diff options
| author |   Roberto Sassu <roberto.sassu@huawei.com> | 2021-05-28 09:38:07 +0200 |
|---|---|---|
| committer |   Mimi Zohar <zohar@linux.ibm.com> | 2021-06-01 15:17:30 -0400 |
| commit | 7dcfeacc5a9d0c130160b86de23279793a8732c8 (patch) | |
| tree | 13a5d74a73aa57480cb9cc947abdc2535be72681 /security/integrity/ima/ima_template_lib.h | |
| parent | ima: Add ima_show_template_uint() template library function (diff) | |
| download | linux-dev-7dcfeacc5a9d0c130160b86de23279793a8732c8.tar.xz linux-dev-7dcfeacc5a9d0c130160b86de23279793a8732c8.zip | |
ima: Define new template fields iuid and igid
This patch defines the new template fields iuid and igid, which include
respectively the inode UID and GID. For idmapped mounts, still the original
UID and GID are provided.
These fields can be used to verify the EVM portable signature, if it was
included with the template fields sig or evmsig.
Signed-off-by: Roberto Sassu <roberto.sassu@huawei.com>
Acked-by: Christian Brauner <christian.brauner@ubuntu.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
Diffstat (limited to '')
| -rw-r--r-- | security/integrity/ima/ima_template_lib.h | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/security/integrity/ima/ima_template_lib.h b/security/integrity/ima/ima_template_lib.h index 54b67c80b315..b0aaf109f386 100644 --- a/security/integrity/ima/ima_template_lib.h +++ b/security/integrity/ima/ima_template_lib.h @@ -50,4 +50,8 @@ int ima_eventmodsig_init(struct ima_event_data *event_data, struct ima_field_data *field_data); int ima_eventevmsig_init(struct ima_event_data *event_data, struct ima_field_data *field_data); +int ima_eventinodeuid_init(struct ima_event_data *event_data, + struct ima_field_data *field_data); +int ima_eventinodegid_init(struct ima_event_data *event_data, + struct ima_field_data *field_data); #endif /* __LINUX_IMA_TEMPLATE_LIB_H */ |