5a9196d715607f76d6b7d96a0970d6065335e62b - arm/linux

commit	5a9196d715607f76d6b7d96a0970d6065335e62b	[log] [tgz]
author	Mimi Zohar <zohar@linux.vnet.ibm.com>	Tue Jul 22 10:39:48 2014 -0400
committer	Kees Cook <keescook@chromium.org>	Fri Jul 25 11:47:46 2014 -0700
tree	df323588d1026b947e489c5fb9c83299dbcb9689
parent	6593d9245bc66e6e3cf4ba6d365a7833110c1402 [diff]

ima: add support for measuring and appraising firmware

The "security: introduce kernel_fw_from_file hook" patch defined a
new security hook to evaluate any loaded firmware that wasn't built
into the kernel.

This patch defines ima_fw_from_file(), which is called from the new
security hook, to measure and/or appraise the loaded firmware's
integrity.

Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Signed-off-by: Kees Cook <keescook@chromium.org>

Documentation/ABI/testing/ima_policy[diff]
include/linux/ima.h[diff]
security/integrity/ima/ima.h[diff]
security/integrity/ima/ima_appraise.c[diff]
security/integrity/ima/ima_main.c[diff]
security/integrity/ima/ima_policy.c[diff]
security/integrity/integrity.h[diff]
security/security.c[diff]

8 files changed

tree: df323588d1026b947e489c5fb9c83299dbcb9689