admin-guide/LSM/ipe.rst

10    documentation about IPE please see :doc:`the design docs </security/ipe>`.
245    cat "$MY_POLICY.p7b" > /sys/kernel/security/ipe/new_policy
248 ``/sys/kernel/security/ipe/policies/``. The subdirectory will be the
250 the directory will be ``/sys/kernel/security/ipe/policies/Ex_Policy``.
290 ``/sys/kernel/security/ipe/policies/$policy_name/active``.
293    echo 1 > "/sys/kernel/security/ipe/policies/Ex_Policy/active"
300 ``/sys/kernel/security/ipe/policies/$policy_name/delete``.
303    echo 1 > "/sys/kernel/security/ipe/policies/$policy_name/delete"
311    writes to ipe's securityfs nodes require ``CAP_MAC_ADMIN``.
322 line parameter ``ipe.enforce=(0|1)``, or the securityfs node
323 ``/sys/kernel/security/ipe/enforce``.
328    all writes to ipe's securityfs nodes require ``CAP_MAC_ADMIN``.
338 … fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=2 comm="ld-linux.so" exe="/tmp/ipe-test/lib/ld-linux.s…
382 …CA42B51F68962354BA083122A20BB846F26765076DD8EED7B8F4DB auid=4294967295 ses=4294967295 lsm=ipe res=1
426 …CA42B51F68962354BA083122A20BB846F26765076DD8EED7B8F4DB auid=4294967295 ses=4294967295 lsm=ipe res=1
460 …): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=ipe res=1
464 …): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=ipe res=1
499 ``ipe.success_audit=(0|1)`` or
500 ``/sys/kernel/security/ipe/success_audit`` securityfs file.
508    all writes to ipe's securityfs nodes require ``CAP_MAC_ADMIN``.
750 - `Github Repository <https://github.com/microsoft/ipe>`_
751 - :doc:`Developer and design docs for IPE </security/ipe>`
780 .. [#devdoc] Please see :doc:`the design docs </security/ipe>` for more on