From: Dmitry Kasatkin <dmitry.kasatkin@intel.com>
Date: Fri, 8 Jun 2012 10:58:49 +0000 (+0300)
Subject: ima: added policy support for 'security.ima' type
X-Git-Tag: v3.9-rc1~137^2~35
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=0e5a247cb37a97d843ef76d09d5f80deb7893ba3;p=pandora-kernel.git

ima: added policy support for 'security.ima' type

The 'security.ima' extended attribute may contain either the file data's
hash or a digital signature.  This patch adds support for requiring a
specific extended attribute type.  It extends the IMA policy with a new
keyword 'appraise_type=imasig'.  (Default is hash.)

Changelog v2:
- Fixed Documentation/ABI/testing/ima_policy option syntax
Changelog v1:
- Differentiate between 'required' vs. 'actual' extended attribute

Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@intel.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
---

Reading git-diff-tree failed