[PATCH v3 1/3] ima: make ima event log trimming configurable

[steven chen]

Make ima event log trimming function configurable.

Signed-off-by: steven chen <chen...@linux.microsoft.com>
---
 security/integrity/ima/Kconfig | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/security/integrity/ima/Kconfig b/security/integrity/ima/Kconfig
index 976e75f9b9ba..322964ae4772 100644
--- a/security/integrity/ima/Kconfig
+++ b/security/integrity/ima/Kconfig
@@ -332,4 +332,16 @@ config IMA_KEXEC_EXTRA_MEMORY_KB
          If set to the default value of 0, an extra half page of memory for 
those
          additional measurements will be allocated.
 
+config IMA_LOG_TRIMMING
+       bool "IMA Event Log Trimming"
+       default n
+       help
+         Say Y here if you want support for IMA Event Log Trimming.
+               This creates the file 
/sys/kernel/security/integrity/ima/ima_trim_log.
+               Userspace
+                 - writes to this file to trigger IMA event log trimming
+                 - reads this file to get number of entried trimming last time
+
+         If unsure, say N.
+
 endif
-- 
2.43.0