integrity/ima/ima_policy.c

45 #define APPRAISE	0x0004	/* same as IMA_APPRAISE */  macro
209 	{.action = APPRAISE, .func = POLICY_CHECK,
213 	{.action = APPRAISE, .fowner = GLOBAL_ROOT_UID, .fowner_op = &vfsuid_eq_kuid,
217 	{.action = APPRAISE, .fowner = GLOBAL_ROOT_UID, .fowner_op = &vfsuid_eq_kuid,
224 	{.action = APPRAISE, .func = MODULE_CHECK,
228 	{.action = APPRAISE, .func = FIRMWARE_CHECK,
232 	{.action = APPRAISE, .func = KEXEC_KERNEL_CHECK,
236 	{.action = APPRAISE, .func = POLICY_CHECK,
242 	{.action = APPRAISE, .func = MODULE_CHECK,
244 	{.action = APPRAISE, .func = FIRMWARE_CHECK,
246 	{.action = APPRAISE, .func = KEXEC_KERNEL_CHECK,
248 	{.action = APPRAISE, .func = POLICY_CHECK,
883 		if (entries[i].action == APPRAISE) {  in add_rules()
1251 	if (entry->action != APPRAISE &&  in ima_validate_rule()
1340 		if (entry->action != APPRAISE)  in ima_validate_rule()
1371 	if (entry->action == APPRAISE &&  in ima_validate_rule()
1461 			entry->action = APPRAISE;  in ima_parse_rule()
1892 	else if (entry->action == APPRAISE)  in ima_parse_rule()
2092 	if (entry->action & APPRAISE)  in ima_policy_show()
2306 		if (entry->action != APPRAISE)  in ima_appraise_signature()