diff options
author | Dmitry Kasatkin <dmitry.kasatkin@intel.com> | 2012-09-27 15:57:10 +0300 |
---|---|---|
committer | Mimi Zohar <zohar@linux.vnet.ibm.com> | 2013-01-16 17:49:44 -0500 |
commit | 750943a30714b7e9a5a2b0e08eeef7a808b5a869 (patch) | |
tree | a75f963abc43a13e3d1a558b2f8c3d47b018b63d /security/integrity/ima/ima_appraise.c | |
parent | def3e8b9ee23cb69036910e48ec4e3eff40e04cb (diff) | |
download | op-kernel-dev-750943a30714b7e9a5a2b0e08eeef7a808b5a869.zip op-kernel-dev-750943a30714b7e9a5a2b0e08eeef7a808b5a869.tar.gz |
ima: remove enforce checking duplication
Based on the IMA appraisal policy, files are appraised. For those
files appraised, the IMA hooks return the integrity appraisal result,
assuming IMA-appraisal is in enforcing mode. This patch combines
both of these criteria (in policy and enforcing file integrity),
removing the checking duplication.
Changelog v1:
- Update hook comments
Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@intel.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Diffstat (limited to 'security/integrity/ima/ima_appraise.c')
0 files changed, 0 insertions, 0 deletions