projects / GitHub / mt8127 / android_kernel_alcatel_ttab.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f850a7c) | patch
IMA: do not measure everything opened by root by default
authorEric Paris <eparis@redhat.com>
Tue, 12 May 2009 19:14:23 +0000 (15:14 -0400)
committerJames Morris <jmorris@namei.org>
Thu, 14 May 2009 23:55:44 +0000 (09:55 +1000)
commitc3d20103d08e5c0b6738fbd0acf3ca004e5356c5
tree4231ff475f11231b3cbca949a7bcad37a9a8cc17tree | snapshot (tar.gz zip)
parentf850a7c040d9faafb41bceb0a05d6bb7432c8c7acommit | diff
IMA: do not measure everything opened by root by default

The IMA default policy measures every single file opened by root.  This is
terrible for most users.  Consider a system (like mine) with virtual machine
images.  When those images are touched (which happens at boot for me) those
images are measured.  This is just way too much for the default case.

Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Mimi Zohar <zohar@us.ibm.com>
Signed-off-by: James Morris <jmorris@namei.org>
security/integrity/ima/ima_policy.c diff | blob | blame | history
kernel source for telekom puls (alcatel/mediatek)