Documentation/security/IMA-templates.rst

41 mechanism) to generate a new measurement entry by using the template
46 a given template but, instead, it simply calls the ``init()`` method of the template
48 (pointer to allocated data and data length) in the measurement entry structure.
51 The functions ``ima[_ascii]_measurements_show()`` retrieve, for each entry,
52 the template descriptor used to produce that entry and call the show()
53 method for each item of the array of template fields structures.
65  - 'd': the digest of the event (i.e. the digest of a measured file),
67  - 'n': the name of the event (i.e. the file name), with size up to 255 bytes;
68  - 'd-ng': the digest of the event, calculated with an arbitrary hash
71  - 'd-modsig': the digest of the event without the appended modsig;
72  - 'n-ng': the name of the event, without size limitations;
73  - 'sig': the file signature;
74  - 'modsig' the appended file signature;
75  - 'buf': the buffer data that was used to generate the hash without size limitations;
80  - "ima": its format is ``d|n``;
81  - "ima-ng" (default): its format is ``d-ng|n-ng``;
82  - "ima-sig": its format is ``d-ng|n-ng|sig``;
83  - "ima-buf": its format is ``d-ng|n-ng|buf``;
84  - "ima-modsig": its format is ``d-ng|n-ng|sig|d-modsig|modsig``;
93  - select a template descriptor among those supported in the kernel
94    configuration (``ima-ng`` is the default choice);
95  - specify a template descriptor name from the kernel command line through
97  - register a new template descriptor with custom format through the kernel