integrity/ima/ima_policy.c

44 #define DONT_MEASURE	0x0002  macro
148 	{.action = DONT_MEASURE, .fsmagic = PROC_SUPER_MAGIC, .flags = IMA_FSMAGIC},
149 	{.action = DONT_MEASURE, .fsmagic = SYSFS_MAGIC, .flags = IMA_FSMAGIC},
150 	{.action = DONT_MEASURE, .fsmagic = DEBUGFS_MAGIC, .flags = IMA_FSMAGIC},
151 	{.action = DONT_MEASURE, .fsmagic = TMPFS_MAGIC, .flags = IMA_FSMAGIC},
152 	{.action = DONT_MEASURE, .fsmagic = DEVPTS_SUPER_MAGIC, .flags = IMA_FSMAGIC},
153 	{.action = DONT_MEASURE, .fsmagic = BINFMTFS_MAGIC, .flags = IMA_FSMAGIC},
154 	{.action = DONT_MEASURE, .fsmagic = SECURITYFS_MAGIC, .flags = IMA_FSMAGIC},
155 	{.action = DONT_MEASURE, .fsmagic = SELINUX_MAGIC, .flags = IMA_FSMAGIC},
156 	{.action = DONT_MEASURE, .fsmagic = SMACK_MAGIC, .flags = IMA_FSMAGIC},
157 	{.action = DONT_MEASURE, .fsmagic = CGROUP_SUPER_MAGIC,
159 	{.action = DONT_MEASURE, .fsmagic = CGROUP2_SUPER_MAGIC,
161 	{.action = DONT_MEASURE, .fsmagic = NSFS_MAGIC, .flags = IMA_FSMAGIC},
162 	{.action = DONT_MEASURE, .fsmagic = EFIVARFS_MAGIC, .flags = IMA_FSMAGIC}
1304 		if (entry->action & ~(MEASURE | DONT_MEASURE))  in ima_validate_rule()
1315 		if (entry->action & ~(MEASURE | DONT_MEASURE))  in ima_validate_rule()
1327 		if (entry->action & ~(MEASURE | DONT_MEASURE))  in ima_validate_rule()
1453 			entry->action = DONT_MEASURE;  in ima_parse_rule()
2090 	if (entry->action & DONT_MEASURE)  in ima_policy_show()