ima.h (2faa6ef3b21152cc05b69a84113625dcee63176f) ima.h (a756024efea259282e65f3a00f512b094e805d76)
1/*
2 * Copyright (C) 2005,2006,2007,2008 IBM Corporation
3 *
4 * Authors:
5 * Reiner Sailer <sailer@watson.ibm.com>
6 * Mimi Zohar <zohar@us.ibm.com>
7 *
8 * This program is free software; you can redistribute it and/or

--- 29 unchanged lines hidden (view full) ---

38#define IMA_MEASURE_HTABLE_SIZE (1 << IMA_HASH_BITS)
39
40#define IMA_TEMPLATE_FIELD_ID_MAX_LEN 16
41#define IMA_TEMPLATE_NUM_FIELDS_MAX 15
42
43#define IMA_TEMPLATE_IMA_NAME "ima"
44#define IMA_TEMPLATE_IMA_FMT "d|n"
45
1/*
2 * Copyright (C) 2005,2006,2007,2008 IBM Corporation
3 *
4 * Authors:
5 * Reiner Sailer <sailer@watson.ibm.com>
6 * Mimi Zohar <zohar@us.ibm.com>
7 *
8 * This program is free software; you can redistribute it and/or

--- 29 unchanged lines hidden (view full) ---

38#define IMA_MEASURE_HTABLE_SIZE (1 << IMA_HASH_BITS)
39
40#define IMA_TEMPLATE_FIELD_ID_MAX_LEN 16
41#define IMA_TEMPLATE_NUM_FIELDS_MAX 15
42
43#define IMA_TEMPLATE_IMA_NAME "ima"
44#define IMA_TEMPLATE_IMA_FMT "d|n"
45
46/* current content of the policy */
47extern int ima_policy_flag;
48
46/* set during initialization */
47extern int ima_initialized;
48extern int ima_used_chip;
49extern int ima_hash_algo;
50extern int ima_appraise;
51
52/* IMA template field data definition */
53struct ima_field_data {

--- 94 unchanged lines hidden (view full) ---

148
149/* IMA policy related functions */
150enum ima_hooks { FILE_CHECK = 1, MMAP_CHECK, BPRM_CHECK, MODULE_CHECK, FIRMWARE_CHECK, POST_SETATTR };
151
152int ima_match_policy(struct inode *inode, enum ima_hooks func, int mask,
153 int flags);
154void ima_init_policy(void);
155void ima_update_policy(void);
49/* set during initialization */
50extern int ima_initialized;
51extern int ima_used_chip;
52extern int ima_hash_algo;
53extern int ima_appraise;
54
55/* IMA template field data definition */
56struct ima_field_data {

--- 94 unchanged lines hidden (view full) ---

151
152/* IMA policy related functions */
153enum ima_hooks { FILE_CHECK = 1, MMAP_CHECK, BPRM_CHECK, MODULE_CHECK, FIRMWARE_CHECK, POST_SETATTR };
154
155int ima_match_policy(struct inode *inode, enum ima_hooks func, int mask,
156 int flags);
157void ima_init_policy(void);
158void ima_update_policy(void);
159void ima_update_policy_flag(void);
156ssize_t ima_parse_add_rule(char *);
157void ima_delete_rules(void);
158
159/* Appraise integrity measurements */
160#define IMA_APPRAISE_ENFORCE 0x01
161#define IMA_APPRAISE_FIX 0x02
162#define IMA_APPRAISE_LOG 0x04
163#define IMA_APPRAISE_MODULES 0x08

--- 92 unchanged lines hidden ---
160ssize_t ima_parse_add_rule(char *);
161void ima_delete_rules(void);
162
163/* Appraise integrity measurements */
164#define IMA_APPRAISE_ENFORCE 0x01
165#define IMA_APPRAISE_FIX 0x02
166#define IMA_APPRAISE_LOG 0x04
167#define IMA_APPRAISE_MODULES 0x08

--- 92 unchanged lines hidden ---