tree 8139bca0aa4a052a20c70fef6fad404e8cce545e
parent d87d2b1feb1093e970a8d6a9bef1aff36927bb3f
author Yuqiong Sun <suny@us.ibm.com> 1441338218 -0400
committer Mimi Zohar <zohar@linux.vnet.ibm.com> 1499643468 -0400

ima: Enable recursive measurements down to the host

Allow measurements to be stored on measurement lists of recursively
down to the native (child->parent->...->native).  Namespace of each
layer independently decide whether or not the measurements will be
stored on its list, based on the namespace's measurement policy.

Changelog:
* Fix ima file flags as S_IRUGO and S_IWUGO and add
CAP_SYS_ADMIN checks for opening ima files in a namespace

Signed-off-by: Yuqiong Sun <suny@us.ibm.com>
Signed-off-by: Mehmet Kayaalp <mkayaalp@linux.vnet.ibm.com>