diff options
| author | Mimi Zohar <[email protected]> | 2018-02-21 11:36:32 -0500 |
|---|---|---|
| committer | Mimi Zohar <[email protected]> | 2018-03-23 06:31:37 -0400 |
| commit | 9e67028e76514a8ee279d7d006dfb8069b5115ab (patch) | |
| tree | 9827bd28b629bf69db447666494194d118d58e25 /tools/perf/util/scripting-engines/trace-event-python.c | |
| parent | a9a4935d44b58c858a81393694bc232a96cdcbd4 (diff) | |
ima: fail signature verification based on policy
This patch addresses the fuse privileged mounted filesystems in
environments which are unwilling to accept the risk of trusting the
signature verification and want to always fail safe, but are for example
using a pre-built kernel.
This patch defines a new builtin policy named "fail_securely", which can
be specified on the boot command line as an argument to "ima_policy=".
Signed-off-by: Mimi Zohar <[email protected]>
Cc: Miklos Szeredi <[email protected]>
Cc: Seth Forshee <[email protected]>
Cc: Dongsu Park <[email protected]>
Cc: Alban Crequy <[email protected]>
Acked-by: Serge Hallyn <[email protected]>
Acked-by: "Eric W. Biederman" <[email protected]>
Diffstat (limited to 'tools/perf/util/scripting-engines/trace-event-python.c')
0 files changed, 0 insertions, 0 deletions