diff options
| author | Lans Zhang <jia.zhang@windriver.com> | 2017-01-06 12:38:11 +0800 |
|---|---|---|
| committer | Mimi Zohar <zohar@linux.vnet.ibm.com> | 2017-01-27 14:17:21 -0500 |
| commit | 20f482ab9e0f800d1e01ce748ebd382d085abe56 (patch) | |
| tree | c8a2ee29204155ef9ef6c2b7d9586f27499086d5 /security/integrity/ima/ima_api.c | |
| parent | bc15ed663e7e53ee4dc3e60f8d09c93a0528c694 (diff) | |
| download | op-kernel-dev-20f482ab9e0f800d1e01ce748ebd382d085abe56.zip op-kernel-dev-20f482ab9e0f800d1e01ce748ebd382d085abe56.tar.gz | |
ima: allow to check MAY_APPEND
Otherwise some mask and inmask tokens with MAY_APPEND flag may not work
as expected.
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Diffstat (limited to 'security/integrity/ima/ima_api.c')
| -rw-r--r-- | security/integrity/ima/ima_api.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/security/integrity/ima/ima_api.c b/security/integrity/ima/ima_api.c index d01a52f..c2edba8 100644 --- a/security/integrity/ima/ima_api.c +++ b/security/integrity/ima/ima_api.c @@ -157,7 +157,8 @@ err_out: /** * ima_get_action - appraise & measure decision based on policy. * @inode: pointer to inode to measure - * @mask: contains the permission mask (MAY_READ, MAY_WRITE, MAY_EXECUTE) + * @mask: contains the permission mask (MAY_READ, MAY_WRITE, MAY_EXEC, + * MAY_APPEND) * @func: caller identifier * @pcr: pointer filled in if matched measure policy sets pcr= * |
