@linux.vnet.ibm.com>
Mon, 7 Dec 2015 20:08:01 +0000 (15:08 -0500)
committerMimi Zohar <zohar@linux.vnet.ibm.com>
Sun, 21 Feb 2016 14:34:23 +0000 (09:34 -0500)
commit95ee08fa373b9ede1059c2f384cfeafe10dcd6bb
tree6a0a93475e6a3a26328a800747e9188a04c8eef5
parent19f8a84713edc1d27ea05be00effb97b8f1ef207
ima: require signed IMA policy

Require the IMA policy to be signed when additional rules can be added.

v1:
- initialize the policy flag
- include IMA_APPRAISE_POLICY in the policy flag

Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Acked-by: Petko Manolov <petkan@mip-labs.com>
Acked-by: Dmitry Kasatkin <dmitry.kasatkin@huawei.com>
security/integrity/ima/ima_policy.c