| /linux-6.12.1/drivers/md/ |
| D | dm-ima.c | 171 memset(&(md->ima), 0, sizeof(md->ima)); in dm_ima_reset_data()
172 md->ima.dm_version_str_len = strlen(DM_IMA_VERSION_STR); in dm_ima_reset_data()
229 memcpy(ima_buf + l, DM_IMA_VERSION_STR, table->md->ima.dm_version_str_len); in dm_ima_measure_on_table_load()
230 l += table->md->ima.dm_version_str_len; in dm_ima_measure_on_table_load()
286 memcpy(ima_buf + l, DM_IMA_VERSION_STR, table->md->ima.dm_version_str_len); in dm_ima_measure_on_table_load()
287 l += table->md->ima.dm_version_str_len; in dm_ima_measure_on_table_load()
339 if (table->md->ima.active_table.hash != table->md->ima.inactive_table.hash) in dm_ima_measure_on_table_load()
340 kfree(table->md->ima.inactive_table.hash); in dm_ima_measure_on_table_load()
342 table->md->ima.inactive_table.hash = digest_buf; in dm_ima_measure_on_table_load()
343 table->md->ima.inactive_table.hash_len = strlen(digest_buf); in dm_ima_measure_on_table_load()
[all …]
|
| D | dm-core.h | 147 struct dm_ima_measurements ima; member
|
| D | Makefile | 96 dm-mod-objs += dm-ima.o
|
| /linux-6.12.1/security/integrity/ima/ |
| D | Makefile | 7 obj-$(CONFIG_IMA) += ima.o ima_iint.o
9 ima-y := ima_fs.o ima_queue.o ima_init.o ima_main.o ima_crypto.o ima_api.o \
11 ima-$(CONFIG_IMA_APPRAISE) += ima_appraise.o
12 ima-$(CONFIG_IMA_APPRAISE_MODSIG) += ima_modsig.o
13 ima-$(CONFIG_HAVE_IMA_KEXEC) += ima_kexec.o
14 ima-$(CONFIG_IMA_BLACKLIST_KEYRING) += ima_mok.o
15 ima-$(CONFIG_IMA_MEASURE_ASYMMETRIC_KEYS) += ima_asymmetric_keys.o
16 ima-$(CONFIG_IMA_QUEUE_EARLY_BOOT_KEYS) += ima_queue_keys.o
19 ima-$(CONFIG_IMA_SECURE_AND_OR_TRUSTED_BOOT) += ima_efi.o
|
| D | Kconfig | 69 The original 'ima' measurement list template contains a
71 limited to 255 characters. The 'ima-ng' measurement list
77 bool "ima-ng (default)"
79 bool "ima-sig"
84 default "ima-ng" if IMA_NG_TEMPLATE
85 default "ima-sig" if IMA_SIG_TEMPLATE
155 <http://linux-ima.sourceforge.net>
276 bool "Load X509 certificate onto the '.ima' trusted keyring"
281 loaded on the .ima trusted keyring. These public keys are
284 loading from the kernel onto the '.ima' trusted keyring.
|
| D | ima_main.c | 1216 DEFINE_LSM(ima) = {
|
| /linux-6.12.1/Documentation/ABI/testing/ |
| D | ima_policy | 1 What: /sys/kernel/security/*/ima/policy
10 Policies are loaded into the securityfs file ima/policy
13 the file ima/policy is closed.
57 stored in security.ima xattr. Requires
67 (eg, .builtin_trusted_keys|.ima). Only valid
70 (eg, ima-ng). Only valid when action is "measure".
77 files where the security.ima xattr was hashed with one
155 keys added to .builtin_trusted_keys or .ima keyring:
157 measure func=KEY_CHECK keyrings=.builtin_trusted_keys|.ima
161 security.ima xattr of a file:
[all …]
|
| D | evm | 94 core/ima-setup) have support for loading keys at boot
|
| /linux-6.12.1/Documentation/security/ |
| D | IMA-templates.rst | 9 The original ``ima`` template is fixed length, containing the filedata hash
51 The functions ``ima[_ascii]_measurements_show()`` retrieve, for each entry,
70 - 'd-ngv2': same as d-ng, but prefixed with the "ima" or "verity" digest type
75 or the EVM portable signature, if 'security.ima' contains a file hash.
