integrity/ima/ima_policy.c

7  *	- initialize default measure policy rules
43 #define MEASURE		0x0001	/* same as IMA_MEASURE */  macro
122 	struct ima_rule_opt_list *keyrings; /* Measure keys added to these keyrings */
123 	struct ima_rule_opt_list *label; /* Measure data grouped under this label */
166 	{.action = MEASURE, .func = MMAP_CHECK, .mask = MAY_EXEC,
168 	{.action = MEASURE, .func = BPRM_CHECK, .mask = MAY_EXEC,
170 	{.action = MEASURE, .func = FILE_CHECK, .mask = MAY_READ,
173 	{.action = MEASURE, .func = MODULE_CHECK, .flags = IMA_FUNC},
174 	{.action = MEASURE, .func = FIRMWARE_CHECK, .flags = IMA_FUNC},
178 	{.action = MEASURE, .func = MMAP_CHECK, .mask = MAY_EXEC,
180 	{.action = MEASURE, .func = BPRM_CHECK, .mask = MAY_EXEC,
182 	{.action = MEASURE, .func = FILE_CHECK, .mask = MAY_READ,
185 	{.action = MEASURE, .func = FILE_CHECK, .mask = MAY_READ,
188 	{.action = MEASURE, .func = MODULE_CHECK, .flags = IMA_FUNC},
189 	{.action = MEASURE, .func = FIRMWARE_CHECK, .flags = IMA_FUNC},
190 	{.action = MEASURE, .func = POLICY_CHECK, .flags = IMA_FUNC},
253 	{.action = MEASURE, .func = CRITICAL_DATA, .flags = IMA_FUNC},
506  * @func_data: data to match against the measure rule data
730  * Measure decision based on func/mask/fsmagic and LSM(subj/obj/type)
936  * ima_init_policy - initialize the default measure rules.
1025  * ima_update_policy - update default_rules with new measure rules
1080 	{Opt_measure, "measure"},
1245 	if (entry->action != MEASURE && entry->flags & IMA_PCR)  in ima_validate_rule()
1301 		if (entry->action & ~(MEASURE | DONT_MEASURE))  in ima_validate_rule()
1312 		if (entry->action & ~(MEASURE | DONT_MEASURE))  in ima_validate_rule()
1324 		if (entry->action & ~(MEASURE | DONT_MEASURE))  in ima_validate_rule()
1437 			ima_log_string(ab, "action", "measure");  in ima_parse_rule()
1442 			entry->action = MEASURE;  in ima_parse_rule()
1861 			if (entry->action != MEASURE) {  in ima_parse_rule()
1899 	if (!result && entry->action == MEASURE &&  in ima_parse_rule()
2085 	if (entry->action & MEASURE)  in ima_policy_show()