diff options
| author |   Mimi Zohar <zohar@linux.vnet.ibm.com> | 2014-11-05 07:53:55 -0500 |
|---|---|---|
| committer | Mimi Zohar <zohar@linux.vnet.ibm.com> | 2015-06-16 08:18:44 -0400 |
| commit | 4351c294b8c1028077280f761e158d167b592974 (patch) | |
| tree | cc7dface0ae4de97545e26df97a42171034e9443 /lib/cpu-notifier-error-inject.c | |
| parent | ima: add support for new "euid" policy condition (diff) | |
| download | wireguard-linux-4351c294b8c1028077280f761e158d167b592974.tar.xz wireguard-linux-4351c294b8c1028077280f761e158d167b592974.zip | |
ima: extend "mask" policy matching support
The current "mask" policy option matches files opened as MAY_READ,
MAY_WRITE, MAY_APPEND or MAY_EXEC. This patch extends the "mask"
option to match files opened containing one of these modes. For
example, "mask=^MAY_READ" would match files opened read-write.
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Signed-off-by: Dr. Greg Wettstein <gw@idfusion.org>
Cc: stable@vger.kernel.org
Diffstat (limited to 'lib/cpu-notifier-error-inject.c')
0 files changed, 0 insertions, 0 deletions