IMA: allow reading back the current IMA policy
authorPetko Manolov <petkan@mip-labs.com>
Wed, 2 Dec 2015 15:47:56 +0000 (17:47 +0200)
committerMimi Zohar <zohar@linux.vnet.ibm.com>
Tue, 15 Dec 2015 15:01:43 +0000 (10:01 -0500)
commit80eae209d63ac6361c7b445f7e7e41f39c044772
treedb99b638e2688529f6f61756ffae56b64a95311b
parent41c89b64d7184a780f12f2cccdabe65cb2408893
IMA: allow reading back the current IMA policy

It is often useful to be able to read back the IMA policy.  It is
even more important after introducing CONFIG_IMA_WRITE_POLICY.
This option allows the root user to see the current policy rules.

Signed-off-by: Zbigniew Jasinski <z.jasinski@samsung.com>
Signed-off-by: Petko Manolov <petkan@mip-labs.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
security/integrity/ima/Kconfig
security/integrity/ima/ima.h
security/integrity/ima/ima_fs.c
security/integrity/ima/ima_policy.c