On Fri, 2019-05-03 at 10:17 +0200, Roberto Sassu wrote: > On 5/3/2019 8:51 AM, Roberto Sassu wrote: > > On 5/3/2019 1:02 AM, Mimi Zohar wrote: > >> Perhaps instead of making the template format dynamic based on fields, > >> as I suggested above, define a per policy rule template format option. > > > > This should not be too complicated. The template to use will be returned > > by ima_get_action() to process_measurement(). > > Some time ago I made some patches: > > https://sourceforge.net/p/linux-ima/mailman/message/31655784/ Thank you for the reference! In addition to Matthew's VFS hash use case, Thiago's appended signature support would benefit from a per policy rule template. Do you want, and have time, to add this support? Mimi
