| commit | 4351c294b8c1028077280f761e158d167b592974 | [log] [tgz] |
|---|---|---|
| author | Mimi Zohar <zohar@linux.vnet.ibm.com> | Wed Nov 05 07:53:55 2014 -0500 |
| committer | Mimi Zohar <zohar@linux.vnet.ibm.com> | Tue Jun 16 08:18:44 2015 -0400 |
| tree | cc7dface0ae4de97545e26df97a42171034e9443 | |
| parent | 139069eff7388407f19794384c42a534d618ccd7 [diff] |
ima: extend "mask" policy matching support The current "mask" policy option matches files opened as MAY_READ, MAY_WRITE, MAY_APPEND or MAY_EXEC. This patch extends the "mask" option to match files opened containing one of these modes. For example, "mask=^MAY_READ" would match files opened read-write. Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com> Signed-off-by: Dr. Greg Wettstein <gw@idfusion.org> Cc: stable@vger.kernel.org