| commit | fd008ff42477ecca858d7ddf5d71a7613fb3c851 | [log] [tgz] |
|---|---|---|
| author | Yuqiong Sun <suny@us.ibm.com> | Fri Sep 04 10:39:41 2015 -0400 |
| committer | Mimi Zohar <zohar@linux.vnet.ibm.com> | Sun Jul 09 19:38:20 2017 -0400 |
| tree | 0e6ba42925658c77bcb054f19385ccc7b51a5f31 | |
| parent | a5552107ac62ae601769e29fee5fc5ad6299f7db [diff] |
ima: Add appraisal support to IMA namespace Enable each IMA namespace to appraise independently according to their own appraisal policy. Keys used to check the signature are stored on a per-namespace IMA keyring. Appraisal will only check against keys on the namespace's keyring, but not recursively down to the native. Native is responsible for controlling what and when keys can be loaded on a namespace's IMA keyring. Signed-off-by: Yuqiong Sun <suny@us.ibm.com>