tree 0e6ba42925658c77bcb054f19385ccc7b51a5f31
parent a5552107ac62ae601769e29fee5fc5ad6299f7db
author Yuqiong Sun <suny@us.ibm.com> 1441377581 -0400
committer Mimi Zohar <zohar@linux.vnet.ibm.com> 1499643500 -0400

ima: Add appraisal support to IMA namespace

Enable each IMA namespace to appraise independently according to
their own appraisal policy.  Keys used to check the signature are
stored on a per-namespace IMA keyring.  Appraisal will only check
against keys on the namespace's keyring, but not recursively down
to the native.  Native is responsible for controlling what and when
keys can be loaded on a namespace's IMA keyring.

Signed-off-by: Yuqiong Sun <suny@us.ibm.com>