Lakshmi Ramasubramanian e9085e0ad3 IMA: Add support to limit measuring keys ... Limit measuring keys to those keys being loaded onto a given set of keyrings only and when the user id (uid) matches if uid is specified in the policy. This patch defines a new IMA policy option namely "keyrings=" that can be used to specify a set of keyrings. If this option is specified in the policy for "measure func=KEY_CHECK" then only the keys loaded onto a keyring given in the "keyrings=" option are measured. If uid is specified in the policy then the key is measured only if the current user id matches the one specified in the policy. Added a new parameter namely "keyring" (name of the keyring) to process_buffer_measurement(). The keyring name is passed to ima_get_action() to determine the required action. ima_match_rules() is updated to check keyring in the policy, if specified, for KEY_CHECK function. Signed-off-by: Lakshmi Ramasubramanian <nramas@linux.microsoft.com> Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>		2019-12-12 08:53:50 -05:00
..
apparmor	+ Features	2019-12-03 12:51:35 -08:00
integrity	IMA: Add support to limit measuring keys	2019-12-12 08:53:50 -05:00
keys	KEYS: Call the IMA hook to measure keys	2019-12-12 08:53:50 -05:00
loadpin	proc/sysctl: add shared variables for range check	2019-07-18 17:08:07 -07:00
lockdown	powerpc updates for 5.5	2019-11-30 14:35:43 -08:00
safesetid	security/safesetid: Replace rcu_swap_protected() with rcu_replace_pointer()	2019-10-30 08:45:57 -07:00
selinux	y2038: syscall implementation cleanups	2019-12-01 14:00:59 -08:00
smack	pipe: Reduce #inclusion of pipe_fs_i.h	2019-10-23 17:02:34 +01:00
tomoyo
yama	proc/sysctl: add shared variables for range check	2019-07-18 17:08:07 -07:00
commoncap.c
device_cgroup.c	device_cgroup: Export devcgroup_check_permission	2019-10-07 15:11:38 -05:00
inode.c	Merge branch 'work.mount0' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2019-07-19 10:42:02 -07:00
Kconfig	Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security	2019-09-28 08:14:15 -07:00
Kconfig.hardening	meminit fix	2019-07-28 12:33:15 -07:00
lsm_audit.c
Makefile	security: Add a static lockdown policy LSM	2019-08-19 21:54:15 -07:00
min_addr.c
security.c	perf_event: Add support for LSM and SELinux checks	2019-10-17 21:31:55 +02:00