IMA: reject policies with unknown entries
authorEric Paris <eparis@redhat.com>
Tue, 20 Apr 2010 14:21:13 +0000 (10:21 -0400)
committerJames Morris <jmorris@namei.org>
Tue, 20 Apr 2010 23:58:15 +0000 (09:58 +1000)
commite9d393bf8660fbbbe00617015224342bac3ea6fc
treeb127189c4b598774ef467b599bd8bfe08b3c71d4
parentb9035b1fd7933c11e68dbbf49b530cc43bf1da65
IMA: reject policies with unknown entries

Currently the ima policy load code will print what it doesn't understand
but really I think it should reject any policy it doesn't understand.  This
patch makes it so!

Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Mimi Zohar <zohar@us.ibm.com>
Signed-off-by: James Morris <jmorris@namei.org>
security/integrity/ima/ima_policy.c