OSDN Git Service

ima: Define new template fields iuid and igid
authorRoberto Sassu <roberto.sassu@huawei.com>
Fri, 28 May 2021 07:38:07 +0000 (09:38 +0200)
committerMimi Zohar <zohar@linux.ibm.com>
Tue, 1 Jun 2021 19:17:30 +0000 (15:17 -0400)
commit7dcfeacc5a9d0c130160b86de23279793a8732c8
tree13a5d74a73aa57480cb9cc947abdc2535be72681
parentcde1391a0b4014b0e8fc09cd316272f478b54c0f
ima: Define new template fields iuid and igid

This patch defines the new template fields iuid and igid, which include
respectively the inode UID and GID. For idmapped mounts, still the original
UID and GID are provided.

These fields can be used to verify the EVM portable signature, if it was
included with the template fields sig or evmsig.

Signed-off-by: Roberto Sassu <roberto.sassu@huawei.com>
Acked-by: Christian Brauner <christian.brauner@ubuntu.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
Documentation/security/IMA-templates.rst
security/integrity/ima/ima_template.c
security/integrity/ima/ima_template_lib.c
security/integrity/ima/ima_template_lib.h