Re: [Fwd: Re: [PATCH 2/2] ima: add policy support for file system uuid]

2013-02-22 Thread Mimi Zohar
Dmitry Kasatkin > > Subject: Re: [PATCH 2/2] ima: add policy support for file system uuid > > Date: Fri, 22 Feb 2013 02:39:43 -0800 (PST) > > > > On Thu, 21 Feb 2013, Mimi Zohar wrote: > > > >>>> diff --git a/security/integrity/ima/ima_policy.c >

Re: [Fwd: Re: [PATCH 2/2] ima: add policy support for file system uuid]

2013-02-22 Thread Randy Dunlap
On 02/22/13 10:43, Mimi Zohar wrote: > Forwarded Message > From: David Rientjes > To: Mimi Zohar > Cc: linux-security-mod...@vger.kernel.org, linux-kernel@vger.kernel.org, > Dmitry Kasatkin > Subject: Re: [PATCH 2/2] ima: add policy support for file system uu

Re: [PATCH 2/2] ima: add policy support for file system uuid

2013-02-22 Thread David Rientjes
On Thu, 21 Feb 2013, Mimi Zohar wrote: > > > diff --git a/security/integrity/ima/ima_policy.c > > > b/security/integrity/ima/ima_policy.c > > > index 4adcd0f..23f49e3 100644 > > > --- a/security/integrity/ima/ima_policy.c > > > +++ b/security/integrity/ima/ima_policy.c > > > @@ -16,6 +16,7 @@ > >

Re: [PATCH 2/2] ima: add policy support for file system uuid

2013-02-21 Thread Mimi Zohar
On Thu, 2013-02-21 at 13:54 -0800, David Rientjes wrote: > On Tue, 5 Feb 2013, Mimi Zohar wrote: > > > diff --git a/security/integrity/ima/ima_policy.c > > b/security/integrity/ima/ima_policy.c > > index 4adcd0f..23f49e3 100644 > > --- a/security/integrity/ima/ima_policy.c > > +++ b/security/inte

Re: [PATCH 2/2] ima: add policy support for file system uuid

2013-02-21 Thread David Rientjes
On Tue, 5 Feb 2013, Mimi Zohar wrote: > diff --git a/security/integrity/ima/ima_policy.c > b/security/integrity/ima/ima_policy.c > index 4adcd0f..23f49e3 100644 > --- a/security/integrity/ima/ima_policy.c > +++ b/security/integrity/ima/ima_policy.c > @@ -16,6 +16,7 @@ > #include > #include >

[PATCH 2/2] ima: add policy support for file system uuid

2013-02-05 Thread Mimi Zohar
From: Dmitry Kasatkin The IMA policy permits specifying rules to enable or disable measurement/appraisal/audit based on the file system magic number. If, for example, the policy contains an ext4 measurement rule, the rule is enabled for all ext4 partitions. Sometimes it might be necessary to ena