90 - "ima": its format is ``d|n``;
91 - "ima-ng" (default): its format is ``d-ng|n-ng``;
92 - "ima-ngv2": its format is ``d-ngv2|n-ng``;
93 - "ima-sig": its format is ``d-ng|n-ng|sig``;
94 - "ima-sigv2": its format is ``d-ngv2|n-ng|sig``;
95 - "ima-buf": its format is ``d-ng|n-ng|buf``;
[all …]
|
| /linux-6.12.1/arch/x86/kernel/ |
| D | kexec-bzimage64.c | 217 struct ima_setup_data *ima; in setup_ima_state() local
223 sd->len = sizeof(*ima); in setup_ima_state()
225 ima = (void *)sd + sizeof(struct setup_data); in setup_ima_state()
226 ima->addr = image->ima_buffer_addr; in setup_ima_state()
227 ima->size = image->ima_buffer_size; in setup_ima_state()
|
| /linux-6.12.1/Documentation/admin-guide/device-mapper/ |
| D | dm-ima.rst | 2 dm-ima
42 /etc/ima/ima-policy
43 measure func=CRITICAL_DATA label=device-mapper template=ima-buf
49 /sys/kernel/security/integrity/ima/ascii_runtime_measurements
50 /sys/kernel/security/integrity/ima/binary_runtime_measurements
62 TEMPLATE_NAME := Template name that registered the integrity value (e.g. ima-buf).
159 …10 a8c5ff755561c7a28146389d1514c318592af49a ima-buf sha256:4d73481ecce5eadba8ab084640d85bb9ca899af…
200 …10 56c00cc062ffc24ccd9ac2d67d194af3282b934e ima-buf sha256:e7d12c03b958b4e0e53e7363a06376be88d98a1…
238 …10 790e830a3a7a31590824ac0642b3b31c2d0e8b38 ima-buf sha256:ab9f3c959367a8f5d4403d6ce9c3627dadfa8f9…
272 …10 77d347408f557f68f0041acb0072946bb2367fe5 ima-buf sha256:42f9ca22163fdfa548e6229dece2959bc5ce295…
[all …]
|
| D | index.rst | 16 dm-ima
|
| /linux-6.12.1/drivers/misc/sgi-gru/ |
| D | gru_instructions.h | 90 unsigned char ima: 3; /* CB_DelRep, unmapped mode */ member
305 unsigned long idef2, unsigned char ima) in __opdword() argument
312 (ima << GRU_CB_IMA_SHFT) | in __opdword()
616 unsigned int ima :3; member
|
| /linux-6.12.1/security/integrity/ |
| D | Kconfig | 27 of the different use cases - evm, ima, and modules.
51 This option requires that all keys added to the .ima and
133 source "security/integrity/ima/Kconfig"
|
| D | Makefile | 22 obj-$(CONFIG_IMA) += ima/
|
| /linux-6.12.1/security/selinux/ |
| D | Makefile | 25 selinux-$(CONFIG_IMA) += ima.o
|
| /linux-6.12.1/tools/testing/selftests/kexec/ |
| D | kexec_common_lib.sh | 204 local ima_policy=$SECURITYFS/ima/policy
|
| D | test_kexec_file_load.sh | 85 line=$(getfattr -n security.ima -e hex --absolute-names $KERNEL_IMAGE 2>&1)
|
| /linux-6.12.1/security/integrity/evm/ |
| D | Kconfig | 39 security.SMACK64, security.capability, and security.ima) included
|
| /linux-6.12.1/tools/testing/selftests/bpf/prog_tests/ |
| D | test_ima.c | 74 struct ima *skel = NULL; in test_test_ima()
|
| /linux-6.12.1/Documentation/arch/powerpc/ |
| D | imc.rst | 49 https://github.com/open-power/ima-catalog
|
| /linux-6.12.1/Documentation/admin-guide/LSM/ |
| D | ipe.rst | 555 to the policy file to ``$securityfs/ima/policy``
|
| /linux-6.12.1/Documentation/admin-guide/ |
| D | kernel-parameters.txt | 2127 Formats: { "ima" | "ima-ng" | "ima-ngv2" | "ima-sig" |
2128 "ima-sigv2" }
2129 Default: "ima-ng"
2135 ima.ahash_minsize= [IMA] Minimum file size for asynchronous hash usage
2144 ima.ahash_bufsize= [IMA] Asynchronous hash buffer size
|
| /linux-6.12.1/Documentation/filesystems/ |
| D | fsverity.rst | 86 signature in their "security.ima" extended attribute, as controlled
|
| /linux-6.12.1/ |
| D | MAINTAINERS | 11256 F: security/integrity/ima/
|