diff options
| author | Deven Bowers <[email protected]> | 2024-08-02 23:08:17 -0700 |
|---|---|---|
| committer | Paul Moore <[email protected]> | 2024-08-20 14:01:13 -0400 |
| commit | 05a351630b7463ce58668095f5683669c1295f65 (patch) | |
| tree | 92482f2c77171b1564954f3ceafed3f7233a6e28 /scripts/gdb/linux/tasks.py | |
| parent | 54a88cd259204f80672393602501567c74d64106 (diff) | |
ipe: add evaluation loop
Introduce a core evaluation function in IPE that will be triggered by
various security hooks (e.g., mmap, bprm_check, kexec). This function
systematically assesses actions against the defined IPE policy, by
iterating over rules specific to the action being taken. This critical
addition enables IPE to enforce its security policies effectively,
ensuring that actions intercepted by these hooks are scrutinized for policy
compliance before they are allowed to proceed.
Signed-off-by: Deven Bowers <[email protected]>
Signed-off-by: Fan Wu <[email protected]>
Reviewed-by: Serge Hallyn <[email protected]>
Signed-off-by: Paul Moore <[email protected]>
Diffstat (limited to 'scripts/gdb/linux/tasks.py')
0 files changed, 0 insertions, 0 deletions