IMA-templates.rst (5a25d8ceb8611c06797b74e22d04af2b9fefd130) | IMA-templates.rst (7dcfeacc5a9d0c130160b86de23279793a8732c8) |
---|---|
1================================= 2IMA Template Management Mechanism 3================================= 4 5 6Introduction 7============ 8 --- 61 unchanged lines hidden (view full) --- 70 prefix is shown only if the hash algorithm is not SHA1 or MD5); 71 - 'd-modsig': the digest of the event without the appended modsig; 72 - 'n-ng': the name of the event, without size limitations; 73 - 'sig': the file signature, or the EVM portable signature if the file 74 signature is not found; 75 - 'modsig' the appended file signature; 76 - 'buf': the buffer data that was used to generate the hash without size limitations; 77 - 'evmsig': the EVM portable signature; | 1================================= 2IMA Template Management Mechanism 3================================= 4 5 6Introduction 7============ 8 --- 61 unchanged lines hidden (view full) --- 70 prefix is shown only if the hash algorithm is not SHA1 or MD5); 71 - 'd-modsig': the digest of the event without the appended modsig; 72 - 'n-ng': the name of the event, without size limitations; 73 - 'sig': the file signature, or the EVM portable signature if the file 74 signature is not found; 75 - 'modsig' the appended file signature; 76 - 'buf': the buffer data that was used to generate the hash without size limitations; 77 - 'evmsig': the EVM portable signature; |
78 - 'iuid': the inode UID; 79 - 'igid': the inode GID; |
|
78 79 80Below, there is the list of defined template descriptors: 81 82 - "ima": its format is ``d|n``; 83 - "ima-ng" (default): its format is ``d-ng|n-ng``; 84 - "ima-sig": its format is ``d-ng|n-ng|sig``; 85 - "ima-buf": its format is ``d-ng|n-ng|buf``; --- 15 unchanged lines hidden --- | 80 81 82Below, there is the list of defined template descriptors: 83 84 - "ima": its format is ``d|n``; 85 - "ima-ng" (default): its format is ``d-ng|n-ng``; 86 - "ima-sig": its format is ``d-ng|n-ng|sig``; 87 - "ima-buf": its format is ``d-ng|n-ng|buf``; --- 15 unchanged lines hidden --- |