OpenCloudOS-Kernel/security/integrity/ima
Prakhar Srivastava b0935123a1 IMA: Define a new hook to measure the kexec boot command line arguments
Currently during soft reboot(kexec_file_load) boot command line
arguments are not measured. Define hooks needed to measure kexec
command line arguments during soft reboot(kexec_file_load).

- A new ima hook ima_kexec_cmdline is defined to be called by the
kexec code.
- A new function process_buffer_measurement is defined to measure
the buffer hash into the IMA measurement list.
- A new func policy KEXEC_CMDLINE is defined to control the
 measurement.

Signed-off-by: Prakhar Srivastava <prsriva02@gmail.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
2019-06-24 08:29:57 -04:00
..
Kconfig x86/ima: fix the Kconfig dependency for IMA_ARCH_POLICY 2019-06-14 08:53:58 -04:00
Makefile License cleanup: add SPDX GPL-2.0 license identifier to files with no license 2017-11-02 11:10:55 +01:00
ima.h IMA: Define a new hook to measure the kexec boot command line arguments 2019-06-24 08:29:57 -04:00
ima_api.c IMA: Define a new hook to measure the kexec boot command line arguments 2019-06-24 08:29:57 -04:00
ima_appraise.c IMA: support for per policy rule template formats 2019-06-19 18:51:01 -04:00
ima_crypto.c crypto: shash - remove shash_desc::flags 2019-04-25 15:38:12 +08:00
ima_fs.c security: audit and remove any unnecessary uses of module.h 2018-12-12 14:58:51 -08:00
ima_init.c IMA: support for per policy rule template formats 2019-06-19 18:51:01 -04:00
ima_kexec.c mm: convert totalram_pages and totalhigh_pages variables to atomic 2018-12-28 12:11:47 -08:00
ima_main.c IMA: Define a new hook to measure the kexec boot command line arguments 2019-06-24 08:29:57 -04:00
ima_mok.c KEYS: Use structure to capture key restriction function and data 2017-04-04 14:10:10 -07:00
ima_policy.c IMA: Define a new hook to measure the kexec boot command line arguments 2019-06-24 08:29:57 -04:00
ima_queue.c tpm: pass an array of tpm_extend_digest structures to tpm_pcr_extend() 2019-02-13 09:48:52 +02:00
ima_template.c IMA: support for per policy rule template formats 2019-06-19 18:51:01 -04:00
ima_template_lib.c security: mark expected switch fall-throughs and add a missing break 2019-02-22 09:56:09 -08:00
ima_template_lib.h ima: introduce ima_parse_buf() 2017-06-21 14:37:12 -04:00